last executing test programs: 10.087159911s ago: executing program 2 (id=3626): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) write(r0, 0x0, 0x0) unshare(0x400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x2c, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xd, &(0x7f0000000000)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7487}}], &(0x7f0000000080)='GPL\x00', 0x5e6, 0x58, &(0x7f0000000180)=""/88, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x5, 0x10, 0x7}, {0x0, 0x5, 0xd, 0x5}, {0x3, 0x4, 0xb, 0x9}, {0x1, 0x3, 0x0, 0x5}, {0x4, 0x5, 0x8}, {0x4, 0x5, 0xb, 0x4}, {0x1, 0x5, 0x6, 0x5}], 0x10, 0x2}, 0x94) ioctl$NILFS_IOCTL_GET_SUSTAT(r9, 0x80306e85, &(0x7f00000003c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x1}, {0x4, 0x8, 0x7, 0xb, 0x40008, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x801, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x2, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0xfffffffe, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x3}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x81, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xe, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf6, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x2, 0x38, 0xffffffff, 0x6b}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0xbb}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b}], [{0x5}, {0x4, 0x1}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) 9.586836012s ago: executing program 2 (id=3631): close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x9, 0x30, 0xba6a, 0x86}, &(0x7f0000000100)=0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001000)=@delchain={0x3ec0, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x5, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6100000000103afefe80000000000000f8ffffffffffffa90000000000000000000000000000000186"], 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x3d, 0x0, 0x80, 0xffeffffc}, {0x6, 0x0, 0x2, 0xc}]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r8, 0x1, 0x70bd29, 0x6, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 9.162961789s ago: executing program 4 (id=3637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="20000000040a010800000000000080001e0000070900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x10044000}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000071000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785a1292fcb8c1d3079a00db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8430a19f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33fe226c944bc76be40d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e02200b95941d34ac81fd48f9b7314ffa730017f3d37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080c4adf75a0a108585e9b2000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089b"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = socket(0x6, 0x4, 0x2) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x1, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r9}, 0xc) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r10 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltclass={0x2c, 0x29, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xf, 0xffe0}, {0xffe0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0xffe0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0x2}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1dc, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x0, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffff7fe, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x99}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) unshare(0x400) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r12, 0x20, 0x0}, 0x10) 8.885651073s ago: executing program 4 (id=3642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000080)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x20048041) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x5, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xe, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010c300)={0x0, [], 0x2, "f35cdffa4c22ce"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) 8.876484026s ago: executing program 1 (id=3643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x4}, @TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xc}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0xc8, 0x65, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff1, 0xffe0}, {0xffe0, 0x8}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0xd8}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x80, 0x8}}, @TCA_U32_LINK={0x8, 0x3, 0x10}, @TCA_U32_HASH={0x8}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x240008d0}, 0x801) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x2, 0xff, 0x3}, 0x1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"/28, @ANYRES32=r10, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r9], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) write$nci(r4, &(0x7f0000001300)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x2, "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"}, 0x1003) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019680)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x40}}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x4, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 8.624170061s ago: executing program 3 (id=3646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff00"], 0x50}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x18, 0x24}, 0x20) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f0, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f328994}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1dc6972c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x394}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xced7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xad}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xade}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)={0x54, r1, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@pci={{}, {0xea}}, {0x0, 0x8e, 0x1}, {0x0, 0x8f, 0x6}, {0x0, 0x90, 0x10}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x8e, 0x1}, {0x0, 0x8f, 0xfffffffffffffe01}, {0x0, 0x90, 0x25915}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x8e, 0x2}, {0x0, 0x8f, 0x101}, {0x0, 0x90, 0x4}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x8e, 0x1}, {0x0, 0x8f, 0x37}, {0x0, 0x90, 0x6}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x8e, 0x2}, {0x0, 0x8f, 0x2}, {0x0, 0x90, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) 8.479912182s ago: executing program 1 (id=3647): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r1) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3, 0xa}, {0xffe0, 0xd}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x4000000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r6, 0x431, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004e910}, 0x40) 8.347128951s ago: executing program 3 (id=3648): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x37, 0x0, 0x2, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000440)=0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@ifindex=r7, r4, 0x33, 0x2010, r5, @value, @void, @void, @void, r6}, 0x20) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0xff03, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r4, @ANYRES64, @ANYRESOCT=r9], 0x10}}, 0x0) close(r1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73229c52bbea23870200000079d3c7a519afc7d2dff1cc9fe1b9bd41c5d0b4f2d04979d68cc3471637e69740313dd0f31448193bd26131968d5f790e1429b24ba01f24670353dc73659f4a40f9972fa0", 0x7d}], 0x1}, 0x20048020) 8.263412858s ago: executing program 0 (id=3649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 8.230783367s ago: executing program 2 (id=3650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x71, 0xe1, &(0x7f0000000100)="ac16846b30f349502d0675fd0b468fa5f8f3709f6ea2cd660b49b2a14a9297a8bfd732c9885eda07bfa80521e6bd7e33e6cd67a7785ffb513992736d9968895cd805eef9d52316fa1b1be050efe2133254f337ea6cdf4b5fca94472b3ac7f28a911b28fbdd2eb98cf705061b7f5ef17de7", &(0x7f0000000600)=""/225, 0x5, 0x0, 0x8a, 0xbf, &(0x7f0000000700)="20cbf7c3e3ec8104d86c50bc15db97c7ec7e2594ed1c33ae1221c500cac3789a87f963fd682a978029dc2fecd18df9629e3b622d996e21a4e517398a754a53d79e3e5f432fd35f2075e118ed1e335cb6673b74a85425ccb895dd118e7caecd935a44a4effe7aac324e502c5e0a7ee34db60b76796c9ba1d37714111651cb4f05ff11a7a12f410aa6890d", &(0x7f00000007c0)="f4784c564bc4b40ec2170b3057ea1041bae8bf978ca0589ac3f71b5f1cf773bd353cfc1e094d3ed63b037bf21b05b188954b56e7c44e3baf785d749968829801a9229c8777218313b957a8d43c31bd8af9a7b9fe07eca36beeb5da0f91110d07cee29b1cde424e38a255b8a60a2a64aa3cdd59aa993ec96790c9cedf2337d3cb3a619555707dce419c00a81d48f2f0be024e3ed78c45ae558c2aa10b997d719c46323bbbda9445da72d43d462a80f07774ecde67a2ceeeea2747d2516b4026", 0x5, 0x0, 0x3}, 0x50) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async, rerun: 32) r3 = socket$inet6(0xa, 0x3, 0x1) (rerun: 32) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fd}, 0xfffffffd, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, 0x3}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)=@newqdisc={0x124, 0x24, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0xc, 0x2}, {0x4, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x7f, 0x3}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x0, 0x1, 0x2, 0x0, 0xffffffff, 0x6}}, {0x10, 0x2, [0x7, 0x8, 0x3, 0x6, 0x9, 0x7]}}, {{0x1c, 0x1, {0x95, 0xc7, 0xdc, 0x2, 0x2, 0x9, 0x1, 0x2}}, {0x8, 0x2, [0x7, 0x6]}}, {{0x1c, 0x1, {0x4, 0x1, 0x7fff, 0x0, 0x1, 0x1, 0xc79, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x8, 0x95, 0x9, 0x7, 0x0, 0x36063bc, 0x2, 0x2}}, {0x8, 0x2, [0xf4f, 0x7]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x9, 0x9, 0x2, 0x9, 0x0, 0x5}}, {0xe, 0x2, [0x9, 0x40, 0x5, 0x100, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0xe, 0xa}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4088}, 0x20040000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 8.159965354s ago: executing program 1 (id=3651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000280)={'tunl0\x00', @random="3cfed54aae6d"}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x202, 0x10000000, 0x1000, 0x8}, 0x1}}]}, {0x3c}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) 8.028598333s ago: executing program 2 (id=3652): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) write$tun(r2, &(0x7f0000000180)=ANY=[], 0x38) (async) write$tun(r2, &(0x7f0000000180)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @private=0xa010101}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @private=0xa010101}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x7fd, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5}, 0xe) shutdown(r3, 0x1) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) (async) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000700)=""/142, 0x8e}, {&(0x7f0000000880)=""/184, 0xb8}], 0x4, &(0x7f0000000a00)=""/135, 0x87}, 0x80000000}], 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) (async) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e0000cd17cf73b86400"/23], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e0000cd17cf73b86400"/23], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2e, 0x0, &(0x7f0000000200)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000900000007000000000000110100000009000000000000000000000d02000000000000000000000d00000000000000000000000203000000000000300000006100f92e9e03e583ec6ffcb4b329bd743d89ea6b943ee1a4b704460026769d9964edd22ae3030a6efc760177cc66c15bccd8a16a9a03"], 0x0, 0x55}, 0x28) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r6, 0xc040583f, &(0x7f0000000140)={{@_ha_fsid={[0xffff, 0x2]}, {0x7, 0x6e, 0x800, 0x2}}, {{[0xffffffff, 0x6, 0x10001, 0x4]}, 0x0, 0x1, 0xe61, 0x0, &(0x7f0000000100)=[{{@_ha_fsid={[0x5, 0x76]}, {0xffff, 0x53d, 0x0, 0x4}}, 0x3, 0x0, '^$\x00'}]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000309500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffffdb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 7.934609373s ago: executing program 0 (id=3653): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e22, 0xc14, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffff7}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x23, 0x5, 0x1, &(0x7f00000000c0)) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000001300)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x43, 0xa0, 0xf8, 0x98, 0x208, 0x178, 0x178, 0x208, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x12a, 0xd0, 0xf8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0xff}], 0x2, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa8, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x4, 0x4, 0x9, 'syz1\x00', 'syz1\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040810}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) 7.820991477s ago: executing program 4 (id=3654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000100000025bd70000400000000000000c0a33ab8f1181735a454c4a6b0f61bd890f12a7a83b5e33afe0b54f87657c2b62ebb56273e5b5763d33e68452578272cd111ef4169fb4aefde8107953b21cf6db7320fc76401b5336cf5c99185aa66dbb51ccd85ebc7b8c489cf488bedc35d5597bd97", @ANYRES32=0x0, @ANYBLOB="0005000000800000300012800b00010062726964676500002000028005002d00010000000c001e0002000000000000000500290001000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 7.757371342s ago: executing program 4 (id=3655): r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x11, 0x800000003, 0x0) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb5}}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x1, 0xc, 0x4b0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000680)={r0, &(0x7f0000000580)='\\]\x00', 0x420100, &(0x7f00000005c0)={@align=0x6, {0xff, 0xe, 0x5, 0x8}}, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe6de, '\x00', r3, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x81, &(0x7f00000004c0)=""/129, 0x40f00, 0x20, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000006c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x15852, 0xffffffffffffffff, 0x4, &(0x7f0000000880)=[r7], &(0x7f00000008c0)=[{0x1, 0x2, 0x7, 0x2}, {0x0, 0x2, 0x9, 0x8}, {0x0, 0x3, 0x5, 0xa}, {0x5, 0x1, 0x1, 0x9}], 0x10, 0xf114}, 0x94) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 7.622995153s ago: executing program 2 (id=3656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7fff, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2ea0929e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0xa}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x38, 0xffffffff, 0x9, 0x3000, r0, 0x80000000, '\x00', 0x0, r1, 0x100003, 0x4, 0x4, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x5, 0x1000, 0x58e, 0x3}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3, 0x1000}}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x1a, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x2d, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x2, 0x0, 0x0, 0x1, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e1"}}}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x1b, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.622508474s ago: executing program 0 (id=3657): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00000001c0)=0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 7.491791525s ago: executing program 0 (id=3658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000c0003400004000008000740000004001800068014000400200100"/177], 0xb4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff16}, {0x6, 0x11, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x44}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x14, 0x21, 0xa, 0x401}, 0x14}}, 0x0) 7.391882755s ago: executing program 0 (id=3659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25070000000c0017000201aaaaaaaaaaaa0a0004007770616e330000000800010000"], 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000540)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0xd, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8006}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0xf}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f000000a240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f000000a280), r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000840)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r9, &(0x7f0000002300)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000580)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0xf}, 0x4}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000640)="aef7cea4b56903ff5aaac8d2e71420aa0f152a7400fd32f3a8d4111b21e655d49781c399091c3dda48e1088f2162e21db0fd20164920a47f7c6fef5a6c881a9b3bfc2812c772a9476adca2d4044fefedb31e74b3a9d75e196cad771bdbc369459639bd286d0ab85c68c9887698fc662e2f75cabb28d3", 0x76}, {&(0x7f0000000800)="403109dff991c5d6d7937f383fefe4da77194d58eccffc09ac07473c6ad395724d5d41247f54ce8c91927f", 0x2b}, {&(0x7f0000000880)="98c49bd67699f17e87db1b4effa30cfa5abe393bb66983039e52875cf5c13da3dd4fdd87f694399d2eb96dd0d8b2f55298deeda4218209bb8551a1db094e4b2f7e06151e5bacd071383002b3c073e218f8ff6b0328af4c4a52886d265c00b5b80afca23b7923347ee93a3ba10ba26f215d8255acf3afc586ec0c1a38da2b540454eb59ae00d9", 0x86}, {&(0x7f0000000940)="eb0d502da4fa3aede3cf64aed9ae38bddd0a2e5bd222fc6830e8c88555609dccd87e995c8c5b57d7c0a5c8832eb10ccaebe0b584cbeaf4f41b6877a9eb561c423b3696f61336f3556164391048f2f66999e7935eaa09e03d479fc5055b61b0", 0x5f}, {&(0x7f00000009c0)="9371fdc46d189bd0e254aa0da1477b2f2e7831af24dd3c36f08c6299efcbb6ad7559b5e754e4bde0a820f476626e37c632a5832e31aa15f863a9589c29f9144b944cc932f8e0163ddc217a533aa8cdea2bacf906331a446f8dae13d2af7c9b5089919d3c30a8ab35e04c767ad7aff9708ca88d8f21df42e5fa4a3f73f1e7996fd8036f8b468065f345f147c10cd87321cce443daf198be68fff7b84082a73e3a5c859a1d2201d099d2411e4f18a3f93eb59913ead65d7615506d6a4784b07a67be5e9da4129f8bf866c61d28d74bc3a7234fc6905ab1828978b0974e5c1cdf1654b582fdde9dc92c83988f412bb3c3ffd0a01351113c3669", 0xf8}], 0x10b8, &(0x7f0000000c00)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1d, 0xa, 0x1, 0x0, 0x0, [@remote, @mcast1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000000}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x3b, 0xc, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x7, 0x9, [0x2cee, 0x7f, 0x7, 0x9, 0x9, 0x1, 0x423d, 0x8d1]}}, @pad1]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0xff, 0x9, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private2}, @pad1, @enc_lim, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x5, [0xe3, 0xa31, 0x9]}}, @jumbo={0xc2, 0x4, 0x7}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x32, 0xc, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0xf, [0x8, 0x5, 0xfffffffffffffffc, 0xfffffffffffff2ed, 0x7fff, 0xa0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2b, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x8b4}]}}}, @hoplimit_2292={{0x14}}, @dstopts={{0x30, 0x29, 0x37, {0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xd4}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x280}}, {{&(0x7f0000000e80)={0xa, 0x4e21, 0x200, @loopback, 0xfffffffb}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000ec0)="13119c54b0f16124d2abe0e80172475df73a6cf9e93f81b832568cb89d0c25bbc4c47c72aa9c347df6a4334a59d6150386b9b94b077384325349f6a1b080", 0x3e}, {&(0x7f0000000f00)="263468f7c47a", 0x6}, {&(0x7f0000000f40)="8b9d2d882163c9b94cad464d9a5576ad405e71abb50a5c0982158e5c625470f3b275111a43b1ac3bd9776975057c8e38b82810ec0055f56e5822f4cc43fd8ad1f7aca0e14e107d9bed7f4d20d11a8d3c7d3a2a94fa0e1543cac943ba2bf87754df7bedb5805ef6e3d9d3a0408a6203bffc6f9cd1c7ef472027cd3c04f7bd565a9cf3dfcc358c2f237ddf2aa337cac066ebf49ddcb6d92b2cbff9953147", 0x9d}, {&(0x7f0000001000)="65883e441c45dac0cbdf61f60dcd5bd0cfe8e20c4caf5c6f1cae7fa9e291e1d805bf22b41759f0c53f04f5ecff8ef444c909707861fb9c0ac928630b14a17d24a3572892d084ee0a2ae290e646b3ef3502ed610000000000", 0x58}], 0x4, &(0x7f00000023c0)=[@dstopts={{0x38, 0x29, 0x37, {0x88, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @hopopts={{0x188, 0x29, 0x36, {0x32, 0x2d, '\x00', [@ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0xa}, @enc_lim={0x4, 0x1, 0xa0}, @calipso={0x7, 0x50, {0x1, 0x12, 0x6, 0x1, [0x54, 0xffffffff, 0x5, 0x9, 0x7f, 0x1, 0x0, 0xffffffff, 0x0]}}, @ra={0x5, 0x2, 0xd}, @generic={0x1, 0xf7, "a016eef32fd11de3765d5d025bef0adc7efe6ad8c63ddbc9972064e1e54601d7cb791fa09627e34c76b1316bc10d47535b33a6fbf51a4576031576ab73549a7537ee694e85b01ab8d731233a1332051ce177c2c637ea6d46eaed4560d333aa8043b842fd9e30ca60d3bdd3abbe9b27bcbe5b6541cd9138641f1b2fee71e52461c9ba94af863390b1cb3f4b1c65de44ef4069fa906f8804115d374cd682157a9e950c50caa16ca86118c4341507b61cc2f246a056a2cb4b2888fcaa7e0e6d125c203b33c27010518f492bf87e29b71e59303bccbe19206cddd69a8ff0df3fc8266fc780b3964ac542b51cb747269ee257c779660339f4c4"}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hopopts={{0x1028, 0x29, 0x36, {0x6, 0x201, '\x00', [@generic={0xa, 0x1000, "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"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x1258}}], 0x3, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x1619, 0x1000}, 0x50) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r10 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f000000a2c0)=ANY=[@ANYBLOB="000000160004060001000f00400045a30057006800004011907800000000ac1414264e264e200043907804000000001000000700000000000000dea554c5ad5cbbb79f68d1d09f92c437fd13daffa52e8add1f49622ed4af0aaf7308ced1f3a7b340de493f248fcd781d19ea9a93"], 0x65) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x318, 0x258, 0x258, 0x318, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73, 0xc0}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x2, 0x0, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x1, "309e9931c11200107fdd56aa1439c5f53ddb2700e9afeb5815518d63f337"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffff8793, 'system_u:object_r:apt_lock_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x448) 7.258437994s ago: executing program 3 (id=3660): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x1, 0xd}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000780)={@initdev, 0x0}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x130, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x45040}, 0x4040000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r9, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/4092, 0xffc}, {&(0x7f00000010c0)=""/242, 0xf2}], 0x3, 0x5, 0x45) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8901, &(0x7f0000000100)) unshare(0x8000400) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0) sendfile(r10, r10, 0x0, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000024c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0xe4, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_USERDATA={0xc7, 0x8, "fcb02b41a524ef7f6462f9430fb2ed4cfa61dfaa091344cf4bf55997ef26eb7f7e240bd3a5984983df922374010acbdc2ae42101e7f819a568d3c5095bfd60eadfb34f6d68e0622e106392ef368cb70cd88c2c235319f256a02ce6232223f17610111b789163c15eb69a1f80a5e2fb598cd9085383bc1e16a0ef4ebad29def7d233d65c5e34e92708662d312d3203dbfca0889c7d4a751887b604393b8bc7dcb95efeb1f41545fe1633cec0742ca61685b9fcae7153a0727b364183384f2a56df48f84"}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x4001) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) 7.227708683s ago: executing program 4 (id=3661): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r3], 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000006300)=ANY=[@ANYBLOB="240000002500190326bd70000080000005000040100038800c437f189c0e4ab3", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x404c0c4) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f00000008c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 3.606098178s ago: executing program 1 (id=3662): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"972f3bf1af01106a2a1667f800", 0x0, 0x0, {0x9, 0x9d5f}, {0xb, 0x41}, 0xd0, [0xde99, 0x9, 0xc, 0x1d, 0x43, 0x7, 0x28, 0x1, 0x400, 0x7ffffffffefffffb, 0x9, 0x80e, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffffffffe6b, 0x0, 0x3, 0x11fe726f7e78fcf0}, 0x28) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r10}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 3.526463135s ago: executing program 3 (id=3663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, &(0x7f0000000000)=""/159, 0x9f, 0x40000020, 0x0, 0x0) (async) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000140), 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x13, r1, 0x66f8c000) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) (async) socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0x4, 0xfcc, 0x7}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x4, 0x9, 0x24, @mcast2, @loopback, 0x40, 0x8000, 0x7807, 0x1}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @loopback}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000001a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f0000000400)={0x161c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "cc540c951cc95cc357a133113e8ecef2b92ef93701409a9e0fb2e1309931f5327cf310607a213b5750d6e9c6b110fc744c11863b6027814491e2287154f81d34bf10939c80376ae09bd144867879ba64d3e0fd3ff5ab3051a253f64355b5e7a0a8422036e690bfefbbfe92ed90b93be95a28e3337e2bf46608c21566ec386ea25d37ecffecd61351e01034b543e376f658255a0655c4f8246bf5be68852acf7799a1df0e96eb4b990769fb607ab1a09bd85125ce9f630f9a627016ecc5a48c56069121"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ah\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_MODES={0x1420, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "398e70ebef46b01304cb63eaef9821d264f2f879be579209e830b8a46dde689a078ff2e5ecafd95b25e5ceef881b2ec48443186017da4406802bb613133fa33e16e3606615f8538dd6da7047f360f0f2b4a821a50f37e74307cca6e1df0501fbdbd2c5f138c3339174cce5e2bb7bbdd8c599bdcea678a042f242e325f1c1c4a4052f2e9c1a4123bbb4e912dfbd956988247fc5866aab515f0807d09aa0927be2504e3d195d92f9723fe96d510e59953d0075f25b9b22ab6e207d4b5335066b05a89ef1407e40e109d888446bede49f8ef6dd1415b3"}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "802df511a68a03b578dbc4a7ed787a75956c3a20cdee55f62b4a8765c23a599c0ed530aaf351420fc3664f3af54291c8f90e405f24ec08c8d6912a28fc214f46678e14026329b501fdbfb01b51da6ad7b0516d47f595f627ad804b1a701c692cf1b24dd3d0b2cf2b89c0bde14416c2d67b523a3988b5bc858a9bf6bc20e2e36f8c104f244893e7b96034de29a1720003a8227aa410adbc035e222df5b084852d6003f7d30eaeae606edfa2eded53797e444c720656872ea083953776e3cc48869317277605"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}\x04~)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '{\\%,*::)[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xac17}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&^&\xfb!)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ah\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.$\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x257}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')*%-\b&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ah\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7b, 0x5, "0f2a5a31a472327d08734530bc3d93c1315a6b8aa8e2896f1b0205854ab3672fa239d3b715262ab9e1d68253d8ab45b52796635af25da5eb004c84a3c3413e91fc7bdffc399ff8482c0f32ac5c7327954b3d3b892028d318c27ba9dbf7dfce7faaa2c74d223c276ca583c24426024f026e277d51ce362a"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "cbbe7866d9bf7130ac3709a7302dc9a0c9184fad1266dd43f49e88db18f58f0aa07058797bf4595af74cb25a2c9cfb44d2a2ae55bc4b6741abe9a36d77c6bf7614919956a1447aef56968076e0aee8bb6d3cb1e4c206a1b022126eca4d444bf69790de3fb15c6c320f003fd2d94a508a66ae67316800ad59299e8ef1486b283187af53b133b033209af9883d4350fc116374d4163abdb229ceb128311e995f75e357115c7bc7a52d531dcbff728b110602878f668bf04494004968cc40febec6bd7752198fc538c2e503e67164c1de58ad5a8bd7186d099027eb4bc8dc9e7a"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_WOL_SOPASS={0x5f, 0x3, "17dd19e9c2eb7a613636fe39c789c45eba4441e3088280995f561e38ec031c87eaa6494831b383c6c568bf14f499539462a7e44157bd92445a83c9af0ec07465a077c8a981ffd2127d49ca04140169f994bd0e92daa8bb85f9e164"}, @ETHTOOL_A_WOL_MODES={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "f74a799833d57042ddeb2ddb10b42ec31c8b25169c475dab2788be2dfe4e00a119e7ed721a67"}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x161c}, 0x1, 0x0, 0x0, 0x20044800}, 0x40000) (async, rerun: 32) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), r2) (rerun: 32) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000001e40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001b40)={0x2bc, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x23c, 0x8, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x188, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2df2927fe30f84ea2737cc1b18f375f6567b2aa1c2272b8e89866bad362f728f"}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008880) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000001e80)={0x0, @qipcrtr={0x2a, 0x4, 0xfffffffe}, @ax25={0x3, @default, 0x7}, @xdp={0x2c, 0x8, r5, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x48f, 0x0, 0xffffffffffff0001, 0x6, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), 0xffffffffffffffff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001f40), 0x60103, 0x0) (async, rerun: 64) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001f80)={0x0, 0x0}, &(0x7f0000001fc0)=0xc) (rerun: 64) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002000)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x987d, 0x4e24, 0x1ff, 0x2, 0xa0, 0x80, 0x2b, r4, r8}, {0x3b6c, 0x1, 0x101, 0x9, 0x9, 0x180000, 0x4, 0xb}, {0x4, 0x98, 0x100000000, 0x40}, 0x8, 0x6e6bbf, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xe8}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x8}}, 0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000002100)={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @remote, 0x9, 0x4, 0xa419, 0x100, 0x4, 0x100, r4}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002280)={@map=r2, 0x15, 0x1, 0x3ff, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0], &(0x7f0000002240)=[0x0]}, 0x40) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002400)={&(0x7f0000002300)={0xc4, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa1, 0x6, "dc5d6a006fe654ec8c45694902d4507aa1d20453c50b2eac642c25e1ab1f9dceefed6e52d66d455a0ac65b8767c3c16212bbd9da6fc8333ec09f28fb09592a398b5fc8569757d46e41347b7b11ccad94cc9ab136637adbdd1704aea0730445f49afde0d0270d51b9fb4e48c2432aeef52d273d6363ebe7e3ae6142f566c2d2cad98e40bf4fefe857df6e1ff03879c13a16789d97e21e9dbdc20a323f95"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000002480)={0x5, 0xe2, 0x1c00}, 0x8) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000024c0)={0x0, 0x4, [@random="9e4a0a0be957", @local, @remote, @empty]}) r9 = accept4$vsock_stream(r2, &(0x7f0000002500), 0x10, 0xc00) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f0000002540), 0x10) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000002580), 0x4) 3.51304411s ago: executing program 4 (id=3664): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) socket(0x200000000000011, 0x2, 0xd) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) (async) listen(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) (async) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000240)={0x1, 0x1, 0x0, 0xd}) socket$kcm(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b72fb5c0400000004c20000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) 3.39394619s ago: executing program 3 (id=3665): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x4c}}, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.04020173s ago: executing program 1 (id=3666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001856a5a600dd8d0100004664975a0002000000000100050000e9ff06001500060000000800060001"], 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x43339d41532428b}, 0x0) 153.707107ms ago: executing program 0 (id=3667): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/243, 0xf3}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000280)=""/118, 0x76}], 0x4, &(0x7f0000000340)=""/210, 0xd2}, 0x7}], 0x1, 0x40010002, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x2, "2a16"}}) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x44, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0x3}, {0x10, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000600)=0xe8) r7 = socket$netlink(0x10, 0x3, 0x0) readv(r7, &(0x7f0000001400)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/249, 0xf9}, {0x0}], 0x3) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@rand_addr=0x64010102, 0x4e23, 0xe204, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x43, r10, r12}, {0x0, 0x38b2, 0x800, 0x45, 0x7, 0x0, 0x8, 0x100}, {0xd96, 0x3, 0xffff, 0x8}, 0x8, 0x6e6bb6, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1, 0x1, 0x0, 0xff, 0xcc23, 0x4}}, 0xe8) sendmsg$nl_generic(r0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001ac0)={0x1314, 0x2b, 0x100, 0x70bd2b, 0x25dfdbfd, {0xe}, [@nested={0x1014, 0xe6, 0x0, 0x1, [@generic="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", @nested={0x4, 0x15b}, @nested={0x4, 0xbb}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r6}]}, @generic="72da5289afec45b6f425aa4ca852c70aaca281c33fdc83ec1137ff77750ab43ac1af4ec696ce7f9129f481bbb2fbc8e53ec8be08bf7249420e9d0a22f716850a9329f434cdc0509f13358fb120733a6eba99ad7d48b53dfa478a2d9e9786acb5a1241543e019f46628f279c6464405542bd88ee299a6bb6d6ae4bbd002be75d1ebd63d2445fad664fda969c0bd677385c311cd7e0c8784c82a674401f13f93fa0e3a320fdf0ba7464469bbae4df88e72640dd063a0f01a09780c18f60b9700"/207, @generic="b34886f696c38f9141446bfc135b5bd54d5b692c2338ce12289ec199c8372e4b5f0feed9fde8c213db9fbd7656cbd02430b3067956ec66d42b84b5729dc3df3ce0b801937441dfb0d38c30e5d054ce819bf3a3", @nested={0x29, 0x16a, 0x0, 0x1, [@generic="e6cfea40328c0df7c74132f1594c367440a210f487d589db4825c05e7934ed3e780c922ea4"]}, @nested={0x192, 0xcc, 0x0, 0x1, [@typed={0xc, 0x9a, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x78, 0x0, 0x0, @uid=r12}, @typed={0x8, 0x6c, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x75}, @generic="41699a38942e56ebfef9db5172f04c86", @generic="8898550eafd24c1c7bedde2826206c943e52a6747463661cd2101849c5f9d610d205e998f0b06ae7a00ca4f5041cab155ab24ee384974e1d31490b1a32519601b332d71304e3acd6a4", @nested={0x4, 0x2e}, @generic="2f925b3b2f1acfb224f2fbb251ed0e0c8e1b5b925b1aa3b792246735452671e5ca875f5a39c1c3e5d1db07eda4198b90078337d898a025d370192b882659823b6ec40383edffdd2d86c2ddd599e104923a9160d4d5e5cffc37b708f2279525ba5d3d125b19a992df1df079a2e42cf7d10753af9c472f4b9adb5dc6de7be8cd5456f396564a5be2a19c391b5a8d16606e16081fd7f18f7834ec615aad20f38def6b86594aed655ac503d5a7cccf7cc37be99f5333777a70cbf72e1d7ec2e46ebf29b8e318f3f8537487c8741b07e20315ee14580a8e3a9f06eddc35eb5383f8ba7a1f894c77b818b1052092795f", @nested={0x4, 0x114}, @generic="b17ec35a8aed6fad907de4229dd16b5d04148bc94c31096b8205e5a94e1f3ff5"]}, @typed={0x7, 0x30, 0x0, 0x0, @str=')\x9a\x00'}]}, 0x1314}, 0x1, 0x0, 0x0, 0x48000}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000480)) r13 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r13, &(0x7f0000000140), 0x4924b68, 0x0) 45.918681ms ago: executing program 3 (id=3668): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff070004000000000000000085000000a800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(0x3) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x1e, {{0xa, 0x4003, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local, 0x8}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}}, 0x108) close(0x3) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x0, 0x258, 0x258, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000640), {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0xbe, 0x3, 0x1, [0xfffc, 0x3, 0x8001, 0x0, 0x3, 0x29, 0x7, 0x744, 0x8, 0x9, 0xa1f, 0x6, 0x18, 0xf2e, 0x4, 0x8], 0x5}}, @common=@srh={{0x30}, {0x3b, 0x5, 0x5, 0x3, 0x7, 0x202a, 0x100}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x9ed}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "215742764290984b2897d58133668d895e1e63fcc010298f3e8afadca5b1"}}}, {{@ipv6={@local, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xff000000], 'ipvlan1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x1d, 0x7, 0x2, 0x17}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r5, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000026a6200000000000000000903000000000000000000000105000000080000000000000000000003000fd6b1751ba730e920ae4d038932720000000100000002000000000000000000"], 0x0, 0x4e, 0x0, 0x0, 0x80}, 0x28) sendto(r6, 0x0, 0x0, 0x14, &(0x7f00000027c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40000}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="581400000e01050025bd7000fcdbdf25000000014700c580ab8c0ea965ac3f16ddfb05693f60d6b20a8ae459da8ef9c59b7e98bf2630ec1ee7f11a438ee67f115e1c2f218f7ccf13eb5efdd202e8b7fb234030839586c8fcc3a537000800d300", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000800a300", @ANYRES32, @ANYBLOB="0800f200", @ANYRES32, @ANYBLOB="0e00b2006e732f6367726f75700000006bc590f16fc23b4b176f8d54126f71ab08e189a3ee7f68985fac8662a9ba2108b1fe8368faf547aa59b2259cb9ed608c6a89360f3b7a1e7c15695541a1a3bfd924fecdca66162ad41db06232911a5878bcecc2a26650afe6e2749df7b96eadc6c94b9f05da5e7e961defcb0fd7e0b5a5ff1ad8c4e7d8877d150dd01debd2e18c754b14ac7e6939daf8a55c9bacedc71467065dfaa5f954628b488603b690c9f059f642f48f930600"], 0x1458}, 0x1, 0x0, 0x0, 0x8010}, 0x40) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0xc572, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0x2}, {0x6, 0xc, 0x1, 0x7, 0x6e74, 0x0, 0x6}, {0x800, 0x9ce, 0xffffffffffffffff, 0x2}, 0x1, 0x6e6bb2, 0x1, 0x1, 0x3, 0x3}, {{@in6=@remote, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3507, 0x0, 0x3, 0x6, 0x7, 0x0, 0xf4}}, 0xe8) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendto$x25(r0, &(0x7f0000000580)="1cfa6973d366d57a2fe8342ef5e51a8e947d6e8db9139d3ba115ad18c95b4abfac04e6ff765bde18e22a16c080e1b3055312c8886a1f6f7f74642e7bef23269c40b722ad564623919eb7c959ddfa193e223dddeb69befc2d5adb4c5de04234e60dacb41082a3d00db96d81819af0fb892ad70a43f408e2829a76e79f53a6ee7681985d9f584fd10c7ccfce70e7454bf9adca3ac39e74f6a6810ef1", 0x9b, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0xff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 2.317345ms ago: executing program 1 (id=3669): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000100000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) unshare(0x20000400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000000)=@unspec, 0xfffffffffffffee8) sendto$packet(r0, &(0x7f0000000100)="70256e83e2e5d57c68214e26a3fa617ab7d642cf579023c046c0eb31499d283e19db111d9e9ed35c", 0x28, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) 0s ago: executing program 2 (id=3670): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000002a00000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): k: 'syz.3.2696': attribute type 1 has an invalid length. [ 348.104715][T16507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2698'. [ 348.729437][T16523] sctp: [Deprecated]: syz.3.2704 (pid 16523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.729437][T16523] Use struct sctp_sack_info instead [ 348.865165][ T8908] net_ratelimit: 120 callbacks suppressed [ 348.865183][ T8908] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 348.907854][ T8908] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 348.938707][ T5640] block nbd2: Receive control failed (result -32) [ 348.938804][ T5650] block nbd2: Receive control failed (result -32) [ 348.986668][T16548] netlink: 'syz.0.2709': attribute type 12 has an invalid length. [ 349.026541][ T8908] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 349.035015][ T8908] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 349.144268][ T8908] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 349.178262][ T8908] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 349.315199][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 349.343863][ T8914] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 349.360150][T16570] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2715'. [ 349.374495][T16567] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 349.474765][ T8908] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 349.528102][ T8908] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 349.567519][T16589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2719'. [ 349.628144][T16587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2719'. [ 349.659984][T16587] netlink: 'syz.1.2719': attribute type 7 has an invalid length. [ 349.659984][T16589] netlink: 'syz.1.2719': attribute type 7 has an invalid length. [ 349.660008][T16587] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2719'. [ 349.675793][T16594] tipc: Enabling not permitted [ 349.691469][T16589] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2719'. [ 349.700714][T16594] tipc: Enabling of bearer rejected, failed to enable media [ 349.716458][T16594] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.2720'. [ 349.813628][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2721'. [ 350.567328][T16635] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2731'. [ 350.603881][T16637] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 350.773924][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'. [ 350.776812][T16640] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2733'. [ 350.869019][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 350.905323][T16642] 8021q: adding VLAN 0 to HW filter on device bond11 [ 351.451776][T16667] netlink: 'syz.4.2739': attribute type 1 has an invalid length. [ 351.519347][T16671] x_tables: duplicate underflow at hook 2 [ 351.826187][T16678] lo speed is unknown, defaulting to 1000 [ 351.954342][T16682] bridge0: port 1(vlan4) entered blocking state [ 351.961472][T16682] bridge0: port 1(vlan4) entered disabled state [ 351.972178][T16682] vlan4: entered allmulticast mode [ 351.994573][T16682] dummy0: entered allmulticast mode [ 352.025670][T16682] vlan4: entered promiscuous mode [ 352.040538][T16682] dummy0: entered promiscuous mode [ 352.755959][ T29] audit: type=1800 audit(1780081682.086:11): pid=16700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2748" name="memory.events" dev="tmpfs" ino=2818 res=0 errno=0 [ 352.933564][T16737] syzkaller0: entered promiscuous mode [ 352.943250][T16746] netlink: 'syz.3.2758': attribute type 21 has an invalid length. [ 352.951956][T16737] syzkaller0: entered allmulticast mode [ 352.961052][T16746] netlink: 'syz.3.2758': attribute type 5 has an invalid length. [ 352.970448][T16746] netlink: 'syz.3.2758': attribute type 6 has an invalid length. [ 353.416486][T16755] xt_hashlimit: size too large, truncated to 1048576 [ 353.526528][T16758] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 353.813851][T16766] nbd: must specify a size in bytes for the device [ 353.874793][ T137] net_ratelimit: 145 callbacks suppressed [ 353.874814][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.905711][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.925413][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.944555][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.964911][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 353.986521][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.023722][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.051550][T16776] nbd: illegal input index -1113835520 [ 354.057309][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.085207][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.121729][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 356.833844][T16752] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 356.854665][T16763] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 356.879857][T16767] gretap5: entered allmulticast mode [ 356.943575][T16785] Bluetooth: MGMT ver 1.23 [ 356.982317][T16788] __nla_validate_parse: 10 callbacks suppressed [ 356.982340][T16788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2770'. [ 356.999770][T16788] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 357.377975][T16803] ip6t_srh: unknown srh match flags 4000 [ 357.415014][T16803] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2774'. [ 357.442188][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2774'. [ 357.461969][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2774'. [ 358.003827][T16817] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 358.095289][T16819] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 358.127364][T16820] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2781'. [ 358.342274][T16834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2779'. [ 358.417100][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 358.432764][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2787'. [ 358.577064][T16857] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2789'. [ 358.602094][T16857] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.609769][T16857] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.895468][ T58] net_ratelimit: 173 callbacks suppressed [ 358.895501][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 358.934475][ T58] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 359.048384][T16887] netlink: 'syz.1.2797': attribute type 1 has an invalid length. [ 359.056412][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.066487][T16887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2797'. [ 359.084799][ T137] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 359.092694][T16894] netlink: 'syz.0.2799': attribute type 1 has an invalid length. [ 359.111290][T16894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.214539][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.234159][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.265526][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.318761][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.354372][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.561417][T16924] nbd: socks must be embedded in a SOCK_ITEM attr [ 360.345799][T16968] netlink: 'syz.0.2817': attribute type 8 has an invalid length. [ 360.367206][T16959] bond6: (slave macvlan0): Releasing active interface [ 360.626677][T16962] bond12: option packets_per_slave: invalid value (1048582) [ 360.652170][T16962] bond12: option packets_per_slave: allowed values 0 - 65535 [ 360.690009][T16962] bond12 (unregistering): Released all slaves [ 360.902140][T16987] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.928617][T16987] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 360.953366][T16987] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.062035][T16987] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.074242][T16987] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 361.111250][T16987] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.246466][T16987] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.257475][T16987] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 361.278673][T16987] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.507836][T16987] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.522801][T16987] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 361.532949][T16987] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.004536][T17036] __nla_validate_parse: 7 callbacks suppressed [ 362.004557][T17036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'. [ 362.095946][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2833'. [ 362.161752][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'. [ 362.544213][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 362.785381][T17044] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2834'. [ 362.796904][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'. [ 362.806173][T17044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2834'. [ 363.829057][ C1] bridge0: port 3(vlan2) entered learning state [ 363.904219][ T137] net_ratelimit: 177 callbacks suppressed [ 363.904239][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.944196][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.956220][T17055] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2837'. [ 363.980166][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.013141][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.064762][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.094219][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.134631][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.167132][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.201431][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.233836][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.613543][T17036] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 365.625187][T17039] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 366.298598][T17111] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2851'. [ 367.163909][T17154] netlink: 'syz.4.2860': attribute type 9 has an invalid length. [ 367.184550][T17154] netlink: 'syz.4.2860': attribute type 6 has an invalid length. [ 367.200136][T17156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2863'. [ 367.215983][T17154] netlink: 'syz.4.2860': attribute type 7 has an invalid length. [ 367.225468][T17154] netlink: 'syz.4.2860': attribute type 8 has an invalid length. [ 367.956501][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'. [ 368.260952][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2873'. [ 368.403963][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2873'. [ 368.427980][T17208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2875'. [ 368.585636][T17215] €Â0: renamed from batadv_slave_1 [ 368.630428][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2873'. [ 368.635207][T17208] lo speed is unknown, defaulting to 1000 [ 368.692041][T17219] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2877'. [ 368.829225][T17221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2878'. [ 368.917319][ T8913] net_ratelimit: 136 callbacks suppressed [ 368.917338][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.932591][T17234] openvswitch: netlink: IPv4 tun info is not correct [ 368.969786][T17240] FAULT_INJECTION: forcing a failure. [ 368.969786][T17240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.986743][T17240] CPU: 1 UID: 0 PID: 17240 Comm: syz.1.2882 Not tainted syzkaller #0 PREEMPT(full) [ 368.986769][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.986784][T17240] Call Trace: [ 368.986795][T17240] [ 368.986802][T17240] dump_stack_lvl+0xe8/0x150 [ 368.986882][T17240] should_fail_ex+0x412/0x560 [ 368.987050][T17240] _copy_to_user+0x31/0xb0 [ 368.987127][T17240] simple_read_from_buffer+0xe1/0x170 [ 368.987178][T17240] proc_fail_nth_read+0x1bb/0x230 [ 368.987220][T17240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.987243][T17240] ? rw_verify_area+0x2a6/0x4d0 [ 368.987268][T17240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.987290][T17240] vfs_read+0x20c/0xa70 [ 368.987315][T17240] ? __pfx___mutex_lock+0x10/0x10 [ 368.987398][T17240] ? __pfx_vfs_read+0x10/0x10 [ 368.987421][T17240] ? __fget_files+0x2a/0x420 [ 368.987442][T17240] ? __fget_files+0x3a0/0x420 [ 368.987461][T17240] ? __fget_files+0x2a/0x420 [ 368.987485][T17240] ksys_read+0x150/0x270 [ 368.987509][T17240] ? __pfx_ksys_read+0x10/0x10 [ 368.987537][T17240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.987570][T17240] do_syscall_64+0x174/0x580 [ 368.987631][T17240] ? trace_irq_disable+0x3b/0x140 [ 368.987672][T17240] ? clear_bhb_loop+0x40/0x90 [ 368.987694][T17240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.987709][T17240] RIP: 0033:0x7f47a415d68e [ 368.987730][T17240] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.987742][T17240] RSP: 002b:00007f47a5078fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.987761][T17240] RAX: ffffffffffffffda RBX: 00007f47a50796c0 RCX: 00007f47a415d68e [ 368.987772][T17240] RDX: 000000000000000f RSI: 00007f47a50790a0 RDI: 0000000000000004 [ 368.987783][T17240] RBP: 00007f47a5079090 R08: 0000000000000000 R09: 0000000000000000 [ 368.987793][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.987802][T17240] R13: 00007f47a4416038 R14: 00007f47a4415fa0 R15: 00007ffc8751b778 [ 368.987828][T17240] [ 368.989625][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.257087][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.297095][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.308398][ T58] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 369.434395][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.468338][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.526336][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.528994][T17262] set match dimension is over the limit! [ 369.566240][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2889'. [ 369.575001][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.600607][T17262] ip6tnl4: entered allmulticast mode [ 369.805890][T17272] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2891'. [ 369.964821][T17270] lo speed is unknown, defaulting to 1000 [ 370.178352][T17283] 8021q: adding VLAN 0 to HW filter on device bond12 [ 370.237981][T17288] gretap5: entered allmulticast mode [ 370.285418][T17288] bond12: (slave gretap5): Enslaving as an active interface with an up link [ 370.540731][T17305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.924922][T17305] nbd: nbd64 already in use [ 371.262804][T17062] udevd[17062]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 371.726378][T17357] netlink: 'syz.3.2908': attribute type 1 has an invalid length. [ 372.583295][T17379] __nla_validate_parse: 8 callbacks suppressed [ 372.583313][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2912'. [ 372.611585][T17377] netlink: 'syz.4.2911': attribute type 39 has an invalid length. [ 372.756450][T17376] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2912'. [ 373.003175][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2919'. [ 373.040697][T17398] netlink: 'syz.1.2918': attribute type 7 has an invalid length. [ 373.269863][T17420] xt_hashlimit: size too large, truncated to 1048576 [ 373.321775][T17429] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 373.364290][T17429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2922'. [ 373.390950][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'. [ 373.483608][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2927'. [ 373.965463][ T3387] net_ratelimit: 149 callbacks suppressed [ 373.965482][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.014543][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2933'. [ 374.028771][ T3387] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 374.168766][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.189579][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.194383][ T8906] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 374.207572][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2933'. [ 374.208417][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.227583][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.237319][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.248329][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.354440][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.404342][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.444269][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.484267][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.514351][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.564207][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.700723][ T5629] syz_tun (unregistering): left allmulticast mode [ 374.803689][T17484] sctp: [Deprecated]: syz.3.2938 (pid 17484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.803689][T17484] Use struct sctp_sack_info instead [ 374.806888][T17486] netlink: 'syz.2.2939': attribute type 361 has an invalid length. [ 374.981493][T17493] vxcan2: entered allmulticast mode [ 375.223682][T17511] sock: sock_timestamping_bind_phc: sock not bind to device [ 375.338620][T17515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2945'. [ 375.346231][T17465] lo speed is unknown, defaulting to 1000 [ 375.397329][T17515] tipc: Enabling of bearer rejected, failed to enable media [ 375.410512][T17517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2946'. [ 375.824426][T17546] netlink: 'syz.3.2951': attribute type 1 has an invalid length. [ 375.907984][T17546] bond13: entered promiscuous mode [ 375.915108][T17546] 8021q: adding VLAN 0 to HW filter on device bond13 [ 376.203221][T17465] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.216070][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.225550][T17465] bridge_slave_0: entered allmulticast mode [ 376.234854][T17465] bridge_slave_0: entered promiscuous mode [ 376.243908][T17465] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.252362][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.260270][T17465] bridge_slave_1: entered allmulticast mode [ 376.270026][T17465] bridge_slave_1: entered promiscuous mode [ 376.294364][ T5650] Bluetooth: hci5: command tx timeout [ 376.334929][T17465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.360651][T17465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.466162][T17465] team0: Port device team_slave_0 added [ 376.488255][T17465] team0: Port device team_slave_1 added [ 376.556812][T17465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.565144][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.593151][T17465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.626226][T17465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.638313][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.665003][T17465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.713666][T17578] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 376.742110][T17465] hsr_slave_0: entered promiscuous mode [ 376.752393][T17465] hsr_slave_1: entered promiscuous mode [ 376.793901][T17578] bond12: entered promiscuous mode [ 376.800474][T17578] 8021q: adding VLAN 0 to HW filter on device bond12 [ 376.855385][T17578] bond12: (slave bridge8): making interface the new active one [ 376.863522][T17578] bridge8: entered promiscuous mode [ 376.889647][T17578] bridge8: left promiscuous mode [ 377.103572][T17593] tipc: Enabled bearer , priority 0 [ 377.128984][T17593] syzkaller0: entered promiscuous mode [ 377.135810][T17593] syzkaller0: entered allmulticast mode [ 377.216168][T17598] netlink: 'syz.0.2964': attribute type 10 has an invalid length. [ 377.218944][T17593] tipc: Resetting bearer [ 377.248108][T17590] tipc: Resetting bearer [ 377.296229][T17590] tipc: Disabling bearer [ 377.598089][T17465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.626783][T17612] __nla_validate_parse: 5 callbacks suppressed [ 377.626802][T17612] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2969'. [ 377.627524][T17613] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2969'. [ 377.667407][T17465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.917308][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 377.946099][T17465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.966387][T17465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.989556][T17617] kthread_run failed with err -4 [ 378.052323][T17631] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2975'. [ 378.159745][T17465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.170181][T17465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.278588][T17465] bond11: (slave netdevsim0): Releasing active interface [ 378.301665][T17465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.312924][T17465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.378724][ T5650] Bluetooth: hci5: command tx timeout [ 378.638294][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2984'. [ 378.655602][T17660] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2984'. [ 378.850586][T17664] syzkaller0: entered promiscuous mode [ 378.856757][T17664] syzkaller0: entered allmulticast mode [ 378.920950][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2986'. [ 378.931928][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2986'. [ 378.947812][T17465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.995474][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.043182][T17465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.050126][ T3387] net_ratelimit: 151 callbacks suppressed [ 379.050146][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.102367][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.119261][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.143692][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.153391][T17465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.170223][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.178214][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.220707][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.244339][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.252752][T17465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 379.264375][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.279334][T17465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.294382][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.337303][T17683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2992'. [ 379.344710][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.358273][ T137] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 379.428147][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'. [ 379.556338][T17694] veth13: entered allmulticast mode [ 379.617394][T17465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.669663][T17465] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.698248][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.705461][ T8906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.740159][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.747812][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.148631][T17713] syzkaller0: entered promiscuous mode [ 380.174007][T17713] syzkaller0: entered allmulticast mode [ 380.454512][ T5650] Bluetooth: hci5: command tx timeout [ 381.147421][ T29] audit: type=1800 audit(1780081710.486:12): pid=17735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3001" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3098 res=0 errno=0 [ 381.409221][T17724] syzkaller0: entered promiscuous mode [ 381.417208][T17724] syzkaller0: entered allmulticast mode [ 382.534296][ T5650] Bluetooth: hci5: command tx timeout [ 384.079213][ T137] net_ratelimit: 205 callbacks suppressed [ 384.079234][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.110566][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.136898][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.182158][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.204469][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.226869][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.248581][T17756] __nla_validate_parse: 2 callbacks suppressed [ 384.248598][T17756] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3006'. [ 384.259922][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.285263][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.346218][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.398157][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 386.897504][T17746] lo speed is unknown, defaulting to 1000 [ 387.138801][T17774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3008'. [ 387.295067][T17774] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 387.354644][T17780] xt_cgroup: invalid path, errno=-2 [ 387.454005][T17465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.658135][T17789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 387.745785][T17789] 8021q: adding VLAN 0 to HW filter on device bond12 [ 387.806058][T17802] bond12: (slave veth15): Enslaving as an active interface with an up link [ 387.816133][T17808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3016'. [ 387.892487][T17814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3018'. [ 387.920199][T17802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3013'. [ 387.982769][T17802] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 388.171245][T17821] 8021q: adding VLAN 0 to HW filter on device bond10 [ 388.181758][T17821] bond10: entered promiscuous mode [ 388.187843][T17821] gretap4: entered promiscuous mode [ 388.197666][T17821] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 388.287583][T17826] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 388.400127][T17465] veth0_vlan: entered promiscuous mode [ 388.406824][T17833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3024'. [ 388.416776][T17465] veth1_vlan: entered promiscuous mode [ 388.574283][T17841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3027'. [ 388.600298][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3027'. [ 388.629010][T17465] veth0_macvtap: entered promiscuous mode [ 388.637238][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'. [ 388.653163][T17465] veth1_macvtap: entered promiscuous mode [ 388.709661][T17465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.740314][T17465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.780294][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.795713][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.814574][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.836819][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.008174][T17842] xt_HMARK: proto mask must be zero with L3 mode [ 389.011436][T17847] gtp1: entered promiscuous mode [ 389.026805][T17847] gtp1: entered allmulticast mode [ 389.034841][T17847] team0: Device gtp1 is of different type [ 389.086298][ T8913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.095781][ T13] net_ratelimit: 190 callbacks suppressed [ 389.095798][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.100236][ T8913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.125301][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.154664][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.184621][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.204448][T17859] syzkaller0: entered promiscuous mode [ 389.214412][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.224967][T17859] syzkaller0: entered allmulticast mode [ 389.236002][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.245349][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.260020][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.270582][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 389.272815][T17862] nbd: must specify a size in bytes for the device [ 389.368092][T17864] __nla_validate_parse: 1 callbacks suppressed [ 389.368115][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2930'. [ 389.384369][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.384401][ T8906] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 389.497652][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.732959][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.739980][T17874] nft_compat: unsupported protocol 1 [ 389.755070][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.765689][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.778392][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.790805][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.974415][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 391.906493][ T5640] Bluetooth: hci0: command tx timeout [ 392.136748][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 393.690773][T17870] lo speed is unknown, defaulting to 1000 [ 393.710666][T17918] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3046'. [ 393.727339][T17918] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 393.908187][ C1] bridge0: port 3(vlan2) entered forwarding state [ 393.914701][ C1] bridge0: topology change detected, propagating [ 393.921576][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 393.974628][ T5640] Bluetooth: hci0: command tx timeout [ 394.002414][T17929] netlink: 'syz.3.3048': attribute type 12 has an invalid length. [ 394.104225][ T8913] net_ratelimit: 198 callbacks suppressed [ 394.104244][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.164478][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.186463][ T1161] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 394.304566][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.344899][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.384565][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.444231][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.474570][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.535921][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.569050][ T8913] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 394.639380][T17947] netlink: 'syz.4.3051': attribute type 1 has an invalid length. [ 394.666778][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 394.710365][T17870] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.712234][T17947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3051'. [ 394.747095][T17870] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.769771][T17870] bridge_slave_0: entered allmulticast mode [ 394.795727][T17870] bridge_slave_0: entered promiscuous mode [ 394.820758][T17947] nlmon0: entered promiscuous mode [ 394.828013][T17947] nlmon0: entered allmulticast mode [ 394.856542][T17870] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.872007][T17870] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.909148][T17870] bridge_slave_1: entered allmulticast mode [ 394.919427][T17870] bridge_slave_1: entered promiscuous mode [ 395.020406][T17870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.076011][T17870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.169653][T17962] syzkaller0: entered promiscuous mode [ 395.197831][T17962] syzkaller0: entered allmulticast mode [ 395.225202][T17970] xt_hashlimit: size too large, truncated to 1048576 [ 395.241386][T17870] team0: Port device team_slave_0 added [ 395.251049][T17968] netlink: 'syz.0.3057': attribute type 21 has an invalid length. [ 395.263665][T17870] team0: Port device team_slave_1 added [ 395.270017][T17968] netlink: 'syz.0.3057': attribute type 22 has an invalid length. [ 395.278844][T17968] netlink: 'syz.0.3057': attribute type 23 has an invalid length. [ 395.287037][T17968] netlink: 'syz.0.3057': attribute type 25 has an invalid length. [ 395.296490][T17968] netlink: 'syz.0.3057': attribute type 26 has an invalid length. [ 395.306974][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3057'. [ 395.353493][T17974] netlink: 'syz.4.3058': attribute type 1 has an invalid length. [ 395.372369][T17974] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3058'. [ 395.388595][T17974] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3058'. [ 395.573977][T17971] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.648371][T17971] bridge_slave_0 (unregistering): left allmulticast mode [ 395.667154][T17971] bridge_slave_0 (unregistering): left promiscuous mode [ 395.697647][T17971] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.863528][T17870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.880152][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.937612][T17870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.967883][T17870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.985192][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.021079][T17870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.056386][ T5640] Bluetooth: hci0: command tx timeout [ 396.284731][T17870] hsr_slave_0: entered promiscuous mode [ 396.325691][T17870] hsr_slave_1: entered promiscuous mode [ 396.358103][T17870] debugfs: 'hsr0' already exists in 'hsr' [ 396.371561][T17870] Cannot create hsr debugfs directory [ 396.478555][T18010] ÿÿÿÿÿÿ: renamed from bond_slave_0 (while UP) [ 396.493792][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3063'. [ 396.599026][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 396.608701][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'. [ 396.618053][T18015] netlink: 'syz.2.3064': attribute type 14 has an invalid length. [ 396.628751][T18015] netlink: 'syz.2.3064': attribute type 13 has an invalid length. [ 397.596725][T17870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.618294][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.883604][T18054] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3076'. [ 397.963987][T17870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.996059][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.020826][T17870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 398.071237][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.089505][T17870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 398.125126][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.137236][ T5640] Bluetooth: hci0: command tx timeout [ 398.301790][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3079'. [ 398.508392][T18068] bond17: (slave bridge6): making interface the new active one [ 398.553632][T18068] bond17: (slave bridge6): Enslaving as an active interface with an up link [ 398.618131][T18082] macvlan3: entered promiscuous mode [ 398.630836][T18082] macvlan3: entered allmulticast mode [ 398.638989][T18082] bond17: entered promiscuous mode [ 398.644577][T18082] bridge6: entered promiscuous mode [ 398.651066][T18082] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 398.674190][T18082] bond17: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 398.702921][T18082] bond17: left promiscuous mode [ 398.708405][T18082] bridge6: left promiscuous mode [ 398.849043][T18100] bridge0: port 1(vlan3) entered blocking state [ 398.874540][T18100] bridge0: port 1(vlan3) entered disabled state [ 398.888569][T18100] vlan3: entered allmulticast mode [ 398.907646][T18100] bridge_slave_1: entered allmulticast mode [ 398.941176][T18100] vlan3: entered promiscuous mode [ 398.960446][T18100] bridge_slave_1: entered promiscuous mode [ 399.018005][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.024557][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.067821][T17870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.119615][T17870] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.149615][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.156876][ T8906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.165248][ T137] net_ratelimit: 172 callbacks suppressed [ 399.165265][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.221336][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.228575][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.236552][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.264267][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.286374][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.314610][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.345004][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.366634][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.394306][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.417519][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.444412][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.105506][T17870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.141525][T18130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3092'. [ 400.294646][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 401.650226][T18135] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3094'. [ 401.742638][T17870] veth0_vlan: entered promiscuous mode [ 401.822277][T17870] veth1_vlan: entered promiscuous mode [ 401.923235][T18149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3098'. [ 401.965583][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3096'. [ 402.033886][T17870] veth0_macvtap: entered promiscuous mode [ 402.073132][T17870] veth1_macvtap: entered promiscuous mode [ 402.129596][T17870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.158835][T18160] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3100'. [ 402.194613][T18162] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3100'. [ 402.231578][T17870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.282694][T18164] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3101'. [ 402.293830][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.333264][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.369608][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.426365][ T1161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.759565][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.791544][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.920310][ T8914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.957656][ T8914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.165925][T18199] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3112'. [ 403.431469][T18212] validate_nla: 2 callbacks suppressed [ 403.431486][T18212] netlink: 'syz.2.3116': attribute type 8 has an invalid length. [ 403.468361][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'. [ 403.510449][T18212] veth1_to_team: entered promiscuous mode [ 403.527278][T18212] gretap0: entered promiscuous mode [ 403.558310][T18212] veth1_to_team: left promiscuous mode [ 403.588238][T18212] gretap0: left promiscuous mode [ 403.626427][ T5650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.642790][ T5650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.653421][ T5650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.670729][ T5650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.679748][ T5650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.015753][T18244] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3122'. [ 404.089403][T18249] netlink: 'syz.4.3124': attribute type 4 has an invalid length. [ 404.169678][T18256] syz.1.3125: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 404.202277][T18256] CPU: 1 UID: 0 PID: 18256 Comm: syz.1.3125 Not tainted syzkaller #0 PREEMPT(full) [ 404.202306][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.202319][T18256] Call Trace: [ 404.202327][T18256] [ 404.202335][T18256] dump_stack_lvl+0xe8/0x150 [ 404.202365][T18256] warn_alloc+0x249/0x340 [ 404.202440][T18256] ? stack_trace_save+0xa9/0x100 [ 404.202490][T18256] ? __pfx_warn_alloc+0x10/0x10 [ 404.202524][T18256] ? kasan_save_track+0x4f/0x80 [ 404.202557][T18256] ? kasan_save_track+0x3e/0x80 [ 404.202580][T18256] ? __kasan_kmalloc+0x93/0xb0 [ 404.202605][T18256] ? __kmalloc_cache_noprof+0x31c/0x660 [ 404.202630][T18256] ? xskq_create+0x56/0x170 [ 404.202744][T18256] ? xsk_setsockopt+0x54c/0x990 [ 404.202768][T18256] ? do_sock_setsockopt+0x17c/0x1b0 [ 404.202846][T18256] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 404.202865][T18256] ? do_syscall_64+0x174/0x580 [ 404.202888][T18256] __vmalloc_node_range_noprof+0x132/0x1750 [ 404.202949][T18256] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 404.202984][T18256] ? __kasan_kmalloc+0x93/0xb0 [ 404.203018][T18256] vmalloc_user_noprof+0xad/0xe0 [ 404.203046][T18256] ? xskq_create+0xbf/0x170 [ 404.203074][T18256] xskq_create+0xbf/0x170 [ 404.203106][T18256] xsk_init_queue+0x8a/0xe0 [ 404.203136][T18256] xsk_setsockopt+0x54c/0x990 [ 404.203163][T18256] ? __pfx_xsk_setsockopt+0x10/0x10 [ 404.203187][T18256] ? __pfx_aa_sk_perm+0x10/0x10 [ 404.203268][T18256] ? aa_sock_opt_perm+0xff/0x1a0 [ 404.203325][T18256] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 404.203364][T18256] ? __pfx_xsk_setsockopt+0x10/0x10 [ 404.203400][T18256] do_sock_setsockopt+0x17c/0x1b0 [ 404.203426][T18256] __x64_sys_setsockopt+0x13d/0x1b0 [ 404.203448][T18256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.203471][T18256] do_syscall_64+0x174/0x580 [ 404.203493][T18256] ? trace_irq_disable+0x3b/0x140 [ 404.203519][T18256] ? clear_bhb_loop+0x40/0x90 [ 404.203542][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.203559][T18256] RIP: 0033:0x7f77d019ce59 [ 404.203577][T18256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.203592][T18256] RSP: 002b:00007f77d0fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 404.203611][T18256] RAX: ffffffffffffffda RBX: 00007f77d0415fa0 RCX: 00007f77d019ce59 [ 404.203624][T18256] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 404.203634][T18256] RBP: 00007f77d0232d6f R08: 0000000000000004 R09: 0000000000000000 [ 404.203645][T18256] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.203657][T18256] R13: 00007f77d0416038 R14: 00007f77d0415fa0 R15: 00007fff91fd0698 [ 404.203686][T18256] [ 404.480879][ T8911] net_ratelimit: 164 callbacks suppressed [ 404.480897][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 404.482742][T18259] netlink: 'syz.1.3125': attribute type 10 has an invalid length. [ 404.486801][ T8911] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 404.510149][T18256] Mem-Info: [ 404.515962][T18256] active_anon:5704 inactive_anon:1 isolated_anon:0 [ 404.515962][T18256] active_file:3046 inactive_file:40448 isolated_file:0 [ 404.515962][T18256] unevictable:768 dirty:157 writeback:0 [ 404.515962][T18256] slab_reclaimable:11965 slab_unreclaimable:170666 [ 404.515962][T18256] mapped:29807 shmem:1295 pagetables:1302 [ 404.515962][T18256] sec_pagetables:0 bounce:0 [ 404.515962][T18256] kernel_misc_reclaimable:0 [ 404.515962][T18256] free:1248321 free_pcp:13585 free_cma:0 [ 404.562669][T18256] Node 0 active_anon:22816kB inactive_anon:4kB active_file:12184kB inactive_file:161592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119228kB dirty:628kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14696kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 404.568708][T18261] openvswitch: netlink: Message has 2 unknown bytes. [ 404.597444][T18256] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 404.597548][T18256] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.597625][T18256] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 404.597667][T18256] Node 0 DMA32 free:1038368kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23216kB inactive_anon:4kB active_file:12184kB inactive_file:161592kB unevictable:1536kB writepending:628kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:53968kB local_pcp:20728kB free_cma:0kB [ 404.597729][T18256] lowmem_reserve[]: 0 0 0 0 0 [ 404.597770][T18256] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 404.597825][T18256] lowmem_reserve[]: 0 0 0 0 0 [ 404.597863][T18256] Node 1 Normal free:3939556kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.649087][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 404.668220][T18256] lowmem_reserve[]: [ 404.769767][T18266] netlink: 'syz.1.3125': attribute type 10 has an invalid length. [ 404.797617][T18259] team0: Port device dummy0 added [ 404.802316][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 404.846483][ T8913] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 404.860056][T18256] 0 0 0 0 0 [ 404.871261][T18256] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 404.931446][T18256] Node 0 DMA32: 5345*4kB (UME) 4529*8kB (UME) 2057*16kB (UME) 765*32kB (UME) 279*64kB (UME) 323*128kB (UME) 234*256kB (UME) 206*512kB (UM) 137*1024kB (UME) 64*2048kB (UME) 104*4096kB (UM) = 1036924kB [ 404.957852][T18256] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 404.969789][T18256] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 7*16kB (UM) 9*32kB (UM) 7*64kB (UM) 3*128kB (UM) 4*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3939556kB [ 404.989128][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 404.997567][T18256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.007589][T18256] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 405.017936][T18256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.027905][T18256] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 405.037570][T18256] 47080 total pagecache pages [ 405.042367][T18256] 0 pages in swap cache [ 405.046959][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.057917][T18256] Free swap = 124996kB [ 405.074149][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.076277][T18256] Total swap = 124996kB [ 405.086713][T18256] 2097051 pages RAM [ 405.090643][T18256] 0 pages HighMem/MovableOnly [ 405.094259][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.099667][T18256] 427116 pages reserved [ 405.108300][T18256] 0 pages cma reserved [ 405.146485][T18266] team0: Port device dummy0 removed [ 405.169039][T18266] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 405.236314][T18276] __nla_validate_parse: 2 callbacks suppressed [ 405.236332][T18276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3129'. [ 405.277457][T18276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3129'. [ 405.342942][T18224] lo speed is unknown, defaulting to 1000 [ 405.718528][T18302] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3136'. [ 405.734512][ T5650] Bluetooth: hci3: command tx timeout [ 405.763822][T18302] veth0_to_bond: default FDB implementation only supports local addresses [ 405.876232][T18312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3139'. [ 405.887987][T18313] nbd: must specify at least one socket [ 406.099967][T18224] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.107503][T18224] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.115807][T18224] bridge_slave_0: entered allmulticast mode [ 406.123780][T18224] bridge_slave_0: entered promiscuous mode [ 406.133063][T18224] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.141451][T18224] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.154460][T18224] bridge_slave_1: entered allmulticast mode [ 406.164755][T18224] bridge_slave_1: entered promiscuous mode [ 406.253613][T18224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.301230][T18224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.495310][T18224] team0: Port device team_slave_0 added [ 406.539504][T18224] team0: Port device team_slave_1 added [ 406.699124][T18224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.727897][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3150'. [ 406.730643][T18224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.772303][T18224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.825795][T18224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.843819][T18224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.856489][T18367] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3152'. [ 406.885308][T18224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.095738][T18224] hsr_slave_0: entered promiscuous mode [ 407.113995][T18224] hsr_slave_1: entered promiscuous mode [ 407.132498][T18224] debugfs: 'hsr0' already exists in 'hsr' [ 407.140793][T18224] Cannot create hsr debugfs directory [ 407.147409][T18372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3154'. [ 407.165637][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3154'. [ 407.297196][T18388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.572467][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 407.687403][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3163'. [ 407.798768][T18408] netlink: 'syz.2.3164': attribute type 5 has an invalid length. [ 407.816872][ T5650] Bluetooth: hci3: command tx timeout [ 407.873277][T18224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.891303][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.899956][T18224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.912850][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.921372][T18224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.935791][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.946190][T18224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.970618][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.076918][T18430] tipc: Started in network mode [ 408.084001][T18430] tipc: Node identity f28e06f28964, cluster identity 4711 [ 408.092436][T18430] tipc: Enabled bearer , priority 0 [ 408.105443][T18430] syzkaller0: entered promiscuous mode [ 408.111436][T18430] syzkaller0: entered allmulticast mode [ 408.176245][T18430] tipc: Resetting bearer [ 408.193346][T18429] tipc: Resetting bearer [ 408.246588][T18429] tipc: Disabling bearer [ 408.344853][T18224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.413658][T18445] tipc: Failed to remove unknown binding: 66,0,0/0:4258540442/4258540444 [ 408.424426][T18224] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.432091][T18445] tipc: Failed to remove unknown binding: 66,0,0/0:4258540442/4258540443 [ 408.452323][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.457694][T18445] tipc: Failed to remove unknown binding: 66,0,0/0:4258540442/4258540444 [ 408.459535][ T8911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.479271][T18445] tipc: Failed to remove unknown binding: 66,0,0/0:4258540442/4258540443 [ 408.495446][T18449] netlink: 'syz.1.3179': attribute type 1 has an invalid length. [ 408.503869][T18443] tipc: Enabling not permitted [ 408.511543][T18443] tipc: Enabling of bearer rejected, failed to enable media [ 408.530032][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.537247][ T8911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.675710][T18460] xt_hashlimit: size too large, truncated to 1048576 [ 409.496900][T18501] netlink: 'syz.1.3189': attribute type 11 has an invalid length. [ 409.514215][ T137] net_ratelimit: 147 callbacks suppressed [ 409.514233][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.529487][T18503] netlink: 'syz.4.3190': attribute type 2 has an invalid length. [ 409.548182][T18503] netlink: 'syz.4.3190': attribute type 1 has an invalid length. [ 409.550289][T18224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.557626][T18506] netlink: 'syz.1.3189': attribute type 11 has an invalid length. [ 409.575454][T18505] netlink: 'syz.0.3191': attribute type 1 has an invalid length. [ 409.576675][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.594763][T18503] netlink: 'syz.4.3190': attribute type 1 has an invalid length. [ 409.625601][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.643401][T18505] bond13: entered promiscuous mode [ 409.652877][T18505] 8021q: adding VLAN 0 to HW filter on device bond13 [ 409.665613][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.704246][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.754558][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.765847][T18224] veth0_vlan: entered promiscuous mode [ 409.796062][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.839534][T18505] bond13: (slave bridge10): making interface the new active one [ 409.847363][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.864436][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.882593][T18505] bridge10: entered promiscuous mode [ 409.893719][T18505] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 409.897827][ T5650] Bluetooth: hci3: command tx timeout [ 409.912752][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.946763][T18224] veth1_vlan: entered promiscuous mode [ 409.980321][T18519] lo speed is unknown, defaulting to 1000 [ 409.987522][T18224] veth0_macvtap: entered promiscuous mode [ 409.991869][T18224] veth1_macvtap: entered promiscuous mode [ 410.023081][T18521] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 410.057782][T18224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.090336][T18224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.114846][ T8906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.131631][T18521] netlink: 'syz.4.3195': attribute type 2 has an invalid length. [ 410.135208][ T8906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.171975][ T8906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.181164][ T8906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.373667][T18529] FAULT_INJECTION: forcing a failure. [ 410.373667][T18529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.414892][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.422776][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.437070][T18529] CPU: 0 UID: 0 PID: 18529 Comm: syz.0.3197 Not tainted syzkaller #0 PREEMPT(full) [ 410.437094][T18529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.437104][T18529] Call Trace: [ 410.437112][T18529] [ 410.437119][T18529] dump_stack_lvl+0xe8/0x150 [ 410.437145][T18529] should_fail_ex+0x412/0x560 [ 410.437170][T18529] _copy_from_user+0x2d/0xb0 [ 410.437191][T18529] rfkill_fop_write+0x12b/0x5a0 [ 410.437300][T18529] ? apparmor_file_permission+0x1f4/0x300 [ 410.437325][T18529] ? __pfx_rfkill_fop_write+0x10/0x10 [ 410.437343][T18529] ? security_kernfs_init_security+0x220/0x270 [ 410.437431][T18529] ? rw_verify_area+0x255/0x4d0 [ 410.437453][T18529] ? __pfx_rfkill_fop_write+0x10/0x10 [ 410.437472][T18529] vfs_write+0x29a/0xb90 [ 410.437503][T18529] ? __pfx_vfs_write+0x10/0x10 [ 410.437528][T18529] ? __fget_files+0x2a/0x420 [ 410.437551][T18529] ? __fget_files+0x2a/0x420 [ 410.437568][T18529] ? __fget_files+0x3a0/0x420 [ 410.437585][T18529] ? __fget_files+0x2a/0x420 [ 410.437611][T18529] ksys_write+0x150/0x270 [ 410.437634][T18529] ? __pfx_ksys_write+0x10/0x10 [ 410.437666][T18529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.437685][T18529] do_syscall_64+0x174/0x580 [ 410.437702][T18529] ? trace_irq_disable+0x3b/0x140 [ 410.437727][T18529] ? clear_bhb_loop+0x40/0x90 [ 410.437749][T18529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.437766][T18529] RIP: 0033:0x7f1aa1b9ce59 [ 410.437782][T18529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.437804][T18529] RSP: 002b:00007f1aa2b00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.437822][T18529] RAX: ffffffffffffffda RBX: 00007f1aa1e15fa0 RCX: 00007f1aa1b9ce59 [ 410.437835][T18529] RDX: 0000000000000008 RSI: 0000200000000240 RDI: 0000000000000004 [ 410.437846][T18529] RBP: 00007f1aa2b00090 R08: 0000000000000000 R09: 0000000000000000 [ 410.437856][T18529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.437865][T18529] R13: 00007f1aa1e16038 R14: 00007f1aa1e15fa0 R15: 00007ffc7b12e0a8 [ 410.437894][T18529] [ 410.465980][T18536] syzkaller1: entered promiscuous mode [ 410.679695][T18536] syzkaller1: entered allmulticast mode [ 410.749743][T18539] netlink: 'syz.2.3201': attribute type 10 has an invalid length. [ 410.778388][T18539] __nla_validate_parse: 13 callbacks suppressed [ 410.778409][T18539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3201'. [ 410.800309][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.809148][T18542] IPv6: Can't replace route, no match found [ 410.832729][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.838843][T18542] IPv6: Can't replace route, no match found [ 410.883945][T18539] team0: Port device geneve1 added [ 411.332157][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 411.621988][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.643726][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.658656][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.675972][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.688977][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.726891][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3212'. [ 411.780113][T18578] hsr_slave_0: left promiscuous mode [ 411.801811][T18578] hsr_slave_1: left promiscuous mode [ 411.912927][ T5636] syz_tun (unregistering): left allmulticast mode [ 411.975772][ T5640] Bluetooth: hci3: command tx timeout [ 412.092556][T18594] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 412.128262][T18594] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 412.142520][T18593] syz_tun: entered allmulticast mode [ 412.144300][T18594] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 412.170321][T18593] pim6reg: entered allmulticast mode [ 412.396764][T18571] lo speed is unknown, defaulting to 1000 [ 412.431521][T18607] bond18: entered promiscuous mode [ 412.437698][T18607] 8021q: adding VLAN 0 to HW filter on device bond18 [ 412.475055][T18607] 8021q: adding VLAN 0 to HW filter on device bond18 [ 412.486755][T18607] bond18: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 412.499184][T18607] bond18: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 412.515304][T18607] bond18: (slave ip6gre1): making interface the new active one [ 412.523140][T18607] ip6gre1: entered promiscuous mode [ 412.532460][T18607] bond18: (slave ip6gre1): Enslaving as an active interface with an up link [ 412.812620][T18615] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 412.882755][T18615] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 412.896433][T18615] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 413.124145][T18629] pim6reg: entered allmulticast mode [ 413.166937][T18630] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3221'. [ 413.181456][T18630] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3221'. [ 413.220286][T18627] lo speed is unknown, defaulting to 1000 [ 413.314441][T18571] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.321713][T18571] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.329542][T18571] bridge_slave_0: entered allmulticast mode [ 413.338985][T18571] bridge_slave_0: entered promiscuous mode [ 413.386680][T18571] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.407317][T18571] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.410618][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'. [ 413.425020][T18571] bridge_slave_1: entered allmulticast mode [ 413.440058][T18571] bridge_slave_1: entered promiscuous mode [ 413.691139][T18571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.736718][ T5640] Bluetooth: hci2: command tx timeout [ 413.751828][T18571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.795357][T18571] team0: Port device team_slave_0 added [ 413.808756][T18571] team0: Port device team_slave_1 added [ 414.078302][T18571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.093854][T18571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.121908][T18571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.140247][T18571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.149679][T18571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.184426][T18571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.411606][T18571] hsr_slave_0: entered promiscuous mode [ 414.451949][T18571] hsr_slave_1: entered promiscuous mode [ 414.463792][T18571] debugfs: 'hsr0' already exists in 'hsr' [ 414.483915][T18571] Cannot create hsr debugfs directory [ 414.524178][ T137] net_ratelimit: 144 callbacks suppressed [ 414.524197][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.573814][ T137] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 414.636130][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 414.659598][T18706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3239'. [ 414.676009][T18706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.714318][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.742134][ T1161] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 414.861195][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 414.875914][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.924137][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.954279][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.984584][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.024482][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.140754][T18571] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.155298][T18571] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.347778][T18571] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.359381][T18571] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.434492][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 415.521168][T18571] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.545574][T18571] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.678826][T18571] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.712480][T18571] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.747615][T18730] lo speed is unknown, defaulting to 1000 [ 415.814855][ T5640] Bluetooth: hci2: command tx timeout [ 415.873990][T18749] __nla_validate_parse: 1 callbacks suppressed [ 415.874008][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 415.918368][T18749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.925719][T18749] IPv6: NLM_F_CREATE should be set when creating new route [ 415.948316][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 415.962605][T18746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.222449][T18571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.250860][T18571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.294461][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 416.380780][T18571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.447328][T18571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.509710][T18571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.538346][T18571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.573947][T18571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.632925][T18571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.717059][T18776] syzkaller0: entered promiscuous mode [ 416.732777][T18776] syzkaller0: entered allmulticast mode [ 417.004880][T18786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3255'. [ 417.018944][T18571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.497065][T18801] netlink: 5220 bytes leftover after parsing attributes in process `syz.3.3259'. [ 417.507001][T18801] netlink: 964 bytes leftover after parsing attributes in process `syz.3.3259'. [ 417.516942][T18801] netlink: 5220 bytes leftover after parsing attributes in process `syz.3.3259'. [ 417.632427][T18801] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3259'. [ 417.668323][T18804] veth2: entered allmulticast mode [ 417.717796][T18571] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.728816][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3260'. [ 417.771174][T18809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.792514][T18803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3260'. [ 417.822855][T18803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.850141][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.857630][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.896277][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.897157][ T5640] Bluetooth: hci2: command tx timeout [ 417.904144][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.305200][T18831] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 418.514902][T18843] validate_nla: 1 callbacks suppressed [ 418.514922][T18843] netlink: 'syz.3.3269': attribute type 10 has an invalid length. [ 418.558498][T18843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3269'. [ 418.590848][T18849] IPv6: Can't replace route, no match found [ 418.627066][T18843] team0: Port device geneve1 added [ 418.652106][T18849] IPv6: Can't replace route, no match found [ 418.836262][T18858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.843584][T18858] IPv6: NLM_F_CREATE should be set when creating new route [ 418.862853][T18859] Bluetooth: MGMT ver 1.23 [ 418.893847][T18858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.211776][T18571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.405555][T18571] veth0_vlan: entered promiscuous mode [ 419.452665][T18571] veth1_vlan: entered promiscuous mode [ 419.561963][T18571] veth0_macvtap: entered promiscuous mode [ 419.585179][ T8914] net_ratelimit: 139 callbacks suppressed [ 419.585199][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.621497][T18571] veth1_macvtap: entered promiscuous mode [ 419.642504][T18571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.650325][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.674515][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.689953][T18571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.722691][ T8914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.732718][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.742300][ T8914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.764424][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.790320][ T8914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.814759][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.831612][T18884] netlink: 'syz.4.3278': attribute type 290 has an invalid length. [ 419.848300][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.850428][ T8914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.905464][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.954577][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 419.976777][ T5640] Bluetooth: hci2: command tx timeout [ 420.014789][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.141418][ T8913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.190207][ T8913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.323912][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.343775][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.843668][ T5650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.857011][ T5650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.866528][ T5650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.876422][ T5650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.887150][ T5650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.242502][ T3387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.456889][ T3387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.617686][ T3387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.780453][T18943] __nla_validate_parse: 9 callbacks suppressed [ 421.780475][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 421.898372][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 421.913659][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 421.923717][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 421.934236][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 421.972508][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 422.006383][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 422.111571][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 422.140077][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 422.158230][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 422.193086][T18943] nlmon0: left promiscuous mode [ 422.214671][T18943] nlmon0: left allmulticast mode [ 422.399309][ T3387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.489037][T18951] pim6reg: entered allmulticast mode [ 422.727535][T18948] pim6reg: left allmulticast mode [ 422.861362][T18911] lo speed is unknown, defaulting to 1000 [ 422.934890][ T5640] Bluetooth: hci4: command tx timeout [ 423.527830][T18993] tipc: Enabled bearer , priority 0 [ 423.565400][ T3387] vlan4: left allmulticast mode [ 423.584573][ T3387] dummy0: left allmulticast mode [ 423.614716][ T3387] vlan4: left promiscuous mode [ 423.625009][ T3387] dummy0: left promiscuous mode [ 423.639805][ T3387] bridge0: port 1(vlan4) entered disabled state [ 424.241175][ T3387] bond18 (unregistering): (slave ip6gre1): Releasing backup interface [ 424.253906][ T3387] ip6gre1 (unregistering): left promiscuous mode [ 424.484882][ T3387] bond9 (unregistering): (slave gretap1): Releasing active interface [ 424.538312][ T3387] team0: Port device geneve1 removed [ 424.594148][ T8911] net_ratelimit: 170 callbacks suppressed [ 424.594170][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.637040][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.684383][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.704264][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.744411][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.767181][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.813261][ T3387] bond17 (unregistering): (slave bridge6): Releasing active interface [ 424.814649][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.845214][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.853730][ T3387] bond0 (unregistering): Released all slaves [ 424.865048][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.869878][ T3387] bond1 (unregistering): Released all slaves [ 424.885271][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.902107][ T3387] bond2 (unregistering): Released all slaves [ 424.928069][ T3387] bond3 (unregistering): Released all slaves [ 424.951223][ T3387] bond4 (unregistering): Released all slaves [ 424.976787][ T3387] bond5 (unregistering): (slave veth7): Releasing active interface [ 424.990160][ T3387] bond5 (unregistering): (slave veth9): Releasing active interface [ 425.008367][ T3387] bond5 (unregistering): (slave veth11): Releasing active interface [ 425.019297][ T5640] Bluetooth: hci4: command tx timeout [ 425.029401][ T3387] bond5 (unregistering): Released all slaves [ 425.049252][ T3387] bond6 (unregistering): Released all slaves [ 425.069301][ T3387] bond7 (unregistering): Released all slaves [ 425.097946][ T3387] bond8 (unregistering): Released all slaves [ 425.119651][ T3387] bond9 (unregistering): Released all slaves [ 425.147010][ T3387] bond10 (unregistering): Released all slaves [ 425.168237][ T3387] bond11 (unregistering): Released all slaves [ 425.211532][ T3387] bond12 (unregistering): Released all slaves [ 425.240477][ T3387] bond13 (unregistering): Released all slaves [ 425.254747][ T3387] bond14 (unregistering): Released all slaves [ 425.275070][ T3387] bond15 (unregistering): Released all slaves [ 425.290992][ T3387] bond16 (unregistering): Released all slaves [ 425.309744][ T3387] bond17 (unregistering): Released all slaves [ 425.326240][ T3387] bond18 (unregistering): Released all slaves [ 425.344548][T18987] syzkaller0: entered promiscuous mode [ 425.350066][T18987] syzkaller0: entered allmulticast mode [ 425.446671][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 425.481353][ T5365] tipc: Node number set to 2078934770 [ 425.531902][T18999] tipc: Resetting bearer [ 425.628423][T18999] tipc: Disabling bearer [ 425.719102][ T3387] tipc: Left network mode [ 425.728977][T19050] tipc: Enabling of bearer rejected, failed to enable media [ 426.506303][T19087] netlink: 'syz.3.3322': attribute type 10 has an invalid length. [ 426.650971][T19091] netlink: 'syz.0.3323': attribute type 2 has an invalid length. [ 427.094570][ T5640] Bluetooth: hci4: command tx timeout [ 427.135342][T19106] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 427.173881][T19106] bond1: (slave lo): Enslaving as an active interface with an up link [ 427.459477][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 427.614775][T19134] __nla_validate_parse: 72 callbacks suppressed [ 427.614794][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 427.727055][T19146] netlink: 'syz.1.3334': attribute type 10 has an invalid length. [ 427.735427][T19146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3334'. [ 427.793320][T18911] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.802300][T18911] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.810625][T18911] bridge_slave_0: entered allmulticast mode [ 427.822810][T18911] bridge_slave_0: entered promiscuous mode [ 427.846221][T19134] bond1: option broadcast_neighbor: invalid value (30) [ 427.857328][T19134] bond1 (unregistering): Released all slaves [ 428.016251][T19146] team0: Port device geneve1 added [ 428.045992][T18911] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.080622][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.102166][T18911] bridge_slave_1: entered allmulticast mode [ 428.126704][T18911] bridge_slave_1: entered promiscuous mode [ 428.142041][T19154] netlink: 'syz.1.3337': attribute type 1 has an invalid length. [ 428.166246][T19156] netlink: 'syz.4.3338': attribute type 58 has an invalid length. [ 428.174632][T19156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3338'. [ 428.326565][T19154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.418147][T19158] bond1: (slave geneve2): making interface the new active one [ 428.432697][T19158] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 428.489285][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 428.541505][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3339'. [ 428.555106][T18911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.669314][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 428.806967][T19169] team0: Port device team_slave_0 removed [ 428.847940][T18911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.941941][T19178] syzkaller1: entered promiscuous mode [ 428.963288][T19178] syzkaller1: entered allmulticast mode [ 429.176153][ T5640] Bluetooth: hci4: command tx timeout [ 429.409139][T18911] team0: Port device team_slave_0 added [ 429.427569][T18911] team0: Port device team_slave_1 added [ 429.442461][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 429.604275][ T8914] net_ratelimit: 200 callbacks suppressed [ 429.604293][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.654610][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.692580][T18911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.699764][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.708847][T18911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.736259][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.747129][T18911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.759551][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.768686][ T8913] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 429.816552][T19214] macsec1: entered allmulticast mode [ 429.821958][T19214] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 429.824175][T19224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3350'. [ 429.831642][T19214] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 429.849939][T19214] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 429.863407][T19214] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 429.887672][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.924688][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.965085][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.994545][ T8906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.099548][T18911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.133570][T18911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.171647][T18911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.189032][ T2174] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 430.191190][T19239] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3352'. [ 430.226639][T19236] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3351'. [ 430.413661][T19247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 430.557863][T18911] hsr_slave_0: entered promiscuous mode [ 430.573896][T18911] hsr_slave_1: entered promiscuous mode [ 430.591160][T18911] debugfs: 'hsr0' already exists in 'hsr' [ 430.608849][T18911] Cannot create hsr debugfs directory [ 430.623200][T19235] lo speed is unknown, defaulting to 1000 [ 431.243455][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 431.826294][ T3387] IPVS: stop unused estimator thread 0... [ 432.247422][T19311] netlink: 'syz.1.3365': attribute type 1 has an invalid length. [ 432.283272][T19312] netlink: 'syz.1.3365': attribute type 1 has an invalid length. [ 432.366985][T19311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.455941][T19326] xt_hashlimit: max too large, truncated to 1048576 [ 432.518310][T19326] Cannot find set identified by id 1 to match [ 433.199014][T19342] __nla_validate_parse: 4 callbacks suppressed [ 433.200927][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'. [ 434.517937][T19389] batadv_slave_1: entered promiscuous mode [ 434.536163][T19388] batadv_slave_1: left promiscuous mode [ 434.664494][ T3387] net_ratelimit: 198 callbacks suppressed [ 434.664511][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.756170][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.785910][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.834957][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.874215][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.898673][ T58] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 435.024706][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.074230][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.120040][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.164698][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.236460][T18911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 435.259717][T19421] netlink: 'syz.0.3383': attribute type 142 has an invalid length. [ 435.275038][T18911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.298323][T18911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 435.329430][T18911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.346645][T18911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 435.406266][T18911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.426208][T18911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 435.466587][T18911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.503083][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3384'. [ 435.546911][T19431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.592512][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3384'. [ 435.617195][T19441] netlink: 'syz.0.3387': attribute type 13 has an invalid length. [ 435.642063][T19431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.721723][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'. [ 435.900544][T19441] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.908331][T19441] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.201632][T19441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.246602][T19441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.503433][T19457] veth0: entered promiscuous mode [ 436.608171][ T8914] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.847969][T19489] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 439.427453][T19463] veth0: left promiscuous mode [ 439.439340][ T8914] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.448805][ T8914] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.484955][ T8914] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.546512][T19486] lo speed is unknown, defaulting to 1000 [ 439.684276][ T13] net_ratelimit: 209 callbacks suppressed [ 439.684296][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 439.738600][T19505] ipvlan2: entered promiscuous mode [ 439.744188][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 439.776810][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 439.817985][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 439.886517][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 439.908636][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3396'. [ 439.919660][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 439.941080][ T8911] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 439.979010][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.992077][T19509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3396'. [ 440.064804][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.070058][T18911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.094494][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.148323][T18911] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.203277][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.210492][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.277666][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.284884][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.308446][T19526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3399'. [ 440.391088][T19507] lo speed is unknown, defaulting to 1000 [ 440.440774][T19529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3399'. [ 440.656021][T19540] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.671512][T19539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.720399][T19544] Cannot find add_set index 1 as target [ 440.893997][ T29] audit: type=1107 audit(1780081770.226:13): pid=19548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cÇý>1ÿ_‰9Ú †ñ§sP³ [ 440.893997][ T29] P?—– ë(Ž5ÖW8½bßÏ [ 440.893997][ T29] l£ˆÕ[ˆÚVì…' [ 441.386245][T19574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3409'. [ 441.429447][T19574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3409'. [ 441.465005][T19574] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3409'. [ 441.490958][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 441.709236][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 441.744544][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3412'. [ 441.768722][T19588] tipc: Started in network mode [ 441.773681][T19586] netlink: 'syz.0.3412': attribute type 12 has an invalid length. [ 441.779043][T19588] tipc: Node identity 2e58b5b26a58, cluster identity 4711 [ 441.809096][T19588] tipc: Enabled bearer , priority 0 [ 441.820565][T19586] netlink: 'syz.0.3412': attribute type 13 has an invalid length. [ 441.841134][T19599] syzkaller0: entered promiscuous mode [ 441.861802][T19599] syzkaller0: entered allmulticast mode [ 441.901385][T19591] ip6tnl2: entered allmulticast mode [ 441.957416][ T137] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 442.088685][T18911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.133343][T19609] tipc: Resetting bearer [ 442.191949][T19611] syzkaller1: entered promiscuous mode [ 442.242071][T19611] syzkaller1: entered allmulticast mode [ 442.261612][T19587] tipc: Resetting bearer [ 442.320057][T19587] tipc: Disabling bearer [ 442.587304][T18911] veth0_vlan: entered promiscuous mode [ 442.643727][T18911] veth1_vlan: entered promiscuous mode [ 442.902531][T18911] veth0_macvtap: entered promiscuous mode [ 442.932085][T18911] veth1_macvtap: entered promiscuous mode [ 443.010077][T18911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.033733][T19662] tipc: Started in network mode [ 443.041206][T19662] tipc: Node identity , cluster identity 4711 [ 443.066547][T19662] tipc: Failed to obtain node identity [ 443.086518][T19662] tipc: Enabling of bearer rejected, failed to enable media [ 443.096407][T19667] sctp: [Deprecated]: syz.1.3429 (pid 19667) Use of int in max_burst socket option deprecated. [ 443.096407][T19667] Use struct sctp_assoc_value instead [ 443.152854][T18911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.206420][ T3387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.246031][T19675] netlink: 'syz.0.3433': attribute type 83 has an invalid length. [ 443.247685][ T3387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.307208][ T3387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.355886][ T3387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.661106][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.700428][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.809471][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.832169][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.690719][T19748] IPVS: Scheduler module ip_vs_sip not found [ 444.695008][ T8914] net_ratelimit: 163 callbacks suppressed [ 444.695030][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.753260][ T8914] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 444.774665][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.874252][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.893679][ T8911] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.027159][T19761] lo speed is unknown, defaulting to 1000 [ 445.034795][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.043107][ T8914] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.172068][T19781] Bluetooth: MGMT ver 1.23 [ 445.194220][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.202905][T19785] __nla_validate_parse: 13 callbacks suppressed [ 445.202923][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3459'. [ 445.225381][ T58] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.310950][T19790] xt_TCPMSS: Only works on TCP SYN packets [ 445.364574][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.379422][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3459'. [ 445.476422][T19803] x_tables: duplicate underflow at hook 2 [ 445.571561][T19790] bridge_slave_1: left allmulticast mode [ 445.578630][T19790] bridge_slave_1: left promiscuous mode [ 445.585446][T19790] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.602527][T19790] bridge_slave_0: left allmulticast mode [ 445.626052][T19790] bridge_slave_0: left promiscuous mode [ 445.636397][T19790] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.770904][T19815] netlink: 'syz.0.3465': attribute type 1 has an invalid length. [ 445.906567][T19822] bond3: entered promiscuous mode [ 445.917886][T19822] bond3: entered allmulticast mode [ 445.923537][T19822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.990544][T19820] bridge_slave_1: left allmulticast mode [ 446.007790][T19820] bridge_slave_1: left promiscuous mode [ 446.027771][T19820] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.043394][T19820] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 446.062022][T19820] bond0: (slave bond_slave_1): Releasing backup interface [ 446.138642][T19820] team0: Port device team_slave_0 removed [ 446.164589][T19820] team0: Port device team_slave_1 removed [ 446.171687][T19820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.181456][T19820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.193458][T19820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.212930][T19820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.220385][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 446.390823][T19856] : renamed from veth0_to_bond (while UP) [ 446.420432][T19861] netlink: 734 bytes leftover after parsing attributes in process `syz.3.3475'. [ 446.656512][T19870] lo speed is unknown, defaulting to 1000 [ 446.795126][T19878] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3480'. [ 447.066830][T19887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 447.111431][T19887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3483'. [ 447.396217][T19908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3487'. [ 447.437282][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3489'. [ 447.496977][T19908] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 447.535243][T19908] bond2 (unregistering): Released all slaves [ 447.566950][T19910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3489'. [ 447.594382][T19910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3489'. [ 447.625109][T19923] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.632687][T19923] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.898786][T19941] gretap1: entered allmulticast mode [ 448.400464][T19962] xt_l2tp: v2 sid > 0xffff: 8388608 [ 448.456349][ T5640] Bluetooth: hci0: command tx timeout [ 448.602954][T19967] netlink: 'syz.0.3506': attribute type 14 has an invalid length. [ 448.934283][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 449.774616][ T137] net_ratelimit: 131 callbacks suppressed [ 449.774636][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.788769][ T137] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 449.814856][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.905168][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.924293][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.944198][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.964409][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.994579][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.015526][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.034347][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 452.130407][T20010] tun0: tun_chr_ioctl cmd 1074025680 [ 452.334638][T20023] __nla_validate_parse: 6 callbacks suppressed [ 452.334661][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3522'. [ 452.717480][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 452.767164][T20037] hsr_slave_0: left promiscuous mode [ 452.823806][ T29] audit: type=1800 audit(1780081782.156:14): pid=20047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3528" name=20 dev="tmpfs" ino=303 res=0 errno=0 [ 452.925870][T20037] hsr_slave_1: left promiscuous mode [ 453.103339][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3532'. [ 453.176043][T20070] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3533'. [ 453.222075][T20070] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3533'. [ 453.234156][T20070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3533'. [ 453.564893][T20098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3542'. [ 453.618477][T20098] netlink: 'syz.4.3542': attribute type 1 has an invalid length. [ 453.642659][T20104] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3544'. [ 453.675994][T20104] netlink: 'syz.2.3544': attribute type 1 has an invalid length. [ 453.755615][T20107] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3544'. [ 453.781976][T20107] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3544'. [ 453.862534][T20104] Cannot find add_set index 0 as target [ 454.049206][T20125] veth0_macvtap: left promiscuous mode [ 454.276381][T20147] FAULT_INJECTION: forcing a failure. [ 454.276381][T20147] name failslab, interval 1, probability 0, space 0, times 0 [ 454.289512][T20147] CPU: 1 UID: 0 PID: 20147 Comm: syz.3.3556 Not tainted syzkaller #0 PREEMPT(full) [ 454.289538][T20147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.289549][T20147] Call Trace: [ 454.289556][T20147] [ 454.289563][T20147] dump_stack_lvl+0xe8/0x150 [ 454.289590][T20147] should_fail_ex+0x412/0x560 [ 454.289615][T20147] should_failslab+0xa8/0x100 [ 454.289633][T20147] ? skb_clone+0x212/0x3a0 [ 454.289721][T20147] kmem_cache_alloc_noprof+0x87/0x650 [ 454.289747][T20147] ? __netlink_lookup+0xc6/0x8b0 [ 454.289843][T20147] skb_clone+0x212/0x3a0 [ 454.289866][T20147] __netlink_deliver_tap+0x404/0x850 [ 454.289898][T20147] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.289919][T20147] netlink_deliver_tap+0x19c/0x1b0 [ 454.289940][T20147] netlink_unicast+0x730/0x8e0 [ 454.289969][T20147] netlink_sendmsg+0x813/0xb40 [ 454.290006][T20147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.290030][T20147] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.290057][T20147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.290084][T20147] ____sys_sendmsg+0x972/0x9f0 [ 454.290104][T20147] ? __might_fault+0xaf/0x130 [ 454.290133][T20147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.290161][T20147] ? import_iovec+0x73/0xa0 [ 454.290216][T20147] ___sys_sendmsg+0x2a5/0x360 [ 454.290235][T20147] ? __lock_acquire+0x6b5/0x2cf0 [ 454.290265][T20147] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.290322][T20147] ? __fget_files+0x2a/0x420 [ 454.290341][T20147] ? __fget_files+0x3a0/0x420 [ 454.290373][T20147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 454.290396][T20147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.290426][T20147] ? __pfx_ksys_write+0x10/0x10 [ 454.290459][T20147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.290479][T20147] do_syscall_64+0x174/0x580 [ 454.290498][T20147] ? clear_bhb_loop+0x40/0x90 [ 454.290523][T20147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.290540][T20147] RIP: 0033:0x7f5a2ff9ce59 [ 454.290558][T20147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.290573][T20147] RSP: 002b:00007f5a30ea2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.290592][T20147] RAX: ffffffffffffffda RBX: 00007f5a30215fa0 RCX: 00007f5a2ff9ce59 [ 454.290605][T20147] RDX: 0000000020048020 RSI: 0000200000000000 RDI: 0000000000000003 [ 454.290617][T20147] RBP: 00007f5a30ea2090 R08: 0000000000000000 R09: 0000000000000000 [ 454.290627][T20147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.290637][T20147] R13: 00007f5a30216038 R14: 00007f5a30215fa0 R15: 00007fffae4e76a8 [ 454.290668][T20147] [ 454.694830][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 454.865023][ T8913] net_ratelimit: 251 callbacks suppressed [ 454.865043][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.916547][ T8913] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 455.014560][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.029677][T16285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.032608][T20170] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 455.038167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.056682][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 455.083921][T20178] openvswitch: netlink: nsh attr 14384 is out of range max 3 [ 455.093816][T20178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.123320][T20179] netlink: 'syz.0.3562': attribute type 12 has an invalid length. [ 455.124236][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 455.177442][T20181] syzkaller0: entered promiscuous mode [ 455.183230][T20181] syzkaller0: entered allmulticast mode [ 455.668801][T20206] FAULT_INJECTION: forcing a failure. [ 455.668801][T20206] name failslab, interval 1, probability 0, space 0, times 0 [ 455.686167][T20211] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 455.693750][T20206] CPU: 1 UID: 0 PID: 20206 Comm: syz.3.3571 Not tainted syzkaller #0 PREEMPT(full) [ 455.693786][T20206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 455.693796][T20206] Call Trace: [ 455.693803][T20206] [ 455.693810][T20206] dump_stack_lvl+0xe8/0x150 [ 455.693836][T20206] should_fail_ex+0x412/0x560 [ 455.693859][T20206] should_failslab+0xa8/0x100 [ 455.693879][T20206] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 455.693903][T20206] ? __alloc_skb+0x186/0x7d0 [ 455.693920][T20206] ? __alloc_skb+0x1d0/0x7d0 [ 455.693934][T20206] ? __local_bh_enable_ip+0xd0/0x130 [ 455.693995][T20206] __alloc_skb+0x1d0/0x7d0 [ 455.694014][T20206] ? netlink_ack_tlv_len+0x6c/0x210 [ 455.694034][T20206] netlink_ack+0x146/0xa50 [ 455.694048][T20206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 455.694127][T20206] ? ref_tracker_free+0x693/0x840 [ 455.694175][T20206] ? __pfx_ref_tracker_free+0x10/0x10 [ 455.694196][T20206] netlink_rcv_skb+0x2b6/0x4b0 [ 455.694211][T20206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 455.694225][T20206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.694248][T20206] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.694263][T20206] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.694281][T20206] netlink_unicast+0x75c/0x8e0 [ 455.694302][T20206] netlink_sendmsg+0x813/0xb40 [ 455.694322][T20206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.694339][T20206] ? aa_sock_msg_perm+0xf1/0x1b0 [ 455.694359][T20206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.694379][T20206] ____sys_sendmsg+0x972/0x9f0 [ 455.694394][T20206] ? __might_fault+0xaf/0x130 [ 455.694415][T20206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.694435][T20206] ? import_iovec+0x73/0xa0 [ 455.694453][T20206] ___sys_sendmsg+0x2a5/0x360 [ 455.694467][T20206] ? __lock_acquire+0x6b5/0x2cf0 [ 455.694484][T20206] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.694524][T20206] ? __fget_files+0x2a/0x420 [ 455.694539][T20206] ? __fget_files+0x3a0/0x420 [ 455.694561][T20206] __x64_sys_sendmsg+0x1bd/0x2a0 [ 455.694578][T20206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.694599][T20206] ? __pfx_ksys_write+0x10/0x10 [ 455.694624][T20206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.694639][T20206] do_syscall_64+0x174/0x580 [ 455.694652][T20206] ? trace_irq_disable+0x3b/0x140 [ 455.694671][T20206] ? clear_bhb_loop+0x40/0x90 [ 455.694686][T20206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.694699][T20206] RIP: 0033:0x7f5a2ff9ce59 [ 455.694713][T20206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.694723][T20206] RSP: 002b:00007f5a30ea2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.694737][T20206] RAX: ffffffffffffffda RBX: 00007f5a30215fa0 RCX: 00007f5a2ff9ce59 [ 455.694746][T20206] RDX: 0000000020048020 RSI: 0000200000000000 RDI: 0000000000000003 [ 455.694763][T20206] RBP: 00007f5a30ea2090 R08: 0000000000000000 R09: 0000000000000000 [ 455.694771][T20206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.694778][T20206] R13: 00007f5a30216038 R14: 00007f5a30215fa0 R15: 00007fffae4e76a8 [ 455.694800][T20206] [ 456.231527][ T5640] block nbd3: Receive control failed (result -1) [ 459.874265][ T1161] net_ratelimit: 206 callbacks suppressed [ 459.874285][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.904879][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.939721][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.980987][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.012939][T20245] tipc: Enabled bearer , priority 0 [ 460.024506][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.051824][T20245] syzkaller1: entered promiscuous mode [ 460.059511][T20245] syzkaller1: entered allmulticast mode [ 460.070957][T20245] syzkaller0: entered promiscuous mode [ 460.075257][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.092514][T20245] syzkaller0: entered allmulticast mode [ 460.163099][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.204113][ T137] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.220210][T20252] __nla_validate_parse: 79 callbacks suppressed [ 460.220231][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3582'. [ 460.223106][T20245] tipc: Resetting bearer [ 460.244536][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.248491][T16285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.315114][T20258] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3585'. [ 460.353204][T20260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3584'. [ 460.386278][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3584'. [ 460.432101][T20244] tipc: Resetting bearer [ 460.456500][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 460.484528][ T9] IPVS: starting estimator thread 0... [ 460.516388][T20244] tipc: Disabling bearer [ 460.574445][T20271] IPVS: using max 38 ests per chain, 91200 per kthread [ 460.586465][T20270] xt_hashlimit: size too large, truncated to 1048576 [ 460.651962][T20276] netlink: 'syz.4.3587': attribute type 1 has an invalid length. [ 460.687511][T20276] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3587'. [ 460.798108][T20286] netlink: 'syz.0.3591': attribute type 12 has an invalid length. [ 460.942313][T20290] netlink: 'syz.0.3592': attribute type 1 has an invalid length. [ 460.955586][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 461.251175][T20304] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3597'. [ 461.278697][T20304] FAULT_INJECTION: forcing a failure. [ 461.278697][T20304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.337209][T20304] CPU: 0 UID: 0 PID: 20304 Comm: syz.4.3597 Not tainted syzkaller #0 PREEMPT(full) [ 461.337235][T20304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.337246][T20304] Call Trace: [ 461.337253][T20304] [ 461.337261][T20304] dump_stack_lvl+0xe8/0x150 [ 461.337287][T20304] should_fail_ex+0x412/0x560 [ 461.337312][T20304] _copy_from_user+0x2d/0xb0 [ 461.337335][T20304] kstrtouint_from_user+0xd6/0x180 [ 461.337355][T20304] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 461.337386][T20304] proc_fail_nth_write+0x8e/0x210 [ 461.337409][T20304] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 461.337436][T20304] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 461.337458][T20304] vfs_write+0x29a/0xb90 [ 461.337491][T20304] ? __pfx_vfs_write+0x10/0x10 [ 461.337517][T20304] ? __fget_files+0x2a/0x420 [ 461.337543][T20304] ? __fget_files+0x3a0/0x420 [ 461.337562][T20304] ? __fget_files+0x2a/0x420 [ 461.337592][T20304] ksys_write+0x150/0x270 [ 461.337619][T20304] ? __pfx_ksys_write+0x10/0x10 [ 461.337651][T20304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.337670][T20304] do_syscall_64+0x174/0x580 [ 461.337694][T20304] ? trace_irq_disable+0x3b/0x140 [ 461.337718][T20304] ? clear_bhb_loop+0x40/0x90 [ 461.337748][T20304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.337765][T20304] RIP: 0033:0x7ff17815d68e [ 461.337781][T20304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.337796][T20304] RSP: 002b:00007ff17910afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.337814][T20304] RAX: ffffffffffffffda RBX: 00007ff17910b6c0 RCX: 00007ff17815d68e [ 461.337826][T20304] RDX: 0000000000000001 RSI: 00007ff17910b0a0 RDI: 0000000000000007 [ 461.337837][T20304] RBP: 00007ff17910b090 R08: 0000000000000000 R09: 0000000000000000 [ 461.337848][T20304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.337858][T20304] R13: 00007ff178416038 R14: 00007ff178415fa0 R15: 00007ffd194dce28 [ 461.337889][T20304] [ 461.380909][T20311] syzkaller0: entered promiscuous mode [ 461.468996][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 461.473284][T20313] netlink: 'syz.0.3601': attribute type 1 has an invalid length. [ 461.480418][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 461.537952][T20311] syzkaller0: entered allmulticast mode [ 461.597107][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 461.713116][T20313] bond3: entered promiscuous mode [ 461.719156][T20313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.844989][T20327] netlink: 'syz.1.3603': attribute type 1 has an invalid length. [ 461.907392][T20327] netlink: 'syz.1.3603': attribute type 10 has an invalid length. [ 461.916922][T20330] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 461.961893][T20331] netlink: 'syz.1.3603': attribute type 10 has an invalid length. [ 461.993171][T20327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.027258][T20327] team0: Port device netdevsim1 added [ 462.177576][T20331] team0: Port device netdevsim1 removed [ 462.203947][T20331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.257364][T20331] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 462.279577][T20332] tipc: Enabling of bearer rejected, failed to enable media [ 462.351750][T20345] erspan0: entered promiscuous mode [ 462.366231][T20340] x_tables: duplicate underflow at hook 1 [ 462.392241][T20344] erspan0: left promiscuous mode [ 463.040142][T20378] netlink: 'syz.3.3619': attribute type 1 has an invalid length. [ 463.050818][T20378] netlink: 'syz.3.3619': attribute type 2 has an invalid length. [ 463.059747][T20378] netlink: 'syz.3.3619': attribute type 1 has an invalid length. [ 463.334926][ T5640] block nbd5: Receive control failed (result -32) [ 463.426684][T20403] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.452609][ T9] team_slave_0: entered promiscuous mode [ 463.458399][ T9] team_slave_1: entered promiscuous mode [ 463.464147][ T9] geneve1: entered promiscuous mode [ 464.271535][T20447] syz_tun: entered allmulticast mode [ 464.383645][T20455] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 464.421486][T20450] syz_tun: left allmulticast mode [ 464.894364][ T8913] net_ratelimit: 134 callbacks suppressed [ 464.894384][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.954126][ T8913] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.009343][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.065285][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.115512][ T1161] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.124447][T20480] lo speed is unknown, defaulting to 1000 [ 465.148268][ T1161] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 465.271901][T20500] ip6t_srh: unknown srh match flags 4000 [ 465.296663][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.347472][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.351903][T20507] __nla_validate_parse: 25 callbacks suppressed [ 465.351921][T20507] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3648'. [ 465.405420][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.466308][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.577124][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 465.691560][T20520] xt_connbytes: Forcing CT accounting to be enabled [ 465.734377][T20520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.781097][T20532] validate_nla: 4 callbacks suppressed [ 465.781117][T20532] netlink: 'syz.4.3655': attribute type 4 has an invalid length. [ 465.832031][T20533] netlink: 'syz.4.3655': attribute type 4 has an invalid length. [ 465.981689][T20523] syzkaller0: entered promiscuous mode [ 466.005699][T20523] syzkaller0: entered allmulticast mode [ 466.037064][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 466.197961][T20549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3659'. [ 466.232422][T20554] netlink: 'syz.3.3660': attribute type 21 has an invalid length. [ 466.275030][T20554] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3660'. [ 469.790401][T20554] netlink: 'syz.3.3660': attribute type 4 has an invalid length. [ 469.798519][T20554] netlink: 'syz.3.3660': attribute type 3 has an invalid length. [ 469.806742][T20554] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3660'. [ 469.851893][T20540] syzkaller0: entered promiscuous mode [ 469.857527][T20540] syzkaller0: entered allmulticast mode [ 469.906149][ T3387] net_ratelimit: 192 callbacks suppressed [ 469.906169][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.974309][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.004409][ T3387] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.024291][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.044395][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.064275][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.111078][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.157910][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.193654][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.232254][ T8914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.984528][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 473.345864][T20600] tipc: Enabled bearer , priority 10 [ 473.408925][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3667'. [ 473.427326][T20587] lo speed is unknown, defaulting to 1000 [ 473.542248][T20615] netlink: 'syz.0.3667': attribute type 14 has an invalid length. [ 473.543789][T20637] [ 473.552457][T20637] ====================================================== [ 473.559490][T20637] WARNING: possible circular locking dependency detected [ 473.566533][T20637] syzkaller #0 Not tainted [ 473.570978][T20637] ------------------------------------------------------ [ 473.577995][T20637] syz.3.3668/20637 is trying to acquire lock: [ 473.584071][T20637] ffffffff8ea5f9e0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 473.593708][T20637] [ 473.593708][T20637] but task is already holding lock: [ 473.601072][T20637] ffff88805c386560 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe62/0x2d60 [ 473.610287][T20637] [ 473.610287][T20637] which lock already depends on the new lock. [ 473.610287][T20637] [ 473.620685][T20637] [ 473.620685][T20637] the existing dependency chain (in reverse order) is: [ 473.629697][T20637] [ 473.629697][T20637] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 473.637432][T20637] lock_sock_nested+0x41/0x100 [ 473.642720][T20637] inet_shutdown+0x6a/0x390 [ 473.647859][T20637] nbd_mark_nsock_dead+0x2e9/0x560 [ 473.653563][T20637] recv_work+0x1c2e/0x1d40 [ 473.658500][T20637] process_scheduled_works+0xb5d/0x1860 [ 473.664571][T20637] worker_thread+0xa53/0xfc0 [ 473.669671][T20637] kthread+0x389/0x470 [ 473.674251][T20637] ret_from_fork+0x514/0xb70 [ 473.679375][T20637] ret_from_fork_asm+0x1a/0x30 [ 473.684650][T20637] [ 473.684650][T20637] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 473.692284][T20637] __mutex_lock+0x1a3/0x1550 [ 473.697385][T20637] nbd_queue_rq+0x37b/0x1100 [ 473.702496][T20637] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 473.708632][T20637] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 473.715523][T20637] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 473.722014][T20637] blk_mq_run_hw_queue+0x348/0x4f0 [ 473.727635][T20637] blk_mq_dispatch_list+0xd16/0xe10 [ 473.733347][T20637] blk_mq_flush_plug_list+0x48d/0x570 [ 473.739230][T20637] __blk_flush_plug+0x3ed/0x4d0 [ 473.744679][T20637] __submit_bio+0x28d/0x580 [ 473.749713][T20637] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 473.755862][T20637] block_read_full_folio+0x599/0x830 [ 473.761692][T20637] filemap_read_folio+0x137/0x3b0 [ 473.767233][T20637] do_read_cache_folio+0x358/0x590 [ 473.772863][T20637] read_part_sector+0xb6/0x2b0 [ 473.778214][T20637] adfspart_check_ICS+0xb1/0x960 [ 473.783676][T20637] bdev_disk_changed+0x817/0x1770 [ 473.789233][T20637] blkdev_get_whole+0x380/0x510 [ 473.794699][T20637] bdev_open+0x31e/0xd30 [ 473.799452][T20637] blkdev_open+0x470/0x610 [ 473.804377][T20637] do_dentry_open+0x822/0x13a0 [ 473.809650][T20637] vfs_open+0x3b/0x340 [ 473.814244][T20637] path_openat+0x2e08/0x3860 [ 473.819371][T20637] do_file_open+0x23e/0x4a0 [ 473.824403][T20637] do_sys_openat2+0x113/0x200 [ 473.829614][T20637] __x64_sys_openat+0x138/0x170 [ 473.834986][T20637] do_syscall_64+0x174/0x580 [ 473.840088][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.846489][T20637] [ 473.846489][T20637] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 473.853691][T20637] __mutex_lock+0x1a3/0x1550 [ 473.858789][T20637] nbd_queue_rq+0xc6/0x1100 [ 473.863806][T20637] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 473.869863][T20637] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 473.877163][T20637] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 473.883662][T20637] blk_mq_run_hw_queue+0x348/0x4f0 [ 473.889374][T20637] blk_mq_dispatch_list+0xd16/0xe10 [ 473.895095][T20637] blk_mq_flush_plug_list+0x48d/0x570 [ 473.901022][T20637] __blk_flush_plug+0x3ed/0x4d0 [ 473.906384][T20637] __submit_bio+0x28d/0x580 [ 473.911404][T20637] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 473.917631][T20637] block_read_full_folio+0x599/0x830 [ 473.923441][T20637] filemap_read_folio+0x137/0x3b0 [ 473.928980][T20637] do_read_cache_folio+0x358/0x590 [ 473.934608][T20637] read_part_sector+0xb6/0x2b0 [ 473.939889][T20637] adfspart_check_ICS+0xb1/0x960 [ 473.945346][T20637] bdev_disk_changed+0x817/0x1770 [ 473.950889][T20637] blkdev_get_whole+0x380/0x510 [ 473.956251][T20637] bdev_open+0x31e/0xd30 [ 473.961000][T20637] blkdev_open+0x470/0x610 [ 473.965926][T20637] do_dentry_open+0x822/0x13a0 [ 473.971200][T20637] vfs_open+0x3b/0x340 [ 473.975777][T20637] path_openat+0x2e08/0x3860 [ 473.980881][T20637] do_file_open+0x23e/0x4a0 [ 473.985894][T20637] do_sys_openat2+0x113/0x200 [ 473.991080][T20637] __x64_sys_openat+0x138/0x170 [ 473.996446][T20637] do_syscall_64+0x174/0x580 [ 474.001544][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.007947][T20637] [ 474.007947][T20637] -> #4 (set->srcu){.+.+}-{0:0}: [ 474.015057][T20637] __synchronize_srcu+0xca/0x300 [ 474.020526][T20637] elevator_switch+0x1e8/0x7a0 [ 474.025796][T20637] elevator_change+0x2cc/0x450 [ 474.031068][T20637] elevator_set_default+0x36c/0x430 [ 474.036774][T20637] blk_register_queue+0x3e9/0x4e0 [ 474.042311][T20637] __add_disk+0x677/0xd50 [ 474.047152][T20637] add_disk_fwnode+0xfb/0x480 [ 474.052343][T20637] nbd_dev_add+0x72c/0xb50 [ 474.057273][T20637] nbd_init+0x168/0x1f0 [ 474.062018][T20637] do_one_initcall+0x250/0x870 [ 474.067293][T20637] do_initcall_level+0x104/0x190 [ 474.072747][T20637] do_initcalls+0x59/0xa0 [ 474.077586][T20637] kernel_init_freeable+0x2a6/0x3e0 [ 474.083301][T20637] kernel_init+0x1d/0x1d0 [ 474.088145][T20637] ret_from_fork+0x514/0xb70 [ 474.093242][T20637] ret_from_fork_asm+0x1a/0x30 [ 474.098515][T20637] [ 474.098515][T20637] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 474.106331][T20637] __mutex_lock+0x1a3/0x1550 [ 474.111449][T20637] elevator_change+0x1b3/0x450 [ 474.116726][T20637] elevator_set_none+0xb5/0x140 [ 474.122087][T20637] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 474.128405][T20637] nbd_start_device+0x17f/0xb10 [ 474.133772][T20637] nbd_genl_connect+0x165b/0x1cf0 [ 474.139306][T20637] genl_family_rcv_msg_doit+0x22a/0x330 [ 474.145374][T20637] genl_rcv_msg+0x61c/0x7a0 [ 474.150396][T20637] netlink_rcv_skb+0x232/0x4b0 [ 474.155669][T20637] genl_rcv+0x28/0x40 [ 474.160164][T20637] netlink_unicast+0x75c/0x8e0 [ 474.165439][T20637] netlink_sendmsg+0x813/0xb40 [ 474.170777][T20637] ____sys_sendmsg+0x972/0x9f0 [ 474.176064][T20637] ___sys_sendmsg+0x2a5/0x360 [ 474.181260][T20637] __x64_sys_sendmsg+0x1bd/0x2a0 [ 474.186708][T20637] do_syscall_64+0x174/0x580 [ 474.191808][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.198210][T20637] [ 474.198210][T20637] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 474.206813][T20637] blk_alloc_queue+0x546/0x680 [ 474.212090][T20637] __blk_mq_alloc_disk+0x197/0x390 [ 474.217709][T20637] nbd_dev_add+0x499/0xb50 [ 474.222639][T20637] nbd_init+0x168/0x1f0 [ 474.227300][T20637] do_one_initcall+0x250/0x870 [ 474.232575][T20637] do_initcall_level+0x104/0x190 [ 474.238026][T20637] do_initcalls+0x59/0xa0 [ 474.242886][T20637] kernel_init_freeable+0x2a6/0x3e0 [ 474.248631][T20637] kernel_init+0x1d/0x1d0 [ 474.253494][T20637] ret_from_fork+0x514/0xb70 [ 474.258597][T20637] ret_from_fork_asm+0x1a/0x30 [ 474.263879][T20637] [ 474.263879][T20637] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 474.271080][T20637] fs_reclaim_acquire+0x71/0x100 [ 474.276535][T20637] prepare_alloc_pages+0x152/0x650 [ 474.282160][T20637] __alloc_frozen_pages_noprof+0x12f/0x380 [ 474.288473][T20637] __alloc_pages_noprof+0x10/0x100 [ 474.294102][T20637] pcpu_populate_chunk+0x182/0xb30 [ 474.299729][T20637] pcpu_alloc_noprof+0xcc2/0x19c0 [ 474.305263][T20637] xt_percpu_counter_alloc+0x161/0x220 [ 474.311350][T20637] translate_table+0x134a/0x2110 [ 474.316915][T20637] ipt_register_table+0x11b/0x320 [ 474.322445][T20637] iptable_mangle_table_init+0x41/0x70 [ 474.328411][T20637] xt_find_table_lock+0x30c/0x3f0 [ 474.333951][T20637] xt_request_find_table_lock+0x26/0x100 [ 474.340096][T20637] do_ipt_get_ctl+0x77c/0x1300 [ 474.345371][T20637] nf_getsockopt+0x26e/0x290 [ 474.350579][T20637] ip_getsockopt+0x19e/0x230 [ 474.355739][T20637] do_sock_getsockopt+0x51d/0x7e0 [ 474.361297][T20637] __x64_sys_getsockopt+0x1a4/0x240 [ 474.367020][T20637] do_syscall_64+0x174/0x580 [ 474.372125][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.378542][T20637] [ 474.378542][T20637] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 474.386280][T20637] __lock_acquire+0x15a5/0x2cf0 [ 474.391657][T20637] lock_acquire+0x106/0x350 [ 474.396669][T20637] __mutex_lock+0x1a3/0x1550 [ 474.401798][T20637] pcpu_alloc_noprof+0x261/0x19c0 [ 474.407359][T20637] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 474.413362][T20637] bpf_prog_alloc+0x3c/0x1a0 [ 474.418463][T20637] __get_filter+0xff/0x400 [ 474.423455][T20637] sk_attach_filter+0x24/0x140 [ 474.428732][T20637] sk_setsockopt+0x1fa5/0x2d60 [ 474.434010][T20637] udp_lib_setsockopt+0xbc/0x6b0 [ 474.439460][T20637] udpv6_setsockopt+0x67/0xb0 [ 474.444739][T20637] do_sock_setsockopt+0x17c/0x1b0 [ 474.450279][T20637] __x64_sys_setsockopt+0x13d/0x1b0 [ 474.455987][T20637] do_syscall_64+0x174/0x580 [ 474.461091][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.467496][T20637] [ 474.467496][T20637] other info that might help us debug this: [ 474.467496][T20637] [ 474.477710][T20637] Chain exists of: [ 474.477710][T20637] pcpu_alloc_mutex --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 474.477710][T20637] [ 474.490912][T20637] Possible unsafe locking scenario: [ 474.490912][T20637] [ 474.498343][T20637] CPU0 CPU1 [ 474.503692][T20637] ---- ---- [ 474.509051][T20637] lock(sk_lock-AF_INET6); [ 474.513561][T20637] lock(&nsock->tx_lock); [ 474.520496][T20637] lock(sk_lock-AF_INET6); [ 474.527513][T20637] lock(pcpu_alloc_mutex); [ 474.532004][T20637] [ 474.532004][T20637] *** DEADLOCK *** [ 474.532004][T20637] [ 474.540137][T20637] 1 lock held by syz.3.3668/20637: [ 474.545237][T20637] #0: ffff88805c386560 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe62/0x2d60 [ 474.554904][T20637] [ 474.554904][T20637] stack backtrace: [ 474.560787][T20637] CPU: 1 UID: 0 PID: 20637 Comm: syz.3.3668 Not tainted syzkaller #0 PREEMPT(full) [ 474.560805][T20637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.560816][T20637] Call Trace: [ 474.560822][T20637] [ 474.560830][T20637] dump_stack_lvl+0xe8/0x150 [ 474.560852][T20637] print_circular_bug+0x2e1/0x300 [ 474.560874][T20637] check_noncircular+0x12e/0x150 [ 474.560896][T20637] __lock_acquire+0x15a5/0x2cf0 [ 474.560915][T20637] ? do_raw_spin_lock+0x12b/0x2f0 [ 474.560935][T20637] ? lock_acquire+0x106/0x350 [ 474.560954][T20637] ? pcpu_alloc_noprof+0x261/0x19c0 [ 474.560975][T20637] lock_acquire+0x106/0x350 [ 474.560990][T20637] ? pcpu_alloc_noprof+0x261/0x19c0 [ 474.561015][T20637] __mutex_lock+0x1a3/0x1550 [ 474.561031][T20637] ? pcpu_alloc_noprof+0x261/0x19c0 [ 474.561051][T20637] ? udp_lib_setsockopt+0xbc/0x6b0 [ 474.561068][T20637] ? udpv6_setsockopt+0x67/0xb0 [ 474.561086][T20637] ? do_sock_setsockopt+0x17c/0x1b0 [ 474.561101][T20637] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 474.561116][T20637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.561132][T20637] ? trylock_stock+0xac/0x280 [ 474.561150][T20637] ? lock_acquire+0x106/0x350 [ 474.561165][T20637] ? trylock_stock+0xac/0x280 [ 474.561182][T20637] ? pcpu_alloc_noprof+0x261/0x19c0 [ 474.561203][T20637] ? __pfx___mutex_lock+0x10/0x10 [ 474.561218][T20637] ? unlock_stock+0xc2/0x250 [ 474.561238][T20637] ? unlock_stock+0x12e/0x250 [ 474.561255][T20637] ? obj_cgroup_charge+0xa4/0x150 [ 474.561279][T20637] pcpu_alloc_noprof+0x261/0x19c0 [ 474.561299][T20637] ? rcu_is_watching+0x15/0xb0 [ 474.561318][T20637] ? __kmalloc_cache_noprof+0x31c/0x660 [ 474.561340][T20637] ? bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 474.561354][T20637] ? __kmalloc_cache_noprof+0x15b/0x660 [ 474.561375][T20637] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 474.561397][T20637] bpf_prog_alloc+0x3c/0x1a0 [ 474.561411][T20637] __get_filter+0xff/0x400 [ 474.561433][T20637] sk_attach_filter+0x24/0x140 [ 474.561453][T20637] sk_setsockopt+0x1fa5/0x2d60 [ 474.561467][T20637] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 474.561491][T20637] ? __pfx_sk_setsockopt+0x10/0x10 [ 474.561504][T20637] ? futex_wait+0x2a2/0x390 [ 474.561550][T20637] ? __lock_acquire+0x6b5/0x2cf0 [ 474.561572][T20637] ? aa_sk_perm+0x6d5/0x900 [ 474.561592][T20637] udp_lib_setsockopt+0xbc/0x6b0 [ 474.561610][T20637] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 474.561628][T20637] ? __fget_files+0x2a/0x420 [ 474.561645][T20637] ? aa_sock_opt_perm+0xff/0x1a0 [ 474.561667][T20637] udpv6_setsockopt+0x67/0xb0 [ 474.561685][T20637] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 474.561702][T20637] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 474.561725][T20637] do_sock_setsockopt+0x17c/0x1b0 [ 474.561742][T20637] __x64_sys_setsockopt+0x13d/0x1b0 [ 474.561759][T20637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.561774][T20637] do_syscall_64+0x174/0x580 [ 474.561789][T20637] ? trace_irq_disable+0x3b/0x140 [ 474.561811][T20637] ? clear_bhb_loop+0x40/0x90 [ 474.561827][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.561842][T20637] RIP: 0033:0x7f5a2ff9ce59 [ 474.561856][T20637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.561870][T20637] RSP: 002b:00007f5a30ea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 474.561887][T20637] RAX: ffffffffffffffda RBX: 00007f5a30215fa0 RCX: 00007f5a2ff9ce59 [ 474.561900][T20637] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 474.561909][T20637] RBP: 00007f5a30032d6f R08: 0000000000000010 R09: 0000000000000000 [ 474.561919][T20637] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 474.561929][T20637] R13: 00007f5a30216038 R14: 00007f5a30215fa0 R15: 00007fffae4e76a8 [ 474.561946][T20637] [ 474.941146][T20626] net_ratelimit: 141 callbacks suppressed [ 474.941167][T20626] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.974533][T20625] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.006583][ T8911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.019086][ T2174] tipc: Node number set to 1140897202 [ 475.025822][T20642] x_tables: duplicate underflow at hook 2 [ 475.034132][T20626] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.042569][T20626] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 475.154164][T20621] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.163204][T20621] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 475.285146][T20629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.293501][T20629] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 475.414184][T20629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.004603][T20632] net_ratelimit: 81 callbacks suppressed [ 480.004629][T20632] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.018205][T20632] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 480.135982][T20632] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.143849][T20632] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 480.264327][T20632] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.272141][T20632] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 480.384272][T20628] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.392164][T20628] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 480.504189][T20632] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.512199][T20632] bond5: (slave ip6gretap1): failed to get link speed/duplex