last executing test programs: 34.694539565s ago: executing program 3 (id=5855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) r2 = socket(0x1, 0x80802, 0x0) unshare(0x8000400) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18021f7716d7f95e2b52bb3bfceb455e650000000000800000000001000000850000005300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$l2tp(0x2, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) connect$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, 0x1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x1411, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) splice(r1, &(0x7f00000000c0)=0x80, r4, &(0x7f0000000140)=0x6, 0x101, 0x8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@private=0xa010100, @in6=@private2, 0x4e20, 0x4d1, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0x11, r8, 0xffffffffffffffff}, {0x3, 0xa3, 0x6, 0x2, 0x2, 0x8, 0x0, 0x1c00}, {0x4, 0x18a, 0x0, 0x10001}, 0x9, 0x6e6bb9, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x4d6, 0x33}, 0xa, @in=@multicast2, 0x3505, 0x3, 0x1, 0x9, 0x2, 0x7d2, 0x6e07}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000ea0f00ffff25bd7000fddbdf254747000051a24da075d95c97d849631b330daee6dbb12cd10e5d33592deff2a74d85725bf190454b45a049a0a761e2581df228d1c805057c37849300", @ANYRES32=0x0, @ANYBLOB="320a050004000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 34.413859413s ago: executing program 3 (id=5856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x15, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000006000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09001a0000000055090100410000009500000000000000a50002000000005a4235dd5fcf1bfa16b402dd4317a4007d90f8ff00000000bf91000000000000b702000003000000850000002a000000b7"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x27}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}}, 0x8001) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000360007012abd700000000000017c00000c00018008000600", @ANYRES32=r4, @ANYBLOB="0c00028008002300", @ANYRES32=0x0, @ANYBLOB="58e2d9ad1fe46dd9eb83090033e6f8b000009e6454e04bf189aae67501baeaed53f1b90efed2"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000000000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000000040)={&(0x7f0000000200)={0xa, 0xa, 0x100003, @local}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) 32.15386589s ago: executing program 3 (id=5866): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000001440)=@ethtool_perm_addr={0x4b, 0x1d, "448d389f70d679d21a50a3831682cc6597a4a4ca4d08f8dd8b3f9fdd99"}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25200000000c002d80050001002251000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x810) r6 = socket$kcm(0xa, 0x3, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fc}, 0x94) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='5H\x00\x00', @ANYRES16=r2, @ANYBLOB="10002bbd7000fedbdf251300000008000300", @ANYRES32=0x0, @ANYBLOB="05001a000100000005001a00000000000c000600030000000000000008000300", @ANYRES32=r7, @ANYBLOB="0c0006000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000001) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x28b0, 0x2c, 0x300, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x2884, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x4, 0x6}}, @TCA_U32_SEL={0x124, 0x5, {0x4, 0x8, 0x1, 0x4a, 0x5, 0xb2c, 0x9, 0xa05, [{0xfffffffa, 0x8000, 0x2, 0x1}, {0xf2d, 0xa, 0x10, 0x8}, {0x0, 0x3ff, 0x10, 0x5}, {0xfffffffa, 0x2, 0x6, 0x2}, {0xffffffff, 0x6, 0x5, 0x1}, {0xffffd843, 0x7, 0x8001, 0x7}, {0x1, 0x80, 0x6, 0x7fff}, {0x11680ac1, 0x1, 0x9, 0xffffff00}, {0xfb49, 0x0, 0x8005, 0xfc000000}, {0x3, 0x0, 0xffff, 0x4b5}, {0x2, 0x57, 0x200, 0x2}, {0x4, 0x1, 0x9a6, 0x4}, {0x8, 0xda2, 0x0, 0x9e64}, {0x7fffffff, 0xef, 0x1}, {0x5, 0x3, 0x7, 0x4}, {0x8, 0x6, 0x40, 0x10000}, {0x4, 0x1, 0x401, 0x4}]}}, @TCA_U32_ACT={0x28c, 0x7, [@m_nat={0x288, 0x11, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3362, 0xe, 0x8, 0xffffffff, 0x7}, @dev={0xac, 0x14, 0x14, 0x15}, @remote, 0xff0000ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x6, 0xffffffffffffffff, 0x7, 0x81}, @empty, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffff7, 0x4, 0x400, 0x8}, @local, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x5, 0x0, 0x4, 0x1}, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0xf}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x81, 0x4, 0xffff0001, 0x9}, @loopback, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x84fb, 0x20000000, 0x1, 0x9}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x74, 0x7, 0x9, 0x80000001}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0xffff, 0x4, 0x94b, 0x99c7}, @loopback, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x401, 0x6}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x1}}]}, {0xf5, 0x6, "24e116f8c6c025aa967193f9e145e1b0c8421cb5ea8a8ef72308553976de76ac4d44c57614805ebfc23a3125d65bf1c439f856fb4285ce20688ec8fde3cb97bd0303a5babf76e6f8b9f3e63811ade68177772a9a0c7a3ba6ed98fdcd5c3be452ab4dd7f9605adcfb8c2c129fce8fdaa11991f2bdb1f192686d6c9a2b12674e35d98d685a9ee8979ab421331c5502fcdbc935eaa18efcac24a6dd5762dfa8e160c5314c5ffe391ca822eb19c88cbc7635e91af95ecf51302da467ecf0d8ec120169b83450a0e99c25e9fb5c6ceb7cb2492e0ad488ab9bea1a9a4369848d457d11be1dacd95528a15639c318381f1be8cd3c"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_U32_ACT={0x24a4, 0x7, [@m_gact={0xe4, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0xb8, 0x6, "0689404775201948812798ef4bcac59676faad9353cbfe080330eb2e2d69d6452ff04adc36ed08cc3503e7dcc17a7dcd766187144eb9f1366128afa4ce5f9ef9c70085ac003d25de6aa19f96b009058dff6119611615aad1879ca8e3cea2da4421516925c9b2051760ce31fd6382f4a9c598cea8f830a94419c5c875e346de9d3d25a94c5a45747eac3d71f79cfcb1f7ef8537a7418001cc027d61deee1f840c7265875dd343ff390caf4ad2c80e09377cae8a20"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x130, 0x20, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x3, 0x5, 0x2}, {0xa, 0x8, 0xff, 0x4}]}]}, {0xf1, 0x6, "0e688c91756840ec86821f8419ec3370b02104551fd0aafe2ad2caa8a59849e55002b9b115d566da20ff60d6ec0f2d6bb56577acc3c70a50f3fa16aa732c5359c5c9ebc1a03daddf8a8a853ede26a254a131a99765b8115f664200b09c54dcadc2ca25131d95be9f594bdde3c78bac32c52a940afc561b12034c502cf1b6e07e0ebc2f049c3b77168bebec0a36165b9469588d93667e81ac5d8e85c6e7f88fdd7e2336e1e536e537345f876ec74a0a1186c4ea1dfa6232a0c70ad151e9f65c08ecd44231d9f55e90cbbc29ce8821be6e0a9e3d7f06a3b39e2058b7de94453c5b25186255e0a5b9af0c058cc6e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x1084, 0x19, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x6, 0xffffffffffffffff, 0xe4a, 0xe52}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x74, 0xfffffc00, 0x7, 0x401, 0x3}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x19, 0x7, 0x3889}, 0x78}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xb8, 0x18, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0xa5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x19}]}, {0x63, 0x6, "dd942b912fca63003fdd24ad9414a06e2740f58d31cb58d9893273098f3ec47409f16a4d97ffe9b0df52e3bdf5284877e5aba7d5bceb6923826c4ece3787b327a9ef888520b4ae27ba3f65640169b9bc7a7b9075c1f4db9f6e1c70a0fbd192"}, {0xc}, {0xc, 0x8, {0x3, 0x4}}}}, @m_xt={0x10e0, 0xd, 0x0, 0x0, {{0x7}, {0x10a4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x102a, 0x6, {0xfffa, 'raw\x00', 0x6, 0xff, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x15, 0x6, "457018d38209f4806bafa2cdf097e4686f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x70, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf0, 0x4, 0xffffffffffffffff, 0x8, 0x3}, 0x1, r9}}]}, {0x21, 0x6, "dad233affab195006ff98fe218c52faa3b3d60c4d68a2dd09ee9007dc2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4b}, @TCA_U32_INDEV={0x14, 0x8, 'pimreg\x00'}]}}]}, 0x28b0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 31.40593954s ago: executing program 3 (id=5871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e", 0x6}], 0x1}, 0x20000001) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2001) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9dffa8880700000024001280090001007f00726d00000000140002c0ffffffffffffff0008000200250000000a000100aaaaaaaaaa2b0000"], 0x50}}, 0xc080) 8.86160794s ago: executing program 0 (id=5952): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc090000000000004509010000200000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000070100005eeaffffb702000008000000b7030000dc0000008500000006000000b7080000000000007b8af8ff00000000b7080000392200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0020000000000000b70500000800000085000000b2000000bf9800000000000056090000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.662041878s ago: executing program 0 (id=5955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f00000000c0)) (async) socket$can_j1939(0x1d, 0x2, 0x7) socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) pipe(&(0x7f0000000580)={0xffffffffffffffff}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r2, &(0x7f0000001800)=[{&(0x7f0000000100)="a1534708a9f581836bad46", 0xb}, {&(0x7f0000000300)="aecf98312e5f91402e72326a1adbb996135338a28651c6bc333b6fcb7b464e1f4763d789222d14fc844afd1ac2af1f5891d894d4239b8c2f33c425fdeaed03bd46e7399c9e7a23c2f4db5a116334917d1d9f5e4c191f6a209a1c1bf4f587aeae6d2215a14455d7dd611d", 0x6a}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="8e1705786e7d85ec74a7d99088cc", 0xe}, {&(0x7f0000001600)="3f194e03dedecade65ce84d3c98193f9dacd57e2ebd7f35bdbf8eacfa44a6e2530c6c91216f62bdb0f1e3ef3f96478283e150222d14d6d3cf9935e3d326127cf9e76345a4c834bfe4cf7b0a89294586222649d57c7ae8b64f3ea0d77d38f9cd6fb0e1bd3895d8da8f2a20cb5793ec933046576064fbed9f3ae997fdab81e2703eb571c73f76ef9f71a0046485e0d0c18b7ec6e6aa0cb450b4047d2789cb928da50246df0fa694968c6", 0xa9}, {&(0x7f00000016c0)="d448d9a0d959b1324d6471e9fe512802d46fc4bb4b5a8419002b49060e3f94503ec8e7a6f5a96f520d09757bb3daf17ac78784ed6e4f1519760df4859c5cf65940deb83d0bab8f9c1c043a6e5bd09d8e77545c859307e407e8bdbee6db9b1719a3ed41963c3b36808b7a8f713c5481fdcc", 0x71}, {&(0x7f0000001740)="d93de8c146bc87c3fd01c66b77a3f211100108d488ac467096624d6a99cd73e120b5a4241c90e3bca81ef749b1897db0136621785343f6a13a763fe246c7c4770e6c83ce4f3b4df34cb5ae9dc2fd8bab3f2db4b2dd9ac7068f8779d2f0760c48344403753df3a1d5dd6fa4e038", 0x6d}, {&(0x7f00000017c0)}], 0x8) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)="3e854a087ea7b41fb9c2cef4a50af973ffcfcfccb9e094c034318335a39d535c70dec53e526967f15f0b95034ec9371c207dc3f2b59ca8fbcf9e0679b956256d331e14140fa325f64d03f568206fa584b3054a8a3337d8c65c4d764d18acc627361db396fbd46472392494ae", 0x6c}}, 0x4008080) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x20000, 0x4) (async) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, r0) 8.257100557s ago: executing program 0 (id=5958): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6f95bac5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x5) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x7}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000480)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1b, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @ldst={0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0x5, 0x100, 0xffffffffffffffff}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x29, &(0x7f0000000280)=""/41, 0x41100, 0xc, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000340)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xd, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r0, r0, r8, r1, r0], &(0x7f0000000640)=[{0x0, 0x2, 0xa, 0xb}, {0x3, 0x5, 0xa}, {0x1, 0x2, 0x8, 0x9}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x10000}, 0x94) 7.832574179s ago: executing program 4 (id=5959): syz_extract_tcp_res(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x9, 0x7) syz_extract_tcp_res(&(0x7f00000003c0)={0x41424344, 0x41424344}, 0xa, 0x40) syz_extract_tcp_res(&(0x7f0000000140), 0x3, 0xff) (async) syz_emit_ethernet(0x10d, &(0x7f0000000900)=ANY=[@ANYBLOB="00000000ff00670000090690780a0101010a0101004424b5b30a010102000000030a01010291d5dfe0b57e171aff251b000000070000000080000001ac1414aa00000006440cdd80ffffff01000007ff01071be9ac1414bb0a010102ac1414bbe0000002e0000002e000000400040ee84e224e231e8acdcf13cde64c03195d231ee39f286c670acd29c3c964d743a30533e6f0b92f35b0fc56b7889b00007bcaa758628831f66de14d762ff130b81dfc06123a23d98409b13cb6fbc996b3d5413f760f2ec843b97e0a40bdbd661ccd853b47936393f819f286d6b3a8be", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="604000029078fa6813128e73bb6513ad4d9e1d849d5a4f08c776130e473bd3b563d1081f9558d7ba040213120ea569363ea953c816a12531cafe45de0303081e0c180ca0fc0000f90f000000939b9d6dbab312a12749142d553eeca758a932d2bb70aaf043ee38f151b0146644356b14190b5c4c046353254c99542a622668a56492e84c43ec693383fa1df2748bb8"], &(0x7f0000000780)={0x1, 0x4, [0xa2a, 0x553, 0xb3b, 0xf8d]}) (async) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x3b3, &(0x7f0000000500)={@remote, @broadcast, @val={@val={0x88a8, 0x4}, {0x8100, 0x5, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, "f8d8da", 0x375, 0x6, 0x0, @private1, @private0, {[@dstopts={0x29, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private2}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x3, [0x423, 0x5, 0x2]}}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x78, 0x3}}, @enc_lim={0x4, 0x1, 0x4}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x3, 0x14, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x37}]}, @srh={0x21, 0x4, 0x4, 0x2, 0x28, 0x10, 0x931c, [@local, @loopback]}, @srh={0x2f, 0x8, 0x4, 0x4, 0xe, 0x8, 0x4, [@mcast2, @private0, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}]}, @srh={0x6, 0x8, 0x4, 0x4, 0x5, 0x50, 0x8, [@ipv4={'\x00', '\xff\xff', @remote}, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x3b, 0x6, '\x00', [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x0, 0x19, "0d26ca5046cc59527f0a1ad8763796e8576c791a4f4db5143c"}]}, @routing={0x2, 0x2, 0x3, 0xf1, 0x0, [@remote]}, @srh={0x2e, 0xa, 0x4, 0x5, 0x4, 0x0, 0x2, [@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @dstopts={0xff, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x7, [0x1, 0x5, 0x6, 0xe, 0x5, 0x80000000]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x2, [0x0, 0x1000]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], {{0x4e24, 0x4e24, r1, r2, 0x0, 0x0, 0xf, 0x20, 0x4, 0x0, 0x3, {[@window={0x3, 0x3, 0xfb}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x6, "0a52f708"}, @window={0x3, 0x3, 0x2}, @window={0x3, 0x3, 0x81}, @timestamp={0x8, 0xa, 0x25, 0x26f}, @window={0x3, 0x3, 0x4}, @exp_smc={0xfe, 0x6}]}}, {"3a6e3403c7db6ea0455b615d3f10555b8b386edaf17f4c7a81830fd3fe3c6ee5105901f9c4a9f2ebe133d9665f91eda58f13b73544a13247d00c9457d1c45d1f0e4b72183d508bcd9644e8d5b3e02c637fc01938178dae3295d1c336820c9510e5f49418f2034822c7a87efc5a3027bbbb770bf2e013208e90cd08ffd5bf5ac8a68c2c9da2048fefcde154492f5716cf3ac02523d82bdd05b2e27a2ebbdc79cbfe11ac421afb211373abdebdc672506121791998cde585e292"}}}}}}}, &(0x7f00000008c0)={0x0, 0x2, [0x559, 0x321, 0x6ff, 0x3bf]}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_extract_tcp_res(&(0x7f0000000180), 0xd, 0x7fff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000000000000100008409010000040000000100000001000000003000305f"], &(0x7f0000000f40)=""/4079, 0x37, 0xfef, 0x8}, 0x28) (async) r5 = socket$unix(0x1, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x52, &(0x7f0000000040)=0x27, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) recvmmsg(r9, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x80000010}], 0x1, 0x40008160, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 7.703056039s ago: executing program 1 (id=5960): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x150}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x753, 0x7}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 7.389408893s ago: executing program 1 (id=5961): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e40025000000180004000400ad000200000000000006040000000000f9313200"/57, 0x39}, {&(0x7f00000000c0)="70c25c8ada238357a0017e35ba53b750151a4fee1696870ffc1be76678ab6e731e426c14090032d8b94244e6c78281562a9ef859344877c014961fc52b6be6d2aea1bc5a060f75bdfdd9da2f022eeeb18b79cc657093a74c6f67e64db5a50d00006adf5badc44f8dee0cf5a6b1e842b4768ab794e30000", 0x77}], 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000040)="3d31b46776281841ef88676686ddbc", 0xf, 0x4008000, &(0x7f0000000080)={0x11, 0x11, r5}, 0x14) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000}, 0x40014) 7.260862704s ago: executing program 2 (id=5962): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="b1e4e04c972506bea864bb694241b5fc01335a61f8985040a8393767db21e22b7c8c1d3adfc15bb7ce154d2769e57256619e9125c6006effb561dc605abc926f7b096c4972256019aaf3aa25a6b39c42beefa42eb62715606a584b5fd7e9177af09ad992dd21e0f2601207034381e0379669f20f285af0e9c151de219b81e709ddb49c8bcd05", 0x86}, {&(0x7f0000000000)="1b", 0x1}], 0x2}}], 0x1, 0x24008094) r3 = socket$inet(0xa, 0x80000, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff3}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) listen(r3, 0x28) r5 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4008015, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 7.242928048s ago: executing program 4 (id=5963): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)="f3d34c328eb9fb9244", 0x0, 0x1006}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) recvmmsg(r0, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/216, 0xd8}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000008c0)=""/29, 0x1d}], 0x1}, 0xc}], 0x2, 0x1, 0x0) 6.915615359s ago: executing program 4 (id=5964): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc090000000000004509010000200000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000070100005eeaffffb702000008000000b7030000dc0000008500000006000000b7080000000000007b8af8ff00000000b7080000392200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00f1000000000000b70500000800000085000000b2000000bf9800000000000056090000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.801196489s ago: executing program 4 (id=5965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4}]}, 0x10) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) (async, rerun: 64) ioctl$TUNSETTXFILTER(r2, 0x401054d5, &(0x7f0000000000)=ANY=[]) (async, rerun: 64) r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000480)={@val={0x70, 0xe843}, @void, @ipv4=@dccp={{0x30, 0x4, 0x1, 0x7, 0xd8, 0x64, 0x0, 0xb8, 0x21, 0x0, @multicast2, @remote, {[@timestamp_prespec={0x44, 0x3c, 0x57, 0x3, 0x3, [{@loopback, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x3}, {@rand_addr=0x8, 0x7}, {@loopback, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010100, 0x4}]}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x1, [{@private=0xa010101}, {@broadcast, 0x10}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_prespec={0x44, 0x3c, 0x58, 0x3, 0x9, [{@broadcast, 0x7}, {@local, 0x9}, {@rand_addr=0x64010102, 0x8001}, {@loopback, 0xffff0001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x97}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x1ff}, {@broadcast, 0x2}]}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x56, [@broadcast, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0xc1}]}}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, "b7847e", 0x6, "b7e89b"}, "5b0a7cb27502ed9a"}}}, 0xdc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r8], 0x448}}, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x54617, 0x20a3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.3170367s ago: executing program 1 (id=5966): syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket(0x2d, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x1}, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000240)=@generic={0x2d, "0000080118000200000000000000001000000000000000000000000000f860c9e3bf460000000000000000000000000000000000000000000000209a00000000000000000000a76700000000000000007d000000000000000000200000008000"}, 0x80, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000c14010025bd70392f04382508003d000000000008000300000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x399821627d541aa3}, 0x4004020) close(r6) r8 = socket(0x15, 0x5, 0x0) getpeername$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r9}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYRES16=r7, @ANYRES16=r6, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 3.348755352s ago: executing program 2 (id=5967): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x303040, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000003c0)=0x8) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x3, @remote}}}, 0x32) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) 2.972099987s ago: executing program 2 (id=5968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428e06800fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES16], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2400c0d4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x80}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xa, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x4, [{0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x40000008, 0x8}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r4, 0x0, 0x40000) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0x800) close(r7) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0106081071e8756", @ANYRES16, @ANYBLOB="01000000000000000000350000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x64}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f80dbffa540b403da3ccb732d5b32d7ca3e7964d3736a80e1e0cce108d8caf3992f1b35247d85163802548e0ff626d1f153ecc06317ed39a6333609d579b051f63bd9e959285442232d36000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 2.967826546s ago: executing program 0 (id=5969): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)={0x24, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str=':*b\xc3{\x00'}, @typed={0x8, 0x1f, 0x0, 0x0, @fd}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0xc}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0xc}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r2}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r2}, 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') (async) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x21dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x21dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="031802002315040028001280090001007665746800000000180002801400010000000000", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x40054d0}, 0x40040a0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="031802002315040028001280090001007665746800000000180002801400010000000000", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x40054d0}, 0x40040a0) connect$can_bcm(r5, &(0x7f0000000080)={0x1d, r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000e00abe121c80bda93acf00000000000010000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000009c78010000000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.837633239s ago: executing program 1 (id=5970): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000042010200280012800b0001006970366772650000180002800400120006000300800000000600020000400000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) 2.781952265s ago: executing program 4 (id=5971): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) unshare(0x22020600) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$key(0xf, 0x3, 0x2) (async) sendmmsg$inet6(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f852", 0x2}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380), 0x8) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) (async) r5 = epoll_create1(0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b00400000000000000300001a0000000008000a00010000000800010001"], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x8}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close(r8) 2.572599605s ago: executing program 1 (id=5972): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f00000003c0), 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) socket$packet(0x11, 0x2, 0x300) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) 2.08535567s ago: executing program 4 (id=5973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x7, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="700005000d000000ffffaaaaaaaaaabb08004500459b00000000002f9078ac1e00b6002c542f80a554b61d599434ab6a01e0001101000000"], 0xfdef) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000001c0)="587be18aaee4ed7d426fd2199a2ab4074a1b7c67eff5da6e9c904d3457fd31c2ecbc1d92704d7a1e5a1a8d796b2411e4312ac59c84516050f7d0f5a95688236d2e4a0a990179e080949dc5ba945db914612e7e9b5bf0ea08a750c94ceecc5285c7294761", 0x64}, {&(0x7f0000000500)="f46126061ef04dc8c77b5d9bfec595b3aed8b834a62b0e871ec14f8d0f6b6cec78aaf498b916d6d979b045f346c78d5bd2d107be7501ba69aea7e6155c8c0ac49b5090731f84fde5832771c0d79512a323266095168b607e68d23624a7e27aeb12b85d4758501633122574eb89481dee9769a0c2b84f8110d1b5fd59876271fb65cc561ab7f7877d330170c7e675aac2841d082b7d3b98be12169b26b766be687224ff6a6d37d323", 0xa8}, {&(0x7f00000005c0)="d3153e7cb7333cd23b1ea9ec5102a82c7de773e3ceb8e3c5e04cc3d7e5be89b6dc9786accde8c0bece2d32d229d41b6b3162c9c029a527836e224e77686bac4b693fc48b8d91f46debb4f63f62c0362d70cf6e258ff74b48e1e0ebb8d4df9ce5d644e866a97a61388deb92ca1fb7e308760f49c5e548703968ddee5192d02d1a4763ed49a5dc8c8967037a2691c952d509b5317ce8f69a28b8d38eb67e53d49c01bbe3c8b9e5aeb5535fff85471901a1a0934d97f37989fbfd7cc6a6b5a44432efd2bb65c00ec7113c682a5eeb7f8f33e8", 0xd1}, {&(0x7f00000006c0)="0a27e951a1a3238214d7b55d4d78b283324c70748652894659a87c173bf994a8ff0daf89f217d4bdfeb8bb0410ddb8921397f2ca54218a9067580726d5120088e67b3a786464960a8d9fc2c4b76488a51bcc93a9b8293c0f99996597e1b50bf971a8408cef4c0fd5169a7f55dca3dd26bd4b61f8a9628ab3dbc0e78ed51724b2", 0x80}, {&(0x7f0000000740)="c6", 0x1}, {&(0x7f0000000a80)="ab47addcb2945fc449932b87997d38dd1d7ac19cba78469162840394eeb1f80fa3af51e2a9a5fa61a915dc1865e2be6612bfc11b37b448ddcdca3a7a5143fc60343af2f8d07064a51c8590466474a7a0e03b457c1cfda3b18cbc1a0bb5d443acc84cc2769da066280045cc31bea2298b4dc476f3d2425a3fa7dd6b025fca523f03d89cc4827aafd54652dc2fa8c7a35d8c30bbbdcabada82761e83dde4930b4f6eca801a3defd10c37cc256e449f7d785325d0eedfacf357a3a5ccf53922a538bea38cccf3b01d30ee1f4f1bfd30b3e5a7db429c1c4b1ad6840ae823ae60b0", 0xdf}, {&(0x7f0000000b80)="9a092d7e575fcd7d8fb16c092be5cde82d36a60d43624599e24acc66e036ad0f9892baa31394dce545a33ce52f7130adefda5a9a0843930177f067e54010c3dc0378", 0x42}], 0x7}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000a40)={&(0x7f00000002c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x1a8, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x11}, 0x0) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @remote}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="1803000019000000000000000010000085100000060000001800000000000000008a5c0540000000650000000000000018000000000000000000000000000000950000000000000074030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.865954369s ago: executing program 0 (id=5974): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b000000080003000c56abfbbcf3984c76d5608877154fb589e5a93d51690f32535b604c4965813e7c4a9dbde528cb8cc288", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) gettid() sendmsg$unix(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="24aa69ddde8a02001fa900abd066f6efc40de50001000000", @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x20008000}, 0x4000080) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0xfff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xf, 0x4}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000001d0000611909000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.717795908s ago: executing program 2 (id=5975): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="3d00cee3a17e78d56c0315bb6ad2147c3671bf87ba0d07007d943f4ac5f0d0cb1835e92284777386d1e15cf1efb2"], 0x20, 0x40044}}], 0x1, 0x20008801) (async) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="7f", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000280)) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x2cce7000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x7, 0x200, 0x1, 0xa5e, 0x40, 0x10001, 0x9, 0x0}, &(0x7f00000000c0)=0x20) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000700), 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}], 0x1, 0x931766f6159e6d55) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r5, 0xe}, 0x8) (async) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000100)) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x20000000) 1.162232323s ago: executing program 3 (id=5874): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001080)={r1, 0x9}, &(0x7f00000010c0)=0x8) r2 = accept4(r0, 0x0, &(0x7f0000001100), 0x80000) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001140)={r1, 0x9, 0x3, 0x5ed}, &(0x7f0000001180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000011c0)={0x8, 0x8203, 0xa6d, 0x3, r3}, &(0x7f0000001200)=0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0xa, &(0x7f0000001240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xc, 0x8, 0xa, 0xffffffffffffffff, 0x4}], &(0x7f00000012c0)='GPL\x00', 0x5, 0x12, &(0x7f0000001300)=""/18, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001380)={0x4, 0x6, 0x200, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000013c0)=[{0x4, 0x3, 0x6, 0x7}, {0x2, 0x5, 0x8, 0x8}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r4, 0x0, 0xd1, 0xd4, &(0x7f00000014c0)="5244275ad4f68ebfb12a14a3312e242c042e6e607ff2840cc91bb02f4d63b4df1f0f249162465f7fad947db9fb9abc1361d2d1d04ddc8455bdc62461c738378291968bee86feeec8d2caf15360555951b9acad9b2b504bddebdf4ef9047ad80593b9ae1e2526be81b562826982285117587edaa75d928bbadd0d5fbe6b0d28ff38943a33b3b07309d619bff15a03b86d7b8219ad7f93a5fa37a1d4005a19ad7c1699f8ccd4566b1ad9a11c463ba61dfb0f3d9e6bd26b5e247f7d1f140e94bbeb5d6925cdb41622a5deaf8617ed48e9bc89", &(0x7f00000015c0)=""/212, 0x4, 0x0, 0x0, 0xe2, &(0x7f00000016c0), &(0x7f0000001700)="8799813f7d447cab3f11e74608fcb941a65c2d79c7c719e813c52f7031fe8ecbba6cb6ff876083704e45499c816762fb56c7df1511f50e349cd461d66bcc4a30a90695aa7178ed6cfc19c84260dffeb3f98e9d1bb9c6146bc2f1aa14b017d547d1797b55ab61258217358ec6134b12b09ecf21ae10121e5f4e6d326391b6d1acb243491e8b6ecd2d1865854edbb19b71a2ac0b8a08ee8ae732ac1fd7040161de761eb9ce0c09057cd0b3f2433d1d9a013e7ae6bce44d58ee2c924347f9b6582e79c67ad1e70c6c9ebba777bc46a34b8a387b0f0728e12b4b9b69a2e73b7fad4b9c79", 0x3, 0x0, 0x3}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x58, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001b80)={'batadv_slave_1\x00', 0x0}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001bc0)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c80)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xd2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x1c, &(0x7f00000019c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x6, 0x0, 0xa, 0x8, 0xfffffffffffffff5}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001ac0)='syzkaller\x00', 0xfffffff8, 0x7c, &(0x7f0000001b00)=""/124, 0x40f00, 0x4e, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001d80)=[r7, r8, r4, r9], &(0x7f0000001dc0)=[{0x1, 0x3, 0xa, 0x2}, {0x2, 0x4, 0x4, 0xb}, {0x2, 0x3, 0x7}, {0x1, 0x4, 0x8, 0xa}, {0x5, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x2, 0xa}, {0x1, 0x1, 0x9, 0x8}, {0x3, 0x3, 0x10, 0x3}, {0x4, 0x5, 0xf, 0x3}, {0x3, 0x5, 0x9, 0xc}], 0x10, 0x9}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000001f40)={0x5a}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001f80)) r11 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001fc0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000002000)={'c', ' *:* ', 'r\x00'}, 0x8) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_devices(r11, &(0x7f0000002040)={'b', ' *:* ', 'rw\x00'}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0) getsockopt$bt_BT_RCVMTU(r12, 0x112, 0xd, &(0x7f0000002080)=0xa33, &(0x7f00000020c0)=0x2) setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f0000002100)={{0x33, @empty, 0x4e20, 0x3, 'dh\x00', 0xe, 0x3, 0x7}, {@multicast2, 0x4e23, 0x2, 0x0, 0x6, 0xfffffff7}}, 0x44) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000002dc0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002d80)={&(0x7f00000021c0)={0xbb8, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x1}, 0xbe, 0x9, 0x1, 0x9, 0x1c, 'syz0\x00', "3938138099eea5bd7629df04cd212f102db26e5678a3f25d202d6a603116d902", "734d2a63fff9a2dafb9acaf4099236d8cfd55c71e965d7dd52c190f330e20f40", [{0xbc6, 0x3, {0x2, 0x2}}, {0xe, 0x0, {0x2, 0x2}}, {0x7, 0x539, {0x2, 0x6}}, {0x0, 0x3, {0x2, 0xfffffffb}}, {0x6, 0x1000, {0x0, 0xff}}, {0x6, 0x9, {0x2, 0x33c}}, {0x6, 0x7, {0x2, 0x7a}}, {0xe6, 0x0, {0x0, 0x3}}, {0x6, 0xd, {0x2}}, {0xe, 0x0, {0x2, 0x7ff}}, {0x401, 0x5, {0x0, 0x4c1f}}, {0x958c, 0x0, {0x2, 0xbcf}}, {0xff89, 0x1, {0x3, 0xffff}}, {0x2, 0x2, {0x1, 0xb773}}, {0x3d0, 0x400, {0x0, 0x5}}, {0xa, 0x7, {0x0, 0x5}}, {0x6, 0x4, {0x0, 0xd}}, {0x3, 0xcf2, {0x0, 0x4}}, {0x6, 0x5, {0x2, 0x2}}, {0x289, 0x1ff, {0x1}}, {0x7, 0x3, {0x3, 0x1}}, {0xfce, 0x4, {0x1, 0x7ff}}, {0x5, 0xa, {0x2, 0x91}}, {0x2, 0x1, {0x2, 0x8}}, {0x6, 0x1ff, {0x1, 0xb142}}, {0xfff9, 0xfff3, {0x0, 0x5}}, {0x6, 0x71, {0x3, 0x8001}}, {0x8, 0x3ff, {0x0, 0x3}}, {0x9, 0x5, {0x1, 0x5}}, {0x3, 0x7, {0x2, 0xf9d}}, {0x3, 0xb, {0x0, 0xd1ae}}, {0x3, 0x8, {0x1, 0x80}}, {0xd, 0x1, {0x2, 0x5}}, {0x1000, 0x4, {0x2, 0x2e2}}, {0x1, 0x0, {0x0, 0x12ca}}, {0x8, 0x400, {0x3, 0x3}}, {0x2, 0x3, {0x1, 0x6b4}}, {0x7, 0x6, {0x1, 0x7}}, {0x2, 0x3d4, {0x2, 0x3}}, {0xa9, 0xb, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x7, 0x7, 0x0, 0x8, 0x14, 'syz1\x00', "ebcf91292ee4cabd5cb8e14f9458cddb8c7e69ca360cb72c122c3bf28aa7884f", "c71caa29476b2adf529ab609d2fce130788eccc3dbda2ff7995936b73e61c61c", [{0x4, 0xa473, {0x3, 0xa95}}, {0x80, 0x7, {0x2, 0x7}}, {0x3, 0x0, {0x3, 0x3664}}, {0xffff, 0xfff7, {0x0, 0xff}}, {0x4, 0x4, {0x3, 0x1}}, {0xf, 0x5000, {0x0, 0x42}}, {0x9d, 0xd, {0x3, 0xff6}}, {0x4800, 0x5, {0x3, 0x4}}, {0xfff9, 0x2, {0x2}}, {0xfff, 0x4, {0x0, 0x7fff}}, {0x8, 0x9, {0x2, 0x20004}}, {0x3, 0x4, {0x1, 0x800}}, {0x9, 0x22f, {0x0, 0x5}}, {0x40, 0x7, {0x1, 0x7}}, {0x8, 0x5}, {0xfa, 0x3, {0x2, 0x9955}}, {0x4, 0x800, {0x1, 0x6}}, {0x1, 0xf0, {0x0, 0xca}}, {0xde9b, 0x2a, {0x0, 0x401}}, {0x1000, 0x4, {0x1, 0x24000}}, {0x3, 0x0, {0x3, 0x78}}, {0x9, 0x9, {0x0, 0x3}}, {0x75bd, 0xe, {0x0, 0x5}}, {0x4, 0x2, {0x0, 0x5}}, {0x6, 0x63b, {0x2, 0x9}}, {0x80, 0x8, {0x0, 0x6760}}, {0x2, 0x1, {0x1, 0x4}}, {0xffff, 0x0, {0x1, 0x2}}, {0x9, 0x1, {0x0, 0x3}}, {0xf, 0x1, {0x0, 0x8}}, {0x1000, 0x1, {0x2, 0x8}}, {0x2, 0x3b, {0x0, 0xff}}, {0x8, 0xfff, {0x3, 0x9}}, {0x9, 0x32d7, {0x2, 0x1}}, {0x1000, 0x8001, {0x3, 0x8000}}, {0x7, 0x2c6, {0x3, 0x101}}, {0x5, 0xb856, {0x0, 0x9}}, {0x5, 0xbd3a, {0x2, 0xbe}}, {0x74, 0xd8, {0x1, 0x5}}, {0x800, 0x2, {0x1, 0x1ff}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xe0, 0x67, 0x54, 0x9, 0x23, 'syz1\x00', "4467fd1e166735eb5b87a451c25517eec8bbaa477e3c751488d7cf5c7d31754a", "e257df9aa6f7697fef970aa1dc01e0b8adf569008dce3bb9d1142efad9212295", [{0x4, 0xa, {0x3, 0x1ff}}, {0x919, 0x8, {0x3, 0xdbf}}, {0xffff, 0x80, {0x3, 0x401}}, {0xba40, 0x676, {0x2, 0xfffffff9}}, {0x3, 0x12, {0x1, 0x4}}, {0x0, 0x32, {0x1, 0x3}}, {0x0, 0x100, {0x1, 0xf5}}, {0x2, 0xfff9, {0x1, 0x3ff}}, {0x401, 0x1, {0x3, 0x20f}}, {0x9, 0x7b1, {0x3, 0x3}}, {0x3, 0x0, {0x0, 0x7}}, {0x4960, 0x5, {0x1, 0x80}}, {0x4, 0xf5f6, {0x3, 0x4}}, {0x7fff, 0xbaf4, {0x3, 0x3}}, {0x6, 0xf7de, {0x3, 0xfff}}, {0x401, 0xc, {0x0, 0x8c}}, {0x100, 0x10, {0x1, 0xffffffff}}, {0xb88, 0x6, {0x3, 0x8}}, {0x6000, 0x9, {0x2, 0x10001}}, {0x8106, 0x8, {0x2, 0x1}}, {0x4, 0x303, {0x3, 0x8}}, {0x1, 0x6, {0x2}}, {0x7, 0x6, {0x3, 0x3}}, {0xe4, 0x2, {0x1, 0x855}}, {0xffff, 0xad, {0x1, 0x3d1d}}, {0x0, 0xfffd, {0x1, 0x9}}, {0x0, 0x6, {0x1, 0x2}}, {0x7, 0x6}, {0x6, 0x20c2, {0x3, 0x10000}}, {0x4, 0x9, {0x0, 0x1}}, {0x8000, 0xfff9, {0x2, 0x5}}, {0x1, 0x60, {0x2}}, {0x86, 0xe880, {0x0, 0x17b7}}, {0x9, 0x3fe, {0x3, 0x4}}, {0xa8e, 0x2, {0x0, 0x10001}}, {0x0, 0x2, {0x1, 0x4}}, {0x3, 0x3, {0x3, 0xfffffffc}}, {0x6, 0x8, {0x1, 0x3}}, {0xb91c, 0x1, {0x3, 0x6}}, {0x4, 0x5, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1}, 0x5, 0x9, 0x6, 0x6, 0xd, 'syz1\x00', "e22dc5e495848c35c77fa87e1422fbe8e484247ef4b161cdc8ee94ef5da937aa", "8f8e62b8a33b5061979b40df50dfa51381b85f3ab2e56cd2116c3e1170a76b62", [{0xff, 0xda25, {0x3, 0x1}}, {0x1, 0x2692, {0x0, 0x8}}, {0x2, 0x8, {0x3, 0x1ff}}, {0x93, 0x0, {0x0, 0x8}}, {0x8, 0x82, {0x2, 0xa}}, {0x7, 0x100, {0x0, 0x9}}, {0x8d, 0x10, {0x1, 0x4}}, {0x9, 0xff48, {0x0, 0x2}}, {0x200, 0x0, {0x3, 0x3}}, {0x1, 0xc8f0, {0x3, 0xe}}, {0x3, 0x6f, {0x1, 0x1}}, {0x3, 0x3, {0x1, 0x902b}}, {0xd89d, 0x1, {0x2, 0xf}}, {0x80, 0xb0d, {0x0, 0x2}}, {0x4, 0x94, {0x1, 0x400}}, {0x10, 0xfffa, {0x2, 0x400}}, {0x1, 0x8, {0x0, 0x6}}, {0x8, 0x4, {0x1, 0x59}}, {0xffff, 0x7f, {0x2, 0x9}}, {0xff, 0x6, {0x0, 0x10}}, {0x9, 0x400, {0x3, 0x3}}, {0x3, 0x0, {0x0, 0x8000}}, {0xf664, 0xfff8, {0x1, 0x14e904d7}}, {0x4a05, 0x1, {0x2, 0x8}}, {0x6100, 0x6, {0x0, 0x7fffffff}}, {0x2, 0xe3aa, {0x2, 0x6}}, {0xf, 0x4, {0x0, 0x3}}, {0x7, 0x5, {0x1, 0xe}}, {0x529, 0x4, {0x0, 0xb}}, {0x12, 0x3c, {0x3, 0x2}}, {0x2, 0x8, {0x0, 0x80000001}}, {0x0, 0x0, {0x3, 0x7}}, {0x1, 0x2, {0x2, 0xa9d}}, {0x25c0, 0x9, {0x3, 0x200}}, {0x2f, 0x2, {0x2, 0x6}}, {0x375f, 0xe0f, {0x2, 0x2}}, {0xc, 0xffff, {0x0, 0xc962}}, {0x3, 0x3, {0x1, 0x6666a20e}}, {0x0, 0x3, {0x0, 0x2}}, {0xc664, 0x9, {0x1, 0xaa72}}]}}}, {{0x254, 0x1, {{0x2, 0x33}, 0xdf, 0x5, 0x5c, 0x6, 0x13, 'syz1\x00', "a8f51263389cf19c0fd8b44a26b87d22c062f9108b37962bcc3f947ed0993cf2", "967e300b102206cb5e9972e2a3f539170a49901251e4326e26121fa66b599c91", [{0xfffa, 0x5, {0x0, 0x4}}, {0x4, 0xdc, {0x0, 0x4}}, {0x5, 0xfffa, {0x1, 0x2}}, {0x31, 0x51, {0x1, 0x8000}}, {0x7, 0x1, {0x0, 0x4}}, {0x2, 0x8, {0x2, 0x400}}, {0x200, 0x26, {0x3, 0x2}}, {0x3, 0xffff, {0x1, 0x9}}, {0x401, 0x3, {0x1, 0x6}}, {0x9, 0x6, {0x3, 0x9}}, {0xa, 0x6, {0x2, 0x4}}, {0x7fff, 0x4, {0x0, 0xff}}, {0x8, 0xfff, {0x0, 0xe73}}, {0x3, 0x400, {0x3, 0x800}}, {0x4, 0x8, {0x1, 0x1}}, {0x2, 0xc3, {0x1, 0xfffffff7}}, {0x4, 0x8, {0x3, 0x3}}, {0x7, 0x4f4, {0x2, 0x8}}, {0x3, 0x7, {0x3, 0x4}}, {0x8, 0xe2, {0x0, 0x100}}, {0x1, 0x1, {0x0, 0xf}}, {0xc00, 0x2a, {0x2, 0x5}}, {0x2a, 0x2, {0x1, 0x6}}, {0xe, 0x0, {0x0, 0x7bc}}, {0xdf, 0x8, {0x2, 0xffffffff}}, {0x6, 0x2, {0x3, 0x8}}, {0xf, 0x3, {0x0, 0x8}}, {0x8, 0x6517, {0x3, 0x7}}, {0xcff, 0x7, {0x3, 0x2}}, {0x8, 0x40, {0x1, 0x3}}, {0x9, 0x7ff, {0x1, 0x9}}, {0x3, 0x6c, {0x1, 0x4}}, {0x3ff, 0x357, {0x2, 0x9}}, {0xfffe, 0x6, {0x2, 0xfffffff0}}, {0x0, 0x3ff, {0x2, 0x40}}, {0x5, 0x5, {0x2, 0x5}}, {0x8001, 0x2, {0x2, 0xd}}, {0x1, 0x8, {0x3, 0x80000000}}, {0x4, 0xff, {0x0, 0x7f}}, {0x4ac9, 0xd, {0x2, 0x3}}]}}}]}, 0xbb8}}, 0x4040840) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r13, &(0x7f0000003100)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002e80)={0x240, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @loopback, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x500, @empty, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00', 0x7fffffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x66}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0x20, 0x3, "a800ea0e7d3f601837d935120866b1629476a9491c3ad81c050dc3cd"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "19ff1385827770d01b982dbfa371a1d46716e05be10f1b0ceb08536e9da13e667e581bfb"}}, @TIPC_NLA_NODE_ID={0x57, 0x3, "6f5ce5eafe78834d3fe13a85102a58746b06ce83fbd576277872359d164a6e05bad0b1e8d328483d4b31cb6bc9414550da5cf1c377a5d1af0ad21a6d74983fc2f0561d40c6c631f304e2a3f48975eda575e928"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2e50}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "133d4bb0889c353e74701ddfdb10da47db6ee2ba631a2be4cc2f369c2de7ea8e67a85d"}}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4004010}, 0x4014) 1.065379187s ago: executing program 0 (id=5976): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {0x0}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 694.073091ms ago: executing program 3 (id=5977): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048820) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x2, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {0x0, 0xc}, {0xfff3, 0xfff3}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (fail_nth: 1) 481.035214ms ago: executing program 2 (id=5979): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b1", 0x7c}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 857.461µs ago: executing program 1 (id=5980): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x6, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 0s ago: executing program 2 (id=5981): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x4924924924925c1, 0x8801) unshare(0x400) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149014006040800", 0x58}], 0x1) recvmmsg(r1, 0x0, 0x0, 0x20, 0x0) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r7, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000003f76a23df3d7e5fd1d53cc2a4899ead8aff18186ba9d76980cb6849c4c93851145ff4af4a7457afa1558ddd62d3c693ead20b5d970fdcb8505f0b12fb7cd999298175d73e36e8a43b9258c501bc43edc"], 0x18}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)}, {&(0x7f0000000280)=""/227, 0xe3}], 0x2}, 0x0) kernel console output (not intermixed with test programs): : 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 780.091031][T24958] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 6*16kB (UM) 12*32kB (UM) 12*64kB (UM) 3*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3943804kB [ 780.122232][T24958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.122305][T24958] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 780.122373][T24958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.122424][T24958] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 780.122476][T24958] 44540 total pagecache pages [ 780.123064][T24958] 0 pages in swap cache [ 780.123092][T24958] Free swap = 124996kB [ 780.123112][T24958] Total swap = 124996kB [ 780.123140][T24958] 2097051 pages RAM [ 780.123159][T24958] 0 pages HighMem/MovableOnly [ 780.123180][T24958] 428759 pages reserved [ 780.123208][T24958] 0 pages cma reserved [ 780.782561][T24975] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 780.928932][T24982] netlink: 'syz.3.4798': attribute type 1 has an invalid length. [ 780.928977][T24982] netlink: 15638 bytes leftover after parsing attributes in process `syz.3.4798'. [ 781.085448][T24988] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 781.182050][T24990] lo speed is unknown, defaulting to 1000 [ 781.194651][T24990] lo speed is unknown, defaulting to 1000 [ 781.544241][ T9740] tipc: Subscription rejected, illegal request [ 781.967627][T25009] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 782.424252][T25008] syzkaller1: entered promiscuous mode [ 782.424299][T25008] syzkaller1: entered allmulticast mode [ 782.727462][T25024] SET target dimension over the limit! [ 782.779454][T25026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4811'. [ 783.005683][T25038] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 783.851424][T25042] syzkaller1: entered promiscuous mode [ 783.851510][T25042] syzkaller1: entered allmulticast mode [ 784.481216][T25075] pimreg1: renamed from bridge0 [ 784.502250][T25075] pimreg1: entered allmulticast mode [ 784.518296][T25075] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 784.537258][T25085] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 784.840025][T25090] team0: No ports can be present during mode change [ 784.941103][T25095] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4830'. [ 784.941160][T25095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4830'. [ 784.941201][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4830'. [ 784.999169][T25095] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4830'. [ 784.999226][T25095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4830'. [ 784.999266][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4830'. [ 785.785439][T25128] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 785.876667][T25131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4839'. [ 786.634148][T25147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4842'. [ 787.143800][T25162] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4846'. [ 787.698675][T25174] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 787.858525][T25172] netlink: 'syz.4.4849': attribute type 1 has an invalid length. [ 787.907342][T25176] pim6reg1: entered promiscuous mode [ 787.908271][T25176] pim6reg1: entered allmulticast mode [ 788.049026][ T32] audit: type=1107 audit(1788851550.287:18): pid=25180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='v' [ 788.049026][ T32] =v4 k'ّ%" 8WcқԊ]oθ +hq'wh' [ 788.153431][T25184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4855'. [ 790.510957][T25201] ip_tables: iptables: counters copy to user failed while replacing table [ 790.578407][T25210] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 791.081521][T25220] lo speed is unknown, defaulting to 1000 [ 791.115413][T25220] lo speed is unknown, defaulting to 1000 [ 791.152913][T25227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4868'. [ 791.309185][T25237] netlink: 'syz.1.4871': attribute type 61 has an invalid length. [ 792.441732][T25256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4876'. [ 792.515263][T25223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4865'. [ 792.938805][T25264] netlink: 'syz.0.4877': attribute type 13 has an invalid length. [ 792.973471][T25271] netlink: 'syz.0.4877': attribute type 13 has an invalid length. [ 793.192568][T25276] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 793.312350][T25268] syzkaller1: entered promiscuous mode [ 793.312397][T25268] syzkaller1: entered allmulticast mode [ 793.559057][T25289] netlink: 'syz.1.4882': attribute type 10 has an invalid length. [ 793.586371][T25289] team0 (unregistering): Port device team_slave_0 removed [ 793.607881][T25289] team0 (unregistering): Port device team_slave_1 removed [ 793.637935][T25289] team0 (unregistering): Port device bridge1 removed [ 793.663146][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4883'. [ 793.696723][T25289] team0 (unregistering): Port device bridge2 removed [ 793.868827][T25289] team0 (unregistering): Port device bridge3 removed [ 794.372144][T25299] syzkaller0: Caught tx_queue_len zero misconfig [ 794.389385][T25299] syzkaller0: entered promiscuous mode [ 794.389429][T25299] bond_slave_0: entered promiscuous mode [ 794.389700][T25299] bond_slave_1: entered promiscuous mode [ 794.421575][T25299] syzkaller0: entered allmulticast mode [ 794.428956][T25299] bond_slave_0: entered allmulticast mode [ 794.429013][T25299] bond_slave_1: entered allmulticast mode [ 794.451683][T25301] sctp: [Deprecated]: syz.2.4886 (pid 25301) Use of int in maxseg socket option. [ 794.451683][T25301] Use struct sctp_assoc_value instead [ 794.526133][T25307] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 794.899692][T25309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4888'. [ 795.586649][T25339] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 795.629844][T25342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4895'. [ 795.952100][T25346] lo speed is unknown, defaulting to 1000 [ 795.976302][T25346] lo speed is unknown, defaulting to 1000 [ 796.244662][T25353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4898'. [ 796.374994][T25359] veth13: entered promiscuous mode [ 796.382376][T25359] veth13: entered allmulticast mode [ 796.453591][T25361] veth15: entered promiscuous mode [ 796.459413][T25361] veth15: entered allmulticast mode [ 797.801413][T25403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 797.810826][T25403] bond0: invalid NS target ff00::f9:ffdb:df25:fc00:0 specified for addition [ 797.819176][T25403] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 797.893980][T25405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 797.900219][T25410] bond0: invalid NS target ff00::f9:ffdb:df25:fc00:0 specified for addition [ 797.918937][T25410] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 798.686887][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4914'. [ 798.921004][T25425] veth21: entered promiscuous mode [ 798.926748][T25425] veth21: entered allmulticast mode [ 799.103305][T25428] veth23: entered promiscuous mode [ 799.108917][T25428] veth23: entered allmulticast mode [ 799.159668][T25432] Unknown options in mask 6 [ 799.225305][T25434] netlink: 'syz.3.4915': attribute type 1 has an invalid length. [ 799.225350][T25434] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4915'. [ 799.299308][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4915'. [ 799.299566][T25432] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4915'. [ 799.948868][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4918'. [ 800.647017][T25454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4920'. [ 800.672694][T25454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4920'. [ 800.747238][T25444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4918'. [ 800.748244][T25444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4918'. [ 800.861010][T25459] pimreg: entered allmulticast mode [ 801.538499][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4927'. [ 801.692998][T25482] veth17: entered promiscuous mode [ 801.693046][T25482] veth17: entered allmulticast mode [ 801.818811][T25483] veth19: entered promiscuous mode [ 801.824941][T25483] veth19: entered allmulticast mode [ 801.863173][T25487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4929'. [ 801.949640][T25491] x_tables: unsorted underflow at hook 3 [ 802.145973][T25498] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4932'. [ 802.183278][T25498] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4932'. [ 802.238514][T25504] bridge12: entered promiscuous mode [ 802.244742][T25504] bridge12: entered allmulticast mode [ 802.257438][T25504] team0: Port device bridge12 added [ 802.946043][T25525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4941'. [ 802.959852][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4942'. [ 803.186907][T25534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.926181][T25544] netlink: 'syz.2.4946': attribute type 61 has an invalid length. [ 803.965636][T25546] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4947'. [ 804.002661][T25546] netlink: 'syz.3.4947': attribute type 1 has an invalid length. [ 804.166738][T25546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 804.265007][T25546] netlink: 'syz.3.4947': attribute type 1 has an invalid length. [ 804.280261][T25548] bond6: (slave bridge0): making interface the new active one [ 804.295490][T25548] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 804.389897][T25550] bond6: (slave bridge12): Enslaving as an active interface with a down link [ 804.988368][T25575] netlink: 'syz.1.4954': attribute type 3 has an invalid length. [ 805.409561][T25586] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 805.871158][T25590] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4957'. [ 807.415305][T25618] lo speed is unknown, defaulting to 1000 [ 807.455424][T25619] netlink: 'syz.4.4967': attribute type 2 has an invalid length. [ 807.465141][T25618] lo speed is unknown, defaulting to 1000 [ 808.314801][T25635] pimreg: entered allmulticast mode [ 808.347764][T25638] tipc: Enabling of bearer rejected, already enabled [ 808.409072][T25638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4974'. [ 808.431253][T25642] tipc: Enabling of bearer rejected, failed to enable media [ 808.892899][T25660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4978'. [ 809.724397][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 809.792730][T25684] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 809.806236][T25684] batman_adv: batadv0: Removing interface: ipvlan2 [ 809.980188][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 809.983329][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 810.028756][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 810.034099][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 810.038562][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 810.067755][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 810.068294][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 810.368944][T25694] ip_tables: iptables: counters copy to user failed while replacing table [ 811.134903][T25718] openvswitch: netlink: Missing valid actions attribute. [ 811.135957][T25718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.262623][T25718] D3: option downdelay: invalid value (18446744073709547007) [ 811.262671][T25718] D3: option downdelay: allowed values 0 - 2147483647 [ 811.296850][T25718] D3 (unregistering): Released all slaves [ 811.365558][T25734] netlink: 'syz.4.4994': attribute type 61 has an invalid length. [ 811.712820][T25741] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 812.009690][T25746] netlink: 'syz.3.5001': attribute type 1 has an invalid length. [ 812.116162][T25756] netlink: 'syz.2.5003': attribute type 61 has an invalid length. [ 812.116215][T25756] netlink: 'syz.2.5003': attribute type 62 has an invalid length. [ 812.965871][T25779] syzkaller0: entered promiscuous mode [ 812.965925][T25779] syzkaller0: entered allmulticast mode [ 813.802746][T25811] __nla_validate_parse: 44 callbacks suppressed [ 813.802798][T25811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5018'. [ 814.189759][T25830] netlink: 'syz.4.5022': attribute type 10 has an invalid length. [ 814.189853][T25830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5022'. [ 814.351869][T25830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5022'. [ 814.352322][T25830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5022'. [ 814.352414][T25830] netlink: 'syz.4.5022': attribute type 11 has an invalid length. [ 814.352456][T25830] netlink: 'syz.4.5022': attribute type 13 has an invalid length. [ 815.106079][T25860] openvswitch: netlink: IPv4 tun info is not correct [ 815.500942][T25869] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 815.541481][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5038'. [ 815.553616][T25872] netlink: 'syz.4.5036': attribute type 61 has an invalid length. [ 815.707976][T25875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5038'. [ 815.755171][T25878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5038'. [ 815.813810][T25877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5039'. [ 815.853566][T25877] hsr_slave_1 (unregistering): left promiscuous mode [ 815.881103][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5040'. [ 816.156504][T25885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.159662][T25885] netlink: 'syz.1.5043': attribute type 4 has an invalid length. [ 816.233130][T25887] netlink: 'syz.0.5041': attribute type 2 has an invalid length. [ 816.465637][T25887] : entered promiscuous mode [ 816.684542][T25898] tap0: tun_chr_ioctl cmd 1074025677 [ 816.685044][T25898] tap0: linktype set to 774 [ 816.884611][T25908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5047'. [ 817.817569][T25935] netlink: 'syz.0.5055': attribute type 2 has an invalid length. [ 817.817623][T25935] netlink: 'syz.0.5055': attribute type 2 has an invalid length. [ 818.835674][T25951] syzkaller0: entered promiscuous mode [ 818.835739][T25951] syzkaller0: entered allmulticast mode [ 818.997178][T25954] __nla_validate_parse: 2 callbacks suppressed [ 818.997230][T25954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5061'. [ 818.997268][T25954] netlink: 'syz.0.5061': attribute type 8 has an invalid length. [ 818.997287][T25954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5061'. [ 819.050854][T25956] netlink: 'syz.3.5054': attribute type 1 has an invalid length. [ 819.062900][T25954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5061'. [ 819.063122][T25954] netlink: 'syz.0.5061': attribute type 8 has an invalid length. [ 819.063328][T25954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5061'. [ 819.403148][T25956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 819.513484][T25958] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 819.534796][T25958] bond0 (unregistering): Released all slaves [ 819.559355][T25966] netlink: 'syz.2.5063': attribute type 61 has an invalid length. [ 819.912733][T25974] netlink: 'syz.3.5065': attribute type 1 has an invalid length. [ 819.912778][T25974] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5065'. [ 819.912821][T25974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5065'. [ 819.957914][T25974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5065'. [ 819.958768][T25974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5065'. [ 820.486741][T25989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.841201][T26001] netlink: 'syz.3.5069': attribute type 61 has an invalid length. [ 820.981072][T26004] pim6reg1: entered promiscuous mode [ 820.984968][T26004] pim6reg1: entered allmulticast mode [ 822.040723][T26028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5075'. [ 822.386723][T26039] bridge10: port 1(erspan0) entered blocking state [ 822.386877][T26039] bridge10: port 1(erspan0) entered forwarding state [ 822.571285][T26039] 8021q: adding VLAN 0 to HW filter on device .` [ 822.595619][T26039] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.629746][T26039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.889212][T26039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.911600][T26039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.940034][T26039] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 822.966153][ T9] bridge0: port 3(vlan2) entered blocking state [ 822.966532][ T9] bridge0: port 3(vlan2) entered forwarding state [ 822.987484][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.987624][ T9730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.006422][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.006565][ T9730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.228124][T26073] netlink: 6056 bytes leftover after parsing attributes in process `syz.1.5082'. [ 823.622787][T26087] netlink: 'syz.1.5084': attribute type 8 has an invalid length. [ 823.698769][T26088] bridge0: port 1(wlan1) entered blocking state [ 823.700114][T26088] bridge0: port 1(wlan1) entered disabled state [ 823.700329][T26088] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode [ 823.760303][T26088] mac80211_hwsim hwsim66 wlan1: entered promiscuous mode [ 825.314691][T26041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.427583][T26099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.794021][T26106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5088'. [ 825.854537][T26112] netlink: 'syz.0.5087': attribute type 1 has an invalid length. [ 825.855018][T26112] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5087'. [ 825.855070][T26112] netlink: 'syz.0.5087': attribute type 1 has an invalid length. [ 825.914961][T26116] veth21: entered promiscuous mode [ 825.922310][T26116] veth21: entered allmulticast mode [ 826.312971][T26129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5093'. [ 826.424434][T26132] netlink: 'syz.2.5091': attribute type 61 has an invalid length. [ 826.532946][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5094'. [ 826.662656][T26138] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 826.829493][T26145] x_tables: ip_tables: REJECT target: only valid in filter table, not  [ 826.943079][T26150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5101'. [ 827.113357][T26150] veth25: entered promiscuous mode [ 827.113732][T26150] veth25: entered allmulticast mode [ 827.136859][T26156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 827.247393][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5102'. [ 827.247433][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5102'. [ 827.247477][T26160] netlink: 'syz.3.5102': attribute type 11 has an invalid length. [ 827.247496][T26160] netlink: 'syz.3.5102': attribute type 13 has an invalid length. [ 828.137789][T26188] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 828.567158][T26207] netlink: 'syz.0.5112': attribute type 1 has an invalid length. [ 828.568679][T26208] netlink: 'syz.0.5112': attribute type 1 has an invalid length. [ 828.844454][T26215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5114'. [ 829.034106][T26217] veth27: entered promiscuous mode [ 829.036136][T26217] veth27: entered allmulticast mode [ 829.484129][T26227] openvswitch: netlink: Flow actions attr not present in new flow. [ 829.967813][ T9730] bond2 (unregistering): (slave ip6gretap2): Releasing active interface [ 830.085638][T26254] netlink: 'syz.2.5123': attribute type 15 has an invalid length. [ 830.106875][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5123'. [ 830.368887][ T9730] bond4 (unregistering): (slave geneve2): Releasing active interface [ 830.466441][T26257] netlink: 564 bytes leftover after parsing attributes in process `syz.1.5124'. [ 830.907988][ T9730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.930611][ T9730] bond_slave_0: left allmulticast mode [ 830.956854][ T9730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.976303][ T9730] bond_slave_1: left allmulticast mode [ 830.983279][ T9730] bond0 (unregistering): Released all slaves [ 831.015461][ T9730] bond1 (unregistering): Released all slaves [ 831.095300][ T12] smbdirect: ib_dev[syz1] removed [ 831.102098][ T9730] bond2 (unregistering): Released all slaves [ 831.286188][ T9730] bond3 (unregistering): Released all slaves [ 831.380966][ T9730] bond4 (unregistering): Released all slaves [ 831.396050][T26260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5125'. [ 831.497780][ T9730] bond5 (unregistering): (slave bond6): Releasing backup interface [ 831.515106][ T9730] bond6 (unregistering): left allmulticast mode [ 831.518303][ T9730] bond5 (unregistering): Released all slaves [ 831.622604][ T9730] bond6 (unregistering): Released all slaves [ 831.726635][ T9730] bond7 (unregistering): Released all slaves [ 831.881382][ T9730] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 831.906972][ T9730] bond8 (unregistering): Released all slaves [ 831.947079][ T9730] bond9 (unregistering): Released all slaves [ 831.973665][ T9730] bond10 (unregistering): Released all slaves [ 832.081539][T12594] infiniband syz1: ib_query_port failed (-19) [ 832.187890][T26264] netlink: 'syz.2.5126': attribute type 1 has an invalid length. [ 832.399354][T26264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.447476][T26264] netlink: 328 bytes leftover after parsing attributes in process `syz.2.5126'. [ 832.447557][T26264] netlink: 'syz.2.5126': attribute type 9 has an invalid length. [ 832.447593][T26264] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5126'. [ 832.447615][T26264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5126'. [ 832.549594][T26272] FAULT_INJECTION: forcing a failure. [ 832.549594][T26272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.549653][T26272] CPU: 0 UID: 0 PID: 26272 Comm: syz.4.5128 Not tainted syzkaller #0 PREEMPT(full) [ 832.549698][T26272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.549713][T26272] Call Trace: [ 832.549724][T26272] [ 832.549734][T26272] dump_stack_lvl+0xe8/0x150 [ 832.549772][T26272] should_fail_ex+0x410/0x560 [ 832.549817][T26272] _copy_from_user+0x2d/0xb0 [ 832.549843][T26272] ___sys_sendmsg+0x1c6/0x360 [ 832.549867][T26272] ? __lock_acquire+0x6df/0x2e50 [ 832.549896][T26272] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.549958][T26272] ? __fget_files+0x2a/0x420 [ 832.549987][T26272] ? __fget_files+0x3a2/0x420 [ 832.550027][T26272] __x64_sys_sendmsg+0x1b1/0x290 [ 832.550057][T26272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 832.550108][T26272] do_syscall_64+0x166/0x520 [ 832.550144][T26272] ? trace_irq_disable+0x3b/0x140 [ 832.550169][T26272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.550194][T26272] ? clear_bhb_loop+0x70/0xc0 [ 832.550224][T26272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.550257][T26272] RIP: 0033:0x7efdd0b9e159 [ 832.550279][T26272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.550300][T26272] RSP: 002b:00007efdd1aef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.550326][T26272] RAX: ffffffffffffffda RBX: 00007efdd0e25fa0 RCX: 00007efdd0b9e159 [ 832.550344][T26272] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000006 [ 832.550360][T26272] RBP: 00007efdd1aef090 R08: 0000000000000000 R09: 0000000000000000 [ 832.550375][T26272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.550390][T26272] R13: 00007efdd0e26038 R14: 00007efdd0e25fa0 R15: 00007fff58e124c8 [ 832.550427][T26272] [ 832.808121][T26275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5128'. [ 832.972657][T26266] bond0: (slave veth23): Enslaving as an active interface with a down link [ 832.973719][ T9730] tipc: Disabling bearer [ 832.973879][ T9730] tipc: Left network mode [ 833.152475][T26272] veth17: entered promiscuous mode [ 833.152529][T26272] veth17: entered allmulticast mode [ 833.285034][T26277] veth19: entered promiscuous mode [ 833.285441][T26277] veth19: entered allmulticast mode [ 833.422123][T26281] geneve0: entered promiscuous mode [ 833.489796][T26281] geneve0: left promiscuous mode [ 833.584004][ T9730] IPVS: stopping backup sync thread 17994 ... [ 834.234107][T26309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.593102][T26300] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5134'. [ 834.699874][T26324] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5138'. [ 834.772463][T26329] netlink: 'syz.4.5139': attribute type 1 has an invalid length. [ 835.122069][T26329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.156052][T26332] bond0: (slave geneve3): making interface the new active one [ 835.171703][T26332] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 835.283244][ T9740] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 835.443762][ T9728] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 835.443848][ T9728] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 835.443915][ T9728] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 836.115014][T26348] syzkaller1: left promiscuous mode [ 836.121829][T26348] syzkaller1: left allmulticast mode [ 836.130611][T26348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5142'. [ 837.245662][T26378] netlink: 'syz.4.5150': attribute type 10 has an invalid length. [ 837.535439][T26378] team0 (unregistering): Port device team_slave_0 removed [ 837.554380][T26377] netlink: 'syz.2.5147': attribute type 1 has an invalid length. [ 837.554425][T26377] netlink: 'syz.2.5147': attribute type 2 has an invalid length. [ 837.767398][T26378] team0 (unregistering): Port device team_slave_1 removed [ 837.796736][T26378] team0 (unregistering): Port device bridge1 removed [ 837.864648][T26378] team0 (unregistering): Port device bridge2 removed [ 837.983958][T26378] team0 (unregistering): Port device bridge3 removed [ 838.003386][T26378] team0 (unregistering): Port device bridge5 removed [ 838.119382][T26378] team0 (unregistering): Port device bridge7 removed [ 838.270155][T26378] team0 (unregistering): Port device bridge8 removed [ 838.422703][T26378] team0 (unregistering): Port device bridge9 removed [ 838.436028][T26378] team0 (unregistering): Port device bridge12 removed [ 838.567784][T26402] Cannot find map_set index 65533 as target [ 838.958134][ T9730] hsr_slave_0: left promiscuous mode [ 839.487734][T26412] netlink: 'syz.1.5158': attribute type 10 has an invalid length. [ 839.488184][T26412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5158'. [ 839.808021][T24653] smc: removing ib device sz1 [ 840.064169][T24653] smbdirect: ib_dev[sz1] removed [ 840.296057][T26397] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 840.313982][T26399] netlink: 'syz.2.5155': attribute type 3 has an invalid length. [ 840.314294][T26399] netlink: 'syz.2.5155': attribute type 3 has an invalid length. [ 840.422852][T26412] dummy0: entered promiscuous mode [ 840.427018][T26412] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 840.769025][T26402] lo speed is unknown, defaulting to 1000 [ 840.794238][T26406] lo speed is unknown, defaulting to 1000 [ 840.801728][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5161'. [ 841.339703][T26443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5164'. [ 842.325779][T26456] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5161'. [ 842.326830][T26456] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5161'. [ 843.429568][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5166'. [ 843.758581][T26462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5167'. [ 844.157653][T26474] netlink: 'syz.3.5171': attribute type 1 has an invalid length. [ 844.340381][T26486] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5171'. [ 844.434172][T26492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5173'. [ 844.707588][T26481] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 844.962060][T26497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5173'. [ 845.623669][T26517] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.631680][T26517] bridge0: entered allmulticast mode [ 845.900072][T26518] bridge_slave_1: left allmulticast mode [ 845.900121][T26518] bridge_slave_1: left promiscuous mode [ 845.900427][T26518] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.145442][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5179'. [ 846.512158][T26527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5179'. [ 846.522707][T26527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5179'. [ 846.565170][ T9730] IPVS: stop unused estimator thread 0... [ 847.156674][T26478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 847.419723][T26529] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.5181'. [ 847.976285][T26552] netlink: 'syz.4.5188': attribute type 10 has an invalid length. [ 847.976333][T26552] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5188'. [ 848.875481][T26581] netlink: 'syz.1.5194': attribute type 61 has an invalid length. [ 848.979722][T26587] RDS: rds_bind could not find a transport for c002:0:20:0:4002:0:20:0, load rds_tcp or rds_rdma? [ 849.294185][T26583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5195'. [ 849.346641][T26585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5195'. [ 849.411211][T26585] veth25: entered promiscuous mode [ 849.416479][T26585] veth25: entered allmulticast mode [ 849.577086][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5200'. [ 849.768738][T26600] veth27: entered promiscuous mode [ 849.769127][T26600] veth27: entered allmulticast mode [ 850.667665][T26603] veth29: entered promiscuous mode [ 850.667709][T26603] veth29: entered allmulticast mode [ 850.854333][T26610] lo speed is unknown, defaulting to 1000 [ 851.047902][T26632] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 851.302844][T26635] netlink: 'syz.1.5207': attribute type 3 has an invalid length. [ 851.303184][T26635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5207'. [ 852.347446][T26661] netlink: 'syz.0.5213': attribute type 61 has an invalid length. [ 852.364130][T26659] syzkaller0: entered promiscuous mode [ 852.364171][T26659] syzkaller0: entered allmulticast mode [ 852.974498][T26667] syzkaller0: entered promiscuous mode [ 852.976705][T26667] syzkaller0: entered allmulticast mode [ 853.057904][T26667] tipc: Enabled bearer , priority 0 [ 853.344370][T26686] FAULT_INJECTION: forcing a failure. [ 853.344370][T26686] name failslab, interval 1, probability 0, space 0, times 0 [ 853.362271][T26686] CPU: 0 UID: 0 PID: 26686 Comm: syz.0.5222 Not tainted syzkaller #0 PREEMPT(full) [ 853.362306][T26686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 853.362321][T26686] Call Trace: [ 853.362330][T26686] [ 853.362341][T26686] dump_stack_lvl+0xe8/0x150 [ 853.362391][T26686] should_fail_ex+0x410/0x560 [ 853.362427][T26686] ? __alloc_skb+0x1db/0x7a0 [ 853.362458][T26686] should_failslab+0xa8/0x100 [ 853.362486][T26686] ? __alloc_skb+0x1db/0x7a0 [ 853.362515][T26686] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 853.362547][T26686] ? __alloc_skb+0x18d/0x7a0 [ 853.362579][T26686] ? __alloc_skb+0x1db/0x7a0 [ 853.362617][T26686] __alloc_skb+0x1db/0x7a0 [ 853.362659][T26686] netlink_ack+0x136/0xb30 [ 853.362702][T26686] netlink_rcv_skb+0x2a4/0x4a0 [ 853.362729][T26686] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 853.362755][T26686] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 853.362791][T26686] ? bpf_lsm_capable+0x9/0x20 [ 853.362821][T26686] ? security_capable+0x7e/0x2c0 [ 853.362851][T26686] nfnetlink_rcv+0x2b9/0x28c0 [ 853.362880][T26686] ? __dev_queue_xmit+0x29b/0x3820 [ 853.362908][T26686] ? __local_bh_enable_ip+0xd6/0x140 [ 853.362937][T26686] ? lockdep_hardirqs_on+0x7b/0x110 [ 853.362967][T26686] ? __dev_queue_xmit+0x29b/0x3820 [ 853.362991][T26686] ? __local_bh_enable_ip+0xd6/0x140 [ 853.363017][T26686] ? __dev_queue_xmit+0x29b/0x3820 [ 853.363045][T26686] ? __dev_queue_xmit+0x1edc/0x3820 [ 853.363069][T26686] ? do_syscall_64+0x166/0x520 [ 853.363098][T26686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.363131][T26686] ? __dev_queue_xmit+0x29b/0x3820 [ 853.363157][T26686] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 853.363187][T26686] ? __pfx___dev_queue_xmit+0x10/0x10 [ 853.363219][T26686] ? ref_tracker_free+0x689/0x830 [ 853.363245][T26686] ? __pfx_ref_tracker_free+0x10/0x10 [ 853.363276][T26686] ? __skb_clone+0x449/0x6c0 [ 853.363305][T26686] ? skb_clone+0x246/0x3a0 [ 853.363332][T26686] ? __netlink_deliver_tap+0x811/0x860 [ 853.363358][T26686] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.363389][T26686] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.363415][T26686] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.363447][T26686] netlink_unicast+0x7bd/0x940 [ 853.363480][T26686] netlink_sendmsg+0x813/0xb40 [ 853.363516][T26686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.363550][T26686] ? apparmor_socket_sendmsg+0x98/0x360 [ 853.363585][T26686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.363611][T26686] sock_sendmsg_nosec+0x13a/0x180 [ 853.363648][T26686] ____sys_sendmsg+0x54e/0x850 [ 853.363676][T26686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.363709][T26686] ? import_iovec+0x73/0xa0 [ 853.363735][T26686] ___sys_sendmsg+0x2a5/0x360 [ 853.363757][T26686] ? __lock_acquire+0x6df/0x2e50 [ 853.363783][T26686] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.363842][T26686] ? __fget_files+0x2a/0x420 [ 853.363869][T26686] ? __fget_files+0x3a2/0x420 [ 853.363907][T26686] __x64_sys_sendmsg+0x1b1/0x290 [ 853.363933][T26686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 853.363978][T26686] do_syscall_64+0x166/0x520 [ 853.364007][T26686] ? trace_irq_disable+0x3b/0x140 [ 853.364026][T26686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.364048][T26686] ? clear_bhb_loop+0x70/0xc0 [ 853.364085][T26686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.364106][T26686] RIP: 0033:0x7f5698b9e159 [ 853.364126][T26686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.364143][T26686] RSP: 002b:00007f5699b48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.364165][T26686] RAX: ffffffffffffffda RBX: 00007f5698e25fa0 RCX: 00007f5698b9e159 [ 853.364180][T26686] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000006 [ 853.364193][T26686] RBP: 00007f5699b48090 R08: 0000000000000000 R09: 0000000000000000 [ 853.364206][T26686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.364219][T26686] R13: 00007f5698e26038 R14: 00007f5698e25fa0 R15: 00007ffcd7432798 [ 853.364250][T26686] [ 853.463413][T26681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5221'. [ 853.855973][T26671] tipc: Resetting bearer [ 853.895245][T26686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5222'. [ 854.069710][T26689] veth7: entered promiscuous mode [ 854.088915][T26689] veth7: entered allmulticast mode [ 854.115033][T26683] Can't find ip_set type hash:ip,po [ 854.122631][T26697] x_tables: duplicate underflow at hook 1 [ 854.128657][T26697] x_tables: duplicate underflow at hook 1 [ 854.148575][T26672] tipc: Resetting bearer [ 854.290820][T26672] tipc: Disabling bearer [ 854.338918][T26702] Bluetooth: hci0: unsupported parameter 5161 [ 854.338962][T26702] Bluetooth: hci0: unsupported parameter 8192 [ 854.338997][T26702] Bluetooth: hci0: unsupported parameter 5161 [ 854.339017][T26702] Bluetooth: hci0: unsupported parameter 8192 [ 854.408930][T26693] veth9: entered promiscuous mode [ 854.414893][T26693] veth9: entered allmulticast mode [ 854.427239][T26696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5223'. [ 854.739603][T26700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.755792][T26700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.839285][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5230'. [ 854.860814][T26700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.876424][T26700] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 854.959490][T26723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5230'. [ 855.051686][T26723] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 855.242506][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5230'. [ 855.255590][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5231'. [ 855.506237][T26715] hsr_slave_1 (unregistering): left promiscuous mode [ 855.686115][T26735] bond10: invalid ARP target 0.0.0.0 specified for addition [ 855.687143][T26735] bond10: option arp_ip_target: invalid value (0) [ 855.756790][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'. [ 855.770171][T26745] netlink: 'syz.0.5235': attribute type 10 has an invalid length. [ 855.770222][T26745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5235'. [ 855.812209][T26735] bond10 (unregistering): Released all slaves [ 855.821296][T26747] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20004 [ 856.891063][T26773] bridge0: port 1(wlan1) entered blocking state [ 856.892820][T26773] bridge0: port 1(wlan1) entered disabled state [ 856.893025][T26773] mac80211_hwsim hwsim81 wlan1: entered allmulticast mode [ 856.955442][T26773] mac80211_hwsim hwsim81 wlan1: entered promiscuous mode [ 857.064633][T26775] netlink: 'syz.3.5238': attribute type 1 has an invalid length. [ 859.611547][T26806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5247'. [ 859.630535][T26804] openvswitch: netlink: IPv4 tun info is not correct [ 859.851620][T26802] syzkaller1: entered promiscuous mode [ 859.851688][T26802] syzkaller1: entered allmulticast mode [ 859.923874][T26821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5251'. [ 860.001469][T26823] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5246'. [ 860.278088][T26826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5248'. [ 860.973514][T26850] netlink: 'syz.3.5260': attribute type 1 has an invalid length. [ 861.105775][T26858] netlink: 'syz.2.5262': attribute type 1 has an invalid length. [ 861.135122][T26854] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 861.179014][T26854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5260'. [ 861.223929][T26860] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5262'. [ 861.307038][T26858] 8021q: adding VLAN 0 to HW filter on device bond5 [ 861.375515][T26850] veth17: entered promiscuous mode [ 861.385723][T26850] bond10: (slave veth17): Enslaving as a backup interface with a down link [ 861.401966][T26854] 8021q: adding VLAN 0 to HW filter on device bond10 [ 861.410056][T22579] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 861.529303][T26865] Bluetooth: hci0: unsupported parameter 5135 [ 861.537966][T26865] Bluetooth: hci0: unsupported parameter 8192 [ 861.539389][T26865] Bluetooth: hci0: unsupported parameter 5135 [ 861.540008][T26865] Bluetooth: hci0: unsupported parameter 8192 [ 861.546791][ T12] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 861.620946][T26867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5265'. [ 861.704168][T26863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5263'. [ 861.904828][T26870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5266'. [ 861.904886][T26870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5266'. [ 862.293081][T26862] dummy0: left promiscuous mode [ 863.558958][T26862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.768455][T26862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.038235][T26862] veth3: left promiscuous mode [ 864.044549][T26862] veth3: left allmulticast mode [ 864.064917][T26862] veth5: left promiscuous mode [ 864.070645][T26862] veth5: left allmulticast mode [ 864.089482][T26862] macsec1: left promiscuous mode [ 864.140425][T26862] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 864.147941][T26862] ipvlan2: left allmulticast mode [ 864.155214][T26862] macvlan1: left allmulticast mode [ 864.178758][T26862] bridge2: left promiscuous mode [ 864.181773][T26862] bridge2: left allmulticast mode [ 864.238964][T26862] bridge5: left promiscuous mode [ 864.244368][T26862] bridge5: left allmulticast mode [ 864.254813][T26862] bond2: left promiscuous mode [ 864.254867][T26862] gre2: left promiscuous mode [ 864.802469][T26862] veth7: left promiscuous mode [ 864.802513][T26862] veth7: left allmulticast mode [ 864.822251][T26862] veth9: left promiscuous mode [ 864.822295][T26862] veth9: left allmulticast mode [ 865.095016][T26914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5278'. [ 865.276535][T26919] netlink: 'syz.4.5281': attribute type 2 has an invalid length. [ 865.311986][T26920] dvmrp8: entered allmulticast mode [ 865.333841][T26921] netlink: 'syz.0.5279': attribute type 61 has an invalid length. [ 865.449693][T26923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5282'. [ 865.511307][T26926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'. [ 865.717159][T26926] bond6: entered allmulticast mode [ 866.194189][T26940] IPv6: NLM_F_CREATE should be specified when creating new route [ 866.203694][T26940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.203738][T26940] IPv6: NLM_F_CREATE should be set when creating new route [ 866.203788][T26940] IPv6: NLM_F_CREATE should be set when creating new route [ 866.203818][T26940] IPv6: NLM_F_CREATE should be set when creating new route [ 866.238596][T26938] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5287'. [ 866.357529][T26943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5290'. [ 866.949364][T26966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5294'. [ 867.066674][T26966] netlink: 'syz.0.5294': attribute type 9 has an invalid length. [ 867.706070][T26982] netlink: 'syz.3.5298': attribute type 61 has an invalid length. [ 867.902229][T26989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5302'. [ 868.388112][T27000] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 868.524758][T27001] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 868.638960][T27003] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 868.701847][T27010] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 868.770507][T27027] tipc: New replicast peer: 255.255.255.255 [ 868.779522][T27027] tipc: Enabled bearer , priority 10 [ 868.797193][T27027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5308'. [ 868.842514][T27027] netlink: 'syz.0.5308': attribute type 1 has an invalid length. [ 869.134795][T27023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5308'. [ 869.228075][T27027] bond0: entered promiscuous mode [ 869.236924][T27027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.285959][T27023] bond0: entered allmulticast mode [ 869.399262][T27023] bond0: (slave bridge6): making interface the new active one [ 869.409712][T27023] bridge6: entered promiscuous mode [ 869.425337][T27023] bridge6: entered allmulticast mode [ 869.451321][T27023] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 869.890000][T12591] tipc: Node number set to 4160712616 [ 869.995030][T27051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5312'. [ 870.106873][T21720] bond6: (slave bridge0): link status definitely down, disabling slave [ 870.255301][T21720] bond6: now running without any active interface! [ 870.266505][T27051] __nla_validate_parse: 1 callbacks suppressed [ 870.277941][T27051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5312'. [ 870.316930][T27061] FAULT_INJECTION: forcing a failure. [ 870.316930][T27061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.317281][T27061] CPU: 1 UID: 0 PID: 27061 Comm: syz.2.5315 Not tainted syzkaller #0 PREEMPT(full) [ 870.317349][T27061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.317384][T27061] Call Trace: [ 870.317414][T27061] [ 870.317437][T27061] dump_stack_lvl+0xe8/0x150 [ 870.317543][T27061] should_fail_ex+0x410/0x560 [ 870.317651][T27061] _copy_from_user+0x2d/0xb0 [ 870.317724][T27061] copy_from_sockptr+0x48/0x70 [ 870.317798][T27061] raw_setsockopt+0x5e7/0x1440 [ 870.317892][T27061] ? __pfx_aa_sk_perm+0x10/0x10 [ 870.317954][T27061] ? __pfx_raw_setsockopt+0x10/0x10 [ 870.318018][T27061] ? aa_sock_opt_perm+0x142/0x1e0 [ 870.318088][T27061] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 870.318161][T27061] ? __pfx_raw_setsockopt+0x10/0x10 [ 870.318230][T27061] do_sock_setsockopt+0x17c/0x1b0 [ 870.318304][T27061] __x64_sys_setsockopt+0x13d/0x1b0 [ 870.318373][T27061] do_syscall_64+0x166/0x520 [ 870.318449][T27061] ? trace_irq_disable+0x3b/0x140 [ 870.318504][T27061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.318568][T27061] ? clear_bhb_loop+0x70/0xc0 [ 870.318658][T27061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.318740][T27061] RIP: 0033:0x7f991059e159 [ 870.318799][T27061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.318858][T27061] RSP: 002b:00007f990e7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 870.318918][T27061] RAX: ffffffffffffffda RBX: 00007f9910825fa0 RCX: 00007f991059e159 [ 870.318970][T27061] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004 [ 870.319012][T27061] RBP: 00007f990e7f6090 R08: 0000000000000008 R09: 0000000000000000 [ 870.319051][T27061] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.319091][T27061] R13: 00007f9910826038 R14: 00007f9910825fa0 R15: 00007ffc083f38e8 [ 870.319183][T27061] [ 870.814311][T27074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5316'. [ 871.165974][T27074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.435894][T27092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5324'. [ 871.541658][T27097] sctp: [Deprecated]: syz.4.5325 (pid 27097) Use of int in max_burst socket option. [ 871.541658][T27097] Use struct sctp_assoc_value instead [ 871.933816][T27106] FAULT_INJECTION: forcing a failure. [ 871.933816][T27106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.933872][T27106] CPU: 0 UID: 0 PID: 27106 Comm: syz.4.5328 Not tainted syzkaller #0 PREEMPT(full) [ 871.933900][T27106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.933916][T27106] Call Trace: [ 871.933926][T27106] [ 871.933937][T27106] dump_stack_lvl+0xe8/0x150 [ 871.933977][T27106] should_fail_ex+0x410/0x560 [ 871.934022][T27106] _copy_to_user+0x31/0xb0 [ 871.934052][T27106] simple_read_from_buffer+0xe1/0x170 [ 871.934090][T27106] proc_fail_nth_read+0x1bb/0x230 [ 871.934125][T27106] ? common_file_perm+0x20e/0x2b0 [ 871.934152][T27106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 871.934201][T27106] ? rw_verify_area+0x24a/0x4c0 [ 871.934236][T27106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 871.934271][T27106] vfs_read+0x213/0xa80 [ 871.934311][T27106] ? __pfx___mutex_lock+0x10/0x10 [ 871.934347][T27106] ? __pfx_vfs_read+0x10/0x10 [ 871.934382][T27106] ? __fget_files+0x2a/0x420 [ 871.934418][T27106] ? __fget_files+0x3a2/0x420 [ 871.934448][T27106] ? __fget_files+0x2a/0x420 [ 871.934488][T27106] ksys_read+0x150/0x270 [ 871.934524][T27106] ? __pfx_ksys_read+0x10/0x10 [ 871.934567][T27106] do_syscall_64+0x166/0x520 [ 871.934599][T27106] ? trace_irq_disable+0x3b/0x140 [ 871.934622][T27106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.934647][T27106] ? clear_bhb_loop+0x70/0xc0 [ 871.934674][T27106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.934697][T27106] RIP: 0033:0x7efdd0b5e98e [ 871.934719][T27106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 871.934749][T27106] RSP: 002b:00007efdd1aeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 871.934775][T27106] RAX: ffffffffffffffda RBX: 00007efdd1aef6c0 RCX: 00007efdd0b5e98e [ 871.934793][T27106] RDX: 000000000000000f RSI: 00007efdd1aef0a0 RDI: 0000000000000005 [ 871.934808][T27106] RBP: 00007efdd1aef090 R08: 0000000000000000 R09: 0000000000000000 [ 871.934823][T27106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.934839][T27106] R13: 00007efdd0e26038 R14: 00007efdd0e25fa0 R15: 00007fff58e124c8 [ 871.934877][T27106] [ 872.368441][T27113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5330'. [ 872.764369][T27129] sctp: [Deprecated]: syz.4.5337 (pid 27129) Use of int in max_burst socket option. [ 872.764369][T27129] Use struct sctp_assoc_value instead [ 872.973271][T27133] bridge8: entered promiscuous mode [ 872.974139][T27133] bridge8: entered allmulticast mode [ 873.006847][T27133] team0: Port device bridge8 added [ 873.836182][T27153] smbdirect: ib_dev[syz_device_name_32_chars_1234567] renamed to [sy] [ 874.033931][T27164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5345'. [ 874.388791][T27174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5349'. [ 874.474492][T27169] netlink: 'syz.1.5348': attribute type 21 has an invalid length. [ 874.983533][T27169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5348'. [ 874.983597][T27169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5348'. [ 875.095337][T27189] bond11 (unregistering): Released all slaves [ 875.146223][T27178] netlink: 'syz.4.5350': attribute type 10 has an invalid length. [ 875.471280][T27199] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5354'. [ 875.762235][T27192] syzkaller0: entered promiscuous mode [ 875.763220][T27192] syzkaller0: entered allmulticast mode [ 876.933228][T27226] netlink: 'syz.4.5360': attribute type 61 has an invalid length. [ 880.407251][T27242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5362'. [ 881.911136][T27284] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5374'. [ 881.911687][T27284] openvswitch: netlink: Flow key attr not present in new flow. [ 881.976568][T27285] netlink: 'syz.3.5371': attribute type 61 has an invalid length. [ 882.060980][T27283] syzkaller0: entered promiscuous mode [ 882.061023][T27283] syzkaller0: entered allmulticast mode [ 882.223252][T27284] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.5374'. [ 882.882955][T27303] x_tables: duplicate entry at hook 1 [ 882.911325][T27299] netlink: 'syz.2.5377': attribute type 2 has an invalid length. [ 882.943491][ T5278] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 883.141855][T27303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5378'. [ 883.163812][T27303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5378'. [ 883.266047][T27303] netlink: 'syz.4.5378': attribute type 1 has an invalid length. [ 884.849505][T27354] netlink: 'syz.0.5389': attribute type 2 has an invalid length. [ 884.909921][T27361] netlink: 'syz.0.5389': attribute type 2 has an invalid length. [ 885.346875][T27369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5390'. [ 885.376387][T27369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5390'. [ 885.404413][T27368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5391'. [ 885.472467][T27368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5391'. [ 885.545251][T27368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5391'. [ 885.631973][T27376] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5391'. [ 885.716512][T27378] bridge9: entered promiscuous mode [ 885.723957][T27378] bridge9: entered allmulticast mode [ 885.747366][T27378] team0: Port device bridge9 added [ 885.881829][T27384] gretap0: entered promiscuous mode [ 886.123802][T27384] can: request_module (can-proto-0) failed. [ 886.525803][T27405] veth0: entered promiscuous mode [ 886.559534][T27405] veth0: left promiscuous mode [ 886.580267][T27405] IPv6: addrconf: prefix option has invalid lifetime [ 886.688058][T27401] lo speed is unknown, defaulting to 1000 [ 887.187801][T27420] netlink: 'syz.0.5408': attribute type 61 has an invalid length. [ 887.408418][T27429] __nla_validate_parse: 1 callbacks suppressed [ 887.408472][T27429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 887.408494][T27429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5412'. [ 887.533445][ T9730] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.533518][ T9730] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.533588][ T9730] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.533632][ T9730] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.853050][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5422'. [ 888.876949][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5422'. [ 888.950907][T27476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5425'. [ 889.036344][T27474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5422'. [ 889.102611][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5427'. [ 889.108606][T27487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5422'. [ 889.135134][T27485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5426'. [ 890.026597][T27480] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5427'. [ 890.037970][T27480] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 891.306481][T27533] netlink: 'syz.2.5438': attribute type 4 has an invalid length. [ 891.583770][T27536] veth0_vlan: left promiscuous mode [ 891.613670][T27536] veth0_vlan: entered promiscuous mode [ 891.653088][T27536] veth1_vlan: entered promiscuous mode [ 891.737626][T27536] veth1_macvtap: left promiscuous mode [ 891.757546][T27536] veth0_macvtap: left promiscuous mode [ 891.786846][T27536] veth0_macvtap: entered promiscuous mode [ 891.811202][T27536] geneve0: left promiscuous mode [ 891.942227][T27536] geneve0: entered promiscuous mode [ 892.014548][T27536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 892.118676][T27551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.118755][T27536] batman_adv: batadv0: Interface activated: vlan4 [ 892.365491][T27536] 8021q: adding VLAN 0 to HW filter on device eth0 [ 892.385112][T27536] 8021q: adding VLAN 0 to HW filter on device eth1 [ 892.403453][T27536] 8021q: adding VLAN 0 to HW filter on device eth2 [ 892.434632][T27536] 8021q: adding VLAN 0 to HW filter on device eth3 [ 892.505336][T27536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 892.816706][T22579] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.855700][T24653] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 892.930529][T27563] __nla_validate_parse: 7 callbacks suppressed [ 892.930631][T27563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5442'. [ 892.931061][T27563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5442'. [ 892.992715][T27565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5442'. [ 893.534574][ T9740] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.547611][T21720] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.547859][T21720] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.862522][T27581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5448'. [ 893.930349][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5450'. [ 893.930399][T27584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5450'. [ 893.962674][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5450'. [ 893.962723][T27584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5450'. [ 894.159492][T27588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 894.159537][T27588] IPv6: NLM_F_CREATE should be set when creating new route [ 894.862508][T27577] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5448'. [ 894.874989][T27577] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 894.897059][T27577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5448'. [ 895.323938][T27624] lo speed is unknown, defaulting to 1000 [ 897.326652][T27684] netlink: 'syz.4.5472': attribute type 10 has an invalid length. [ 898.267376][T27704] __nla_validate_parse: 5 callbacks suppressed [ 898.267434][T27704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5475'. [ 898.416733][T27669] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5469'. [ 898.416778][T27669] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 898.472613][T27669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5469'. [ 898.473601][T27669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5469'. [ 900.075087][T27724] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 900.560502][T27753] ip_tables: iptables: counters copy to user failed while replacing table [ 901.282557][T27759] netlink: 'syz.2.5489': attribute type 21 has an invalid length. [ 901.282605][T27759] IPv6: NLM_F_CREATE should be specified when creating new route [ 901.315584][T27763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5490'. [ 901.329432][T27759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5489'. [ 901.479493][T27766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5491'. [ 901.489281][T27767] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5490'. [ 901.509286][T27767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5490'. [ 902.819606][T27766] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5491'. [ 902.830819][T27766] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 903.090698][T27763] Set syz1 is full, maxelem 65536 reached [ 903.378829][T27791] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 903.443804][T27802] __nla_validate_parse: 5 callbacks suppressed [ 903.450579][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5500'. [ 903.464619][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5500'. [ 903.474059][T27802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5500'. [ 903.873145][T27812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5502'. [ 903.957329][T27812] sctp: [Deprecated]: syz.2.5502 (pid 27812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.957329][T27812] Use struct sctp_sack_info instead [ 903.977661][T27812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 904.000669][T27814] tipc: Enabled bearer , priority 0 [ 904.309363][T27814] syzkaller0: entered promiscuous mode [ 904.309411][T27814] syzkaller0: entered allmulticast mode [ 904.326355][T27814] tipc: Resetting bearer [ 904.569459][T27813] tipc: Resetting bearer [ 905.229361][T27844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5508'. [ 905.941251][T27871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5514'. [ 905.973136][T27871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5514'. [ 908.012163][T27897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5518'. [ 910.015804][T27813] tipc: Disabling bearer [ 910.037239][T27822] bridge7: entered promiscuous mode [ 910.045178][T27822] bridge7: entered allmulticast mode [ 910.054630][T27822] team0: Port device bridge7 added [ 910.331014][T27901] xt_limit: Overflow, try lower: 0/0 [ 910.605856][T27921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5524'. [ 910.704954][T27923] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5524'. [ 911.356385][T27921] syzkaller0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.373642][T27921] bond_slave_0: left promiscuous mode [ 911.379791][T27921] bond_slave_0: left allmulticast mode [ 911.428038][T27921] syzkaller0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.442374][T27921] bond_slave_1: left promiscuous mode [ 911.445118][T27921] bond_slave_1: left allmulticast mode [ 911.451656][T27921] syzkaller0 (unregistering): Released all slaves [ 911.707741][T27933] netlink: 'syz.2.5527': attribute type 1 has an invalid length. [ 912.063680][T27933] 8021q: adding VLAN 0 to HW filter on device bond6 [ 912.339417][T27936] bridge12: entered promiscuous mode [ 912.807660][T27971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5532'. [ 913.614668][T27987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5535'. [ 913.719656][T27990] bridge8: entered promiscuous mode [ 913.732553][T27990] bridge8: entered allmulticast mode [ 913.748255][T27990] team0: Port device bridge8 added [ 913.804565][T27993] netlink: 'syz.2.5538': attribute type 61 has an invalid length. [ 914.086212][T27995] vlan0: entered allmulticast mode [ 914.086256][T27995] batadv0: entered allmulticast mode [ 915.520824][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5545'. [ 915.746653][T28035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 915.806247][T28030] tc_dump_action: action bad kind [ 916.099173][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5546'. [ 916.099225][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5546'. [ 916.099323][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5546'. [ 916.193529][T28045] netlink: 'syz.2.5549': attribute type 61 has an invalid length. [ 916.375178][T28054] erspan0: left allmulticast mode [ 916.375245][T28054] erspan0: left promiscuous mode [ 916.375499][T28054] bridge10: port 1(erspan0) entered disabled state [ 916.459856][T28054] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.493336][T28054] bridge_slave_1: left allmulticast mode [ 916.493386][T28054] bridge_slave_1: left promiscuous mode [ 916.493626][T28054] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.531655][T28054] .`: (slave bond_slave_0): Releasing backup interface [ 916.605859][T28054] .`: (slave bond_slave_1): Releasing backup interface [ 916.719003][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 916.815495][T28054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.825473][T28054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.893624][T28054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.911441][T28054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.947826][T28054] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 917.182253][T28074] vlan0: entered promiscuous mode [ 917.182361][T28074] bond0: entered promiscuous mode [ 917.182404][T28074] geneve3: entered promiscuous mode [ 917.216894][T28054] tipc: Enabling of bearer rejected, failed to enable media [ 917.333919][T28076] netlink: 'syz.1.5555': attribute type 83 has an invalid length. [ 917.436557][T28078] openvswitch: netlink: Unknown key attributes 2 [ 917.731362][T28084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5558'. [ 917.966925][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5558'. [ 918.123236][T28089] bridge_slave_0: default FDB implementation only supports local addresses [ 918.378708][T28115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5562'. [ 918.480709][T28115] ipvlan2: entered allmulticast mode [ 918.693002][T28123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5563'. [ 918.754157][T28120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5562'. [ 919.501225][T28145] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5567'. [ 919.560829][T28149] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 919.666759][T28152] syzkaller0: entered promiscuous mode [ 919.666804][T28152] syzkaller0: entered allmulticast mode [ 920.251577][T28170] pim6reg1: entered promiscuous mode [ 920.251987][T28170] pim6reg1: entered allmulticast mode [ 920.382553][T28173] xt_CT: No such helper "netbios-ns" [ 920.610005][T28177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 921.479389][T28201] gre2: entered allmulticast mode [ 922.001488][T28224] pim6reg1: entered promiscuous mode [ 922.008641][T28224] pim6reg1: entered allmulticast mode [ 922.342678][T28234] gtp0: entered promiscuous mode [ 922.344439][T28234] gtp0: entered allmulticast mode [ 922.449316][T28243] __nla_validate_parse: 3 callbacks suppressed [ 922.456322][T28243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5596'. [ 922.513085][T28245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5596'. [ 923.688999][T28284] nft_compat: unsupported protocol 1 [ 923.734734][T28282] pim6reg1: entered promiscuous mode [ 923.734777][T28282] pim6reg1: entered allmulticast mode [ 924.572029][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 924.572085][T28306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5609'. [ 924.639922][T21720] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.639990][T21720] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.640051][T21720] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.640093][T21720] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.210622][T28323] netlink: 'syz.4.5617': attribute type 2 has an invalid length. [ 925.271141][T28323] netlink: 'syz.4.5617': attribute type 1 has an invalid length. [ 925.349269][T28323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 926.129032][T28344] netlink: 'syz.2.5624': attribute type 1 has an invalid length. [ 926.321857][T28344] 8021q: adding VLAN 0 to HW filter on device bond7 [ 926.454776][T28348] bond7: (slave geneve3): making interface the new active one [ 926.484696][T28348] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 926.863732][T28365] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 928.266675][T28398] pim6reg1: entered promiscuous mode [ 928.266722][T28398] pim6reg1: entered allmulticast mode [ 928.283065][T28402] ip_tables: iptables: counters copy to user failed while replacing table [ 929.266291][T28427] netlink: 'syz.4.5653': attribute type 4 has an invalid length. [ 929.326915][T28432] FAULT_INJECTION: forcing a failure. [ 929.326915][T28432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.352578][T28432] CPU: 0 UID: 0 PID: 28432 Comm: syz.0.5655 Not tainted syzkaller #0 PREEMPT(full) [ 929.352607][T28432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 929.352620][T28432] Call Trace: [ 929.352629][T28432] [ 929.352638][T28432] dump_stack_lvl+0xe8/0x150 [ 929.352673][T28432] should_fail_ex+0x410/0x560 [ 929.352708][T28432] _copy_from_iter+0x1d3/0x1660 [ 929.352752][T28432] ? __pfx__copy_from_iter+0x10/0x10 [ 929.352783][T28432] ? trace_kmalloc+0x2a/0xf0 [ 929.352817][T28432] ? __kmalloc_noprof+0x38c/0x720 [ 929.352847][T28432] ? __kmalloc_noprof+0x1ab/0x720 [ 929.352875][T28432] ? kernfs_fop_write_iter+0x157/0x540 [ 929.352907][T28432] kernfs_fop_write_iter+0x19a/0x540 [ 929.352936][T28432] vfs_write+0x612/0xba0 [ 929.352976][T28432] ? __pfx_vfs_write+0x10/0x10 [ 929.353016][T28432] ? __fget_files+0x2a/0x420 [ 929.353053][T28432] ksys_write+0x150/0x270 [ 929.353085][T28432] ? __pfx_ksys_write+0x10/0x10 [ 929.353126][T28432] do_syscall_64+0x166/0x520 [ 929.353156][T28432] ? trace_irq_disable+0x3b/0x140 [ 929.353177][T28432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.353198][T28432] ? clear_bhb_loop+0x70/0xc0 [ 929.353225][T28432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.353246][T28432] RIP: 0033:0x7f5698b9e159 [ 929.353266][T28432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.353285][T28432] RSP: 002b:00007f5699b48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.353307][T28432] RAX: ffffffffffffffda RBX: 00007f5698e25fa0 RCX: 00007f5698b9e159 [ 929.353323][T28432] RDX: 0000000000000009 RSI: 0000200000000100 RDI: 0000000000000004 [ 929.353336][T28432] RBP: 00007f5699b48090 R08: 0000000000000000 R09: 0000000000000000 [ 929.353353][T28432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.353366][T28432] R13: 00007f5698e26038 R14: 00007f5698e25fa0 R15: 00007ffcd7432798 [ 929.353400][T28432] [ 929.648962][T28438] veth0: entered promiscuous mode [ 930.258401][T28447] veth0: left promiscuous mode [ 930.317504][T28460] team0: Port device team_slave_0 removed [ 930.440828][T28460] team0: Port device team_slave_1 removed [ 930.441325][T28460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.510941][T28460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.581325][T28460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 930.599920][T28466] team0: No ports can be present during mode change [ 930.642674][T28469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.724952][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5661'. [ 931.287456][T28492] xt_TCPMSS: Only works on TCP SYN packets [ 931.709618][T28479] bridge0: port 3(vlan2) entered disabled state [ 931.880956][T28499] FAULT_INJECTION: forcing a failure. [ 931.880956][T28499] name failslab, interval 1, probability 0, space 0, times 0 [ 931.881435][T28499] CPU: 1 UID: 0 PID: 28499 Comm: syz.1.5668 Not tainted syzkaller #0 PREEMPT(full) [ 931.881512][T28499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.881562][T28499] Call Trace: [ 931.881585][T28499] [ 931.881616][T28499] dump_stack_lvl+0xe8/0x150 [ 931.881709][T28499] should_fail_ex+0x410/0x560 [ 931.881893][T28499] should_failslab+0xa8/0x100 [ 931.881970][T28499] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 931.882059][T28499] ? kernfs_root+0x1c/0x230 [ 931.882145][T28499] ? dev_exception_add+0x93/0x490 [ 931.882220][T28499] ? dev_exception_add+0x93/0x490 [ 931.882320][T28499] kmemdup_noprof+0x2b/0x70 [ 931.882386][T28499] dev_exception_add+0x93/0x490 [ 931.882454][T28499] ? bpf_lsm_capable+0x9/0x20 [ 931.882546][T28499] ? security_capable+0x7e/0x2c0 [ 931.882643][T28499] devcgroup_access_write+0xebd/0x1790 [ 931.882743][T28499] ? __pfx_devcgroup_access_write+0x10/0x10 [ 931.882819][T28499] ? __lock_acquire+0x6df/0x2e50 [ 931.883011][T28499] ? kernfs_root+0x1c/0x230 [ 931.883100][T28499] ? kernfs_root+0x1c/0x230 [ 931.883181][T28499] ? kernfs_root+0x1c/0x230 [ 931.883286][T28499] ? kernfs_root+0x1ea/0x230 [ 931.883381][T28499] ? __pfx_devcgroup_access_write+0x10/0x10 [ 931.883455][T28499] cgroup_file_write+0x331/0x8f0 [ 931.883562][T28499] ? __pfx_cgroup_file_write+0x10/0x10 [ 931.883656][T28499] ? __kmalloc_noprof+0x38c/0x720 [ 931.883780][T28499] ? __pfx_cgroup_file_write+0x10/0x10 [ 931.883854][T28499] kernfs_fop_write_iter+0x3a4/0x540 [ 931.883970][T28499] vfs_write+0x612/0xba0 [ 931.884078][T28499] ? __pfx_vfs_write+0x10/0x10 [ 931.884212][T28499] ? __fget_files+0x2a/0x420 [ 931.884304][T28499] ksys_write+0x150/0x270 [ 931.884398][T28499] ? __pfx_ksys_write+0x10/0x10 [ 931.884525][T28499] do_syscall_64+0x166/0x520 [ 931.884609][T28499] ? trace_irq_disable+0x3b/0x140 [ 931.884672][T28499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.884736][T28499] ? clear_bhb_loop+0x70/0xc0 [ 931.884821][T28499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.884884][T28499] RIP: 0033:0x7f0209f9e159 [ 931.884937][T28499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.884990][T28499] RSP: 002b:00007f02081f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.885040][T28499] RAX: ffffffffffffffda RBX: 00007f020a225fa0 RCX: 00007f0209f9e159 [ 931.885090][T28499] RDX: 0000000000000009 RSI: 0000200000000100 RDI: 0000000000000004 [ 931.885131][T28499] RBP: 00007f02081f6090 R08: 0000000000000000 R09: 0000000000000000 [ 931.885165][T28499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.885204][T28499] R13: 00007f020a226038 R14: 00007f020a225fa0 R15: 00007ffd74c051f8 [ 931.885306][T28499] [ 932.338602][T28502] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5669'. [ 933.498820][T28479] veth1_vlan: left promiscuous mode [ 933.549133][T28479] batman_adv: batadv0: Interface deactivated: vlan4 [ 935.281902][T24655] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.282151][T24655] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 42279 - 0 [ 935.282383][T24655] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 935.282615][T24655] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.282831][T24655] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 42279 - 0 [ 935.283046][T24655] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 935.283277][T24655] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.283730][T24655] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 42279 - 0 [ 935.283811][T24655] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 935.295708][T24655] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.295804][T24655] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 42279 - 0 [ 935.295887][T24655] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 935.624976][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5674'. [ 935.634564][T28527] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5674'. [ 935.634621][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5674'. [ 936.180493][T28556] FAULT_INJECTION: forcing a failure. [ 936.180493][T28556] name failslab, interval 1, probability 0, space 0, times 0 [ 936.180553][T28556] CPU: 0 UID: 0 PID: 28556 Comm: syz.4.5680 Not tainted syzkaller #0 PREEMPT(full) [ 936.180582][T28556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 936.180597][T28556] Call Trace: [ 936.180607][T28556] [ 936.180618][T28556] dump_stack_lvl+0xe8/0x150 [ 936.180658][T28556] should_fail_ex+0x410/0x560 [ 936.180702][T28556] should_failslab+0xa8/0x100 [ 936.180734][T28556] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 936.180774][T28556] ? dev_exception_add+0x93/0x490 [ 936.180804][T28556] ? dev_exception_add+0x93/0x490 [ 936.180842][T28556] ? propagate_exception+0x28/0x500 [ 936.180874][T28556] kmemdup_noprof+0x2b/0x70 [ 936.180910][T28556] ? propagate_exception+0x28/0x500 [ 936.180940][T28556] dev_exception_add+0x93/0x490 [ 936.180992][T28556] ? propagate_exception+0x28/0x500 [ 936.181028][T28556] ? propagate_exception+0x28/0x500 [ 936.181057][T28556] propagate_exception+0x245/0x500 [ 936.181090][T28556] ? propagate_exception+0x28/0x500 [ 936.181133][T28556] devcgroup_access_write+0xf24/0x1790 [ 936.181169][T28556] ? __pfx_devcgroup_access_write+0x10/0x10 [ 936.181200][T28556] ? __lock_acquire+0x6df/0x2e50 [ 936.181280][T28556] ? kernfs_root+0x1c/0x230 [ 936.181315][T28556] ? kernfs_root+0x1c/0x230 [ 936.181347][T28556] ? kernfs_root+0x1c/0x230 [ 936.181382][T28556] ? kernfs_root+0x1ea/0x230 [ 936.181418][T28556] ? __pfx_devcgroup_access_write+0x10/0x10 [ 936.181448][T28556] cgroup_file_write+0x331/0x8f0 [ 936.181493][T28556] ? __pfx_cgroup_file_write+0x10/0x10 [ 936.181540][T28556] ? __kmalloc_noprof+0x38c/0x720 [ 936.181587][T28556] ? __pfx_cgroup_file_write+0x10/0x10 [ 936.181617][T28556] kernfs_fop_write_iter+0x3a4/0x540 [ 936.181652][T28556] vfs_write+0x612/0xba0 [ 936.181693][T28556] ? __pfx_vfs_write+0x10/0x10 [ 936.181737][T28556] ? __fget_files+0x2a/0x420 [ 936.181777][T28556] ksys_write+0x150/0x270 [ 936.181811][T28556] ? __pfx_ksys_write+0x10/0x10 [ 936.181855][T28556] do_syscall_64+0x166/0x520 [ 936.181886][T28556] ? trace_irq_disable+0x3b/0x140 [ 936.181906][T28556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.181929][T28556] ? clear_bhb_loop+0x70/0xc0 [ 936.181957][T28556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.181979][T28556] RIP: 0033:0x7efdd0b9e159 [ 936.182000][T28556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.182019][T28556] RSP: 002b:00007efdd1aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 936.182042][T28556] RAX: ffffffffffffffda RBX: 00007efdd0e25fa0 RCX: 00007efdd0b9e159 [ 936.182059][T28556] RDX: 0000000000000009 RSI: 0000200000000100 RDI: 0000000000000004 [ 936.182073][T28556] RBP: 00007efdd1aef090 R08: 0000000000000000 R09: 0000000000000000 [ 936.182086][T28556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.182099][T28556] R13: 00007efdd0e26038 R14: 00007efdd0e25fa0 R15: 00007fff58e124c8 [ 936.182144][T28556] [ 937.105090][T28590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5684'. [ 937.157549][T28575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'. [ 937.347136][T28599] netlink: 'syz.3.5687': attribute type 2 has an invalid length. [ 937.364372][T28599] bridge0: Device is already in use. [ 938.421600][T28632] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5694'. [ 938.924918][T28645] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 939.274087][T28655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5700'. [ 939.495733][T28659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.664619][T28659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.864430][T28659] bridge_slave_1: entered promiscuous mode [ 939.879563][T28659] bond_slave_0: entered promiscuous mode [ 939.905770][T28659] bond_slave_1: entered promiscuous mode [ 940.016527][T28659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.063486][T28659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.212851][T28659] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 940.411248][T28680] netlink: 'syz.0.5704': attribute type 1 has an invalid length. [ 940.411293][T28680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5704'. [ 941.763916][T28716] netlink: 'syz.1.5712': attribute type 4 has an invalid length. [ 941.826857][T28716] netlink: 'syz.1.5712': attribute type 4 has an invalid length. [ 942.188108][T28722] tipc: Enabling of bearer rejected, already enabled [ 942.407880][T28735] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5715'. [ 943.509405][T28764] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5720'. [ 943.509642][T28764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5720'. [ 943.856492][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5724'. [ 946.477093][T28761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 946.600412][T28815] netlink: 'syz.0.5727': attribute type 1 has an invalid length. [ 946.655307][T28816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 946.891839][T28828] syz_tun: entered allmulticast mode [ 947.016805][T28833] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 947.148530][T28838] syzkaller0: entered promiscuous mode [ 947.148575][T28838] syzkaller0: entered allmulticast mode [ 947.861144][T28856] ip6gre3: entered promiscuous mode [ 947.868419][T28856] ip6gre3: entered allmulticast mode [ 947.884190][T21720] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 947.895663][T21720] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 947.911039][T20676] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 948.035093][T28856] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5735'. [ 948.090901][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 948.490126][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 948.603729][T28883] geneve0: entered promiscuous mode [ 948.618229][T28883] geneve0: left promiscuous mode [ 948.627969][T28881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5744'. [ 948.760435][T28881] vlan2: entered promiscuous mode [ 948.764121][T28881] veth1: entered promiscuous mode [ 949.124654][T28884] syzkaller0: entered promiscuous mode [ 949.125602][T28884] syzkaller0: entered allmulticast mode [ 949.145581][T28887] tipc: Enabled bearer , priority 0 [ 949.381564][T28903] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5750'. [ 949.392486][T28903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5750'. [ 949.564547][T28882] tipc: Resetting bearer [ 949.981966][T28919] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5753'. [ 950.000326][T28919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5753'. [ 951.910350][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 954.246266][T28882] tipc: Disabling bearer [ 954.337303][T28927] dummy0: mtu less than device minimum [ 954.601381][T28949] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5758'. [ 954.719879][T28947] pim6reg1: entered promiscuous mode [ 954.724399][T28947] pim6reg1: entered allmulticast mode [ 954.902188][T28958] netlink: 'syz.1.5760': attribute type 4 has an invalid length. [ 955.031455][T28964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5760'. [ 955.070189][T28963] netlink: 'syz.1.5760': attribute type 4 has an invalid length. [ 955.254494][T28960] netlink: 616 bytes leftover after parsing attributes in process `syz.4.5761'. [ 955.679957][T28971] pim6reg1: entered promiscuous mode [ 955.685484][T28971] pim6reg1: entered allmulticast mode [ 955.781220][T28978] vxcan0: tx address claim with dlc 1 [ 955.854555][T28977] netlink: 'syz.1.5766': attribute type 61 has an invalid length. [ 956.315388][T28993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5771'. [ 956.883715][T28998] udevd[28998]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 956.907438][T28998] udevd[28998]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 956.982151][T29005] netlink: 'syz.2.5775': attribute type 61 has an invalid length. [ 957.292129][T29012] netlink: 'syz.3.5778': attribute type 10 has an invalid length. [ 957.317534][T29012] bond9: (slave veth0_to_bond): Releasing active interface [ 957.337534][T29012] veth0_to_bond: entered promiscuous mode [ 957.496179][T29023] x_tables: duplicate underflow at hook 2 [ 957.509673][T29026] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 957.676476][T29035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5781'. [ 957.694372][T29035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5781'. [ 957.772753][T29037] x_tables: duplicate underflow at hook 2 [ 957.811376][T29042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5781'. [ 957.859031][T29037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5781'. [ 957.911232][T29051] netlink: 'syz.1.5787': attribute type 2 has an invalid length. [ 957.911275][T29051] netlink: 'syz.1.5787': attribute type 5 has an invalid length. [ 957.932265][T29048] netlink: 'syz.1.5787': attribute type 2 has an invalid length. [ 957.932306][T29048] netlink: 'syz.1.5787': attribute type 5 has an invalid length. [ 958.415408][T29062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5788'. [ 959.368807][T29096] syzkaller0: entered promiscuous mode [ 959.368852][T29096] syzkaller0: entered allmulticast mode [ 959.447148][T29096] syzkaller1: entered promiscuous mode [ 959.457211][T29096] syzkaller1: entered allmulticast mode [ 959.558948][T29101] syzkaller0: entered promiscuous mode [ 959.565964][T29101] syzkaller0: entered allmulticast mode [ 959.749927][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 959.835711][T29111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5804'. [ 960.614719][T29126] netlink: 'syz.3.5809': attribute type 61 has an invalid length. [ 961.226463][T29139] xt_hashlimit: size too large, truncated to 1048576 [ 961.335033][T29146] xt_hashlimit: size too large, truncated to 1048576 [ 961.375583][T29141] veth1: entered allmulticast mode [ 961.737361][T29162] bridge14: entered promiscuous mode [ 961.738207][T29162] bridge14: entered allmulticast mode [ 961.819270][T29162] team0: Port device bridge14 added [ 962.141619][T29167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5819'. [ 962.251064][T29174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5823'. [ 962.317605][T29186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5823'. [ 962.328084][T29181] tc_dump_action: action bad kind [ 962.551337][T29181] xt_CT: No such helper "netbios-ns" [ 962.656895][T29192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5824'. [ 963.503158][T29212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5830'. [ 967.699542][T29237] ip_tables: iptables: counters copy to user failed while replacing table [ 967.915142][T29242] netlink: 'syz.1.5838': attribute type 61 has an invalid length. [ 968.183278][T29247] netlink: 'syz.3.5839': attribute type 11 has an invalid length. [ 968.407348][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5844'. [ 968.672446][T29267] pim6reg1: entered promiscuous mode [ 968.679598][T29267] pim6reg1: entered allmulticast mode [ 968.932587][T29273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5849'. [ 969.039499][T29276] netlink: 'syz.1.5848': attribute type 61 has an invalid length. [ 969.191224][T29287] macvlan0: entered promiscuous mode [ 969.197603][T29287] netlink: 'syz.3.5852': attribute type 1 has an invalid length. [ 969.205993][T29287] netlink: 'syz.3.5852': attribute type 2 has an invalid length. [ 969.226577][T29287] netlink: 'syz.3.5852': attribute type 1 has an invalid length. [ 969.234893][T29287] netlink: 'syz.3.5852': attribute type 2 has an invalid length. [ 969.948870][T29301] netlink: 'syz.3.5856': attribute type 1 has an invalid length. [ 969.948915][T29301] netlink: 'syz.3.5856': attribute type 2 has an invalid length. [ 970.535601][T29307] FAULT_INJECTION: forcing a failure. [ 970.535601][T29307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.563507][T29307] CPU: 0 UID: 0 PID: 29307 Comm: syz.1.5859 Not tainted syzkaller #0 PREEMPT(full) [ 970.563541][T29307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.563557][T29307] Call Trace: [ 970.563566][T29307] [ 970.563577][T29307] dump_stack_lvl+0xe8/0x150 [ 970.563616][T29307] should_fail_ex+0x410/0x560 [ 970.563674][T29307] _copy_to_user+0x31/0xb0 [ 970.563704][T29307] simple_read_from_buffer+0xe1/0x170 [ 970.563742][T29307] proc_fail_nth_read+0x1bb/0x230 [ 970.563777][T29307] ? common_file_perm+0x20e/0x2b0 [ 970.563806][T29307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.563845][T29307] ? rw_verify_area+0x24a/0x4c0 [ 970.563881][T29307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.563915][T29307] vfs_read+0x213/0xa80 [ 970.563956][T29307] ? __pfx_vfs_read+0x10/0x10 [ 970.563992][T29307] ? do_sys_openat2+0x14e/0x200 [ 970.564018][T29307] ? kmem_cache_free+0x182/0x650 [ 970.564059][T29307] ksys_read+0x150/0x270 [ 970.564094][T29307] ? __pfx_ksys_read+0x10/0x10 [ 970.564140][T29307] do_syscall_64+0x166/0x520 [ 970.564174][T29307] ? trace_irq_disable+0x3b/0x140 [ 970.564197][T29307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.564221][T29307] ? clear_bhb_loop+0x70/0xc0 [ 970.564251][T29307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.564275][T29307] RIP: 0033:0x7f0209f5e98e [ 970.564297][T29307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 970.564318][T29307] RSP: 002b:00007f02081f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.564356][T29307] RAX: ffffffffffffffda RBX: 00007f02081f66c0 RCX: 00007f0209f5e98e [ 970.564374][T29307] RDX: 000000000000000f RSI: 00007f02081f60a0 RDI: 000000000000000a [ 970.564389][T29307] RBP: 00007f02081f6090 R08: 0000000000000000 R09: 0000000000000000 [ 970.564403][T29307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.564418][T29307] R13: 00007f020a226038 R14: 00007f020a225fa0 R15: 00007ffd74c051f8 [ 970.564454][T29307] [ 970.992345][T29318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5860'. [ 971.043954][T29318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5860'. [ 971.044044][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5860'. [ 971.801291][T29327] tap0: tun_chr_ioctl cmd 1074025676 [ 971.801349][T29327] tap0: owner set to 0 [ 972.523749][T29342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5868'. [ 973.705143][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 973.719166][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 973.725630][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 973.738281][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 973.753194][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 973.762455][T29359] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 973.763107][T29359] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 974.418760][T29390] geneve3: entered promiscuous mode [ 974.433830][T21720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.434053][T21720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.434248][T21720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.434430][T21720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.470542][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 974.850590][T29404] netlink: 'syz.0.5887': attribute type 4 has an invalid length. [ 974.878373][T29404] netlink: 'syz.0.5887': attribute type 4 has an invalid length. [ 975.005404][T29410] netlink: 'syz.0.5887': attribute type 4 has an invalid length. [ 975.027414][T29411] netlink: 'syz.0.5887': attribute type 4 has an invalid length. [ 975.210883][T29420] netlink: 'syz.4.5889': attribute type 16 has an invalid length. [ 975.220896][T29420] netlink: 'syz.4.5889': attribute type 3 has an invalid length. [ 975.230784][T29420] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.5889'. [ 975.257326][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5889'. [ 975.494379][T29425] netlink: 356 bytes leftover after parsing attributes in process `syz.0.5890'. [ 975.798603][T29374] lo speed is unknown, defaulting to 1000 [ 975.830760][ T5620] Bluetooth: hci1: command tx timeout [ 975.876539][T29428] pim6reg1: entered promiscuous mode [ 975.876582][T29428] pim6reg1: entered allmulticast mode [ 976.366721][T29440] xt_policy: output policy not valid in PREROUTING and INPUT [ 977.543616][T29474] netlink: 'syz.0.5898': attribute type 2 has an invalid length. [ 977.632005][T29474] netlink: 'syz.0.5898': attribute type 2 has an invalid length. [ 977.632600][T29474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'. [ 977.721282][ T32] audit: type=1107 audit(1788851739.957:19): pid=29483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='LRt^ټYJrE .A!ɖy+o_ 1' [ 977.910157][ T5620] Bluetooth: hci1: command tx timeout [ 978.443093][T29374] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.456423][T29374] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.456654][T29374] bridge_slave_0: entered allmulticast mode [ 978.521251][T29374] bridge_slave_0: entered promiscuous mode [ 978.594085][T29374] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.595652][T29374] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.596599][T29374] bridge_slave_1: entered allmulticast mode [ 978.639605][T29374] bridge_slave_1: entered promiscuous mode [ 978.815754][T29503] xt_connbytes: Forcing CT accounting to be enabled [ 978.824554][T29503] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 978.839554][T29374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.879158][T29374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.080490][T29374] team0: Port device team_slave_0 added [ 979.096354][T29374] team0: Port device team_slave_1 added [ 979.154406][T29514] netlink: NAT attribute has 8 unknown bytes [ 979.160793][T29514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.194975][T29374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.203490][T29374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.230750][T29374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.255408][T29374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.255624][T29374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.255827][T29374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.625537][T29374] hsr_slave_0: entered promiscuous mode [ 979.635163][T29374] hsr_slave_1: entered promiscuous mode [ 979.645065][T29374] debugfs: 'hsr0' already exists in 'hsr' [ 979.645521][T29374] Cannot create hsr debugfs directory [ 979.993788][ T5620] Bluetooth: hci1: command tx timeout [ 981.838120][T29556] syz.4.5913: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 981.838284][T29556] CPU: 0 UID: 0 PID: 29556 Comm: syz.4.5913 Not tainted syzkaller #0 PREEMPT(full) [ 981.838314][T29556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 981.838331][T29556] Call Trace: [ 981.838340][T29556] [ 981.838360][T29556] dump_stack_lvl+0xe8/0x150 [ 981.838403][T29556] warn_alloc+0x24d/0x270 [ 981.838443][T29556] ? kasan_save_track+0x4f/0x80 [ 981.838466][T29556] ? kasan_save_track+0x3e/0x80 [ 981.838494][T29556] ? __pfx_warn_alloc+0x10/0x10 [ 981.838529][T29556] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 981.838554][T29556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.838601][T29556] __vmalloc_node_range_noprof+0x127/0x1540 [ 981.838662][T29556] ? rcu_is_watching+0x16/0xb0 [ 981.838698][T29556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 981.838733][T29556] ? __kmalloc_cache_noprof+0x321/0x600 [ 981.838772][T29556] ? __kmalloc_cache_noprof+0x14d/0x600 [ 981.838810][T29556] ? xskq_create+0x56/0x220 [ 981.838848][T29556] xskq_create+0x148/0x220 [ 981.838882][T29556] ? xsk_init_queue+0x8a/0xe0 [ 981.838916][T29556] xsk_init_queue+0x8a/0xe0 [ 981.838950][T29556] xsk_setsockopt+0x52a/0x960 [ 981.838985][T29556] ? __pfx_xsk_setsockopt+0x10/0x10 [ 981.839038][T29556] ? __pfx_aa_sk_perm+0x10/0x10 [ 981.839076][T29556] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 981.839106][T29556] ? __pfx_xsk_setsockopt+0x10/0x10 [ 981.839139][T29556] do_sock_setsockopt+0x17c/0x1b0 [ 981.839169][T29556] __x64_sys_setsockopt+0x13d/0x1b0 [ 981.839201][T29556] do_syscall_64+0x166/0x520 [ 981.839237][T29556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.839263][T29556] ? clear_bhb_loop+0x70/0xc0 [ 981.839295][T29556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.839320][T29556] RIP: 0033:0x7efdd0b9e159 [ 981.839343][T29556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.839372][T29556] RSP: 002b:00007efdd1aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 981.839398][T29556] RAX: ffffffffffffffda RBX: 00007efdd0e25fa0 RCX: 00007efdd0b9e159 [ 981.839416][T29556] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 981.839432][T29556] RBP: 00007efdd0c35024 R08: 0000000000000004 R09: 0000000000000000 [ 981.839448][T29556] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.839465][T29556] R13: 00007efdd0e26038 R14: 00007efdd0e25fa0 R15: 00007fff58e124c8 [ 981.839504][T29556] [ 982.078077][ T5620] Bluetooth: hci1: command tx timeout [ 982.152329][T29556] Mem-Info: [ 982.152364][T29556] active_anon:7472 inactive_anon:0 isolated_anon:0 [ 982.152364][T29556] active_file:485 inactive_file:43933 isolated_file:0 [ 982.152364][T29556] unevictable:0 dirty:112 writeback:0 [ 982.152364][T29556] slab_reclaimable:13174 slab_unreclaimable:130538 [ 982.152364][T29556] mapped:30314 shmem:665 pagetables:1279 [ 982.152364][T29556] sec_pagetables:0 bounce:0 [ 982.152364][T29556] kernel_misc_reclaimable:0 [ 982.152364][T29556] free:1212852 free_pcp:9385 free_cma:0 [ 982.152449][T29556] Node 0 active_anon:29888kB inactive_anon:0kB active_file:1940kB inactive_file:175536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121256kB dirty:448kB writeback:0kB shmem:2660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16896kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 982.152522][T29556] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 982.152589][T29556] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.152669][T29556] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 982.152741][T29556] Node 0 DMA32 free:892244kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29888kB inactive_anon:0kB active_file:1940kB inactive_file:175536kB unevictable:0kB writepending:448kB zspages:0kB present:3129332kB managed:2546704kB mlocked:0kB bounce:0kB free_pcp:37540kB local_pcp:21132kB free_cma:0kB [ 982.152821][T29556] lowmem_reserve[]: 0 0 0 0 0 [ 982.152917][T29556] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.152993][T29556] lowmem_reserve[]: 0 0 0 0 0 [ 982.153060][T29556] Node 1 Normal free:3943804kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.153148][T29556] lowmem_reserve[]: 0 0 0 0 0 [ 982.153213][T29556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 982.153418][T29556] Node 0 DMA32: 2951*4kB (UM) 1355*8kB (UME) 552*16kB (UME) 548*32kB (UME) 135*64kB (UME) 53*128kB (UME) 24*256kB (UM) 1*512kB (M) 6*1024kB (UME) 4*2048kB (UME) 197*4096kB (UM) = 892340kB [ 982.153693][T29556] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 982.277099][T29556] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 6*16kB (UM) 12*32kB (UM) 12*64kB (UM) 3*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3943804kB [ 982.277334][T29556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 982.277356][T29556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 982.277377][T29556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 982.277397][T29556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 982.277418][T29556] 45076 total pagecache pages [ 982.277429][T29556] 0 pages in swap cache [ 982.277438][T29556] Free swap = 124996kB [ 982.277448][T29556] Total swap = 124996kB [ 982.277459][T29556] 2097051 pages RAM [ 982.277469][T29556] 0 pages HighMem/MovableOnly [ 982.277478][T29556] 428759 pages reserved [ 982.277488][T29556] 0 pages cma reserved [ 984.313465][T29374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 984.316602][T29374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53841 - 0 [ 984.343985][T29590] openvswitch: netlink: IP tunnel dst address not specified [ 984.357272][T29590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.683264][T29597] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.763831][T29597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.877132][T29597] bridge_slave_1: entered promiscuous mode [ 984.968992][T29597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 984.987558][T29597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 985.155042][T29597] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 985.174381][T29597] veth1_vlan: left promiscuous mode [ 985.187271][T29597] veth0_vlan: left promiscuous mode [ 985.234701][T29597] veth0_vlan: entered promiscuous mode [ 985.308168][T29597] veth1_vlan: entered promiscuous mode [ 985.474213][T29597] veth1_macvtap: left promiscuous mode [ 985.489168][T29597] veth1_macvtap: entered promiscuous mode [ 985.529732][T29597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.544826][T29597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.556618][T29597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.582584][T29597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 985.592598][T29597] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 985.818055][T29374] team0: Port device netdevsim1 removed [ 985.895033][T29374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 985.895481][T29374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53841 - 0 [ 986.409145][T29374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 986.440409][T29374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53841 - 0 [ 986.592352][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5925'. [ 987.249125][T29644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5927'. [ 987.464622][T29652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5927'. [ 988.216136][T29665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5932'. [ 988.333794][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5932'. [ 988.351529][T29669] netlink: 'syz.0.5933': attribute type 4 has an invalid length. [ 988.395096][T29667] netlink: 'syz.0.5933': attribute type 4 has an invalid length. [ 988.517850][T29671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5934'. [ 988.892743][T29685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5935'. [ 989.205703][T29374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 989.470903][T29678] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 989.773584][T29704] netlink: 'syz.1.5937': attribute type 61 has an invalid length. [ 993.205679][T29374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 993.217016][T29374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 993.237087][T29374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 993.249345][T29374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 993.328635][T29374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 993.748225][T29374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 993.778875][T29374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 994.033934][T29743] dvmrp8: entered allmulticast mode [ 994.083501][T29743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5943'. [ 994.093198][T29743] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5943'. [ 994.107389][T29743] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5943'. [ 994.717935][T29374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.794710][T29757] netlink: 'syz.4.5947': attribute type 8 has an invalid length. [ 994.794751][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5947'. [ 994.856903][T29374] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.904950][T21718] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.905098][T21718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.923933][T21718] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.924061][T21718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.628325][T29783] tc_dump_action: action bad kind [ 996.035355][T29799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5957'. [ 996.581275][T29814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'. [ 996.983878][T29828] netlink: 'syz.1.5961': attribute type 4 has an invalid length. [ 997.007523][T29830] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5961'. [ 997.133552][T29374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.151266][T29859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5966'. [ 998.554510][T29730] udevd[29730]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 998.571523][T29730] udevd[29730]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 999.002622][T29837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.103461][T29837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.997035][T29837] bridge1: left promiscuous mode [ 1000.004149][T29837] bridge1: left allmulticast mode [ 1000.043476][T29837] bridge2: left promiscuous mode [ 1000.049050][T29837] bridge2: left allmulticast mode [ 1000.075510][T29837] gretap1: left promiscuous mode [ 1000.082291][T29837] ip6gre1: left promiscuous mode [ 1000.087729][T29837] ip6gre1: left allmulticast mode [ 1000.173645][T29837] veth3: left promiscuous mode [ 1000.173689][T29837] veth3: left allmulticast mode [ 1000.192590][T29837] veth5: left promiscuous mode [ 1000.192632][T29837] veth5: left allmulticast mode [ 1000.211027][T29837] veth9: left promiscuous mode [ 1000.211073][T29837] veth9: left allmulticast mode [ 1000.227647][T29837] veth11: left promiscuous mode [ 1000.227691][T29837] veth11: left allmulticast mode [ 1000.252265][T29837] bridge3: left promiscuous mode [ 1000.252311][T29837] bridge3: left allmulticast mode [ 1000.265324][T29837] bridge4: left promiscuous mode [ 1000.265369][T29837] bridge4: left allmulticast mode [ 1000.283094][T29837] bridge5: left promiscuous mode [ 1000.283136][T29837] bridge5: left allmulticast mode [ 1000.361443][T29837] gtp1: left promiscuous mode [ 1000.361495][T29837] gtp1: left allmulticast mode [ 1000.367867][T29837] bridge6: left promiscuous mode [ 1000.367951][T29837] bridge6: left allmulticast mode [ 1000.402700][T29837] veth13: left promiscuous mode [ 1000.402743][T29837] veth13: left allmulticast mode [ 1000.420507][T29837] veth15: left promiscuous mode [ 1000.420557][T29837] veth15: left allmulticast mode [ 1000.438194][T29837] veth17: left promiscuous mode [ 1000.438239][T29837] veth17: left allmulticast mode [ 1000.456240][T29837] veth19: left promiscuous mode [ 1000.456285][T29837] veth19: left allmulticast mode [ 1000.481069][T29837] veth21: left promiscuous mode [ 1000.481122][T29837] veth21: left allmulticast mode [ 1000.532374][T29837] veth25: left promiscuous mode [ 1000.532427][T29837] veth25: left allmulticast mode [ 1000.551079][T29837] veth27: left promiscuous mode [ 1000.551122][T29837] veth27: left allmulticast mode [ 1000.569641][T29837] veth29: left promiscuous mode [ 1000.572041][T29837] veth29: left allmulticast mode [ 1000.605147][T29837] bridge8: left promiscuous mode [ 1000.605205][T29837] bridge8: left allmulticast mode [ 1000.616629][T29837] bridge9: left promiscuous mode [ 1000.616679][T29837] bridge9: left allmulticast mode [ 1000.677191][T29837] bridge12: left promiscuous mode [ 1000.760662][T29837] bridge14: left promiscuous mode [ 1000.760716][T29837] bridge14: left allmulticast mode [ 1001.120634][T24653] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.120848][T24653] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.121088][T24653] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.121309][T24653] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.121549][T24653] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.121767][T24653] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.121998][T24653] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.122219][T24653] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.235774][T29374] veth0_vlan: entered promiscuous mode [ 1001.289599][T29374] veth1_vlan: entered promiscuous mode [ 1001.422117][T29873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1001.547194][T29374] veth0_macvtap: entered promiscuous mode [ 1001.605839][T29374] veth1_macvtap: entered promiscuous mode [ 1001.703948][T29374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.813894][T29374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.935717][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1001.945352][T29891] netlink: 'syz.0.5969': attribute type 32 has an invalid length. [ 1001.956041][T21718] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.956132][T21718] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.956262][T21718] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.956353][T21718] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.985308][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1001.985342][T29891] netlink: 'syz.0.5969': attribute type 32 has an invalid length. [ 1002.616819][T24653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.616899][T24653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.809059][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5975'. [ 1002.819073][ T9726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.819125][ T9726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.143407][T29890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1003.143634][T29890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1003.143867][T29890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1003.327457][T29920] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 [ 1003.854198][T29938] FAULT_INJECTION: forcing a failure. [ 1003.854198][T29938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.868935][T29938] CPU: 1 UID: 0 PID: 29938 Comm: syz.3.5977 Not tainted syzkaller #0 PREEMPT(full) [ 1003.868966][T29938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1003.868981][T29938] Call Trace: [ 1003.868991][T29938] [ 1003.869001][T29938] dump_stack_lvl+0xe8/0x150 [ 1003.869047][T29938] should_fail_ex+0x410/0x560 [ 1003.869092][T29938] _copy_from_user+0x2d/0xb0 [ 1003.869118][T29938] __sys_sendto+0x2a9/0x5a0 [ 1003.869152][T29938] ? ksys_write+0x1e6/0x270 [ 1003.869187][T29938] ? __pfx___sys_sendto+0x10/0x10 [ 1003.869219][T29938] ? __mutex_unlock_slowpath+0x731/0x900 [ 1003.869281][T29938] ? __pfx_ksys_write+0x10/0x10 [ 1003.869337][T29938] __x64_sys_sendto+0xde/0x100 [ 1003.869377][T29938] do_syscall_64+0x166/0x520 [ 1003.869410][T29938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.869434][T29938] ? clear_bhb_loop+0x70/0xc0 [ 1003.869463][T29938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.869487][T29938] RIP: 0033:0x7ff20c15e98e [ 1003.869508][T29938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1003.869528][T29938] RSP: 002b:00007ff20d115e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1003.869554][T29938] RAX: ffffffffffffffda RBX: 00007ff20d1176c0 RCX: 00007ff20c15e98e [ 1003.869572][T29938] RDX: 0000000000000020 RSI: 00007ff20d116000 RDI: 0000000000000003 [ 1003.869587][T29938] RBP: 0000000000000000 R08: 00007ff20d115f04 R09: 000000000000000c [ 1003.869602][T29938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1003.869616][T29938] R13: 00007ff20d115f58 R14: 00007ff20d116000 R15: 0000000000000000 [ 1003.869652][T29938] [ 1004.508647][T29942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5980'. [ 1004.522977][T29942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5980'. [ 1004.773522][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1004.794766][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1004.807522][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1004.878527][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1004.887437][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.190189][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1005.266323][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1006.577649][T29964] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1006.604231][T29964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1006.615514][T29964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1006.974803][ T52] Bluetooth: hci2: command tx timeout [ 1007.149521][T29954] lo speed is unknown, defaulting to 1000 [ 1007.369222][T30007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1007.369342][T30007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1007.417797][T30009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1007.427273][T30009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1007.476850][T30006] netlink: 'syz.2.5987': attribute type 1 has an invalid length. [ 1007.665288][T30014] nbd8: detected capacity change from 0 to 127 [ 1007.709239][ T2015] block nbd8: Send control failed (result -32) [ 1007.709376][ T2015] block nbd8: Request send failed, requeueing [ 1007.712283][ T52] block nbd8: Receive control failed (result -32) [ 1007.739333][ T2015] block nbd8: Dead connection, failed to find a fallback [ 1007.739362][ T2015] block nbd8: shutting down sockets [ 1007.739554][ T2015] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.754590][ T2015] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1007.792753][ T2015] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.792807][ T2015] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1007.816797][ T2015] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 1007.830706][ T2015] Buffer I/O error on dev nbd8, logical block 2, async page read [ 1007.838752][ T2015] Buffer I/O error on dev nbd8, logical block 3, async page read [ 1007.848151][ T2015] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.848202][ T2015] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1007.866664][ T2015] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.866717][ T2015] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1007.885297][ T1718] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.885793][ T1718] Buffer I/O error on dev nbd8, logical block 2, async page read [ 1007.886649][ T1718] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.886721][ T1718] Buffer I/O error on dev nbd8, logical block 3, async page read [ 1007.887157][ T1718] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.887226][ T1718] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1007.890975][ T1718] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.891074][ T1718] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1007.891938][ T1718] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1007.973655][T29730] ldm_validate_partition_table(): Disk read failed. [ 1007.975347][T29730] Dev nbd8: unable to read RDB block 0 [ 1008.002184][T29730] nbd8: unable to read partition table [ 1008.039298][T29730] ldm_validate_partition_table(): Disk read failed. [ 1008.048006][T29730] Dev nbd8: unable to read RDB block 0 [ 1008.057735][T29730] nbd8: unable to read partition table [ 1009.031861][ T52] Bluetooth: hci2: command tx timeout [ 1009.075393][T29954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.083107][T29954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.090780][T29954] bridge_slave_0: entered allmulticast mode [ 1009.101261][T29954] bridge_slave_0: entered promiscuous mode [ 1009.121480][T29954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.129989][T29954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.137555][T29954] bridge_slave_1: entered allmulticast mode [ 1009.152473][T29954] bridge_slave_1: entered promiscuous mode [ 1009.281447][T29954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.294062][T29954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.344211][T29954] team0: Port device team_slave_0 added [ 1009.376259][T29954] team0: Port device team_slave_1 added [ 1009.442279][T29954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.449374][T29954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.477738][T29954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.490987][T29954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.498092][T29954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.536855][T29954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.619611][T29954] hsr_slave_0: entered promiscuous mode [ 1009.630477][T29954] hsr_slave_1: entered promiscuous mode [ 1009.637250][T29954] debugfs: 'hsr0' already exists in 'hsr' [ 1009.643139][T29954] Cannot create hsr debugfs directory [ 1010.007565][T29954] [ 1010.009992][T29954] ====================================================== [ 1010.017033][T29954] WARNING: possible circular locking dependency detected [ 1010.024093][T29954] syzkaller #0 Not tainted [ 1010.028561][T29954] ------------------------------------------------------ [ 1010.035602][T29954] syz-executor/29954 is trying to acquire lock: [ 1010.041860][T29954] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1010.052191][T29954] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1010.052191][T29954] but task is already holding lock: [ 1010.059592][T29954] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1010.070541][T29954] [ 1010.070541][T29954] which lock already depends on the new lock. [ 1010.070541][T29954] [ 1010.080966][T29954] [ 1010.080966][T29954] the existing dependency chain (in reverse order) is: [ 1010.089997][T29954] [ 1010.089997][T29954] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1010.098732][T29954] down_read+0x4a/0x330 [ 1010.103454][T29954] kernfs_remove_by_name_ns+0x3f/0x140 [ 1010.109470][T29954] internal_create_group+0x58e/0x1180 [ 1010.115410][T29954] sysfs_update_groups+0x60/0x130 [ 1010.121000][T29954] pmu_dev_alloc+0x29b/0x300 [ 1010.126134][T29954] perf_event_sysfs_init+0x76/0x100 [ 1010.131914][T29954] do_one_initcall+0x250/0x870 [ 1010.137242][T29954] do_initcall_level+0x10a/0x1a0 [ 1010.142736][T29954] do_initcalls+0x59/0xa0 [ 1010.147625][T29954] kernel_init_freeable+0x29d/0x3e0 [ 1010.153380][T29954] kernel_init+0x22/0x1d0 [ 1010.158283][T29954] ret_from_fork+0x514/0xb70 [ 1010.163434][T29954] ret_from_fork_asm+0x1a/0x30 [ 1010.168763][T29954] [ 1010.168763][T29954] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1010.176011][T29954] __mutex_lock+0x19d/0x1550 [ 1010.181188][T29954] perf_event_init_cpu+0x1d1/0x7a0 [ 1010.186858][T29954] cpuhp_invoke_callback+0x434/0x810 [ 1010.192713][T29954] cpuhp_thread_fun+0x362/0x780 [ 1010.198124][T29954] smpboot_thread_fn+0x565/0xa70 [ 1010.203620][T29954] kthread+0x38b/0x480 [ 1010.208237][T29954] ret_from_fork+0x514/0xb70 [ 1010.213381][T29954] ret_from_fork_asm+0x1a/0x30 [ 1010.218705][T29954] [ 1010.218705][T29954] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1010.226301][T29954] cpuhp_thread_fun+0x127/0x780 [ 1010.231724][T29954] smpboot_thread_fn+0x565/0xa70 [ 1010.237222][T29954] kthread+0x38b/0x480 [ 1010.241843][T29954] ret_from_fork+0x514/0xb70 [ 1010.246980][T29954] ret_from_fork_asm+0x1a/0x30 [ 1010.252305][T29954] [ 1010.252305][T29954] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1010.260085][T29954] cpus_read_lock+0x42/0x160 [ 1010.265229][T29954] static_key_slow_inc+0x12/0x30 [ 1010.270717][T29954] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1010.276987][T29954] nbd_genl_foreach_sock+0x265/0x450 [ 1010.282843][T29954] nbd_genl_reconfigure+0xbbb/0x1040 [ 1010.288697][T29954] genl_family_rcv_msg_doit+0x233/0x340 [ 1010.294803][T29954] genl_rcv_msg+0x614/0x7a0 [ 1010.299871][T29954] netlink_rcv_skb+0x226/0x4a0 [ 1010.305186][T29954] genl_rcv+0x28/0x40 [ 1010.309728][T29954] netlink_unicast+0x7bd/0x940 [ 1010.315046][T29954] netlink_sendmsg+0x813/0xb40 [ 1010.320367][T29954] sock_sendmsg_nosec+0x13a/0x180 [ 1010.325945][T29954] ____sys_sendmsg+0x54e/0x850 [ 1010.331260][T29954] ___sys_sendmsg+0x2a5/0x360 [ 1010.336487][T29954] __x64_sys_sendmsg+0x1b1/0x290 [ 1010.341979][T29954] do_syscall_64+0x166/0x520 [ 1010.347127][T29954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.353571][T29954] [ 1010.353571][T29954] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1010.361267][T29954] __mutex_lock+0x19d/0x1550 [ 1010.366426][T29954] nbd_queue_rq+0x373/0xff0 [ 1010.371489][T29954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1010.377600][T29954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1010.384481][T29954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1010.391016][T29954] blk_mq_run_work_fn+0x16c/0x300 [ 1010.396598][T29954] process_scheduled_works+0xc3d/0x1630 [ 1010.402702][T29954] worker_thread+0xa47/0xfb0 [ 1010.407902][T29954] kthread+0x38b/0x480 [ 1010.412518][T29954] ret_from_fork+0x514/0xb70 [ 1010.417648][T29954] ret_from_fork_asm+0x1a/0x30 [ 1010.423052][T29954] [ 1010.423052][T29954] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1010.430294][T29954] __mutex_lock+0x19d/0x1550 [ 1010.435449][T29954] nbd_queue_rq+0xc1/0xff0 [ 1010.440425][T29954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1010.446527][T29954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1010.453419][T29954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1010.459951][T29954] blk_mq_run_work_fn+0x16c/0x300 [ 1010.465628][T29954] process_scheduled_works+0xc3d/0x1630 [ 1010.471739][T29954] worker_thread+0xa47/0xfb0 [ 1010.476899][T29954] kthread+0x38b/0x480 [ 1010.481525][T29954] ret_from_fork+0x514/0xb70 [ 1010.486666][T29954] ret_from_fork_asm+0x1a/0x30 [ 1010.491992][T29954] [ 1010.491992][T29954] -> #4 (set->srcu){.+.+}-{0:0}: [ 1010.499156][T29954] __synchronize_srcu+0xc9/0x2f0 [ 1010.504648][T29954] elevator_switch+0x1e8/0x7b0 [ 1010.509985][T29954] elevator_change+0x2fa/0x480 [ 1010.515309][T29954] elevator_set_default+0x375/0x440 [ 1010.521065][T29954] blk_register_queue+0x3f3/0x4e0 [ 1010.526655][T29954] __add_disk+0x6cb/0xe30 [ 1010.531554][T29954] add_disk_fwnode+0x100/0x3a0 [ 1010.536883][T29954] nbd_dev_add+0x733/0xb60 [ 1010.541997][T29954] nbd_init+0x168/0x1f0 [ 1010.546720][T29954] do_one_initcall+0x250/0x870 [ 1010.552045][T29954] do_initcall_level+0x10a/0x1a0 [ 1010.557542][T29954] do_initcalls+0x59/0xa0 [ 1010.562424][T29954] kernel_init_freeable+0x29d/0x3e0 [ 1010.568204][T29954] kernel_init+0x22/0x1d0 [ 1010.573124][T29954] ret_from_fork+0x514/0xb70 [ 1010.578298][T29954] ret_from_fork_asm+0x1a/0x30 [ 1010.583628][T29954] [ 1010.583628][T29954] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1010.591476][T29954] __mutex_lock+0x19d/0x1550 [ 1010.596628][T29954] elevator_change+0x1af/0x480 [ 1010.601961][T29954] elevator_set_none+0xb5/0x140 [ 1010.607386][T29954] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1010.613739][T29954] nbd_start_device+0x189/0xb30 [ 1010.619160][T29954] nbd_genl_connect+0x167d/0x1cd0 [ 1010.624739][T29954] genl_family_rcv_msg_doit+0x233/0x340 [ 1010.630868][T29954] genl_rcv_msg+0x614/0x7a0 [ 1010.635969][T29954] netlink_rcv_skb+0x226/0x4a0 [ 1010.641318][T29954] genl_rcv+0x28/0x40 [ 1010.645859][T29954] netlink_unicast+0x7bd/0x940 [ 1010.651170][T29954] netlink_sendmsg+0x813/0xb40 [ 1010.656492][T29954] sock_sendmsg_nosec+0x13a/0x180 [ 1010.662075][T29954] ____sys_sendmsg+0x54e/0x850 [ 1010.667399][T29954] ___sys_sendmsg+0x2a5/0x360 [ 1010.672625][T29954] __x64_sys_sendmsg+0x1b1/0x290 [ 1010.678122][T29954] do_syscall_64+0x166/0x520 [ 1010.683267][T29954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.689705][T29954] [ 1010.689705][T29954] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1010.698360][T29954] blk_alloc_queue+0x544/0x690 [ 1010.703710][T29954] __blk_mq_alloc_disk+0x194/0x390 [ 1010.709390][T29954] nbd_dev_add+0x494/0xb60 [ 1010.714380][T29954] nbd_init+0x168/0x1f0 [ 1010.719099][T29954] do_one_initcall+0x250/0x870 [ 1010.724424][T29954] do_initcall_level+0x10a/0x1a0 [ 1010.729911][T29954] do_initcalls+0x59/0xa0 [ 1010.734789][T29954] kernel_init_freeable+0x29d/0x3e0 [ 1010.740545][T29954] kernel_init+0x22/0x1d0 [ 1010.745425][T29954] ret_from_fork+0x514/0xb70 [ 1010.750575][T29954] ret_from_fork_asm+0x1a/0x30 [ 1010.755900][T29954] [ 1010.755900][T29954] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1010.763159][T29954] fs_reclaim_acquire+0x71/0x100 [ 1010.768660][T29954] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1010.774946][T29954] alloc_inode+0xb8/0x1b0 [ 1010.779830][T29954] iget_locked+0x131/0x6a0 [ 1010.784813][T29954] kernfs_get_inode+0x4f/0x770 [ 1010.790139][T29954] kernfs_get_tree+0x5cd/0x980 [ 1010.795462][T29954] vfs_get_tree+0x92/0x2a0 [ 1010.800436][T29954] do_new_mount+0x319/0xdc0 [ 1010.805490][T29954] __se_sys_mount+0x31d/0x420 [ 1010.810715][T29954] do_syscall_64+0x166/0x520 [ 1010.815870][T29954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.822333][T29954] [ 1010.822333][T29954] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1010.830368][T29954] __lock_acquire+0x15ff/0x2e50 [ 1010.835771][T29954] lock_acquire+0x115/0x350 [ 1010.840860][T29954] down_write+0x96/0x200 [ 1010.845648][T29954] kernfs_remove_by_name_ns+0x4e/0x140 [ 1010.851654][T29954] sysfs_remove_group+0x101/0x2e0 [ 1010.857240][T29954] sysfs_remove_groups+0x54/0xb0 [ 1010.862743][T29954] net_rx_queue_update_kobjects+0x6b7/0x780 [ 1010.869191][T29954] netdev_unregister_kobject+0xff/0x450 [ 1010.875295][T29954] unregister_netdevice_many_notify+0x1be1/0x2140 [ 1010.882271][T29954] unregister_netdevice_queue+0x2f5/0x340 [ 1010.888548][T29954] nsim_destroy+0x275/0x800 [ 1010.893606][T29954] __nsim_dev_port_del+0x14e/0x200 [ 1010.899266][T29954] nsim_dev_reload_destroy+0x288/0x490 [ 1010.905271][T29954] nsim_drv_remove+0x58/0x170 [ 1010.910501][T29954] device_release_driver_internal+0x48b/0x880 [ 1010.917117][T29954] bus_remove_device+0x444/0x560 [ 1010.922608][T29954] device_del+0x524/0x8f0 [ 1010.927495][T29954] device_unregister+0x21/0xf0 [ 1010.932828][T29954] del_device_store+0x2b5/0x370 [ 1010.938245][T29954] kernfs_fop_write_iter+0x3a4/0x540 [ 1010.944083][T29954] vfs_write+0x612/0xba0 [ 1010.948901][T29954] ksys_write+0x150/0x270 [ 1010.953789][T29954] do_syscall_64+0x166/0x520 [ 1010.958947][T29954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.965390][T29954] [ 1010.965390][T29954] other info that might help us debug this: [ 1010.965390][T29954] [ 1010.975645][T29954] Chain exists of: [ 1010.975645][T29954] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1010.975645][T29954] [ 1010.989507][T29954] Possible unsafe locking scenario: [ 1010.989507][T29954] [ 1010.996979][T29954] CPU0 CPU1 [ 1011.002364][T29954] ---- ---- [ 1011.007794][T29954] rlock(&root->kernfs_supers_rwsem); [ 1011.013292][T29954] lock(pmus_lock); [ 1011.019738][T29954] lock(&root->kernfs_supers_rwsem); [ 1011.027663][T29954] lock(&root->kernfs_rwsem); [ 1011.032464][T29954] [ 1011.032464][T29954] *** DEADLOCK *** [ 1011.032464][T29954] [ 1011.040630][T29954] locks held by syz-executor/29954: 8, last CPU#0: [ 1011.047163][T29954] #0: ffff888033ed8460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1011.056105][T29954] #1: ffff888055c65480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1011.065901][T29954] #2: ffff88802963a788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1011.075986][T29954] #3: ffffffff8fac85a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1011.086315][T29954] #4: ffff88807f774128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1011.096895][T29954] #5: ffff888025d6e258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1011.106959][T29954] #6: ffffffff90250920 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1011.115990][T29954] #7: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1011.127350][T29954] [ 1011.127350][T29954] stack backtrace: [ 1011.133273][T29954] CPU: 0 UID: 0 PID: 29954 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1011.142848][T29954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1011.152941][T29954] Call Trace: [ 1011.156249][T29954] [ 1011.159199][T29954] dump_stack_lvl+0xe8/0x150 [ 1011.163834][T29954] print_circular_bug+0x2e2/0x300 [ 1011.168899][T29954] check_noncircular+0x12f/0x150 [ 1011.173880][T29954] __lock_acquire+0x15ff/0x2e50 [ 1011.178772][T29954] ? __lock_acquire+0x6df/0x2e50 [ 1011.183751][T29954] lock_acquire+0x115/0x350 [ 1011.188294][T29954] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1011.194060][T29954] down_write+0x96/0x200 [ 1011.198329][T29954] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1011.203994][T29954] ? __pfx_down_write+0x10/0x10 [ 1011.208901][T29954] ? down_read+0x2be/0x330 [ 1011.213348][T29954] kernfs_remove_by_name_ns+0x4e/0x140 [ 1011.218842][T29954] sysfs_remove_group+0x101/0x2e0 [ 1011.223911][T29954] sysfs_remove_groups+0x54/0xb0 [ 1011.228889][T29954] net_rx_queue_update_kobjects+0x6b7/0x780 [ 1011.234827][T29954] netdev_unregister_kobject+0xff/0x450 [ 1011.240414][T29954] unregister_netdevice_many_notify+0x1be1/0x2140 [ 1011.246870][T29954] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1011.253674][T29954] ? __mutex_lock+0x30b/0x1550 [ 1011.258495][T29954] unregister_netdevice_queue+0x2f5/0x340 [ 1011.264271][T29954] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1011.270553][T29954] nsim_destroy+0x275/0x800 [ 1011.275099][T29954] __nsim_dev_port_del+0x14e/0x200 [ 1011.280241][T29954] nsim_dev_reload_destroy+0x288/0x490 [ 1011.285751][T29954] nsim_drv_remove+0x58/0x170 [ 1011.290472][T29954] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1011.295809][T29954] device_release_driver_internal+0x48b/0x880 [ 1011.301924][T29954] bus_remove_device+0x444/0x560 [ 1011.306935][T29954] ? __pfx_bus_remove_device+0x10/0x10 [ 1011.312438][T29954] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1011.318196][T29954] device_del+0x524/0x8f0 [ 1011.322580][T29954] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1011.328448][T29954] ? __pfx_device_del+0x10/0x10 [ 1011.333350][T29954] ? lock_acquire+0x115/0x350 [ 1011.338065][T29954] device_unregister+0x21/0xf0 [ 1011.342875][T29954] del_device_store+0x2b5/0x370 [ 1011.347786][T29954] ? __pfx_del_device_store+0x10/0x10 [ 1011.353205][T29954] ? sysfs_file_kobj+0x1e4/0x230 [ 1011.358231][T29954] ? sysfs_kf_write+0x166/0x260 [ 1011.363144][T29954] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1011.368398][T29954] kernfs_fop_write_iter+0x3a4/0x540 [ 1011.373744][T29954] vfs_write+0x612/0xba0 [ 1011.378044][T29954] ? __pfx_vfs_write+0x10/0x10 [ 1011.382855][T29954] ? do_sys_openat2+0x14e/0x200 [ 1011.387768][T29954] ? kmem_cache_free+0x182/0x650 [ 1011.392763][T29954] ksys_write+0x150/0x270 [ 1011.397146][T29954] ? __pfx_ksys_write+0x10/0x10 [ 1011.402065][T29954] do_syscall_64+0x166/0x520 [ 1011.406716][T29954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.412813][T29954] ? clear_bhb_loop+0x70/0xc0 [ 1011.417547][T29954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.423488][T29954] RIP: 0033:0x7f0cd7d5e98e [ 1011.427943][T29954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1011.447597][T29954] RSP: 002b:00007ffe6310cbc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1011.456057][T29954] RAX: ffffffffffffffda RBX: 000055556a4f3500 RCX: 00007f0cd7d5e98e [ 1011.464104][T29954] RDX: 0000000000000001 RSI: 00007ffe6310cc50 RDI: 0000000000000005 [ 1011.472107][T29954] RBP: 00007f0cd7e358a7 R08: 0000000000000000 R09: 0000000000000000 [ 1011.480111][T29954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.488113][T29954] R13: 00007ffe6310cc50 R14: 00007f0cd8b54620 R15: 0000000000000003 [ 1011.496122][T29954] [ 1011.515385][ T52] Bluetooth: hci2: command tx timeout [ 1012.324366][T17666] syz_tun (unregistering): left allmulticast mode [ 1012.627055][T22581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.646537][T22581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.731814][T22581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.745445][T22581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.900907][T22581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.916754][T22581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.093760][T22581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.105320][T22581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.308583][T22581] bond2 (unregistering): (slave gre2): Releasing backup interface [ 1014.409172][T22581] team0: Port device bridge2 removed [ 1014.457920][T22581] team0: Port device bridge5 removed [ 1014.472518][T22581] bond0 (unregistering): (slave bridge6): Releasing backup interface [ 1014.483554][T22581] bridge6 (unregistering): left promiscuous mode [ 1014.490395][T22581] bridge6 (unregistering): left allmulticast mode [ 1014.534491][T22581] team0: Port device bridge7 removed [ 1014.544110][T22581] team0: Port device bridge8 removed [ 1014.557760][T22581] team0: Port device bond1 removed [ 1014.566434][T22581] bond1 (unregistering): Released all slaves [ 1014.579585][T22581] bond2 (unregistering): Released all slaves [ 1014.592552][T22581] bond3 (unregistering): Released all slaves [ 1014.606941][T22581] bond0 (unregistering): Released all slaves [ 1014.619199][T22581] bond4 (unregistering): Released all slaves [ 1014.734520][T22581] : left promiscuous mode [ 1014.868684][T22581] tipc: Disabling bearer [ 1014.869783][T22581] tipc: Left network mode [ 1014.885763][T22581] IPVS: stopping backup sync thread 21844 ... [ 1015.303026][T22581] hsr_slave_0: left promiscuous mode [ 1015.308566][T22581] hsr_slave_1: left promiscuous mode [ 1015.314215][T22581] batman_adv: batadv0: Removing interface: ipvlan2 [ 1015.358491][T22581] veth1_macvtap: left promiscuous mode [ 1015.364443][T22581] veth1_vlan: left promiscuous mode [ 1015.367035][T22581] veth0_vlan: left promiscuous mode [ 1016.649120][T22581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.831179][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1017.220771][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1017.415326][T22581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.571518][T22581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.642194][T22581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.883829][T22581] bridge_slave_1: left allmulticast mode [ 1017.883867][T22581] bridge_slave_1: left promiscuous mode [ 1017.884093][T22581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.912637][T22581] bridge_slave_0: left allmulticast mode [ 1017.912679][T22581] bridge_slave_0: left promiscuous mode [ 1017.912853][T22581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.940963][T22581] bridge_slave_1: left allmulticast mode [ 1017.947511][T22581] bridge_slave_1: left promiscuous mode [ 1017.955643][T22581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.965074][T22581] bridge_slave_0: left allmulticast mode [ 1017.971452][T22581] bridge_slave_0: left promiscuous mode [ 1017.971611][T22581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.126053][T22581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.136987][T22581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.147735][T22581] bond0 (unregistering): Released all slaves [ 1018.203899][T22581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.227766][T22581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.238064][T22581] bond0 (unregistering): Released all slaves [ 1018.250971][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1018.518560][T22581] hsr_slave_0: left promiscuous mode [ 1018.524663][T22581] hsr_slave_1: left promiscuous mode [ 1018.531122][T22581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.540580][T22581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.555697][T22581] hsr_slave_0: left promiscuous mode [ 1018.563739][T22581] hsr_slave_1: left promiscuous mode [ 1018.564338][T22581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.577378][T22581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.585563][T22581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.595304][T22581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.611157][T22581] veth1_macvtap: left promiscuous mode [ 1018.616742][T22581] veth0_macvtap: left promiscuous mode [ 1018.624427][T22581] veth1_vlan: left promiscuous mode [ 1018.629948][T22581] veth0_vlan: left promiscuous mode [ 1018.927513][T22581] team0 (unregistering): Port device team_slave_1 removed [ 1018.962705][T22581] team0 (unregistering): Port device team_slave_0 removed [ 1019.276876][T22581] team0 (unregistering): Port device team_slave_1 removed [ 1019.302288][T22581] team0 (unregistering): Port device team_slave_0 removed [ 1019.467573][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4