last executing test programs: 4.507890104s ago: executing program 3 (id=4440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x0, 0x7fffffe}}, {0x28}}}}, 0x2d8) 4.324371376s ago: executing program 2 (id=4442): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000240)) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000002c0)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}}) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) (async, rerun: 32) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) (async, rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa0e47322aaaaaaaaa0800fce20024006600000a219078e0000002ac141eaa4e224e2304419078c28d0d92e9d33514370e7904464da5e39b49fc288bd17cf547b8d7570a0668dc19c01d50c759b5ddac2ba20e1a55e401b9f85637897d9f683b4c288fad8f2141f231f652bbcc02548f25700000000000"], 0x0) (rerun: 64) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20044840) syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d12033618bafeb3926975d1b201ba9ebaf9fbe96171f710c6816f8a922913313", "817ff05ca00092003daf5a835778b7d83fa94c0efbb5874251b68892848995c46f8b736ecde1e6709962e4b4600a8f9a", "7d8f4da9806440cb89f2939c57545847262620ead257b1d79ea45e63", {"5c22878c87f7d790e5d5963195b3172a", "db5701ffac0e726159a1af1eb26adef8"}}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 4.244597876s ago: executing program 3 (id=4443): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x2}, 0xe) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.181703982s ago: executing program 0 (id=4445): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xba, 0x6, 0x2, 0x9, 0x1, 0x2, 0x6, 0x6}}, {0x10, 0x2, [0xa, 0x4, 0x5, 0x6, 0x1, 0xa]}}, {{0x1c, 0x1, {0x0, 0x5, 0x3896, 0x80, 0x2, 0xf, 0xb, 0x4}}, {0xc, 0x2, [0x2, 0xfff, 0x7f, 0x6]}}, {{0x45, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0xa, 0x4}}, {0xc, 0x2, [0x3389, 0x4, 0x600, 0x2]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x20, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0xe0}}, 0x4000010) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1ac0400ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d712d2d5f2d2828"], 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x40040) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x80000001, 0x74}, &(0x7f0000000100)=0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffa, 0xb, 0x5}}}}]}, 0x40}}, 0x4000010) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={r5, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 4.107161186s ago: executing program 4 (id=4446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r1, 0x0, 0x0, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000000c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0x1, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xad43, 0x2, 0x0, 0x10000, 0x2}, 0x100, 0x1, 0x1, 0x5, 0x1000, 0x12, 0xc, 0x1e, 0x7, 0x1, {0x9, 0x2, 0x1, 0x6, 0x4, 0xfd}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) 3.923128812s ago: executing program 3 (id=4447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000071105d00000000009500000000000039f8f5e51e"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x3, 0xff, 0x4, 0xe17, 0x2, 0x0, [{0xffffffffffffff00, 0x7f, 0x8, '\x00', 0x880}, {0x8, 0x5, 0x0, '\x00', 0x1}]}) r2 = socket(0x10, 0x803, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x3c}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) (async) close(r4) (async) syz_genetlink_get_family_id$mptcp(0x0, r3) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40026fd06ab6303160b4b015733a4b5e5c60000", @ANYRES16=r6, @ANYBLOB="000328bd7000fbdbdf250f000000500001800700060072720000080005000200000007000600666f0000070006006c63000014000300fe80000000000000000000000000003d0c0007000c000000150000000c0007002d0000001100000034000180080005000200000007000600666f000007000600666f00000800090040000000080005000200000008000b00736970000c000180060001000200000040000180080009001800000008000b00736970000800050003000000060004004e2100001400030064010102000000000000000000000000080005000200000008000400050000000800050000020000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) (async) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4040880) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) (async) socket$inet6_sctp(0xa, 0x0, 0x84) 3.68101098s ago: executing program 1 (id=4449): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 3.408472849s ago: executing program 1 (id=4450): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x84, 0x17, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7cf1330700000000000800008100", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.337365289s ago: executing program 0 (id=4451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r2, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async, rerun: 32) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (rerun: 32) recvmmsg(r6, &(0x7f0000006100)=[{{0x0, 0xffffff68, &(0x7f0000000080)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/206, 0xce}], 0x1}, 0x9}], 0x2, 0x22222, 0x0) (async, rerun: 64) setsockopt$inet6_int(r7, 0x29, 0x9, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000bac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.433244382s ago: executing program 1 (id=4452): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.316973026s ago: executing program 2 (id=4453): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) 2.255601863s ago: executing program 0 (id=4454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket(0x1f, 0x800, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB="c8371a24", @ANYBLOB="000228bd70001bd7ec256600000008000300", @ANYRES32=0x0, @ANYRESHEX=r5], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x4044055) sendmsg$key(r6, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003160000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000009fd000000c005000500000000000a004e24000000090000000000000000000000000000000006000000030000000600080009"], 0xb0}, 0x1, 0x7}, 0x18004) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}}, 0x20000000) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000040000000200000600000000", @ANYRES8], 0x40}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffff}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000019000100000000000000000080202002ff040005000000000c0009"], 0x28}}, 0x0) 2.140044859s ago: executing program 3 (id=4455): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x73ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="280000010000007f00000106b7", 0xd, 0x0, &(0x7f0000000200)={0x2, 0x6b7, @loopback}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ba0afeef796bf9afa78dadfa36e3f1a6d4c2e454d312192a3a608d0571187ed9176d84a972709aec08a53263710695813b839b7da978ef5d2d3b0bd76b52c7dbeb940284920036d5cb3f24031c77f9950a", @ANYRES32, @ANYBLOB="02002cbd7000ffdbdf2502000000060006000400000006000600030000000600060003000000060006000100000014000c00ff010000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40011) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x49, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x1c, &(0x7f00000007c0)=ANY=[@ANYBLOB="0c0000000000008006000100840b6e51da7d2129", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000004c0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000085200000020000007a52f8ffffffffff18140000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x337ca2a2, 0x0, &(0x7f0000000900), 0x41100, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x7, 0x7fff, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[r6], &(0x7f0000000a00)=[{0x2, 0x1, 0xb, 0x7}, {0x3, 0x5, 0x1}, {0x5, 0x2, 0x10}], 0x10, 0x2d9}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r8, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'macvlan1\x00', {}, 0x3}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20008010) 2.048764691s ago: executing program 2 (id=4456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0xffffffff, 0x2, 0x2466, 0xbb0}, 0x10) listen(r3, 0x0) r4 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@remote, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x2000000, 0x7c, 0x8, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000100)={@local, @multicast2, 0x1, "1215887e7ed31b5ada3ebfdf5b8bfe0c3b47ccb5331eee55df4f57cf11608e44", 0x6, 0x2bfd, 0x9, 0x7}, 0x3c) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000300)=""/22, &(0x7f00000002c0)=0x16) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x40048054}, 0x20003810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r6, @ANYBLOB="089805000750050008001300", @ANYRES32, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x2004c802}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000", @ANYRES64=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 1.832296291s ago: executing program 4 (id=4457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0xaf, 0x19, "1d752901255040b9b51f058fac1f44b2c476c48336eb8fa0fc558f9036e4d7f649aa7e7ad7a0eca0c6113081f9921111cced837b539b84c0fba200c2f8e65b2bc9d24d1f7c454574ec0778c04961cecafbbc0381e469e4997cc3b77263030abfbb1ded41b51213ff0f70096a2503841126c7f9a4857af9c7c1b7c5a76b3bb07a5b3c82a744f24909f0a6034b2755eb0bedc5403b373bde67de8c34a50024e1baded967de8fe9599cc9764c"}, @NFC_ATTR_SE_APDU={0x22, 0x19, "41b2975604aa8a0bb342a3d1da2987817d935f9eb62a359780ebf92992c7"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x118}, 0x1, 0x0, 0x0, 0x40804}, 0x44000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc2d}]}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0xaf, 0x19, "1d752901255040b9b51f058fac1f44b2c476c48336eb8fa0fc558f9036e4d7f649aa7e7ad7a0eca0c6113081f9921111cced837b539b84c0fba200c2f8e65b2bc9d24d1f7c454574ec0778c04961cecafbbc0381e469e4997cc3b77263030abfbb1ded41b51213ff0f70096a2503841126c7f9a4857af9c7c1b7c5a76b3bb07a5b3c82a744f24909f0a6034b2755eb0bedc5403b373bde67de8c34a50024e1baded967de8fe9599cc9764c"}, @NFC_ATTR_SE_APDU={0x22, 0x19, "41b2975604aa8a0bb342a3d1da2987817d935f9eb62a359780ebf92992c7"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x118}, 0x1, 0x0, 0x0, 0x40804}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc2d}]}]}, 0x28}}, 0x0) (async) 1.78181094s ago: executing program 2 (id=4458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) 1.652487971s ago: executing program 3 (id=4459): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x4, @local, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f00000000c0)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xffffff2a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket(0xa, 0x3, 0xff) sendmsg(r3, &(0x7f0000000500)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000000000002900001702100000"], 0x10}, 0x20008810) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001d40)={{0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x40, &(0x7f0000000180)={@align=0x400, {0x6, 0x8, 0xffff19c7, 0x100000000}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x5}, 0x7, &(0x7f0000001c40)=[{0x3, 0x78bb, &(0x7f0000000240)='\x00', &(0x7f0000000280)="704957b2e20d0fd9659497be25ef38b392e54edd5c009531c9b77dccea75756efdc84d9a027809b98a707c940c6f560e201288a1b4246a65d3760cb5ffb4678d99cafd472c3fb323c5cfc9bc384f2801bb459529", 0x54}, {0x1, 0x1, &(0x7f0000000300)='GPL\x00', &(0x7f0000000380)="9d6bd0f5e80f703ac38f625c101912dcf18fab8dd982765135119cc05f415264f6bd4ffa84c6dca9672f642a98dc7552fbc0f9336d647cdbed4ea8f3b613dae6f44b4563ef14f30faf1a54f2b321131f2e8c67d2c1b9c27de23f0b2ad96e7671c5a35c3745e59979d9fb36fcf7aa380f51b7e3f9bcd803388d5d2522419d1a0b6f3e", 0x82, 0x8}, {0x3, 0xf2, &(0x7f0000000440)='..]+&:$(\x98\'\\$!\x00', &(0x7f0000000880)="358102299297bd26daa5dbf245ff972590eee7891a6e81ceb1541a58ba928cbe02febf3b6c49fa9e979b80a95c515d1ad88ad2a6dff9086e482768acfb61426ec0d48bdba0d248bf18ce8b5e2852481363f0cf3acc34f52e8266e145ed7257b5f6fd552ef0ca1086502b6920094dc407c1b33efdfea4bc87ce11c512", 0x7c, 0x2a}, {0x3, 0xced7, &(0x7f0000000900)='\xeb\xfd\x00', &(0x7f0000000940)="43cd99c5d27acdee4624dd84e9ccf1ad5d1c3c0a4a11594ea26c4ad26a1a81ed1cabb82eda611f6d6c7a4ca8b3a80ffded03f288e0dea591d5e7af337fe8b5f330db5966058c0b77f132557d07880cb514866d438470261f6b142845883220f9fef5cb65fce449e8dc0e3808fc99a1da82de24c9cec396a8b5aa488cf8d9fb288fe9eb96636cb1c8d36bab1bf6298d5f5b605eb1c1a7728a6ddfb6b95e9c06074d57e5aef428bc9d308b70d29cff3ce5b801d496501061fef3474385be66ab1772519bfb936a3d97b17a99559e8792062a1e8897e78e0509e07db021698c518b49143a", 0xe3, 0x8}, {0x2, 0x7f, &(0x7f0000000a40)='/\x00', &(0x7f0000000a80)="e36ef7d257486e3d9692167fb112fff5df8ef90625dfc3ac951e624ac57659ddc247d5e6bf64540e9b9fb736e6f66e3cc59e6f41b44813b8b1de3cbda7b7be1742f6a6a9f4fdd31d3dba70ed426697333b0532d47cfed11a4e6a9a62a101e5b04b8365edbc7f78d74e0de51d8c6aad5623180c0317f0b826896e761ae54cadd2eaa9533b8d18b69c10a4a0f318bef7a91a7904ae8fdd8bebe5598e655662c1cd26b2744a66c893b433e4671bdca52e16b0fec92b29a9bfc7c3232ef876a517d7fd006bbce0ff49880db6c45470bbc66f2ce328ba9569fcd31dc394f3352212af876fe6b1bf19d8b0c077b98fb2b3b93844767d9ef8976164c622f3931d9a87dc94e74bb2dd612149cebf7306041214ac7f56c6acc9549e9d2d61a39cd0dc7c20ff2c5201c8d81dc1aa39dbe919d63c6b0b3fc5164545cf08c87b8d0f650f68b2f26f4f3fb44a029ba723183560a938d1fefb3b1227a2e8d8593af530b825a965cc01d8aca26a44f5f7d25367544e5f02ed56cd76470a22e4212078009e7986590f52f26e22845c337331221e29e239b1c4738932e01fee9e4b442388a90ceed203807f90ba06cfbe40636116710c77473a6a36e5708634a7dd786c993cd5a324e115faae741286ceffcc1fc7995028f5fbc7ce2f5288b4f3d099af9e4f984baf5bc347946b5e3c687e39babd80947e730d38318d234a87b76779d55596b901111df36aa55b96c8edd498bef3cf035388b02b385c14dc54698d537edab21b8465477ae930e96106193683ff2a2fd6079aa89613e106d2b99a72cca2673aa42051a63b7788edcd6b1fb49d80590be37bfeb492e9bf91c34b8d197fa5c468c73a1c40f5ce935b96df7e6a6fbaa742b71b88f3c508fd8c6517d9145a1d19dead2b214ac23d8ddb9b19bd84d9575ff60db64cf87e94a6b6353d0d11afefc9d6e8fa7ca76b1d7e30b33c2b58bc3265ef403f2ad83555fb8f8b211d28dac5021857bcc3ca9f57f265e95e82b5c295f803ea2bc73cee18119e2d380f3d75e604134722139f4f025c470924c598718dc85d474265295f72d671f74922c10d9f11204261a52682829756b7ffbb9bce94b1fbc5cfb10fe61f944e1b5d8c1003913499e7db51881ce7185b5d64612052a8ee95788ab1496f357f9ae63423ddca76354d42858f0a8e47d3fbde8379112b5c541bf4dc65c723da70204f313241a7309ef492c00fe60044c621b20d194d8c86a9d67d73b97206a197e8f9330de00d0c8a84bed81ab546c7d0d6a927c213ef4336f01a1937600fd982d2aba4e13811e9bc6e5fbfa9bb47bd48f1b9d1e5302ae44f720fb9f877e37d4420198b96664eecea8b98a50c2bb0e2f766d38119ef7b411a50775aaa1998169efd87cd80a32ec2347289433b1a2f5d3b96fa60ac415f940fe74df8e7862981e37b35a87009bbfa36d44c1a45e6a8ef2cdd41b589852224101d98899c0f5c68f31e8a5fdc330867d0879fe9b1c7099594a6d4ea5c5830ca2b85c1ddd618574b3aa00f5135fbcff0f887e027e5759004a0ddd64eb35d9788f7c9cbb593c83b1c6b1e8396eaf2e781f20e1c05fa5931c83606e93c06caff9b00a1481a713a1e5c59a2751b9a6dcc6738c45be2bb345c378bf9ee126a90df373b608c5980b0c928cea38f44998eb6577edb106bbf73d898c6503eca587fb96bf49fe95d743ba5074e0c3c46eb64d5ee4d16ad2bf9ee4576d8db0098f60620f52fa2a62099d234ad6f5d7ead95730c951fc77c99a46c5625f13a16445259fa8db84129d63cb9aed61371d407725b30286af7e1c9a053a3a7b297b861002c3c21e9771476f27b3ba47fb7fe5edd644b243d68da5b543b674fcddc7c0d149ec9016abbb36726a0e01b33c1dfe427d23e35de72a8d47c261bb39344c5d5e9a688984e3fc9465044e767769727f80fc1fca8a83a2b71db154bd372231d3e32b886997db7decd14e178c6175164754d095c3434e87d99a38e2236b7b707d73ced15bbfcb04e0d2c2b69dbd1712e12ef350714847de61b640ff89d23ac270855c4eb0b7272b77632e24e48b91682700b00af57608660f94374806c280119569478ea7fc5ca89679eff90dd5fd20f0d780312ab79ee7ac0d6e0990583188440c185b6438539e0b4fab446d9f89cdff87d6442b6fc1700d2928477f7c7cc43b9379c407f9b79b0da4183d0e8c8cb224ec74f1927ac811c21a2a35e330b5238174e59a56575b5c28474ec51064c54aafcb14260fe73f4feee8156fd1bb12d228b2586664d1c2c6b905ba5a8ff2ec8ec35dfa5a1bf6c9a590f2cf9341344b74db17e32e60cc540c4c880387d3ef2fc82f9723a2057201ca18f951e760c6cec3cc1ce7dd487b9f6c553b2fad95cd6c7083cd30bde0e42ddd83482bc2f0ab9a8c0e16f87bdffde503379e39f2b64bba64311fb3d46dd198e78b2cf64ab844fa352893a0b9bb0f9a8a0d13361d0d90f9e1db4c360df234321ad459bfa371bd64ee5799d573b4d0c0547fb719f0867a8135c1dcf77dc351e95a59f27d34c0d293667377736cf3656e675740d378bc60303132e1e0d8b8d9648a5aac886faa9c4c8631954e84448c953a2b6f3d651cd908900ce8a5beec52df24e66f0cb1243416399fc56abd0193f9dca3ba7302c118c863494e756afd045fef60ce3ff4d5a96e72aed621bc78a3681114c8b689eb3ca43152b15ca5723759f9c1803e8874b1b6f0a97983b3b8a12d384c830753aa9ce4cd163930cb3b3fa62ca427acead6da09c9cf2e35ba32c4d0c2329786924a5a1e0a1cfa36b2f66390ac10f8f2f739d87d8e475ca81d6c395f75c8d93472ac3d6b319a093973fd0987642445f55988890167559a1d91bdcd4922ed97005d6088d0460d4afa56bc0cbf221ab0b693c2b14cf1bb2e2ba834fa8d60bd782761b0623aca67337278e30bcb7dfb8e98da3b3c71d5aa7a6098c50581faf43aa5864597cd3d6db1c6794be36441479968ddbd5e614cac253419e74ff0da7491b37a40be0205c16609862cc31406f5cbf1f27f3decf3f6c3127d54a49f6d9378fb4e71525b935f13c7b42740c53a2b3f0ea9ba906035b6484bb2fccd83724100555eed4a0c66bbbdaf839af7f11c1051e2e90ebd6f0d7f6eaf95ad0df66f225e722cddc368dd27c98841b10c6a71c5023ad7d685cef911f028978f5a7fdd242470d6e659a0ad256afebd9f7e03687f1ac095497af1274e71e681ef9c65ecaf43e39b26f50995348657fe85db9acc7b0969f0f8fb04de6d05b6da44911fe6b054b36cef8d258e116ef28989cdd2088da3c2efa6aa97635e17ed3d888d95d88121ab967b251e4d21e07862cd07105644b3ee1743ba7614d743258b5a0c37e4085199ef484e842329a393077bc09a4adcf1c6844ce424758d44d30cfb9b2a6b57c944be52bf7f2fe5e7abcb56c93efa0a1be8a5eabde89d28ada80c40cc7af09958a41b82b3307d1e6bf73805cbf279e15db1899303839c3c266aa12794c494d69364a3f1d720b85be4c9acaa0ced672d524347d64c3607a34975f0f5192d7f3a7b8c16048ac721aa6e959aced954315d62acf5889d4a4a16a92eb76ecca64feb866e6b222e4817607f4d11b195b91a044c2eba6520bed8c36a409ac356addd63f1aba44b16f521d893c8bd4dd54d20efa34bfd456d1b7cdac98c6ec2d9439ae1b2267f2d11ec216c879bda471fe1ba2e868b342f7c8c73e74f8236200639fdfd55015ea01400835fd199e198092e52a4bef56ca095404f51555bd7f1f92157c3045386e677ae9bb8ffcdb618c70915f9e0a37fead495199a467060c0d8b42324af923e3da7fb564eff26e3ffb51dc289f2265179e40fec925275de7806a6670b94c802379509450245bc97643babba60c885e3d1eedb178b6e622e51496a70d018a0c4aa31df952b6b0dad31ba4348be392536b664b07d69f6119268525b9541b2b19a3f850405f7c63cc9af5fe8b6a1ce6f7d28913bb7761014fa1fb7f4db6876790c8dde0dd6924bbbf1a72dc862dfaec9723a1a001711f12b4817bda26155507a2246f60a40e7d9772bdcc641c2a5a2576fea2e492aa343097b66acfc90fe0221a2292911c10a3f4e0811cad2a5075745fa49b4f26d8916abde82a7ffeea7682bd4e9d61361be43eed595d401af0b85f40a318ddafca3963d4633aeaf9a4795871ea50921b70a12a94d77e13f08d712c6d5e8b3bcd299748a70e037a9262413e17eaffe0729803559f1af12418358d21904e65c1a8689d552a8329e96f383b576e893510eb0ff2739b8e78033749cc8be8b8292cf0832c3774e79bcaaeca15254a7e9f6e1ded9612e276e5acc3cf3033c449db311403c6267645e73f4bf5a06726154495987ac4fbcbef6fd1f123dbbce4f48b3d5a120083ca11ac4ad02ee5bb4ddfcf14baa75b78bfa217bff0fc3f24602bf914020fa0680d5f873063d49140d898e2235b9a9f054cb012fb6f0ed2ccc96d2e7f1d52b4ada015ebf9846a6a2fb91014ed6db0141d3e9b3cfd8df81e35561420542ee2b4aa2a1bee96ee36131f5111c1dbf37844f7074562558ce20c2c9b69b318d08f68c48d943b1ef2c6de86166f9e9471ca43356128a1e8a4dd519709203e04d587edc0d5beac07a1487bc58ff8c84e7c386478b6b7f3ba480e4272561bd287aa9077f980a91abb358242ef6fc238de90df759b76703977f24ded7b3ce8be9d374215f3fa63e04c1d7d1bb0573e9a7081385e909db9ffa3e6587effa54402f50d4f60e7e1df8617dff3ade8078812848f10c3db57e5b5e0d5b4c03827b42bd7ea5909759e44c8d1130b2759c8587c3a747e736c03035d139a80ba881361ac9e9bbc9beea6473060b2f7766394a64d0be9410e74c713f272267e5702535bb1155f8cc3c99fba756212e300c05ac574c462ac7a2768f6800ac1485b891ef4f6548528a9dbae72142c656c04264f2dfacf2874834846a942656e683a3d2bb1bec56c0334011e8ba79fd21a5f0fe5a6827420bac5db1932fec7f859a8bb68a8d57819b59c39dbf1a1ed5fc266b35da7aeeef74cbb0bd1febd0b49a7aeb04efbfd050828271da979eacbd9338c04653cc931353a98b40eec88f881aa9eacfebdff43d91f8e8913c6a36fdb21afec88da55ed0500c3fc7659e2be60ab7f95a031b40208bc4737c2f2af63abebd90bb7c62248c4816ceceb84f18ca0433feca3a48a903d3aa5e9b2ea42a8093be7e09d57f745195fb867de161921838db45b571fe3a71ee9c5d885735dc3a00c3aa4e1226f6cbdbb05826cb679665f520860ec53da77d303158886ef27e3df52893322011751ef252df58cc06d843a3839ce947dad1722dd21245e31a2c6cfd898f44e3f9e2c768120729c5a893598f050b62305fab157d465f0f708c9ecfe0b79f9cc2983c9f05daca37e3e462ed06bef011d10c07e7d601148a00c1cafd1272dc51fed8f6fcf4b5d88454b618ea82bca9525a4409fb923fa6e73baf42941fc6f2ea4c60b7b7b3e9744400781ec7d1e9406085b61007e7cfa43a691141840a39bef58d80f45e17e57bda8fb6aa2b1986715f37664598bda74674fccd00e09bbf4972a3d140cc99bcb42a2b28d2800873a8c25a04d05957a479946652ef8153176bce369a473b7e1c51cbe3b543377614461580df95ac6c630a4c734878d7286abd0b9688d4ef64670188be303c26499db9c95ce9fb20d8a13d43dbc20207cb09bcd74e18997593052e83751a3c94527daeb4f0054fdb9394bc02d12bd9b1899b1aa7c98ca5c5dd1fbcde777138a35599597", 0x1000, 0x12}, {0x3, 0xfffffffe, &(0x7f0000001a80)=',}(&]\x00', &(0x7f0000001ac0)="34a9083bb03ba718605a7fff14a07182ec83e9b8d8d6793e253118777335e2f4e0aee4d2f1aeb649594c3988cb41639d5dbfef53e9ea56de186d099c013792c644d63e9dcc52bda79a94238f8254d7c552b9a768f2542981ed2b5725de0946216949b074c3677b8d53055876bef228238ea495c716ed976bad2fff19870f6d9f001f516cfc287b56bedb32b21c29b8c028d1b2734e7444f9cb899b2f2203ce8c0cfd4b7a78f48c14b812c6f2f2eb56dea4ae310cf3ed5888a7801e08d85c951544d57fcbbc0dbe6c11b8bebcb776a6781ced21fa9dfe560f9d5f725a81bd0e5bf2ddbf8db89905146d2e", 0xea, 0x20}, {0x3, 0x5, &(0x7f0000001bc0)='\x00', &(0x7f0000001c00)="078894a94163b000b498140a297e9377e9d69d228324fabe5fb636596f35bf6ff61d6a5e80", 0x25, 0x8}]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001ec0)={r1, @in6={{0xa, 0x4e21, 0x3, @local, 0xec}}, 0x5, 0xf, 0x1, 0x80000001, 0x7b, 0x6, 0x2}, 0x9c) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) sendmsg$kcm(r5, &(0x7f0000001e80)={&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x1, 0x4, 0x2}}, 0xffffffffffffffdf, 0x0}, 0x24048088) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0xe, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbf91f7582ab314be"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) 1.537351276s ago: executing program 2 (id=4460): socket$kcm(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$rxrpc(0x21, 0x2, 0xa) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680e00301800c0007"], 0x40c}}, 0x0) 1.463542823s ago: executing program 4 (id=4461): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029fcdbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="00210400022400001400030062617461647630000000000000000000040014001c0016801800018014000b"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r1], 0x48}}, 0x2404c054) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000200)='\x00', 0xc2800, &(0x7f0000000240)={@_ha_fsid={[0xffffffe6, 0xe]}, {0x6, 0xfffd, 0x4, 0x8000}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x9}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9c4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000540)={r0, &(0x7f0000000440)='\x00', 0x400, &(0x7f0000000480)={@_ha_fsid={[0x9, 0x5]}, {0x2, 0x0, 0x9, 0x7}}, 0x6, &(0x7f00000004c0), &(0x7f0000000500)=0x9}) openat$cgroup_ro(r7, &(0x7f00000008c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b03"], 0x0, 0x52}, 0x28) r8 = socket$netlink(0x10, 0x3, 0x13) getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000900), 0x10) syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000680)={r0, &(0x7f0000000580)='&\\#\x00', 0x200040, &(0x7f00000005c0)={@_ha_fsid={[0x3, 0x9]}, {0x0, 0x2, 0x2, 0x1}}, 0x7, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00'], 0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r11, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000003380)={0x0, 0x3}, &(0x7f00000033c0)=0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x7d5, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r4, r5, r6, r7, r9, r10, r12], &(0x7f0000000780)=[{0x5, 0x1, 0xe, 0xf}, {0x5, 0x2, 0x10, 0x6}, {0x4, 0x4, 0x7, 0x2}, {0x2, 0x1, 0x1, 0x8}, {0x4, 0x3, 0x9, 0x2}, {0x3, 0x3, 0xf, 0x3}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x61}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff}, 0x94) 1.402240591s ago: executing program 1 (id=4462): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x804) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f00000002c0)=0x6, 0x4) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000600)=ANY=[], 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xfff2, 0xf}, {0xa, 0xc}}}, 0x24}}, 0x0) 1.400977006s ago: executing program 3 (id=4463): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x6a040000) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x9fc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 974.421458ms ago: executing program 0 (id=4464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0xa0, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) sendto$packet(r1, 0x0, 0x0, 0x80, &(0x7f0000000680)={0x11, 0x5, 0x0, 0x1, 0xb1, 0x6, @random="d95e786bbe90"}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x5, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$inet_sctp(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x8008045) setsockopt$inet6_int(r5, 0x29, 0x4d, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x7}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000880)={r6, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x5}}, [0x7fffffffffffffff, 0x400, 0x4, 0x3f800000000, 0x5, 0x0, 0x10000, 0x8, 0x5, 0x4, 0xcd21, 0x6, 0x3, 0x100000001, 0xc7]}, &(0x7f0000000980)=0x100) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x9}}, 0x14}}, 0x4044000) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000023c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c0002800500010000000000080007400000000008001640000000008cf244178dde4c2780304a3556d78683129b0005a1937a200844c1fe1351cc83682e08dde1224cfd19c905536849fd8612b05ecc64417c747c8ef50194a9d1df8986d570a2892bfb76be"], 0x9c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0002000000000000000001000000f4ff01000000004b4700048014000480050003005d000000050003000500000008000200010000000800020003000000"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000140), &(0x7f0000000140)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 769.50705ms ago: executing program 4 (id=4465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000041000701feffffff00000000017c0000040042802800018010000400cab1893a20b8d2a93521800a14001c800c000300000000000000008004006b80040002"], 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) 608.993128ms ago: executing program 1 (id=4466): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 545.84167ms ago: executing program 0 (id=4467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xa8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x7, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r5, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x27) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 531.377652ms ago: executing program 4 (id=4468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0xffffffff, 0x2, 0x2466, 0xbb0}, 0x10) listen(r3, 0x0) r4 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@remote, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x2000000, 0x7c, 0x8, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000100)={@local, @multicast2, 0x1, "1215887e7ed31b5ada3ebfdf5b8bfe0c3b47ccb5331eee55df4f57cf11608e44", 0x6, 0x2bfd, 0x9, 0x7}, 0x3c) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000300)=""/22, &(0x7f00000002c0)=0x16) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x40048054}, 0x20003810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r6, @ANYBLOB="089805000750050008001300", @ANYRES32, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x2004c802}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000", @ANYRES64=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 420.304776ms ago: executing program 2 (id=4469): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffa}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x4000000) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x8, 0x4, 0x6, 0x306, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50138, 0x5a1b5}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 365.865323ms ago: executing program 1 (id=4470): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r1, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d7fb7c27a1059ae31c6", 0xd8}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1983405900000004008638750f3906d9a0d0652921b200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000140)}, 0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = socket(0x14, 0x2, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r6) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r9, @ANYBLOB="c3040500000000001800128008000100010280080300000000000000", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030029bd70000e0000000100000008000100", @ANYRES32=r9, @ANYBLOB="08000200c3"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r11, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 11.686963ms ago: executing program 0 (id=4471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="01000000000400bd42b5a7ed2df66643730f0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) r2 = accept4(r1, &(0x7f0000000000)=@sco={0x1f, @fixed}, &(0x7f0000000080)=0x80, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000540)={0xffffffffffffffff}) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x0, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x8000001}}, {0x81, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x2, 0x4, {0x0, 0x3}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1}}, {0x23b, 0x4, {0x2}}, {0x810, 0x8, {0x2, 0x9}}, {0x7, 0x7fff, {0x3, 0x6}}, {0xe2b7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x8, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x3, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xfff9, 0x0, {0x0, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1bbd, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x7}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xe4, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xbeaa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x37, 0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r8, 0xf5f) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x3c}, 0x60) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) 0s ago: executing program 4 (id=4472): socket$nl_route(0x10, 0x3, 0x0) (async) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xd4, &(0x7f0000000340)=""/212, 0x0, 0xc}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x2400c801) (async) sendmsg$netlink(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000300)={0x10, 0x26, 0x100, 0x70bd29, 0x25dfdbfb}, 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90021118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000140)="09c69e16e16067", 0x28}], 0x2) (rerun: 64) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="eda9", 0x2}], 0x1}, 0x20000800) (async, rerun: 32) recvmmsg(r4, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001a80)=""/205, 0xcd}], 0x1, &(0x7f0000001740)=""/217, 0xd9}, 0xffffffff}], 0x1, 0x2041, 0x0) (async, rerun: 32) recvmsg(r3, 0x0, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x9, &(0x7f0000000180)=@raw=[@exit, @generic={0x8, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x85, 0x0, 0x0, 0x1, 0x63}, @generic={0xe, 0x1, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) kernel console output (not intermixed with test programs): 50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.736663][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.883511][ T101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.896247][ T1426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.090596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.090619][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.205941][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.205965][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.615666][ T5638] Bluetooth: hci4: command tx timeout [ 504.773849][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 505.086308][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.108331][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.111175][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.136616][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.144195][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.305517][T19048] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 505.347209][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'. [ 505.754584][T19071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'. [ 505.754613][T19071] tipc: Started in network mode [ 505.754637][T19071] tipc: Node identity ac14140f, cluster identity 4711 [ 505.758717][T19071] tipc: New replicast peer: 0.0.0.0 [ 505.759592][T19071] tipc: Enabled bearer , priority 10 [ 506.196263][T19105] xt_SECMARK: invalid mode: 9 [ 506.260022][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 506.274931][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 506.282161][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 506.311095][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 506.331426][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 506.510686][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3226'. [ 506.681012][T19122] veth3: entered allmulticast mode [ 506.695563][ T4938] Bluetooth: hci4: command tx timeout [ 506.735185][T19050] wg2 speed is unknown, defaulting to 1000 [ 506.808009][T19050] syzkaller0 speed is unknown, defaulting to 1000 [ 506.898044][T13544] tipc: Node number set to 2886997007 [ 507.255346][ T4938] Bluetooth: hci3: command tx timeout [ 507.557782][T19050] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.557902][T19050] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.558147][T19050] bridge_slave_0: entered allmulticast mode [ 507.559285][T19050] bridge_slave_0: entered promiscuous mode [ 507.570162][T19050] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.570271][T19050] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.570403][T19050] bridge_slave_1: entered allmulticast mode [ 507.572248][T19050] bridge_slave_1: entered promiscuous mode [ 507.620989][T19050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.624558][T19050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.656443][T19050] team0: Port device team_slave_0 added [ 507.660377][T19050] team0: Port device team_slave_1 added [ 507.694524][T19050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.694546][T19050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.694572][T19050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.695812][T19050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.695825][T19050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.695860][T19050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.781864][T19050] hsr_slave_0: entered promiscuous mode [ 507.785438][T19050] hsr_slave_1: entered promiscuous mode [ 507.788742][T19050] debugfs: 'hsr0' already exists in 'hsr' [ 507.788762][T19050] Cannot create hsr debugfs directory [ 507.939288][T19050] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.024445][T19050] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.085680][T19050] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.141568][T19050] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.286640][T19050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 508.289467][T19050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.290322][T19050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 508.294288][T19050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.295347][T19050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 508.329893][T19050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.332396][T19050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 508.349061][T19050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.457835][T19050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.481262][T19050] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.497744][T19100] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.497809][T19100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.520215][T19098] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.520310][T19098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.936396][T19050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.982243][T19050] veth0_vlan: entered promiscuous mode [ 508.997473][T19050] veth1_vlan: entered promiscuous mode [ 509.038283][T19050] veth0_macvtap: entered promiscuous mode [ 509.049083][T19050] veth1_macvtap: entered promiscuous mode [ 509.069916][T19050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.088053][T19050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.100432][ T157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.100939][T19098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.101008][T19098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.101063][T19098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.240050][T19098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.240073][T19098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.319207][T19097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.319223][T19097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.343584][ T4938] Bluetooth: hci3: command tx timeout [ 511.412800][ T4938] Bluetooth: hci3: command tx timeout [ 512.454557][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 513.495084][ T4938] Bluetooth: hci3: command tx timeout [ 523.973818][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 533.574106][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 537.415600][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 550.853321][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 563.014278][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 563.015727][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.615221][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 593.734218][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 604.950009][T19181] netlink: 'syz.2.3231': attribute type 4 has an invalid length. [ 604.957719][T19183] netlink: 'syz.4.3233': attribute type 1 has an invalid length. [ 604.965313][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3233'. [ 605.016816][T19180] wg2 speed is unknown, defaulting to 1000 [ 605.018753][T19180] syzkaller0 speed is unknown, defaulting to 1000 [ 605.363527][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 605.407640][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 605.499989][T19193] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 605.508960][T19193] bond1: (slave lo): Enslaving as an active interface with an up link [ 605.514428][T19193] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 605.764690][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 605.812393][T19206] veth5: entered allmulticast mode [ 606.539952][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3242'. [ 606.662422][T19241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3245'. [ 606.780553][T19246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 606.919700][T19248] netlink: 'syz.0.3244': attribute type 12 has an invalid length. [ 606.919723][T19248] netlink: 'syz.0.3244': attribute type 29 has an invalid length. [ 606.919735][T19248] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3244'. [ 607.232138][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 607.471217][T19267] netlink: 'syz.1.3251': attribute type 1 has an invalid length. [ 607.739507][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3253'. [ 607.989745][T19280] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 608.038685][T19290] ipvlan2: entered allmulticast mode [ 608.038709][T19290] erspan0: entered allmulticast mode [ 608.138960][T19292] veth3: entered allmulticast mode [ 608.374672][T19306] netlink: 'syz.0.3264': attribute type 1 has an invalid length. [ 608.435472][T19306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.523616][T19306] bond1: (slave geneve2): making interface the new active one [ 608.553882][T19306] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 608.755781][T19326] macvlan1: entered promiscuous mode [ 608.758205][T19326] macvlan1: left promiscuous mode [ 609.110082][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 609.503244][ T4938] Bluetooth: hci3: command tx timeout [ 610.163799][T19361] ip_tables: iptables: counters copy to user failed while replacing table [ 610.280334][T19363] __nla_validate_parse: 9 callbacks suppressed [ 610.280350][T19363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 610.310154][T19363] veth7: entered allmulticast mode [ 610.799406][T19379] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3281'. [ 610.799437][T19379] netlink: 'syz.4.3281': attribute type 2 has an invalid length. [ 610.799452][T19379] netlink: 'syz.4.3281': attribute type 1 has an invalid length. [ 610.799467][T19379] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3281'. [ 610.977627][T19386] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3284'. [ 611.202444][T19301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.435644][T19390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3285'. [ 611.535547][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 611.538025][T19399] ip_tables: iptables: counters copy to user failed while replacing table [ 611.697702][T19398] veth5: entered allmulticast mode [ 612.419235][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3294'. [ 612.576076][T19433] netlink: 'syz.4.3294': attribute type 5 has an invalid length. [ 612.652428][T19444] netlink: 'syz.2.3297': attribute type 2 has an invalid length. [ 612.652454][T19444] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3297'. [ 612.685143][ T4938] Bluetooth: hci4: connection err: -111 [ 612.688762][T19444] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3297'. [ 612.761626][T19446] netlink: 'syz.2.3300': attribute type 58 has an invalid length. [ 612.761651][T19446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3300'. [ 612.836545][T19451] netlink: 'syz.2.3300': attribute type 58 has an invalid length. [ 613.447212][T19474] netlink: 'syz.2.3305': attribute type 1 has an invalid length. [ 613.717233][T19482] wg2 speed is unknown, defaulting to 1000 [ 613.719341][T19482] syzkaller0 speed is unknown, defaulting to 1000 [ 613.927834][T19489] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 613.927859][T19489] netlink: 'syz.0.3308': attribute type 2 has an invalid length. [ 613.930295][T19490] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 615.049358][T19484] veth3: left allmulticast mode [ 615.077407][T19484] ip6gretap1: left allmulticast mode [ 615.084823][T19484] ipvlan2: left allmulticast mode [ 615.084849][T19484] erspan0: left allmulticast mode [ 615.100907][T19484] veth7: left allmulticast mode [ 615.181483][T19506] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 615.197071][T19506] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 615.539580][T19527] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 615.554166][T19525] __nla_validate_parse: 2 callbacks suppressed [ 615.554187][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3313'. [ 615.766915][T19525] ipvlan0: entered allmulticast mode [ 615.766941][T19525] syz_tun: entered allmulticast mode [ 616.240853][T19531] bond2: entered promiscuous mode [ 616.241346][T19531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.218369][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'. [ 617.370144][T19586] veth5: entered allmulticast mode [ 617.379541][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 617.539237][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 617.561747][T19586] FAULT_INJECTION: forcing a failure. [ 617.561747][T19586] name failslab, interval 1, probability 0, space 0, times 0 [ 617.561786][T19586] CPU: 1 UID: 0 PID: 19586 Comm: syz.1.3327 Not tainted syzkaller #0 PREEMPT(full) [ 617.561809][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 617.561821][T19586] Call Trace: [ 617.561830][T19586] [ 617.561839][T19586] dump_stack_lvl+0xe8/0x150 [ 617.561879][T19586] should_fail_ex+0x410/0x560 [ 617.561915][T19586] should_failslab+0xa8/0x100 [ 617.561946][T19586] __kvmalloc_node_noprof+0x176/0x820 [ 617.561969][T19586] ? __nf_unregister_net_hook+0x8a/0x710 [ 617.562108][T19586] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 617.562135][T19586] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 617.562172][T19586] __nf_hook_entries_try_shrink+0x34e/0x720 [ 617.562216][T19586] __nf_unregister_net_hook+0x488/0x710 [ 617.562258][T19586] nf_unregister_net_hooks+0xcb/0x140 [ 617.562291][T19586] nf_synproxy_ipv6_fini+0x75/0xa0 [ 617.562348][T19586] nft_synproxy_do_destroy+0x109/0x180 [ 617.562442][T19586] ? __pfx_nft_synproxy_destroy+0x10/0x10 [ 617.562472][T19586] __nft_release_table+0x57e/0x1150 [ 617.562558][T19586] ? __pfx___nft_release_table+0x10/0x10 [ 617.562607][T19586] nft_rcv_nl_event+0xcc6/0xe60 [ 617.562656][T19586] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 617.562692][T19586] ? nfulnl_rcv_nl_event+0x433/0x470 [ 617.562739][T19586] ? nfqnl_rcv_nl_event+0x392/0x3d0 [ 617.562772][T19586] notifier_call_chain+0x1a5/0x3d0 [ 617.562829][T19586] blocking_notifier_call_chain+0x6a/0x90 [ 617.562863][T19586] netlink_release+0x11fb/0x1a80 [ 617.562899][T19586] ? netlink_release+0x106/0x1a80 [ 617.562925][T19586] ? __pfx_netlink_release+0x10/0x10 [ 617.562946][T19586] ? down_write+0x16b/0x200 [ 617.562974][T19586] ? __pfx_down_write+0x10/0x10 [ 617.563011][T19586] __sock_release+0xa0/0x1f0 [ 617.563046][T19586] ? __pfx_sock_close+0x10/0x10 [ 617.563066][T19586] sock_close+0x1c/0x30 [ 617.563087][T19586] __fput+0x418/0xa50 [ 617.563126][T19586] fput_close_sync+0x11f/0x240 [ 617.563154][T19586] ? __pfx_fput_close_sync+0x10/0x10 [ 617.563198][T19586] __x64_sys_close+0x7e/0x110 [ 617.563228][T19586] do_syscall_64+0x166/0x520 [ 617.563249][T19586] ? trace_irq_disable+0x3b/0x140 [ 617.563271][T19586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.563296][T19586] ? clear_bhb_loop+0x70/0xc0 [ 617.563323][T19586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.563344][T19586] RIP: 0033:0x7f12e479e199 [ 617.563366][T19586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.563385][T19586] RSP: 002b:00007f12e55fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 617.563409][T19586] RAX: ffffffffffffffda RBX: 00007f12e4a25fa0 RCX: 00007f12e479e199 [ 617.563424][T19586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 617.563438][T19586] RBP: 00007f12e55fa090 R08: 0000000000000000 R09: 0000000000000000 [ 617.563452][T19586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.563465][T19586] R13: 00007f12e4a26038 R14: 00007f12e4a25fa0 R15: 00007ffc66872218 [ 617.563504][T19586] [ 618.170322][T19618] validate_nla: 4 callbacks suppressed [ 618.170345][T19618] netlink: 'syz.0.3331': attribute type 2 has an invalid length. [ 618.195749][T19618] openvswitch: netlink: Tunnel attr 166 out of range max 16 [ 618.426101][T19630] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 618.557426][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 619.391485][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3342'. [ 619.463913][T19664] veth7: entered allmulticast mode [ 619.640736][T19664] FAULT_INJECTION: forcing a failure. [ 619.640736][T19664] name failslab, interval 1, probability 0, space 0, times 0 [ 619.640773][T19664] CPU: 0 UID: 0 PID: 19664 Comm: syz.0.3342 Not tainted syzkaller #0 PREEMPT(full) [ 619.640797][T19664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.640809][T19664] Call Trace: [ 619.640818][T19664] [ 619.640827][T19664] dump_stack_lvl+0xe8/0x150 [ 619.640863][T19664] should_fail_ex+0x410/0x560 [ 619.640895][T19664] should_failslab+0xa8/0x100 [ 619.640923][T19664] __kvmalloc_node_noprof+0x176/0x820 [ 619.640946][T19664] ? __nf_unregister_net_hook+0x8a/0x710 [ 619.640977][T19664] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 619.641011][T19664] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 619.641047][T19664] __nf_hook_entries_try_shrink+0x34e/0x720 [ 619.641091][T19664] __nf_unregister_net_hook+0x488/0x710 [ 619.641128][T19664] nf_unregister_net_hooks+0xcb/0x140 [ 619.641159][T19664] nf_synproxy_ipv6_fini+0x75/0xa0 [ 619.641190][T19664] nft_synproxy_do_destroy+0x109/0x180 [ 619.641224][T19664] ? __pfx_nft_synproxy_destroy+0x10/0x10 [ 619.641254][T19664] __nft_release_table+0x57e/0x1150 [ 619.641300][T19664] ? __pfx___nft_release_table+0x10/0x10 [ 619.641351][T19664] nft_rcv_nl_event+0xcc6/0xe60 [ 619.641400][T19664] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 619.641437][T19664] ? nfulnl_rcv_nl_event+0x433/0x470 [ 619.641461][T19664] ? nfqnl_rcv_nl_event+0x392/0x3d0 [ 619.641495][T19664] notifier_call_chain+0x1a5/0x3d0 [ 619.641536][T19664] blocking_notifier_call_chain+0x6a/0x90 [ 619.641569][T19664] netlink_release+0x11fb/0x1a80 [ 619.641604][T19664] ? netlink_release+0x106/0x1a80 [ 619.641629][T19664] ? __pfx_netlink_release+0x10/0x10 [ 619.641649][T19664] ? down_write+0x16b/0x200 [ 619.641677][T19664] ? __pfx_down_write+0x10/0x10 [ 619.641713][T19664] __sock_release+0xa0/0x1f0 [ 619.641737][T19664] ? __pfx_sock_close+0x10/0x10 [ 619.641758][T19664] sock_close+0x1c/0x30 [ 619.641778][T19664] __fput+0x418/0xa50 [ 619.641815][T19664] fput_close_sync+0x11f/0x240 [ 619.641842][T19664] ? __pfx_fput_close_sync+0x10/0x10 [ 619.641885][T19664] __x64_sys_close+0x7e/0x110 [ 619.641914][T19664] do_syscall_64+0x166/0x520 [ 619.641934][T19664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.641955][T19664] ? clear_bhb_loop+0x70/0xc0 [ 619.641982][T19664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.642011][T19664] RIP: 0033:0x7f51d3f9e199 [ 619.642033][T19664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.642050][T19664] RSP: 002b:00007f51d4ec4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 619.642074][T19664] RAX: ffffffffffffffda RBX: 00007f51d4225fa0 RCX: 00007f51d3f9e199 [ 619.642089][T19664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 619.642101][T19664] RBP: 00007f51d4ec4090 R08: 0000000000000000 R09: 0000000000000000 [ 619.642114][T19664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.642126][T19664] R13: 00007f51d4226038 R14: 00007f51d4225fa0 R15: 00007ffc93903778 [ 619.642165][T19664] [ 620.168006][T19682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3345'. [ 620.168966][T19682] netlink: 'syz.1.3345': attribute type 58 has an invalid length. [ 620.168986][T19682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3345'. [ 620.365055][T19096] IPVS: starting estimator thread 0... [ 620.463720][T19687] IPVS: using max 25 ests per chain, 60000 per kthread [ 620.473064][T19689] Cannot find del_set index 4 as target [ 620.520282][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3351'. [ 620.556411][T19694] veth9: entered allmulticast mode [ 620.721999][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'. [ 621.415237][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 621.637617][T19719] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3357'. [ 621.885178][T19739] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3361'. [ 621.885268][T19739] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3361'. [ 622.059768][T19743] netlink: 'syz.2.3362': attribute type 1 has an invalid length. [ 622.178365][T19743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.285541][T19744] bridge1: entered promiscuous mode [ 622.305902][T19744] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 622.420859][T19750] wg2 speed is unknown, defaulting to 1000 [ 622.461993][T19750] syzkaller0 speed is unknown, defaulting to 1000 [ 622.688362][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3366'. [ 622.783651][T19765] netlink: 'syz.4.3369': attribute type 163 has an invalid length. [ 622.903431][T19759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 622.907426][T19763] bond1: option ad_select: unable to set because the bond device is up [ 623.070926][T19766] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 623.093282][T19766] bond1 (unregistering): Released all slaves [ 623.171006][T19779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3373'. [ 623.287092][T19783] netlink: 'syz.0.3374': attribute type 1 has an invalid length. [ 623.347664][T19785] netlink: 'syz.2.3373': attribute type 4 has an invalid length. [ 623.522442][T19790] netlink: 'syz.0.3374': attribute type 10 has an invalid length. [ 623.545926][T19793] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 623.553837][T19779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3373'. [ 623.569461][T19791] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3375'. [ 623.779693][T19786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.797363][T19786] bond3: (slave bond4): making interface the new active one [ 623.799611][T19786] bond3: (slave bond4): Enslaving as an active interface with an up link [ 623.869388][T19787] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 624.222050][T19793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.251025][T19799] bond2: (slave veth7): Enslaving as an active interface with a down link [ 624.260648][T19801] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 624.268344][T19801] bond2: (slave batadv1): making interface the new active one [ 624.269771][T19801] batadv1: entered promiscuous mode [ 624.276220][T19801] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 624.316511][T19804] bond2 (unregistering): (slave veth7): Releasing active interface [ 624.338085][T19804] bond2 (unregistering): (slave batadv1): Releasing active interface [ 624.338117][T19804] batadv1: left promiscuous mode [ 624.348542][T19804] bond2 (unregistering): Released all slaves [ 624.458535][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.642385][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3393'. [ 625.769414][T19855] batadv0: entered promiscuous mode [ 625.779472][T19855] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 625.789560][T19855] batadv0: left promiscuous mode [ 626.468221][T19895] ip_tables: iptables: counters copy to user failed while replacing table [ 626.546410][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3402'. [ 626.810639][T19906] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3405'. [ 626.810669][T19906] openvswitch: netlink: Flow key attr not present in new flow. [ 626.841918][T19902] tipc: Enabling of bearer rejected, failed to enable media [ 626.940568][ T7736] wlan0: Trigger new scan to find an IBSS to join [ 627.038960][T19909] 8021q: VLANs not supported on ip6gre0 [ 627.093858][ T5638] Bluetooth: hci3: command 0x0405 tx timeout [ 627.279460][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3408'. [ 627.353758][T19916] veth3: entered allmulticast mode [ 628.109535][T19947] ip_tables: iptables: counters copy to user failed while replacing table [ 628.548702][T19964] tipc: Enabling of bearer rejected, media not registered [ 628.571700][T19965] smc: net device lo applied user defined pnetid SYZ0 [ 628.841208][T19969] sctp: [Deprecated]: syz.2.3429 (pid 19969) Use of int in max_burst socket option. [ 628.841208][T19969] Use struct sctp_assoc_value instead [ 628.902420][T19970] syz.0.3428: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 628.903422][T19970] CPU: 1 UID: 0 PID: 19970 Comm: syz.0.3428 Not tainted syzkaller #0 PREEMPT(full) [ 628.903449][T19970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 628.903463][T19970] Call Trace: [ 628.903471][T19970] [ 628.903481][T19970] dump_stack_lvl+0xe8/0x150 [ 628.903516][T19970] warn_alloc+0x24d/0x270 [ 628.903538][T19970] ? kasan_save_track+0x4f/0x80 [ 628.903557][T19970] ? kasan_save_track+0x3e/0x80 [ 628.903579][T19970] ? __pfx_warn_alloc+0x10/0x10 [ 628.903596][T19970] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 628.903623][T19970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.903663][T19970] __vmalloc_node_range_noprof+0x127/0x1540 [ 628.903716][T19970] ? rcu_is_watching+0x16/0xb0 [ 628.903744][T19970] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 628.903771][T19970] ? __kmalloc_cache_noprof+0x321/0x600 [ 628.903790][T19970] ? __kmalloc_cache_noprof+0x14d/0x600 [ 628.903808][T19970] ? xskq_create+0x56/0x220 [ 628.903839][T19970] xskq_create+0x148/0x220 [ 628.903865][T19970] ? xsk_init_queue+0x8a/0xe0 [ 628.903902][T19970] xsk_init_queue+0x8a/0xe0 [ 628.903929][T19970] xsk_setsockopt+0x52a/0x960 [ 628.903956][T19970] ? __pfx_xsk_setsockopt+0x10/0x10 [ 628.903980][T19970] ? __pfx_aa_sk_perm+0x10/0x10 [ 628.904016][T19970] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 628.904040][T19970] ? __pfx_xsk_setsockopt+0x10/0x10 [ 628.904065][T19970] do_sock_setsockopt+0x17c/0x1b0 [ 628.904094][T19970] __x64_sys_setsockopt+0x13d/0x1b0 [ 628.904126][T19970] do_syscall_64+0x166/0x520 [ 628.904142][T19970] ? trace_irq_disable+0x3b/0x140 [ 628.904161][T19970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.904179][T19970] ? clear_bhb_loop+0x70/0xc0 [ 628.904203][T19970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.904221][T19970] RIP: 0033:0x7f51d3f9e199 [ 628.904241][T19970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.904257][T19970] RSP: 002b:00007f51d4ec4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 628.904277][T19970] RAX: ffffffffffffffda RBX: 00007f51d4225fa0 RCX: 00007f51d3f9e199 [ 628.904291][T19970] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 628.904303][T19970] RBP: 00007f51d40358e0 R08: 0000000000000004 R09: 0000000000000000 [ 628.904315][T19970] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.904326][T19970] R13: 00007f51d4226038 R14: 00007f51d4225fa0 R15: 00007ffc93903778 [ 628.904359][T19970] [ 628.904399][T19970] Mem-Info: [ 628.904408][T19970] active_anon:34499 inactive_anon:4390 isolated_anon:0 [ 628.904408][T19970] active_file:2 inactive_file:43727 isolated_file:0 [ 628.904408][T19970] unevictable:1760 dirty:270 writeback:0 [ 628.904408][T19970] slab_reclaimable:12481 slab_unreclaimable:128873 [ 628.904408][T19970] mapped:31479 shmem:3310 pagetables:1258 [ 628.904408][T19970] sec_pagetables:0 bounce:0 [ 628.904408][T19970] kernel_misc_reclaimable:0 [ 628.904408][T19970] free:1133308 free_pcp:20301 free_cma:0 [ 628.904457][T19970] Node 0 active_anon:137996kB inactive_anon:17560kB active_file:8kB inactive_file:174716kB unevictable:7040kB isolated(anon):0kB isolated(file):0kB mapped:125916kB dirty:1080kB writeback:0kB shmem:13240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17752kB pagetables:4868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 628.904509][T19970] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 628.904556][T19970] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.904611][T19970] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 628.904646][T19970] Node 0 DMA32 free:568044kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:137996kB inactive_anon:17560kB active_file:8kB inactive_file:174716kB unevictable:7040kB writepending:1080kB zspages:0kB present:3129332kB managed:2547076kB mlocked:7168kB bounce:0kB free_pcp:81204kB local_pcp:24200kB free_cma:0kB [ 628.904703][T19970] lowmem_reserve[]: 0 0 0 0 0 [ 628.904735][T19970] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.904786][T19970] lowmem_reserve[]: 0 0 0 0 0 [ 628.904818][T19970] Node 1 Normal free:3949828kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.904873][T19970] lowmem_reserve[]: 0 0 0 0 0 [ 628.904907][T19970] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 628.905016][T19970] Node 0 DMA32: 92*4kB (U) 460*8kB (UE) 24*16kB (UME) 98*32kB (ME) 102*64kB (ME) 67*128kB (UME) 28*256kB (UME) 15*512kB (UM) 6*1024kB (UME) 6*2048kB (UME) 125*4096kB (UM) = 567952kB [ 628.905168][T19970] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 628.905261][T19970] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 7*16kB (UM) 5*32kB (UM) 7*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 961*4096kB (M) = 3949828kB [ 628.905418][T19970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.905433][T19970] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 628.905447][T19970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.905461][T19970] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 628.905476][T19970] 47035 total pagecache pages [ 628.905483][T19970] 0 pages in swap cache [ 628.905490][T19970] Free swap = 124996kB [ 628.905497][T19970] Total swap = 124996kB [ 628.905505][T19970] 2097051 pages RAM [ 628.905512][T19970] 0 pages HighMem/MovableOnly [ 628.905518][T19970] 428666 pages reserved [ 628.905525][T19970] 0 pages cma reserved [ 629.568528][T19975] xt_cgroup: no path or classid specified [ 629.580016][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 629.897939][T19984] bond1: option mode: invalid value (7) [ 629.907920][T19984] bond1 (unregistering): Released all slaves [ 629.988186][ T157] wlan0: Trigger new scan to find an IBSS to join [ 630.498742][T20011] ip_tables: iptables: counters copy to user failed while replacing table [ 631.122052][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3443'. [ 631.181893][T20029] veth9: entered allmulticast mode [ 631.279954][T20032] netlink: 'syz.1.3444': attribute type 362 has an invalid length. [ 631.351249][T20042] IPVS: length: 223 != 24 [ 631.430659][T20030] FAULT_INJECTION: forcing a failure. [ 631.430659][T20030] name failslab, interval 1, probability 0, space 0, times 0 [ 631.430697][T20030] CPU: 1 UID: 0 PID: 20030 Comm: syz.4.3443 Not tainted syzkaller #0 PREEMPT(full) [ 631.430719][T20030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 631.430732][T20030] Call Trace: [ 631.430741][T20030] [ 631.430750][T20030] dump_stack_lvl+0xe8/0x150 [ 631.430785][T20030] should_fail_ex+0x410/0x560 [ 631.430816][T20030] should_failslab+0xa8/0x100 [ 631.430843][T20030] __kvmalloc_node_noprof+0x176/0x820 [ 631.430871][T20030] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 631.430896][T20030] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 631.430932][T20030] __nf_hook_entries_try_shrink+0x34e/0x720 [ 631.430975][T20030] __nf_unregister_net_hook+0x488/0x710 [ 631.431014][T20030] nf_unregister_net_hooks+0xcb/0x140 [ 631.431046][T20030] nf_defrag_ipv6_disable+0x95/0xe0 [ 631.431179][T20030] nf_ct_netns_put+0x375/0x520 [ 631.431231][T20030] ? __pfx_nft_synproxy_destroy+0x10/0x10 [ 631.431262][T20030] __nft_release_table+0x57e/0x1150 [ 631.431330][T20030] ? __pfx___nft_release_table+0x10/0x10 [ 631.431390][T20030] nft_rcv_nl_event+0xcc6/0xe60 [ 631.431438][T20030] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 631.431477][T20030] ? nfulnl_rcv_nl_event+0x433/0x470 [ 631.431503][T20030] ? nfqnl_rcv_nl_event+0x392/0x3d0 [ 631.431538][T20030] notifier_call_chain+0x1a5/0x3d0 [ 631.431582][T20030] blocking_notifier_call_chain+0x6a/0x90 [ 631.431618][T20030] netlink_release+0x11fb/0x1a80 [ 631.431653][T20030] ? netlink_release+0x106/0x1a80 [ 631.431679][T20030] ? __pfx_netlink_release+0x10/0x10 [ 631.431699][T20030] ? down_write+0x16b/0x200 [ 631.431722][T20030] ? __pfx_down_write+0x10/0x10 [ 631.431760][T20030] __sock_release+0xa0/0x1f0 [ 631.431784][T20030] ? __pfx_sock_close+0x10/0x10 [ 631.431805][T20030] sock_close+0x1c/0x30 [ 631.431824][T20030] __fput+0x418/0xa50 [ 631.431863][T20030] fput_close_sync+0x11f/0x240 [ 631.431889][T20030] ? __pfx_fput_close_sync+0x10/0x10 [ 631.431933][T20030] __x64_sys_close+0x7e/0x110 [ 631.431963][T20030] do_syscall_64+0x166/0x520 [ 631.431982][T20030] ? trace_irq_disable+0x3b/0x140 [ 631.432007][T20030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.432027][T20030] ? clear_bhb_loop+0x70/0xc0 [ 631.432053][T20030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.432073][T20030] RIP: 0033:0x7ff8f859e199 [ 631.432094][T20030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.432112][T20030] RSP: 002b:00007ff8f94bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 631.432136][T20030] RAX: ffffffffffffffda RBX: 00007ff8f8826090 RCX: 00007ff8f859e199 [ 631.432151][T20030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 631.432164][T20030] RBP: 00007ff8f94bb090 R08: 0000000000000000 R09: 0000000000000000 [ 631.432177][T20030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.432189][T20030] R13: 00007ff8f8826128 R14: 00007ff8f8826090 R15: 00007ffef227a958 [ 631.432229][T20030] [ 631.667783][ T5638] Bluetooth: hci3: command 0x0405 tx timeout [ 632.160500][T20063] ip_tables: iptables: counters copy to user failed while replacing table [ 632.289670][T20050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.304276][T19088] tipc: Subscription rejected, illegal request [ 632.448693][T20061] ip6gretap0: entered promiscuous mode [ 632.451676][T20061] vlan0: entered promiscuous mode [ 632.517350][T20071] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 632.773967][T20050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.841227][T20085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3457'. [ 632.841499][T20085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3457'. [ 632.901526][T20083] tipc: Started in network mode [ 632.901569][T20083] tipc: Node identity 5263179ee6b9, cluster identity 4711 [ 632.901832][T20083] tipc: Enabled bearer , priority 0 [ 632.946710][T20076] tipc: Resetting bearer [ 633.023277][ T7736] wlan0: Trigger new scan to find an IBSS to join [ 633.025338][T20050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.195739][T20098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3460'. [ 633.219975][T20089] syzkaller0: entered promiscuous mode [ 633.220003][T20089] syzkaller0: entered allmulticast mode [ 633.317136][T20050] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.341847][T20075] tipc: Resetting bearer [ 633.408512][T20075] tipc: Disabling bearer [ 633.514027][ T7736] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.564182][ T7736] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.564784][ T7736] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.593313][T19098] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.820588][T20115] syzkaller0: entered promiscuous mode [ 633.820612][T20115] syzkaller0: entered allmulticast mode [ 633.913051][T20120] ip_tables: iptables: counters copy to user failed while replacing table [ 634.073194][ T7736] wlan0: Creating new IBSS network, BSSID 32:e8:ea:cb:69:ad [ 635.166094][T20156] netlink: 'syz.4.3480': attribute type 5 has an invalid length. [ 635.443534][T20159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3481'. [ 635.576662][T20168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3482'. [ 635.578809][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'. [ 635.578850][T20168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3482'. [ 635.578866][T20168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3482'. [ 635.948993][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'. [ 636.119265][T20187] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3487'. [ 637.619195][T20232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.947536][T20250] __nla_validate_parse: 3 callbacks suppressed [ 637.947557][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3502'. [ 637.947574][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'. [ 637.949381][T20249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 638.074526][T20250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.115339][T20250] bond5: (slave bond0): making interface the new active one [ 638.131710][T20249] netlink: 'syz.0.3502': attribute type 2 has an invalid length. [ 638.131732][T20249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3502'. [ 638.192001][T20250] bond5: (slave bond0): Enslaving as an active interface with an up link [ 638.252354][T20260] openvswitch: netlink: Message has 2 unknown bytes. [ 638.481341][T20264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3506'. [ 638.655791][T20273] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3511'. [ 638.679474][ T157] IPVS: starting estimator thread 0... [ 638.774902][T20282] IPVS: using max 28 ests per chain, 67200 per kthread [ 638.840399][T20285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3513'. [ 638.935185][T20290] ip_tables: iptables: counters copy to user failed while replacing table [ 639.001076][T20290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3516'. [ 639.665182][T20317] netlink: 'syz.3.3527': attribute type 4 has an invalid length. [ 639.738893][T20317] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.739493][T20317] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.798008][T20317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3527'. [ 639.833778][T20322] syzkaller0: entered promiscuous mode [ 639.833802][T20322] syzkaller0: entered allmulticast mode [ 639.876213][T20319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3528'. [ 640.065832][T20323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3529'. [ 640.105764][T20323] veth1: entered promiscuous mode [ 640.107657][T20323] veth0: entered promiscuous mode [ 640.398323][ T157] IPVS: starting estimator thread 0... [ 640.484380][T20376] IPVS: using max 25 ests per chain, 60000 per kthread [ 640.859454][T20325] workqueue: Failed to create a rescuer kthread for wq "nfc25_nci_rx_wq": -EINTR [ 641.468126][T20440] ip6erspan0: entered promiscuous mode [ 641.701345][T20452] pimreg: entered allmulticast mode [ 641.771938][T20450] pimreg: left allmulticast mode [ 642.318998][T20470] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 642.319040][T20470] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 642.319078][T20470] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 642.568957][T20472] smbdirect: ib_dev[sy] renamed to [sys] [ 642.806757][T20480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.708080][T20509] __nla_validate_parse: 7 callbacks suppressed [ 643.708104][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3564'. [ 643.708132][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3564'. [ 644.286151][T20527] netlink: 'syz.1.3567': attribute type 9 has an invalid length. [ 644.301004][T20503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3561'. [ 644.375406][T20529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3567'. [ 644.595002][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3568'. [ 645.790343][T20583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 645.979704][T20586] bond1: entered allmulticast mode [ 645.988902][T20586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.045893][T20586] bond2: entered allmulticast mode [ 646.046431][T20586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 646.666052][T20617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3585'. [ 646.749197][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 646.771272][T20627] x_tables: duplicate underflow at hook 3 [ 647.392436][T20650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.698013][T20662] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 647.698347][T20662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'. [ 647.831241][T20665] batman_adv: batadv0: Adding interface: dummy0 [ 647.831262][T20665] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.840793][T20665] batman_adv: batadv0: Interface activated: dummy0 [ 647.931327][T20665] Set syz0 is full, maxelem 0 reached [ 648.898418][T20700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3607'. [ 648.913606][T20700] tipc: Enabling of bearer rejected, failed to enable media [ 649.064542][T20709] ip_tables: iptables: counters copy to user failed while replacing table [ 649.064749][T20710] ip_tables: iptables: counters copy to user failed while replacing table [ 649.067442][T20709] ip_tables: iptables: counters copy to user failed while replacing table [ 649.103061][T20710] ip_tables: iptables: counters copy to user failed while replacing table [ 649.119479][T20709] netlink: zone id is out of range [ 649.119512][T20709] netlink: zone id is out of range [ 649.119521][T20709] netlink: zone id is out of range [ 649.119528][T20709] netlink: zone id is out of range [ 649.119536][T20709] netlink: zone id is out of range [ 649.949131][T20745] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.950008][T20745] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.166836][T20757] netlink: 'syz.2.3619': attribute type 1 has an invalid length. [ 650.211167][T20760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3618'. [ 650.254466][T20745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.261128][T20745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.312082][T20764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3619'. [ 650.408694][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3619'. [ 650.523787][T20745] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 650.544622][T20745] veth9: left allmulticast mode [ 650.553834][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.713123][T20769] bond3: (slave bridge2): making interface the new active one [ 650.717610][T20769] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 650.793313][T19096] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.793363][T19096] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.793397][T19096] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.343663][T20801] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 651.343872][T20801] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 651.344055][T20801] veth0_virt_wifi: entered allmulticast mode [ 651.351321][T20801] veth0_virt_wifi: entered promiscuous mode [ 651.555972][T20803] bond1: (slave lo): Releasing backup interface [ 651.557174][T20803] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 651.598611][T20803] bridge_slave_0: left allmulticast mode [ 651.598641][T20803] bridge_slave_0: left promiscuous mode [ 651.600565][T20803] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.664800][T20803] bridge_slave_1: left allmulticast mode [ 651.664829][T20803] bridge_slave_1: left promiscuous mode [ 651.665066][T20803] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.726708][T20803] bond0: (slave bond_slave_0): Releasing backup interface [ 651.752019][T20803] bond0: (slave bond_slave_1): Releasing backup interface [ 651.794259][T20803] team0: Port device team_slave_0 removed [ 651.839180][T20803] team0: Port device team_slave_1 removed [ 651.840117][T20803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.840148][T20803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.861717][T20803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.861742][T20803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.409326][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3640'. [ 652.411431][T20839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3640'. [ 652.505696][T20843] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 652.960807][T20868] net_ratelimit: 10 callbacks suppressed [ 652.960831][T20868] ip_tables: iptables: counters copy to user failed while replacing table [ 653.035657][T20870] netlink: 'syz.0.3647': attribute type 16 has an invalid length. [ 653.035683][T20870] netlink: 'syz.0.3647': attribute type 17 has an invalid length. [ 653.101695][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3649'. [ 653.242237][T20859] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.243051][T20859] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.327150][T20859] batman_adv: batadv0: Interface deactivated: dummy0 [ 653.549623][T20859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.564293][T20859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.073024][T20869] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.087391][T20869] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.148586][T20899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 654.273968][T20870] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.274113][T20870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.277366][T20870] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.277489][T20870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.356303][T20870] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 654.399715][T20878] veth11: entered allmulticast mode [ 654.423184][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.423238][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.423276][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.494223][T19092] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.542136][T20899] veth9: entered allmulticast mode [ 654.610490][T20911] netlink: 'syz.4.3654': attribute type 9 has an invalid length. [ 654.835729][T20927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3653'. [ 654.924938][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3658'. [ 655.405117][T20946] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 655.439775][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'. [ 656.378384][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3666'. [ 656.406817][T20980] gretap1: entered allmulticast mode [ 656.418393][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3666'. [ 656.456228][T20990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3669'. [ 656.741574][T20987] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3667'. [ 656.909778][T21003] netlink: 'syz.4.3673': attribute type 21 has an invalid length. [ 656.956940][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3671'. [ 657.052288][T21007] ovs-system: entered promiscuous mode [ 657.348032][T21017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3677'. [ 657.504593][T21025] netlink: 'syz.4.3678': attribute type 1 has an invalid length. [ 657.646745][T21025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.877940][T21025] bond2: (slave gretap1): making interface the new active one [ 657.913321][T21025] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 658.634380][T21048] batadv0: entered promiscuous mode [ 658.634602][T21048] macsec1: entered promiscuous mode [ 658.634919][T21048] macsec1: entered allmulticast mode [ 658.634937][T21048] batadv0: entered allmulticast mode [ 658.636413][T21048] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 658.639444][T21048] batadv0: left allmulticast mode [ 658.639773][T21048] batadv0: left promiscuous mode [ 658.721631][T21050] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 658.721785][T21050] bridge0: port 3(veth0_virt_wifi) entered listening state [ 658.722102][T21050] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.722254][T21050] bridge0: port 2(bridge_slave_1) entered listening state [ 658.722627][T21050] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.722766][T21050] bridge0: port 1(bridge_slave_0) entered listening state [ 658.842412][T21050] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 659.154864][T21048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.172363][T21058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.194474][T21058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.497113][T21072] ip_tables: iptables: counters copy to user failed while replacing table [ 659.510188][T21072] tipc: Started in network mode [ 659.510217][T21072] tipc: Node identity ac1414aa, cluster identity 4711 [ 659.510464][T21072] tipc: New replicast peer: 172.20.20.187 [ 659.510803][T21072] tipc: Enabled bearer , priority 10 [ 659.526843][T21075] __nla_validate_parse: 5 callbacks suppressed [ 659.526862][T21075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3691'. [ 660.397094][T21107] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3699'. [ 660.636452][ T5731] tipc: Node number set to 2886997162 [ 661.143610][T21130] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.3705'. [ 661.184390][T21125] sctp: [Deprecated]: syz.3.3706 (pid 21125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 661.184390][T21125] Use struct sctp_sack_info instead [ 661.187632][T21125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 662.462248][ T31] audit: type=1107 audit(1791398208.321:8): pid=21148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='›ßÕl„ÕÒÖÍg¨ïS—~êvzHkOZ7°ø±È“ÄzQÈguá9IÇ@­”tY¨iö©ŒÏQ‚•3bY„8³¢âm"æ`¤2S!–ãûR'¬‹º–2o1[ÆÉ´Wðä¢û›?¾­&î“öšâž˜¥Â *J Àþ!­' [ 662.946171][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.946204][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.106930][T21171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3718'. [ 663.106955][T21171] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3718'. [ 663.120239][T21170] ip6gretap0: entered promiscuous mode [ 663.151179][T21170] macsec0: entered allmulticast mode [ 663.151204][T21170] ip6gretap0: entered allmulticast mode [ 663.224788][T21176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3720'. [ 664.387417][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 664.401920][T21213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 664.870528][T21226] netlink: 'syz.0.3732': attribute type 2 has an invalid length. [ 664.878180][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3732'. [ 665.187764][T21238] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3736'. [ 665.503246][T21253] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 666.204599][T21272] netlink: 'syz.1.3744': attribute type 5 has an invalid length. [ 666.309325][T21278] netlink: 'syz.0.3747': attribute type 1 has an invalid length. [ 666.350361][T21278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.046188][T21278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.046641][T21278] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 667.072696][T21278] bond6: (slave gre1): Error -95 calling set_mac_address [ 667.160647][T21283] gretap2: entered promiscuous mode [ 667.167827][T21283] bond6: (slave gretap2): making interface the new active one [ 667.168247][T21283] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 667.177912][T21289] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 667.208331][T21301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.324123][ T176] IPVS: starting estimator thread 0... [ 667.406134][T21295] bond6 (unregistering): (slave gretap2): Releasing active interface [ 667.423324][T21320] IPVS: using max 27 ests per chain, 64800 per kthread [ 667.429505][T21295] bond6 (unregistering): Released all slaves [ 667.619807][T21335] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3755'. [ 667.636080][T21321] netlink: 'syz.4.3755': attribute type 4 has an invalid length. [ 668.277769][T21359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3763'. [ 668.303491][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3763'. [ 668.303521][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3763'. [ 668.326427][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3763'. [ 668.326452][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3763'. [ 668.369744][T21363] ip_tables: iptables: counters copy to user failed while replacing table [ 668.409240][T21367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3763'. [ 668.409281][T21367] netlink: 'syz.3.3763': attribute type 1 has an invalid length. [ 668.437553][T21367] geneve2: entered promiscuous mode [ 668.489484][T21372] xt_TCPMSS: Only works on TCP SYN packets [ 668.490049][T21373] xt_TCPMSS: Only works on TCP SYN packets [ 668.736851][T21382] xt_hashlimit: size too large, truncated to 1048576 [ 669.411084][T21411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3778'. [ 670.144743][T21435] ip_tables: iptables: counters copy to user failed while replacing table [ 670.241635][T21435] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 670.499761][T21449] __nla_validate_parse: 2 callbacks suppressed [ 670.499786][T21449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3785'. [ 670.919198][T21463] x_tables: ip_tables: osf match: only valid for protocol 6 [ 671.236920][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.237212][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.289232][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.289399][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.289544][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.289674][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.289812][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.289934][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.290070][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3794'. [ 671.717262][T21490] xt_CT: No such helper "netbios-ns" [ 671.981051][T19094] wlan0: Trigger new scan to find an IBSS to join [ 672.112056][T21514] ovs-dp0: entered promiscuous mode [ 672.352867][T21528] syzkaller0: entered promiscuous mode [ 672.352892][T21528] syzkaller0: entered allmulticast mode [ 673.898584][T21591] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 673.939242][T21595] xt_cgroup: invalid path, errno=-2 [ 674.934823][T20898] wlan0: Trigger new scan to find an IBSS to join [ 675.615819][T21656] __nla_validate_parse: 66 callbacks suppressed [ 675.615843][T21656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3828'. [ 675.965524][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3831'. [ 675.965549][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3831'. [ 676.039163][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'. [ 676.085076][T21680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 676.166214][T21681] bond4: (slave bond0): making interface the new active one [ 676.171544][T21681] bond4: (slave bond0): Enslaving as an active interface with an up link [ 676.200778][T21718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3830'. [ 676.308143][T21690] bond4 (unregistering): (slave bond0): Releasing active interface [ 676.384879][T21690] bond4 (unregistering): Released all slaves [ 676.428254][T21727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3830'. [ 676.959817][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 676.960139][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 676.993594][T21738] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3833'. [ 677.064369][T21738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3833'. [ 677.873345][T21765] netlink: 'syz.4.3841': attribute type 1 has an invalid length. [ 677.973798][T20898] wlan0: Trigger new scan to find an IBSS to join [ 678.112122][T21760] veth13: entered allmulticast mode [ 678.194516][T21760] bond3: (slave veth13): Enslaving as an active interface with a down link [ 678.241449][T21768] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 678.288209][T21776] macvlan2: entered promiscuous mode [ 678.288233][T21776] macvlan2: entered allmulticast mode [ 678.288994][T21776] bond3: entered promiscuous mode [ 678.289962][T21776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 678.318919][T21776] bond3: left promiscuous mode [ 678.446181][T21760] macvlan2: entered promiscuous mode [ 678.446207][T21760] macvlan2: entered allmulticast mode [ 678.449454][T21760] bond3: entered promiscuous mode [ 678.450545][T21760] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 678.531798][T21760] bond3: left promiscuous mode [ 678.899125][T19094] wlan0: Creating new IBSS network, BSSID 36:ea:21:44:30:ea [ 679.038460][T21807] netlink: 'syz.3.3853': attribute type 16 has an invalid length. [ 679.038487][T21807] netlink: 'syz.3.3853': attribute type 17 has an invalid length. [ 679.103721][T21800] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.107729][T21800] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.172523][T21800] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 679.267561][T21807] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.267709][T21807] bridge0: port 1(bridge_slave_0) entered listening state [ 679.272414][T21807] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.272639][T21807] bridge0: port 2(bridge_slave_1) entered listening state [ 679.393213][T21807] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 679.393355][T21807] bridge0: port 3(veth0_virt_wifi) entered listening state [ 679.429654][T21807] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 679.470110][T21807] veth5: left allmulticast mode [ 679.491224][T21807] veth9: left allmulticast mode [ 679.502272][T21807] geneve2: left promiscuous mode [ 679.502296][T21807] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 679.635716][T21809] netlink: 'syz.0.3850': attribute type 1 has an invalid length. [ 680.005582][T21831] syzkaller0: entered promiscuous mode [ 680.005609][T21831] syzkaller0: entered allmulticast mode [ 683.485830][T21852] FAULT_INJECTION: forcing a failure. [ 683.485830][T21852] name failslab, interval 1, probability 0, space 0, times 0 [ 683.485868][T21852] CPU: 1 UID: 0 PID: 21852 Comm: syz.3.3860 Not tainted syzkaller #0 PREEMPT(full) [ 683.485891][T21852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 683.485902][T21852] Call Trace: [ 683.485910][T21852] [ 683.485919][T21852] dump_stack_lvl+0xe8/0x150 [ 683.485953][T21852] should_fail_ex+0x410/0x560 [ 683.485981][T21852] ? __alloc_skb+0x1db/0x7a0 [ 683.486006][T21852] should_failslab+0xa8/0x100 [ 683.486032][T21852] ? __alloc_skb+0x1db/0x7a0 [ 683.486053][T21852] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 683.486082][T21852] ? __alloc_skb+0x18d/0x7a0 [ 683.486106][T21852] ? __alloc_skb+0x1db/0x7a0 [ 683.486137][T21852] __alloc_skb+0x1db/0x7a0 [ 683.486168][T21852] netlink_ack+0x136/0xb30 [ 683.486188][T21852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.486231][T21852] netlink_rcv_skb+0x2a4/0x4a0 [ 683.486253][T21852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.486281][T21852] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.486319][T21852] ? down_read+0x2be/0x330 [ 683.486347][T21852] genl_rcv+0x28/0x40 [ 683.486372][T21852] netlink_unicast+0x7bd/0x940 [ 683.486413][T21852] netlink_sendmsg+0x813/0xb40 [ 683.486446][T21852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.486478][T21852] ? apparmor_socket_sendmsg+0x18b/0x360 [ 683.486503][T21852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.486521][T21852] sock_sendmsg_nosec+0x14e/0x190 [ 683.486545][T21852] ____sys_sendmsg+0x54e/0x850 [ 683.486574][T21852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.486609][T21852] ? import_iovec+0x73/0xa0 [ 683.486639][T21852] ___sys_sendmsg+0x2a5/0x360 [ 683.486665][T21852] ? __lock_acquire+0x747/0x2de0 [ 683.486692][T21852] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.486758][T21852] ? __fget_files+0x2a/0x420 [ 683.486785][T21852] ? __fget_files+0x3a2/0x420 [ 683.486824][T21852] __x64_sys_sendmsg+0x1b1/0x290 [ 683.486858][T21852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 683.486909][T21852] do_syscall_64+0x166/0x520 [ 683.486929][T21852] ? trace_irq_disable+0x3b/0x140 [ 683.486950][T21852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.486971][T21852] ? clear_bhb_loop+0x70/0xc0 [ 683.486996][T21852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.487016][T21852] RIP: 0033:0x7faa5299e199 [ 683.487036][T21852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.487054][T21852] RSP: 002b:00007faa50bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.487078][T21852] RAX: ffffffffffffffda RBX: 00007faa52c25fa0 RCX: 00007faa5299e199 [ 683.487093][T21852] RDX: 0000000024008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 683.487107][T21852] RBP: 00007faa50bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 683.487120][T21852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.487132][T21852] R13: 00007faa52c26038 R14: 00007faa52c25fa0 R15: 00007fff51ed5f98 [ 683.487168][T21852] [ 683.880740][T21877] __nla_validate_parse: 4 callbacks suppressed [ 683.880763][T21877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3866'. [ 684.112066][T21889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3871'. [ 684.736288][T21921] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3877'. [ 684.834586][T21923] netlink: Conntrack attr has 4 unknown bytes [ 684.834625][T21923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.116262][T21912] netlink: 'syz.3.3874': attribute type 1 has an invalid length. [ 685.357739][T21941] FAULT_INJECTION: forcing a failure. [ 685.357739][T21941] name failslab, interval 1, probability 0, space 0, times 0 [ 685.357775][T21941] CPU: 1 UID: 0 PID: 21941 Comm: syz.2.3882 Not tainted syzkaller #0 PREEMPT(full) [ 685.357798][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 685.357810][T21941] Call Trace: [ 685.357818][T21941] [ 685.357826][T21941] dump_stack_lvl+0xe8/0x150 [ 685.357860][T21941] should_fail_ex+0x410/0x560 [ 685.357889][T21941] should_failslab+0xa8/0x100 [ 685.357915][T21941] __kmalloc_cache_node_noprof+0xaa/0x620 [ 685.357938][T21941] ? __get_vm_area_node+0x155/0x2f0 [ 685.357964][T21941] ? __get_vm_area_node+0x155/0x2f0 [ 685.357998][T21941] __get_vm_area_node+0x155/0x2f0 [ 685.358026][T21941] ? is_bpf_text_address+0x26/0x2b0 [ 685.358055][T21941] __vmalloc_node_range_noprof+0x343/0x1540 [ 685.358086][T21941] ? translate_table+0x193/0x1f80 [ 685.358189][T21941] ? __alloc_frozen_pages_noprof+0xa7/0x5a0 [ 685.358216][T21941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 685.358244][T21941] ? __pfx_policy_nodemask+0x10/0x10 [ 685.358284][T21941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 685.358311][T21941] ? translate_table+0x193/0x1f80 [ 685.358344][T21941] ? rcu_is_watching+0x16/0xb0 [ 685.358369][T21941] ? translate_table+0x193/0x1f80 [ 685.358391][T21941] ? rcu_is_watching+0x16/0xb0 [ 685.358416][T21941] ? translate_table+0x193/0x1f80 [ 685.358438][T21941] __kvmalloc_node_noprof+0x5a1/0x820 [ 685.358460][T21941] ? translate_table+0x193/0x1f80 [ 685.358483][T21941] ? do_ipt_set_ctl+0x962/0xe20 [ 685.358507][T21941] ? do_sock_setsockopt+0x17c/0x1b0 [ 685.358532][T21941] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 685.358555][T21941] ? do_syscall_64+0x166/0x520 [ 685.358575][T21941] ? translate_table+0x193/0x1f80 [ 685.358606][T21941] translate_table+0x193/0x1f80 [ 685.358655][T21941] ? __pfx_translate_table+0x10/0x10 [ 685.358681][T21941] ? lock_acquire+0x115/0x350 [ 685.358726][T21941] ? _copy_from_user+0x94/0xb0 [ 685.358757][T21941] do_ipt_set_ctl+0xa53/0xe20 [ 685.358799][T21941] ? rcu_is_watching+0x16/0xb0 [ 685.358824][T21941] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 685.358865][T21941] ? __mutex_unlock_slowpath+0x731/0x900 [ 685.358893][T21941] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 685.358927][T21941] nf_setsockopt+0x26f/0x290 [ 685.358959][T21941] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 685.358987][T21941] do_sock_setsockopt+0x17c/0x1b0 [ 685.359017][T21941] __x64_sys_setsockopt+0x13d/0x1b0 [ 685.359048][T21941] do_syscall_64+0x166/0x520 [ 685.359064][T21941] ? trace_irq_disable+0x3b/0x140 [ 685.359083][T21941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.359103][T21941] ? clear_bhb_loop+0x70/0xc0 [ 685.359126][T21941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.359144][T21941] RIP: 0033:0x7f406e99e199 [ 685.359162][T21941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.359178][T21941] RSP: 002b:00007f406f7a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 685.359198][T21941] RAX: ffffffffffffffda RBX: 00007f406ec26090 RCX: 00007f406e99e199 [ 685.359212][T21941] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 685.359225][T21941] RBP: 00007f406f7a3090 R08: 00000000000002d8 R09: 0000000000000000 [ 685.359237][T21941] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.359249][T21941] R13: 00007f406ec26128 R14: 00007f406ec26090 R15: 00007fff9a85f608 [ 685.359279][T21941] [ 685.387034][T21941] syz.2.3882: vmalloc error: size 8404972, align 0x200000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 685.387103][T21941] CPU: 1 UID: 0 PID: 21941 Comm: syz.2.3882 Not tainted syzkaller #0 PREEMPT(full) [ 685.387124][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 685.387136][T21941] Call Trace: [ 685.387143][T21941] [ 685.387152][T21941] dump_stack_lvl+0xe8/0x150 [ 685.387183][T21941] warn_alloc+0x24d/0x270 [ 685.387202][T21941] ? __kasan_kmalloc+0x22/0xb0 [ 685.387227][T21941] ? __pfx_warn_alloc+0x10/0x10 [ 685.387245][T21941] ? __get_vm_area_node+0x155/0x2f0 [ 685.387276][T21941] ? __get_vm_area_node+0x2a9/0x2f0 [ 685.387308][T21941] __vmalloc_node_range_noprof+0x36b/0x1540 [ 685.387344][T21941] ? __alloc_frozen_pages_noprof+0xa7/0x5a0 [ 685.387368][T21941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 685.387392][T21941] ? __pfx_policy_nodemask+0x10/0x10 [ 685.387427][T21941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 685.387452][T21941] ? translate_table+0x193/0x1f80 [ 685.387476][T21941] ? rcu_is_watching+0x16/0xb0 [ 685.387498][T21941] ? translate_table+0x193/0x1f80 [ 685.387520][T21941] ? rcu_is_watching+0x16/0xb0 [ 685.387544][T21941] ? translate_table+0x193/0x1f80 [ 685.387566][T21941] __kvmalloc_node_noprof+0x5a1/0x820 [ 685.387587][T21941] ? translate_table+0x193/0x1f80 [ 685.387608][T21941] ? do_ipt_set_ctl+0x962/0xe20 [ 685.387631][T21941] ? do_sock_setsockopt+0x17c/0x1b0 [ 685.387653][T21941] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 685.387675][T21941] ? do_syscall_64+0x166/0x520 [ 685.387692][T21941] ? translate_table+0x193/0x1f80 [ 685.387723][T21941] translate_table+0x193/0x1f80 [ 685.387773][T21941] ? __pfx_translate_table+0x10/0x10 [ 685.387796][T21941] ? lock_acquire+0x115/0x350 [ 685.387837][T21941] ? _copy_from_user+0x94/0xb0 [ 685.387866][T21941] do_ipt_set_ctl+0xa53/0xe20 [ 685.387898][T21941] ? rcu_is_watching+0x16/0xb0 [ 685.387920][T21941] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 685.387961][T21941] ? __mutex_unlock_slowpath+0x731/0x900 [ 685.387985][T21941] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 685.388018][T21941] nf_setsockopt+0x26f/0x290 [ 685.388045][T21941] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 685.388069][T21941] do_sock_setsockopt+0x17c/0x1b0 [ 685.388098][T21941] __x64_sys_setsockopt+0x13d/0x1b0 [ 685.388127][T21941] do_syscall_64+0x166/0x520 [ 685.388143][T21941] ? trace_irq_disable+0x3b/0x140 [ 685.388161][T21941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.388179][T21941] ? clear_bhb_loop+0x70/0xc0 [ 685.388201][T21941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.388219][T21941] RIP: 0033:0x7f406e99e199 [ 685.388236][T21941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.388252][T21941] RSP: 002b:00007f406f7a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 685.388271][T21941] RAX: ffffffffffffffda RBX: 00007f406ec26090 RCX: 00007f406e99e199 [ 685.388284][T21941] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 685.388295][T21941] RBP: 00007f406f7a3090 R08: 00000000000002d8 R09: 0000000000000000 [ 685.388307][T21941] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.388319][T21941] R13: 00007f406ec26128 R14: 00007f406ec26090 R15: 00007fff9a85f608 [ 685.388357][T21941] [ 685.388375][T21941] Mem-Info: [ 685.388384][T21941] active_anon:33741 inactive_anon:4390 isolated_anon:0 [ 685.388384][T21941] active_file:2 inactive_file:43749 isolated_file:0 [ 685.388384][T21941] unevictable:0 dirty:226 writeback:0 [ 685.388384][T21941] slab_reclaimable:13019 slab_unreclaimable:129763 [ 685.388384][T21941] mapped:29801 shmem:548 pagetables:1422 [ 685.388384][T21941] sec_pagetables:0 bounce:0 [ 685.388384][T21941] kernel_misc_reclaimable:0 [ 685.388384][T21941] free:1187592 free_pcp:9994 free_cma:0 [ 685.388431][T21941] Node 0 active_anon:134964kB inactive_anon:17560kB active_file:8kB inactive_file:174804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119204kB dirty:904kB writeback:0kB shmem:2192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18352kB pagetables:5524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 685.388503][T21941] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 685.388549][T21941] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 685.388601][T21941] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 685.388635][T21941] Node 0 DMA32 free:785188kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:134964kB inactive_anon:17560kB active_file:8kB inactive_file:174804kB unevictable:0kB writepending:904kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:39976kB local_pcp:20532kB free_cma:0kB [ 685.403518][T21941] lowmem_reserve[]: 0 0 0 0 0 [ 685.403567][T21941] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 685.403617][T21941] lowmem_reserve[]: 0 0 0 0 0 [ 685.403649][T21941] Node 1 Normal free:3949820kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 685.403699][T21941] lowmem_reserve[]: 0 0 0 0 0 [ 685.403729][T21941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 685.403835][T21941] Node 0 DMA32: 1733*4kB (UM) 1056*8kB (UM) 535*16kB (UME) 505*32kB (UM) 256*64kB (UM) 147*128kB (UM) 67*256kB (UME) 43*512kB (UM) 37*1024kB (UME) 21*2048kB (UME) 144*4096kB (UM) = 785188kB [ 685.403980][T21941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 685.404085][T21941] Node 1 Normal: 5*4kB (UM) 5*8kB (UM) 8*16kB (UM) 6*32kB (UM) 6*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 961*4096kB (M) = 3949820kB [ 685.404230][T21941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 685.404245][T21941] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 685.404260][T21941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 685.404274][T21941] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 685.404288][T21941] 44295 total pagecache pages [ 685.404296][T21941] 0 pages in swap cache [ 685.404302][T21941] Free swap = 124996kB [ 685.404309][T21941] Total swap = 124996kB [ 685.404317][T21941] 2097051 pages RAM [ 685.404331][T21941] 0 pages HighMem/MovableOnly [ 685.404338][T21941] 428666 pages reserved [ 685.404344][T21941] 0 pages cma reserved [ 685.896803][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.167623][T21936] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 686.731811][T21966] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 686.916160][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3887'. [ 686.947488][T21966] wg2 speed is unknown, defaulting to 1000 [ 686.965910][T21966] syzkaller0 speed is unknown, defaulting to 1000 [ 687.289665][T21995] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3890'. [ 687.380882][T21996] netlink: 'syz.0.3891': attribute type 1 has an invalid length. [ 687.529892][T21996] bond6: option mode: invalid value (8) [ 687.594578][T21996] bond6 (unregistering): Released all slaves [ 688.236506][T22031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3896'. [ 688.263580][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3896'. [ 688.417229][T22041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3898'. [ 688.484474][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3898'. [ 688.546207][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3897'. [ 688.932109][T22068] netlink: 'syz.2.3905': attribute type 6 has an invalid length. [ 689.309237][T22084] netlink: 'syz.2.3910': attribute type 2 has an invalid length. [ 689.309285][T22084] block nbd9: NBD_DISCONNECT [ 689.309318][T22084] block nbd9: Send disconnect failed -104 [ 689.309335][T22084] block nbd9: shutting down sockets [ 689.429430][T22083] can: request_module (can-proto-0) failed. [ 689.865431][T22101] __nla_validate_parse: 1 callbacks suppressed [ 689.865453][T22101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3915'. [ 690.002159][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3915'. [ 690.002184][T22104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3915'. [ 690.384755][T22104] veth13: entered allmulticast mode [ 690.543388][T22118] tc_dump_action: action bad kind [ 690.561100][T22113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.561659][T22113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3919'. [ 690.561683][T22113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3919'. [ 690.824750][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3921'. [ 690.824775][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 690.943902][T22124] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 690.972288][T22124] bond4 (unregistering): Released all slaves [ 691.014431][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 691.802378][T22165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.918755][T22162] netlink: 'syz.4.3931': attribute type 28 has an invalid length. [ 692.115507][T22169] sctp: [Deprecated]: syz.1.3933 (pid 22169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.115507][T22169] Use struct sctp_sack_info instead [ 692.275776][T22183] tc_dump_action: action bad kind [ 692.567816][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3941'. [ 692.585273][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3938'. [ 692.664551][T22201] pim6reg: entered allmulticast mode [ 692.831151][T22203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 693.225156][T22210] digital: digital_start_poll: Unknown protocol [ 693.338796][T22200] pim6reg: left allmulticast mode [ 693.667707][T22229] batman_adv: batadv0: Adding interface: dummy0 [ 693.667728][T22229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.667760][T22229] batman_adv: batadv0: Interface activated: dummy0 [ 693.838525][T22239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3949'. [ 693.889919][T22233] 0ªX¹¦Dö»: renamed from gretap0 [ 693.896568][T22233] 0ªX¹¦Dö»: entered allmulticast mode [ 694.126674][T22251] netlink: 'syz.2.3951': attribute type 1 has an invalid length. [ 694.151430][T22251] sit0: entered promiscuous mode [ 694.178354][T22251] netlink: 'syz.2.3951': attribute type 1 has an invalid length. [ 694.367313][T22255] bond4: option ad_select: invalid value (34) [ 694.370883][T22255] bond4 (unregistering): Released all slaves [ 694.857709][T22281] syzkaller1: entered promiscuous mode [ 694.857734][T22281] syzkaller1: entered allmulticast mode [ 694.953972][T22281] netlink: Conntrack attr has 4 unknown bytes [ 694.954013][T22281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.229118][T22300] netlink: 'syz.0.3964': attribute type 1 has an invalid length. [ 695.261864][T22302] __nla_validate_parse: 3 callbacks suppressed [ 695.261886][T22302] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3964'. [ 695.262034][T22304] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3964'. [ 695.383603][T22300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 696.133151][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 696.160537][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3975'. [ 696.325255][T22342] macsec1: entered promiscuous mode [ 696.327772][T22344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.397425][T22384] Bluetooth: MGMT ver 1.23 [ 697.630111][T22396] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 697.752094][T22387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.814956][T22406] netlink: 'syz.4.3995': attribute type 12 has an invalid length. [ 697.980486][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3997'. [ 698.183793][T22425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3998'. [ 698.240233][T22427] syzkaller0: entered promiscuous mode [ 698.240258][T22427] syzkaller0: entered allmulticast mode [ 698.685665][T22439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4003'. [ 698.701465][T22439] vlan2: entered promiscuous mode [ 698.701548][T22439] syz_tun: entered promiscuous mode [ 698.734242][T22382] infiniband syz0: set active [ 698.734315][T22382] infiniband syz0: added bond_slave_1 [ 698.742118][T22382] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 698.760064][T22382] infiniband syz0: Couldn't open port 1 [ 698.760454][T22382] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 698.760488][T22382] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 698.760526][T22382] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 698.876180][T22382] RDS/IB: syz0: added [ 698.876816][T22382] smc: adding ib device syz0 with port count 1 [ 698.879613][T22382] smc: ib device syz0 port 1 has no pnetid [ 699.337479][ T13] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 699.343710][T22461] ip_tables: iptables: counters copy to user failed while replacing table [ 701.290238][T22483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4012'. [ 701.830839][T22494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4014'. [ 701.858354][T22494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 701.873918][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4014'. [ 701.875020][T22497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 702.091507][T22451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.622989][T22511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4019'. [ 702.624359][T22516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4019'. [ 702.730959][T22521] netlink: 'syz.1.4021': attribute type 2 has an invalid length. [ 703.520605][T22533] batman_adv: batadv0: Adding interface: syzkaller0 [ 703.520841][T22533] batman_adv: batadv0: Interface activated: syzkaller0 [ 703.545459][T22536] ip_tables: iptables: counters copy to user failed while replacing table [ 703.581551][T22526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4023'. [ 703.581579][T22526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4023'. [ 703.581596][T22526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4023'. [ 704.195636][T22559] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 704.264692][T22559] bond4: entered promiscuous mode [ 704.265187][T22559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 704.284674][T22559] tipc: Enabled bearer , priority 0 [ 704.463170][T22567] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 704.671719][T22581] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 705.165000][T22591] ip_tables: iptables: counters copy to user failed while replacing table [ 705.448510][T22606] ip_tables: iptables: counters copy to user failed while replacing table [ 705.725235][T22613] xt_limit: Overflow, try lower: 0/0 [ 706.373025][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 706.599733][T22613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.602188][T22622] __nla_validate_parse: 1 callbacks suppressed [ 706.602209][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4047'. [ 707.139095][T22646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4054'. [ 707.273485][T22649] ip6t_REJECT: ECHOREPLY is not supported [ 707.436340][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'. [ 707.438475][T22657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4059'. [ 707.552050][T22664] netlink: 'syz.0.4060': attribute type 10 has an invalid length. [ 707.577592][T22664] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.605368][T22664] bond0: (slave team0): Enslaving as an active interface with an up link [ 707.826458][T22676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4063'. [ 708.016140][T22681] netlink: 'syz.4.4065': attribute type 7 has an invalid length. [ 708.016173][T22681] netlink: 'syz.4.4065': attribute type 8 has an invalid length. [ 708.090812][T22686] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20000 [ 708.119905][T22688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4068'. [ 708.156588][T22688] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.231709][T22688] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.286979][T22691] Bluetooth: MGMT ver 1.23 [ 708.321525][T22688] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.398128][T22695] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 708.434667][T22688] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.604040][T22699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4073'. [ 709.011296][T22700] syzkaller1: entered promiscuous mode [ 709.011321][T22700] syzkaller1: entered allmulticast mode [ 709.025769][ T7738] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.035126][ T7738] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.283089][ T101] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.283250][ T101] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.380770][T22726] netlink: 'syz.1.4079': attribute type 1 has an invalid length. [ 709.567430][T22740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4079'. [ 709.575617][ C0] bridge0: port 3(veth0_virt_wifi) entered learning state [ 709.577192][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 709.577390][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 709.790910][T22733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 709.806591][T22733] bond4: (slave bond5): making interface the new active one [ 709.811471][T22733] bond4: (slave bond5): Enslaving as an active interface with an up link [ 709.845803][T22726] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 709.857090][T22740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 710.011417][T22753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4087'. [ 710.016564][T22749] syzkaller0: entered promiscuous mode [ 710.016584][T22749] syzkaller0: entered allmulticast mode [ 710.157302][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4089'. [ 710.414408][T22760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 710.441049][T22772] netlink: NAT attribute has 4 unknown bytes [ 710.441086][T22772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.442367][T22772] netlink: 'syz.2.4091': attribute type 1 has an invalid length. [ 710.457108][T22761] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 710.464023][ T101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.466596][T19097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.466640][T19097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.466677][T19097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.507184][T22774] xt_NETMAP: bad rangesize 37. [ 710.671903][T22766] batman_adv: batadv0: Interface activated: dummy0 [ 710.689635][T22766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.810633][T22766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.835327][T22766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.871069][T22766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 710.871099][T22766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 710.934920][T22766] veth1_vlan: left promiscuous mode [ 710.939335][T22766] veth0_vlan: left promiscuous mode [ 710.957800][T22766] veth0_vlan: entered promiscuous mode [ 710.969875][T22766] veth1_vlan: entered promiscuous mode [ 711.025744][T22766] veth0_macvtap: left promiscuous mode [ 711.028543][T22766] veth0_macvtap: entered promiscuous mode [ 711.060972][T22766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.081252][T22766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 711.094834][T22766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.102276][T22766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.250406][T22766] ip6erspan0: left promiscuous mode [ 711.276989][T22766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.298968][T22766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.326532][T22766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 711.363629][T22766] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 711.458870][T20898] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.458997][T20898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.481110][T20898] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.481259][T20898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.503393][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 711.509823][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 712.055094][T19100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.055211][T19100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.055248][T19100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.055284][T19100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.236139][T22815] __nla_validate_parse: 1 callbacks suppressed [ 712.236164][T22815] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4103'. [ 712.236181][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 712.375535][T22823] netlink: 'syz.3.4103': attribute type 11 has an invalid length. [ 712.456969][T22823] block nbd0: NBD_DISCONNECT [ 712.457009][T22823] block nbd0: Send disconnect failed -32 [ 712.457029][T22823] block nbd0: Send disconnect failed -32 [ 712.457047][T22823] block nbd0: shutting down sockets [ 712.689798][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 712.959442][T22842] syz.1.4110: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 712.959519][T22842] CPU: 1 UID: 0 PID: 22842 Comm: syz.1.4110 Not tainted syzkaller #0 PREEMPT(full) [ 712.959544][T22842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 712.959557][T22842] Call Trace: [ 712.959565][T22842] [ 712.959663][T22842] dump_stack_lvl+0xe8/0x150 [ 712.959711][T22842] warn_alloc+0x24d/0x270 [ 712.959738][T22842] ? kasan_save_track+0x4f/0x80 [ 712.959772][T22842] ? kasan_save_track+0x3e/0x80 [ 712.959799][T22842] ? __pfx_warn_alloc+0x10/0x10 [ 712.959818][T22842] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 712.959853][T22842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.959903][T22842] __vmalloc_node_range_noprof+0x127/0x1540 [ 712.959975][T22842] ? rcu_is_watching+0x16/0xb0 [ 712.960011][T22842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 712.960043][T22842] ? __kmalloc_cache_noprof+0x321/0x600 [ 712.960066][T22842] ? __kmalloc_cache_noprof+0x14d/0x600 [ 712.960087][T22842] ? xskq_create+0x56/0x220 [ 712.960125][T22842] xskq_create+0x148/0x220 [ 712.960156][T22842] ? xsk_init_queue+0x8a/0xe0 [ 712.960186][T22842] xsk_init_queue+0x8a/0xe0 [ 712.960220][T22842] xsk_setsockopt+0x52a/0x960 [ 712.960251][T22842] ? __pfx_xsk_setsockopt+0x10/0x10 [ 712.960281][T22842] ? __pfx_aa_sk_perm+0x10/0x10 [ 712.960334][T22842] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 712.960366][T22842] ? __pfx_xsk_setsockopt+0x10/0x10 [ 712.960399][T22842] do_sock_setsockopt+0x17c/0x1b0 [ 712.960436][T22842] __x64_sys_setsockopt+0x13d/0x1b0 [ 712.960472][T22842] do_syscall_64+0x166/0x520 [ 712.960491][T22842] ? trace_irq_disable+0x3b/0x140 [ 712.960512][T22842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.960531][T22842] ? clear_bhb_loop+0x70/0xc0 [ 712.960557][T22842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.960578][T22842] RIP: 0033:0x7f12e479e199 [ 712.960598][T22842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.960617][T22842] RSP: 002b:00007f12e55fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 712.960640][T22842] RAX: ffffffffffffffda RBX: 00007f12e4a25fa0 RCX: 00007f12e479e199 [ 712.960655][T22842] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 712.960669][T22842] RBP: 00007f12e48358e0 R08: 0000000000000004 R09: 0000000000000000 [ 712.960682][T22842] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.960696][T22842] R13: 00007f12e4a26038 R14: 00007f12e4a25fa0 R15: 00007ffc66872218 [ 712.960732][T22842] [ 712.973861][T22842] Mem-Info: [ 712.973879][T22842] active_anon:33588 inactive_anon:3643 isolated_anon:0 [ 712.973879][T22842] active_file:2 inactive_file:43761 isolated_file:0 [ 712.973879][T22842] unevictable:0 dirty:185 writeback:0 [ 712.973879][T22842] slab_reclaimable:13129 slab_unreclaimable:133518 [ 712.973879][T22842] mapped:29805 shmem:570 pagetables:1405 [ 712.973879][T22842] sec_pagetables:0 bounce:0 [ 712.973879][T22842] kernel_misc_reclaimable:0 [ 712.973879][T22842] free:1164364 free_pcp:27899 free_cma:0 [ 712.973930][T22842] Node 0 active_anon:134352kB inactive_anon:14572kB active_file:8kB inactive_file:174852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119220kB dirty:740kB writeback:0kB shmem:2280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18332kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 712.973982][T22842] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 712.974028][T22842] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 712.974083][T22842] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 712.974149][T22842] Node 0 DMA32 free:692780kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:134352kB inactive_anon:14572kB active_file:8kB inactive_file:174852kB unevictable:0kB writepending:740kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:111096kB local_pcp:34904kB free_cma:0kB [ 712.974203][T22842] lowmem_reserve[]: 0 0 0 0 0 [ 712.974235][T22842] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 712.974285][T22842] lowmem_reserve[]: 0 0 0 0 0 [ 712.974318][T22842] Node 1 Normal free:3949316kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 712.974372][T22842] lowmem_reserve[]: 0 0 0 0 0 [ 712.974406][T22842] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 712.974518][T22842] Node 0 DMA32: 320*4kB (UME) 1075*8kB (UME) 754*16kB (UME) 196*32kB (UME) 300*64kB (UME) 50*128kB (UME) 28*256kB (UME) 16*512kB (UME) 3*1024kB (M) 15*2048kB (UME) 144*4096kB (UM) = 692792kB [ 712.974688][T22842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 712.974782][T22842] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 3*64kB (UM) 6*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 961*4096kB (M) = 3949316kB [ 712.974930][T22842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.974945][T22842] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 712.974960][T22842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.974975][T22842] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 712.974990][T22842] 44329 total pagecache pages [ 712.974998][T22842] 0 pages in swap cache [ 712.975005][T22842] Free swap = 124996kB [ 712.975012][T22842] Total swap = 124996kB [ 712.975019][T22842] 2097051 pages RAM [ 712.975026][T22842] 0 pages HighMem/MovableOnly [ 712.975033][T22842] 428666 pages reserved [ 712.975039][T22842] 0 pages cma reserved [ 713.007282][T22850] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4111'. [ 714.314073][T22882] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.530470][T22882] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.610111][T22882] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.689121][T22882] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.706645][T22897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4128'. [ 715.018911][T22906] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4130'. [ 715.052942][T19098] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.053039][T19098] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.053111][T19098] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.063021][T20898] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.828571][T22973] netlink: 'syz.2.4152': attribute type 1 has an invalid length. [ 716.894838][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 716.980654][T22973] bond5: entered promiscuous mode [ 716.988738][T22973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 717.395295][T22997] netlink: 'syz.0.4159': attribute type 1 has an invalid length. [ 717.580194][T23000] macvtap0: entered allmulticast mode [ 717.641965][T23007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4163'. [ 717.663038][T23011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4163'. [ 717.668431][T22997] macvtap1: entered allmulticast mode [ 717.727847][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 717.873436][T23000] bond7: (slave bridge2): making interface the new active one [ 717.901296][T23000] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 718.887562][T23039] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4172'. [ 719.224865][T23057] ip_tables: iptables: counters copy to user failed while replacing table [ 719.621078][T23057] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.635568][T23057] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.664556][T23057] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 719.726590][T23074] pim6reg1: entered promiscuous mode [ 719.726616][T23074] pim6reg1: entered allmulticast mode [ 720.042209][T23092] ip6gre1: entered allmulticast mode [ 720.049618][T19098] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.284397][T23116] netlink: 'syz.4.4193': attribute type 1 has an invalid length. [ 722.237795][T23076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.629502][T23134] ksmbd: Unknown IPC event: 8, ignore. [ 722.646265][T23134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4195'. [ 723.474141][ T4938] block nbd0: Receive control failed (result -32) [ 723.767844][T23180] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.812762][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 723.885495][T23185] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 723.885651][T23185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 723.920693][T23176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4203'. [ 723.996765][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4206'. [ 724.850880][T23211] vxcan1: entered promiscuous mode [ 725.069586][T23218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4214'. [ 725.298302][T23223] netlink: 'syz.4.4217': attribute type 16 has an invalid length. [ 725.420125][T23233] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4219'. [ 726.439521][T23250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4223'. [ 726.883710][T23278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4232'. [ 726.883952][T23277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4232'. [ 726.942213][T23280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4232'. [ 726.950266][T23278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.000189][T23277] bond2 (unregistering): Released all slaves [ 727.157477][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'. [ 727.274342][T23292] bond8: option lacp_active: invalid value (5) [ 727.277071][T23292] bond8 (unregistering): Released all slaves [ 727.404130][T23295] tipc: New replicast peer: 127.0.0.1 [ 727.404453][T23295] tipc: Enabled bearer , priority 10 [ 727.488371][T23300] tun0: tun_chr_ioctl cmd 1074025675 [ 727.488398][T23300] tun0: persist enabled [ 727.506659][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.507217][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.507712][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.510080][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.511410][T23300] tun0: tun_chr_ioctl cmd 1074025678 [ 727.511432][T23300] tun0: group set to 0 [ 727.513349][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.513898][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.518947][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.519439][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.519867][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.520300][T23299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.552286][T23301] tun0: tun_chr_ioctl cmd 1074025675 [ 727.552309][T23301] tun0: persist disabled [ 727.948450][T23312] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 727.948480][T23312] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 727.993566][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 728.046824][T23322] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4244'. [ 728.216655][T23324] block nbd1: Unsupported socket: should be TCP or UNIX. [ 729.545070][T23369] netlink: 'syz.0.4255': attribute type 1 has an invalid length. [ 729.861487][T23385] sctp: [Deprecated]: syz.4.4258 (pid 23385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 729.861487][T23385] Use struct sctp_sack_info instead [ 730.025881][T23388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4260'. [ 731.155183][T23421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4268'. [ 731.164671][T23422] tipc: Resetting bearer [ 731.164979][T23422] tipc: Resetting bearer [ 731.332980][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 731.469688][T23422] ip6erspan0: entered allmulticast mode [ 731.491860][T23422] netlink: 'syz.2.4269': attribute type 16 has an invalid length. [ 731.491890][T23422] netlink: 'syz.2.4269': attribute type 17 has an invalid length. [ 731.629404][T23422] sit0: left promiscuous mode [ 731.829069][T23422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 731.829962][T23422] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 731.861345][T23422] bridge1: left promiscuous mode [ 731.877602][T23422] veth3: left allmulticast mode [ 731.882103][T23422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 731.917211][T23422] syzkaller0: left promiscuous mode [ 731.917241][T23422] syzkaller0: left allmulticast mode [ 731.917762][T23422] tipc: Resetting bearer [ 731.918490][T23422] bond4: left promiscuous mode [ 731.920928][T23422] 8021q: adding VLAN 0 to HW filter on device eth0 [ 731.959775][T23422] 8021q: adding VLAN 0 to HW filter on device eth1 [ 731.972180][T23422] 8021q: adding VLAN 0 to HW filter on device eth2 [ 731.996306][T23422] 8021q: adding VLAN 0 to HW filter on device eth3 [ 731.998946][T23422] bond5: left promiscuous mode [ 732.019183][T23422] ip6erspan0: left allmulticast mode [ 732.179683][ T7764] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.179740][ T7764] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.193205][ T7764] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.247967][T23441] veth0_to_bridge: entered promiscuous mode [ 732.248369][T23441] macvtap1: entered allmulticast mode [ 732.248386][T23441] veth0_to_bridge: entered allmulticast mode [ 732.280900][T23441] veth0_to_bridge: left allmulticast mode [ 732.280935][T23441] veth0_to_bridge: left promiscuous mode [ 732.410875][T23443] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode [ 732.410906][T23443] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode [ 732.439367][T19100] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.778377][T23453] net_ratelimit: 23 callbacks suppressed [ 732.778402][T23453] TC_ACT_REPEAT abuse ? [ 733.102013][T23471] netlink: 'syz.2.4282': attribute type 7 has an invalid length. [ 733.102041][T23471] netlink: 'syz.2.4282': attribute type 5 has an invalid length. [ 733.102056][T23471] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4282'. [ 733.281821][T23464] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 733.285361][T23464] syzkaller1: entered promiscuous mode [ 733.285388][T23464] syzkaller1: entered allmulticast mode [ 733.438708][T23479] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4284'. [ 733.554519][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4288'. [ 733.554549][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4288'. [ 733.564116][T23485] netlink: Failed to add helper -22 [ 733.564183][T23485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.503917][ T101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 746.053962][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.337863][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.576475][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 774.212867][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 775.493244][ T101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.053926][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 807.493614][T19087] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 808.775468][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.373087][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.495228][ T101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 857.242740][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4301'. [ 857.667047][T23564] x_tables: duplicate underflow at hook 1 [ 857.759911][T23572] lo: entered allmulticast mode [ 858.125226][T23571] lo: left allmulticast mode [ 858.255924][T23588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4315'. [ 858.292338][T23588] netlink: 'syz.3.4315': attribute type 1 has an invalid length. [ 858.361354][T23595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4315'. [ 858.364270][T23588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 858.736731][T23610] netlink: 'syz.4.4323': attribute type 1 has an invalid length. [ 858.870953][T23605] syzkaller0: entered promiscuous mode [ 858.870982][T23605] syzkaller0: entered allmulticast mode [ 859.041814][T23610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 859.069489][T23612] bond5: (slave gretap0): making interface the new active one [ 859.071535][T23612] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 860.999804][T23645] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4332'. [ 864.480659][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4334'. [ 864.578367][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.595946][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.614901][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.615181][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.615465][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.616165][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.616441][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.616697][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.618039][T23663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4336'. [ 864.701858][T23671] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 864.991059][T23675] netlink: 'syz.0.4339': attribute type 1 has an invalid length. [ 864.991541][T23679] netlink: 'syz.0.4339': attribute type 1 has an invalid length. [ 865.638238][T23711] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 865.931405][T23724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 866.357342][T23734] sctp: [Deprecated]: syz.1.4355 (pid 23734) Use of int in max_burst socket option. [ 866.357342][T23734] Use struct sctp_assoc_value instead [ 867.011917][T23746] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 867.368357][T23753] ip6gre2: entered promiscuous mode [ 867.368384][T23753] ip6gre2: entered allmulticast mode [ 867.374952][T19087] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 867.375194][T19087] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 867.403524][ T5731] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 867.493904][ T5731] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 867.765220][ T30] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 868.464073][T23786] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 868.614178][T23793] netlink: 'syz.4.4375': attribute type 2 has an invalid length. [ 868.615739][T23793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.731505][T23801] gre0: entered promiscuous mode [ 868.731533][T23801] gre0: entered allmulticast mode [ 869.998937][T23849] netlink: 'syz.1.4389': attribute type 21 has an invalid length. [ 870.205463][T23858] __nla_validate_parse: 70 callbacks suppressed [ 870.205488][T23858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4390'. [ 870.232133][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.350871][T23860] vlan2: entered promiscuous mode [ 870.350896][T23860] bridge0: entered promiscuous mode [ 870.370720][T23860] tipc: Enabled bearer , priority 0 [ 870.561039][T23867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4390'. [ 870.750674][T23873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4397'. [ 871.012877][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 871.499653][ T101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 871.528007][ T6880] tipc: Node number set to 3034191774 [ 871.570467][T23893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4405'. [ 871.638365][T23889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4403'. [ 871.728497][T23891] netlink: 3784 bytes leftover after parsing attributes in process `syz.0.4404'. [ 871.772005][T23897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4406'. [ 871.808980][T23897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4406'. [ 871.841819][T23897] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 871.851039][T23897] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 871.891767][T23901] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4408'. [ 872.314554][T23913] netlink: 'syz.2.4414': attribute type 10 has an invalid length. [ 872.314583][T23913] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4414'. [ 872.343353][T23913] bond1: option mode: unable to set because the bond device is up [ 872.381597][T23913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.394531][T23913] bond1: (slave bond0): Enslaving as an active interface with an up link [ 872.448935][T23913] bond1 (unregistering): (slave bond0): Releasing backup interface [ 872.466091][T23913] bond1 (unregistering): Released all slaves [ 872.694813][T23929] bridge: RTM_NEWNEIGH with invalid ether address [ 872.871407][T23933] netlink: 'syz.3.4420': attribute type 32 has an invalid length. [ 872.971146][T23933] dvmrp0: entered allmulticast mode [ 872.978328][T23935] dvmrp0: left allmulticast mode [ 873.016243][T23941] netlink: 'syz.3.4420': attribute type 32 has an invalid length. [ 873.087308][T23933] dvmrp0: entered allmulticast mode [ 873.087877][T23946] dvmrp0: left allmulticast mode [ 873.132332][T23938] xt_hl: Unknown Hop Limit match mode: 4 [ 873.276257][T23952] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 873.276289][T23952] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 873.458570][T23956] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 874.274280][T23975] xt_cluster: node mask cannot exceed total number of nodes [ 874.660528][T23992] netlink: 'syz.4.4436': attribute type 4 has an invalid length. [ 874.671890][T23992] netlink: 'syz.4.4436': attribute type 4 has an invalid length. [ 875.461372][T24022] __nla_validate_parse: 5 callbacks suppressed [ 875.461397][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'. [ 875.461503][T24022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4445'. [ 875.461610][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'. [ 875.600945][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.601343][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.601681][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.602038][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.621388][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.621766][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.622116][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.639091][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.639510][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.639881][T24015] ip_tables: iptables: counters copy to user failed while replacing table [ 875.956985][T24042] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 876.335404][T24042] bond3 (unregistering): Released all slaves [ 877.504136][T24075] nbd1: detected capacity change from 0 to 63 [ 877.630193][ T4938] block nbd1: Receive control failed (result -104) [ 877.631095][T24068] syzkaller0: entered promiscuous mode [ 877.631119][T24068] syzkaller0: entered allmulticast mode [ 878.317518][T24101] netlink: 976 bytes leftover after parsing attributes in process `syz.2.4460'. [ 878.475477][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4462'. [ 878.532721][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 878.687868][T24105] wg2 speed is unknown, defaulting to 1000 [ 878.690278][T24105] syzkaller0 speed is unknown, defaulting to 1000 [ 879.124092][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4467'. [ 879.124138][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4467'. [ 879.270850][T24113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4463'. [ 879.408669][T24138] ip6tnl1: entered promiscuous mode [ 879.409345][T24137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4470'. [ 879.479795][T24137] [ 879.482718][T24137] ====================================================== [ 879.490600][T24137] WARNING: possible circular locking dependency detected [ 879.502749][T24137] syzkaller #0 Not tainted [ 879.508026][T24137] ------------------------------------------------------ [ 879.517114][T24137] syz.1.4470/24137 is trying to acquire lock: [ 879.527743][T24137] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 879.539738][T24137] [ 879.539738][T24137] but task is already holding lock: [ 879.547333][T24137] ffff88804c24d530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 879.558439][T24137] [ 879.558439][T24137] which lock already depends on the new lock. [ 879.558439][T24137] [ 879.571067][T24137] [ 879.571067][T24137] the existing dependency chain (in reverse order) is: [ 879.580803][T24137] [ 879.580803][T24137] -> #8 (&idev->mc_lock){+.+.}-{4:4}: [ 879.588778][T24137] __mutex_lock+0x19d/0x1550 [ 879.594118][T24137] __ipv6_dev_mc_inc+0x4e/0xaf0 [ 879.600146][T24137] addrconf_join_solict+0x104/0x190 [ 879.607390][T24137] __ipv6_dev_ac_inc+0x8fd/0xb90 [ 879.614435][T24137] ipv6_sock_ac_join+0x665/0x820 [ 879.620132][T24137] do_ipv6_setsockopt+0x1f56/0x2960 [ 879.626750][T24137] ipv6_setsockopt+0x59/0x170 [ 879.633610][T24137] do_sock_setsockopt+0x17c/0x1b0 [ 879.641464][T24137] __x64_sys_setsockopt+0x13d/0x1b0 [ 879.647948][T24137] do_syscall_64+0x166/0x520 [ 879.654933][T24137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.661661][T24137] [ 879.661661][T24137] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 879.669961][T24137] lock_sock_nested+0x41/0x100 [ 879.676504][T24137] tls_sw_sendmsg+0x189/0x2c00 [ 879.682936][T24137] sock_sendmsg_nosec+0x90/0x190 [ 879.689740][T24137] sock_sendmsg+0x1ca/0x2d0 [ 879.696600][T24137] splice_to_socket+0xb5e/0x12a0 [ 879.702861][T24137] direct_splice_actor+0x101/0x160 [ 879.708981][T24137] splice_direct_to_actor+0x57b/0xcb0 [ 879.715250][T24137] do_splice_direct+0x195/0x290 [ 879.723114][T24137] do_sendfile+0x52e/0x7c0 [ 879.730392][T24137] __se_sys_sendfile64+0x144/0x1a0 [ 879.736499][T24137] do_syscall_64+0x166/0x520 [ 879.742139][T24137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.749222][T24137] [ 879.749222][T24137] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 879.758140][T24137] __mutex_lock+0x19d/0x1550 [ 879.764512][T24137] tls_sw_sendmsg+0x14e/0x2c00 [ 879.772218][T24137] sock_sendmsg_nosec+0x90/0x190 [ 879.777887][T24137] sock_sendmsg+0x1ca/0x2d0 [ 879.783321][T24137] __sock_xmit+0x245/0x4f0 [ 879.788817][T24137] nbd_disconnect+0x3ad/0x560 [ 879.795029][T24137] nbd_disconnect_and_put+0x32/0x280 [ 879.801545][T24137] nbd_genl_disconnect+0x4af/0x590 [ 879.807655][T24137] genl_family_rcv_msg_doit+0x233/0x340 [ 879.814292][T24137] genl_rcv_msg+0x614/0x7a0 [ 879.820069][T24137] netlink_rcv_skb+0x226/0x4a0 [ 879.828866][T24137] genl_rcv+0x28/0x40 [ 879.834114][T24137] netlink_unicast+0x7bd/0x940 [ 879.839702][T24137] netlink_sendmsg+0x813/0xb40 [ 879.847070][T24137] sock_sendmsg_nosec+0x14e/0x190 [ 879.860879][T24137] ____sys_sendmsg+0x54e/0x850 [ 879.867970][T24137] ___sys_sendmsg+0x2a5/0x360 [ 879.873420][T24137] __x64_sys_sendmsg+0x1b1/0x290 [ 879.879441][T24137] do_syscall_64+0x166/0x520 [ 879.885292][T24137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.892606][T24137] [ 879.892606][T24137] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 879.900885][T24137] __mutex_lock+0x19d/0x1550 [ 879.906494][T24137] nbd_queue_rq+0x373/0xff0 [ 879.912254][T24137] blk_mq_dispatch_rq_list+0x499/0x1990 [ 879.920093][T24137] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 879.928526][T24137] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 879.936314][T24137] blk_mq_run_work_fn+0x16c/0x300 [ 879.942539][T24137] process_scheduled_works+0xc3d/0x1630 [ 879.953953][T24137] worker_thread+0xa47/0xfb0 [ 879.959280][T24137] kthread+0x38b/0x480 [ 879.964096][T24137] ret_from_fork+0x514/0xb70 [ 879.969701][T24137] ret_from_fork_asm+0x1a/0x30 [ 879.976416][T24137] [ 879.976416][T24137] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 879.983837][T24137] __mutex_lock+0x19d/0x1550 [ 879.990268][T24137] nbd_queue_rq+0xc1/0xff0 [ 879.996400][T24137] blk_mq_dispatch_rq_list+0x499/0x1990 [ 880.002597][T24137] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 880.011005][T24137] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 880.018372][T24137] blk_mq_run_work_fn+0x16c/0x300 [ 880.025960][T24137] process_scheduled_works+0xc3d/0x1630 [ 880.032945][T24137] worker_thread+0xa47/0xfb0 [ 880.038706][T24137] kthread+0x38b/0x480 [ 880.043852][T24137] ret_from_fork+0x514/0xb70 [ 880.050295][T24137] ret_from_fork_asm+0x1a/0x30 [ 880.056037][T24137] [ 880.056037][T24137] -> #3 (set->srcu){.+.+}-{0:0}: [ 880.070252][T24137] __synchronize_srcu+0xc9/0x2f0 [ 880.076800][T24137] elevator_switch+0x1e8/0x7b0 [ 880.083056][T24137] elevator_change+0x2fa/0x480 [ 880.089232][T24137] elevator_set_default+0x375/0x440 [ 880.096477][T24137] blk_register_queue+0x3f3/0x4e0 [ 880.103656][T24137] __add_disk+0x6b8/0xdb0 [ 880.108940][T24137] add_disk_fwnode+0x100/0x3a0 [ 880.115551][T24137] nbd_dev_add+0x733/0xb60 [ 880.121415][T24137] nbd_init+0x168/0x1f0 [ 880.127264][T24137] do_one_initcall+0x250/0x870 [ 880.133039][T24137] do_initcall_level+0x10a/0x1a0 [ 880.138742][T24137] do_initcalls+0x59/0xa0 [ 880.144259][T24137] kernel_init_freeable+0x29d/0x3e0 [ 880.150563][T24137] kernel_init+0x22/0x1d0 [ 880.156023][T24137] ret_from_fork+0x514/0xb70 [ 880.162214][T24137] ret_from_fork_asm+0x1a/0x30 [ 880.167881][T24137] [ 880.167881][T24137] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 880.176347][T24137] __mutex_lock+0x19d/0x1550 [ 880.182102][T24137] elevator_change+0x1af/0x480 [ 880.190282][T24137] elevator_set_none+0xb5/0x140 [ 880.197100][T24137] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 880.204015][T24137] nbd_start_device+0x189/0xb30 [ 880.209429][T24137] nbd_genl_connect+0x167d/0x1cd0 [ 880.215222][T24137] genl_family_rcv_msg_doit+0x233/0x340 [ 880.222138][T24137] genl_rcv_msg+0x614/0x7a0 [ 880.227712][T24137] netlink_rcv_skb+0x226/0x4a0 [ 880.233157][T24137] genl_rcv+0x28/0x40 [ 880.237796][T24137] netlink_unicast+0x7bd/0x940 [ 880.243751][T24137] netlink_sendmsg+0x813/0xb40 [ 880.250475][T24137] sock_sendmsg_nosec+0x14e/0x190 [ 880.256447][T24137] ____sys_sendmsg+0x54e/0x850 [ 880.262417][T24137] ___sys_sendmsg+0x2a5/0x360 [ 880.269333][T24137] __x64_sys_sendmsg+0x1b1/0x290 [ 880.275098][T24137] do_syscall_64+0x166/0x520 [ 880.280863][T24137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.288646][T24137] [ 880.288646][T24137] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 880.299257][T24137] blk_alloc_queue+0x544/0x690 [ 880.305956][T24137] __blk_mq_alloc_disk+0x194/0x390 [ 880.312238][T24137] nbd_dev_add+0x494/0xb60 [ 880.317218][T24137] nbd_init+0x168/0x1f0 [ 880.322420][T24137] do_one_initcall+0x250/0x870 [ 880.328365][T24137] do_initcall_level+0x10a/0x1a0 [ 880.334037][T24137] do_initcalls+0x59/0xa0 [ 880.340928][T24137] kernel_init_freeable+0x29d/0x3e0 [ 880.346885][T24137] kernel_init+0x22/0x1d0 [ 880.351948][T24137] ret_from_fork+0x514/0xb70 [ 880.357105][T24137] ret_from_fork_asm+0x1a/0x30 [ 880.362521][T24137] [ 880.362521][T24137] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 880.370020][T24137] __lock_acquire+0x164c/0x2de0 [ 880.376777][T24137] lock_acquire+0x115/0x350 [ 880.382820][T24137] fs_reclaim_acquire+0x71/0x100 [ 880.389973][T24137] __kmalloc_cache_noprof+0x61/0x600 [ 880.396427][T24137] __ipv6_dev_mc_inc+0x447/0xaf0 [ 880.401950][T24137] pndisc_constructor+0xe0/0x150 [ 880.407439][T24137] pneigh_create+0x253/0x4e0 [ 880.412639][T24137] neigh_add+0x77a/0x1090 [ 880.417980][T24137] rtnetlink_rcv_msg+0x7b9/0xc00 [ 880.424904][T24137] netlink_rcv_skb+0x226/0x4a0 [ 880.431307][T24137] netlink_unicast+0x7bd/0x940 [ 880.439054][T24137] netlink_sendmsg+0x813/0xb40 [ 880.445375][T24137] sock_sendmsg_nosec+0x14e/0x190 [ 880.453608][T24137] ____sys_sendmsg+0x54e/0x850 [ 880.459427][T24137] ___sys_sendmsg+0x2a5/0x360 [ 880.466801][T24137] __x64_sys_sendmsg+0x1b1/0x290 [ 880.477274][T24137] do_syscall_64+0x166/0x520 [ 880.482864][T24137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.490199][T24137] [ 880.490199][T24137] other info that might help us debug this: [ 880.490199][T24137] [ 880.503365][T24137] Chain exists of: [ 880.503365][T24137] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 880.503365][T24137] [ 880.519156][T24137] Possible unsafe locking scenario: [ 880.519156][T24137] [ 880.532604][T24137] CPU0 CPU1 [ 880.538136][T24137] ---- ---- [ 880.544981][T24137] lock(&idev->mc_lock); [ 880.550138][T24137] lock(sk_lock-AF_INET6); [ 880.557380][T24137] lock(&idev->mc_lock); [ 880.564965][T24137] lock(fs_reclaim); [ 880.569268][T24137] [ 880.569268][T24137] *** DEADLOCK *** [ 880.569268][T24137] [ 880.577586][T24137] locks held by syz.1.4470/24137: 3, last CPU#0: [ 880.584581][T24137] #0: ffffffff90254da0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 880.594132][T24137] #1: ffff88803b9ab3f8 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x49/0x4e0 [ 880.603769][T24137] #2: ffff88804c24d530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 880.616485][T24137] [ 880.616485][T24137] stack backtrace: [ 880.622842][T24137] CPU: 0 UID: 0 PID: 24137 Comm: syz.1.4470 Not tainted syzkaller #0 PREEMPT(full) [ 880.633913][T24137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 880.645013][T24137] Call Trace: [ 880.648699][T24137] [ 880.651657][T24137] dump_stack_lvl+0xe8/0x150 [ 880.656553][T24137] print_circular_bug+0x2e2/0x300 [ 880.662346][T24137] check_noncircular+0x12f/0x150 [ 880.667528][T24137] __lock_acquire+0x164c/0x2de0 [ 880.672593][T24137] ? preempt_schedule_common+0x7f/0xd0 [ 880.678830][T24137] ? preempt_schedule_thunk+0x16/0x40 [ 880.684931][T24137] ? __mutex_lock+0x321/0x1550 [ 880.691120][T24137] lock_acquire+0x115/0x350 [ 880.696490][T24137] ? __kmalloc_cache_noprof+0x61/0x600 [ 880.702161][T24137] ? __pfx___mutex_lock+0x10/0x10 [ 880.707300][T24137] fs_reclaim_acquire+0x71/0x100 [ 880.712538][T24137] ? __kmalloc_cache_noprof+0x61/0x600 [ 880.719141][T24137] __kmalloc_cache_noprof+0x61/0x600 [ 880.725009][T24137] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 880.730496][T24137] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 880.736217][T24137] __ipv6_dev_mc_inc+0x447/0xaf0 [ 880.741385][T24137] pndisc_constructor+0xe0/0x150 [ 880.746432][T24137] ? __pfx_pndisc_constructor+0x10/0x10 [ 880.752471][T24137] ? __kmalloc_noprof+0x1ab/0x720 [ 880.757757][T24137] ? pneigh_create+0x12c/0x4e0 [ 880.763543][T24137] ? pneigh_create+0x148/0x4e0 [ 880.769311][T24137] pneigh_create+0x253/0x4e0 [ 880.774713][T24137] neigh_add+0x77a/0x1090 [ 880.779403][T24137] ? __pfx_neigh_add+0x10/0x10 [ 880.784567][T24137] ? __pfx_neigh_add+0x10/0x10 [ 880.790159][T24137] rtnetlink_rcv_msg+0x7b9/0xc00 [ 880.795517][T24137] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 880.801975][T24137] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 880.807731][T24137] ? __copy_skb_header+0xa3/0x4a0 [ 880.813313][T24137] netlink_rcv_skb+0x226/0x4a0 [ 880.818725][T24137] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 880.824569][T24137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 880.832104][T24137] ? netlink_deliver_tap+0x2e/0x1b0 [ 880.837884][T24137] ? netlink_deliver_tap+0x2e/0x1b0 [ 880.843750][T24137] netlink_unicast+0x7bd/0x940 [ 880.848739][T24137] netlink_sendmsg+0x813/0xb40 [ 880.853888][T24137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.859411][T24137] ? apparmor_socket_sendmsg+0x98/0x360 [ 880.866069][T24137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.872479][T24137] sock_sendmsg_nosec+0x14e/0x190 [ 880.878604][T24137] ____sys_sendmsg+0x54e/0x850 [ 880.884238][T24137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 880.889752][T24137] ? import_iovec+0x73/0xa0 [ 880.894395][T24137] ___sys_sendmsg+0x2a5/0x360 [ 880.899198][T24137] ? __lock_acquire+0x747/0x2de0 [ 880.904762][T24137] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.910526][T24137] ? futex_wait+0x2a2/0x390 [ 880.915468][T24137] ? __fget_files+0x2a/0x420 [ 880.920182][T24137] ? __fget_files+0x3a2/0x420 [ 880.924908][T24137] __x64_sys_sendmsg+0x1b1/0x290 [ 880.930140][T24137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 880.937079][T24137] do_syscall_64+0x166/0x520 [ 880.942266][T24137] ? trace_irq_disable+0x3b/0x140 [ 880.948110][T24137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.956335][T24137] ? clear_bhb_loop+0x70/0xc0 [ 880.961754][T24137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.968305][T24137] RIP: 0033:0x7f12e479e199 [ 880.973599][T24137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.995260][T24137] RSP: 002b:00007f12e55fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.004687][T24137] RAX: ffffffffffffffda RBX: 00007f12e4a25fa0 RCX: 00007f12e479e199 [ 881.012793][T24137] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000004 [ 881.021412][T24137] RBP: 00007f12e48358e0 R08: 0000000000000000 R09: 0000000000000000 [ 881.030759][T24137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.039908][T24137] R13: 00007f12e4a26038 R14: 00007f12e4a25fa0 R15: 00007ffc66872218 [ 881.048711][T24137] [ 881.247972][T24142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4470'. [ 881.300992][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4470'. [ 881.451185][T24149] syzkaller1: entered promiscuous mode [ 881.451213][T24149] syzkaller1: entered allmulticast mode