last executing test programs: 8.173977925s ago: executing program 2 (id=6476): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r3, 0xffffffffffffc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @cgroup_sysctl=0x12}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x2b, 0xa, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 7.289287693s ago: executing program 2 (id=6482): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:11 1', 0x1b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4) read(r4, &(0x7f0000000080)=""/155, 0x9b) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000300)='syzkaller1\x00', 0xb) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="000008000100000000003d0000004500003400000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84000600907800040003000008d58838068b91aed9ca2f190b00b5d69596d753ead324c5f692381b88fe2adde4bb5a5d11eee797b45924dbd8549fd92e25680e"], 0x42) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@deltclass={0xa4, 0x29, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0x0, 0xfff2}, {0xf, 0x6}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x7fff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe}]}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}]}, 0xa4}}, 0x0) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) 7.210119018s ago: executing program 0 (id=6483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0009000000b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r3 = socket$netlink(0x10, 0x3, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000dfff00000000000085000000ae000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff0000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f0001"], 0x90}}, 0x4) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x29, 0x803, 0xfffffff9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.574008792s ago: executing program 4 (id=6487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x800, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x800, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x100, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x2, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x5, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x46b, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x3, 0x0, 0x8, 0x8, 0x53, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0xfffffffe, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x5, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x2, 0x8, 0xf, 0x1, 0x8, 0xa, 0x3, 0x100, 0x2, 0x1, 0x40, 0x8, 0x9, 0x401, 0x80, 0xfffffff9, 0x4, 0x9, 0x7, 0x9273, 0xbf1f, 0x9, 0xef0, 0xd, 0x9, 0x9, 0x9, 0x4, 0x40, 0x6, 0x9, 0x8, 0x6, 0x4, 0x7, 0x4, 0x1, 0x81, 0x5, 0x2, 0x4, 0x7107, 0x3d3, 0x7fff, 0x3, 0x7fffffff, 0x1, 0x1, 0x0, 0x8, 0x7d77, 0x3, 0xa6b7, 0x5, 0xfffffff8, 0x0, 0x148a00, 0xfffff000, 0x2, 0x200, 0xfffffa66, 0x9, 0x5, 0xd1, 0x32d3, 0x2, 0x3ff, 0x7fff, 0xe, 0x0, 0x2, 0x2, 0x7ff, 0xff, 0x2, 0x1, 0x3, 0x85ba, 0x8, 0xff, 0x79, 0x8001, 0x7, 0x3, 0x9, 0xf, 0x4, 0xa, 0xffff, 0x3, 0x8, 0x5, 0x0, 0xe, 0xb1, 0x2, 0x6, 0xff, 0x7, 0x3ff8, 0x5, 0x752, 0xc9, 0x6, 0x1, 0x9, 0x5, 0x370e, 0xfffffffc, 0x0, 0xc, 0x18, 0x6, 0x1eb6, 0x6, 0x9ce9def, 0xf, 0x2, 0x8, 0x1, 0x241, 0xfffffffb, 0x7, 0x1, 0x10, 0x2b4, 0x3ff, 0x8, 0x3, 0x54, 0x6, 0xf107, 0xaf, 0x1, 0xa, 0x1, 0x0, 0x3, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x9, 0xeaa, 0x7, 0x6, 0x0, 0x1, 0x4, 0x23, 0x0, 0x9, 0x544, 0x4, 0x7f, 0x5, 0x7, 0xffffffff, 0xffff, 0xffffff86, 0x9db7, 0x110c00, 0x0, 0x1, 0x1, 0x5, 0x7ff, 0x80, 0x7ff, 0x9, 0xacf, 0xff, 0xffff, 0x8, 0x6, 0xffe00000, 0x9, 0x2, 0xcaa, 0xedd, 0x8, 0x7fffffff, 0x1, 0x400, 0x6, 0x3, 0x0, 0x101, 0xa24, 0x3, 0x9, 0x8, 0x5, 0xfffffffe, 0x2, 0x26c, 0x72, 0x200, 0x800, 0xffffffff, 0x2, 0x1, 0x7fffffff, 0x7fffffff, 0x7115bd5f, 0xd15, 0x2, 0x1ff, 0x8001, 0x1, 0x4a16fb1d, 0x1, 0x6, 0x10, 0x4, 0x9, 0x2, 0xcd3, 0x4, 0x1442, 0x10001, 0x6, 0x6, 0x8, 0x7fff, 0x4, 0x401, 0x9, 0x5, 0xb, 0x0, 0x2, 0xd, 0x2, 0x10000, 0x8, 0x3ff, 0x6, 0x200, 0xe03e, 0x6, 0x5, 0x1, 0xfffffeff, 0x6, 0xe9, 0x77d, 0x2, 0x2, 0x1, 0x3, 0x0, 0x9, 0x8]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'dvmrp0\x00', 0x0}) sendmsg$inet6(r8, &(0x7f0000000940)={&(0x7f00000001c0)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000440)="7b26c41821cb10211de094b7a76f814e0d31350ba1f2e67a08036b7d2b539b78048e43122d75d8d06166d1a7351e55f7c05995ce38616bb99913f187d2cc399fb1af03cafb78457395069e48a3607a3f3f6120bda36a94c8237bee865d397e8f5829dad977c4e568bcb9d42037e596247aaa7300768243e8cca3d06198b7fe42bb909ab223e891a97e9c34033cf7ffa7c32af884e58be38c8e530d3b15288b10c3dd7025ad0ec6c0a58dd197", 0xac}, {&(0x7f0000000500)="8b81bc3dd659e803085f04fbc7ffc315523efd69c7f536827e01f752eee61a33e9f5be75e285", 0x26}, {&(0x7f0000000540)="e3d750c7f84a14379938d55e15f0531c71809273d5b4d1d195f623a137cde5463057308317d46f01adc8ec41e01b8e36ca5e0d75ba0bf60bceadbbe954a39dfeadbb5809b8373ef1a212049d3e5dddd8f3bb6353f35191b5713f78f73cfa467a7ab4efbbf85b65f273770ddf564711beb4f40dc3f5ed08db80b4646d7e360fcfb61e77d193b0d2f972a5c6c88f37586634356235335462c85927cf118801931e3fe3591f01cbc546c16e829c255d6443cbecf621cbf5310af13600e6", 0xbc}], 0x3, &(0x7f0000000740)=[@hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r9}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts_2292={{0xe8, 0x29, 0x36, {0x4, 0x19, '\x00', [@ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x40, {0x0, 0xe, 0x2, 0x5d7, [0x800, 0x0, 0x0, 0x2, 0x6, 0x3, 0x18]}}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x3, 0x6f, "9e1ffe8a61479a843667d0ce830465e93c5653375d79e9ca8b8256eee0de60223d694eee948e53f5b96a969a840244cc85398e582caf4ad51e4115fee02ba7b168bb75b16069a0b28d89cecc66579c3afd8760d2f584108b8f3e57c285a0563dbbfe9017fe57bc73c8ee0595e2baf5"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xd8}}, @dstopts={{0x30, 0x29, 0x37, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}], 0x1f0}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x696}]}}}]}, 0x44}}, 0x40000c0) 4.526367447s ago: executing program 0 (id=6490): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f00000042c0)=[{{&(0x7f00000001c0)={0xa, 0xfffe, 0x8, @empty, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000340)=[@rthdr={{0x18, 0x29, 0x39, {0x84, 0x0, 0x1, 0x4}}}], 0x18}}], 0x1, 0x4000880) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7ff, 0x4) 4.341311525s ago: executing program 0 (id=6492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x0) getsockopt$netlink(r8, 0x10e, 0x7, 0xfffffffffffffffe, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r7, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x6, 0x6000, 0x8d8, 0xb1, 0xa, 0x8}, &(0x7f0000000680)=0x9c) write(r3, &(0x7f0000000300)="060000000300000000", 0x9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.302407858s ago: executing program 2 (id=6493): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xffffff7f}}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 4.010737387s ago: executing program 3 (id=6496): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xffffffff, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r5], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4084) 3.902271995s ago: executing program 4 (id=6497): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000020000001d44000000000000620a20ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x14, r4, 0x1, 0x100, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4c083) 3.623029719s ago: executing program 3 (id=6498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303, 0x38}, "0baee79180b6e078", "73b59657269ef929ee540a8a0a86c5d0", '\x00', "404574dd3a00"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0)="c3", 0x4000, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3.23293234s ago: executing program 3 (id=6500): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.056999892s ago: executing program 4 (id=6501): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000100400080000000", @ANYRES32=0x1], 0x48) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) 2.970030453s ago: executing program 1 (id=6502): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0xc0999000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x8, 0x4, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000100)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0xc0999000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x8, 0x4, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) (async) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000100)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) (async) accept$nfc_llcp(r1, 0x0, 0x0) (async) 2.965838458s ago: executing program 0 (id=6503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) close(r6) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x884) 2.782477141s ago: executing program 4 (id=6504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) ioctl$int_in(r0, 0x5452, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) (async) socket(0x2, 0x3, 0xff) (async) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) (async) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) r7 = socket(0x1e, 0x4, 0x0) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r7], 0x14) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) (async) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000670c000000000000ffffff7f9586fdfffcffffff8500000074000000850000007c000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000950800000000000049295b67a6e227a8117625f52365264b1cf084cdeee7e700b83cadbf633b3172535b8d0f7bca0d000000000000cb2d86e8da61e6d446fcd710f5115c6316abc3ba0048118d5254a7dc27242c55dd08add57a1c05"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x1e, &(0x7f0000000140)=""/30, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xf, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000200)=[{0x1, 0x4, 0x4, 0xa}, {0x3, 0x5, 0x2, 0x2}, {0x1, 0x5, 0x7, 0x8}, {0x4, 0x4, 0x7, 0x5}, {0x1, 0x5, 0x9, 0x8}, {0x4, 0x2, 0xb, 0xa}], 0x10, 0x3}, 0x94) 2.734840377s ago: executing program 2 (id=6505): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0xa, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x2000c810}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000000000000400000000080001"], 0x20}}, 0x4000000) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000b40)={r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x2, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x7fffffff, 0xc265, 0xe3df, 0xc265, 0x2, 0x800, 0x101, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x6, 0x8918, 0x0, 0x3, 0x4, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x107a, 0x5, 0x5, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x80000001, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x0, 0x4, 0x0, 0x2, 0x8, 0x79, 0x0, 0x3ff8000, 0x3, 0x57, 0x8, 0x7fff, 0x4f, 0x0, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0x100, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x103, 0xd4a, 0xe5ad, 0x0, 0x7ff, 0x7, 0x9, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0xffffffff, 0x5, 0x0, 0x6, 0xa0, 0x7, 0x6, 0x100, 0x100, 0x200, 0x0, 0x5, 0xffff, 0x5, 0x1, 0x2, 0x3, 0x6335, 0x2, 0x6, 0x200, 0x3, 0x48, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x4, 0x3, 0x80000001, 0x7fffffff, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff8d, 0xfff, 0x3, 0x9, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x5, 0x3, 0x6, 0x0, 0x6, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x6, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x6, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x100007, 0x40, 0x3, 0x400, 0x8, 0x2, 0x401, 0x20000006, 0x9982, 0x6, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x3fc, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x4, 0x200, 0x100000c4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x4000006}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) 2.691778866s ago: executing program 3 (id=6506): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000080)='-\'..K\x00', 0x0, &(0x7f00000000c0)={@align, {0x7, 0x3, 0xeee}}, 0xfffffffb, &(0x7f0000000100), &(0x7f0000000140)=0x6}, {[0x2, 0x1, 0x8001, 0x8]}, 0x82aa, 0x8b, &(0x7f0000000340)=""/139}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) (async) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@ax25={0x3, @default, 0x5}}}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000800000085000000a50000009500000000000000e67c010e0beef065e5bc34798f621a002068b9f6042f61cfe4960a311caa1ad8775ebc0575ab2f1c6866c39ee20a951af37c1da8c5f035cca274d6a84f669a8a3d1fd41aa324ca3111b7549dad778009875f5a72477e006b98aecf74551830ef4ec1f23e26678dbd7a704d2a2d7b63b92eb35d2236be49f41dc46196519aea65bc8ac4c0"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 1.339209488s ago: executing program 2 (id=6507): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x0, 0x4, 0x2, 0x5, 0x50}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r0, &(0x7f0000000800)="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", 0xb90, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xa) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x8}}, {{0xa, 0x4e08, 0xffff8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000540)={0x4, {{0xa, 0x4e20, 0x38, @mcast1, 0xfffff511}}, {{0xa, 0x4e21, 0xcd7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2e}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000440)=""/53}, 0x20) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e38, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.142055199s ago: executing program 3 (id=6508): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000740400000000000000000000850000004100000085000000a00000009500000000000000093d93a89b0d5300f7d8abf610696bba2613b94a178ba4ba6e41b102c66fe4a76227a014e6f0ff24dc1e41178d227acc91e37241ff36da6c2905141beb0aa7bbdfb87bacc5bbf58d96a92eb59372d01d30ea19917f18a29f33fd47f06db7ac166e5cd1e1132d84c3494febe5c752aa2a7481cc1671a211c9c4b8a7186bea83e1aa5a57ed85545ccc43bd9ed6fad98c9ba364c7e1ecd852339f2a866f419eb6e9165914f95d5d60e1e45538fec3f19d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@empty, 0x3, 0x8, 0x4e24, 0x10, 0x2, 0x180}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0x9, 0x6, 0x9}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb", 0x1b}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {0x0}], 0x6}}], 0x1, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0x4, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xda, &(0x7f00000005c0)=""/218}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) recvmmsg(r0, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.141228907s ago: executing program 4 (id=6509): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x680, 0x458, 0x8, 0x7f02ae, 0x458, 0x200, 0x5b0, 0x2e8, 0x2e8, 0x5b0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x430, 0x458, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x2, 0x2, 0x6c, 0x8, 0xd22, 0x1, 0x31e, 0xd2, 0x78, 0x40}, {0x1}}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x80000000, 0x0, 0x0, [0x7, 0xff04, 0x5, 0x101, 0x3, 0xcba, 0xece7, 0x4, 0x9, 0x3, 0x3, 0xa22f, 0x5, 0x8, 0xff, 0x800], 0xd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x9bf, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2, 0x40, 0x4, 0x7, 0x7f, 0x1, 0x9f, 0xc0, 0x72, 0x6, 0x5, 0x31, 0x10, 0x5, 0xb5, 0x0, [0x2, 0x2]}}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b116800000000008510000002000000850000001a00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@deltaction={0x4c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x20048844) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000000)=0x8, 0x4) (async, rerun: 32) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) (async, rerun: 32) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1128000, 0x1000, 0x4}, 0x20) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x10) 1.085442305s ago: executing program 1 (id=6510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0x9, 0xd37}]}, @enum64={0x3, 0x4, 0x0, 0x13, 0x1, 0x1, [{0x0, 0x7, 0x9}, {0xd, 0x45d, 0x680}, {0xb, 0x6, 0xfffff68b}, {0x2, 0x5, 0x4}]}]}}, 0x0, 0x72, 0x0, 0x0, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x6, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x0, 0x4, 0x2, 0x3, 0x2, 0x3}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000000c0)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x7fff, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x5, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x1, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x61fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003600)={0x94, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x2}}, {0x14, 0x4, @private2}}}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40800}, 0x4000800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x5}], 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x35a73, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmmsg(r4, &(0x7f0000003500)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x0, {0xa, 0x4e22, 0x9c, @empty, 0x1}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000100)="77a02c59ce30c967aaa35342c10ce63f96191480ca39ef09b473928f1e537f4b413fb082c242e8f64d6e6050cadf383bb9857a138cebffa40f002d1292fdf2771fb90ec95c5fbc02aeeaaa644c8d2cb9f85947ede8bc09501fb3ca45f9260c3a7388b532d414f0da47dd8e60f93de53263183b9fb71fafb77f7d8273d6b7", 0x7e}, {&(0x7f0000000180)="c4c3810793f883b28d542eee8b41829ec4dbc646b94be0dc8657869ab839347a0cf429c59e7ac3cb4abc3d864cafb531b7b3ff3999a14eb765229a8caf0202b49c135aaf98e18eeff84158934d0f11829870b489ca04528f80724dabed5d49df5039c949f1e9d652e8b4f5290a92ade06cf66815525576f89dd1877b144f98b7b22a8bc2f164f3767b0891ff0d2188e700011d6dbdce8b5e47ccf7ba422b19bd1584a8ea5b9947562b725d1e2a396123a01b7489be5b8bcc9cfe69a773cc085a234a6b7c45f48518f13836db1838c6b21b3218ec2a33543a7fe4a345f4d365547def2aacc3d4", 0xe6}, {&(0x7f0000000280)="c5d36d85fede14f005ab4960a813615a88971f32a963a52f0ac47871c3b2c5043b1b141a0ce376c76054248d70b5dd122cafb0d052006b4b2060e4b238a058a75924f8b1bf99502b856dfb92e01c5983c5f29c29a42590", 0x57}, {&(0x7f0000000300)="2f2b16209d2c2c4fce7031390e7d3adbe76d4d1745c3706294ee3e0ef7fdf3288910e1ca4630ad6e349e4bcd074ef3f00fad7f5ce4f91e94d1c98e328158bfc034c22cacbc2d77de15dea50362feb9230577057a761f0416f06580a17317e130db6bd27ee2f3ec0f5f47c82dcde1786293188e04376e1f42bc92d441c6da10ddc8981fc689e5fa03715591235c5a8b6929e438e677ca3b7726f497b066de740148b691def88ec2a5b02c33697f69fdba649bcd88", 0xb4}, {&(0x7f00000003c0)="e326edd1401ec472c8ed3156f681c2ab5377576d63e91f4396af7715d3b3f317cd1807912c9d8591bcb3e0901e9f8777793ddc8a4b59b338081ded02585422ed524b05eb3222065e5a81eb6d28f9e7e3be2f815b083dcb442cd4dfe3969e1fa002062eda17fdd1ff416fe0f0ffa499f25eedd671ddd3d2c33ae1d4f0be519eb648276ed3c5dafc77b98e89704aa6a037a4e1807fc0e93558f959d511e411dec7038e18e15a9f755968bbe605f573b7789863ff760339e3cc6afae0bd61ff544097fcbc91a77e06aac2537deee0ecec64484c4f3fb4aebd4326301e0f18645b6c7617c0ed48d5", 0xe6}, {&(0x7f0000000980)="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", 0x1000}], 0x6, &(0x7f0000001a00)=[{0xd8, 0x113, 0x8, "9e4a116e699c31bd8666ed623d56e07d6d61e315abc399f09605723f0724083c2a55122ce57d11a3da991a78694e4b2ab0f998632f2f41d6854a2efd0c7fa4fd7b09a0d12a7ef82029ce56b153dcf4e05f0fffa4a6964655989e33b8bb31fc8a29b3b7db3dd780e819a1d21eba7d973e673a834cc330ed6c1269c60ce34dd5ca06262c1894cbb39c069b5c63889dc022125169ca13728055a422765270e24332c29a1258a81b265c53cdbe1a46bdef85ef09453f5eaf5194f671a0c1bac92fe1654ffa4b6e9d"}, {0x48, 0x104, 0x4, "e90daaada3d2b1c48b5ddfa44092abf55515cc0a39d2f02c02db9959d7c00f98a789008d322daac6698e0fe4ceab512566f1"}, {0x18, 0x10f, 0x973f, "bfdd"}, {0x88, 0x0, 0x7f, "b728e30945a4afdc2cdd391d37a2c588a83a7def443db0a42935794ed2f309b2233cfd8bcf9fea70fc0f3bb06bb1edeac835a56dadc89dff2c432503295bdf88fab44147c879dd1595f497871bb7120cde02161a3b800fc8aea4c9c0b05572c551006d6ccfeb1cd876a57e974f87938e1964a1016f16"}, {0x68, 0x29, 0x7fffffff, "ccd251bd3389593cb0884ff55daa00e90197ed781861661f251a955388d6a68d7a5d78348d4f5646b63c28dda15a8e3dec3d12a8a6f1a258de5814d504e676b32701d04b55e8e7c19e5ccdf1b152f76eff9cb8c100d94f"}, {0xc8, 0x116, 0x1, "2bada911e13abdd291b04b8a359258ef0ef13aeff5b1a5f1c06d5d3f3f565d8598b01a1726bdbd6bad14dfb8a600fcd92b0ed84a3da7f03c24140d42a4120c2becde960339985634d451da21f18990ce18ebc5f3b16afc613f3ce8f4bfb06680b7dc1764cebdb2aa136566b2bf056815245c743d77062bfa09c722dc1a490957294620fd216b883de33919a4beef02fa06d0ff1b5eaefbf0ac955c06378c946e42d29a95191d3f5094c9ff845378ab66cb76f85379dff1"}], 0x2f0}}, {{&(0x7f0000001d00)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)="3950d120150dc8fea93c647abb68af7c490c2b762595631856a7735a8da9f43bbb9d72c509880490cce4bed53d8be414ae3dd3f484ba0912f460dc2636a3b5f4e5a6a0a81131ddfd6b0c596276302e72536b14b917f8a8e95960d70e9fe1def7b3231415713f6b304553ecc8eb491a4b515471639b5511a63647ab3a6aaacbd57eeccd523db9962b7910c3adff02e544b920867317ef81f07a80024c3bb9636e699b4c69c17043917ad991bed3b1e6e9e282dc69e8e8715bc90b5069543f4831ac8cab8555c6f99b66f7c52656e5d70fd743ccc7faed8dcaa5bb6f186de9ac5b5d8246cf6d31021c0a7099c15d434379efa9877f07baf2", 0xf7}], 0x1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x1538}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)="a5e18ee58f5d53c53e0f15af2a8219a6505c85c2d004e207aa7d897736b099a6ed41e46c1945d27a7b3a5560718ee0fb24ac0149dd08ada514c46a4e0d4b1ababdf07d5ef2d8", 0x46}, {&(0x7f0000003480)="fe73d17a90d3eabb03f7f1593d692cf1", 0x10}], 0x2}}], 0x3, 0x0) 758.274531ms ago: executing program 0 (id=6511): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="7b0b0080ffff000071115700000000008510000002000000850000007600000095000000000000009500a505000000009bf05fd3afbdff712d4e9ee5199a679c7341e526d961aa3d219c2f32dae6fb6a117602bc5a1c9a9844ed3e67ab"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @remote}, {0x20000010304, @local}, 0x2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x2, 0x0) r3 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082b01fec400000000000000000000000000bbfe8000000000000000000000000000aaff"], 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8f2}], 0x1, 0x62, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) unshare(0x2020600) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x29, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400004de83617f52d00", @ANYRES16=0x0, @ANYBLOB="000025bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48081) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xa}, 0x4b) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600894f0000180102"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005500e50128bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="2000ff00", @ANYRES32=r6, @ANYBLOB="01010300e000000000000000000000000000000108000000"], 0x38}}, 0x404a024) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) 693.564756ms ago: executing program 1 (id=6512): syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6015fe0800482f00fc020000000000000000000000000000ff020000000000000000000000000001242088a8000000000000080000030003000086dd88a888be080000001000"], 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000b80)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRES32=0x0, @ANYRES16=r0, @ANYRESDEC=r0], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x2764, @remote, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 594.285418ms ago: executing program 1 (id=6513): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, 0x3}, @rc={0x1f, @any, 0x36}, @sco, 0x3fe0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000080)='veth1_vlan\x00', 0x1, 0x3, 0x80}) r1 = socket(0x40000000015, 0x5, 0x0) unshare(0x2a020400) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x24, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffe3, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 443.904092ms ago: executing program 1 (id=6514): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c1) (async) close(0xffffffffffffffff) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x40, &(0x7f0000000100)={@_ha_fsid={[0x10001, 0x3483]}, {0xfffb, 0x80, 0x1, 0x2}}, 0x200, &(0x7f0000000140), &(0x7f0000000180)=0x7}) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000005640)={0x0, 0x0, &(0x7f0000005600)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x4040) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 346.431358ms ago: executing program 0 (id=6515): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000007f0fc77db84fc27d1064f7", @ANYRES32=r2, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', r1, 0x10, 0x40, 0x8, 0x3, {{0x10, 0x4, 0x3, 0x1a, 0x40, 0x65, 0x0, 0x7, 0x2d, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @noop, @noop, @rr={0x7, 0xf, 0x91, [@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xdf, 0x0, 0x1, [0xe, 0x1, 0x200]}, @end]}}}}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x7) socketpair(0x1e, 0x3, 0xc330, &(0x7f0000000140)={0xffffffffffffffff}) connect(r9, &(0x7f0000000480)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r8, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000200)={0x8}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0xc8, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x98, 0x2, [@TCA_CGROUP_EMATCHES={0x94, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x84, 0x3, 0x0, 0x0, {{0x7f, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x3b, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="66b7554722d75899f4d2", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ea2672", @TCF_META_TYPE_VAR="813be91ba6776de57a20", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="36c1bb2f1431f4ab87", @TCF_META_TYPE_VAR="de27c52bf7", @TCF_META_TYPE_VAR="dd86318a4cdc"]}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='a', @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b4e77feb3b278ddc3a", @TCF_META_TYPE_VAR="ce024380"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="5c125d02", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4, 0x2}, {0x9, 0x3, 0x2}}}]}}]}]}]}}]}, 0xc8}}, 0x40010) syz_emit_ethernet(0xca7, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xc99, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc85, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000640)=[0x0], 0x0, 0x25a, 0x1ffffffffffffddb, 0x1}}, 0x40) 307.495597ms ago: executing program 2 (id=6516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x2}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 64) write$tun(r4, &(0x7f0000000a40)={@val={0x0, 0xf7}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "c91068", 0x54, 0x2f, 0x1, @empty, @mcast2, {[@fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x68}, @srh={0x1d, 0x0, 0x4, 0x0, 0x8, 0x60, 0x6}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0x5, 0x1, 0x1, 0x0, 0x2, 0x8}, 0x1, {0x48a}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x2, {0x9, 0x5, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}, 0x8e) (rerun: 64) 230.969645ms ago: executing program 1 (id=6517): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r1, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 30.610696ms ago: executing program 3 (id=6518): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5223a, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002340)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19140109000000000000000000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async) pipe(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r7, 0x0, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000200)=0x10001, 0x12) (async) sendfile(r7, r6, 0x0, 0xf03a0005) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 0s ago: executing program 4 (id=6519): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8000}, &(0x7f0000000080)=0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x4, 0xfffffffb, 0x56, @private1, @mcast2, 0x7, 0x20, 0x0, 0x4}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a80)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)="67911bfc3403f203f2cf87ae618702c2f8fc851de929c2a424c76806fe06910b825611ef3c20e6ced5c291d0830cc8bbd8db0cf01e677935a1be8fe44b2596e99e9646280ff91642d4c3a7a63e34794dcd09504b1312f899294c59f4eba33a20435e21d52c1b50a0316d8a7479c96009fdde9a10c52a7b3200adff306f9be8d656c979cc919f943c1ba2670e9ee85336d1607133eaf603361fa98e8e5890c411c4f1d8465ea2110ec2ed3717785015e77b66baff9b56be498715314859a2bba2d89b4eb42e92b463b61da65d1610f74c64f0a8b37e54", 0xd6}, {&(0x7f0000000500)="b043e0fa5b58d26ec4e6fff0557f5dc029ec29f0dfb6620bf0e4a1c164668c70a499113d56bc8c26c9ec9557932299474b0de951f4c6c61611746c3d3fc51fccd8b49bf9cc1146e3fa02df28fbfd37e0c19c73c3c722562cf78fed25425bb45f155952043d83d58be81ae05016ceea73bf3e10ac87d69988f2185e", 0x7b}, {&(0x7f0000000780)="0105bea1a5bf891217426ee4bb8f544468dd2c0b6c2af49bfe57dee030a026fae6125853cecbd82733f24ea4dcba205d470a39e852", 0x35}, {&(0x7f00000007c0)="e1a405d368b68a44563a08939e3e01cac3559977dd0e603ee86e054acdba82a8d6b464892ec46e9b9b5d84305b627d585c57fac56f72a675955f97a1047a19eb04e7752b149ba7320158ac2b2bc513afec9a1d2c7d8393e2a7b980e12a568c62ffacaa9f2004fe40729a710c94aafe503a60dcaa93cff254ef07facf1bd2a3f11800f83c801b2129dff7fc46942842eaeb1a73ff71e9811b45ebab1cfafeded6c9cfd4bb9e8895b352348acbdd10933be041665ff45cf8a04feb67bf75a616e3bdb126aefe0f93357cebe6f3489d045d3d2aa3ef4c613263", 0xd8}, {&(0x7f00000008c0)="6c032dc24c0b13c78ccee551f9683046320972bcff1e5468ce1c5087f4d0a9a428d6db9394000ffe3ec3443455ff06991e3377e7057777eb2de261cccc191ae2aed2d2b84f97cca5e48bef07f96834c8f93571f5a2ec35d63ab649150fcc08e8f9aa24c286563af20b8b9aedd876435ec7119f63ef41ce6142bcb330e34ea4bfbbc9131949804d0b51167386", 0x8c}], 0x5}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x3, @mcast1, 0x7fffffff}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="45ea8e3cdc04394328bd8d46c9b34fad6b12d084dffd9d595ca4208f4edbc3267dc5455c96f52e8c165556b1458eb6d4acf407f3747b21b4bcbcc6f547d026072159c38411f48478fccc63a209879dbc0591312d7dc7f9cf443d63cb744e9f0f2d8c27523000842766cf3e082f0516a7b4c9e388da2acdb9f5d095122b15e355f35fac3b53e502f72c135e6920e829de8eda121ec9be44aacaba4e808d6990496d4397cdd1d7bc886e5ce4cf9206b16074df3370d7953f3424290cf3f9cb1506dbdc44fb22245bb6c4824cf679a4dfcec5abf835e2af2bb1182c7744", 0xdc}], 0x1, &(0x7f0000000c00)=[@tclass={{0x14, 0x29, 0x43, 0x903}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x4, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x6a85b8c6}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0x0, [0xa, 0xbf0, 0x7, 0x8730, 0x80000000]}}]}}}, @hoplimit={{0x14}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)="10a8ed1517d758e2a2b7555ef02ed6d9aa347a8de688b65eba0d0156237bbad713aeb28c0cc39f4aa0bd7ba202c41dd726bb1025790d8df887274ee5e74e10f9afa76c3ddc1c7e2545a608d804c0b52f4a7d35bd65f5aaca880c75539274d8b2ecfffb27baa4789d42f71c1a469628ed220f8f0aafb18d47ce188baa3059ddaba0a6be9e5d44bfb530a8efe35a927f46c5d99ca11dc749a7e0282b486299325762d014a4c74c319158", 0xa9}, {&(0x7f0000000d40)="77e2a212f9", 0x5}], 0x2, &(0x7f0000000f00)=[@hoplimit={{0x14, 0x29, 0x34, 0xd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x0, 0x1e, '\x00', [@pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x5e, 0x5, [0x1, 0x10001, 0x6, 0x2, 0x400, 0xc]}}, @generic={0x10, 0x9d, "47f2dc38bad55a35bd1eb430daa93d5d261113fd40de46e4e22c99efb637da5f6f0e9b1ea0d9a271ffc1a466508bb7c54fec5dd8e6872ef2b02f2fa7ab9a0ec2d36a321816752aa90dcbd63f0b3d626b6932d37bf7ec968ed96ca9373df2b1de19b166907e53457a999632767011efac33a04501e400a4b7039cba1f508d56037ff6caab9a8dda49408769d2f2d7be2285ab8ff439d8f5f9014749294e"}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r0}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @tclass={{0x14, 0x29, 0x43, 0x100}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}, r1}}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x84, 0x9, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xd}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3e, 0x9, [0xb79, 0x5]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0xf7, 0x40, [0x7]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x250}}, {{&(0x7f0000001180)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000001380)=[{&(0x7f00000011c0)="3f2fb4dba1aaf036fc11ddb5af3191c7", 0x10}, {&(0x7f0000001200)="bc18a14627b146e5b505697991ffc5df9e1f5cbb3c0ddc7dcb", 0x19}, {&(0x7f0000001240)="8cb5217b670e6e6732022befb22975826e8131422e1c3ea30f0565070ed9eb3909a97965782ddd0522befbbab66d8504dd576b659b459a9ed5eaa87a1bd911909f14ae2353f1d45415432245a688853ff520a116eeb82bf4d92fbe9dee6ef88407834213b2a8faaf2cc815ba31f197631521597341a7dd079a6d920d71fb218b71daf1e63b14df305ff2cca448a86c723907ee26", 0x94}, {&(0x7f0000001300)="2c945b7f769e509ee7b627697f7b4bd749156a1839bef1ffa1ce158d2a474830960c4d35467682d8d7fa6ce0c26d9fa956278aaa7ab39804826f103e38dacfc3909467242981f43078414ea19b1d0d7526e82293a0b6225869cfb90feb326e7f32c57af7c07f4b", 0x67}], 0x4}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000013c0)="3f655da03db19481681163e5190c25fa5ed8", 0x12}, {&(0x7f0000001400)="dd743039924774464054c8d9ac32dce8fa5e0955231488bd70e73d364819f776ff287243ff89a201501224148a8b600c1fd7d18c5537a76aca2f4aec0b4cd4d59c6f0f885048d3da09fe9f6120417686ab1842629e055c4f342649d7a18e6385e450e9d2fdda2ab4706d7c87657bab9da5c80b08983efe1860849290f833962624cffec28b7b724ff19c21b1e72141ed4b9e95bce60686c9d841f26c184f38a7d5d9d2568bf642efd5f8b6a1580ad1e9ed3e42c42fdd62e66b3dc57bcdb0c1", 0xbf}, {&(0x7f00000014c0)="d0acdb79fbf83775c3cdaa4ab6d549561338d0aea462a3db5f69e201f83dff5806693a361b9a914980aadaf4c49af1b9f4f1f51809e6bfa2bd908067d928401a695b2c86935a2070b672dcc913813406cf6970a386a4fa1bf572cae22feec5b00e3be7ea7394d62d00de7d6fcb3e5cb42ddcbc908867e1ef3280d0c7993c8aeb2e1521e2ecc9e6323db9533d4f00c54e98840abfc9041d381bde042f46db8eb9f12e9ba7afd5b5ad5326dcc34d5e409abe6ed7db3195190c", 0xb8}, {&(0x7f0000001580)="3a665417c0a11d983853ad3cb37667e50e76b96cca578402809c1366df554da5c151ff8a39", 0x25}, {&(0x7f00000015c0)="ed8ac9dd8ae9ed1c45174d6206ca69baa1189b62169f94a9f37764f75f396450a1b754cda751a4ab2da38de099613d1e1581ea1ea69e2bf93ea6364ce8a7b22087", 0x41}, {&(0x7f0000001640)="1f2637b3f86b1077bd49050b084ca8c5d991b141e741fae1673bcdc9f085e9a82d4167e6a7f284a2f3b26dde9b96d193fa407903703138aab6faffe2b1f1284017286b99b205c28f7cd266a4b6a48280089b801142eac3ffdc0065bca63278d8f42e97de71044ad10b543f7906fcf8eee09116d355fd2c74f5882bcc7f050958e511c710e118403a970e1542236420bdf2e49b40d43a4c87b2ddbdf879dd82a83e203ea38647862be84df75440a31edc86a081b3bae312287b52a7ccd55ba6120540758e1c47fc17cd9bac949d3dbeef27628b7c7fcbfb9e4bd9c843e4558809df9e", 0xe2}, {&(0x7f0000001740)="901d2c0268d2a24eba17d95f374ad74253c75cde5cecb8916472873f57864c3b2cf1d5e1a48eb9a651af50d48c3f87eb9f40e94a14d5fb4df722a17c7aeabb13d12f38232c6bab2cd7f0266da80e17a7e2423d73", 0x54}, {&(0x7f00000017c0)="da93ce4756c8eac4ba457a8ebeeecaad87149503a0810b6c91f0041a95e60d9dc05136cc00b37674d6dddb7cf4cdf57ec58df21a9685aeffb89945643a6780c60d601c69a4536ddfe6d63133445ff8cf5324ff244e58dcaa3fd0def048d2f600b6b83b4dbdd1610b0c129601b58f9a4d81e1be71dbbef1053cc3d2715afe6eda410989511a3ff3bf02baa861c1005d6695da79de2de445a5d4f7d6b509fb37534373f26c424d3e4fc9de0b965dbab0a375796f94bcf6c43f77a8a8ddce20010af6fbf6cb4fc61d584efbbf92b4625e6d55a5ca52dd8cfd479e3ab72be270e57c436f2e3a3ac2", 0xe6}, {&(0x7f00000018c0)="390146b4b3cf7613e95a39411024dd3377c88e71877c0c6380a4987811543bbb34c3db9eb0bfa267c4b174e682c2296af0916336710f528496f6b52ad73403d7a267c2649bf215ea68160f5db2f55db6d0be43b8c197e603af351f5bfd6b55f13c3c3816a7451b5ddef317a91e57dd111e81e72d4341aac07b64174dbaf28faf02605bc3af76aca4393844e93ee2a3f5d01172011b4c4180f9bab29f739c", 0x9e}], 0x9, &(0x7f0000001ac0)=[@hoplimit={{0x14}}, @hopopts={{0x70, 0x29, 0x36, {0x8, 0xa, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x53, 0xac3, [0x4000000000000, 0x8, 0x0, 0xfabc]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0xd3, 0x8, [0x1]}}, @ra={0x5, 0x2, 0x800}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x200}]}}}, @dontfrag={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0xc805}]}}}, @tclass={{0x14, 0x29, 0x43, 0x59}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r2}}}], 0x100}}, {{&(0x7f0000001bc0)={0xa, 0x4e24, 0x8, @private1, 0x8}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001c00)="3f0d0c0a928a486d092ee508e26f236dc3bdf4d5a3c86a1513383479b0d9a48e20ae2b264ae093e211238cad3fd6f8f1c9be567f04985826837fb41df541d04c37fdda0539f75fb2b881d04c0640f79911ce721350374d7354fc4febce45456085d5f3a39cbd4f10f91fee6273fde2bb20006bc382b7cca035f79c057a3fba1ff414f4b1efb6b1e99a2620161b4e0e68330b3f68fd6c", 0x96}, {&(0x7f0000001cc0)="0d586e2f8f99a0b64b3766f2bc5f907c91e4c2e43b42c2c50e42d9e5b4d8f8ef11654f5c7fffe247f7ab6ea2a3db1507055b303407d1216d2d3b31af319b869821162d73ebf84e21c5bd46a9caed1a38924e14450496f7bef6d12c297dcab46d380c87a7e3ec406d25d16d208de9eefd59a55f4065a6b0aa2868454ca3ae26a081f7747a6aeb30d044618c4eb51da6d048fb1018609847f6e5609f0ccca2bd4d01b5efe4b1e54a755fb50baadccc5cfe26e676819134e6379f14e963ebedbd68883f1305c7d7dd9dc104916f4da3a36591398802768b", 0xd6}, {&(0x7f0000001dc0)="c90b4dbb152d2118a0d690b73e8d7c9c6582113ca95b4f3757f7c929b667c32d4d389a2d9955de6a389218369a4fe82dc5f20771090a0b5ca23634c9070d76f143a14822cfa84dabc182add1081f2e6441a0c9dba9feb60443d3147bbe5a9bab2891be80", 0x64}, {&(0x7f0000001e40)="1d6b1aa44fb9fba2644fe9e7aacae50d95f6a75839603afc369e3ab27945c45699b589f9a134cac0b9ada2bf7c97e444078a914f36e870fa6f842709e6cc113e9831f27fbe5d597c471ba21c93c42794f026c26bbe94b6f74b9e655c109fb43553da9d48a2c9e94ed031506c799ca012a9c629f6a8db9beda945804c133bec0016b2984ebb2773f343aaa674ab59f6ec4e91218228359b9b9297a75ada63b7", 0x9f}, {&(0x7f0000001f00)="e961a704ab10e98a14ebe1", 0xb}, {&(0x7f0000001f40)="aec6e0ac88a8074bd21b691b6a632dda04544d399a76ed649e33862ffadf52d6afb73ed20fd0ac1e5a40152a55e45e075a48717c7a2a8de26995e05f9833c9c73c0e347f908d281f9a28c357967bdff653", 0x51}], 0x6, &(0x7f0000002040)=[@hoplimit={{0x14}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x6, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x18, {0x1, 0x4, 0x16, 0x4, [0x7fff, 0x2]}}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x88}}, {{&(0x7f0000002100)={0xa, 0x4e22, 0x3ff, @remote, 0x4}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000002140)="b8195d49aa1e99ad640cb67cb4914730492bd74683681fa2de9a87df20fc5bce362d09d81f316e0de3e949c0bf16660e36013846a575f3fdf46bd29c5b89f64a22d2fa78e3c20b8c6e5905dffc1ee55c77803300d7aa234afaeefa90708897e08e9eeb28079daa9192d31e6701dec545e7c76153c17ad6de6d80ad8d798897721db848db16c2bc06aaec6d6d22ecb063cef849ef40e24be707dce8f1ac75e29c75c655e268129eebbe1d09c4851d390001f2cb164d4ad3e7c9365ee0bbc7f745e1c549374c514cbc0203a01accd4d4be5f98b6", 0xd3}, {&(0x7f00000022c0)="39ef3fff5008c9d6e5b3c6ba576e17be096bcd5b925d1ba35d6e01952b8b397c6b61cfa8b3db90379ca6fdd39af282b46db5b44c822ed6a15f759e9e26f23f5276d30e9e09ec1aef44c1750e8271fc0d62c0d6a95b418dc2bbd7651a721063b180a4f553e3b844e7204cdb4740d17798f5b25b4ee819b8fea6890f4a66eb9ea52dc9212450507d627bf6fc2bb687da74f2c613e33ccbc2c1f5107d2fb1", 0x9d}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="2dc1c8ac812bd980d4c778065ac89106e174f1381ffc43cc14a4966c3845e53b45870004c9468bc685d3e3fb2a44f2ecb3ecd17bc060c43a9b1803a848bf2794c669dce0ee38a3632ecdcf6b9a846e5eb79bfc1442f7f225339cf8ee8a245c8dae21fa5be1ff29a3bd9f104607", 0x6d}, {&(0x7f0000002440)="cce1ba9daa367de69081937c4c3e9af8f67b2d85defbf3eae0", 0x19}], 0x5, &(0x7f0000002500)=[@dstopts={{0x40, 0x29, 0x37, {0x3a, 0x5, '\x00', [@generic={0x0, 0x26, "081c216da15364fb24f7ed213f918df7658968ad25243e88aae656cb3765becd96d29e24cf83"}]}}}, @rthdrdstopts={{0x1d0, 0x29, 0x37, {0x87, 0x36, '\x00', [@generic={0x0, 0xbd, "25bb89966ab20548af5eda9adc93469125d4a09283d15ea36c931109385391d6d7a005e2c493c522d3723aeff916d1619bc35cc81d8f2b3e8608d0c55d3f773db6ed81de129061dbb91a6dedf958bdfdd97ed07a2f6a1f15c68c885877c4b33e4025841eea26be0cfa86ab8e1f753ee0e7445c5a12a1ef6325c320a053da51fbb32d6abaa633206bc4828e4a4179f2ee0c451485abb514aa6d0eb3bbab90cf48fb1b44e70c45cd22ecade0f391ee218f02bd8d2f8046ab443b72e9a61b"}, @generic={0xd8, 0xdf, "fce5b5f6d9c969df59715a63d30a30ed60d25a0134ab73c51e240dbc1f39cfe25786d73d282a3054c867fe2ded146d5dad1023a57d7cd7029ffab72c9e0131901ae878784998d3ac927771004bc03311b0d9e2a1e08e079247921454ab42f2f970fcca5fd363800b6130dfc3baf4268509d3a4446e4752baed7bbcdc501e83f5f545b0966b82460234cb206e3268ff5e6ca91b8a9106e3abb30be5f236ce20b879697bb22a2e8641e5d88f91a2e79ae023eac282601f81e689211cb2061d4f231e1e14bab25134a6477fbc7bdaece67fb4f4323d88e813d37fd463fd7d3482"}, @enc_lim={0x4, 0x1, 0x39}, @jumbo={0xc2, 0x4, 0x10}, @enc_lim={0x4, 0x1, 0xfe}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x7}]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x2e, 0x8, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0xc3, 0x7, [0x2, 0x7, 0x3, 0x8fb8, 0x0]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x4, [0xff]}}]}}}, @dstopts={{0x70, 0x29, 0x37, {0x8, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xa46f}, @jumbo, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x7, [0x8]}}, @generic={0x7, 0x1d, "4c65db7c5141396212051af1dfbcfe1ab07238d642e255ccfeb64414c0"}, @pad1]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x67, 0xc, 0x2, 0xf9, 0x0, [@empty, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private1, @mcast1]}}}, @hopopts={{0x88, 0x29, 0x36, {0x21, 0xd, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x6, 0x8, [0x9, 0x0, 0x5, 0x8, 0x4, 0x0, 0x8, 0x5, 0x10001, 0x0]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}], 0x3e0}}, {{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @local, 0x1}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000002940)="cfa3ed41c64a5720dd23ca16cd7fa2220e9c509f184de98aef2446061b72c106db151d65747052d7e84bdef52f7faf7b5c3d02b729fd51752f715cfa0a30f14dbf", 0x41}, {&(0x7f00000029c0)="80037862be69e0a0137d7cf6e83cafc94e0ca605b320b29166f2edb681878db550b7b44232b9c3888c74e7b6dfea07baeb96e89d1ce20252bfba5a9f64d262d68b315ad26b39aecbdf8abde9842c00e0bc522d8bc877b3107b2645d0ef3c6fe348f780338a9aed8333a73bca44c41423ce03003697fe19a1c0123b9267c613c578", 0x81}, {&(0x7f0000002a80)="a6594be9f177f8a0a60e2df4dcb64b89029865170b80fae005e333958d5f9ddc3cb4eb57d6668839c0e0ae0997807420f67e6f0d9ebd61bdce14155436fbfacc777fc1d6970044362ae3766d152948d5555f134c3e1c841d0e0f2d1cb4e94909981dbc525a12436a111398f83af0448c25788f5f3c8cbecaaec280ce7b49dcec64b2d49e25bdb552c20e4f5f938d5bf078c08cf23483d06db5b90c02969514", 0x9f}], 0x3, &(0x7f0000002b80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x5e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x70}}], 0x8, 0x4001) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x1c}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, 0x1}, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd28, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc041}, 0x5) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800ce40180080003000100000008000a"], 0x5c}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x54617, 0x20a3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) kernel console output (not intermixed with test programs): f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.220203][T29962] RSP: 002b:00007f90a3e75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.220229][T29962] RAX: ffffffffffffffda RBX: 00007f90a3225fa0 RCX: 00007f90a2f9e159 [ 854.220247][T29962] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 854.220269][T29962] RBP: 00007f90a3e75090 R08: 0000000000000000 R09: 0000000000000000 [ 854.220284][T29962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.220299][T29962] R13: 00007f90a3226038 R14: 00007f90a3225fa0 R15: 00007fff60c75338 [ 854.220336][T29962] [ 854.229809][T29962] syz.4.5656: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 854.230064][T29962] CPU: 0 UID: 0 PID: 29962 Comm: syz.4.5656 Not tainted syzkaller #0 PREEMPT(full) [ 854.230127][T29962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.230166][T29962] Call Trace: [ 854.230187][T29962] [ 854.230216][T29962] dump_stack_lvl+0xe8/0x150 [ 854.230317][T29962] warn_alloc+0x24d/0x270 [ 854.230389][T29962] ? __kasan_kmalloc+0x22/0xb0 [ 854.230464][T29962] ? __pfx_warn_alloc+0x10/0x10 [ 854.230522][T29962] ? __get_vm_area_node+0x155/0x2f0 [ 854.230624][T29962] ? __get_vm_area_node+0x2a9/0x2f0 [ 854.230732][T29962] __vmalloc_node_range_noprof+0x36b/0x1540 [ 854.230811][T29962] ? __lock_acquire+0x747/0x2de0 [ 854.230942][T29962] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 854.231056][T29962] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 854.231127][T29962] __vmalloc_noprof+0xd2/0x120 [ 854.231203][T29962] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 854.231289][T29962] bpf_prog_alloc_no_stats+0x47/0x560 [ 854.231372][T29962] ? bpf_prog_alloc+0x2a/0x1a0 [ 854.231466][T29962] bpf_prog_alloc+0x3c/0x1a0 [ 854.231539][T29962] bpf_prog_load+0x7f8/0x1c20 [ 854.231645][T29962] ? __pfx_bpf_prog_load+0x10/0x10 [ 854.231775][T29962] __sys_bpf+0xd0d/0xd90 [ 854.231866][T29962] ? __pfx___sys_bpf+0x10/0x10 [ 854.231964][T29962] ? __fget_files+0x2a/0x420 [ 854.232079][T29962] ? ksys_write+0x242/0x270 [ 854.232172][T29962] ? __pfx_ksys_write+0x10/0x10 [ 854.232278][T29962] __x64_sys_bpf+0xba/0xd0 [ 854.232349][T29962] do_syscall_64+0x166/0x520 [ 854.232413][T29962] ? trace_irq_disable+0x3b/0x140 [ 854.232474][T29962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.232535][T29962] ? clear_bhb_loop+0x70/0xc0 [ 854.232608][T29962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.232678][T29962] RIP: 0033:0x7f90a2f9e159 [ 854.232737][T29962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.232789][T29962] RSP: 002b:00007f90a3e75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.232858][T29962] RAX: ffffffffffffffda RBX: 00007f90a3225fa0 RCX: 00007f90a2f9e159 [ 854.232900][T29962] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 854.232943][T29962] RBP: 00007f90a3e75090 R08: 0000000000000000 R09: 0000000000000000 [ 854.232975][T29962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.233007][T29962] R13: 00007f90a3226038 R14: 00007f90a3225fa0 R15: 00007fff60c75338 [ 854.233100][T29962] [ 854.283424][T29962] Mem-Info: [ 854.283463][T29962] active_anon:6353 inactive_anon:0 isolated_anon:0 [ 854.283463][T29962] active_file:3 inactive_file:43720 isolated_file:0 [ 854.283463][T29962] unevictable:0 dirty:171 writeback:0 [ 854.283463][T29962] slab_reclaimable:12066 slab_unreclaimable:112403 [ 854.283463][T29962] mapped:29722 shmem:654 pagetables:1749 [ 854.283463][T29962] sec_pagetables:0 bounce:0 [ 854.283463][T29962] kernel_misc_reclaimable:0 [ 854.283463][T29962] free:1264760 free_pcp:8717 free_cma:0 [ 854.283623][T29962] Node 0 active_anon:25412kB inactive_anon:0kB active_file:12kB inactive_file:174672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118888kB dirty:684kB writeback:0kB shmem:2616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16976kB pagetables:6868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 854.283870][T29962] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 854.284034][T29962] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 854.284199][T29962] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 854.287255][T29962] Node 0 DMA32 free:1102584kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25412kB inactive_anon:0kB active_file:12kB inactive_file:174672kB unevictable:0kB writepending:684kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:34864kB local_pcp:16704kB free_cma:0kB [ 854.287444][T29962] lowmem_reserve[]: 0 0 0 0 0 [ 854.287552][T29962] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 854.309398][T29962] lowmem_reserve[]: 0 0 0 0 0 [ 854.309553][T29962] Node 1 Normal free:3941096kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 854.309715][T29962] lowmem_reserve[]: 0 0 0 0 0 [ 854.309820][T29962] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 854.310170][T29962] Node 0 DMA32: 1160*4kB (UM) 1319*8kB (UME) 724*16kB (UM) 787*32kB (UME) 582*64kB (UM) 621*128kB (UME) 464*256kB (UM) 374*512kB (UME) 327*1024kB (UM) 5*2048kB (UME) 68*4096kB (UM) = 1102584kB [ 854.311537][T29962] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 854.311806][T29962] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 7*32kB (UM) 8*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3941096kB [ 854.312282][T29962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 854.312326][T29962] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 854.312393][T29962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 854.312443][T29962] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 854.312486][T29962] 44373 total pagecache pages [ 854.312527][T29962] 0 pages in swap cache [ 854.312547][T29962] Free swap = 124996kB [ 854.312568][T29962] Total swap = 124996kB [ 854.312589][T29962] 2097051 pages RAM [ 854.312617][T29962] 0 pages HighMem/MovableOnly [ 854.312638][T29962] 428782 pages reserved [ 854.312657][T29962] 0 pages cma reserved [ 854.400191][T29954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5657'. [ 855.496870][T29989] v: renamed from ipvlan0 (while UP) [ 855.580091][T29990] netlink: 'syz.2.5663': attribute type 1 has an invalid length. [ 857.008518][T30049] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5676'. [ 857.009686][T30049] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5676'. [ 857.259291][T30062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5678'. [ 857.295096][T30062] vlan4: entered promiscuous mode [ 857.295134][T30062] gretap0: entered promiscuous mode [ 857.690937][T10530] net_ratelimit: 35 callbacks suppressed [ 857.690961][T10530] bond11: (slave bridge6): failed to get link speed/duplex [ 857.813807][T10530] bond11: (slave bridge6): failed to get link speed/duplex [ 857.920828][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 857.970021][T30094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5684'. [ 858.031490][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 858.133519][T30103] syzkaller1: entered promiscuous mode [ 858.133542][T30103] syzkaller1: entered allmulticast mode [ 858.152239][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 858.261043][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 858.401233][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 858.447482][T30108] 0·: left allmulticast mode [ 858.447500][T30108] hsr_slave_0: left allmulticast mode [ 858.447512][T30108] hsr_slave_1: left allmulticast mode [ 858.457511][T30108] ip6erspan0: left allmulticast mode [ 858.461575][T30108] ip6tnl2: left allmulticast mode [ 858.511054][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 858.596619][T30114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5688'. [ 858.621613][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 858.731186][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 858.872102][T30017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 859.159707][T30126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5691'. [ 860.221937][T30184] netlink: 'syz.2.5699': attribute type 1 has an invalid length. [ 860.584080][T30188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5699'. [ 860.799591][T30194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5702'. [ 860.799652][T30194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5702'. [ 861.109742][T30194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5702'. [ 861.109803][T30194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5702'. [ 861.395825][T30194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5702'. [ 861.395887][T30194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5702'. [ 861.779097][T30242] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5710'. [ 862.780801][ T38] net_ratelimit: 103 callbacks suppressed [ 862.780832][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 862.890666][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 863.000689][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 863.110842][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 863.220736][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 863.341020][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 863.450743][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 863.560788][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 863.671073][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 863.758891][T30197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.785736][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 863.786333][T30231] netlink: 'syz.0.5708': attribute type 1 has an invalid length. [ 864.137037][T30277] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5713'. [ 864.186769][T30280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5716'. [ 864.254878][T30280] vlan4: entered allmulticast mode [ 864.254901][T30280] bridge5: entered allmulticast mode [ 864.256629][T30281] erspan0: left allmulticast mode [ 864.256651][T30281] erspan0: left promiscuous mode [ 864.256921][T30281] bridge1: port 1(erspan0) entered disabled state [ 864.772485][T30281] bridge5: port 1(erspan0) entered blocking state [ 864.772601][T30281] bridge5: port 1(erspan0) entered disabled state [ 864.772762][T30281] erspan0: entered allmulticast mode [ 864.774712][T30281] erspan0: entered promiscuous mode [ 864.992621][T30292] netlink: 'syz.3.5718': attribute type 1 has an invalid length. [ 865.018940][T30292] 8021q: adding VLAN 0 to HW filter on device bond15 [ 866.908334][T30248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.920809][T30291] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5718'. [ 867.015882][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5719'. [ 867.176601][T30302] netlink: 'syz.2.5721': attribute type 10 has an invalid length. [ 867.240840][T30316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'. [ 867.306821][T30320] sctp: [Deprecated]: syz.0.5722 (pid 30320) Use of int in max_burst socket option. [ 867.306821][T30320] Use struct sctp_assoc_value instead [ 867.883635][T10512] net_ratelimit: 31 callbacks suppressed [ 867.883654][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 867.994348][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 867.998164][T30331] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5727'. [ 868.111338][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 868.222675][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 868.330698][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 868.387926][T30343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5729'. [ 868.388404][T30343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5729'. [ 868.451854][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 868.560758][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 868.671136][T26706] bond11: (slave bridge6): failed to get link speed/duplex [ 868.780698][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 868.890921][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 870.096479][T30299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.297989][T30348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5733'. [ 870.395676][T30355] xt_policy: output policy not valid in PREROUTING and INPUT [ 870.424793][T30356] bond19: left promiscuous mode [ 870.443975][T30356] gretap2: left allmulticast mode [ 870.501166][T30356] vlan4: left allmulticast mode [ 870.501203][T30356] bridge5: left allmulticast mode [ 870.642833][T30368] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 870.642874][T30368] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 870.642919][T30368] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 870.707305][T30368] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 870.738660][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5732'. [ 871.549499][T30410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5744'. [ 871.817051][T30424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5745'. [ 871.906264][T30428] x_tables: duplicate underflow at hook 3 [ 872.902985][ T38] net_ratelimit: 32 callbacks suppressed [ 872.903009][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 872.927574][T30454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5751'. [ 873.010890][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 873.121583][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 873.230983][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 873.341497][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 873.451347][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 873.561063][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 873.670776][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 873.781052][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 873.890804][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 874.649743][T30416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 875.080457][T30500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5758'. [ 875.696738][T30530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5766'. [ 875.734249][T30530] ip6erspan0: entered allmulticast mode [ 875.987490][T30534] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5767'. [ 875.987695][T30534] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5767'. [ 875.987878][T30534] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5767'. [ 876.023464][T30534] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5767'. [ 876.023677][T30534] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5767'. [ 876.023868][T30534] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5767'. [ 876.032237][T30536] syzkaller0: entered promiscuous mode [ 876.032303][T30536] syzkaller0: entered allmulticast mode [ 876.080722][T30534] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5767'. [ 876.084015][T30533] tipc: Started in network mode [ 876.084093][T30533] tipc: Node identity 36802dc177b3, cluster identity 4711 [ 876.084444][T30533] tipc: Enabled bearer , priority 0 [ 876.130151][T30536] tipc: Resetting bearer [ 876.965813][T30532] tipc: Resetting bearer [ 877.049073][T30532] tipc: Disabling bearer [ 877.963047][T30568] tc_dump_action: action bad kind [ 878.139601][T10517] net_ratelimit: 30 callbacks suppressed [ 878.139624][T10517] bond11: (slave bridge6): failed to get link speed/duplex [ 878.242522][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 878.353164][T10517] bond11: (slave bridge6): failed to get link speed/duplex [ 878.529810][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 878.631261][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 878.742130][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 878.853794][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 878.951828][T30595] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 879.029859][T30596] gretap1: entered allmulticast mode [ 879.039801][T30596] bond18: (slave gretap1): making interface the new active one [ 879.041241][T30596] bond18: (slave gretap1): Enslaving as an active interface with an up link [ 879.058432][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 879.161141][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 879.271428][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 879.325350][T30610] syzkaller1: entered promiscuous mode [ 879.325375][T30610] syzkaller1: entered allmulticast mode [ 879.616050][T30620] netlink: 'syz.4.5787': attribute type 32 has an invalid length. [ 879.616073][T30620] __nla_validate_parse: 1 callbacks suppressed [ 879.616085][T30620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5787'. [ 879.647225][T30620] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 879.676576][T30618] netlink: 'syz.1.5786': attribute type 1 has an invalid length. [ 879.695253][T30618] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5786'. [ 879.968239][T30633] syzkaller0: entered promiscuous mode [ 879.968266][T30633] syzkaller0: entered allmulticast mode [ 879.987055][T30633] tipc: Enabled bearer , priority 0 [ 880.002162][T30631] tipc: Resetting bearer [ 880.086663][T30631] tipc: Disabling bearer [ 880.209853][T30638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5791'. [ 880.597036][T30664] erspan0: entered promiscuous mode [ 880.618455][T30664] vlan2: entered promiscuous mode [ 880.738796][T26146] udevd[26146]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 880.803569][T30675] netlink: 'syz.4.5800': attribute type 1 has an invalid length. [ 881.194953][T30702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5803'. [ 882.066448][T30734] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 882.073642][T30734] netlink: 'syz.2.5812': attribute type 9 has an invalid length. [ 882.251464][T30741] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5814'. [ 882.304703][T30747] bridge0: port 1(bond0) entered blocking state [ 882.307613][T30747] bridge0: port 1(bond0) entered disabled state [ 882.307919][T30747] bond0: entered allmulticast mode [ 882.329707][T30747] bond0: entered promiscuous mode [ 882.354953][T30747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5815'. [ 882.356254][T30747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5815'. [ 882.396398][T30749] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5817'. [ 882.398583][T30747] hsr_slave_1 (unregistering): left promiscuous mode [ 882.423865][T30749] netlink: 'syz.2.5817': attribute type 1 has an invalid length. [ 882.484362][T30749] 8021q: adding VLAN 0 to HW filter on device bond20 [ 882.782445][T30778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5822'. [ 882.816054][T30778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5822'. [ 883.171693][T10512] net_ratelimit: 25 callbacks suppressed [ 883.171718][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 883.291252][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 883.322740][T30801] netlink: 'syz.3.5829': attribute type 1 has an invalid length. [ 883.403546][T30801] 8021q: adding VLAN 0 to HW filter on device bond16 [ 883.421301][T10530] bond11: (slave bridge6): failed to get link speed/duplex [ 883.601714][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 883.800964][T10517] bond11: (slave bridge6): failed to get link speed/duplex [ 883.846945][T30835] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 883.913178][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 883.991843][T30842] xt_hashlimit: max too large, truncated to 1048576 [ 884.023493][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 884.025981][T30842] No such timeout policy "syz1" [ 884.089126][T30846] netlink: 'syz.0.5839': attribute type 4 has an invalid length. [ 884.140748][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 884.255498][T10517] bond11: (slave bridge6): failed to get link speed/duplex [ 884.353533][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 884.355569][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 884.379511][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 884.388335][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 884.392159][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 885.495862][T30886] __nla_validate_parse: 6 callbacks suppressed [ 885.495885][T30886] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5846'. [ 886.163881][T30918] xt_hashlimit: max too large, truncated to 1048576 [ 886.201078][T30918] No such timeout policy "syz1" [ 886.204336][T30916] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 886.388205][T30854] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.388326][T30854] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.388474][T30854] bridge_slave_0: entered allmulticast mode [ 886.415811][T30854] bridge_slave_0: entered promiscuous mode [ 886.434969][T30854] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.435080][T30854] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.435231][T30854] bridge_slave_1: entered allmulticast mode [ 886.462226][ T5626] Bluetooth: hci0: command tx timeout [ 886.475941][T30854] bridge_slave_1: entered promiscuous mode [ 886.538500][T30930] Bluetooth: MGMT ver 1.23 [ 886.667178][T30854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.692618][T30854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.845564][T30854] team0: Port device team_slave_0 added [ 886.864525][T30854] team0: Port device team_slave_1 added [ 886.936980][T30854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.937002][T30854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.937033][T30854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.961788][T30854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.961847][T30854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.961999][T30854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.245992][T30854] hsr_slave_0: entered promiscuous mode [ 887.247101][T30854] hsr_slave_1: entered promiscuous mode [ 887.262361][T30854] debugfs: 'hsr0' already exists in 'hsr' [ 887.262418][T30854] Cannot create hsr debugfs directory [ 887.290133][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5862'. [ 887.430092][T30946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5865'. [ 887.430153][T30946] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5865'. [ 887.467434][T30949] xt_l2tp: v2 tid > 0xffff: 37482740 [ 887.486068][T30946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5865'. [ 887.486135][T30946] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5865'. [ 887.745742][T30956] syzkaller0: entered promiscuous mode [ 887.745768][T30956] syzkaller0: entered allmulticast mode [ 887.765594][T30954] syzkaller1: entered promiscuous mode [ 887.765617][T30954] syzkaller1: entered allmulticast mode [ 888.043520][T30981] netlink: 'syz.3.5870': attribute type 3 has an invalid length. [ 888.043540][T30981] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5870'. [ 888.373249][ T8262] net_ratelimit: 18 callbacks suppressed [ 888.373271][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 888.454415][T30993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5874'. [ 888.510207][T30996] netlink: 'syz.4.5874': attribute type 2 has an invalid length. [ 888.523365][T30993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5874'. [ 888.524006][T30993] netlink: 'syz.4.5874': attribute type 23 has an invalid length. [ 888.532368][ T5626] Bluetooth: hci0: command tx timeout [ 888.536431][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 888.643644][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 888.750727][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 888.880884][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 889.150752][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 889.281452][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 889.408985][T30854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 889.427224][T30854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.429896][T30854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 889.449927][T30854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.460066][T30854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 889.494607][T30854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.495534][T30854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 889.579593][T31035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5882'. [ 889.745997][T30854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.882181][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 890.012114][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 890.132529][T30854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.185578][T30854] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.193064][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 890.242346][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.242474][T13476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.283461][T10512] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.283575][T10512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.332933][T31050] netlink: 'syz.3.5885': attribute type 1 has an invalid length. [ 890.610965][ T5626] Bluetooth: hci0: command tx timeout [ 892.693702][T31063] gtp0: entered promiscuous mode [ 892.693729][T31063] gtp0: entered allmulticast mode [ 892.705922][ T5626] Bluetooth: hci0: command tx timeout [ 892.954755][T31078] __nla_validate_parse: 2 callbacks suppressed [ 892.954779][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5890'. [ 892.956062][T31076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5891'. [ 893.126638][T31084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5893'. [ 893.128291][T31085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5893'. [ 893.234633][T31092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5894'. [ 893.301098][T13476] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 893.301713][T13476] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 893.301757][T13476] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 893.301796][T13476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 893.413695][ T8262] net_ratelimit: 8 callbacks suppressed [ 893.413717][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 893.507465][T31107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5898'. [ 893.521736][T13476] bond11: (slave bridge6): failed to get link speed/duplex [ 893.558821][T31109] 8021q: VLANs not supported on lo [ 893.558987][T31109] netlink: 'syz.1.5899': attribute type 1 has an invalid length. [ 893.559005][T31109] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5899'. [ 893.559629][T31109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 893.684431][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 893.736411][T31115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5901'. [ 893.792254][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 893.817749][T30854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.947387][T31119] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5903'. [ 893.962590][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 893.981762][T31119] netlink: 'syz.3.5903': attribute type 1 has an invalid length. [ 894.056866][T31119] 8021q: adding VLAN 0 to HW filter on device bond18 [ 894.168175][ T8262] bond11: (slave bridge6): failed to get link speed/duplex [ 894.185126][T30854] veth0_vlan: entered promiscuous mode [ 894.261038][T31141] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 894.264552][T30854] veth1_vlan: entered promiscuous mode [ 894.292991][T26709] bond11: (slave bridge6): failed to get link speed/duplex [ 894.351986][T30854] veth0_macvtap: entered promiscuous mode [ 894.369883][T30854] veth1_macvtap: entered promiscuous mode [ 894.401940][ T38] bond11: (slave bridge6): failed to get link speed/duplex [ 894.423252][T30854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.429990][T30854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.742475][T10512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.742530][T10512] bond11: (slave bridge6): failed to get link speed/duplex [ 894.742592][T10512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.743204][T10517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.743250][T10517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.879077][ T8262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.879100][ T8262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.049579][T10517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.049604][T10517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.479786][T31184] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5921'. [ 895.494870][T31185] ip_vti0: entered promiscuous mode [ 895.494893][T31185] ip_vti0: entered allmulticast mode [ 895.668580][T31193] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 895.845532][T31204] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 895.845585][T31203] IPVS: stopping master sync thread 31204 ... [ 895.969714][T31209] bond0: left allmulticast mode [ 895.969743][T31209] bond0: left promiscuous mode [ 895.969997][T31209] bridge0: port 1(bond0) entered disabled state [ 896.029931][T31213] netlink: 'syz.1.5930': attribute type 1 has an invalid length. [ 896.132738][ T31] audit: type=1800 audit(1789620008.019:28): pid=31221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5928" name="r" dev="tmpfs" ino=29 res=0 errno=0 [ 896.258510][T31228] ªªªªªª: renamed from vlan0 (while UP) [ 896.365127][T31232] netlink: 'syz.2.5932': attribute type 30 has an invalid length. [ 896.489103][T31232] netlink: 'syz.2.5932': attribute type 8 has an invalid length. [ 896.988577][T31256] netlink: 'syz.3.5938': attribute type 4 has an invalid length. [ 896.989766][T31256] netlink: 'syz.3.5938': attribute type 4 has an invalid length. [ 897.539098][ T31] audit: type=1800 audit(1789620009.419:29): pid=31281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5943" name="memory.events" dev="tmpfs" ino=50 res=0 errno=0 [ 897.563461][T31245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.840337][T31285] syz_tun: entered allmulticast mode [ 897.879030][T31283] syz_tun: left allmulticast mode [ 898.270013][T31312] __nla_validate_parse: 3 callbacks suppressed [ 898.270035][T31312] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5952'. [ 898.523931][T13474] net_ratelimit: 31 callbacks suppressed [ 898.523953][T13474] bond11: (slave bridge6): failed to get link speed/duplex [ 898.630655][T13474] bond11: (slave bridge6): failed to get link speed/duplex [ 898.742763][ T79] bond11: (slave bridge6): failed to get link speed/duplex [ 898.760372][T31342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5961'. [ 898.760396][T31342] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5961'. [ 898.853829][T10513] bond11: (slave bridge6): failed to get link speed/duplex [ 898.962071][T26707] bond11: (slave bridge6): failed to get link speed/duplex [ 899.000715][T31343] netlink: 'syz.2.5962': attribute type 1 has an invalid length. [ 899.000731][T31343] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5962'. [ 899.053625][T31352] FAULT_INJECTION: forcing a failure. [ 899.053625][T31352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 899.053662][T31352] CPU: 1 UID: 0 PID: 31352 Comm: syz.0.5966 Not tainted syzkaller #0 PREEMPT(full) [ 899.053689][T31352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 899.053704][T31352] Call Trace: [ 899.053714][T31352] [ 899.053724][T31352] dump_stack_lvl+0xe8/0x150 [ 899.053764][T31352] should_fail_ex+0x410/0x560 [ 899.053804][T31352] prepare_alloc_pages+0x223/0x600 [ 899.053837][T31352] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 899.053869][T31352] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 899.053900][T31352] ? __pfx_policy_nodemask+0x10/0x10 [ 899.053943][T31352] alloc_pages_mpol+0x21e/0x390 [ 899.053980][T31352] alloc_pages_noprof+0xb1/0x2b0 [ 899.054012][T31352] get_free_pages_noprof+0xf/0x80 [ 899.054039][T31352] __kasan_populate_vmalloc+0x38/0x1c0 [ 899.054062][T31352] ? do_raw_spin_unlock+0xf5/0x200 [ 899.054100][T31352] alloc_vmap_area+0xd1a/0x1420 [ 899.054150][T31352] ? __pfx_alloc_vmap_area+0x10/0x10 [ 899.054179][T31352] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 899.054206][T31352] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 899.054233][T31352] ? __get_vm_area_node+0x155/0x2f0 [ 899.054271][T31352] __get_vm_area_node+0x200/0x2f0 [ 899.054312][T31352] __vmalloc_node_range_noprof+0x343/0x1540 [ 899.054349][T31352] ? bpf_check+0x10ee/0x2e10 [ 899.054387][T31352] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 899.054422][T31352] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 899.054468][T31352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 899.054505][T31352] ? apparmor_capable+0x126/0x170 [ 899.054614][T31352] ? bpf_lsm_capable+0x9/0x20 [ 899.054634][T31352] ? security_capable+0x7e/0x2c0 [ 899.054688][T31352] ? bpf_check+0x10ee/0x2e10 [ 899.054712][T31352] __vmalloc_noprof+0xd2/0x120 [ 899.054745][T31352] ? bpf_check+0x10ee/0x2e10 [ 899.054773][T31352] bpf_check+0x10ee/0x2e10 [ 899.054819][T31352] ? ktime_get_with_offset+0x93/0x2d0 [ 899.054848][T31352] ? __pfx_bpf_check+0x10/0x10 [ 899.054876][T31352] ? bpf_obj_name_cpy+0x194/0x1e0 [ 899.054914][T31352] bpf_prog_load+0x14d6/0x1c20 [ 899.054954][T31352] ? __pfx_bpf_prog_load+0x10/0x10 [ 899.055009][T31352] __sys_bpf+0xd0d/0xd90 [ 899.055046][T31352] ? __pfx___sys_bpf+0x10/0x10 [ 899.055085][T31352] ? __fget_files+0x2a/0x420 [ 899.055137][T31352] ? ksys_write+0x242/0x270 [ 899.055175][T31352] ? __pfx_ksys_write+0x10/0x10 [ 899.055217][T31352] __x64_sys_bpf+0xba/0xd0 [ 899.055244][T31352] do_syscall_64+0x166/0x520 [ 899.055270][T31352] ? trace_irq_disable+0x3b/0x140 [ 899.055293][T31352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.055319][T31352] ? clear_bhb_loop+0x70/0xc0 [ 899.055347][T31352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.055370][T31352] RIP: 0033:0x7f5640b9e159 [ 899.055390][T31352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.055411][T31352] RSP: 002b:00007f5641a75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 899.055437][T31352] RAX: ffffffffffffffda RBX: 00007f5640e25fa0 RCX: 00007f5640b9e159 [ 899.055454][T31352] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 899.055470][T31352] RBP: 00007f5641a75090 R08: 0000000000000000 R09: 0000000000000000 [ 899.055485][T31352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 899.055499][T31352] R13: 00007f5640e26038 R14: 00007f5640e25fa0 R15: 00007ffec501d1a8 [ 899.055536][T31352] [ 899.055649][T31352] syz.0.5966: vmalloc error: size 408, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 899.055717][T31352] CPU: 1 UID: 0 PID: 31352 Comm: syz.0.5966 Not tainted syzkaller #0 PREEMPT(full) [ 899.055742][T31352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 899.055756][T31352] Call Trace: [ 899.055764][T31352] [ 899.055774][T31352] dump_stack_lvl+0xe8/0x150 [ 899.055818][T31352] warn_alloc+0x24d/0x270 [ 899.055842][T31352] ? lockdep_hardirqs_on+0x7b/0x110 [ 899.055870][T31352] ? __pfx_warn_alloc+0x10/0x10 [ 899.055892][T31352] ? kfree+0x1c5/0x650 [ 899.055933][T31352] ? __get_vm_area_node+0x219/0x2f0 [ 899.055975][T31352] __vmalloc_node_range_noprof+0x36b/0x1540 [ 899.056025][T31352] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 899.056059][T31352] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 899.056104][T31352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 899.056142][T31352] ? apparmor_capable+0x126/0x170 [ 899.056185][T31352] ? bpf_lsm_capable+0x9/0x20 [ 899.056206][T31352] ? security_capable+0x7e/0x2c0 [ 899.056235][T31352] ? bpf_check+0x10ee/0x2e10 [ 899.056258][T31352] __vmalloc_noprof+0xd2/0x120 [ 899.056292][T31352] ? bpf_check+0x10ee/0x2e10 [ 899.056320][T31352] bpf_check+0x10ee/0x2e10 [ 899.056357][T31352] ? ktime_get_with_offset+0x93/0x2d0 [ 899.056386][T31352] ? __pfx_bpf_check+0x10/0x10 [ 899.056415][T31352] ? bpf_obj_name_cpy+0x194/0x1e0 [ 899.056453][T31352] bpf_prog_load+0x14d6/0x1c20 [ 899.056494][T31352] ? __pfx_bpf_prog_load+0x10/0x10 [ 899.056550][T31352] __sys_bpf+0xd0d/0xd90 [ 899.056598][T31352] ? __pfx___sys_bpf+0x10/0x10 [ 899.056636][T31352] ? __fget_files+0x2a/0x420 [ 899.056687][T31352] ? ksys_write+0x242/0x270 [ 899.056725][T31352] ? __pfx_ksys_write+0x10/0x10 [ 899.056767][T31352] __x64_sys_bpf+0xba/0xd0 [ 899.056794][T31352] do_syscall_64+0x166/0x520 [ 899.056826][T31352] ? trace_irq_disable+0x3b/0x140 [ 899.056849][T31352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.056874][T31352] ? clear_bhb_loop+0x70/0xc0 [ 899.056902][T31352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.056926][T31352] RIP: 0033:0x7f5640b9e159 [ 899.056947][T31352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.056970][T31352] RSP: 002b:00007f5641a75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 899.056995][T31352] RAX: ffffffffffffffda RBX: 00007f5640e25fa0 RCX: 00007f5640b9e159 [ 899.057012][T31352] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 899.057028][T31352] RBP: 00007f5641a75090 R08: 0000000000000000 R09: 0000000000000000 [ 899.057043][T31352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 899.057058][T31352] R13: 00007f5640e26038 R14: 00007f5640e25fa0 R15: 00007ffec501d1a8 [ 899.057095][T31352] [ 899.057146][T31352] Mem-Info: [ 899.057157][T31352] active_anon:6687 inactive_anon:0 isolated_anon:0 [ 899.057157][T31352] active_file:3 inactive_file:43740 isolated_file:0 [ 899.057157][T31352] unevictable:0 dirty:158 writeback:0 [ 899.057157][T31352] slab_reclaimable:11897 slab_unreclaimable:117879 [ 899.057157][T31352] mapped:30008 shmem:929 pagetables:1784 [ 899.057157][T31352] sec_pagetables:0 bounce:0 [ 899.057157][T31352] kernel_misc_reclaimable:0 [ 899.057157][T31352] free:1253581 free_pcp:14460 free_cma:0 [ 899.057217][T31352] Node 0 active_anon:26748kB inactive_anon:0kB active_file:12kB inactive_file:174752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120032kB dirty:628kB writeback:0kB shmem:3716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17492kB pagetables:7008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 899.057280][T31352] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 899.057336][T31352] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.057400][T31352] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 899.057444][T31352] Node 0 DMA32 free:1057932kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26748kB inactive_anon:0kB active_file:12kB inactive_file:174752kB unevictable:0kB writepending:628kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:57840kB local_pcp:21068kB free_cma:0kB [ 899.057512][T31352] lowmem_reserve[]: 0 0 0 0 0 [ 899.057555][T31352] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.057616][T31352] lowmem_reserve[]: 0 0 0 0 0 [ 899.057658][T31352] Node 1 Normal free:3941032kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.057727][T31352] lowmem_reserve[]: 0 0 0 0 0 [ 899.057770][T31352] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 899.057919][T31352] Node 0 DMA32: 1449*4kB (UME) 1009*8kB (UME) 50*16kB (UME) 393*32kB (UME) 343*64kB (UME) 605*128kB (UME) 464*256kB (UM) 369*512kB (UME) 327*1024kB (UM) 7*2048kB (UME) 67*4096kB (UM) = 1057964kB [ 899.058113][T31352] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 899.058232][T31352] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 5*32kB (UM) 8*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3941032kB [ 899.058420][T31352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.058440][T31352] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 899.058460][T31352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.058480][T31352] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 899.058499][T31352] 44668 total pagecache pages [ 899.058509][T31352] 0 pages in swap cache [ 899.058517][T31352] Free swap = 124996kB [ 899.058526][T31352] Total swap = 124996kB [ 899.058536][T31352] 2097051 pages RAM [ 899.058545][T31352] 0 pages HighMem/MovableOnly [ 899.058554][T31352] 428782 pages reserved [ 899.058563][T31352] 0 pages cma reserved [ 899.072174][T26706] bond11: (slave bridge6): failed to get link speed/duplex [ 899.287703][ T13] bond11: (slave bridge6): failed to get link speed/duplex [ 899.652125][T26706] bond11: (slave bridge6): failed to get link speed/duplex [ 899.774067][T26706] bond11: (slave bridge6): failed to get link speed/duplex [ 899.911629][T13474] bond11: (slave bridge6): failed to get link speed/duplex [ 900.059654][T31359] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5965'. [ 900.192532][T31358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5967'. [ 900.216106][T31362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5968'. [ 900.338083][T31374] xt_limit: Overflow, try lower: 0/0 [ 900.347464][T31374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5972'. [ 900.365364][T31369] bond19: entered promiscuous mode [ 900.365390][T31369] bond19: entered allmulticast mode [ 900.438502][T31367] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.439194][T31367] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.498030][T31383] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 900.563125][T31367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.593738][T31367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.800813][ T79] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.800892][ T79] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.800934][ T79] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.800975][ T79] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.872442][T31383] syzkaller1: entered promiscuous mode [ 900.872470][T31383] syzkaller1: entered allmulticast mode [ 900.912574][T31381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5973'. [ 901.566380][T31423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5981'. [ 901.725644][T31437] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 901.725677][T31437] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 901.726031][T31437] tipc: Resetting bearer [ 902.079435][T31462] x_tables: ip6_tables: DNPT target: only valid in mangle table, not lo [ 902.168658][T31470] IPVS: Unknown mcast interface: veth0_vlan [ 902.502333][T31486] Bluetooth: hci0: unsupported parameter 5135 [ 902.502358][T31486] Bluetooth: hci0: unsupported parameter 8192 [ 902.502382][T31486] Bluetooth: hci0: unsupported parameter 5135 [ 902.502396][T31486] Bluetooth: hci0: unsupported parameter 8192 [ 903.601098][ T79] net_ratelimit: 27 callbacks suppressed [ 903.601125][ T79] bond11: (slave bridge6): failed to get link speed/duplex [ 903.711806][T13474] bond11: (slave bridge6): failed to get link speed/duplex [ 903.820898][ T79] bond11: (slave bridge6): failed to get link speed/duplex [ 903.931388][T13474] bond11: (slave bridge6): failed to get link speed/duplex [ 904.041875][T13474] bond11: (slave bridge6): failed to get link speed/duplex [ 904.150669][T10517] bond11: (slave bridge6): failed to get link speed/duplex [ 904.262111][T13474] bond11: (slave bridge6): failed to get link speed/duplex [ 904.370833][ T79] bond11: (slave bridge6): failed to get link speed/duplex [ 904.481863][ T79] bond11: (slave bridge6): failed to get link speed/duplex [ 904.590863][T10517] bond11: (slave bridge6): failed to get link speed/duplex [ 905.009763][T31455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.298513][T31557] __nla_validate_parse: 2 callbacks suppressed [ 906.298536][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6005'. [ 906.298567][T31557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6005'. [ 906.348062][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6005'. [ 906.348098][T31557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6005'. [ 906.361778][T31519] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.363053][T31517] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.363156][T31517] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.363256][T31517] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.593503][T31560] netlink: 'syz.0.6006': attribute type 10 has an invalid length. [ 906.596921][T31560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 906.600348][T31560] team0: Port device netdevsim1 added [ 907.363255][T31594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6014'. [ 907.369772][T31587] macvlan0: entered promiscuous mode [ 907.370364][T31587] netlink: 'syz.1.6014': attribute type 1 has an invalid length. [ 907.370395][T31587] netlink: 'syz.1.6014': attribute type 2 has an invalid length. [ 907.969558][T31616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6022'. [ 908.543245][T31633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6029'. [ 908.631919][T31520] net_ratelimit: 27 callbacks suppressed [ 908.631944][T31520] bond11: (slave bridge6): failed to get link speed/duplex [ 908.810931][T31513] bond11: (slave bridge6): failed to get link speed/duplex [ 908.920643][T31520] bond11: (slave bridge6): failed to get link speed/duplex [ 908.929307][T31657] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 908.955620][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6033'. [ 908.955655][T31656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6033'. [ 909.002561][T31659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6034'. [ 909.020268][T31652] can: request_module (can-proto-3) failed. [ 909.052298][ T79] bond11: (slave bridge6): failed to get link speed/duplex [ 909.062450][T31520] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.062624][T31520] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.062678][T31520] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.062757][T31520] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.162247][T31513] bond11: (slave bridge6): failed to get link speed/duplex [ 909.270912][T31520] bond11: (slave bridge6): failed to get link speed/duplex [ 909.401496][T31519] bond11: (slave bridge6): failed to get link speed/duplex [ 909.511408][T31519] bond11: (slave bridge6): failed to get link speed/duplex [ 909.621656][T31513] bond11: (slave bridge6): failed to get link speed/duplex [ 909.654758][T31686] netlink: 'syz.2.6040': attribute type 4 has an invalid length. [ 909.676173][T31682] openvswitch: netlink: Multiple metadata blocks provided [ 910.136670][T31667] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 910.302421][T31705] syzkaller1: entered promiscuous mode [ 910.302448][T31705] syzkaller1: entered allmulticast mode [ 910.808222][T31717] bridge0: port 3(vlan0) entered disabled state [ 910.811910][T31717] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.812151][T31717] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.019597][T31717] bond14: left promiscuous mode [ 912.046504][T31717] geneve2: left promiscuous mode [ 912.152017][T31519] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.152060][T31519] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.152600][T31519] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.152630][T31519] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.152687][T31519] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.152716][T31519] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.300984][T31517] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.301023][T31517] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.276950][T31705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 913.470769][T31752] __nla_validate_parse: 8 callbacks suppressed [ 913.470791][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6055'. [ 913.470807][T31752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6055'. [ 913.517472][T31755] netlink: 'syz.4.6056': attribute type 1 has an invalid length. [ 913.587769][T31755] 8021q: adding VLAN 0 to HW filter on device bond19 [ 913.602144][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6055'. [ 913.602169][T31752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6055'. [ 914.068383][T31789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6064'. [ 914.591324][T31803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6067'. [ 914.703761][T31805] netlink: 'syz.0.6068': attribute type 29 has an invalid length. [ 914.762878][T31807] netlink: 'syz.2.6069': attribute type 6 has an invalid length. [ 914.862628][T31809] FAULT_INJECTION: forcing a failure. [ 914.862628][T31809] name failslab, interval 1, probability 0, space 0, times 0 [ 914.862666][T31809] CPU: 0 UID: 0 PID: 31809 Comm: syz.1.6071 Not tainted syzkaller #0 PREEMPT(full) [ 914.862692][T31809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.862707][T31809] Call Trace: [ 914.862716][T31809] [ 914.862727][T31809] dump_stack_lvl+0xe8/0x150 [ 914.862765][T31809] should_fail_ex+0x410/0x560 [ 914.862795][T31809] should_failslab+0xa8/0x100 [ 914.862825][T31809] __kvmalloc_node_noprof+0x176/0x820 [ 914.862854][T31809] ? bpf_check_cfg+0x13f/0x3840 [ 914.862874][T31809] ? bpf_check_cfg+0x13f/0x3840 [ 914.862902][T31809] bpf_check_cfg+0x13f/0x3840 [ 914.862951][T31809] ? kasan_quarantine_put+0xbb/0x1f0 [ 914.862974][T31809] ? lockdep_hardirqs_on+0x7b/0x110 [ 914.863003][T31809] ? __pfx_bpf_check_cfg+0x10/0x10 [ 914.863024][T31809] ? bpf_prog_calc_tag+0x310/0x370 [ 914.863049][T31809] ? vfree+0x42b/0x490 [ 914.863082][T31809] ? bpf_prog_calc_tag+0x310/0x370 [ 914.863114][T31809] ? check_and_resolve_insns+0x1d54/0x21d0 [ 914.863151][T31809] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 914.863188][T31809] ? add_kfuncs+0x251/0x2e0 [ 914.863218][T31809] bpf_check+0x24b6/0x2e10 [ 914.863255][T31809] ? ktime_get_with_offset+0x93/0x2d0 [ 914.863283][T31809] ? __pfx_bpf_check+0x10/0x10 [ 914.863311][T31809] ? bpf_obj_name_cpy+0x194/0x1e0 [ 914.863347][T31809] bpf_prog_load+0x14d6/0x1c20 [ 914.863387][T31809] ? __pfx_bpf_prog_load+0x10/0x10 [ 914.863439][T31809] __sys_bpf+0xd0d/0xd90 [ 914.863473][T31809] ? __pfx___sys_bpf+0x10/0x10 [ 914.863511][T31809] ? __fget_files+0x2a/0x420 [ 914.863560][T31809] ? ksys_write+0x242/0x270 [ 914.863596][T31809] ? __pfx_ksys_write+0x10/0x10 [ 914.863635][T31809] __x64_sys_bpf+0xba/0xd0 [ 914.863661][T31809] do_syscall_64+0x166/0x520 [ 914.863686][T31809] ? trace_irq_disable+0x3b/0x140 [ 914.863708][T31809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.863732][T31809] ? clear_bhb_loop+0x70/0xc0 [ 914.863760][T31809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.863782][T31809] RIP: 0033:0x7f74bc39e159 [ 914.863803][T31809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.863823][T31809] RSP: 002b:00007f74bd2a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 914.863848][T31809] RAX: ffffffffffffffda RBX: 00007f74bc625fa0 RCX: 00007f74bc39e159 [ 914.863866][T31809] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 914.863881][T31809] RBP: 00007f74bd2a4090 R08: 0000000000000000 R09: 0000000000000000 [ 914.863896][T31809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.863911][T31809] R13: 00007f74bc626038 R14: 00007f74bc625fa0 R15: 00007ffd95d136b8 [ 914.863947][T31809] [ 915.173517][T31818] bond18: (slave syz_tun): Removing an active aggregator [ 915.178565][T31818] bond18: (slave syz_tun): Releasing backup interface [ 915.199129][T31818] team0: Port device dummy0 removed [ 915.207861][T31818] bridge_slave_0: left allmulticast mode [ 915.207887][T31818] bridge_slave_0: left promiscuous mode [ 915.208233][T31818] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.239828][T31818] bridge_slave_1: left allmulticast mode [ 915.240161][T31823] netlink: 'syz.0.6074': attribute type 1 has an invalid length. [ 915.240272][T31818] bridge_slave_1: left promiscuous mode [ 915.240573][T31818] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.245481][T31826] netlink: 'syz.0.6074': attribute type 1 has an invalid length. [ 915.278535][T31818] vlan0: left promiscuous mode [ 915.278557][T31818] geneve0: left promiscuous mode [ 915.306174][T31818] team0: Port device team_slave_1 removed [ 915.308415][T31818] net_ratelimit: 10 callbacks suppressed [ 915.308435][T31818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 915.367188][T31834] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6070'. [ 915.387723][T31823] bond2: entered promiscuous mode [ 915.389821][T31823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 915.397161][T31824] team0: Mode changed to "broadcast" [ 915.446383][T31833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 915.446796][T31833] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 915.446817][T31833] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 915.478857][T31833] bond2: (slave ip6gre1): making interface the new active one [ 915.478881][T31833] ip6gre1: entered promiscuous mode [ 915.497243][T31833] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 915.746988][T31862] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6072'. [ 915.747019][T31862] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6072'. [ 915.774035][T31862] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 915.983906][T31873] netlink: 'syz.2.6083': attribute type 13 has an invalid length. [ 915.984898][T31870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6082'. [ 916.027882][T31873] netlink: 'syz.2.6083': attribute type 13 has an invalid length. [ 916.160617][T31520] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.160768][ T79] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.160810][ T79] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.160848][ T79] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.303177][ T7755] hid-generic 0005:04F3:0009.0003: item fetching failed at offset 0/1 [ 916.316106][ T7755] hid-generic 0005:04F3:0009.0003: probe with driver hid-generic failed with error -22 [ 916.461798][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 916.466132][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 916.469143][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 916.478291][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 916.491249][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 916.552454][T31890] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 916.862517][T31903] netlink: 'syz.4.6089': attribute type 2 has an invalid length. [ 917.007667][T31909] netlink: 'syz.0.6091': attribute type 23 has an invalid length. [ 917.164550][T31909] tipc: Invalid UDP bearer configuration [ 917.164598][T31909] tipc: Enabling of bearer rejected, failed to enable media [ 918.506971][T31984] __nla_validate_parse: 6 callbacks suppressed [ 918.506994][T31984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'. [ 918.507013][T31984] netlink: 356 bytes leftover after parsing attributes in process `syz.4.6106'. [ 918.509246][T31981] syzkaller0: entered promiscuous mode [ 918.509270][T31981] syzkaller0: entered allmulticast mode [ 918.589063][T31888] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.589238][T31888] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.589374][T31888] bridge_slave_0: entered allmulticast mode [ 918.607071][T31888] bridge_slave_0: entered promiscuous mode [ 918.614275][ T5626] Bluetooth: hci5: command tx timeout [ 918.632625][T31888] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.633606][T31888] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.633749][T31888] bridge_slave_1: entered allmulticast mode [ 918.636500][T31888] bridge_slave_1: entered promiscuous mode [ 918.667686][T31987] x_tables: duplicate underflow at hook 1 [ 918.722566][T31888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.725877][T31888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.796348][T31888] team0: Port device team_slave_0 added [ 918.799404][T31888] team0: Port device team_slave_1 added [ 918.871191][T31888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.871212][T31888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.871241][T31888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.873207][T31888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.873222][T31888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.873251][T31888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.020547][T31888] hsr_slave_0: entered promiscuous mode [ 919.021645][T31888] hsr_slave_1: entered promiscuous mode [ 919.022363][T31888] debugfs: 'hsr0' already exists in 'hsr' [ 919.022384][T31888] Cannot create hsr debugfs directory [ 919.242120][T32005] netlink: 'syz.1.6114': attribute type 10 has an invalid length. [ 919.265589][T32002] bridge_slave_0: entered promiscuous mode [ 919.345894][T32009] Cannot find add_set index 34 as target [ 919.363952][T32005] team0: Device veth0_vlan failed to register rx_handler [ 919.697369][T31888] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.781534][T32022] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 919.936222][T31888] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.034874][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6122'. [ 920.086086][T31888] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.170088][T32048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6125'. [ 920.202388][T31888] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.261831][T32042] tipc: Resetting bearer [ 920.404441][T32054] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6127'. [ 920.691589][ T5626] Bluetooth: hci5: command tx timeout [ 920.942977][T32074] netlink: 'syz.3.6131': attribute type 13 has an invalid length. [ 920.957389][T32076] netlink: 'syz.3.6131': attribute type 13 has an invalid length. [ 921.143885][T31888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 921.165988][T31888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 921.168352][T31888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 921.214525][T32090] netlink: 'syz.4.6133': attribute type 10 has an invalid length. [ 921.226685][T31888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 921.232184][T31888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 921.283443][T31888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 921.315331][T32090] bridge0: port 1(team0) entered disabled state [ 921.372382][T32090] team0 (unregistering): left allmulticast mode [ 921.372435][T32090] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 921.372478][T32090] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 921.372620][T32090] bridge0: port 1(team0) entered disabled state [ 921.425645][T32090] team0 (unregistering): Port device bridge2 removed [ 921.477745][T32090] team0 (unregistering): Port device netdevsim1 removed [ 921.515618][T31888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 921.537224][T31888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 921.538715][T31517] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.538751][T31517] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 921.944984][T31888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.016297][T31888] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.028969][T32125] tc_dump_action: action bad kind [ 922.045451][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.045559][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.065275][T32125] tc_dump_action: action bad kind [ 922.090015][T31519] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.090131][T31519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.125708][T32129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6141'. [ 922.200392][T31519] IPVS: starting estimator thread 0... [ 922.256767][T32132] IPVS: nq: FWM 3 0x00000003 - no destination available [ 922.292925][T32134] IPVS: using max 30 ests per chain, 72000 per kthread [ 922.387516][T32139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6142'. [ 922.388667][T32144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6144'. [ 922.548662][T32141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.550346][T32141] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.584590][T32154] netlink: 'syz.1.6146': attribute type 2 has an invalid length. [ 922.610363][T32141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.704240][T32141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.706679][T32141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.735273][T32141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 922.735300][T32141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 922.741485][T32141] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 922.759363][T32149] netlink: 'syz.0.6145': attribute type 3 has an invalid length. [ 922.760043][T32149] netlink: 'syz.0.6145': attribute type 3 has an invalid length. [ 922.780775][ T5626] Bluetooth: hci5: command tx timeout [ 922.812227][T32152] bond12: entered allmulticast mode [ 922.813769][T32146] bond12: left allmulticast mode [ 922.846626][T31521] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.846741][T31521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.877377][T31521] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.877485][T31521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.923868][T32165] xt_hashlimit: size too large, truncated to 1048576 [ 922.923891][T32165] xt_hashlimit: invalid interval [ 923.265373][T32178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6149'. [ 923.325550][T32180] FAULT_INJECTION: forcing a failure. [ 923.325550][T32180] name failslab, interval 1, probability 0, space 0, times 0 [ 923.325587][T32180] CPU: 0 UID: 0 PID: 32180 Comm: syz.0.6150 Not tainted syzkaller #0 PREEMPT(full) [ 923.325613][T32180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 923.325627][T32180] Call Trace: [ 923.325636][T32180] [ 923.325647][T32180] dump_stack_lvl+0xe8/0x150 [ 923.325688][T32180] should_fail_ex+0x410/0x560 [ 923.325720][T32180] should_failslab+0xa8/0x100 [ 923.325750][T32180] __kvmalloc_node_noprof+0x176/0x820 [ 923.325778][T32180] ? __kvmalloc_node_noprof+0x345/0x820 [ 923.325802][T32180] ? bpf_compute_postorder+0xda/0x970 [ 923.325824][T32180] ? bpf_compute_postorder+0xda/0x970 [ 923.325854][T32180] bpf_compute_postorder+0xda/0x970 [ 923.325878][T32180] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 923.325908][T32180] ? add_kfuncs+0x251/0x2e0 [ 923.325938][T32180] bpf_check+0x24d6/0x2e10 [ 923.325975][T32180] ? ktime_get_with_offset+0x93/0x2d0 [ 923.326004][T32180] ? __pfx_bpf_check+0x10/0x10 [ 923.326032][T32180] ? bpf_obj_name_cpy+0x194/0x1e0 [ 923.326068][T32180] bpf_prog_load+0x14d6/0x1c20 [ 923.326108][T32180] ? __pfx_bpf_prog_load+0x10/0x10 [ 923.326162][T32180] __sys_bpf+0xd0d/0xd90 [ 923.326203][T32180] ? __pfx___sys_bpf+0x10/0x10 [ 923.326260][T32180] ? __fget_files+0x2a/0x420 [ 923.326311][T32180] ? ksys_write+0x242/0x270 [ 923.326351][T32180] ? __pfx_ksys_write+0x10/0x10 [ 923.326392][T32180] __x64_sys_bpf+0xba/0xd0 [ 923.326428][T32180] do_syscall_64+0x166/0x520 [ 923.326453][T32180] ? trace_irq_disable+0x3b/0x140 [ 923.326476][T32180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.326501][T32180] ? clear_bhb_loop+0x70/0xc0 [ 923.326530][T32180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.326555][T32180] RIP: 0033:0x7f5640b9e159 [ 923.326576][T32180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.326596][T32180] RSP: 002b:00007f5641a75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 923.326622][T32180] RAX: ffffffffffffffda RBX: 00007f5640e25fa0 RCX: 00007f5640b9e159 [ 923.326639][T32180] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 923.326655][T32180] RBP: 00007f5641a75090 R08: 0000000000000000 R09: 0000000000000000 [ 923.326671][T32180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 923.326685][T32180] R13: 00007f5640e26038 R14: 00007f5640e25fa0 R15: 00007ffec501d1a8 [ 923.326722][T32180] [ 923.803454][T32186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6153'. [ 923.855253][T32186] bond20: entered promiscuous mode [ 923.855697][T32186] 8021q: adding VLAN 0 to HW filter on device bond20 [ 923.918148][T32187] 8021q: adding VLAN 0 to HW filter on device bond20 [ 923.934518][T32187] bond20: (slave gre2): The slave device specified does not support setting the MAC address [ 923.935548][T32187] bond20: (slave gre2): Error -95 calling set_mac_address [ 923.976182][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.075325][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.079088][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.079800][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.116851][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.117849][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.118802][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.120371][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.148113][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.168763][T32186] netlink: 'syz.4.6153': attribute type 11 has an invalid length. [ 924.264644][T32206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6155'. [ 924.264780][T32206] openvswitch: netlink: Flow key attr not present in new flow. [ 924.324628][T31888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.420283][T32208] FAULT_INJECTION: forcing a failure. [ 924.420283][T32208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.420320][T32208] CPU: 1 UID: 0 PID: 32208 Comm: syz.1.6157 Not tainted syzkaller #0 PREEMPT(full) [ 924.420346][T32208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 924.420361][T32208] Call Trace: [ 924.420370][T32208] [ 924.420381][T32208] dump_stack_lvl+0xe8/0x150 [ 924.420419][T32208] should_fail_ex+0x410/0x560 [ 924.420450][T32208] _copy_from_user+0x2d/0xb0 [ 924.420484][T32208] do_arpt_set_ctl+0x65e/0xb50 [ 924.420610][T32208] ? trace_contention_end+0x3d/0x140 [ 924.420649][T32208] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 924.420680][T32208] ? nf_setsockopt+0x221/0x290 [ 924.420735][T32208] ? __mutex_unlock_slowpath+0x731/0x900 [ 924.420788][T32208] nf_setsockopt+0x26f/0x290 [ 924.420825][T32208] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 924.420879][T32208] smc_setsockopt+0x232/0xb00 [ 924.420938][T32208] ? __pfx_smc_setsockopt+0x10/0x10 [ 924.420964][T32208] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 924.420992][T32208] ? __pfx_smc_setsockopt+0x10/0x10 [ 924.421016][T32208] do_sock_setsockopt+0x17c/0x1b0 [ 924.421062][T32208] __x64_sys_setsockopt+0x13d/0x1b0 [ 924.421094][T32208] do_syscall_64+0x166/0x520 [ 924.421116][T32208] ? trace_irq_disable+0x3b/0x140 [ 924.421137][T32208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.421160][T32208] ? clear_bhb_loop+0x70/0xc0 [ 924.421186][T32208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.421208][T32208] RIP: 0033:0x7f74bc39e159 [ 924.421227][T32208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.421246][T32208] RSP: 002b:00007f74bd2a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 924.421269][T32208] RAX: ffffffffffffffda RBX: 00007f74bc625fa0 RCX: 00007f74bc39e159 [ 924.421286][T32208] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 924.421298][T32208] RBP: 00007f74bd2a4090 R08: 0000000000000430 R09: 0000000000000000 [ 924.421311][T32208] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.421324][T32208] R13: 00007f74bc626038 R14: 00007f74bc625fa0 R15: 00007ffd95d136b8 [ 924.421357][T32208] [ 924.698483][T31888] veth0_vlan: entered promiscuous mode [ 924.779191][T32215] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 924.787183][T31888] veth1_vlan: entered promiscuous mode [ 924.798680][T32217] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 924.851847][ T5626] Bluetooth: hci5: command tx timeout [ 924.898448][T31888] veth0_macvtap: entered promiscuous mode [ 924.918247][T31888] veth1_macvtap: entered promiscuous mode [ 924.941527][T31888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.959044][T31888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.001748][T31515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.002151][T31515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.002287][T31515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.002401][T31515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.518442][T31515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.518465][T31515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.740427][T31521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.740450][T31521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.786995][T32225] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 925.918243][T32243] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6166'. [ 926.029250][T32247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 926.062645][T32247] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 926.696542][T32279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6175'. [ 926.728302][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 926.739465][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 926.747470][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 926.759682][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 926.774837][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 926.931430][ T5626] Bluetooth: hci0: command 0x0401 tx timeout [ 926.976454][T32288] vlan2: entered allmulticast mode [ 926.976478][T32288] bridge5: entered allmulticast mode [ 926.998108][T32290] bridge5: port 1(erspan0) entered blocking state [ 926.998216][T32290] bridge5: port 1(erspan0) entered disabled state [ 926.998412][T32290] erspan0: entered allmulticast mode [ 927.040543][T32290] bridge5: port 1(erspan0) entered blocking state [ 927.040663][T32290] bridge5: port 1(erspan0) entered forwarding state [ 927.257114][T32297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6178'. [ 927.333262][T32299] openvswitch: netlink: IP tunnel dst address not specified [ 927.375287][T32299] xt_policy: output policy not valid in PREROUTING and INPUT [ 927.463112][T32307] Unsupported ieee802154 address type: 0 [ 927.495478][T32303] netlink: 'syz.3.6177': attribute type 21 has an invalid length. [ 927.495584][T32303] netlink: 'syz.3.6177': attribute type 1 has an invalid length. [ 927.495601][T32303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6177'. [ 927.740055][T32320] netlink: 'syz.1.6182': attribute type 16 has an invalid length. [ 927.740080][T32320] netlink: 'syz.1.6182': attribute type 3 has an invalid length. [ 927.740094][T32320] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.6182'. [ 928.002736][T32331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6184'. [ 928.004764][T32334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6185'. [ 928.168744][T32340] IPVS: ip_vs_edit_dest(): server weight less than zero [ 928.169003][T31519] IPVS: starting estimator thread 0... [ 928.282168][T32341] IPVS: using max 26 ests per chain, 62400 per kthread [ 928.507296][T32284] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.508996][T32284] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.509136][T32284] bridge_slave_0: entered allmulticast mode [ 928.540011][T32284] bridge_slave_0: entered promiscuous mode [ 928.559604][T32284] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.559714][T32284] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.559849][T32284] bridge_slave_1: entered allmulticast mode [ 928.602260][T32284] bridge_slave_1: entered promiscuous mode [ 928.792212][T32284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.817932][T32284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.851037][ T5626] Bluetooth: hci1: command tx timeout [ 928.918678][T32284] team0: Port device team_slave_0 added [ 928.932673][T32284] team0: Port device team_slave_1 added [ 928.969509][T32284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.969528][T32284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.969558][T32284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.998185][T32284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.998227][T32284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.998307][T32284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.195006][T32284] hsr_slave_0: entered promiscuous mode [ 929.196100][T32284] hsr_slave_1: entered promiscuous mode [ 929.196871][T32284] debugfs: 'hsr0' already exists in 'hsr' [ 929.196892][T32284] Cannot create hsr debugfs directory [ 929.487729][T32383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6196'. [ 929.487768][T32383] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6196'. [ 929.663012][T32388] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6198'. [ 929.663541][T32284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.663573][T32284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 929.663598][T32284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.663623][T32284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49083 - 0 [ 929.853513][T32284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.853555][T32284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 929.853586][T32284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.853617][T32284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49083 - 0 [ 929.968489][T32397] syzkaller1: entered allmulticast mode [ 929.969146][T32400] ip_tables: iptables: counters copy to user failed while replacing table [ 929.983090][T32401] ip_tables: iptables: counters copy to user failed while replacing table [ 930.022298][T32403] netlink: 'syz.0.6202': attribute type 62 has an invalid length. [ 930.044239][T32284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.044267][T32284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 930.044288][T32284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.044309][T32284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49083 - 0 [ 930.098072][T32404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6202'. [ 930.136333][T32400] syzkaller0: left promiscuous mode [ 930.136363][T32400] syzkaller0: left allmulticast mode [ 930.178114][T32405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6202'. [ 930.245126][T32284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.245172][T32284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 930.245204][T32284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.245234][T32284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49083 - 0 [ 930.302704][T32413] netlink: 'syz.3.6203': attribute type 7 has an invalid length. [ 930.302723][T32413] netlink: 'syz.3.6203': attribute type 3 has an invalid length. [ 930.302736][T32413] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6203'. [ 930.731276][T31521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.815849][T32435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.930752][ T5626] Bluetooth: hci1: command tx timeout [ 931.022820][T32284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 931.026287][T32284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.064681][T32284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 931.068552][T32284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 931.069497][T32284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 931.096194][T32284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 931.112011][T32284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 931.117820][T32284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 931.242514][T32435] team0: Port device netdevsim1 removed [ 931.425487][T32284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.455723][T32284] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.468776][T32464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'. [ 931.480337][T31519] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.480426][T31519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.521487][T31515] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.521597][T31515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.579259][ T1309] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.799992][T32470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6213'. [ 932.035777][T32476] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6215'. [ 932.035886][T32476] 0·: renamed from hsr0 (while UP) [ 932.040127][T32476] 0·: entered allmulticast mode [ 932.040149][T32476] hsr_slave_0: entered allmulticast mode [ 932.040170][T32476] hsr_slave_1: entered allmulticast mode [ 932.075103][T32476] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 932.319563][T32484] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.320239][T32484] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.349855][T32484] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.349987][T32484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.350355][T32484] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.350532][T32484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.386372][T32484] team0: Port device bridge0 added [ 932.471492][T32485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6216'. [ 932.627855][T32482] bridge5: port 1(erspan0) entered disabled state [ 932.685961][T32499] netlink: 'syz.2.6221': attribute type 1 has an invalid length. [ 933.011299][ T5626] Bluetooth: hci1: command tx timeout [ 933.366041][T32482] tipc: Resetting bearer [ 933.514811][T31519] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.514896][T31519] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.514958][T31519] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.514999][T31519] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.520728][T31516] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.520763][T31516] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.522766][T10531] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.522852][T10531] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.522957][T10531] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.523035][T10531] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.523124][T10531] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.523195][T10531] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.786541][T32284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.822718][T32516] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 933.822748][T32516] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 933.824372][T32516] tipc: Resetting bearer [ 934.337263][T32284] veth0_vlan: entered promiscuous mode [ 934.369978][T32284] veth1_vlan: entered promiscuous mode [ 934.448756][T32284] veth0_macvtap: entered promiscuous mode [ 934.473510][T32284] veth1_macvtap: entered promiscuous mode [ 934.516932][T32284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.551103][T32284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.616920][T32551] netlink: 'syz.2.6232': attribute type 2 has an invalid length. [ 934.641452][T31521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.641789][T31521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.669145][T31521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.669194][T31521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.760429][T31513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.760453][T31513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.836356][T31521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.836380][T31521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.016051][T32556] __nla_validate_parse: 5 callbacks suppressed [ 935.016073][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.016280][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.016492][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.016698][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.016895][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.017132][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.017328][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.023101][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.023704][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.026175][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6234'. [ 935.080300][T32553] netlink: 'syz.0.6234': attribute type 8 has an invalid length. [ 935.091312][ T5626] Bluetooth: hci1: command tx timeout [ 935.399647][T32570] ip6t_hbh: Not strict - not implemented [ 935.412040][T32570] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 935.723252][T32578] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20000 [ 936.165501][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 936.179760][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 936.197971][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 936.199130][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 936.212167][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 937.219504][T32621] ip_tables: iptables: counters copy to user failed while replacing table [ 937.421572][T32626] netlink: 'syz.0.6254': attribute type 1 has an invalid length. [ 937.486093][T32626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 937.808467][T32643] bond4: option updelay: invalid value (18446744073709518847) [ 937.808498][T32643] bond4: option updelay: allowed values 0 - 2147483647 [ 937.833117][T32643] bond4 (unregistering): Released all slaves [ 937.959143][T32633] x_tables: duplicate underflow at hook 3 [ 938.291322][ T5626] Bluetooth: hci2: command tx timeout [ 938.297639][T32591] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.297826][T32591] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.298597][T32591] bridge_slave_0: entered allmulticast mode [ 938.300666][T32591] bridge_slave_0: entered promiscuous mode [ 938.307118][T32591] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.307558][T32591] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.307785][T32591] bridge_slave_1: entered allmulticast mode [ 938.312995][T32591] bridge_slave_1: entered promiscuous mode [ 938.406216][T32591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.412444][T32591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.540327][T32591] team0: Port device team_slave_0 added [ 938.574526][T32591] team0: Port device team_slave_1 added [ 938.639719][T32591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.639740][T32591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.639769][T32591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.645154][T32591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.645194][T32591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.645272][T32591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.736193][T32662] pim6reg: entered allmulticast mode [ 938.839160][T32591] hsr_slave_0: entered promiscuous mode [ 938.855778][T32591] hsr_slave_1: entered promiscuous mode [ 938.859887][T32591] debugfs: 'hsr0' already exists in 'hsr' [ 938.859909][T32591] Cannot create hsr debugfs directory [ 939.320443][T32678] tipc: Enabling of bearer rejected, failed to enable media [ 939.406863][T32677] netlink: 'syz.0.6264': attribute type 1 has an invalid length. [ 939.548135][T32677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 939.618708][T32681] bond4: (slave geneve2): making interface the new active one [ 939.636944][T32681] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 939.854380][T10531] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.907813][T32693] tipc: Enabled bearer , priority 0 [ 939.920259][T10531] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.920784][T31515] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.920828][T31515] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.241022][T32591] bond0: (slave netdevsim1): Releasing backup interface [ 940.374413][ T5626] Bluetooth: hci2: command tx timeout [ 940.453308][T32717] __nla_validate_parse: 33 callbacks suppressed [ 940.453329][T32717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6274'. [ 940.541830][T32717] bond19: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 940.546062][T32717] bond19 (unregistering): Released all slaves [ 940.888582][T32731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6276'. [ 941.229409][T32741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6277'. [ 941.263660][T32591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 941.283168][T32591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 941.312734][T32591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 941.320455][T32591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 941.346524][T32591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 941.361826][T32591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 941.362914][T32591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 941.368053][T32591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 941.728500][T32763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6282'. [ 941.822012][ T304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6282'. [ 941.910181][T32755] bond19: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 941.922643][T32755] bond19 (unregistering): Released all slaves [ 942.109132][ T316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6284'. [ 942.109282][T32591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.156137][T32591] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.184876][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.185019][T10531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.206907][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.206983][T10531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.451302][ T5626] Bluetooth: hci2: command tx timeout [ 942.684943][ T335] netlink: 'syz.3.6290': attribute type 21 has an invalid length. [ 942.684966][ T335] netlink: 'syz.3.6290': attribute type 22 has an invalid length. [ 942.684980][ T335] netlink: 'syz.3.6290': attribute type 23 has an invalid length. [ 942.684995][ T335] netlink: 'syz.3.6290': attribute type 25 has an invalid length. [ 942.685009][ T335] netlink: 'syz.3.6290': attribute type 26 has an invalid length. [ 942.685024][ T335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6290'. [ 943.269191][ T363] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 943.286111][ T363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6296'. [ 943.288867][ T363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6296'. [ 943.576585][ T374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6298'. [ 943.608820][T32591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.636943][ T378] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 943.708494][ T31] audit: type=1804 audit(1789620055.589:30): pid=374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6298" name="/newroot/85/cgroup.controllers" dev="tmpfs" ino=454 res=1 errno=0 [ 943.708559][ T31] audit: type=1800 audit(1789620055.589:31): pid=374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6298" name="cgroup.controllers" dev="tmpfs" ino=454 res=0 errno=0 [ 943.710433][ T381] ip_tables: iptables: counters copy to user failed while replacing table [ 943.784723][T32591] veth0_vlan: entered promiscuous mode [ 943.807770][ T31] audit: type=1804 audit(1789620055.689:32): pid=375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6298" name="/newroot/85/cgroup.controllers" dev="tmpfs" ino=454 res=1 errno=0 [ 943.838585][T32591] veth1_vlan: entered promiscuous mode [ 943.998119][T32591] veth0_macvtap: entered promiscuous mode [ 944.041668][T32591] veth1_macvtap: entered promiscuous mode [ 944.143710][T32591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.167856][T32591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.215120][T10531] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.215574][T10531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.215899][T10531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.386055][T31517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.386075][T31517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.474538][T31513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.474562][T31513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.489546][T31519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.530973][ T5626] Bluetooth: hci2: command tx timeout [ 944.696950][ T406] netlink: 'syz.4.6305': attribute type 1 has an invalid length. [ 944.997499][ T424] digital: digital_start_poll: Unknown protocol [ 945.426099][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.444923][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.445895][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.446997][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.447686][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 945.669861][ T469] __nla_validate_parse: 16 callbacks suppressed [ 945.669885][ T469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6318'. [ 946.418822][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.418954][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.419099][ T451] bridge_slave_0: entered allmulticast mode [ 946.421050][ T451] bridge_slave_0: entered promiscuous mode [ 946.429393][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.429814][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.431184][ T451] bridge_slave_1: entered allmulticast mode [ 946.436657][ T451] bridge_slave_1: entered promiscuous mode [ 946.493182][ T451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.496185][ T451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.537696][ T451] team0: Port device team_slave_0 added [ 946.542455][ T451] team0: Port device team_slave_1 added [ 946.575975][ T451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.575993][ T451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.576021][ T451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.578270][ T451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.578289][ T451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.578309][ T451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.692178][ T451] hsr_slave_0: entered promiscuous mode [ 946.693120][ T451] hsr_slave_1: entered promiscuous mode [ 946.693681][ T451] debugfs: 'hsr0' already exists in 'hsr' [ 946.693703][ T451] Cannot create hsr debugfs directory [ 946.849879][ T451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.849908][ T451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 946.970059][ T451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.970102][ T451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 947.066344][ T451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.066386][ T451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 947.572775][ T5626] Bluetooth: hci4: command tx timeout [ 947.930726][ T424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 947.998024][ T451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 948.050289][ T451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 948.058117][ T451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 948.127286][ T451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 948.128192][ T451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 948.150216][ T451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 948.163453][ T451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 948.189151][ T451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 948.326046][ T451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.329842][ T510] netlink: 'syz.0.6322': attribute type 4 has an invalid length. [ 948.410129][ T451] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.449815][T31515] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.449936][T31515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.500502][T31513] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.500617][T31513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.530337][ T512] netlink: 'syz.2.6324': attribute type 1 has an invalid length. [ 948.752693][ T514] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 948.790993][ T517] netlink: 'syz.1.6325': attribute type 7 has an invalid length. [ 948.791016][ T517] netlink: 'syz.1.6325': attribute type 3 has an invalid length. [ 948.791031][ T517] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6325'. [ 948.864476][ T515] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 949.201131][ T522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6326'. [ 949.507884][ T528] netlink: 'syz.4.6328': attribute type 12 has an invalid length. [ 949.507911][ T528] netlink: 'syz.4.6328': attribute type 29 has an invalid length. [ 949.507927][ T528] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6328'. [ 949.507964][ T528] netlink: 'syz.4.6328': attribute type 1 has an invalid length. [ 949.507980][ T528] netlink: 'syz.4.6328': attribute type 2 has an invalid length. [ 949.655537][ T5626] Bluetooth: hci4: command tx timeout [ 949.904422][ T546] netlink: zone id is out of range [ 949.937646][ T549] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6332'. [ 950.062711][ T555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6331'. [ 950.342316][ T563] ip_tables: iptables: counters copy to user failed while replacing table [ 950.398140][ T451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.607283][ T451] veth0_vlan: entered promiscuous mode [ 950.637792][ T451] veth1_vlan: entered promiscuous mode [ 950.845791][ T451] veth0_macvtap: entered promiscuous mode [ 950.852514][ T451] veth1_macvtap: entered promiscuous mode [ 950.888318][ T451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.923828][ T451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.967252][ T575] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6341'. [ 950.986075][ T575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6341'. [ 950.986104][ T575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6341'. [ 950.986120][ T575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6341'. [ 950.990823][T31517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.993576][T31515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.009857][T31517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.013442][T31517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.027253][ T575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6341'. [ 951.286286][ T583] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 951.353912][T31520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.353937][T31520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.602949][T31520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.602974][T31520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.731924][ T5626] Bluetooth: hci4: command tx timeout [ 951.868362][ T608] batadv_slave_1: entered promiscuous mode [ 951.878253][ T608] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6312'. [ 951.901673][ T607] batadv_slave_1: left promiscuous mode [ 952.243198][ T625] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 952.322241][ T629] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 952.384725][ T633] netlink: 'syz.4.6352': attribute type 9 has an invalid length. [ 952.539238][ T623] x_tables: duplicate underflow at hook 1 [ 952.684862][ T649] netlink: 'syz.2.6355': attribute type 1 has an invalid length. [ 952.725598][ T649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 953.517122][ T678] netlink: 'syz.0.6361': attribute type 4 has an invalid length. [ 953.531846][ T678] netlink: 'syz.0.6361': attribute type 4 has an invalid length. [ 953.716077][ T684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6362'. [ 953.732263][T10042] dummy0: entered promiscuous mode [ 953.732716][ T684] macvtap1: entered allmulticast mode [ 953.732736][ T684] dummy0: entered allmulticast mode [ 953.735257][ T684] dummy0: left allmulticast mode [ 953.777475][T10042] dummy0: left promiscuous mode [ 953.812066][ T5626] Bluetooth: hci4: command tx timeout [ 954.921640][ T610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 954.922654][ T647] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6355'. [ 955.290156][ T712] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6371'. [ 955.388291][ T698] syzkaller0: entered promiscuous mode [ 955.388318][ T698] syzkaller0: entered allmulticast mode [ 956.538152][ T740] FAULT_INJECTION: forcing a failure. [ 956.538152][ T740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.538187][ T740] CPU: 0 UID: 0 PID: 740 Comm: syz.3.6374 Not tainted syzkaller #0 PREEMPT(full) [ 956.538211][ T740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.538224][ T740] Call Trace: [ 956.538233][ T740] [ 956.538242][ T740] dump_stack_lvl+0xe8/0x150 [ 956.538277][ T740] should_fail_ex+0x410/0x560 [ 956.538305][ T740] _copy_to_iter+0x1e4/0x1810 [ 956.538333][ T740] ? do_raw_spin_lock+0x12b/0x2f0 [ 956.538368][ T740] ? __pfx__copy_to_iter+0x10/0x10 [ 956.538391][ T740] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 956.538426][ T740] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 956.538458][ T740] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 956.538561][ T740] __skb_datagram_iter+0xf8/0x980 [ 956.538587][ T740] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 956.538609][ T740] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 956.538648][ T740] skb_copy_datagram_iter+0xb5/0x240 [ 956.538684][ T740] packet_recvmsg+0x70c/0x1690 [ 956.538750][ T740] ? aa_file_perm+0x18b/0x15f0 [ 956.538812][ T740] ? __pfx_packet_recvmsg+0x10/0x10 [ 956.538843][ T740] ? __pfx_aa_sk_perm+0x10/0x10 [ 956.538895][ T740] ? aa_sock_msg_perm+0x144/0x210 [ 956.538927][ T740] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 956.538954][ T740] ? security_socket_recvmsg+0x7e/0x2c0 [ 956.539033][ T740] ? __pfx_packet_recvmsg+0x10/0x10 [ 956.539057][ T740] sock_recvmsg+0x196/0x1e0 [ 956.539120][ T740] sock_read_iter+0x22a/0x2f0 [ 956.539156][ T740] ? __pfx_sock_read_iter+0x10/0x10 [ 956.539197][ T740] ? bpf_lsm_file_permission+0x9/0x20 [ 956.539227][ T740] ? security_file_permission+0x75/0x260 [ 956.539272][ T740] vfs_read+0x595/0xa80 [ 956.539316][ T740] ? __pfx_vfs_read+0x10/0x10 [ 956.539360][ T740] ? __fget_files+0x2a/0x420 [ 956.539400][ T740] ksys_read+0x150/0x270 [ 956.539436][ T740] ? __pfx_ksys_read+0x10/0x10 [ 956.539482][ T740] do_syscall_64+0x166/0x520 [ 956.539506][ T740] ? trace_irq_disable+0x3b/0x140 [ 956.539528][ T740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.539552][ T740] ? clear_bhb_loop+0x70/0xc0 [ 956.539580][ T740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.539603][ T740] RIP: 0033:0x7f3343f9e159 [ 956.539625][ T740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.539644][ T740] RSP: 002b:00007f3344e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 956.539669][ T740] RAX: ffffffffffffffda RBX: 00007f3344225fa0 RCX: 00007f3343f9e159 [ 956.539689][ T740] RDX: 00000000000000aa RSI: 0000200000000000 RDI: 0000000000000003 [ 956.539704][ T740] RBP: 00007f3344e86090 R08: 0000000000000000 R09: 0000000000000000 [ 956.539719][ T740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.539733][ T740] R13: 00007f3344226038 R14: 00007f3344225fa0 R15: 00007ffc7823e8e8 [ 956.539769][ T740] [ 957.028702][ T745] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6377'. [ 957.098781][ T749] netlink: 'syz.3.6377': attribute type 1 has an invalid length. [ 957.927880][ T741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6375'. [ 957.927908][ T741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6375'. [ 960.493484][ T797] ip_tables: iptables: counters copy to user failed while replacing table [ 960.582063][ T802] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 960.764616][ T806] syzkaller1: entered promiscuous mode [ 960.764644][ T806] syzkaller1: entered allmulticast mode [ 961.159945][ T816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6390'. [ 961.182658][ T816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6390'. [ 961.186058][ T816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6390'. [ 961.197128][ T816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6390'. [ 961.222320][ T816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6390'. [ 961.251115][ T816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6390'. [ 961.274865][ T816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6390'. [ 961.835126][ T835] netlink: 'syz.1.6395': attribute type 1 has an invalid length. [ 961.907005][ T841] netlink: 'syz.3.6398': attribute type 3 has an invalid length. [ 961.912430][ T841] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 962.000830][T31515] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.000947][T31515] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.001551][T31515] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.001591][T31515] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.544231][ T856] x_tables: ip_tables: ah match: only valid for protocol 51 [ 962.565682][ T856] ip6gretap1: entered allmulticast mode [ 962.569478][ T856] batman_adv: batadv0: Adding interface: ip6gretap1 [ 962.569496][ T856] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.569531][ T856] batman_adv: batadv0: Interface activated: ip6gretap1 [ 963.287262][ T833] __nla_validate_parse: 11 callbacks suppressed [ 963.287286][ T833] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6395'. [ 963.764498][ T870] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.765257][ T870] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.002301][ T870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.020879][ T870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.483032][ T895] netlink: 3784 bytes leftover after parsing attributes in process `syz.0.6413'. [ 964.604942][ T79] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.604982][ T79] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.605535][ T79] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.605565][ T79] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.605627][ T79] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.605656][ T79] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.605693][ T79] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.605723][ T79] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.883879][ T901] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6415'. [ 964.917214][ T901] netlink: 'syz.0.6415': attribute type 1 has an invalid length. [ 964.965510][ T901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 965.130391][ T925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6421'. [ 965.143318][ T925] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6421'. [ 965.143340][ T925] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6421'. [ 965.143358][ T925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6421'. [ 965.298507][ T937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6424'. [ 965.298568][ T937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6424'. [ 965.299504][ T941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6424'. [ 966.084864][ T969] netlink: 'syz.2.6432': attribute type 1 has an invalid length. [ 966.159820][ T969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 966.484279][ T980] macvlan0: entered promiscuous mode [ 967.695623][ T1036] netlink: del zone limit has 4 unknown bytes [ 967.939655][ T1043] bond1 (unregistering): Released all slaves [ 968.235184][ T1065] tipc: Enabling of bearer rejected, failed to enable media [ 969.244070][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244092][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244104][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244116][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244127][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244139][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244151][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244163][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244175][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244187][ T1104] tc action pedit unable to extract header offset for header type (0x5) [ 969.244211][ T1104] 0: reclassify loop, rule prio 0, protocol 800 [ 969.556295][ T1111] __nla_validate_parse: 6 callbacks suppressed [ 969.556318][ T1111] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6466'. [ 970.286855][ T1140] veth0_to_bridge: entered promiscuous mode [ 970.288308][ T1140] macvtap1: entered allmulticast mode [ 970.288330][ T1140] veth0_to_bridge: entered allmulticast mode [ 970.358606][ T1140] veth0_to_bridge: left allmulticast mode [ 970.358641][ T1140] veth0_to_bridge: left promiscuous mode [ 970.475516][ T1152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6474'. [ 971.051311][T31513] bond1: (slave bridge1): link status up again after 0 ms [ 971.056168][ T1154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 971.093924][T31513] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 971.114348][T31513] bond1: (slave bridge1): link status up again after 0 ms [ 971.131346][T31513] bond1: (slave bridge1): link status up again after 0 ms [ 971.150703][T31520] bond1: (slave bridge1): link status up again after 0 ms [ 971.172853][T31515] bond1: (slave bridge1): link status up again after 0 ms [ 971.192905][T31515] bond1: (slave bridge1): link status up again after 0 ms [ 971.211576][T31517] bond1: (slave bridge1): link status up again after 0 ms [ 974.089735][T31521] net_ratelimit: 13 callbacks suppressed [ 974.089766][T31521] bond1: (slave bridge1): failed to get link speed/duplex [ 974.212520][T31520] bond1: (slave bridge1): failed to get link speed/duplex [ 974.315594][ T1204] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 974.342965][ T1204] bond1 (unregistering): Released all slaves [ 974.451296][T31515] bond1: (slave bridge1): failed to get link speed/duplex [ 974.561659][T31515] bond1: (slave bridge1): failed to get link speed/duplex [ 974.676072][T31515] bond1: (slave bridge1): failed to get link speed/duplex [ 974.738785][T31515] IPVS: starting estimator thread 0... [ 974.782459][T31515] bond1: (slave bridge1): failed to get link speed/duplex [ 974.830616][ T1230] IPVS: using max 26 ests per chain, 62400 per kthread [ 974.832141][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6496'. [ 974.891469][T31520] bond1: (slave bridge1): failed to get link speed/duplex [ 975.004439][T31515] bond1: (slave bridge1): failed to get link speed/duplex [ 975.114819][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 975.220737][T31515] bond1: (slave bridge1): failed to get link speed/duplex [ 975.484779][ T1242] netlink: 'syz.3.6500': attribute type 1 has an invalid length. [ 975.628793][ T1242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.748768][ T1244] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 975.874289][ T1251] netlink: 'syz.0.6503': attribute type 1 has an invalid length. [ 975.941993][ T1251] 8021q: adding VLAN 0 to HW filter on device bond6 [ 976.021209][ T1251] bond6: (slave veth0_to_bond): making interface the new active one [ 976.047977][ T1251] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 976.112418][ T1259] sctp: [Deprecated]: syz.2.6505 (pid 1259) Use of int in maxseg socket option. [ 976.112418][ T1259] Use struct sctp_assoc_value instead [ 977.106998][ T1254] bond6: entered promiscuous mode [ 977.107027][ T1254] veth0_to_bond: entered promiscuous mode [ 977.107254][ T1254] bond6: entered allmulticast mode [ 977.107271][ T1254] veth0_to_bond: entered allmulticast mode [ 977.311911][ T1274] pimreg: entered allmulticast mode [ 977.339868][ T1276] macvlan3: entered promiscuous mode [ 977.339891][ T1276] macvlan3: entered allmulticast mode [ 977.352931][ T1276] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 977.368458][ T1276] bond6: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 977.565453][ T1274] pimreg: left allmulticast mode [ 977.670634][ T1299] IPv6: NLM_F_CREATE should be specified when creating new route [ 977.756919][ T1288] bond1: entered allmulticast mode [ 977.758560][ T1288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 977.864807][ T1300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6508'. [ 978.039652][ T1314] IPv6: NLM_F_CREATE should be specified when creating new route [ 978.039758][ T1314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6513'. [ 978.792769][ T1358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6518'. [ 978.822132][ T1357] syzkaller0: entered promiscuous mode [ 978.822152][ T1357] syzkaller0: entered allmulticast mode [ 978.882396][ T1358] tc_dump_action: action bad kind [ 978.931518][ T32] INFO: task kworker/1:2H:25255 blocked for more than 143 seconds. [ 978.931546][ T32] Not tainted syzkaller #0 [ 978.931560][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 978.931572][ T32] task:kworker/1:2H state:D stack:27488 pid:25255 tgid:25255 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 978.931645][ T32] Workqueue: kblockd blk_mq_run_work_fn [ 978.931784][ T32] Call Trace: [ 978.931794][ T32] [ 978.931809][ T32] __schedule+0x17db/0x58f0 [ 978.931868][ T32] ? __pfx___schedule+0x10/0x10 [ 978.931904][ T32] ? schedule+0x90/0x2b0 [ 978.931932][ T32] schedule+0x164/0x2b0 [ 978.931959][ T32] schedule_timeout+0x152/0x2c0 [ 978.931994][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 978.932030][ T32] ? __pfx_process_timeout+0x10/0x10 [ 978.932073][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 978.932281][ T32] ? prepare_to_wait_event+0x436/0x480 [ 978.932335][ T32] nbd_queue_rq+0x96f/0xff0 [ 978.932411][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 978.932436][ T32] ? __dequeue_entity+0xb3/0x1200 [ 978.932468][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 978.932515][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 978.932558][ T32] ? sbitmap_get+0x229/0x390 [ 978.932621][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 978.932650][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 978.932686][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 978.932738][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 978.932771][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 978.932808][ T32] ? lock_acquire+0x115/0x350 [ 978.932839][ T32] ? process_scheduled_works+0x97a/0x1630 [ 978.932875][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 978.932907][ T32] ? blk_mq_run_work_fn+0x144/0x300 [ 978.932967][ T32] blk_mq_run_work_fn+0x16c/0x300 [ 978.933003][ T32] ? process_scheduled_works+0x97a/0x1630 [ 978.933035][ T32] process_scheduled_works+0xc3d/0x1630 [ 978.933103][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 978.933143][ T32] ? assign_work+0x3cf/0x5d0 [ 978.933181][ T32] worker_thread+0xa47/0xfb0 [ 978.933230][ T32] ? __kthread_parkme+0x71/0x1f0 [ 978.933276][ T32] kthread+0x38b/0x480 [ 978.933307][ T32] ? __pfx_worker_thread+0x10/0x10 [ 978.933338][ T32] ? __pfx_kthread+0x10/0x10 [ 978.933364][ T32] ret_from_fork+0x514/0xb70 [ 978.933392][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 978.933430][ T32] ? __switch_to+0xc89/0x1420 [ 978.933468][ T32] ? __pfx_kthread+0x10/0x10 [ 978.933494][ T32] ret_from_fork_asm+0x1a/0x30 [ 978.933550][ T32] [ 978.933642][ T32] [ 978.933642][ T32] Showing all locks held in the system: [ 978.933656][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 978.933675][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 978.933755][ T32] locks held by getty/5370: 2, on CPU#1: [ 978.933773][ T32] #0: ffff888035aea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 978.933901][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 978.933966][ T32] locks held by kworker/u9:5/5626: 3, on CPU#0: [ 978.933984][ T32] #0: ffff888072803940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 978.934049][ T32] #1: ffffc90004397c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 978.934116][ T32] #2: ffff8880458c8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 978.934243][ T32] locks held by kworker/0:2/18970: 3, on CPU#0: [ 978.934261][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 978.934334][ T32] #1: ffffc9000523fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 978.934399][ T32] #2: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 978.934522][ T32] locks held by kworker/0:24/21932: 3, last CPU#0: [ 978.934540][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 978.934606][ T32] #1: ffffc9000d8dfc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 978.934678][ T32] #2: ffffffff902d2740 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 978.934774][ T32] locks held by kworker/1:2H/25255: 4, on CPU#1: [ 978.934791][ T32] #0: ffff88801eee4d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 978.934857][ T32] #1: ffffc9000654fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 978.934923][ T32] #2: ffff888026c23a18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 978.934989][ T32] #3: ffff888026ede178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 978.935049][ T32] locks held by udevd/28401: 1, on CPU#1: [ 978.935067][ T32] #0: ffff888026dea350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 978.935160][ T32] locks held by syz.0.6515/1332: 2, last CPU#1: [ 978.935177][ T32] #0: ffff88807e1beda0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: rawv6_sendmsg+0x1252/0x18c0 [ 978.935264][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 978.935334][ T32] locks held by syz.1.6517/1331: 1, last CPU#0: [ 978.935350][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 978.935414][ T32] locks held by syz.2.6516/1334: 1, on CPU#0: [ 978.935432][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 978.935521][ T32] locks held by syz.4.6519/1356: 1, last CPU#0: [ 978.935538][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 978.935596][ T32] [ 978.935603][ T32] ============================================= [ 978.935603][ T32] [ 978.935620][ T32] NMI backtrace for cpu 0 [ 978.935638][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 978.935680][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.935703][ T32] Call Trace: [ 978.935718][ T32] [ 978.935735][ T32] dump_stack_lvl+0xe8/0x150 [ 978.935788][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 978.935855][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 978.935895][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 978.935934][ T32] sys_info+0x135/0x170 [ 978.935988][ T32] watchdog+0xfd7/0x1030 [ 978.936021][ T32] ? watchdog+0x1c7/0x1030 [ 978.936053][ T32] kthread+0x38b/0x480 [ 978.936076][ T32] ? __pfx_watchdog+0x10/0x10 [ 978.936098][ T32] ? __pfx_kthread+0x10/0x10 [ 978.936124][ T32] ret_from_fork+0x514/0xb70 [ 978.936150][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 978.936186][ T32] ? __switch_to+0xc89/0x1420 [ 978.936227][ T32] ? __pfx_kthread+0x10/0x10 [ 978.936252][ T32] ret_from_fork_asm+0x1a/0x30 [ 978.936312][ T32] [ 978.936322][ T32] Sending NMI from CPU 0 to CPUs 1: [ 978.936385][ C1] NMI backtrace for cpu 1 [ 978.936400][ C1] CPU: 1 UID: 0 PID: 1332 Comm: syz.0.6515 Not tainted syzkaller #0 PREEMPT(full) [ 978.936424][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.936436][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4f/0x80 [ 978.936470][ C1] Code: 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 3c 17 00 00 00 74 2c 8b 91 10 17 00 00 <83> fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 978.936488][ C1] RSP: 0018:ffffc90003396c10 EFLAGS: 00000246 [ 978.936505][ C1] RAX: ffffffff8a9193d8 RBX: ffff888029749000 RCX: ffff88804b290000 [ 978.936522][ C1] RDX: 0000000000000002 RSI: 000000000007ffff RDI: 0000000000080000 [ 978.936534][ C1] RBP: 0000000000000001 R08: ffffc90003396f40 R09: ffffc90003396f50 [ 978.936549][ C1] R10: ffffc90003396da0 R11: fffff52000672db6 R12: 0000000000000003 [ 978.936563][ C1] R13: ffff88807ebe8cc8 R14: dffffc0000000000 R15: 0000000000000001 [ 978.936578][ C1] FS: 00007f5641a756c0(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 978.936595][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 978.936610][ C1] CR2: 0000200000009038 CR3: 0000000053508000 CR4: 00000000003526f0 [ 978.936628][ C1] Call Trace: [ 978.936635][ C1] [ 978.936643][ C1] ip6_ignore_linkdown+0x88/0x140 [ 978.936697][ C1] find_match+0x9c/0xb40 [ 978.936729][ C1] __find_rr_leaf+0x243/0x740 [ 978.936761][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 978.936787][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 978.936837][ C1] ? __lock_acquire+0x747/0x2de0 [ 978.936859][ C1] fib6_table_lookup+0x3c6/0xae0 [ 978.936912][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 978.936991][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 978.937021][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 978.937047][ C1] ip6_pol_route+0x229/0x14d0 [ 978.937065][ C1] ? ip6_pol_route+0x163/0x14d0 [ 978.937085][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 978.937120][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 978.937192][ C1] fib6_rule_action+0x265/0xc00 [ 978.937261][ C1] ? lock_acquire+0x115/0x350 [ 978.937279][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 978.937313][ C1] ? fib6_rule_match+0x799/0xa80 [ 978.937341][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 978.937370][ C1] fib_rules_lookup+0x770/0xeb0 [ 978.937399][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 978.937429][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 978.937455][ C1] ? l3mdev_update_flow+0x26/0x610 [ 978.937500][ C1] ? l3mdev_update_flow+0x4ad/0x610 [ 978.937524][ C1] fib6_rule_lookup+0x1a0/0x730 [ 978.937553][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 978.937573][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 978.937603][ C1] ? lock_acquire+0x115/0x350 [ 978.937621][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 978.937649][ C1] ip6_route_output_flags+0x364/0x5d0 [ 978.937668][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 978.937689][ C1] ip6_dst_lookup_tail+0x273/0x1610 [ 978.937735][ C1] ? txopt_get+0x79/0x3f0 [ 978.937764][ C1] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 978.937786][ C1] ? txopt_get+0x79/0x3f0 [ 978.937814][ C1] ? txopt_get+0x79/0x3f0 [ 978.937835][ C1] ? txopt_get+0x79/0x3f0 [ 978.937858][ C1] ? txopt_get+0x343/0x3f0 [ 978.937881][ C1] ? txopt_get+0x79/0x3f0 [ 978.937904][ C1] ? __fl6_update_dst+0x116/0x160 [ 978.937946][ C1] ip6_dst_lookup_flow+0x89/0x150 [ 978.937971][ C1] rawv6_sendmsg+0xdd0/0x18c0 [ 978.938001][ C1] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 978.938031][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 978.938058][ C1] ? __lock_acquire+0x747/0x2de0 [ 978.938081][ C1] ? aa_sock_msg_perm+0xf5/0x210 [ 978.938104][ C1] ? sock_rps_record_flow+0x19/0x350 [ 978.938158][ C1] ? inet_sendmsg+0x298/0x320 [ 978.938186][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 978.938208][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 978.938236][ C1] sock_sendmsg_nosec+0x10e/0x180 [ 978.938268][ C1] ____sys_sendmsg+0x54e/0x850 [ 978.938296][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 978.938327][ C1] ? import_iovec+0x73/0xa0 [ 978.938353][ C1] ___sys_sendmsg+0x2a5/0x360 [ 978.938381][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.938404][ C1] ? __lock_acquire+0x747/0x2de0 [ 978.938452][ C1] __sys_sendmmsg+0x273/0x4d0 [ 978.938480][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 978.938503][ C1] ? do_futex+0x3e7/0x4e0 [ 978.938532][ C1] ? __sys_connect+0x3a1/0x450 [ 978.938563][ C1] ? rcu_is_watching+0x16/0xb0 [ 978.938591][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 978.938618][ C1] do_syscall_64+0x166/0x520 [ 978.938638][ C1] ? trace_irq_disable+0x3b/0x140 [ 978.938656][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.938677][ C1] ? clear_bhb_loop+0x70/0xc0 [ 978.938699][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.938719][ C1] RIP: 0033:0x7f5640b9e159 [ 978.938755][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.938772][ C1] RSP: 002b:00007f5641a75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 978.938792][ C1] RAX: ffffffffffffffda RBX: 00007f5640e25fa0 RCX: 00007f5640b9e159 [ 978.938812][ C1] RDX: 040000000000027f RSI: 0000200000002200 RDI: 0000000000000009 [ 978.938827][ C1] RBP: 00007f5640c3506b R08: 0000000000000000 R09: 0000000000000000 [ 978.938839][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.938851][ C1] R13: 00007f5640e26038 R14: 00007f5640e25fa0 R15: 00007ffec501d1a8 [ 978.938877][ C1] [ 978.939361][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 980.156331][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 980.165473][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 980.175549][ T32] Call Trace: [ 980.178898][ T32] [ 980.181858][ T32] vpanic+0x56d/0xa60 [ 980.185876][ T32] ? __pfx_vpanic+0x10/0x10 [ 980.190408][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 980.196004][ T32] panic+0xc5/0xd0 [ 980.199774][ T32] ? __pfx_panic+0x10/0x10 [ 980.204236][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 980.209295][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 980.215479][ T32] watchdog+0x1030/0x1030 [ 980.219834][ T32] ? watchdog+0x1c7/0x1030 [ 980.224321][ T32] kthread+0x38b/0x480 [ 980.228428][ T32] ? __pfx_watchdog+0x10/0x10 [ 980.233138][ T32] ? __pfx_kthread+0x10/0x10 [ 980.237764][ T32] ret_from_fork+0x514/0xb70 [ 980.242393][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 980.247557][ T32] ? __switch_to+0xc89/0x1420 [ 980.252279][ T32] ? __pfx_kthread+0x10/0x10 [ 980.256907][ T32] ret_from_fork_asm+0x1a/0x30 [ 980.261741][ T32] [ 980.265387][ T32] Kernel Offset: disabled [ 980.269730][ T32] Rebooting in 86400 seconds..