last executing test programs: 3.423233984s ago: executing program 0 (id=10145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400801}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x200, 0xb, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x120e}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe3c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014007bf7d2afb4aaeb0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 2.942236125s ago: executing program 0 (id=10148): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000c0000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470b8d480eb20010086ddf80c39e7d34ed50ffb4def8474246fae5bd7fd7fc979c18b04cc038cf6825bc8379d1232f0bf7a53", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x4e22, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10, 0x40, 0x0, 0x0, {[@nop, @window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000029000000", @ANYRES8=r0], 0x18}, 0x0) 2.860062016s ago: executing program 3 (id=10150): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xffffffffffffff22) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x0) 2.749421313s ago: executing program 0 (id=10152): pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000004c0)={0xe0000012}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$SIOCGETVIFCNT(r8, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xadb, '\x00', r4, r1, 0x4, 0x0, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x1}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) 2.690523797s ago: executing program 1 (id=10153): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x5, [@struct={0x9, 0x6, 0x0, 0x4, 0x1, 0xfffffff8, [{0x8, 0x2, 0x5d}, {0x2, 0x3, 0x5}, {0x3, 0x4, 0x2b}, {0x6, 0x2, 0x2000003}, {0x9, 0x3, 0x1}, {0x8, 0x1, 0x4}]}, @enum64={0x10, 0x3, 0x0, 0x13, 0x0, 0x2, [{0xc, 0x1, 0x9}, {0x4, 0x5, 0x1000401}, {0x7, 0xe, 0x400}]}, @float={0x7, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5}, @float={0xd, 0x0, 0x0, 0x10, 0x2}, @float={0xf, 0x0, 0x0, 0x10, 0xc}, @typedef={0x4, 0x0, 0x0, 0x8, 0x5}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x31, 0x5}]}, {0x0, [0x30, 0x61, 0x6f]}}, &(0x7f0000000180)=""/31, 0xf1, 0x1f, 0x0, 0x10001, 0x10000}, 0x28) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet(r3, &(0x7f0000000400)="cde0095f3d90dc2f", 0x8, 0x0, &(0x7f0000000000)={0x2, 0x4e26, @multicast1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000440), &(0x7f0000000480)=@udp=r1}, 0x20) close(0x3) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r4, &(0x7f00000000c0)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x6, {0x0, 0x6}}, 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x25dfdbfd, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x0, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x24005000) sendmsg$nl_route_sched(r9, &(0x7f0000000f40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000680)=@newchain={0x874, 0x64, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x5, 0xe}, {0x8, 0xfff2}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x834, 0x2, [@TCA_CGROUP_POLICE={0x830, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd19}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xca75, 0x4, 0x7, 0x1b2, 0xe688, 0x100, 0x2, 0xa7e4, 0x7, 0x400, 0x82a, 0x7, 0x6, 0x2, 0xb, 0x10, 0x4, 0x0, 0xfffffff7, 0xfffffffa, 0x800, 0x9, 0x1000, 0x1, 0xaa3, 0x9, 0x18, 0xfffffff7, 0x2, 0x1000, 0x80000001, 0x5ca75007, 0x0, 0x8a28, 0x4, 0x80, 0x200, 0xff, 0xffff, 0xe59, 0x618, 0xfff80000, 0xdd7, 0x2, 0x3, 0x3, 0x5, 0x9, 0xa0b1, 0x0, 0x5, 0xd, 0x5, 0x2, 0x1000, 0x1, 0x1, 0x642e, 0x7, 0x8, 0x6, 0x800, 0x0, 0x1ff, 0xff, 0x9, 0x1, 0xe, 0xcb8, 0x68, 0x4, 0x0, 0x0, 0x8, 0xc, 0x800, 0x7, 0x3, 0x1, 0x7, 0x4, 0xffffffff, 0x8001, 0xb, 0x5, 0x1, 0x7fff, 0x8, 0x8, 0x1ac0, 0x10000, 0x8, 0x2, 0x9, 0x7, 0x1ff, 0x9, 0x83, 0x0, 0x9, 0x7, 0x10001, 0x7e26, 0x802, 0x5, 0x0, 0x4, 0x9, 0x80, 0x8, 0xad, 0x4, 0x6, 0x6, 0x5, 0x1, 0x6, 0x4, 0x0, 0x2, 0x3cf, 0x3, 0xffff, 0x6, 0x7, 0x9, 0x800, 0x19b4c0, 0xfffffff9, 0x6, 0x4, 0x2, 0x3, 0x2, 0x8, 0x3bf, 0xb287, 0xfffffffa, 0x8001, 0x0, 0xc, 0x6, 0xdf, 0x7ff, 0x7, 0x4, 0x819, 0x401, 0x7f, 0x3, 0x6, 0x6624, 0xffe00000, 0x75, 0x0, 0x9, 0x0, 0x6, 0x5, 0x7fffffff, 0xc39c, 0x100, 0xd8, 0x2, 0x10, 0x47, 0x3, 0x100, 0x8, 0x43, 0xfffffff8, 0xc51, 0x4, 0xb, 0x50, 0x0, 0x4, 0x6, 0xdbe, 0x3, 0x5, 0x8, 0x9, 0x77, 0x9fb, 0xd97f, 0x9, 0x8, 0x401, 0x662, 0x400, 0x3, 0xff, 0x0, 0x802, 0x9, 0xf0, 0x7, 0x8, 0x5, 0x5, 0xa, 0x1, 0x5, 0x3ff, 0x0, 0x3, 0x6, 0x8, 0x885, 0x10001, 0xc0000, 0x10001, 0x10001, 0x5, 0xfffffb05, 0x1, 0xe57, 0x7f, 0x9, 0x8, 0x7, 0x5, 0x3, 0xfffffeff, 0x8, 0x6, 0x9, 0x7a, 0x5, 0x10000, 0x3, 0x1, 0xc2, 0x2, 0x40, 0xffff, 0x2, 0x2, 0x4, 0x9, 0x1, 0x0, 0x8, 0xffffffff, 0x1, 0x0, 0x1, 0x7ff, 0x1, 0x3, 0x4, 0x8, 0x2, 0x98d, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3ff, 0x401, 0xfff, 0x10, 0x43, 0x32, 0x1, 0x6, 0x5, 0x1, 0x3, 0xbc, 0x8001, 0x2, 0x0, 0x4, 0x9, 0x614, 0x683, 0x6ba, 0x0, 0x8, 0xfffffff6, 0x4, 0x8, 0x800, 0x4, 0x5, 0x7fff, 0x4, 0x80000001, 0x2, 0x4, 0x1, 0x7, 0x2, 0x4, 0x9, 0x647, 0x100, 0x60d9, 0x400, 0x7a, 0x401, 0x6, 0x6, 0xbd, 0x1, 0x0, 0x40, 0x8, 0x8, 0xfff, 0xf, 0x80000001, 0x1e320cbd, 0x400, 0x7fff, 0xffff, 0x9, 0x101, 0x7, 0x4, 0x868, 0xa, 0x7, 0x1, 0x0, 0x3, 0x9, 0x2f, 0x1, 0x9, 0x1, 0x3, 0x80, 0xfffffffa, 0x9, 0x5, 0x100, 0x1, 0x8, 0x1, 0x8, 0xff, 0x4, 0x8, 0x0, 0x7, 0x7fff, 0x80, 0x8377, 0x1, 0xfffffff8, 0x6, 0x31b, 0x800, 0x8001, 0x7, 0x0, 0xd, 0x5, 0x7f, 0x7, 0x6b2, 0xdb1b, 0x8, 0x0, 0x9, 0x5c9c, 0x5, 0x5, 0x4, 0x1, 0x10000009, 0x5, 0xffff, 0x7f, 0x5, 0x7, 0x7, 0x12, 0xc, 0x4, 0x5, 0xa, 0x1f5, 0x0, 0x2, 0x8, 0x6, 0xa, 0x2, 0x55d, 0x8000, 0xff, 0x60, 0x7, 0xca, 0x3, 0x3, 0x1, 0x9, 0xf, 0x5478, 0x1, 0x0, 0xf, 0x1ff, 0x1, 0x1, 0x2, 0x1, 0x2, 0x5, 0xbfd, 0x2, 0x7fff, 0x84b1b4c, 0x2, 0x2, 0xf26165, 0x7ff, 0xffffffe7, 0x6, 0x6, 0x6, 0x0, 0x9, 0xff, 0xb8, 0xffffffff, 0x4, 0x1, 0x7, 0x401, 0x4, 0x240000, 0xfffffff8, 0x8951, 0x7f, 0x2, 0xbb1, 0x8664, 0x7, 0x2, 0x2, 0x8f8, 0x101, 0x1000, 0x1, 0x5, 0x5, 0x256, 0x40, 0x80, 0x8, 0x7, 0x4, 0xfffffffd, 0x9, 0x6, 0x2, 0x636b8ec1, 0x4, 0x5, 0x0, 0x3, 0xcb4, 0xfffffffa, 0xdd, 0x5, 0x4, 0x2, 0x608, 0x900, 0x6, 0xcf, 0x5, 0x4, 0x6, 0x8, 0x0, 0x3, 0x5, 0x8, 0x1, 0x62e, 0x14000000, 0x5, 0xfff, 0x9, 0x7fff, 0x4, 0x6, 0x9, 0x2, 0x2cc, 0xf67, 0xd, 0x5, 0x4, 0x40, 0xb, 0x6, 0x40, 0x2, 0x2, 0xa, 0x7, 0xfffffff8, 0x0, 0x55af, 0x8, 0x8]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6a}, @TCA_CHAIN={0x8, 0xb, 0x99}]}, 0x874}, 0x1, 0x0, 0x0, 0x40001cc}, 0x8801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ae053d2c3e58519, 0x60}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071110900000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, r0, 0x6}, 0x94) 2.492583499s ago: executing program 0 (id=10156): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000000)=0x5, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f00000015c0)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x26, 0x40, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x1b, 0xf7, [@multicast1, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010100, @empty, @empty, @remote]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) (async) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) (async) r3 = gettid() (async) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f00)={&(0x7f00000036c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="8b31c33b921dec3c078b3b30380fa8a3fb22c9f847582b06e88e7926f1e8719008514ac70557fb31119e67a294f1e921bd104df205f6040c16a49a2a2bebd0ec9fc991663010fe57f67cb1f407fa6bfc714b39863d0e0757bc08e367387baf2472539d0e5a8389b5ec7111f725d9e1ab8558afef0a5e6c5f8558995f2afeee3f6acfce4c7486d50c004e8008006900", @ANYRES32=r4, @ANYBLOB="fca59462347f3aa5fe678a243463fc53328aa7bd7eb1e805a72a540f8535e01dae2415f0fd9a541081ca58593544c17af189a9865304ab1cd081d804cc0439c4ab6a582362f67e9f73eb9a9ebcee7f8761d447e3b2c3f56c8bdd9fff9bacb77116fb8d218ca4f4740d695d0638a45000a0d4ad63ff088510d6502bd098064769bbb6316f19bc76936bf6277bcf3a8da77127c2aaf4e4b06dff2b7add369c321840db95c041b7ee72a2955a6ecaab14f527c7d008531a534f0b5bdfb2f21464c8da8fe121b1ed1700ce4ae1ef4ed8f8e58754f8316ccd4349588aebc88db24bbdcf61cf2b3c43e83f4cdbfec32cf7b95972b0fea57d24133843d845226af5aa9ce77e70811d55ace6d493040983b492a4c159ee26fac1445372c8b45c2f010fb6f2d27561c8b2b63b93ff217b6dc649c13362cccb8fbbbaa35c306ef2d43802b9a30cc528a28324f1f3f3226c77815d35386deb5f1f94cf5df084a34a69dadd18a4d6f42b84211ddc8beae999f3158408597f77b47e268a5c6776557573774300b9b36019791fed7c3dedaf9327cfd002b4bd9ca5a54a3083774238ec598403dc38a2ae493204581ffe5cfadeb9a4729fd0525ea32b7a2ed18aa7d954b8f14a90c950ab455b93f4cd75fd435142fb66ae8fe0e7dc53c28c7ea2623bcb100ce846d88d4afc3d8272dd738375bcb42d7bdc24ff72ce8332c0993454d56ac09e43f3e0b0be06fc392df7a07c54f447dd4947aa4101f93709c6bdddf96de5b4080d4294cbb85b867f1adeb29dc7a39c9ad0dd0366584a67f43a3d46db5777cbbe9702932750bcfb43b82a22148a634d7fae4ee64affc779d8c8f5ebecfdd9681c16c069b7a8915d861ff4915480f67df4819b9656bff9d2ae762d61c1ca0748182b7506f3d48836497ee491ab38cf66fd21c954be5e7deafbf8f2494127733f9127f365ab3b3b1891e4cf3f66c1c04e2dcce68efb981bd40fa458baaa146cf5b531932b7547d3b194d734092ff7daf48d9eae8fd1d6bc1cabbec4657c44ad0cf82dd6c74c577b484aea074edcf0e33c38ce923abd3db7fc69fd4f1410b68efc90c23b1edbeee470188c2e63e069cb91876e4c47fb05696c50883953802f4609aca624d78c63b3e74e0a9508bfe9bcbeadee95968cfc2429cac972699e655556e757a03fd292948e50348718459e846f85180ab291cccde10f7cfc036737f559f81b96cd56cc1c1c25be9d89f0f5808efbc0d71a58dea353a2d992bd46b1aff88cab736d0bb788ac89ea0a2d833c37ce91da5ed8d2bf6343f1eddb14009d0c0769b6c4d519e600010eecebe56cad9ef49dc65f61510a5bd0e8eed553e3b12b9a2c4570bc82261c3df2ec2f42a443088179bd8a13a32ac5f93cf03fab5ea46b51378d5861f0ea4fdc0a28fcb214106b7cddfbe19364f2fcc578cd624a87c949673f140635e80670bc5588fbac0fee70326e2f928e7d7e1a5f9fea17d63d3421bcdc17389cf34160fd601dfe3696d171426f5b3504bf69b67674cdadf7448afac8a6f3c722e0893aa79ba83cf5de5a1a83d1c47ba0b1a015c64eea68dbeeaf5e22b279f8ba7198c9070e061c79575b7ed3a240c6d7cf500325e3e39c96f6d6aa889b3d55a3d2b365236d818c2f85ea4d4ac96aaedac6561f7ce7c730e585fb08f666936d86288fbba7fc1b0fef9f63eb8bb6b89c0ed4e15fd9ca03d8d8e24516bb0a5d2f170ae268e1f0dd7f29d3da2e201cc7dcc67b7cf9cbb31f4ef10dab8b20adeec47ee72b600e782082ebe32d0a687200e216c06ed44ad4fc723dda874ffda4d0608ccf9f0b8eaa480dc80c4717773326a302cd04db8061ad43a5c07be32564025b08d55130af36d3f346cd1729ae5b8aa70972af5d0cbc25827b7a44de6a6f4523825b3ab100607b1b89e827c63296392d845f9885a4a4eabc4dac6d56aa450de2568f96112d537d4e4944ba41e691fec0f3c0db04199047599ca89e652b79c717523a8238523078eb5b80b394577730d3e19ff6dc2fecdfea2a95da4034a169a9806c5ae46fb06ee07684096a8d0e7046ff52f670ca23f81f762695bce3a64c85f3daf0fe8597678dc8cd63d4117ce27787f5ae350aba829ac6da83d2bbcb8f35e87e032982b5be4dd12d457a1cfa0bc7973e4b6f52fb54358288ef35741e37d6fcfdc16fe337c0e2deeb787cecc40432b1972a6ff37c809bf17938e244bda4e32528ea41cd6c90f0e7e8c8fd5de3ef15ff329a4a6c9f767f52ea3868613cb3ec97f4c18c6835b8d8968be6c0bc6551d9877458002acec2c5a353328f06469d6f168ad054db2da096cc3c1c9fc5dad89c5fd5a9f5b0186a538b7e66761dfec99ab33421d865368f7ef06e19e0d486afcbd7bbf1f9ac20dd702fe67a7b3a4a3e52b36bda9d77d729d5c984af5d12f81d095b2182213359194acf26e32c1d06062ab8971cfe7ed13f7276d2a5685f236c245444de16e26834fe839e77ec6f4fd185493b5ad1a38c47b21fb028cd9c257a69fc3e9d80114ae6a3d2cd363be0af6891ef26f9f26b6d0b43d4e6747aec2cbb46aadd5d9a39e71098c42401348649f31b3d93ff0c5fd1fcaa6fcba858fe0b996b5fa221b5f4edba82fd9373e9aa4ca76dfc2a93a9c38d22616280f5a0db621ecaac05c80c6064a7f6b21ddae4648cc5dea92680e6ab72db8bd2ea6ba9c22cea9f3c1a6550b589704556481f4104c835e071b006582b830bb121a2a815d2a8a5d30d63922d958bb90af8344d84501aa93127126cf159283c675857adac127478c2b24cf17e426194768136db5aa320db7499f132b074b1a7628f8967c9be1cc7faea939c358ec62adc1a1537d0e2263bbe5fd77c30465a548f7e3732cf63a022b225401789bd82777147faf05d6f05cffad656230c307f2a5d27dc37c34950f667e4e696c415648d816a6aa3572039b1ae219bdce232a074d86627f813b069c17b10ebc90ac7e26bc285f29e63238d4181e963cca46bb23a8cb0430e90e4b6133eac479ae5a517c2a5ea52b669bf13381ac76d75ac44204686e12b99c7a868bf7775d39673632b0ecc050accaf66670f10c8275c33bd4679582e1f457d25f3de35130cfb73f8a1035e9c5a0b095285943dc7cfeffa634d644f96dff509e9a1f430a6801297bf1ceedfba8ae6b3f3b0e38e4d83a0ccabe2f861b29ed6a1347cbc3b4942e6e2c8df0533e1f60085c788b77a2e0b6b026c1d441b4a34f50c5691f2127a50d0285023cb8476f8b36d19a1f3d61dffdd8f61e75840f6f75802568c0f2a1c5877576649cafa830a0855ca507baeff00e4159554d6035410d2037a8d5e06f2ffb1be4b669ef877de13686281ee0bb76abc6d970e948b72adc03a899df73dc086e3ddef52560c59e67eee404c480364a53a0553b05b978b5ecca2967a59e3f82407ae9354b90baae35f20119c83fc0b75e0f5455fd67d98ad62cbbb00d26fb2eadd502077c877eca208f0c9cc61db5fa6b5bf001a0365de92fbe76b704f414390db505f0b43176d70c45996af7f9d562666be099ba8c0c92634a9e0dd4f20a9b3d356551c274fa9d2e0db6a6a5c2dec509a1266d39026d5890bd22e6d5cc4dec139008e25283d5098b8452600c31a24e7422a508c8a23db23a5c5e29164a6220f7d20f1f65dd977d252fc223101a81b4e08ec080eac5984ebd4c771914a66429c3673dbc031f1188ce0b52ab64cbddd6f30f719a0f61d2faaad77088534134bcff47aef0e80dc86630a30405898ce94e393135c19af7ee891a9c73f36b32de9fb694f69e031c6012eb5eddc47297a7ed4073a4e072d2033a2f6108ad21894e7d480a7d7b0215b7037118658fd81bbd27e8e48035a0478bafa32eda7dc0b0d23f98b5ad7c3bfedb794fcbafaa38b17aeb83c2071a591254307386cc25526f571ec9ac9e91768adca96d69a10f0ed184705e6909dcf75566eee4f05ce489f703ae8c393b369322d81e1925e58c2aa2393cebc9d4ef275be1d45a1a2e71b306a9a377e01463e6b45aec2d79975c520b129c3db2902e9570f774e748778df6c4beb0131d0cb0e418d4f84709b4f280c7972ae9ea39020dc7b250e9837461cc8c60dad98811ae4246c16e217c718fc5c5212295e5661484f76d4df6660bc4f82b5270c3bfa5d27143288f1e67417bae5b32ece10ffa440e486d6d432307a3a4d1c7a2f9253a0edffa4fe470a599178decffea44217b56c3c940930719a24503b4242b55b7d9a5a665d5f39e97239efe070b35dffdf0a325a4b4b843792355486833cb666d0752ab13c08a32849084552316a51e2df29c095015b2d61919ae35fa00224560608664761f877df19d22f23ff16f0a7c4adb6cf10bf7cc9fdcea804eeb46f1e1ba89209e32ee19f385266b8879001f5889defff356be36bb777c5e6c964fd1a31462a3800e25829def2d50c599b861398a45c3517175b579f08abecea3aacae2cc9b85d2c13de54bf370a37edae4fd8e90da5070090bba8fa587da27f619049504cbe21c64926db8892bef89d032ff944080a80981d5db858056121274f6542ecbfd531fd12b6895ce7c7f82b8caa27abf3970a2f4facbe13dfc68c2a9ef31e31263549c2f81461b1f2bc1fd026d6c9b8974ad84fef080028a8ed1cca6c1dac69bf3cf85b7a017214da5ece055843f0b5d7a24ae4dfffb3b21b20d93a06ebf8ba904b1b05386cb3ba8f1c9f311f906c5a600cdf025c2a6486f6de3d47f9a24a7e876da487a5bb37c4a15abfb2a6f18f90c13ab74dea664d618d795b29742bcbdf9f069cc9cc417d7ca765de2dcf4a8db701bb80a7ef315df727914547415e19c701d689b6f9a9b9af62b3cf80b9f649fd1f3e767a72b5813bda6874d1242c511f2879eab6c267551ec0782ecc423cba4c39a4ce9915bdad5368ff09e39f3500c4524a97d01c8ef8088011db93d5ed08d30c9c50570babeed078b08d06d9242b4190180320116673d7103b189f53fd49807a75ac1da15e741d01747146dd61d026dfab7c6141d57d18e38ea04a987c1c50a9a3c3ce30ac32ed4e287b4834eb9791a3d747492bea59452bf9f0d8de4803ad27ccdf2436a907d70bca5ee1e77b0e07b4c76a3e3b459c9e75d64ef0a4f98155b1e1b8ef0bdc4e6c1828ddfc690dc204ba7277bff013b056a7e0abc67b560af49f3407f7f62dd3185f0705e0512550961e481d781fce4b30274b915c37e823c77ed1e74933c2a7885766a284efd812f28f2922a55c11edd4a293ef05d31ab4ef0e27af55992e1ecce4a64292c95d6e007672a4b0f23e9c9f287458a469b3cda5218861ae2b742d01b46dfc153f841ad18c69c86436606b26dab09d3b56b10d39e7971894dcba61cc54b3ba792f9d4d963e9b3cf5447de707dcf9127575d6a5d83060449abef92d827a05b6efafdb68dc25dba0d685b90819b4475307f35b978a28ae0796f6eafd380bb7248fccfd7a29e3708fd738975bf9942a9b84b7b033a6518c1759473c6e458b92a0bb0e51624192a93d32f17df028cbe72d363f59c399a7055656bfa3c6cb76811ab2b273119b3fbb3a3f64a9e86335fe382571be80b1a2fd4b79a38454410e64928bff8167aa3422588c046a8649e2171848767f68d32d46760d0ca9737b4efebd63309ef954f5aaf07b9717abc631c2d311dd57156fbcf61a93e24f36c4316ebb9903837bcf7baa3e5a58e5238fb583edb50c89823a1003e43b1ab79b468e4f81c268a8d035b3d14edafb31d82144837ffdb6eae9873a0d3551b3f2d04f06e5ddb2ab769bf823c8306129b602ae9455988bddb8ae75787632ac81748a81c9414d2c2b1e9d27a22ccf19fd69c20e732357788c157df49f8f8e3136adb55c6e067078e687d71352ceee582ec45452d42bdd39372aa10ce455786dde236a3f5046306221d7eb6771ee4f824018e8f1c5675af9fbb52138681fe070e96b81f32d94e01fa07fc634790c3b87bf4022ca175d55378480d7188bec12636953d69e71c013825638832345a4066620bcff1a5bf9c438ba3b939989fca2e7a96b300ace37a225372eed33b8d908000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], 0x1530}}, 0x80) (async) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb792}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000014) 2.39544455s ago: executing program 3 (id=10157): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @multicast}, 0xfe97) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0xc880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.358792889s ago: executing program 1 (id=10159): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x6, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x36c87000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x207) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r7, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]]}, 0x50}}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pimreg1\x00', @random="71e2b87f9b2d"}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30006700002c000000030a05000000000000000000050000500900010073797a30000000000900030073797a31000000005c000000060a010400130000000000000500000008000b40000000000900010073797a30000000003400048030"], 0xd0}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4620, 0x0, @mcast2, 0x3}, 0x1c) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000002c0)={@any, 0x55}) socket$inet6(0xa, 0x3, 0x40) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) 2.151090343s ago: executing program 3 (id=10161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r2 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x475200d4c00f40a5}, {0xfff3, 0xffff}, {0xd, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) getsockname$inet6(r8, 0x0, &(0x7f00000007c0)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.919239533s ago: executing program 1 (id=10162): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x884) 1.860429219s ago: executing program 2 (id=10163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}}, 0x24008080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x4000840) 1.849728398s ago: executing program 3 (id=10164): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x7, 0x1, 0x3}}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x80000001, 0x101, 0x6, 0xc3ac, 0x80, 0x7ff, 0x5950, 0x4, 0x0, 0x4, 0x2, 0xc, 0x9, 0x7}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd8e, r9, 0x3e}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x24004044) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0x5, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0xc8, 0x8, 0x1f8, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xff, 0xff000000], [0xff, 0xffffff00, 0x0, 0xff], 'dvmrp0\x00', 'batadv0\x00', {}, {}, 0x3a, 0xbb, 0x0, 0x20}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xea, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@ipv6header={{0x28}, {0x60, 0x9a, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xe, 0x3, 0x21, '\x00', 'syz1\x00', {0xffffffffffff8001}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'bridge0\x00', 'veth0_to_bond\x00', {}, {}, 0x3c, 0x8, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x9}, 0x12) pipe(&(0x7f0000000080)) 1.763825782s ago: executing program 4 (id=10165): r0 = socket$inet6(0xa, 0xa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911187000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CT2={0x0, 'CT\x00', 0x2, {0x10, 0xff, 0x80, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x101}}}}, {{@uncond, 0x0, 0x128, 0x198, 0x0, {}, [@common=@eui64, @inet=@rpfilter={{}, {0x15}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2) 1.595481312s ago: executing program 0 (id=10166): pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000004c0)={0xe0000012}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$SIOCGETVIFCNT(r8, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xadb, '\x00', r4, r1, 0x4, 0x0, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) 1.548938648s ago: executing program 2 (id=10167): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x9, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, 0x0, 0xffffffff00000000}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.422873638s ago: executing program 4 (id=10168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f0000000600)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x81) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x3, 0x1}, @mss={0x2, 0x8004}, @window={0x3, 0x0, 0x8001}, @mss={0x2, 0x2}, @sack_perm, @timestamp, @window={0x3, 0x218, 0x5}], 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000100)="05000000010001", 0x7) write(r3, &(0x7f0000000140)="0d000000010001", 0x7) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000200)="34000000070001020304050601", 0xd) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000ef0000002af4da0351b0d8558f9ab5808d2b7c9c3fc47f5560f835798cefdbe73e757873caf1291b3a6157428e551c7da0e4a901b5e68798fe8e2546872535ed5a099919a14b4d2551074433cda5f040033ef8262e518a77f6221ff337f9214346f85949495ac97b22fb26b53acd5a2c14da550b9733c5507fbb36ed1b2ca5f55257db571069c1160cbbc25396c6f244cd9aad6559aed85f184e08c05f5fb483592c8862ccbbb7ceea6d306e8cd85a9538f6b2af95e1b8b68278896b062174ae4454e7e4b2e9a83773da06ece7511d0e9af5d0ed00b8f14cc4ffea710ea8842bf004a185c8cd72464dc1532103c246cc2969fd734d3b8e27e66be8da73279d8555279d4fc2d04b607c9da4387f36a8580b4a40c5db6991ffd9eef6087f22ad36615d944ff02c5345babb7f73b17059948177f349b635608c9bf3839cfbf41a8aed9f66bb03a6da78f2e47d833c5a37e3e56e82a3d7fb91ada9ea533ad0c472f9aa8558f9dffad316e7689812c7303e5dd4593eacf8b7b2f3d725a74157c2adf638a3b1522c3b980e1acf623534c07a5a310507ab392e3d8a392d87b898e446952db0fd8bb6eca66d9b1cf88855e0"], &(0x7f0000000940)=0x113) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, r2, 0x0) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000004840)=""/4140, 0x102c}, {&(0x7f0000001a40)=""/185, 0xb9}, {&(0x7f0000000480)=""/132, 0x84}, {0x0}, {&(0x7f0000000180)=""/80, 0x50}], 0x6}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r0, @ANYRES32=r6, @ANYBLOB="0a000600080211000001000006001017010000000600120001000000040013"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x962050c}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.404204162s ago: executing program 1 (id=10169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001003800000008000a00", @ANYRES32=r3], 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000180)="d7026b20f0d59143c56995fdd05bd19de72f797ee2c83d8185024c364f50742e9b5b03e0bc1e88c38c8ff624f0bbd2562757b094a11ba715243112a8d4ec47385052b0a1248c3b80fc17b4515043a8cbb71a6d260d16a9703689f3531935932709d3e5853a9f6aace3d8938b7384883121550442fbbf43fa8c2e807fcf727cf061464415ee2715f61988eea27e2ee9f1ecb272f731fba50d8e71ee9f11a17b376166b68145c38ff6b5616a0437b3514ba60d42ed820e0c246af53404dbf1ebc72d331f2f1ee950c6c90700e004365a71e8f095611cb329c885fe0b14716f35254df5c1b1495431aca37a6e490b5b0557f5bd8981e4ba40d652aa75a1aaacb96b") socket$packet(0x11, 0x3, 0x300) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000013880)={0x0, 0x0, &(0x7f0000013840)={&(0x7f0000013780)=ANY=[@ANYBLOB="50000021000901020000000000000000050000040900010073797a3400000000300002002c0001801400030000000000000000000000ffff00000000000000000101"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1.330228649s ago: executing program 3 (id=10170): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x3504, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000009ac0)=[{{0x0, 0xfdff, 0x0}}], 0x1, 0x1c) 1.227786959s ago: executing program 2 (id=10171): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @multicast}, 0xfe97) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0xc880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.128396255s ago: executing program 1 (id=10172): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000540)="968b7ae97535", 0x6}], 0x2, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x24}}], 0x18}, 0x4008004) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}, 0x1, 0x0, 0x0, 0x4004084}, 0x2000c000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000580)={0x3ff, 0x0, 0x0, 0x7}, 0x10) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000104)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r6, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1100000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000500"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000440)='\x00\x00\x00\x00', &(0x7f0000000480)=@udp=r6}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r8, 0x0, 0x40, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/62, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c810000000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) 1.123744613s ago: executing program 3 (id=10173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) close(0x3) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) bind$bt_hci(r6, &(0x7f00000003c0)={0x1f, 0x1, 0x1}, 0x6) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000d008}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.098806658s ago: executing program 0 (id=10174): syz_emit_ethernet(0x32, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0x3, 0xfd}, @ra={0x94, 0x4}]}}, @address_reply={0xd}}}}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) connect(r2, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 800.610634ms ago: executing program 2 (id=10175): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000038c0)=[{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000380)="25d09e63c2", 0x5}], 0x1, &(0x7f0000002740)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x4, 0x200, 0x7, 0x7, 0x8, 0x0, 0x80}}], 0x30}], 0x1, 0x20000000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x54}}, 0x0) 687.852658ms ago: executing program 4 (id=10176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x2000000000, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x8cfd, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x1, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe800000000000fdffffff00000000bbfc020000000000000000000000000001ac1e01010000000000000000000000003c04000005"], 0xec}, 0x1, 0x0, 0x0, 0x40804}, 0x0) 493.733807ms ago: executing program 4 (id=10177): r0 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x12}, 0x1, 0x0, 0x0, 0x517cb2d559174338}, 0x20008004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(r0, &(0x7f0000000540)='ns/mnt\x00') syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140fffffffe140000001100010000000000000000000000000a"], 0xc0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2004c072}, 0x20004800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x5, 0x8, 0x8, @remote, @local, 0x80, 0x10, 0x8, 0x8}}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000280)={r10}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000004c0)={r10, 0x6}, &(0x7f0000000500)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000008a0000008a0000000a0000000f0000000100001304000000060000000500000000080000060000000100000f01000000020000000500000080000000e90c0000000000000e010000000100000004000000020000930400000003000000ff0f0000090000000a0000000600000005000000020000000200000f010000000500000001000000090000000100000007000000b0ac0000a600000000005f000061002e00"], &(0x7f00000016c0)=""/211, 0xae, 0xd3, 0x0, 0x9, 0x10000}, 0x28) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f00000003c0)={@remote, 0x34, r7}) sendto$inet6(r5, 0x0, 0x0, 0x20004045, &(0x7f0000000300)={0xa, 0x4e23, 0x39b, @remote, 0xbf36}, 0x18) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup(r11, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_type(r12, &(0x7f0000000040), 0x2, 0x0) readv(r13, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a3000000000480004802000018007000100727400001400028008000140000000150800024000000000240001800900010068617368000000001400028008000240000000170800074000"], 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 227.614356ms ago: executing program 4 (id=10178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89000000}, 0x94) 163.747284ms ago: executing program 2 (id=10179): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x6}, 0x94) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x800) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) unshare(0x22020600) shutdown(0xffffffffffffffff, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000081000000111900"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @mcast2, 0x2}, 0x1c) 1.504743ms ago: executing program 4 (id=10180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xe, &(0x7f0000001700)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0x2000000}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xff7b, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff2086dd000011000aac14140ce000006a49e832f0", 0x0, 0x2000028e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000015c0)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002a80)={{r3, &(0x7f0000000140)='*{-[:^$\x00', 0x800, &(0x7f0000000180)={@align=0xf, {0x6, 0x7, 0x8bd, 0x4}}, 0x773, &(0x7f00000001c0), &(0x7f00000002c0)=0x5c}, 0x7, &(0x7f0000002980)=[{0x2, 0x4, &(0x7f0000000300)='devlink\x00', &(0x7f0000000340)="2ea6953005289e206a9afd4fabede8e488005634a1c7b96527f37fb5", 0x1c, 0x28}, {0x2, 0x7, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="b8d2efac1c15508abc2bc03349330306f4953a06374b5388619a5427bbcb1803df5195e4cca9528fa7d15bb0b53642f06d79eaef4c82e597a5a158dc2b72a41d16c99befb1fe2357331c7a38ada9d0dafac8bc4e2301dcee73688cade93c4d10a4e231d7bc2e1f4f1c895c826edbce0e0b55fb4a8c8f6007b6b5385e0b4f1ddf2f340385dc2a9e29e2563ba29d192d81588f1fa7b3970caa4b798a241382fb501872b23f634d8f2372fa21b0331aeb4a9952b4b5445c12a33726e1da1f6f72231c216922407f947fb9e0523ca591e1c6b2630598ed283d74f16cd39eff81d64c3783101bc31a24201f34a0f2b43237f826522b62f99a6b754312bb2bdfe19cc585cc289e9490d73d6b034f1fe1722884b6955213315c91ca5b3bad7095eeb25bcf7350a697372986eb67c905b06f71be5f11cf2c56a911ff8b781fa84ad7c2bd9de78bd2378ae97e034a8b07c0443bc419e1c82c2eb70195f335e5ba10f556d1fc8456efc20b21838d82de27495f2e1eda513c7fc97e28d1e8a5bc41e302b0ddf8cbb64455db566488a50e33b68b9daa3044e94952fc46cf8ee0729dae668ab2a5c841347989eac738e90cc32ca967e44fb28f388231804bfdfabd1946362878a396bdfeec403a6d9dd55d50976f7224fb6d2c339389be2b10bd1c549a37ca9e8de8796b85669908d6de5cd078e22f590c78143c04c7579255889a5c5c05710c6d8514f75f2377d6b0657deac34e82613b6bb349634544203348b7e5af151952ea9cb86b134a64e351a4e5958dc495488bd59beec702d226d59755b2ea386fc8f200d988917d9d90b42e11ef824559c59a4348c63f6a9cfad1f515d3539e79f397088de5417e42bec1b3692fed13fc4b67368a8e3b1693831de1aa99f261630d6f6f3608291c0ed0a24455717825f21d56e2ba03c73a72fb05e1813aa55aa9b474cc349b4876547aeb09191f477f40857a6217653555785d30c596f6ff79b90bc6808a4c67a1809dd4597d2cf5144534cd9fe0498e4c47f022d533689fb44ea258fff3085d32b2a1814c5fba6ec7b8222ead902d029110e58260026f53743247ccbeb8788994ebca8c7638cd76484f0b5e213b585372c6affc923f9d5a35729f82a58df4c9f7c5fd0086845c7690dccbb6f034a69351bf55502442e5166411cdcb9cf05f09eb23f25a758909e42131951a1e63d222fdf2e1a36f5af1d01f0bde91c3e1dc5716a807fe2015f6467c232f89e91cbf42d2489efa6e24fe1da06eccbeb7dd22c6649c7febe7e75a086420c21f3f9c8cb23a1c9948c1eca0493be39004e2b5f18db1b9764590e8417fe01fc3953cf86353490b47afd1c329159d503c0ad152d97157d805e00eede0562e97945c020054ca8f726942919b602ea5f23dff83e33525e4b0d0963109e9f33d5e7fe642484605a4024181f4e90e20f97a5eeb70e209b7ec5949cf8e242f19ba5881fa5cf63aaa0adfe8c54a907f039ec0f2a11c2027998ddf648459e2d60dcc5a6d0dafd8217d8723d5ba1cdb1f94402f6ab3305bba0d2d5a9534adf5bac745bd1d46e0d8f527617d787af5d2e60f562d9e1b2f15c2f69ad4a346215a1d3f5280464a440d45229b37dc50b506c40c5fcf0dcc4255300aa6b69a42df04b1c3b3e8faa15aa6a425988a72164099d193782c12c3f8c82d0a4fcbd0c75ab06ee5a2007dd34ca8f55c29ab8a6c5a643ce0f8d4b7cc23213ae19508cdfb1800b13c11e9b77394608def05dbf6e78aa8df42b93b0703930b2970d85f14ad9702138521c2491fba87ab7098e0b6b2176bae449df2d34b1bde90bc591eed4a9a13308d617ff5c002d5185f2f49890e658524a8d2c51e0184a85edb2ba7b4424276859348d38e928266ae74e17e0239b8c1828b5b6eb36c01b736543028a4221ad74ae74d625d17435d5d4b1d12dcf6371d482ff98d8adcfe586189122b0aefb2c2482f5f618cc057886834bc49d13585beb453b1f202ecd838d63ce7993763d5127c55e82b85fd00e9e981c9fc07bf84c51a15d480b49792b9b090488be5e79f4a7ef3c40e473026cbeb2bfd306e40214c808df1819140b429ff0c0531a9ab8251aab803285ea1e8e2630d2a33023b1f171e52abdda76f51b726f18c84c7decfe5b044627c5a47a01fbd648c71a8d59a384c4f69b1c62bd4ac155c2a0f25469a59ea8f6460880f437e31dac8a1cebe0ec429cedd9e89c713db466f38342a98fb46db524066222101d972ed4e94e945dda2a52a8686d21275b78b9324b1143342a2b5c0eada55f5b547bddb5672aa990b28f84361ab4ecdfa4d1449a567e16a1b663602877b87e6d338026b69fbf0547f31c6e7ef5203a9e07e21f61420cd2a185ccb81ae1f00b1c5f9b65d60bd53543ff4a6bd8452dfb659baf616db5f30b4b43f8c60d3f1c7946f87e0110dc005daba8559d42163297746e9c185ffa0778f9b3f8bd30e37cbd64df94b9b43e2825fb1475d0a8711f4a0f619ed0ac3c476e23fd1dad13ba67e0116f5dcbf7cfe9a0777a0782971753f520fcd290c305d390386091eee50e68513d4c9093e07b47b80abd739e2631b2cab317e60c7e3959ce7bfc0013ab795111e27a0cb4b4b2e1cb440db88958d486ab52c2b494b4d62428148f128c7edcfa58d9921282474db632b9ef1e652b2bd2671d3450417fa44bd44ad3cb559c2576c50a312ad43932f7547ef3f0e08c8a67c0c8e31142d121d3d33cb04c50fbb7ee4850f8ff30274165a86ec9ae827f0618b0169fb4ee78605df6d2b89dcf41fe16a2313b6061329b85567d1fd6e86ed5dcec5ecd011f33d18afb89c02b4b936ad2381ffae1e7dced0d6fd4e50933dc61024a30e243633347a4657712e9c45360d0ff58adf9bb606ca83faa85ae7af52ef3d11bbc685244a61e53a52f6943d37b8a5661dfaf9273d9f9e5a4f06960f6fe127393dd4d60e70b160fed1558f3d0ac1bc158e958b8afae5d1bcfedd12ac175f0563d54d9257cf120deb9af120ea11e88f0ad5e990d6bdf638dcb994419179b4fa7a39ae7d52339a22fe8589804ab33bcd6aef0520ccb8c803cb09d60b93f84b1e7f2cea82e578bec7718ecb914e6febc77ee5011e62c2fb631bd5712f4c958d905a3d9a2317b489499d28a25bd3024657414927d7a459309eeb9624cd3e9f6daf64712700ac7b0b2271cd0700f6017544a1fdef3c7aee2e6c2fea63eaa40b3956040020a5329e9cfbef591ad1415cc6c2e99dc58297f088ce854b18eb209815c368b080f67715367f383a34babba11983ac989cd793e5503ca0c0accab5a16130ec4fdf80f8c8b42f399adbdaa5473bb77533886f19f1f21012452e5f174eff62b32e7c9f4f4e71c8108ed9ae4d5396611b59b20c0e566a1a848c121a9160513b9fd8fff6c034f6f9bfe5d7829178fec7ce4442ed8507af1acdd5be6be466dfe7fee84fcc036254afc28c0a10c3290a6a4520f835cd149573084d16601f97daa1f3aa2f4c6cc5047dab0dfd381c1b3a1b2a7b66bf97f317b5e88e0ff50e9028b72b874d3ed1e916754b284c7e8f950cbe53761e6b94dcf05212b0dc10c99c7e82d2d2111d4e982c613834af72a523efbf6594f3231949f923e8894242c2a3e8c72ce5ebac089cd0f6f90f270c0a020239d61eb7941f2f6b9e5035a8baa8196fde707daa8f14ab9408d9a274650062c5e22f9b6d5c4fc89eb17d8a2d18a0b56bdfc6996abba49337498240e17495245df4ed93c932a619d26b706b7588003c90a71ce1dfd757703ba46c7a204f514a06b85999d1263460d35149c57ce6f272a03804a31a515e3667adec2264fc76a623f5769373d9c7e93311ae9f9eb628222e6d4092b24f05e021800df96e01710726e576dd3b060a62fee1363f4e8fb1d016b554d8f8b9f23115163a710f59a8495e92a630a71af699ece27e2134df76dbb38cea3df903e452a462e1dd412b80b463fc68d3f074df4afb4836a963fb0733b349fc00b70bd7a392964b8be5154408fa291153bc9006393abc8c1edc66ac78b267aafe1f630f2a52dc6c57369ebb1e5d10dc5fb9257e4318c4f23c8d19703ab9c9e25040a0fbebc48d0b985b6f756678547c8c1b01ac2c61bd959a2b020cabe8c5a46d894047dc980aa6a52631291ac03d40b8b972bca7acdc641945d5f1b27af207381ac9eee88f0ceb24a0212d2e2a156c8d123343514779f31b827c4a7509d723f233c32838b2449f874dec0abf844ac6f29fc1a570faa60c1f130061c343c5be75d3fc3a005bbdc70ec2df07af98e5f997c67dc0a24ce2ebf9ddf3c088305c7bf6fcaa7c4b49ae6e8831f7098046f9ace273c61879c5acb0f83d61c25b5557a797205d39e4c7a65534e18017424eddc463c04ffeef587b255a80f3a66dbf25b05e928d791cae85e4d89c6cfbb83705dec86ab340007d648c4868ff3b39a130e2ee7c08bdaaa451f8a2ae333c60f91f5ed57459e9f40eac174dda1d125d2ea53a6838249d7d225bccbda736050fe4bfe45b02a970b37be9404e60cf4a98f930bbea48ce1e51af867ed97f4638b694aa8d759569928d9a0d96193c40d7990df1afd649b7c77a9bcabad48f18a1a76af66aed24d9ddfba423af15104e299b67a12ba5c9f631e11567212c6f644a677b9c5f8f9b075c0d52a58343f4b552a7e89d8814e924b42850380550f5549ae47ea6f0efd0c494b05cf84d0c3f5a1a37ed868b5f3279a739fad2a51ef9af69e940cb34e29d2abf37c5fee6a4c393512df7a3b6bc1cb381130593ed35b4293c040066555879882766fe2da619b81248af442143d7cc4f05e4635e42ce73e8b39e360903d3625c52b9f3dbfa5c9eb667f0a9f62015e04bfd7c8b5a37fc631f260c8740f9f6f93e5dd839af79a82353afb7768fbe03bf12d3c28fe74176ed1beda8a8d58f740fc6113615a2c20cf3ef80f17f77fbcd159054561aa5a5f288b2a750ee8a7dcbd8f5e329373065e5d79cc4896d0e64f42e6cb676054ac8d5473969e9d8a75ae517859edebd798166026016c55a83d579598af0eb1a3ec9236522e47dbd542a9b472c75fba2435387cc40caa3bba29923b2f9fc46f5fc7f9bf949199e81b3782b20d8e9a1df07f2b81f5b73acaffe4108ded82b1bf48c0ca984cb43e913f13a7c3adc55cdf5f18ccb2974b26d617c5d5202f6d370146cb5d810c1938ea8f104b69ee4c9cb901356802f364308f5dea023309b401a60480fdcddb5f9b5ce6d59e065de3b55f7b1b4b8f00a8de531389f8b84725b0b5e1e8716141f0be6bd545728b7001251261c2fa97628558ed88bc30c7dcd70b6870e45714030507a11de4d6f27fe85630332f380109a0fd6f528f3b6ef7672068503ee0c1bdcaba948526a669e9e1f315f469928a491d262199392a2b336d64e643c5300ad3a16ab70e7f86ae2ec178af8b15706633dbbf16e6d2a73520fa710c65c17e3a06de7349a268fbdfc8ff4a069a4128fea22e5803fad59422251bafe090134621c69c3ee490e8edc103be57dc077d0015ed6732b869b0524a1ee05a506fa41821fc3593014516b2d1697a630696179f5322bf9801434503730451ec39d3532502f981f84d42ac03e4eefd3051946edd36f2ee3f059842a7594e6f240e8e5e668e12d0f8e4b87901813abd95938053740285cce5008012c2378bde476af69eaa39229c78c98dc5e2668cf866391826ae327a721f97132f32dba247b11bd3a2f57a036a79616ef1eecf54d4eacb5feac115fcb94223807552a787160ae19a0bd8744923a7a37a908a268c56cecf0264946f02e2c96236b", 0x1000, 0x22}, {0x3, 0x2, &(0x7f00000013c0)=',\x00', &(0x7f0000001400)="ef7f65f75542fe1bbe29b205faeb317a59c9530bbd28999371c7c02f78788a6836c2332f1d721e88e867002600bc899a36234254307fb1364d5017eaa7e859820ec2", 0x42, 0x38}, {0x2, 0x3, &(0x7f0000001480)='secondname\x00', &(0x7f00000014c0)="ee51aca245ce8315329f16790bc79225ef719eb318f6e294016452e9b3e73175b110dd939b700aa8da930ee71cedc6eedd4802bbeb76420cb8ca084188758906e91ad9d532bd6a38008fc1a9eae6aca15e4899215def67ca12590cf57a73c372f21f612d1cd9ceb57aa35f5058acca3d15c1316ab152768f300c2a8bc287ca494a33b099211206fbb5856fd97bf4fa35", 0x90, 0x10}, {0x3, 0x8000, &(0x7f0000001580)='/#{\x00', &(0x7f0000001740)="2a0e40a7ad65b95d49e46540855a1feb9bb52451bb3c46a79e0e94b5cc8a1571d9dfa0056a896bd47e8b1fb11390fe73df34c29eaa25885cf828b004003c237caa1d013a626b71ad1bb446403f78e79424cd09298dcf81c2ca19f0fffff20bbb6f918edd11f243dbfcf7cb3e62274e4711de9f92e7b8a252588fbae273f8d0d336c4afc275d6f02ab518854f3fe41073fb3cffaa9343e80f260526aabc5619b3f95a07e72a774e7f94ae032d9974ce767c11b6739240a63ffe366358a9dbd44d71bc68615fcd8e4f38aa91b1027d3d1effbbb954a2b3a8c90f0172f1b5ecdc5d7725b9ee64211e55f63d0d766519bf309839196f689e950088935981947abfeb225ff772f15b9875c889f3bc8f419629604c4647fdd8de2abef8fd05fe0c9eb22516edcd5a5da40c138bfebbff137b439d70020bba7885a218b1bbbe55f448090189b0afd6ae8fbf95d769db46efbb887300600056209524b3159f78bb99423a9fe2f5a3bcfe9741f242917a6735b53eeb8d04ad65fa594301fcb355d9984b909b425e50c83509b93dff77136481baba3b4b965d3793fd040751456e4cb2235d3d77708c0a045302f624d0b6990e02bcf8c7dd1c1aca8ec88a5c41291c0a13828f73f44a75f69390f3e668d809bab868e8e1c6113bf2dc756b2571808f4a7ff90976fec60c6cbbea52848b78dacfc6b28f3590f2eef3e3c740dceaaed5aeb2e18e87a1e482c2aa8b7bfb56cb74b4dced08fb2dacec94bae9ce755430d1507301dbb3c3d6770a0369ed46c2474f32bc38d3371ce983dfcd7e8808863453888abbebdbe572e69685063e5e16dedc0a6f11eb845b2052ff276cfc52ba9913a4bbe696b3a70e650f7dde09185624d3da84ddf0c433b0df03a6365086f85d057ca68e1e8b926f37d0ced8cf21aec7e6d80c2ac55ee10976519201e1ed04785088fe64d83c86f8c8a94119b84e9285e73446482a47a0fe5c8cc61d1be623cfa8a4ca724d87a4ef0f5da58abf569ba4506a5225602e05dc031749eb1fadc8dbd0da8def2c98a43ce72c1c918df175b164a0be7b360921910af47ce2ef782f48cff383c00c971cba693d73777644098323a4242ff244fb33242901a9c1de5300a648014da9705c8d7a7ae3f3945f2756ae0f6e73bd940766891fd4126b603778342b8f345e8c26810aa135c3bb957feb4e13b923f5054a4e117b970e9997e0ab599cf69270e2f74d7bea74f0f5ef0e49dba9ce1c33ddfba5e6443a3cd6071d5531718daaf4de928e0e8410b9c14e41f77180c044ff20974de7bc73e7898adf03bb2fe20db4750db8b7061027d84bc94b670c107164393ddc195ecef42f57c64d1e296ee62a1fea5dfdf3cdb960ad618b055ee3b50052350ae969a1a78772ac743c9bfbee68bf7fce110dd186ea97c12d5d8b95c93ac2f5dbd0e53024e3d360c16388fdfbf3a6962c955ef77206bf2fc856d2af7b88e9b43785f805fdd4b76d268e3626b3a2e78f712ab7b9f59029b65dba5fb0ea2f7081987f56f04f1805e0b6a12e0878e9bb5b13d345092696f6d81148fadd1f69ee7f1475ed6975a0a543559901f447aa96e9cd10bc061209ef63545f3689fe8e9d8fe3e136d442654920e09a4eaba9d0f7b372afe9ad2782994e6d87eeaa60e110c7156edb0298c24783957ffb3cac1fe5937de36dc3b146a069bc0e2b40cd9210965fb7df720c7992e5dcef23f3a7250c48a3eb973cd70c857c9a28a3075fab5ed0ca61a3291d40580b6708aced014193c16cdab74271c9353a924d49c6c04c49c8f61fa30eb374ef0f11b65bf06e06c1bbbe8512ffe872755848f5aad1274393a5f2b85c7b13582a8fd86c2145fd032cd8c3952b83c4536f5bbe91e15b87e2a8c3938873a2d9a359058738474fdd82d4ac69c49be87e418eb6455760aa3e810b4c65084f27f99ec53fa804cbbbeab686a9e951e865dfbaaa2966f9be30e78ca6ca0ef71265c8f05def099d6183326fea2a095ec52a68a28ca0ceef09c2683ed75d3d9283fc1987b9128299162209ed0891d1b7a39fbe2d4133d2a8391e31b16a33a4f87b7b5d48264bc25805bdb0af895d114a2bcf68fc88dcc185bd40268420b12ee725d313df2adbad0bb54dfb3d3decde4e715deb6c82507ce7c8f0ec22d8e0a9294d9fccfba839f6c12f567b365a017ffc30cae7ff3d3a771ec6cd54a7439dd41c53062e4039c377716491fc472df1a3e68615dcc1b9b594364fd7454f3837c12d37d20a37ffe498598dcfc4466176d5a05afa8d7064866212ce118a9f77af7d4ff5c0cc51a24f1ace545c9de51737e1c300c12eb9cd8e967ab34643d36abe2fe157e5399727d1b89d2072d3ce1c17f4c6b107f6f2a7bba9694e4cb3a2f183aa5f4f15436e834342fdf881ab2399eb30829ba9921060ca5a7d77358cf86c1d06bf20193f647196ccd39c81c9c89b374461ff8d854dab7babf8e1044b4e3e6d3f481f6e34b11c6876103167101d38926018944d55ad2d98629bb6162f0c04535bba51091f32f017d07824740fd1b555c416edfee56c6465472101fce88cccbab85e6e3d447ae4192a9a116ef261f0e6886b592b13b4bcd3ec1b79c43c5b17f7524710a45635cd20bd41235118d910a511796fa89b40719131e2204d1c0d0f579679ae0d6e7c80763dbd023c174b5b36358f4edd3242aaea45c49f7c9f318b0aef3e3f141a5848a6fbb7bfb1496fac2d535a641b39a8f3e56299f9a8547b92afa068688aab4ff72ff3f1b82bce874f5a474648cd56d125c89aa2a73703b770fff480aa9548584f08cf263861eb12a1556fee2500d3ea8dd7908b03830d7092aa2e56c6c87ee23cb5180d7c1473367948cb05738711c152eb5880d299a5e87b7524e414aed50ec0b03179bec003389dd60afe590f376165c2bf0996562679055a4e3f924a470bb827bd4ddfb1ab71e9de05e42dd739cc56a59ee8db38f312131ecdae3e6d0a3e8f6adfa16975017a48f646c4a4fb11d885490885310f73f1b9b9ce5f193ba44479675360389c84760e8e53c643960cabb7f795038a57e45ae82f5288957d1d6b05225baa559cc3cc222ef076541cd5d40ddddc4a8e050082a76e5b8b2c6f52398d8b3ff068bdefb6f2674ffb62f6fb10d65a42c20343cb4637ccaa3c06141ef8213f97eefe451d1bee52c3f542d84e16e7e582826d7b3556d0d136c6d45e97fbbb4675b1fdd7512a888670df5ebdbb269de61e67592fb664ba23a71b1ab6f6940594e850017ebd3ed4acf8c08da7be36d81a2ea8ae4ab86f55a4952b189873a8f832955b8b601ec1b149bb4ecc1897f28663209f512bffeadf2927245362885635cdb5d04feb562ca5743762fc931a38d6f20696b8998106cda3b097cdc42d01ef55c22df941e129477dd0bb5efea809a9c189545d21285131c7ecc2048810f1c4e192a6727db9d441719aacb4a932da3ff13dd56e92f7dbc47576001aaa51a2f5cb1eff9ba7de1127b9e8ca33c8afc4cbbe6d603e84cafe0d88e0fe09d1737b86131745ff1a8e267c6c5bf91a3856c9e36604376a9d76a825de9003095d3196bce29d4234b7ebe183242b9be10d078ae11ddf6e5a5253e3d929eed96a090cb25591d8d79227b706bf0169f0e871871b5d9f36908804352d3ec82ca356d5000e3ea740660a9a5d5ac5c492ba2bec82018088be99df98d0b06be09f82174bfad4a79f709cb3c5627832ab2e9aac6424db418d4d8869f4d3d1a1ca584c10d1a1dae8086bc556bbd11edcd8a209a6042593c4af5f598320bbe78395bc6306a5096030670f69060993122f36ab1a993e55679763c96ddf6690ccf30f20d919bee7c1451e93a74a700c3fd10a3a1afc2b82d6ecfe504f0f0e9897caf6180105d80c292c1e1fa6fcc2fbd98c614f2494157c2a721b17a29de3757656cff5f17638a45ceb3f105ad32e6999d71654e41fde313f74982d2b4734399250dfaf570a34469416210e482b4909454b292451cf6519e20c9753db1a5e6eeed2693e6f04076aa85bf48e34d5a51f248001bd6f7ca4ebe7f3c12aade23ff02e2bfc8a6719c3e83d47f53abc7130c35937dbc0fd3fd27197bbc607c9cc6a2a1c9bdac64950a2f9296f29de4f062733a77d9a8be5f4cf087af516b01a100e2b26c27203baa21aad1dc65a0aeab9a1e16c303fe4897b9d9890c35006609505f3723b565afe7d22948b354d331858359235402b711c6d34f7beb44bb44b40cb76dae282a108de292d722caf2b4a91f137df159bb177ffade1b6ebb6737cc824132ca0792453aca507410c04c2891f56b8b6e8f07ba99ba813e34e29147fedcb092e0f4d176f8f7081260a9298c8d22545604c39a9e320baf9125384814cccf64816ce2b272d2243e1a0f524dd52f6a884eb5a2e6359a85bd04d0f602bf9d14c4e45031104c7ccad3ba8c991035e65ce21745256976c74214dc95b2663940ec4149c8225b52a074c85c629949e9af18370e91e05caaebad7be56c8a6ba66543b547170aa3ee1bbf4dd4622367dbbb46d68f0ea552d2fa7251b2da684f4e9838a524d4cd0c2fcd47572403034edba25f77e261d6af10663a1fed51983d59d0d2c063400987782ee0f0fe0c61f110a0711ea53b2858b480c04bdf1218b08af6a4cd8bb75d1feb81d090e111efa1f79865b3643634c94be91020d9ea5d671a1f0af23acc508ca9568836a5802e2d05feff90adb384968139a12476e255be2a7d76bbd1057653aafbb2de32530732b7e0ec8cfd4781e50bc439e6e53bc0dc77a366b1fdaba5020d9914db8bc8c20bbff273be6265c58f524a6fdedaf40f7bc4b939e60725302aea2a0bbb664eb696f8fde170a5fc5a6768490202e925e7c70b9f8607143535d75cfb624801a4b57da900c7360d5722e19ba86a7dcd1084de460faa59c93ec75bc47f28f636222e140651a46e389290dce02cf450d2d0737feb9244f141a01e3b341a85ccb6dfef7d2dbc440d484ce8c7e6b52f68905f7773921193238adc5b63f2e62ba22834c2c75c2504cb808fb5a5a7a55b699d162245ab47e79ce729abd4a11e1258d42ebd9efcad682e564d7372537c960411ea4b72e112a65d4ed5dda51473dc884741d51a673990f4ad2ac09dc3a5d9de4cedba3f0f3a322f56f4e9d72fd624ae07a587e97e7d0ee2207cb36fabb82a43106e6a09fa8ca3169f67373c785952724f742d9bf8f71d9ffadabfde6ce5c99cd0ae96cb53c85262ed88bedd498c871c024b73bcf66627d4bcc72b6b61d2b86728f7a7750acdc5ab963e677f5e568c24fa6620cab492e1c1aeee984e131684059bf8986754f292fe265aede37d54e540c37c1a5d1f03d9539321fcc926e1967b39413b95e261719b1442e0c6e3a60303dac3b7532ee8e81232203f3e5e7537de7c9084016f84ca29905d9bd562ef0c7f6ca0550df80acfda0ecdd8bc4adb3dffba6c5c177fcf6ddb6e6fd4eba1346d840083db5c2352215b98672e9235e4cfabaa6ff250010bf71cbbfa4abc1fa436bae02c9fb1c764fda6558bbe35c03ff6fe98651ca208797f49ae81096cb633eecfd33e8b6ff8fa2d50ca23fdc866297dc954a52258197fa2ee95612e5aca1fc40bffe7d14ebc40454fba7f6dbaa173736c57d327eb505d28158061d9290476ae343feaf367778e8c38015bbdc9b9be35572909d1f573fe78f8e6df1982682ed1fa54429f8165367338fa80c2562c7f67de76ab3315fca50aed98d8f949b48929a81feebee496a9a77ee247347c7f4e13c0145f920d52d932a150f98c03ad877b7e00aaa48a6303e302c", 0x1000, 0x20}, {0x1, 0x6, &(0x7f0000002740)='netdevsim\x00', &(0x7f0000002780)="90cd6d0a7e4df99e979c3b3dca6185727bba0c0ad0dd387f77d6db685bc27e3db21786186e7e06d275e7505d787ac71aff2517b0dd3c112723af9bef1d4cff1506f43e298cb1d45f4094f7097c58721f35ce95c37f0ba1ea16c82af476c2697d9123c42a1b51b39bf8991aa74501955fee1f093ee00f9aa16d078ee6f9c4494568d80d6218b11efbc96586f4f489243d174d13ec9ce9299f4fde41a952b9f489826130c3074db46a5dafc818e73c396ad767821bbb298eb1df359b79950c1a96e0be2b39b7a29ea68398c1479c7b4b44", 0xd0, 0x20}, {0x1, 0x4, &(0x7f0000002880)='&1\x00', &(0x7f00000028c0)="690349ad19ff9479f2a318d0766a911f98cf602196daa04a7d0e7a8035b7a3d3f446990af3366d62fee7d4bd1261b2fcbeb455ee0f8f92e0b61b3c477c19adb165655d8b7dc572229a6b0400378647e96d34f3f77e5384702e16dea6a7426106a45b989009298bd9b3a81e25327795d73d8bd4c06355c0d949146e04884957ac4ceb3faefd3553a1f070bfe5c250d89b09588c7304a54020e86374ede2d895bee357684c52", 0xa5, 0x9}]}) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000002b00)=0x3, 0x4) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) 728.376µs ago: executing program 2 (id=10181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="44eb628b", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b80040009000000000008000a0000000000"], 0x44}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xf2ff, 0x8001}, {0xfff4, 0x300}}}, 0x24}}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="ba47d27493727f265a642cfd06665ddb234c04", @ANYRES8=r4, @ANYRES16=r0, @ANYBLOB="163fe52b4bf870f497af03dc86fbc0122bf63a0bdc96c95146d859bb1cb1790da9623eb41fe5e26222869d4adb80c1de0b9b70558378681153a641229f180ef0da9454e67c361841f4d4e5b775c3c3fe080129298e9dc1006044defa30dd0c99c757c2db66aaf33dab2234df770584a07fd25d1a9811caac395be1258e579fabaf4049e96364db455aec6ac09a56", @ANYRES8=r0], 0x5c}, 0x1, 0x6c, 0x0, 0x20000800}, 0x0) 0s ago: executing program 1 (id=10182): r0 = socket$inet6(0xa, 0x3, 0xff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendfile(r0, r0, &(0x7f0000000540), 0x721) r1 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000028c0)=[{&(0x7f00000005c0)="f268", 0x2}, {&(0x7f0000000880)="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", 0x615}, {&(0x7f0000000500)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11", 0x1d}], 0x3) kernel console output (not intermixed with test programs): netlink: 'syz.3.9165': attribute type 1 has an invalid length. [ 1195.515918][T11938] veth0_macvtap: entered promiscuous mode [ 1195.562757][T11938] veth1_macvtap: entered promiscuous mode [ 1195.637738][T11938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.674763][T11938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.840561][ T4474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.840631][ T4474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.840691][ T4474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.840726][ T4474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.247741][T12343] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 1196.273894][ T7354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.273915][ T7354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.352138][T12349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9172'. [ 1196.412945][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9173'. [ 1196.485517][ T7354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.485538][ T7354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.508689][T12357] siw: device registration error -23 [ 1196.536719][T21780] Bluetooth: hci4: SCO packet too small [ 1196.677053][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9100'. [ 1196.747499][T12373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9175'. [ 1197.161960][T12349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1197.359273][T12404] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9179'. [ 1197.746450][T12425] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1197.956434][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9187'. [ 1198.117483][T12442] netlink: 59 bytes leftover after parsing attributes in process `syz.0.9184'. [ 1198.224547][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.225208][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.422671][T12438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.437254][T12438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.890682][ T7719] net_ratelimit: 23 callbacks suppressed [ 1198.890703][ T7719] bond2: (slave bridge2): failed to get link speed/duplex [ 1198.890765][ T7719] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.890804][ T7719] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.890838][ T7719] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.890874][ T7719] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.897236][T12466] syzkaller0: entered promiscuous mode [ 1198.897257][T12466] syzkaller0: entered allmulticast mode [ 1199.020257][T15192] bond2: (slave bridge2): failed to get link speed/duplex [ 1199.156046][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1199.266434][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1199.371899][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1199.403937][T12511] netlink: 'syz.0.9194': attribute type 11 has an invalid length. [ 1199.403959][T12511] netlink: 'syz.0.9194': attribute type 11 has an invalid length. [ 1199.599951][T15192] bond2: (slave bridge2): failed to get link speed/duplex [ 1199.600425][T12519] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1282) ! [ 1199.752055][T12525] __nla_validate_parse: 1 callbacks suppressed [ 1199.752077][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9198'. [ 1199.839973][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1199.931876][T12529] batadv_slave_1: entered promiscuous mode [ 1199.949893][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1200.022892][T12537] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9200'. [ 1200.055264][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9201'. [ 1200.061405][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1200.172563][ T4469] bond2: (slave bridge2): failed to get link speed/duplex [ 1201.481401][T12528] batadv_slave_1: left promiscuous mode [ 1201.620664][T12589] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1201.764752][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9206'. [ 1202.115880][T12616] netlink: 'syz.3.9210': attribute type 11 has an invalid length. [ 1202.115906][T12616] netlink: 'syz.3.9210': attribute type 11 has an invalid length. [ 1202.115921][T12616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9210'. [ 1202.568040][T12635] validate_nla: 1 callbacks suppressed [ 1202.568060][T12635] netlink: 'syz.3.9216': attribute type 1 has an invalid length. [ 1202.628557][T12635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1202.662925][T12636] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1202.969951][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1203.153615][T12673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9222'. [ 1203.376553][T12682] netlink: 'syz.0.9224': attribute type 10 has an invalid length. [ 1203.428538][T12687] netlink: 'syz.0.9224': attribute type 10 has an invalid length. [ 1203.454606][T12682] team0: Port device dummy0 added [ 1203.487351][T12687] team0: Port device dummy0 removed [ 1203.738738][T12697] netlink: 'syz.1.9226': attribute type 11 has an invalid length. [ 1203.738761][T12697] netlink: 'syz.1.9226': attribute type 11 has an invalid length. [ 1203.738775][T12697] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9226'. [ 1203.933690][ T4470] net_ratelimit: 27 callbacks suppressed [ 1203.933711][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1204.041454][T15195] bond2: (slave bridge2): failed to get link speed/duplex [ 1204.150797][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1204.264524][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1204.285576][T12718] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1204.368757][T12723] Bluetooth: MGMT ver 1.23 [ 1204.397960][T12720] syzkaller0: entered promiscuous mode [ 1204.397982][T12720] syzkaller0: entered allmulticast mode [ 1204.399409][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9230'. [ 1204.405765][T12722] tipc: Enabling of bearer rejected, already enabled [ 1204.421827][ T4474] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1204.421875][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1204.422733][ T4474] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1204.422773][ T4474] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1204.422811][ T4474] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1204.530709][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1204.641564][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1204.757594][T15195] bond2: (slave bridge2): failed to get link speed/duplex [ 1204.812719][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9235'. [ 1204.873198][T12753] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1204.873244][T12753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.887102][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9235'. [ 1204.956931][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9236'. [ 1205.090626][T12763] netlink: 'syz.2.9238': attribute type 1 has an invalid length. [ 1205.143469][T12772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1205.205936][T12763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1205.208912][T12767] batadv_slave_1: entered promiscuous mode [ 1205.249719][T12773] bond2: (slave veth0_to_bond): making interface the new active one [ 1205.257153][T12773] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1205.381522][T12782] netlink: 'syz.4.9242': attribute type 11 has an invalid length. [ 1205.381545][T12782] netlink: 'syz.4.9242': attribute type 11 has an invalid length. [ 1205.381559][T12782] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9242'. [ 1205.389673][T12763] macvlan2: entered promiscuous mode [ 1205.389696][T12763] macvlan2: entered allmulticast mode [ 1205.390502][T12763] bond2: entered promiscuous mode [ 1205.390520][T12763] veth0_to_bond: entered promiscuous mode [ 1205.407813][T12763] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1205.408519][T12763] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1205.432766][T12763] bond2: left promiscuous mode [ 1205.432787][T12763] veth0_to_bond: left promiscuous mode [ 1205.714385][T12764] batadv_slave_1: left promiscuous mode [ 1206.148921][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9245'. [ 1206.175994][T12793] tipc: Resetting bearer [ 1206.255817][T12793] tipc: Disabling bearer [ 1206.282132][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9248'. [ 1206.288351][T12802] ip6gretap0: entered promiscuous mode [ 1206.288547][T12802] vlan2: entered promiscuous mode [ 1206.380701][ T7354] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.381023][ T7354] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.381059][ T7354] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.381092][ T7354] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.986160][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1207.006922][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1207.011664][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1207.027129][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1207.029451][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1207.463176][T12835] batadv_slave_1: entered promiscuous mode [ 1207.773443][T12833] batadv_slave_1: left promiscuous mode [ 1207.993588][T12818] wg2 speed is unknown, defaulting to 1000 [ 1208.024782][T12852] FAULT_INJECTION: forcing a failure. [ 1208.024782][T12852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1208.024811][T12852] CPU: 0 UID: 0 PID: 12852 Comm: syz.4.9258 Not tainted syzkaller #0 PREEMPT(full) [ 1208.024829][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1208.024839][T12852] Call Trace: [ 1208.024847][T12852] [ 1208.024856][T12852] dump_stack_lvl+0xe8/0x150 [ 1208.024887][T12852] should_fail_ex+0x410/0x560 [ 1208.024912][T12852] _copy_from_user+0x2d/0xb0 [ 1208.024936][T12852] ___sys_recvmsg+0x173/0x5a0 [ 1208.024968][T12852] ? __pfx____sys_recvmsg+0x10/0x10 [ 1208.025000][T12852] ? lock_acquire+0x115/0x350 [ 1208.025031][T12852] ? __fget_files+0x3a2/0x420 [ 1208.025061][T12852] do_recvmmsg+0x31a/0x7f0 [ 1208.025091][T12852] ? __pfx_do_recvmmsg+0x10/0x10 [ 1208.025126][T12852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1208.025147][T12852] ? __fget_files+0x3a2/0x420 [ 1208.025174][T12852] __x64_sys_recvmmsg+0x198/0x250 [ 1208.025200][T12852] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1208.025237][T12852] do_syscall_64+0x166/0x520 [ 1208.025252][T12852] ? trace_irq_disable+0x3b/0x140 [ 1208.025270][T12852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.025289][T12852] ? clear_bhb_loop+0x70/0xc0 [ 1208.025312][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.025329][T12852] RIP: 0033:0x7fe748d9e199 [ 1208.025345][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.025359][T12852] RSP: 002b:00007fe749c31028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1208.025378][T12852] RAX: ffffffffffffffda RBX: 00007fe749025fa0 RCX: 00007fe748d9e199 [ 1208.025391][T12852] RDX: 0400000000000046 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1208.025403][T12852] RBP: 00007fe749c31090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.025414][T12852] R10: 0000000040000122 R11: 0000000000000246 R12: 0000000000000001 [ 1208.025427][T12852] R13: 00007fe749026038 R14: 00007fe749025fa0 R15: 00007fff2ad4c318 [ 1208.025466][T12852] [ 1208.347100][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9259'. [ 1208.347137][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9259'. [ 1208.598203][T12858] erspan0: entered promiscuous mode [ 1208.611850][T12858] gretap0: entered promiscuous mode [ 1209.060745][T12873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9262'. [ 1209.139352][ T5615] Bluetooth: hci0: command tx timeout [ 1209.172779][T15192] net_ratelimit: 20 callbacks suppressed [ 1209.172798][T15192] bond2: (slave bridge2): failed to get link speed/duplex [ 1209.267150][ T4470] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1209.270383][ T4470] bridge0: port 1(netdevsim0) entered disabled state [ 1209.419924][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1209.436402][T12891] xt_IDLETIMER: timeout value is zero [ 1209.863428][ T4470] bridge_slave_1: left allmulticast mode [ 1209.863454][ T4470] bridge_slave_1: left promiscuous mode [ 1209.863697][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.946115][ T4470] vcan0: left allmulticast mode [ 1209.997250][T12925] nbd: nbd3 already in use [ 1209.998033][T12925] block nbd3: NBD_DISCONNECT [ 1209.998072][T12925] block nbd3: Send disconnect failed -32 [ 1209.998091][T12925] block nbd3: shutting down sockets [ 1210.365047][T12935] __nla_validate_parse: 3 callbacks suppressed [ 1210.365068][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9269'. [ 1210.365083][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9269'. [ 1210.365826][T12939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9273'. [ 1210.423292][ T4470] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1210.636587][ T4470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.637049][ T4470] bond_slave_0: left allmulticast mode [ 1210.637315][ T4470] bond0 (unregistering): Released all slaves [ 1210.666960][ T4470] bond1 (unregistering): Released all slaves [ 1210.682677][ T4470] bond2 (unregistering): Released all slaves [ 1210.697724][ T4470] bond3 (unregistering): Released all slaves [ 1210.722990][ T4470] bond4 (unregistering): Released all slaves [ 1210.752396][ T4469] bond2: (slave bridge2): failed to get link speed/duplex [ 1210.871009][ T7719] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.024799][T12951] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1211.042686][ T4470] ovs-dp0: left promiscuous mode [ 1211.086192][T12818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.086295][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.086464][T12818] bridge_slave_0: entered allmulticast mode [ 1211.090245][T12818] bridge_slave_0: entered promiscuous mode [ 1211.097189][T12818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.097296][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.097445][T12818] bridge_slave_1: entered allmulticast mode [ 1211.108086][T12818] bridge_slave_1: entered promiscuous mode [ 1211.109461][T12947] bridge0: port 3(bond0) entered blocking state [ 1211.109564][T12947] bridge0: port 3(bond0) entered disabled state [ 1211.109729][T12947] bond0: entered allmulticast mode [ 1211.109868][T12947] bond_slave_0: entered allmulticast mode [ 1211.109885][T12947] bond_slave_1: entered allmulticast mode [ 1211.111849][T12947] bond0: entered promiscuous mode [ 1211.111867][T12947] bond_slave_0: entered promiscuous mode [ 1211.112023][T12947] bond_slave_1: entered promiscuous mode [ 1211.141718][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.222934][ T5615] Bluetooth: hci0: command tx timeout [ 1211.239924][ T7719] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.241046][ T4470] tipc: Disabling bearer [ 1211.243223][ T4470] tipc: Left network mode [ 1211.245762][T12953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9274'. [ 1211.352679][T12953] hsr_slave_1 (unregistering): left promiscuous mode [ 1211.494735][T12953] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9274'. [ 1211.500846][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1211.539424][T12818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.626052][T12818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.805680][T12818] team0: Port device team_slave_0 added [ 1211.807581][T12980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9284'. [ 1211.854262][T12818] team0: Port device team_slave_1 added [ 1211.908698][T12980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9284'. [ 1211.975450][T12984] netlink: 'syz.2.9285': attribute type 1 has an invalid length. [ 1212.104544][T12994] netlink: 'syz.2.9285': attribute type 2 has an invalid length. [ 1212.104575][T12994] netlink: 'syz.2.9285': attribute type 1 has an invalid length. [ 1212.104590][T12994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1212.136207][T12994] netlink: 200 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1212.169241][T12818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.169259][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.169285][T12818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.239278][T12818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.239293][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.239317][T12818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.537289][ T4470] hsr_slave_0: left promiscuous mode [ 1212.549857][ T4470] hsr_slave_1: left promiscuous mode [ 1212.550747][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.557781][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.562667][ T4470] batman_adv: batadv0: Removing interface: bond_slave_1 [ 1212.634829][T13007] xt_ecn: cannot match TCP bits for non-tcp packets [ 1212.975167][ T4470] team0 (unregistering): Port device team_slave_1 removed [ 1213.010773][ T4470] team0 (unregistering): Port device team_slave_0 removed [ 1213.183590][ T7719] smbdirect: ib_dev[syz2] removed [ 1213.289972][ T5615] Bluetooth: hci0: command tx timeout [ 1213.343824][ T4470] team0 (unregistering): Port device dummy0 removed [ 1213.402828][T12818] hsr_slave_0: entered promiscuous mode [ 1213.404058][T12818] hsr_slave_1: entered promiscuous mode [ 1213.404966][T12818] debugfs: 'hsr0' already exists in 'hsr' [ 1213.404983][T12818] Cannot create hsr debugfs directory [ 1213.439527][T13021] syzkaller0: tun_chr_ioctl cmd 21731 [ 1213.467792][T13022] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1213.469675][T13026] syzkaller0: tun_chr_ioctl cmd 21731 [ 1213.496897][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1213.999509][T13054] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1214.008750][T13049] Bluetooth: MGMT ver 1.23 [ 1214.047764][T13045] netlink: 'syz.4.9295': attribute type 11 has an invalid length. [ 1214.047788][T13045] netlink: 'syz.4.9295': attribute type 11 has an invalid length. [ 1214.140108][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1214.181031][ T4470] IPVS: stop unused estimator thread 0... [ 1214.349939][ T4469] bond2: (slave bridge2): failed to get link speed/duplex [ 1214.792528][ T4470] batman_adv: batadv0: Removing interface: gretap1 [ 1215.008482][ T4470]  (unregistering): Released all slaves [ 1215.023711][ T4470] bond0 (unregistering): Released all slaves [ 1215.038300][ T4470] bond1 (unregistering): Released all slaves [ 1215.053606][ T4470] bond2 (unregistering): Released all slaves [ 1215.073346][ T4470] bond3 (unregistering): Released all slaves [ 1215.092117][ T4470] bond4 (unregistering): Released all slaves [ 1215.110687][ T4470] bond5 (unregistering): Released all slaves [ 1215.223816][T13086] bond4 (unregistering): Released all slaves [ 1215.374373][ T5615] Bluetooth: hci0: command tx timeout [ 1215.423889][ T4469] bond2: (slave bridge2): failed to get link speed/duplex [ 1215.439480][ T4470] : left promiscuous mode [ 1215.467221][T13110] __nla_validate_parse: 6 callbacks suppressed [ 1215.467243][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9306'. [ 1215.677842][T13565] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1215.678133][T13108] macsec1: entered allmulticast mode [ 1215.678155][T13108] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1215.680009][T13108] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1215.689488][T13108] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1215.720514][ T4470] ovs0: left promiscuous mode [ 1215.824203][T13565] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1215.897054][ T4470] ovs-dp0: left promiscuous mode [ 1216.064452][ T4470] tipc: Disabling bearer [ 1216.064578][ T4470] tipc: Left network mode [ 1216.084706][T15195] bond2: (slave bridge2): failed to get link speed/duplex [ 1216.096248][T13133] bridge0: port 3(syz_tun) entered blocking state [ 1216.096349][T13133] bridge0: port 3(syz_tun) entered disabled state [ 1216.096508][T13133] syz_tun: entered allmulticast mode [ 1216.102812][T13133] syz_tun: entered promiscuous mode [ 1216.103737][T13133] bridge0: port 3(syz_tun) entered blocking state [ 1216.103846][T13133] bridge0: port 3(syz_tun) entered forwarding state [ 1216.170473][ T4470] IPVS: stopping master sync thread 18823 ... [ 1216.343071][T15192] bond2: (slave bridge2): failed to get link speed/duplex [ 1216.347423][T13145] netlink: 'syz.2.9313': attribute type 11 has an invalid length. [ 1216.347441][T13145] netlink: 'syz.2.9313': attribute type 11 has an invalid length. [ 1216.347452][T13145] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9313'. [ 1216.648848][ T4470] hsr_slave_0: left promiscuous mode [ 1216.690050][ T4470] batadv0: left allmulticast mode [ 1216.690246][ T4470] batadv0: left promiscuous mode [ 1217.155381][T13164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9316'. [ 1217.397666][T13183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9319'. [ 1218.286341][T13178] macsec1: entered allmulticast mode [ 1218.286369][T13178] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1218.286420][T13178] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1218.289465][T13178] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1218.296490][T13203] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1218.336537][T13178] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1218.430335][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1218.433886][ T516] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1218.582270][T13211] xt_addrtype: ipv6 does not support BROADCAST matching [ 1218.600256][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9325'. [ 1218.649197][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9327'. [ 1218.660202][ T4469] bond2: (slave bridge2): failed to get link speed/duplex [ 1218.676848][T12818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1218.687994][T13207] netlink: 'syz.2.9325': attribute type 16 has an invalid length. [ 1218.688013][T13207] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9325'. [ 1218.712043][T12818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1218.712961][T12818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1218.738330][T12818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.755951][T12818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1218.804903][T12818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.807673][T12818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1218.862124][T12818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1218.862701][T15195] bond2: (slave bridge2): failed to get link speed/duplex [ 1218.953744][ T4470] IPVS: stop unused estimator thread 0... [ 1219.089625][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9331'. [ 1219.089668][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9331'. [ 1219.115252][T13233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1219.118978][T13237] bond0: left allmulticast mode [ 1219.118998][T13237] bond_slave_0: left allmulticast mode [ 1219.119015][T13237] bond_slave_1: left allmulticast mode [ 1219.119032][T13237] bond0: left promiscuous mode [ 1219.119044][T13237] bond_slave_0: left promiscuous mode [ 1219.119237][T13237] bond_slave_1: left promiscuous mode [ 1219.119708][T13237] bridge0: port 3(bond0) entered disabled state [ 1219.190608][T13237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.193114][T13237] bond1: (slave bond0): making interface the new active one [ 1219.194265][T13237] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1219.261914][T13233] bond1 (unregistering): (slave bond0): Releasing active interface [ 1219.268644][T13237] netlink: 'syz.0.9331': attribute type 2 has an invalid length. [ 1219.268666][T13237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9331'. [ 1219.271099][T13233] bond1 (unregistering): Released all slaves [ 1219.365025][T13237] : entered promiscuous mode [ 1219.450522][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1219.580791][T15195] bond2: (slave bridge2): failed to get link speed/duplex [ 1219.608470][T12818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.682052][T12818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.688133][ T5615] Bluetooth: hci1: SCO packet too small [ 1219.720077][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1219.728393][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.728496][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.782971][T15195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.783078][T15195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.851170][ T4469] bond2: (slave bridge2): failed to get link speed/duplex [ 1220.042597][T15195] bond2: (slave bridge2): failed to get link speed/duplex [ 1220.150224][ T4469] bond2: (slave bridge2): failed to get link speed/duplex [ 1220.262661][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1220.374745][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1220.500842][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1220.611913][ T4469] bond2: (slave bridge2): failed to get link speed/duplex [ 1221.038158][T13294] tipc: Started in network mode [ 1221.038191][T13294] tipc: Node identity 9246571c25d6, cluster identity 4711 [ 1221.038347][T13294] tipc: Enabled bearer , priority 0 [ 1221.074829][T13294] syzkaller0: entered promiscuous mode [ 1221.074852][T13294] syzkaller0: entered allmulticast mode [ 1221.159537][T13294] tipc: Resetting bearer [ 1221.192008][T13293] tipc: Resetting bearer [ 1221.239587][T13293] tipc: Disabling bearer [ 1221.441049][T12818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.523317][ T7719] IPVS: starting estimator thread 0... [ 1221.610214][T13310] IPVS: using max 34 ests per chain, 81600 per kthread [ 1221.729259][T13324] netlink: 'syz.2.9348': attribute type 11 has an invalid length. [ 1221.729284][T13324] netlink: 'syz.2.9348': attribute type 11 has an invalid length. [ 1221.729298][T13324] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9348'. [ 1221.795908][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9347'. [ 1221.806988][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9347'. [ 1221.908774][T12818] veth0_vlan: entered promiscuous mode [ 1221.988223][T12818] veth1_vlan: entered promiscuous mode [ 1222.160186][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9351'. [ 1222.160889][T12818] veth0_macvtap: entered promiscuous mode [ 1222.178154][T12818] veth1_macvtap: entered promiscuous mode [ 1222.226499][T12818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.269075][T13341] netlink: 'syz.2.9352': attribute type 1 has an invalid length. [ 1222.272352][T12818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.287361][T13343] block nbd0: not configured, cannot reconfigure [ 1222.309983][ T7719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.310909][ T7719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.310946][ T7719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.310978][ T7719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.367835][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9352'. [ 1222.784972][T13368] netlink: 'syz.4.9360': attribute type 1 has an invalid length. [ 1222.904974][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9360'. [ 1222.913576][T13368] bond1: entered promiscuous mode [ 1222.913979][T13368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1222.937004][ T7719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.937025][ T7719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.974396][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9359'. [ 1223.246030][T13368] bond1: (slave bridge2): making interface the new active one [ 1223.246057][T13368] bridge2: entered promiscuous mode [ 1223.280509][T13368] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1223.325374][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.325397][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.444271][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9362'. [ 1223.581965][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1224.412203][T13437] netlink: 'syz.2.9374': attribute type 8 has an invalid length. [ 1224.412225][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9374'. [ 1224.470789][ T4474] net_ratelimit: 26 callbacks suppressed [ 1224.470817][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1224.586372][ T7719] bond2: (slave bridge2): failed to get link speed/duplex [ 1224.693913][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1224.727473][T13456] netlink: 'syz.0.9379': attribute type 1 has an invalid length. [ 1224.727494][T13456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9379'. [ 1224.800055][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1224.842306][T13454] sit1: entered promiscuous mode [ 1224.891409][T13462] IPVS: set_ctl: invalid protocol: 115 172.20.20.11:20001 [ 1224.910856][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1225.019983][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1225.131186][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1225.250092][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1225.361124][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1225.470019][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1225.788614][T13495] 8021q: VLANs not supported on sit0 [ 1226.603765][T13539] x_tables: duplicate underflow at hook 3 [ 1226.603862][T13541] x_tables: duplicate underflow at hook 3 [ 1226.803698][T13553] __nla_validate_parse: 9 callbacks suppressed [ 1226.803722][T13553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9404'. [ 1226.901148][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9405'. [ 1226.929162][T13555] gtp0: entered promiscuous mode [ 1226.929186][T13555] gtp0: entered allmulticast mode [ 1227.003472][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9406'. [ 1227.061871][T13564] netlink: 'syz.0.9407': attribute type 4 has an invalid length. [ 1227.061896][T13564] netlink: 3573 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1227.346737][T13591] tipc: Enabling of bearer rejected, failed to enable media [ 1227.529035][T13609] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9413'. [ 1227.934423][T13618] mac80211_hwsim hwsim180 wlan0: entered promiscuous mode [ 1228.020912][T13629] netlink: 'syz.0.9417': attribute type 11 has an invalid length. [ 1228.020937][T13629] netlink: 'syz.0.9417': attribute type 11 has an invalid length. [ 1228.020951][T13629] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9417'. [ 1229.550331][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1229.550352][T13705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1229.750209][ T176] net_ratelimit: 32 callbacks suppressed [ 1229.750231][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1229.861375][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1229.932283][T13715] netlink: 'syz.1.9429': attribute type 29 has an invalid length. [ 1229.932306][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9429'. [ 1229.932330][T13715] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1229.970894][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1230.082881][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1230.190778][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1230.299906][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1230.412229][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1230.502990][T13740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1230.522236][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1230.535677][T13736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9433'. [ 1230.670948][T13744] x_tables: duplicate underflow at hook 1 [ 1230.703791][T13752] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1230.722887][T15195] bond2: (slave bridge2): failed to get link speed/duplex [ 1231.486494][T13792] netlink: 'syz.2.9449': attribute type 21 has an invalid length. [ 1231.519878][T13794] netlink: 'syz.1.9447': attribute type 11 has an invalid length. [ 1231.519902][T13794] netlink: 'syz.1.9447': attribute type 11 has an invalid length. [ 1231.537435][T13796] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1231.795469][T13807] veth1_macvtap: left promiscuous mode [ 1231.914152][T13810] __nla_validate_parse: 5 callbacks suppressed [ 1231.914171][T13810] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9456'. [ 1232.096762][T15912] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1232.096952][T13826] macsec1: entered allmulticast mode [ 1232.096972][T13826] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1232.098298][T13826] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1232.101605][T13826] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1232.155435][T15912] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1232.256403][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9458'. [ 1232.256432][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9458'. [ 1232.295421][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9458'. [ 1232.295449][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9458'. [ 1232.428490][T13846] batadv_slave_1: entered promiscuous mode [ 1232.951979][T13876] netlink: 'syz.1.9469': attribute type 12 has an invalid length. [ 1233.219892][T13845] batadv_slave_1: left promiscuous mode [ 1233.527265][T13888] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20004 [ 1233.560868][T13565] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1233.562657][T13891] macsec1: entered allmulticast mode [ 1233.565685][T13891] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1233.567040][T13891] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1233.598747][T13891] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1233.702653][T13893] bond2 (unregistering): Released all slaves [ 1233.736130][T13565] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1233.766402][T13907] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9476'. [ 1233.781148][T13907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1233.989890][T13917] SET target dimension over the limit! [ 1233.998909][T13917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1234.001771][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1234.113527][T13923] netlink: 616 bytes leftover after parsing attributes in process `syz.4.9482'. [ 1234.487699][T13935] syzkaller1: entered promiscuous mode [ 1234.487724][T13935] syzkaller1: entered allmulticast mode [ 1234.629432][T13947] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1282) ! [ 1234.831617][ T7714] net_ratelimit: 27 callbacks suppressed [ 1234.833326][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1234.940547][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1234.985077][T13960] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1235.046101][T13961] tipc: Enabled bearer , priority 0 [ 1235.194994][T13961] syzkaller0: entered promiscuous mode [ 1235.195020][T13961] syzkaller0: entered allmulticast mode [ 1235.215859][T13961] tipc: Resetting bearer [ 1235.229856][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1235.257835][T13957] tipc: Resetting bearer [ 1238.017486][T13957] tipc: Disabling bearer [ 1238.033537][T14008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1238.038569][ T2276] tipc: Node number set to 3079690012 [ 1238.042277][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1238.160369][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1238.211755][T14014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9503'. [ 1238.212363][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9503'. [ 1238.212396][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9503'. [ 1238.285953][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9501'. [ 1238.464938][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9506'. [ 1238.464967][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9506'. [ 1238.464982][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9506'. [ 1238.511791][T14035] netlink: 'syz.0.9507': attribute type 1 has an invalid length. [ 1238.700870][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1238.747514][T14044] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1238.880207][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1238.993975][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1239.121240][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1239.164563][T14058] mac80211_hwsim hwsim165 syzkaller0: entered promiscuous mode [ 1239.164593][T14058] mac80211_hwsim hwsim165 syzkaller0: entered allmulticast mode [ 1239.281519][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9513'. [ 1239.508312][T14074] hsr0: entered promiscuous mode [ 1239.807201][T14085] netlink: 'syz.3.9518': attribute type 1 has an invalid length. [ 1239.807609][T14073] syzkaller0: entered promiscuous mode [ 1239.807649][T14073] syzkaller0: entered allmulticast mode [ 1239.940339][ T176] net_ratelimit: 5 callbacks suppressed [ 1239.940359][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1239.994004][T14093] netlink: 268 bytes leftover after parsing attributes in process `syz.3.9521'. [ 1240.005019][T14063] hsr0: left promiscuous mode [ 1240.053475][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1240.073707][T14097] netlink: 'syz.4.9520': attribute type 10 has an invalid length. [ 1240.127716][T14097] dummy0: entered promiscuous mode [ 1240.128106][T14097] dummy0: entered allmulticast mode [ 1240.129235][T14097] team0: Port device dummy0 added [ 1240.161766][ T7354] bond2: (slave bridge2): failed to get link speed/duplex [ 1240.271196][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1240.359505][T14112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1240.383847][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1240.491230][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1240.523717][ T4470] IPVS: starting estimator thread 0... [ 1240.601750][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1240.610297][T14123] IPVS: using max 36 ests per chain, 86400 per kthread [ 1240.713444][ T4470] bond2: (slave bridge2): failed to get link speed/duplex [ 1240.820025][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1240.882382][T14142] netlink: 'syz.0.9533': attribute type 11 has an invalid length. [ 1240.882406][T14142] netlink: 'syz.0.9533': attribute type 11 has an invalid length. [ 1241.769485][T14183] netlink: 'syz.4.9543': attribute type 1 has an invalid length. [ 1241.958176][T14186] netlink: 'syz.1.9542': attribute type 34 has an invalid length. [ 1242.137787][T14183] bond2: entered promiscuous mode [ 1242.138216][T14183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1242.184147][T14182] bond2 (unregistering): Released all slaves [ 1242.417060][T14186] bond1: option lacp_strict: invalid value (110) [ 1242.438353][T14186] bond1 (unregistering): Released all slaves [ 1243.101159][T14224] bond1: option lp_interval: invalid value (0) [ 1243.101185][T14224] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1243.107341][T14224] bond1 (unregistering): Released all slaves [ 1243.905885][T14270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1243.908252][T14270] bridge0: port 3(bond1) entered blocking state [ 1243.908518][T14270] bridge0: port 3(bond1) entered disabled state [ 1243.909653][T14270] bond1: entered allmulticast mode [ 1243.954265][T14270] bond1: entered promiscuous mode [ 1243.956665][T14270] bridge0: port 3(bond1) entered blocking state [ 1243.956795][T14270] bridge0: port 3(bond1) entered forwarding state [ 1244.278265][T14294] netlink: 'syz.4.9561': attribute type 1 has an invalid length. [ 1244.278289][T14294] __nla_validate_parse: 7 callbacks suppressed [ 1244.278302][T14294] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9561'. [ 1244.796054][ T7714] bridge0: port 3(bond1) entered disabled state [ 1244.970039][ T176] net_ratelimit: 19 callbacks suppressed [ 1244.970060][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1245.080160][ T176] bond2: (slave bridge2): failed to get link speed/duplex [ 1245.193209][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1245.235527][T14315] ip6t_srh: unknown srh invflags 4000 [ 1245.297415][T14319] batadv_slave_1: entered promiscuous mode [ 1245.302823][ T7719] bond2: (slave bridge2): failed to get link speed/duplex [ 1245.315804][T14317] netlink: 'syz.0.9566': attribute type 2 has an invalid length. [ 1245.391405][T14325] batadv_slave_1: entered promiscuous mode [ 1245.409907][ T7719] bond2: (slave bridge2): failed to get link speed/duplex [ 1245.497547][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9570'. [ 1246.124457][T14323] batadv_slave_1: left promiscuous mode [ 1246.132388][ T7714] bond2: (slave bridge2): failed to get link speed/duplex [ 1246.165184][T14318] batadv_slave_1: left promiscuous mode [ 1246.240081][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1246.350682][T14356] macsec1: entered allmulticast mode [ 1246.350711][T14356] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1246.350754][T14356] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1246.357148][T14356] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1246.362214][T14356] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1246.391938][ T2276] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1246.400178][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1246.610548][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9572'. [ 1246.657256][T14364] netlink: 'syz.0.9576': attribute type 39 has an invalid length. [ 1246.996336][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1247.101165][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1247.320725][T14391] netlink: 'syz.4.9581': attribute type 1 has an invalid length. [ 1247.320749][T14391] netlink: 'syz.4.9581': attribute type 4 has an invalid length. [ 1247.320762][T14391] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9581'. [ 1247.755956][T14413] macsec1: entered allmulticast mode [ 1247.755988][T14413] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1247.756392][T14413] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1247.795312][T14413] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1247.954320][T14418] netlink: 'syz.4.9588': attribute type 11 has an invalid length. [ 1247.954345][T14418] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9588'. [ 1248.217479][T14431] netlink: 'syz.0.9591': attribute type 11 has an invalid length. [ 1248.217503][T14431] netlink: 'syz.0.9591': attribute type 11 has an invalid length. [ 1248.217516][T14431] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9591'. [ 1248.767248][T14459] netlink: 45 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1249.104430][T14469] netlink: 'syz.2.9602': attribute type 11 has an invalid length. [ 1249.104453][T14469] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9602'. [ 1249.200064][T14467] macsec1: entered allmulticast mode [ 1249.200092][T14467] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1249.200478][T14467] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1249.261244][T14467] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1249.436107][T14475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9604'. [ 1249.534874][T14478] pim6reg: entered allmulticast mode [ 1249.854842][T14472] pim6reg: left allmulticast mode [ 1250.110185][T14341] net_ratelimit: 14 callbacks suppressed [ 1250.110207][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1250.185603][T14493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9608'. [ 1250.263492][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9611'. [ 1250.294263][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1250.329159][T14508] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1250.410294][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1250.501951][T14517] xt_addrtype: ipv6 does not support BROADCAST matching [ 1250.520658][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1250.527927][T14515] netlink: 'syz.2.9613': attribute type 11 has an invalid length. [ 1250.527950][T14515] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9613'. [ 1250.598178][T14523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9617'. [ 1250.660569][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9617'. [ 1250.660602][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9617'. [ 1250.660651][T14527] netlink: 'syz.3.9617': attribute type 18 has an invalid length. [ 1250.717663][T14530] netlink: 'syz.3.9617': attribute type 1 has an invalid length. [ 1253.575011][T14540] 8021q: VLANs not supported on wg0 [ 1253.619541][T14542] 8021q: VLANs not supported on wg0 [ 1253.621871][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1253.732539][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1254.121906][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1254.220298][T14585] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1254.230221][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1254.254572][T14558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1254.345204][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1254.533974][T14598] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9628'. [ 1254.835978][T14616] netlink: 'syz.2.9635': attribute type 3 has an invalid length. [ 1254.892828][T14617] netlink: 'syz.2.9635': attribute type 34 has an invalid length. [ 1254.892851][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9635'. [ 1254.892976][T14614] netlink: 'syz.2.9635': attribute type 34 has an invalid length. [ 1254.892990][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9635'. [ 1256.251008][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 1257.816040][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9636'. [ 1257.843454][T14617] bond4: option lacp_strict: invalid value (110) [ 1257.848717][T14617] bond4 (unregistering): Released all slaves [ 1257.898089][T14614] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1257.908830][T14557] tipc: Started in network mode [ 1257.908854][T14557] tipc: Node identity 1000001, cluster identity 4369 [ 1257.908867][T14557] tipc: Node number set to 16777217 [ 1257.990639][T14337] net_ratelimit: 3 callbacks suppressed [ 1257.990660][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1257.991043][T14565] tipc: New replicast peer: 127.0.0.1 [ 1257.991465][T14565] tipc: Enabled bearer , priority 26 [ 1258.101641][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.210145][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.257787][T14674] batadv_slave_1: entered promiscuous mode [ 1258.319956][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.330316][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 1258.330332][ T31] audit: type=1804 audit(1791371904.777:130): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9639" name="/newroot/100/cgroup.controllers" dev="tmpfs" ino=526 res=1 errno=0 [ 1258.330375][ T31] audit: type=1800 audit(1791371904.777:131): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9639" name="cgroup.controllers" dev="tmpfs" ino=526 res=0 errno=0 [ 1258.334154][ T31] audit: type=1800 audit(1791371904.787:132): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9639" name="cgroup.controllers" dev="tmpfs" ino=526 res=0 errno=0 [ 1258.338822][ T31] audit: type=1800 audit(1791371904.787:133): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9639" name="cgroup.controllers" dev="tmpfs" ino=526 res=0 errno=0 [ 1258.339049][ T31] audit: type=1800 audit(1791371904.787:134): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9639" name="cgroup.controllers" dev="tmpfs" ino=526 res=0 errno=0 [ 1258.343404][T14681] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9641'. [ 1258.393207][T14679] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1258.408183][T14679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1258.415242][T14679] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1258.430086][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.668054][T14686] vlan2: entered promiscuous mode [ 1258.668077][T14686] bridge0: entered promiscuous mode [ 1258.699400][T14672] batadv_slave_1: left promiscuous mode [ 1258.702501][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.811417][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1258.847897][T14699] ip_tables: iptables: counters copy to user failed while replacing table [ 1258.877422][T14699] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9646'. [ 1258.939938][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1259.059217][ T9920] cgroup: fork rejected by pids controller in /syz4 [ 1259.313352][T14716] macsec1: entered allmulticast mode [ 1259.313382][T14716] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1259.313423][T14716] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1259.319536][T14716] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1259.354395][T14716] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1259.396715][ T2276] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1259.602227][T14728] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1259.603568][T14727] netlink: 'syz.0.9652': attribute type 1 has an invalid length. [ 1259.768557][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1259.779030][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1259.787000][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1259.791401][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1259.805151][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1260.146189][T14756] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9659'. [ 1260.146212][T14756] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9659'. [ 1260.146228][T14756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9659'. [ 1260.208832][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.209392][T14729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.312488][T14762] netlink: 'syz.3.9662': attribute type 2 has an invalid length. [ 1260.312520][T14762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9662'. [ 1260.391972][T14729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.398257][T14729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.648782][ T2276] s`z1: Port: 1 Link DOWN [ 1260.663569][T14337] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.663635][T14337] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.663669][T14337] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.663701][T14337] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.792734][T14769] macsec1: entered allmulticast mode [ 1260.792791][T14769] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1260.793338][T14769] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1260.830428][T14769] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1261.176508][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9668'. [ 1261.207437][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9668'. [ 1261.852773][ T5615] Bluetooth: hci3: command tx timeout [ 1261.899634][T14822] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1262.116298][T14834] netlink: 'syz.2.9674': attribute type 11 has an invalid length. [ 1262.116320][T14834] netlink: 'syz.2.9674': attribute type 11 has an invalid length. [ 1262.116334][T14834] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1262.668653][T14843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9676'. [ 1262.669441][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9676'. [ 1262.669475][T14843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9676'. [ 1262.823499][T14853] macsec1: entered allmulticast mode [ 1262.823589][T14853] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1262.823938][T14853] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1262.879409][T14733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.879508][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.879679][T14733] bridge_slave_0: entered allmulticast mode [ 1262.902819][T14733] bridge_slave_0: entered promiscuous mode [ 1262.963469][T15621] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1262.988029][T14733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.988173][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.988360][T14733] bridge_slave_1: entered allmulticast mode [ 1263.012902][T14733] bridge_slave_1: entered promiscuous mode [ 1263.097218][T14733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.101211][T14341] net_ratelimit: 14 callbacks suppressed [ 1263.101227][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1263.127995][T14733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.293465][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1263.312642][T14733] team0: Port device team_slave_0 added [ 1263.321352][T14733] team0: Port device team_slave_1 added [ 1263.540206][T14733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.540225][T14733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.540250][T14733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.545280][T14733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.545296][T14733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.545322][T14733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.690796][T14895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1263.728591][T14733] hsr_slave_0: entered promiscuous mode [ 1263.735586][T14733] hsr_slave_1: entered promiscuous mode [ 1263.736332][T14733] debugfs: 'hsr0' already exists in 'hsr' [ 1263.736352][T14733] Cannot create hsr debugfs directory [ 1263.930591][ T5615] Bluetooth: hci3: command tx timeout [ 1264.206252][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1264.563916][T14733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.563953][T14733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.620812][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1264.739079][T14733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.758450][T14733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.983383][T14733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.983419][T14733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.029875][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1265.226325][T14733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1265.226363][T14733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.330431][T14960] netlink: Setting conntrack mark requires 'commit' flag. [ 1265.330464][T14960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.451170][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1265.562008][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1265.745578][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1265.936853][T14991] __nla_validate_parse: 6 callbacks suppressed [ 1265.936876][T14991] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9704'. [ 1265.990369][T14990] netlink: 'syz.1.9702': attribute type 3 has an invalid length. [ 1265.990392][T14990] netlink: 646 bytes leftover after parsing attributes in process `syz.1.9702'. [ 1266.010283][ T5615] Bluetooth: hci3: command tx timeout [ 1266.123867][T14733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1266.142739][T14733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1266.146294][T14733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1266.155666][T15005] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9709'. [ 1266.155773][T15005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9709'. [ 1266.165964][T14733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1266.166883][T14733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1266.192732][T14733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1266.205069][T14733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1266.223638][T14733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1266.407831][T15018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9711'. [ 1266.446187][T14733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.447238][T15020] netlink: 'syz.1.9712': attribute type 1 has an invalid length. [ 1266.507182][T14733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.528573][T14338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.528669][T14338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.544790][T14338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.544890][T14338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.771921][T15036] FAULT_INJECTION: forcing a failure. [ 1266.771921][T15036] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.771956][T15036] CPU: 1 UID: 0 PID: 15036 Comm: syz.1.9715 Not tainted syzkaller #0 PREEMPT(full) [ 1266.771979][T15036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1266.771991][T15036] Call Trace: [ 1266.771999][T15036] [ 1266.772008][T15036] dump_stack_lvl+0xe8/0x150 [ 1266.772040][T15036] should_fail_ex+0x410/0x560 [ 1266.772066][T15036] ? __alloc_skb+0x1db/0x7a0 [ 1266.772093][T15036] should_failslab+0xa8/0x100 [ 1266.772120][T15036] ? __alloc_skb+0x1db/0x7a0 [ 1266.772143][T15036] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1266.772174][T15036] ? __alloc_skb+0x18d/0x7a0 [ 1266.772200][T15036] ? __alloc_skb+0x1db/0x7a0 [ 1266.772232][T15036] __alloc_skb+0x1db/0x7a0 [ 1266.772262][T15036] netlink_sendmsg+0x5d4/0xb40 [ 1266.772295][T15036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1266.772327][T15036] ? apparmor_socket_sendmsg+0x98/0x360 [ 1266.772354][T15036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1266.772376][T15036] sock_sendmsg_nosec+0x14e/0x190 [ 1266.772401][T15036] ____sys_sendmsg+0x54e/0x850 [ 1266.772435][T15036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1266.772472][T15036] ? import_iovec+0x73/0xa0 [ 1266.772502][T15036] ___sys_sendmsg+0x2a5/0x360 [ 1266.772529][T15036] ? __lock_acquire+0x747/0x2de0 [ 1266.772555][T15036] ? __pfx____sys_sendmsg+0x10/0x10 [ 1266.772621][T15036] ? __fget_files+0x2a/0x420 [ 1266.772649][T15036] ? __fget_files+0x3a2/0x420 [ 1266.772686][T15036] __x64_sys_sendmsg+0x1b1/0x290 [ 1266.772718][T15036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1266.772767][T15036] do_syscall_64+0x166/0x520 [ 1266.772787][T15036] ? trace_irq_disable+0x3b/0x140 [ 1266.772808][T15036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.772829][T15036] ? clear_bhb_loop+0x70/0xc0 [ 1266.772854][T15036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.772874][T15036] RIP: 0033:0x7feaa479e199 [ 1266.772900][T15036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.772918][T15036] RSP: 002b:00007feaa559f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.772939][T15036] RAX: ffffffffffffffda RBX: 00007feaa4a25fa0 RCX: 00007feaa479e199 [ 1266.772954][T15036] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1266.772966][T15036] RBP: 00007feaa559f090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.772978][T15036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.772990][T15036] R13: 00007feaa4a26038 R14: 00007feaa4a25fa0 R15: 00007ffe50a6d5f8 [ 1266.773021][T15036] [ 1267.323726][T15053] netlink: 'syz.3.9717': attribute type 4 has an invalid length. [ 1267.401785][T15053] netlink: 'syz.3.9717': attribute type 4 has an invalid length. [ 1267.515223][T15060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9719'. [ 1267.681857][T15067] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1267.901068][T15062] geneve2: entered promiscuous mode [ 1267.924196][T15072] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1267.980879][T15196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.980943][T14341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.980977][T14341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.981009][T14341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.090043][ T5615] Bluetooth: hci3: command tx timeout [ 1268.112821][T14341] net_ratelimit: 16 callbacks suppressed [ 1268.112841][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.219877][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.246817][T14733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.350277][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.445270][T15103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1268.447178][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1268.447228][T15103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1268.447552][T15103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1268.470764][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.579817][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.690514][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1268.796379][T14733] veth0_vlan: entered promiscuous mode [ 1268.847840][T15119] x_tables: duplicate underflow at hook 2 [ 1268.988222][T15125] netlink: 'syz.3.9734': attribute type 11 has an invalid length. [ 1268.988246][T15125] netlink: 'syz.3.9734': attribute type 11 has an invalid length. [ 1269.026142][T14733] veth1_vlan: entered promiscuous mode [ 1269.196476][T15130] FAULT_INJECTION: forcing a failure. [ 1269.196476][T15130] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.196509][T15130] CPU: 0 UID: 0 PID: 15130 Comm: syz.2.9735 Not tainted syzkaller #0 PREEMPT(full) [ 1269.196531][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1269.196543][T15130] Call Trace: [ 1269.196552][T15130] [ 1269.196561][T15130] dump_stack_lvl+0xe8/0x150 [ 1269.196621][T15130] should_fail_ex+0x410/0x560 [ 1269.196649][T15130] should_failslab+0xa8/0x100 [ 1269.196676][T15130] __kmalloc_noprof+0xfe/0x720 [ 1269.196696][T15130] ? nfnl_cthelper_new+0x931/0x21e0 [ 1269.196798][T15130] ? nfnl_cthelper_new+0x931/0x21e0 [ 1269.196826][T15130] nfnl_cthelper_new+0x931/0x21e0 [ 1269.196860][T15130] ? __pfx_nfnl_cthelper_new+0x10/0x10 [ 1269.196882][T15130] ? trace_contention_end+0x3d/0x140 [ 1269.196909][T15130] ? __mutex_lock+0x30b/0x1550 [ 1269.196940][T15130] ? nfnetlink_rcv_msg+0xa69/0x12b0 [ 1269.196962][T15130] ? __pfx___mutex_lock+0x10/0x10 [ 1269.196998][T15130] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 1269.197020][T15130] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1269.197058][T15130] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1269.197121][T15130] netlink_rcv_skb+0x226/0x4a0 [ 1269.197144][T15130] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1269.197164][T15130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1269.197197][T15130] ? bpf_lsm_capable+0x9/0x20 [ 1269.197216][T15130] ? security_capable+0x7e/0x2c0 [ 1269.197249][T15130] nfnetlink_rcv+0x2b9/0x28c0 [ 1269.197277][T15130] ? kernel_text_address+0xa5/0xe0 [ 1269.197302][T15130] ? __kernel_text_address+0xd/0x30 [ 1269.197323][T15130] ? unwind_get_return_address+0x4d/0x90 [ 1269.197347][T15130] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1269.197368][T15130] ? arch_stack_walk+0xfb/0x150 [ 1269.197418][T15130] ? stack_trace_save+0xa9/0x100 [ 1269.197441][T15130] ? __lock_acquire+0x747/0x2de0 [ 1269.197462][T15130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1269.197488][T15130] ? __kasan_slab_alloc+0x6c/0x80 [ 1269.197510][T15130] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 1269.197541][T15130] ? __alloc_skb+0x27a/0x7a0 [ 1269.197565][T15130] ? netlink_sendmsg+0x5d4/0xb40 [ 1269.197586][T15130] ? sock_sendmsg_nosec+0x14e/0x190 [ 1269.197606][T15130] ? ____sys_sendmsg+0x54e/0x850 [ 1269.197649][T15130] ? __lock_acquire+0x747/0x2de0 [ 1269.197680][T15130] ? __netlink_lookup+0xc6/0x8b0 [ 1269.197714][T15130] ? lock_acquire+0x115/0x350 [ 1269.197735][T15130] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.197765][T15130] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.197786][T15130] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.197815][T15130] netlink_unicast+0x7bd/0x940 [ 1269.197846][T15130] netlink_sendmsg+0x813/0xb40 [ 1269.197879][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.197911][T15130] ? apparmor_socket_sendmsg+0x98/0x360 [ 1269.197937][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.197959][T15130] sock_sendmsg_nosec+0x14e/0x190 [ 1269.197985][T15130] ____sys_sendmsg+0x54e/0x850 [ 1269.198019][T15130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.198057][T15130] ? import_iovec+0x73/0xa0 [ 1269.198088][T15130] ___sys_sendmsg+0x2a5/0x360 [ 1269.198115][T15130] ? __lock_acquire+0x747/0x2de0 [ 1269.198140][T15130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.198211][T15130] ? __fget_files+0x2a/0x420 [ 1269.198238][T15130] ? __fget_files+0x3a2/0x420 [ 1269.198277][T15130] __x64_sys_sendmsg+0x1b1/0x290 [ 1269.198309][T15130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1269.198365][T15130] do_syscall_64+0x166/0x520 [ 1269.198383][T15130] ? trace_irq_disable+0x3b/0x140 [ 1269.198404][T15130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.198425][T15130] ? clear_bhb_loop+0x70/0xc0 [ 1269.198450][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.198471][T15130] RIP: 0033:0x7f3dccf9e199 [ 1269.198490][T15130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.198508][T15130] RSP: 002b:00007f3dcde7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.198530][T15130] RAX: ffffffffffffffda RBX: 00007f3dcd225fa0 RCX: 00007f3dccf9e199 [ 1269.198546][T15130] RDX: 0000000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1269.198560][T15130] RBP: 00007f3dcde7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.198573][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.198585][T15130] R13: 00007f3dcd226038 R14: 00007f3dcd225fa0 R15: 00007ffc9450ed08 [ 1269.198625][T15130] [ 1269.200273][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1269.393581][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1269.463075][T14733] veth0_macvtap: entered promiscuous mode [ 1269.494622][T14733] veth1_macvtap: entered promiscuous mode [ 1269.531992][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1269.585382][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1269.610434][T14733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.641208][T14733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.720086][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1269.791475][T14338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.800217][T14338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.800260][T14338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.898932][T15148] tun0: tun_chr_ioctl cmd 1074025675 [ 1269.898954][T15148] tun0: persist disabled [ 1269.950016][T14338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.132938][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.132961][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.241841][T14338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.241863][T14338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.355583][T15159] geneve1: entered promiscuous mode [ 1270.587795][T15141] netlink: 'syz.2.9737': attribute type 2 has an invalid length. [ 1271.006642][T15188] FAULT_INJECTION: forcing a failure. [ 1271.006642][T15188] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.006676][T15188] CPU: 0 UID: 0 PID: 15188 Comm: syz.4.9747 Not tainted syzkaller #0 PREEMPT(full) [ 1271.006699][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1271.006712][T15188] Call Trace: [ 1271.006720][T15188] [ 1271.006729][T15188] dump_stack_lvl+0xe8/0x150 [ 1271.006762][T15188] should_fail_ex+0x410/0x560 [ 1271.006792][T15188] should_failslab+0xa8/0x100 [ 1271.006819][T15188] __kmalloc_noprof+0xfe/0x720 [ 1271.006840][T15188] ? nfnl_cthelper_new+0x931/0x21e0 [ 1271.006861][T15188] ? nfnl_cthelper_new+0x931/0x21e0 [ 1271.006890][T15188] nfnl_cthelper_new+0x931/0x21e0 [ 1271.006926][T15188] ? __pfx_nfnl_cthelper_new+0x10/0x10 [ 1271.006946][T15188] ? trace_contention_end+0x3d/0x140 [ 1271.006974][T15188] ? __mutex_lock+0x30b/0x1550 [ 1271.007004][T15188] ? nfnetlink_rcv_msg+0xa69/0x12b0 [ 1271.007033][T15188] ? __pfx___mutex_lock+0x10/0x10 [ 1271.007073][T15188] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 1271.007095][T15188] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1271.007135][T15188] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1271.007205][T15188] netlink_rcv_skb+0x226/0x4a0 [ 1271.007229][T15188] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1271.007252][T15188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1271.007284][T15188] ? bpf_lsm_capable+0x9/0x20 [ 1271.007302][T15188] ? security_capable+0x7e/0x2c0 [ 1271.007334][T15188] nfnetlink_rcv+0x2b9/0x28c0 [ 1271.007360][T15188] ? __dev_queue_xmit+0x29b/0x3920 [ 1271.007384][T15188] ? __local_bh_enable_ip+0xd6/0x140 [ 1271.007410][T15188] ? lockdep_hardirqs_on+0x7b/0x110 [ 1271.007438][T15188] ? __dev_queue_xmit+0x29b/0x3920 [ 1271.007456][T15188] ? __local_bh_enable_ip+0xd6/0x140 [ 1271.007481][T15188] ? __dev_queue_xmit+0x29b/0x3920 [ 1271.007495][T15188] ? __dev_queue_xmit+0x1efb/0x3920 [ 1271.007514][T15188] ? __dev_queue_xmit+0x29b/0x3920 [ 1271.007539][T15188] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1271.007572][T15188] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1271.007601][T15188] ? __copy_skb_header+0xa3/0x4a0 [ 1271.007649][T15188] ? skb_clone+0x246/0x3a0 [ 1271.007682][T15188] ? __netlink_deliver_tap+0x681/0x6e0 [ 1271.007701][T15188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1271.007730][T15188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1271.007751][T15188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1271.007777][T15188] netlink_unicast+0x7bd/0x940 [ 1271.007806][T15188] netlink_sendmsg+0x813/0xb40 [ 1271.007839][T15188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1271.007869][T15188] ? apparmor_socket_sendmsg+0x98/0x360 [ 1271.007894][T15188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1271.007914][T15188] sock_sendmsg_nosec+0x14e/0x190 [ 1271.007940][T15188] ____sys_sendmsg+0x54e/0x850 [ 1271.007974][T15188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1271.008019][T15188] ? import_iovec+0x73/0xa0 [ 1271.008048][T15188] ___sys_sendmsg+0x2a5/0x360 [ 1271.008074][T15188] ? __lock_acquire+0x747/0x2de0 [ 1271.008100][T15188] ? __pfx____sys_sendmsg+0x10/0x10 [ 1271.008160][T15188] ? __fget_files+0x2a/0x420 [ 1271.008186][T15188] ? __fget_files+0x3a2/0x420 [ 1271.008222][T15188] __x64_sys_sendmsg+0x1b1/0x290 [ 1271.008253][T15188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1271.008304][T15188] do_syscall_64+0x166/0x520 [ 1271.008321][T15188] ? trace_irq_disable+0x3b/0x140 [ 1271.008341][T15188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.008362][T15188] ? clear_bhb_loop+0x70/0xc0 [ 1271.008393][T15188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.008413][T15188] RIP: 0033:0x7f40a319e199 [ 1271.008432][T15188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.008450][T15188] RSP: 002b:00007f40a4088028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1271.008471][T15188] RAX: ffffffffffffffda RBX: 00007f40a3425fa0 RCX: 00007f40a319e199 [ 1271.008486][T15188] RDX: 0000000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1271.008500][T15188] RBP: 00007f40a4088090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.008512][T15188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.008525][T15188] R13: 00007f40a3426038 R14: 00007f40a3425fa0 R15: 00007fffc403ab38 [ 1271.008557][T15188] [ 1271.257300][T15199] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1271.514134][T15206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1271.514921][T15206] bridge0: port 3(bond1) entered blocking state [ 1271.515098][T15206] bridge0: port 3(bond1) entered disabled state [ 1271.515310][T15206] bond1: entered allmulticast mode [ 1271.517713][T15206] bond1: entered promiscuous mode [ 1271.518341][T15206] bridge0: port 3(bond1) entered blocking state [ 1271.518445][T15206] bridge0: port 3(bond1) entered forwarding state [ 1271.544701][T15208] __nla_validate_parse: 8 callbacks suppressed [ 1271.544720][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9752'. [ 1271.610913][T21780] Bluetooth: hci2: command 0x0406 tx timeout [ 1271.897672][T15196] bridge0: port 3(bond1) entered disabled state [ 1272.064117][T15226] netlink: 'syz.1.9755': attribute type 11 has an invalid length. [ 1272.106488][T15230] netlink: 'syz.0.9756': attribute type 1 has an invalid length. [ 1272.138997][T15225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.447417][T15246] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1272.637942][T15254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9764'. [ 1272.822171][T15263] ip6tnl3: entered allmulticast mode [ 1273.008686][T15277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9769'. [ 1273.230014][T14341] net_ratelimit: 26 callbacks suppressed [ 1273.230035][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.258390][T15293] Bluetooth: hci0: unsupported parameter 5135 [ 1273.258412][T15293] Bluetooth: hci0: unsupported parameter 8192 [ 1273.258426][T15293] Bluetooth: hci0: unsupported parameter 5135 [ 1273.258440][T15293] Bluetooth: hci0: unsupported parameter 8192 [ 1273.329683][T15299] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1273.340185][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.448541][T15305] batadv_slave_1: entered promiscuous mode [ 1273.469928][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.580171][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.610339][T14338] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1273.610552][T14338] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1273.640499][T15621] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1273.672661][T15303] batadv_slave_1: left promiscuous mode [ 1273.697316][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.799968][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1273.910369][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1274.024090][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1274.120660][T15621] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1274.129861][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1274.201479][T15329] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9779'. [ 1274.240037][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1274.246481][T15334] IPv6: NLM_F_CREATE should be specified when creating new route [ 1274.274755][T15334] syzkaller1: entered promiscuous mode [ 1274.274776][T15334] syzkaller1: entered allmulticast mode [ 1274.327697][T15336] Bluetooth: MGMT ver 1.23 [ 1274.413454][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9780'. [ 1274.414225][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9780'. [ 1274.495502][ T516] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1274.745195][T15350] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9780'. [ 1274.898403][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9785'. [ 1274.898441][T15360] FAULT_INJECTION: forcing a failure. [ 1274.898441][T15360] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.898465][T15360] CPU: 1 UID: 0 PID: 15360 Comm: syz.4.9785 Not tainted syzkaller #0 PREEMPT(full) [ 1274.898487][T15360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1274.898500][T15360] Call Trace: [ 1274.898508][T15360] [ 1274.898516][T15360] dump_stack_lvl+0xe8/0x150 [ 1274.898558][T15360] should_fail_ex+0x410/0x560 [ 1274.898584][T15360] ? __alloc_skb+0x1db/0x7a0 [ 1274.898610][T15360] should_failslab+0xa8/0x100 [ 1274.898632][T15360] ? __alloc_skb+0x1db/0x7a0 [ 1274.898651][T15360] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1274.898679][T15360] ? __alloc_skb+0x18d/0x7a0 [ 1274.898702][T15360] ? __alloc_skb+0x1db/0x7a0 [ 1274.898733][T15360] __alloc_skb+0x1db/0x7a0 [ 1274.898762][T15360] netlink_ack+0x136/0xb30 [ 1274.898800][T15360] netlink_rcv_skb+0x2a4/0x4a0 [ 1274.898823][T15360] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1274.898847][T15360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1274.898880][T15360] ? bpf_lsm_capable+0x9/0x20 [ 1274.898898][T15360] ? security_capable+0x7e/0x2c0 [ 1274.898930][T15360] nfnetlink_rcv+0x2b9/0x28c0 [ 1274.898957][T15360] ? __dev_queue_xmit+0x29b/0x3920 [ 1274.898981][T15360] ? __local_bh_enable_ip+0xd6/0x140 [ 1274.899006][T15360] ? lockdep_hardirqs_on+0x7b/0x110 [ 1274.899033][T15360] ? __dev_queue_xmit+0x29b/0x3920 [ 1274.899050][T15360] ? __local_bh_enable_ip+0xd6/0x140 [ 1274.899071][T15360] ? __dev_queue_xmit+0x29b/0x3920 [ 1274.899088][T15360] ? __dev_queue_xmit+0x1efb/0x3920 [ 1274.899109][T15360] ? __dev_queue_xmit+0x29b/0x3920 [ 1274.899132][T15360] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1274.899159][T15360] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1274.899185][T15360] ? __copy_skb_header+0xa3/0x4a0 [ 1274.899228][T15360] ? skb_clone+0x246/0x3a0 [ 1274.899258][T15360] ? __netlink_deliver_tap+0x681/0x6e0 [ 1274.899277][T15360] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.899304][T15360] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.899323][T15360] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.899350][T15360] netlink_unicast+0x7bd/0x940 [ 1274.899382][T15360] netlink_sendmsg+0x813/0xb40 [ 1274.899415][T15360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.899447][T15360] ? apparmor_socket_sendmsg+0x98/0x360 [ 1274.899470][T15360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.899491][T15360] sock_sendmsg_nosec+0x14e/0x190 [ 1274.899516][T15360] ____sys_sendmsg+0x54e/0x850 [ 1274.899558][T15360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.899597][T15360] ? import_iovec+0x73/0xa0 [ 1274.899627][T15360] ___sys_sendmsg+0x2a5/0x360 [ 1274.899654][T15360] ? __lock_acquire+0x747/0x2de0 [ 1274.899680][T15360] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.899739][T15360] ? __fget_files+0x2a/0x420 [ 1274.899764][T15360] ? __fget_files+0x3a2/0x420 [ 1274.899801][T15360] __x64_sys_sendmsg+0x1b1/0x290 [ 1274.899833][T15360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1274.899884][T15360] do_syscall_64+0x166/0x520 [ 1274.899903][T15360] ? trace_irq_disable+0x3b/0x140 [ 1274.899923][T15360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.899945][T15360] ? clear_bhb_loop+0x70/0xc0 [ 1274.899970][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.899990][T15360] RIP: 0033:0x7f40a319e199 [ 1274.900009][T15360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.900027][T15360] RSP: 002b:00007f40a4088028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.900050][T15360] RAX: ffffffffffffffda RBX: 00007f40a3425fa0 RCX: 00007f40a319e199 [ 1274.900066][T15360] RDX: 0000000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1274.900080][T15360] RBP: 00007f40a4088090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.900093][T15360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.900106][T15360] R13: 00007f40a3426038 R14: 00007f40a3425fa0 R15: 00007fffc403ab38 [ 1274.900140][T15360] [ 1275.318659][T15368] batadv_slave_1: entered promiscuous mode [ 1275.362336][T15373] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1275.567229][T15384] netlink: 'syz.2.9788': attribute type 3 has an invalid length. [ 1275.598363][T15389] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9792'. [ 1275.598403][T15389] FAULT_INJECTION: forcing a failure. [ 1275.598403][T15389] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.598429][T15389] CPU: 1 UID: 0 PID: 15389 Comm: syz.1.9792 Not tainted syzkaller #0 PREEMPT(full) [ 1275.598451][T15389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1275.598464][T15389] Call Trace: [ 1275.598472][T15389] [ 1275.598482][T15389] dump_stack_lvl+0xe8/0x150 [ 1275.598525][T15389] should_fail_ex+0x410/0x560 [ 1275.598554][T15389] ? __alloc_skb+0x1db/0x7a0 [ 1275.598581][T15389] should_failslab+0xa8/0x100 [ 1275.598610][T15389] ? __alloc_skb+0x1db/0x7a0 [ 1275.598632][T15389] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1275.598663][T15389] ? __alloc_skb+0x18d/0x7a0 [ 1275.598688][T15389] ? __alloc_skb+0x1db/0x7a0 [ 1275.598717][T15389] __alloc_skb+0x1db/0x7a0 [ 1275.598745][T15389] netlink_ack+0x136/0xb30 [ 1275.598764][T15389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.598807][T15389] netlink_rcv_skb+0x2a4/0x4a0 [ 1275.598829][T15389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.598855][T15389] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1275.598890][T15389] ? down_read+0x2be/0x330 [ 1275.598916][T15389] genl_rcv+0x28/0x40 [ 1275.598939][T15389] netlink_unicast+0x7bd/0x940 [ 1275.598970][T15389] netlink_sendmsg+0x813/0xb40 [ 1275.598999][T15389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.599027][T15389] ? apparmor_socket_sendmsg+0x98/0x360 [ 1275.599052][T15389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.599072][T15389] sock_sendmsg_nosec+0x14e/0x190 [ 1275.599097][T15389] ____sys_sendmsg+0x54e/0x850 [ 1275.599131][T15389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.599166][T15389] ? import_iovec+0x73/0xa0 [ 1275.599194][T15389] ___sys_sendmsg+0x2a5/0x360 [ 1275.599221][T15389] ? __lock_acquire+0x747/0x2de0 [ 1275.599246][T15389] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.599312][T15389] ? __fget_files+0x2a/0x420 [ 1275.599339][T15389] ? __fget_files+0x3a2/0x420 [ 1275.599378][T15389] __x64_sys_sendmsg+0x1b1/0x290 [ 1275.599409][T15389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1275.599461][T15389] do_syscall_64+0x166/0x520 [ 1275.599479][T15389] ? trace_irq_disable+0x3b/0x140 [ 1275.599500][T15389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.599529][T15389] ? clear_bhb_loop+0x70/0xc0 [ 1275.599553][T15389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.599574][T15389] RIP: 0033:0x7feaa479e199 [ 1275.599592][T15389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.599610][T15389] RSP: 002b:00007feaa559f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.599632][T15389] RAX: ffffffffffffffda RBX: 00007feaa4a25fa0 RCX: 00007feaa479e199 [ 1275.599648][T15389] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1275.599661][T15389] RBP: 00007feaa559f090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.599674][T15389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.599687][T15389] R13: 00007feaa4a26038 R14: 00007feaa4a25fa0 R15: 00007ffe50a6d5f8 [ 1275.599719][T15389] [ 1275.717127][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9791'. [ 1276.006093][T15367] batadv_slave_1: left promiscuous mode [ 1276.747508][T15433] __nla_validate_parse: 1 callbacks suppressed [ 1276.747527][T15433] netlink: 468 bytes leftover after parsing attributes in process `syz.3.9801'. [ 1276.774256][T15433] netlink: 'syz.3.9801': attribute type 10 has an invalid length. [ 1276.819068][T15433] bridge0: port 3(syz_tun) entered disabled state [ 1276.821966][T15433] syz_tun: left allmulticast mode [ 1276.823199][T15433] bridge0: port 3(syz_tun) entered disabled state [ 1276.905412][T15433] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1276.928581][T15438] batadv_slave_1: entered promiscuous mode [ 1277.050944][T14341] IPVS: starting estimator thread 0... [ 1277.119147][T15446] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9803'. [ 1277.140478][T15443] IPVS: using max 35 ests per chain, 84000 per kthread [ 1277.379623][T15452] batadv_slave_1: entered promiscuous mode [ 1277.401551][T15451] batadv_slave_1: left promiscuous mode [ 1277.450141][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1277.869332][T15437] batadv_slave_1: left promiscuous mode [ 1278.002532][T15477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9808'. [ 1278.243097][ T13] net_ratelimit: 30 callbacks suppressed [ 1278.243119][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.313918][T15496] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1278.314153][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9815'. [ 1278.353505][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.430625][T15506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9815'. [ 1278.646682][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.755734][T15525] batadv_slave_1: entered promiscuous mode [ 1278.763666][T15522] batadv_slave_1: left promiscuous mode [ 1278.779963][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.890276][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1278.999991][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1279.109876][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1279.222011][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1279.330091][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1279.441317][ T13] bond2: (slave bridge2): failed to get link speed/duplex [ 1279.602340][T15565] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9830'. [ 1279.638471][T15568] batadv_slave_1: entered promiscuous mode [ 1279.655378][T15567] batadv_slave_1: left promiscuous mode [ 1279.816794][T15575] gtp0: entered promiscuous mode [ 1279.816817][T15575] gtp0: entered allmulticast mode [ 1279.819281][T15579] syzkaller0: entered promiscuous mode [ 1279.819300][T15579] syzkaller0: entered allmulticast mode [ 1280.175375][T13565] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1280.178617][T15607] macsec1: entered allmulticast mode [ 1280.178643][T15607] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1280.195955][T15607] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1280.212309][T15607] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1280.268932][T13565] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1280.514153][T15628] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9844'. [ 1280.572892][T15629] batadv_slave_1: entered promiscuous mode [ 1280.639364][T15642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9847'. [ 1280.671179][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9847'. [ 1280.673247][T15641] netlink: 'syz.0.9847': attribute type 1 has an invalid length. [ 1280.830528][T15646] netlink: 'syz.1.9848': attribute type 4 has an invalid length. [ 1280.830549][T15646] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9848'. [ 1280.937820][T15646] .`: renamed from bond0 (while UP) [ 1280.977858][T15626] batadv_slave_1: left promiscuous mode [ 1281.284575][T15675] netlink: 'syz.2.9852': attribute type 1 has an invalid length. [ 1281.345293][T13565] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1281.345485][T15677] macsec1: entered allmulticast mode [ 1281.348018][T15677] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1281.398808][T13565] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1281.788540][T15703] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9860'. [ 1281.806539][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9860'. [ 1281.808990][T15706] batadv_slave_1: entered promiscuous mode [ 1282.158009][T15713] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9863'. [ 1282.391978][T15705] batadv_slave_1: left promiscuous mode [ 1282.734101][T15730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9869'. [ 1282.877619][T15737] netlink: 'syz.1.9871': attribute type 1 has an invalid length. [ 1282.953338][T15737] bond0: entered promiscuous mode [ 1282.953813][T15737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.022488][T15737] vlan1: entered allmulticast mode [ 1283.022510][T15737] bond0: entered allmulticast mode [ 1283.052737][T15754] netlink: 'syz.0.9876': attribute type 1 has an invalid length. [ 1283.054206][T15753] netlink: 'syz.0.9876': attribute type 1 has an invalid length. [ 1283.093118][T15737] bond0: (slave bridge1): making interface the new active one [ 1283.093142][T15737] bridge1: entered promiscuous mode [ 1283.093316][T15737] bridge1: entered allmulticast mode [ 1283.108220][T15737] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1283.326958][T15757] veth3: entered allmulticast mode [ 1283.340934][T15757] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1283.361564][T15753] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1283.362196][T14337] net_ratelimit: 30 callbacks suppressed [ 1283.362212][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1283.437163][T15754] macvlan2: entered promiscuous mode [ 1283.437185][T15754] macvlan2: entered allmulticast mode [ 1283.439495][T15754] bond1: entered promiscuous mode [ 1283.444168][T15754] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1283.450440][T15754] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1283.456788][T15754] bond1: left promiscuous mode [ 1283.533232][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1283.552935][T15777] bridge0: port 3(gretap0) entered blocking state [ 1283.553075][T15777] bridge0: port 3(gretap0) entered disabled state [ 1283.553213][T15777] gretap0: entered allmulticast mode [ 1283.563438][T15777] gretap0: entered promiscuous mode [ 1283.572532][T15777] bridge0: port 3(gretap0) entered blocking state [ 1283.572654][T15777] bridge0: port 3(gretap0) entered forwarding state [ 1283.636301][T15780] netlink: 'syz.1.9882': attribute type 15 has an invalid length. [ 1283.648063][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1283.734764][T15780] syzkaller0: entered promiscuous mode [ 1283.734786][T15780] syzkaller0: entered allmulticast mode [ 1283.761017][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1283.874879][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1283.989819][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1284.101527][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1284.255304][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1284.256950][T15802] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.9888'. [ 1284.359930][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1284.529870][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1284.554029][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9893'. [ 1284.626233][T15821] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9893'. [ 1284.628156][T15821] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9893'. [ 1285.505071][T15863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9908'. [ 1285.530005][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1285.554280][T15865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9909'. [ 1286.603047][T15891] team0: Port device team_slave_1 removed [ 1286.635300][ T5279] veth1_macvtap: entered promiscuous mode [ 1286.852121][T15921] netlink: 'syz.0.9921': attribute type 11 has an invalid length. [ 1286.852145][T15921] netlink: 'syz.0.9921': attribute type 11 has an invalid length. [ 1286.852159][T15921] __nla_validate_parse: 1 callbacks suppressed [ 1286.852172][T15921] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1287.161730][T15935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9926'. [ 1287.252132][T15944] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1282) ! [ 1287.291863][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9928'. [ 1287.305303][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9928'. [ 1287.621752][T15960] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9933'. [ 1287.712429][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1287.712572][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1287.712782][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1287.712907][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1287.713030][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1288.016403][T15988] xt_hashlimit: size too large, truncated to 1048576 [ 1288.133331][T14341] IPVS: starting estimator thread 0... [ 1288.231262][T16006] IPVS: using max 29 ests per chain, 69600 per kthread [ 1288.601197][T16012] veth3: entered allmulticast mode [ 1288.645226][T16017] veth5: entered allmulticast mode [ 1288.655030][T14338] net_ratelimit: 25 callbacks suppressed [ 1288.655049][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.771986][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.880378][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1288.990787][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.120342][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.230202][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.343122][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.510085][ T4476] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.644306][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.751912][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1289.804671][T16086] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 1290.772647][T16127] syzkaller1: entered promiscuous mode [ 1290.772672][T16127] syzkaller1: entered allmulticast mode [ 1291.259495][T16176] netlink: 'syz.0.9980': attribute type 11 has an invalid length. [ 1293.338568][T16134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1293.584413][T16267] __nla_validate_parse: 75 callbacks suppressed [ 1293.584435][T16267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9985'. [ 1293.704789][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9990'. [ 1293.721176][ T4476] net_ratelimit: 30 callbacks suppressed [ 1293.721196][ T4476] bond2: (slave bridge2): failed to get link speed/duplex [ 1293.834246][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1293.838690][T16294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1293.953182][T16301] netlink: 'syz.1.9993': attribute type 8 has an invalid length. [ 1293.971066][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1293.982624][T16294] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9991'. [ 1293.990969][T16294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9991'. [ 1294.099959][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.286150][T16316] dvmrp0: entered allmulticast mode [ 1294.290400][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.350454][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9999'. [ 1294.363359][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9996'. [ 1294.363380][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9996'. [ 1294.731938][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9996'. [ 1294.731960][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9996'. [ 1294.732487][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.844643][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1294.950310][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1295.019033][T16356] openvswitch: netlink: Message has 32 unknown bytes. [ 1295.252726][T16359] veth7: entered allmulticast mode [ 1295.330053][T16363] bond2: (slave veth0_to_bond): Releasing active interface [ 1295.734817][T16391] veth0: entered promiscuous mode [ 1295.844565][T16388] veth0: left promiscuous mode [ 1295.865293][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10015'. [ 1296.548808][T16444] bridge0: port 4(syz_tun) entered blocking state [ 1296.549004][T16444] bridge0: port 4(syz_tun) entered disabled state [ 1296.549172][T16444] syz_tun: entered allmulticast mode [ 1296.561252][T16444] syz_tun: entered promiscuous mode [ 1296.561713][T16444] bridge0: port 4(syz_tun) entered blocking state [ 1296.561815][T16444] bridge0: port 4(syz_tun) entered forwarding state [ 1296.602950][T16452] netlink: 'syz.4.10029': attribute type 1 has an invalid length. [ 1296.685069][T16460] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1296.759504][T16452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1296.832698][T16459] bond2: (slave geneve2): making interface the new active one [ 1296.834497][T16459] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1296.888662][ T4476] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.888772][ T4476] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.888808][ T4476] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.911232][T16464] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1282) ! [ 1296.952467][T14338] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.037480][T16469] netlink: 'syz.1.10036': attribute type 3 has an invalid length. [ 1297.211926][T16379] Bluetooth: hci5: command 0x0405 tx timeout [ 1297.531136][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1298.461079][T16525] tc_dump_action: action bad kind [ 1298.524455][T16523] syzkaller1: entered promiscuous mode [ 1298.524485][T16523] syzkaller1: entered allmulticast mode [ 1298.739929][ T4474] net_ratelimit: 44 callbacks suppressed [ 1298.739950][ T4474] bond2: (slave bridge2): failed to get link speed/duplex [ 1298.850205][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1298.872923][T16549] batadv_slave_1: entered promiscuous mode [ 1298.873392][T16549] batadv_slave_1: left promiscuous mode [ 1298.899623][T16554] netlink: 'syz.3.10054': attribute type 1 has an invalid length. [ 1298.899646][T16554] netlink: 'syz.3.10054': attribute type 2 has an invalid length. [ 1298.900764][T16554] netlink: 'syz.3.10054': attribute type 1 has an invalid length. [ 1298.900780][T16554] netlink: 'syz.3.10054': attribute type 2 has an invalid length. [ 1298.900984][T16554] netlink: 'syz.3.10054': attribute type 1 has an invalid length. [ 1298.900997][T16554] netlink: 'syz.3.10054': attribute type 2 has an invalid length. [ 1298.901184][T16554] netlink: 'syz.3.10054': attribute type 1 has an invalid length. [ 1298.901197][T16554] netlink: 'syz.3.10054': attribute type 2 has an invalid length. [ 1299.608795][T16582] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1299.624918][T16583] mac80211_hwsim hwsim180 wlan0: left promiscuous mode [ 1299.711964][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1299.784140][T16580] vxcan2: entered allmulticast mode [ 1299.812889][T16593] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 1299.820322][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1299.934190][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1300.041345][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1300.150281][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1300.273274][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1300.344134][T16617] __nla_validate_parse: 7 callbacks suppressed [ 1300.344154][T16617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10069'. [ 1300.380001][T15196] bond2: (slave bridge2): failed to get link speed/duplex [ 1300.414781][T16617] syzkaller0: entered promiscuous mode [ 1300.414803][T16617] syzkaller0: entered allmulticast mode [ 1300.445561][T16617] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1301.375016][T16632] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1301.529914][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1301.859264][T16658] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1301.880233][ T516] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1302.064561][T16658] validate_nla: 59 callbacks suppressed [ 1302.064608][T16658] netlink: 'syz.3.10075': attribute type 1 has an invalid length. [ 1302.330832][T16683] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.493421][ T516] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1302.617857][T16706] netlink: 'syz.0.10086': attribute type 4 has an invalid length. [ 1302.617878][T16706] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10086'. [ 1302.648483][T16706] .`: renamed from bond0 [ 1303.117623][T16725] xt_hashlimit: size too large, truncated to 1048576 [ 1303.288311][T16729] xt_hashlimit: size too large, truncated to 1048576 [ 1303.317305][T16732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10095'. [ 1303.407678][T16749] netlink: 'syz.1.10096': attribute type 11 has an invalid length. [ 1303.407702][T16749] netlink: 'syz.1.10096': attribute type 11 has an invalid length. [ 1303.407717][T16749] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10096'. [ 1303.708519][T16765] ip6t_REJECT: ECHOREPLY is not supported [ 1303.790871][ T4467] net_ratelimit: 15 callbacks suppressed [ 1303.790892][ T4467] bond2: (slave bridge2): failed to get link speed/duplex [ 1303.960188][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.150762][ T50] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.418449][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10106'. [ 1304.442288][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.442454][T16796] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10103'. [ 1304.442537][T16796] mac80211_hwsim hwsim165 syzkaller0: Caught tx_queue_len zero misconfig [ 1304.541222][T16801] macsec1: entered allmulticast mode [ 1304.541275][T16801] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1304.541657][T16801] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1304.610355][ T4467] bond2: (slave bridge2): failed to get link speed/duplex [ 1304.626156][T16810] nbd0: detected capacity change from 0 to 63 [ 1304.668481][T16810] block nbd1: NBD_DISCONNECT [ 1304.668508][T16810] block nbd1: Send disconnect failed -32 [ 1304.668529][T16810] block nbd1: Send disconnect failed -32 [ 1304.668548][T16810] block nbd1: shutting down sockets [ 1304.728371][ T13] bridge_slave_1: left allmulticast mode [ 1304.728398][ T13] bridge_slave_1: left promiscuous mode [ 1304.731502][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.758401][ T13] bridge_slave_0: left allmulticast mode [ 1304.758428][ T13] bridge_slave_0: left promiscuous mode [ 1304.758642][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.825585][T21780] Bluetooth: hci1: Malformed Event: 0x02 [ 1304.836118][T16818] syz.0.10110: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1304.836190][T16818] CPU: 0 UID: 0 PID: 16818 Comm: syz.0.10110 Not tainted syzkaller #0 PREEMPT(full) [ 1304.836215][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1304.836228][T16818] Call Trace: [ 1304.836237][T16818] [ 1304.836247][T16818] dump_stack_lvl+0xe8/0x150 [ 1304.836287][T16818] warn_alloc+0x24d/0x270 [ 1304.836311][T16818] ? kasan_save_track+0x4f/0x80 [ 1304.836334][T16818] ? kasan_save_track+0x3e/0x80 [ 1304.836363][T16818] ? __pfx_warn_alloc+0x10/0x10 [ 1304.836383][T16818] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1304.836414][T16818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.836458][T16818] __vmalloc_node_range_noprof+0x127/0x1540 [ 1304.836520][T16818] ? rcu_is_watching+0x16/0xb0 [ 1304.836554][T16818] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1304.836586][T16818] ? __kmalloc_cache_noprof+0x321/0x600 [ 1304.836607][T16818] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1304.836628][T16818] ? xskq_create+0x56/0x220 [ 1304.836666][T16818] xskq_create+0x148/0x220 [ 1304.836695][T16818] ? xsk_init_queue+0x8a/0xe0 [ 1304.836725][T16818] xsk_init_queue+0x8a/0xe0 [ 1304.836757][T16818] xsk_setsockopt+0x52a/0x960 [ 1304.836789][T16818] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1304.836817][T16818] ? __pfx_aa_sk_perm+0x10/0x10 [ 1304.836857][T16818] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1304.836885][T16818] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1304.836915][T16818] do_sock_setsockopt+0x17c/0x1b0 [ 1304.836951][T16818] __x64_sys_setsockopt+0x13d/0x1b0 [ 1304.836986][T16818] do_syscall_64+0x166/0x520 [ 1304.837015][T16818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.837036][T16818] ? clear_bhb_loop+0x70/0xc0 [ 1304.837063][T16818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.837085][T16818] RIP: 0033:0x7f59ca79e199 [ 1304.837105][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.837124][T16818] RSP: 002b:00007f59cb583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1304.837147][T16818] RAX: ffffffffffffffda RBX: 00007f59caa25fa0 RCX: 00007f59ca79e199 [ 1304.837165][T16818] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1304.837178][T16818] RBP: 00007f59ca8358e0 R08: 0000000000000004 R09: 0000000000000000 [ 1304.837192][T16818] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.837206][T16818] R13: 00007f59caa26038 R14: 00007f59caa25fa0 R15: 00007ffe4c4f9be8 [ 1304.837243][T16818] [ 1304.838488][T16818] Mem-Info: [ 1304.838502][T16818] active_anon:13464 inactive_anon:0 isolated_anon:0 [ 1304.838502][T16818] active_file:20 inactive_file:44634 isolated_file:0 [ 1304.838502][T16818] unevictable:0 dirty:262 writeback:0 [ 1304.838502][T16818] slab_reclaimable:18184 slab_unreclaimable:164795 [ 1304.838502][T16818] mapped:30358 shmem:747 pagetables:1392 [ 1304.838502][T16818] sec_pagetables:0 bounce:0 [ 1304.838502][T16818] kernel_misc_reclaimable:0 [ 1304.838502][T16818] free:1236497 free_pcp:11258 free_cma:0 [ 1304.838562][T16818] Node 0 active_anon:53856kB inactive_anon:0kB active_file:80kB inactive_file:178332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121432kB dirty:1044kB writeback:0kB shmem:2988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16624kB pagetables:5428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1304.838621][T16818] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1304.838677][T16818] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.839667][T16818] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1304.846085][T16818] Node 0 DMA32 free:982384kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:53856kB inactive_anon:0kB active_file:80kB inactive_file:178332kB unevictable:0kB writepending:1044kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:45084kB local_pcp:24100kB free_cma:0kB [ 1304.846150][T16818] lowmem_reserve[]: 0 0 0 0 0 [ 1304.846185][T16818] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.846408][T16818] lowmem_reserve[]: 0 0 0 0 0 [ 1304.846445][T16818] Node 1 Normal free:3948244kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.846506][T16818] lowmem_reserve[]: 0 0 0 0 0 [ 1304.846539][T16818] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1304.846655][T16818] Node 0 DMA32: 4358*4kB (UME) 1633*8kB (UME) 1107*16kB (UME) 683*32kB (UM) 246*64kB (UME) 101*128kB (UM) 128*256kB (UM) 4*512kB (ME) 1*1024kB (E) 6*2048kB (UME) 204*4096kB (UM) = 982448kB [ 1304.846811][T16818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1304.846908][T16818] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 7*16kB (UM) 4*32kB (UM) 8*64kB (UM) 4*128kB (UM) 6*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (UM) = 3948292kB [ 1304.847069][T16818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.847087][T16818] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1304.847105][T16818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.847122][T16818] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1304.847140][T16818] 45397 total pagecache pages [ 1304.847149][T16818] 0 pages in swap cache [ 1304.847156][T16818] Free swap = 124996kB [ 1304.847164][T16818] Total swap = 124996kB [ 1304.847173][T16818] 2097051 pages RAM [ 1304.847181][T16818] 0 pages HighMem/MovableOnly [ 1304.847189][T16818] 428666 pages reserved [ 1304.847196][T16818] 0 pages cma reserved [ 1305.443921][ T5615] block nbd0: Receive control failed (result -104) [ 1305.634420][T16825] netlink: 'syz.0.10111': attribute type 11 has an invalid length. [ 1305.634456][T16825] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10111'. [ 1306.153050][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.153308][ T13] bond_slave_0: left allmulticast mode [ 1306.154937][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.155349][ T13] bond_slave_1: left allmulticast mode [ 1306.156053][ T13] bond0 (unregistering): Released all slaves [ 1306.160796][ T13] bond1 (unregistering): Released all slaves [ 1306.173799][ T13] bond2 (unregistering): Released all slaves [ 1306.218122][ T13] bond3 (unregistering): (slave veth3): Releasing backup interface [ 1306.219406][ T13] bond3 (unregistering): Released all slaves [ 1306.232447][ T13] bond4 (unregistering): Released all slaves [ 1306.246457][ T13] bond5 (unregistering): Released all slaves [ 1306.263289][ T13] bond6 (unregistering): (slave veth5): Releasing active interface [ 1306.264452][ T13] bond6 (unregistering): Released all slaves [ 1306.283540][ T13] bond7 (unregistering): Released all slaves [ 1306.294702][ T13] bond8 (unregistering): Released all slaves [ 1306.304140][ T13] bond9 (unregistering): Released all slaves [ 1306.371232][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1306.499299][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10112'. [ 1306.527582][T16840] openvswitch: netlink: Missing valid actions attribute. [ 1306.527625][T16840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1306.611718][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10115'. [ 1306.638935][ T13] : left promiscuous mode [ 1306.760095][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1306.882618][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1307.252573][ T13] tipc: Left network mode [ 1307.257449][T16877] netlink: 'syz.1.10119': attribute type 2 has an invalid length. [ 1307.436871][ T13] IPVS: stopping master sync thread 10127 ... [ 1307.514401][T16881] macsec1: entered allmulticast mode [ 1307.514429][T16881] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1307.522611][T16881] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1307.524089][T16881] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1307.634022][T16888] netlink: 'syz.2.10121': attribute type 2 has an invalid length. [ 1307.805515][T16892] netlink: 'syz.0.10122': attribute type 1 has an invalid length. [ 1307.867238][T16892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.899543][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.899568][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.921968][ T13] batman_adv: batadv0: Removing interface: veth0 [ 1307.953908][T16904] netlink: 'syz.2.10126': attribute type 11 has an invalid length. [ 1307.953931][T16904] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10126'. [ 1307.967392][ T13] veth0_to_team: left promiscuous mode [ 1307.967428][ T13] veth0_macvtap: left promiscuous mode [ 1307.968218][ T13] veth1_vlan: left promiscuous mode [ 1307.968287][ T13] veth0_vlan: left promiscuous mode [ 1307.997244][T16907] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10122'. [ 1308.472933][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1308.487693][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1308.626947][T16902] bond0: (slave veth5): Enslaving as an active interface with a down link [ 1308.635261][T16892] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1308.635535][T16892] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1308.959895][T14341] net_ratelimit: 7 callbacks suppressed [ 1308.959915][T14341] bond2: (slave bridge2): failed to get link speed/duplex [ 1308.964263][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10128'. [ 1309.130800][T16922] bond4: option lacp_active: invalid value (5) [ 1309.298082][T16922] bond4 (unregistering): Released all slaves [ 1309.435985][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1309.605973][ T13] IPVS: stop unused estimator thread 0... [ 1309.730725][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1309.744218][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10136'. [ 1309.744251][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10136'. [ 1309.826049][T16956] erspan0: entered promiscuous mode [ 1309.835669][T16956] gretap0: entered promiscuous mode [ 1309.842028][T16959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10136'. [ 1309.842058][T16959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10136'. [ 1309.873449][T16956] debugfs: 'hsr1' already exists in 'hsr' [ 1309.873473][T16956] Cannot create hsr debugfs directory [ 1309.873534][T16956] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1309.873553][T16956] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1309.875696][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1309.982476][ T50] bond2: (slave bridge2): failed to get link speed/duplex [ 1310.090229][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1310.203267][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1310.400720][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1310.477163][T16986] netlink: 'syz.3.10142': attribute type 11 has an invalid length. [ 1310.477187][T16986] netlink: 'syz.3.10142': attribute type 11 has an invalid length. [ 1311.099855][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1311.210108][ T50] bond2: (slave bridge2): failed to get link speed/duplex [ 1311.338799][T17022] __nla_validate_parse: 1 callbacks suppressed [ 1311.338819][T17022] netlink: 57923 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1311.339517][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1311.339536][T17022] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1311.618221][T17038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10154'. [ 1311.712015][ T2294] hid-generic 0005:4C4A:4155.0006: unknown main item tag 0x0 [ 1311.715246][ T2294] hid-generic 0005:4C4A:4155.0006: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1311.970172][T17063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10160'. [ 1312.039175][T17066] netlink: 'syz.3.10161': attribute type 12 has an invalid length. [ 1312.039196][T17066] netlink: 'syz.3.10161': attribute type 29 has an invalid length. [ 1312.039209][T17066] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10161'. [ 1312.047539][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10161'. [ 1312.227131][T17074] netlink: 'syz.1.10162': attribute type 1 has an invalid length. [ 1312.328785][T17074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1312.408678][T17080] bond2: (slave veth0_to_bond): making interface the new active one [ 1312.426273][T17080] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1312.584140][T17084] No such timeout policy "syz1" [ 1312.694060][T17096] netlink: 'syz.2.10167': attribute type 2 has an invalid length. [ 1313.086190][T17122] netlink: 332 bytes leftover after parsing attributes in process `syz.1.10172'. [ 1313.086252][T17122] netlink: 'syz.1.10172': attribute type 9 has an invalid length. [ 1313.086280][T17122] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10172'. [ 1313.086295][T17122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10172'. [ 1313.231530][T17121] lo speed is unknown, defaulting to 1000 [ 1313.235571][T17121] lo speed is unknown, defaulting to 1000 [ 1313.238940][T17121] lo speed is unknown, defaulting to 1000 [ 1313.347343][T17132] xt_hashlimit: size too large, truncated to 1048576 [ 1313.404566][T17135] xt_hashlimit: size too large, truncated to 1048576 [ 1314.031434][T14338] net_ratelimit: 20 callbacks suppressed [ 1314.031455][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1314.141129][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1314.146945][T15912] lo speed is unknown, defa ** replaying previous printk message ** [ 1314.146945][T15912] lo speed is unknown, defaulting to 1000 [ 1314.149204][T17121] infiniband syz0: set down [ 1314.149223][T17121] infiniband syz0: added lo [ 1314.163107][T17121] [ 1314.184926][T17121] ====================================================== [ 1314.191968][T17121] WARNING: possible circular locking dependency detected [ 1314.199053][T17121] syzkaller #0 Not tainted [ 1314.203466][T17121] ------------------------------------------------------ [ 1314.210561][T17121] syz.0.10174/17121 is trying to acquire lock: [ 1314.216711][T17121] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 1314.225625][T17121] [ 1314.225625][T17121] but task is already holding lock: [ 1314.232986][T17121] ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 1314.242320][T17121] [ 1314.242320][T17121] which lock already depends on the new lock. [ 1314.242320][T17121] [ 1314.252714][T17121] [ 1314.252714][T17121] the existing dependency chain (in reverse order) is: [ 1314.261715][T17121] [ 1314.261715][T17121] -> #7 (wq_pool_mutex){+.+.}-{4:4}: [ 1314.269276][T17121] __mutex_lock+0x19d/0x1550 [ 1314.274386][T17121] __alloc_workqueue+0xa4f/0x1fe0 [ 1314.279922][T17121] alloc_workqueue_noprof+0xe3/0x210 [ 1314.285727][T17121] padata_alloc+0xbe/0x360 [ 1314.290682][T17121] pcrypt_init_padata+0x27/0x100 [ 1314.296139][T17121] pcrypt_init+0x60/0xc0 [ 1314.301020][T17121] do_one_initcall+0x250/0x870 [ 1314.306310][T17121] do_initcall_level+0x10a/0x1a0 [ 1314.311842][T17121] do_initcalls+0x59/0xa0 [ 1314.316677][T17121] kernel_init_freeable+0x29d/0x3e0 [ 1314.322381][T17121] kernel_init+0x22/0x1d0 [ 1314.327247][T17121] ret_from_fork+0x514/0xb70 [ 1314.332361][T17121] ret_from_fork_asm+0x1a/0x30 [ 1314.337645][T17121] [ 1314.337645][T17121] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 1314.345371][T17121] cpus_read_lock+0x42/0x160 [ 1314.350475][T17121] static_key_slow_inc+0x12/0x30 [ 1314.355922][T17121] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1314.362192][T17121] nbd_genl_foreach_sock+0x265/0x450 [ 1314.367984][T17121] nbd_genl_reconfigure+0xbbb/0x1040 [ 1314.373776][T17121] genl_family_rcv_msg_doit+0x233/0x340 [ 1314.379833][T17121] genl_rcv_msg+0x614/0x7a0 [ 1314.384845][T17121] netlink_rcv_skb+0x226/0x4a0 [ 1314.390117][T17121] genl_rcv+0x28/0x40 [ 1314.394611][T17121] netlink_unicast+0x7bd/0x940 [ 1314.399879][T17121] netlink_sendmsg+0x813/0xb40 [ 1314.405149][T17121] sock_sendmsg_nosec+0x14e/0x190 [ 1314.410683][T17121] ____sys_sendmsg+0x54e/0x850 [ 1314.415958][T17121] ___sys_sendmsg+0x2a5/0x360 [ 1314.421145][T17121] __x64_sys_sendmsg+0x1b1/0x290 [ 1314.426604][T17121] do_syscall_64+0x166/0x520 [ 1314.431699][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.438103][T17121] [ 1314.438103][T17121] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1314.445737][T17121] __mutex_lock+0x19d/0x1550 [ 1314.450838][T17121] nbd_queue_rq+0x373/0xff0 [ 1314.455853][T17121] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1314.461941][T17121] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1314.468783][T17121] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1314.475272][T17121] blk_mq_run_work_fn+0x16c/0x300 [ 1314.480812][T17121] process_scheduled_works+0xc3d/0x1630 [ 1314.486870][T17121] worker_thread+0xa47/0xfb0 [ 1314.491986][T17121] kthread+0x38b/0x480 [ 1314.496560][T17121] ret_from_fork+0x514/0xb70 [ 1314.501665][T17121] ret_from_fork_asm+0x1a/0x30 [ 1314.506940][T17121] [ 1314.506940][T17121] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1314.514136][T17121] __mutex_lock+0x19d/0x1550 [ 1314.519238][T17121] nbd_queue_rq+0xc1/0xff0 [ 1314.524163][T17121] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1314.530220][T17121] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1314.537059][T17121] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1314.543556][T17121] blk_mq_run_work_fn+0x16c/0x300 [ 1314.549103][T17121] process_scheduled_works+0xc3d/0x1630 [ 1314.555157][T17121] worker_thread+0xa47/0xfb0 [ 1314.560261][T17121] kthread+0x38b/0x480 [ 1314.564841][T17121] ret_from_fork+0x514/0xb70 [ 1314.569952][T17121] ret_from_fork_asm+0x1a/0x30 [ 1314.575242][T17121] [ 1314.575242][T17121] -> #3 (set->srcu){.+.+}-{0:0}: [ 1314.582355][T17121] __synchronize_srcu+0xc9/0x2f0 [ 1314.587803][T17121] elevator_switch+0x1e8/0x7b0 [ 1314.593073][T17121] elevator_change+0x2fa/0x480 [ 1314.598345][T17121] elevator_set_default+0x375/0x440 [ 1314.604049][T17121] blk_register_queue+0x3f3/0x4e0 [ 1314.609589][T17121] __add_disk+0x6b8/0xdb0 [ 1314.614431][T17121] add_disk_fwnode+0x100/0x3a0 [ 1314.619712][T17121] nbd_dev_add+0x733/0xb60 [ 1314.624638][T17121] nbd_init+0x168/0x1f0 [ 1314.629376][T17121] do_one_initcall+0x250/0x870 [ 1314.634655][T17121] do_initcall_level+0x10a/0x1a0 [ 1314.640098][T17121] do_initcalls+0x59/0xa0 [ 1314.644935][T17121] kernel_init_freeable+0x29d/0x3e0 [ 1314.650639][T17121] kernel_init+0x22/0x1d0 [ 1314.655482][T17121] ret_from_fork+0x514/0xb70 [ 1314.660588][T17121] ret_from_fork_asm+0x1a/0x30 [ 1314.665868][T17121] [ 1314.665868][T17121] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1314.673673][T17121] __mutex_lock+0x19d/0x1550 [ 1314.678771][T17121] elevator_change+0x1af/0x480 [ 1314.684042][T17121] elevator_set_none+0xb5/0x140 [ 1314.689398][T17121] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1314.695720][T17121] nbd_start_device+0x189/0xb30 [ 1314.701083][T17121] nbd_genl_connect+0x167d/0x1cd0 [ 1314.706612][T17121] genl_family_rcv_msg_doit+0x233/0x340 [ 1314.712670][T17121] genl_rcv_msg+0x614/0x7a0 [ 1314.717686][T17121] netlink_rcv_skb+0x226/0x4a0 [ 1314.722957][T17121] genl_rcv+0x28/0x40 [ 1314.727448][T17121] netlink_unicast+0x7bd/0x940 [ 1314.732723][T17121] netlink_sendmsg+0x813/0xb40 [ 1314.738020][T17121] sock_sendmsg_nosec+0x14e/0x190 [ 1314.743565][T17121] ____sys_sendmsg+0x54e/0x850 [ 1314.748862][T17121] ___sys_sendmsg+0x2a5/0x360 [ 1314.754060][T17121] __x64_sys_sendmsg+0x1b1/0x290 [ 1314.759518][T17121] do_syscall_64+0x166/0x520 [ 1314.764617][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.771017][T17121] [ 1314.771017][T17121] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1314.779640][T17121] blk_alloc_queue+0x544/0x690 [ 1314.784911][T17121] __blk_mq_alloc_disk+0x194/0x390 [ 1314.790544][T17121] nbd_dev_add+0x494/0xb60 [ 1314.795479][T17121] nbd_init+0x168/0x1f0 [ 1314.800149][T17121] do_one_initcall+0x250/0x870 [ 1314.805433][T17121] do_initcall_level+0x10a/0x1a0 [ 1314.810886][T17121] do_initcalls+0x59/0xa0 [ 1314.815727][T17121] kernel_init_freeable+0x29d/0x3e0 [ 1314.821436][T17121] kernel_init+0x22/0x1d0 [ 1314.826282][T17121] ret_from_fork+0x514/0xb70 [ 1314.831388][T17121] ret_from_fork_asm+0x1a/0x30 [ 1314.836672][T17121] [ 1314.836672][T17121] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1314.843873][T17121] __lock_acquire+0x164c/0x2de0 [ 1314.849235][T17121] lock_acquire+0x115/0x350 [ 1314.854249][T17121] fs_reclaim_acquire+0x71/0x100 [ 1314.859699][T17121] __kmalloc_noprof+0xbc/0x720 [ 1314.864976][T17121] apply_wqattrs_prepare+0xee/0xdc0 [ 1314.870685][T17121] __alloc_workqueue+0x11be/0x1fe0 [ 1314.876312][T17121] alloc_workqueue_noprof+0xe3/0x210 [ 1314.882117][T17121] ib_mad_init_device+0x993/0x2150 [ 1314.887847][T17121] add_client_context+0x37c/0x7b0 [ 1314.893445][T17121] enable_device_and_get+0x19c/0x3e0 [ 1314.899239][T17121] ib_register_device+0xdc8/0x1080 [ 1314.904859][T17121] rxe_register_device+0x1e3/0x350 [ 1314.910553][T17121] rxe_net_add+0x81/0x110 [ 1314.915457][T17121] rxe_newlink+0xf4/0x1c0 [ 1314.920344][T17121] nldev_newlink+0x5be/0x650 [ 1314.925479][T17121] rdma_nl_rcv+0x6ef/0xa40 [ 1314.930441][T17121] netlink_unicast+0x7bd/0x940 [ 1314.935714][T17121] netlink_sendmsg+0x813/0xb40 [ 1314.940988][T17121] sock_sendmsg_nosec+0x14e/0x190 [ 1314.946521][T17121] ____sys_sendmsg+0x54e/0x850 [ 1314.951798][T17121] ___sys_sendmsg+0x2a5/0x360 [ 1314.956996][T17121] __x64_sys_sendmsg+0x1b1/0x290 [ 1314.962447][T17121] do_syscall_64+0x166/0x520 [ 1314.967547][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.973975][T17121] [ 1314.973975][T17121] other info that might help us debug this: [ 1314.973975][T17121] [ 1314.984186][T17121] Chain exists of: [ 1314.984186][T17121] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 1314.984186][T17121] [ 1314.996685][T17121] Possible unsafe locking scenario: [ 1314.996685][T17121] [ 1315.004175][T17121] CPU0 CPU1 [ 1315.009561][T17121] ---- ---- [ 1315.014918][T17121] lock(wq_pool_mutex); [ 1315.019154][T17121] lock(cpu_hotplug_lock); [ 1315.026162][T17121] lock(wq_pool_mutex); [ 1315.032907][T17121] lock(fs_reclaim); [ 1315.036880][T17121] [ 1315.036880][T17121] *** DEADLOCK *** [ 1315.036880][T17121] [ 1315.045000][T17121] locks held by syz.0.10174/17121: 6, last CPU#1: [ 1315.051486][T17121] #0: ffffffff9ad7fae8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 1315.061541][T17121] #1: ffffffff8ffb0888 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 1315.070940][T17121] #2: ffffffff8ffa19a8 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 1315.080847][T17121] #3: ffffffff8ffa1ca8 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 1315.090837][T17121] #4: ffff8880872d0658 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 1315.101696][T17121] #5: ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 1315.111430][T17121] [ 1315.111430][T17121] stack backtrace: [ 1315.117306][T17121] CPU: 1 UID: 0 PID: 17121 Comm: syz.0.10174 Not tainted syzkaller #0 PREEMPT(full) [ 1315.126745][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1315.136783][T17121] Call Trace: [ 1315.140056][T17121] [ 1315.142975][T17121] dump_stack_lvl+0xe8/0x150 [ 1315.147561][T17121] print_circular_bug+0x2e2/0x300 [ 1315.152578][T17121] check_noncircular+0x12f/0x150 [ 1315.157514][T17121] __lock_acquire+0x164c/0x2de0 [ 1315.162354][T17121] ? check_path+0x21/0x40 [ 1315.166673][T17121] ? check_noncircular+0xdb/0x150 [ 1315.171687][T17121] ? lockdep_unlock+0x5c/0xd0 [ 1315.176354][T17121] lock_acquire+0x115/0x350 [ 1315.180845][T17121] ? __kmalloc_noprof+0xbc/0x720 [ 1315.185769][T17121] ? pcpu_alloc_noprof+0xde2/0x1900 [ 1315.190998][T17121] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1315.196360][T17121] fs_reclaim_acquire+0x71/0x100 [ 1315.201285][T17121] ? __kmalloc_noprof+0xbc/0x720 [ 1315.206208][T17121] __kmalloc_noprof+0xbc/0x720 [ 1315.210961][T17121] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1315.216326][T17121] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1315.221693][T17121] apply_wqattrs_prepare+0xee/0xdc0 [ 1315.226884][T17121] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 1315.232700][T17121] ? pcpu_alloc_noprof+0x100f/0x1900 [ 1315.237980][T17121] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1315.243264][T17121] __alloc_workqueue+0x11be/0x1fe0 [ 1315.248368][T17121] alloc_workqueue_noprof+0xe3/0x210 [ 1315.253650][T17121] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1315.259541][T17121] ? __ib_alloc_pd+0x451/0x5c0 [ 1315.264371][T17121] ib_mad_init_device+0x993/0x2150 [ 1315.269497][T17121] ? __pfx_ib_mad_init_device+0x10/0x10 [ 1315.275038][T17121] ? do_raw_spin_unlock+0xf5/0x200 [ 1315.280148][T17121] ? _raw_spin_unlock+0x28/0x50 [ 1315.284994][T17121] add_client_context+0x37c/0x7b0 [ 1315.290015][T17121] ? __pfx_add_client_context+0x10/0x10 [ 1315.295551][T17121] ? xa_find+0x25b/0x2b0 [ 1315.299791][T17121] enable_device_and_get+0x19c/0x3e0 [ 1315.305067][T17121] ? __pfx_enable_device_and_get+0x10/0x10 [ 1315.310861][T17121] ? device_add+0x6f6/0xb80 [ 1315.315385][T17121] ib_register_device+0xdc8/0x1080 [ 1315.320486][T17121] ? __pfx_ib_register_device+0x10/0x10 [ 1315.326020][T17121] ? ib_device_set_netdev+0x5c9/0x6d0 [ 1315.331379][T17121] rxe_register_device+0x1e3/0x350 [ 1315.336479][T17121] rxe_net_add+0x81/0x110 [ 1315.340799][T17121] rxe_newlink+0xf4/0x1c0 [ 1315.345126][T17121] nldev_newlink+0x5be/0x650 [ 1315.349715][T17121] ? __pfx_nldev_newlink+0x10/0x10 [ 1315.354870][T17121] ? apparmor_capable+0x126/0x170 [ 1315.359895][T17121] ? security_capable+0x7e/0x2c0 [ 1315.364831][T17121] ? __pfx_nldev_newlink+0x10/0x10 [ 1315.369934][T17121] rdma_nl_rcv+0x6ef/0xa40 [ 1315.374350][T17121] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1315.379289][T17121] ? netlink_deliver_tap+0x2e/0x1b0 [ 1315.384475][T17121] ? netlink_deliver_tap+0x2e/0x1b0 [ 1315.389665][T17121] netlink_unicast+0x7bd/0x940 [ 1315.394421][T17121] netlink_sendmsg+0x813/0xb40 [ 1315.399178][T17121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1315.404456][T17121] ? apparmor_socket_sendmsg+0x98/0x360 [ 1315.409992][T17121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1315.415270][T17121] sock_sendmsg_nosec+0x14e/0x190 [ 1315.420298][T17121] ____sys_sendmsg+0x54e/0x850 [ 1315.425086][T17121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1315.430380][T17121] ? import_iovec+0x73/0xa0 [ 1315.434886][T17121] ___sys_sendmsg+0x2a5/0x360 [ 1315.439562][T17121] ? __lock_acquire+0x747/0x2de0 [ 1315.444490][T17121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1315.449688][T17121] ? futex_wait+0x2a2/0x390 [ 1315.454209][T17121] ? __fget_files+0x2a/0x420 [ 1315.458794][T17121] ? __fget_files+0x3a2/0x420 [ 1315.463471][T17121] __x64_sys_sendmsg+0x1b1/0x290 [ 1315.468404][T17121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1315.473869][T17121] do_syscall_64+0x166/0x520 [ 1315.478453][T17121] ? trace_irq_disable+0x3b/0x140 [ 1315.483474][T17121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.489545][T17121] ? clear_bhb_loop+0x70/0xc0 [ 1315.494228][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.500125][T17121] RIP: 0033:0x7f59ca79e199 [ 1315.504542][T17121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.524140][T17121] RSP: 002b:00007f59cb583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1315.532546][T17121] RAX: ffffffffffffffda RBX: 00007f59caa25fa0 RCX: 00007f59ca79e199 [ 1315.540508][T17121] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1315.548468][T17121] RBP: 00007f59ca8358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1315.556424][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1315.564407][T17121] R13: 00007f59caa26038 R14: 00007f59caa25fa0 R15: 00007ffe4c4f9be8 [ 1315.572378][T17121] [ 1315.605277][T17121] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1315.605315][T17121] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1315.605357][T17121] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1315.610431][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1315.695925][T17121] RDS/IB: syz0: added [ 1315.695963][T17121] smc: adding ib device syz0 with port count 1 [ 1315.695979][T17121] smc: ib device syz0 port 1 has no pnetid [ 1315.696030][ T2276] lo speed is unknown, defaulting to 1000 [ 1315.698986][T17121] lo speed is unknown, defaulting to 1000 [ 1315.719843][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1315.820328][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1315.827880][T17121] lo speed is unknown, defaulting to 1000 [ 1315.916460][T17121] lo speed is unknown, defaulting to 1000 [ 1315.933731][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1316.010301][T17121] lo speed is unknown, defaulting to 1000 [ 1316.040314][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1316.100833][T17121] lo speed is unknown, defaulting to 1000 [ 1316.150793][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1316.208838][T17121] lo speed is unknown, defaulting to 1000 [ 1316.260678][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1316.332938][T17121] lo speed is unknown, defaulting to 1000 [ 1316.371296][T14338] bond2: (slave bridge2): failed to get link speed/duplex [ 1316.423438][T17121] lo speed is unknown, defaulting to 1000 [ 1316.479930][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1316.519320][T17121] lo speed is unknown, defaulting to 1000 [ 1316.617962][T17121] lo speed is unknown, defaulting to 1000 [ 1319.040250][ T7363] net_ratelimit: 22 callbacks suppressed [ 1319.040272][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.150704][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.259813][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.370624][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.479941][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.590196][ T7363] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.648031][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1319.700539][ T50] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.811421][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1319.919833][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1320.030678][T14337] bond2: (slave bridge2): failed to get link speed/duplex [ 1324.079848][T14337] net_ratelimit: 35 callbacks suppressed [ 1324.079869][T14337] bond2: (slave bridge2): failed to get link speed/duplex