last executing test programs: 13m29.966867915s ago: executing program 2 (id=2548): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xf}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x7}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x8}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000700)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000280)=""/71, 0x47}, {0x0}], 0x2}, 0x4}], 0x1, 0x40000061, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13m28.041865523s ago: executing program 2 (id=2558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r2, r3, 0x4, 0x44, &(0x7f0000000080)="0d97dcfa7c8094e4c6fe1b33423c7780ff454e9096a323a097e637dea50222b6f02ebcfc9c2520228592de25a3a2463deac7a97c30ba1604df97ddf5742fd613a23b8ca2", 0x1, 0x5, 0x5, 0x6, 0x7, 0x1, 0x2, 'syz1\x00'}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008011}, 0x94) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x8041) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000440)) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000005c0)={0x1, 0x4}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000640)={'rose0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001940)={0xffffffffffffffff, 0x2, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001980)={&(0x7f0000000680)="476efcdde464ae105151e34a2bf9d3c73882ed5756dca25b6474536cd37b3b9893488eebcbb84976953228fd27aacf9db396fa68cb1c7f7599bb8e6dcafebe63c096ea1327fc14fa4386fd02f56d80f76b621ccc8e1c77f7277a679a815051047fb22f23eb0f2c74ef65c252afd9a8e6044cdaf0ffaadda5db28d8cf6f1e3fac172c2877d317b112f8c62b9d05f3e27d82eb55ecd63e111fa4840a1edc413d1640a5a49b5e859f7f14b03b4e4096b759d4373d39033cdef59e0a7c97ed2a99f236ec9a5cb036fc057972055099f997991840b34cf635e8714c55151c883d18b1e418864c4d8b0f05ca9111f58c5d35", &(0x7f0000000780)=""/165, &(0x7f0000000840)="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", &(0x7f0000001840)="0becbeabf9d341dd42dd28fa918bcc77b8c5f5fe6a3c81491de642e2df962dc6f41a01c89f50fb7a43f10a6256ff0a8da0e17c8b369b63cae81bc88dc2821b51e5e36276b8199166268301063a0455c15a7380810eed85c56330338e264c6b000d3d04bcdff24cae58f376a6c70d61ffb6db543bc8a71af88224cfb778ea670a3ffdae05b2fc9606a1ec7e24463f5bdd0e0b2ac11d6e872aa53c6586101c7c0da926c4f00ef74b5655f1800bbb391503198a0866cab8135994acf4ee0f3537aa4f4266e5b2cb1076bb07fa", 0x2d4, r9, 0x4}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000019c0)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001a40)={0x0, @rand_addr, @broadcast}, &(0x7f0000001a80)=0xc) sendmsg$nl_route(r10, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)=@mpls_delroute={0x30, 0x19, 0x4, 0x70bd29, 0x25dfdbfd, {0x1c, 0x20, 0x0, 0xf9, 0xfe, 0x2, 0xfe, 0x4, 0x100}, [@RTA_MULTIPATH={0xc, 0x9, {0xaae, 0x7, 0x1c, r11}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20004040) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x2040) syz_genetlink_get_family_id$nfc(&(0x7f0000001c80), r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6668b997bfcf009a, 0x110, r3, 0x824f7000) ioctl$BTRFS_IOC_INO_PATHS(r9, 0xc0389423, &(0x7f0000001d00)={0x7, 0x18, [0x6, 0x9, 0xce, 0x9], &(0x7f0000001cc0)=[0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001d80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) 13m27.639112722s ago: executing program 2 (id=2564): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x43, 0x4000884}, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000007a2f4561b4976203aa86cfc962938365b5acf59ac7e4c1d1fdaa8be6a42ab6c4111187e95f0efb1ac84d883a7a37f68424f2d6076f41b9efc847c73e6af2a7dd8dc37a4fcb948aa2fc4cdc22ab9c36ba4107f08281872be69d9ae7670e76f988045cda72be74c3e903df7b5dcc29a61d79aad6d6d50635cbd9be519909a6a323aead6525c3cce6a65d3a1a1d7b2b848bcf85c188dae08cb5812660c799e22f1f3ddec9409346e67992681da9a7f84be971c19953ea6e622e5a7c78c012f3d21d02ffb2dd7d827a01fc93560988d5559902a807a9876c1a7d5efe996e520ee76bcfd669cb4a79c790b87e1a5e", @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000b0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20040010) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13m27.154843636s ago: executing program 2 (id=2572): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x5, 0x18, 0x0, 0x0, @binary="01"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220"], 0x2c}}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0xef, 0x4e22, 0xb6d, 0x2, 0x20, 0x20, 0x32}, {0x8, 0x8000000000000001, 0x3, 0x40, 0xffffffff, 0x337, 0x9, 0x8}, {0x4, 0x0, 0x5, 0x3}, 0x4, 0x6e6bb1, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d3, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x6, 0x3, 0x3, 0x4, 0x100, 0x4}}, 0xe8) 13m26.863985298s ago: executing program 2 (id=2575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0xf8, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x75dd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x844}, 0x10000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000000000000000020000000c0018800800024000000ea0240001801400018008000100e0000001080002007f8200010c0002800500010000000000540018800800014000000006080002400000000208000340000000030800014000007fff080002400000000708000240000000096cfe01400000008008000340000000030800034000000f0301000100"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB], 0x20}}, 0x2000c010) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'nq\x00', 0x17, 0xfffffffe, 0x2a}, {@rand_addr=0x64010101, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x25, 0x10, @void}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000000)={'bridge0\x00', @ifru_mtu=0x6266}) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x5}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xfff2}, {0xffe0}}}, 0x24}}, 0x400c0) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) 13m25.454746222s ago: executing program 2 (id=2585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3, 0x2, 0x3, 0x100, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x6}, 0x50) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x6, 0xff, 0x5, 0x20000, r2, 0x2}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0xfffff000, 0xd5, 0x0, 0x1}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000500050002000000050004000000"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5}, &(0x7f0000000000), &(0x7f00000006c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200), &(0x7f0000000280)=@tcp6=r3, 0x4}, 0x20) sendmsg$802154_raw(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)="f90fbbb341bf9aa027e506f4a6d9bcf119dcd4aa95927b8c515342e0db693ec1aa0b146659861963866014a787975e03a2ec194006d74930281e46084754202f047b56b1e3998d737a04666dd34bde1a6e211b50780f58b63beaf618befaca0b9bf9d6553c6029a0997cd9e072730c15741a81182d95c9bdce9d3d49", 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000180020002cbd7000fbdbdf250220206bfe0249000000000008000300", @ANYRES32=r11, @ANYBLOB="0c001680090004120400000066f57c7fe90a3b12671b66e3", @ANYRES32=r12, @ANYBLOB="2c0008801b3c9e2fb8b5ab46178350b3b8bc76618ea4f16050f6de71d76d50c675f1e758e231d7d96878eeeb"], 0x6c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000780000000000000002000000180100002020702500000000002020207b1af8ff00000000bfa10000f9ff000007010000f8ffffffb702000008000000b70300000400000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1}, 0x94) 13m10.384188623s ago: executing program 32 (id=2585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3, 0x2, 0x3, 0x100, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x6}, 0x50) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x6, 0xff, 0x5, 0x20000, r2, 0x2}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0xfffff000, 0xd5, 0x0, 0x1}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000500050002000000050004000000"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5}, &(0x7f0000000000), &(0x7f00000006c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200), &(0x7f0000000280)=@tcp6=r3, 0x4}, 0x20) sendmsg$802154_raw(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)="f90fbbb341bf9aa027e506f4a6d9bcf119dcd4aa95927b8c515342e0db693ec1aa0b146659861963866014a787975e03a2ec194006d74930281e46084754202f047b56b1e3998d737a04666dd34bde1a6e211b50780f58b63beaf618befaca0b9bf9d6553c6029a0997cd9e072730c15741a81182d95c9bdce9d3d49", 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000180020002cbd7000fbdbdf250220206bfe0249000000000008000300", @ANYRES32=r11, @ANYBLOB="0c001680090004120400000066f57c7fe90a3b12671b66e3", @ANYRES32=r12, @ANYBLOB="2c0008801b3c9e2fb8b5ab46178350b3b8bc76618ea4f16050f6de71d76d50c675f1e758e231d7d96878eeeb"], 0x6c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000780000000000000002000000180100002020702500000000002020207b1af8ff00000000bfa10000f9ff000007010000f8ffffffb702000008000000b70300000400000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1}, 0x94) 5.791052859s ago: executing program 3 (id=8007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0xfff, {0x100000001}}}}, {{@arp={@remote, @multicast1, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xffff, 0x8, 0x800, 0xd, 0xe2ec, 0x8, 'veth0_to_batadv\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=@newtfilter={0x4c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x2}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e23}]}}]}, 0x4c}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x2040050) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) 5.499711142s ago: executing program 3 (id=8010): sendmmsg(0xffffffffffffffff, &(0x7f0000006f00)=[{{&(0x7f00000005c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0xec, 0x2c, 0xd2f, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xbc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x1}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xa4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfff8}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0xffff, 0x5, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0xfff, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0xec}}, 0x2000c800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000ffffffffffa28ee30080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009500"/72], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100001fed1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000952a052774128e58a2c0137247c3aa302718ccd03bb569fb238a61fccc653cd87150ed78cb74915ab1b61a3526750f1d88f67245a51b784e41ecd0d5cea7615183d839e5fe16f9717512ce"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) unshare(0x6020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x38) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) 5.247881747s ago: executing program 3 (id=8016): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x462c00, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000dc0)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000240)="d29edb52e9bc960d8858f5476408b13788a8", 0x12}], 0x1) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0b0000d6c0afd34fc70740b616e07ddb826e7ffffffb010000007621752e6d5b07059c95c64dd87fc176c83d7021087c19dbfd3410866679d9b10021dc9a4d13", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES64=r5, @ANYRES8, @ANYBLOB='\x00'/28], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x24000840) close(0x3) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000032fa653a000000001811000052325905112eff0cd630e3b80cf8494dcb41fd46f079324aec949fc2f258aab1ba66bdcab6ce9f429eb19aede9b1f1d5cc7a0db641a649925ba34dd62684c9530927239f15da3ddcd7e867c7903c503899d2b2ff9d4b5af0e70b1f01f83a6c4b04a693bee4b1116905f99ff5fcfb9bd225466587fffe2a2ff064432e68e91d57791cceb2d9b38ab0b8b821a8c62d7574883bf9bb4e2f6777857e7fc7194f699d3defd34adb487237efed8e540f316c70f69c6b91f8e70004876ddcb3140f21eebd9a", @ANYRES8=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da", 0x2}], 0x1}, 0x20000001) recvmmsg(r12, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000100)}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000580)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @local, 0x20007}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e23, @multicast2}], 0xb4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0x1fffffffffffff27, &(0x7f0000000c80)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x39}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1400004, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000a40)='GPL\x00', 0x4009e, 0x17, &(0x7f0000000a80)=""/23, 0x41100, 0x54, '\x00', r2, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r16, r11, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) 4.246644078s ago: executing program 3 (id=8020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20040040) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20040040) 4.171061569s ago: executing program 3 (id=8021): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x308, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044084}, 0x20000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x108, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc57}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xda61}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e65e01ed9c4d22ae8bc3626400ce78a4ae82d6bc99fa"}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x804}, 0x41) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000480)={@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x4}}, {&(0x7f0000000380)=""/187, 0xbb}, &(0x7f0000000440)}, 0xa0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x9}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000005c0)={r5, 0xffff, 0x1, 0x9}, &(0x7f0000000600)=0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xa1229d84e53de465}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf4, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1b, 0x5b, "2cf041ca7947cc738b4ce786290262162b6d0d169486b7"}, @NL80211_ATTR_FRAME_MATCH={0xbb, 0x5b, "ec1dbe9cac479eb1d16c30e656383b58fcd74bc33449d82c4224f295ae04a593f7de6980823af4128deedcac65011f36a10b3a906f7acc7844f526575ca93fc2a40a8adcc89f3109a846854dfe85fa0fbc2ca805d2554ae02b1dbea27081af468f8aaf4068bea073e82348148b32cd1b63455730257e775384bf0ef7663fc0c0822b117320e6c00d52007b304e00992f0a614905cebeb9035978623585cf91a71fb4c4455302c890119081ab0bdd972b614b732f390735"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x400c014}, 0x20004850) r7 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r7, 0xe, 0x0, 0x7ff, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000880), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000980)=0xffff, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000a80)={@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x490, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}}, {&(0x7f00000009c0)=""/71, 0x47}, &(0x7f0000000a40), 0x20}, 0xa0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000b40)={r4}) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) poll(&(0x7f0000000cc0), 0x0, 0xfffffff7) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0xd, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c080) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000e40)={r8, r8}, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000001080)={{r9, &(0x7f0000000e80)='\x00', 0x80000, &(0x7f0000000ec0)={@align=0x6, {0xf0, 0xc, 0x1, 0x5}}, 0x1, &(0x7f0000000f00)={@_ha_fsid}, &(0x7f0000000f40)=0x4}, {[0x7fffffff, 0x0, 0x7, 0xc9e8]}, 0x9, 0xfb, &(0x7f0000000f80)=""/251}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001140)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r6, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000013c0)={'syztnl1\x00', &(0x7f0000001340)={'syztnl2\x00', 0x0, 0x2, 0x5, 0x5, 0xfffffffb, 0x66, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20, 0x7800, 0x2, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001480)={'syztnl2\x00', &(0x7f0000001400)={'syztnl1\x00', 0x0, 0x4, 0xe, 0x7, 0x5, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast2, 0x7800, 0x7800, 0xff, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x5, 0x7, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x68, 0x0, 0x49, 0x29, 0x0, @remote, @loopback, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0xa, "f9c42182ff7945d4"}, {0x0, 0x7, "a3124c1e1a"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000001880)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001840)={&(0x7f0000001680)={0x1a0, r13, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40841}, 0x0) 4.097718494s ago: executing program 5 (id=8022): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000000000000000000006c617374000000000400028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x804}, 0x20000800) 3.801557857s ago: executing program 5 (id=8026): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20040}, 0x94) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) splice(r2, 0x0, r1, 0x0, 0x1100000000f336, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r0, 0x14, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000000), 0x0}, 0x20) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) socket$inet(0x2, 0x5, 0x40000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="090000001430000000000000", @ANYRES32=r5, @ANYBLOB="e54959d9b645aa6811311aaa2a67ab63643a4f1c3d91b5f35674171397d2a4b8f28984006f034e85409bd4a18d414b5cacc3f2db0baae94bbfcb4b3871f1802df55eaf675d4bbc37cbd488a47e787dd9b06f48115bd03b302d320033287c2b34a04665395f6d66c66be316483b4e4639b0e0856634184f01065a5ec1ee9c78f98521e864c88e2bc1e3bf76c25700"/154, @ANYRES64=r4], 0x20) 3.206411852s ago: executing program 3 (id=8032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000005c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @mcast2, 0x8000}}, 0x24) connect$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x93, @loopback, 0x3}}, 0x24) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4], 0x24}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000500000000000000ffffffffffffffff000000000000000000800000000000000000000000000000fdffffffffffff7ffeffffffff7f40000200000000000008000000000000000001000001000000004400050000000000000000000000000000000000000000002b"], 0xfc}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000001f7e4f038212550b9dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x150, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r9, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x84}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x60}}, 0x14) sendmsg$AUDIT_USER(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e0000000ed0304002bbd7000ffdbdf25df7082aa6b15c4b55872730684108c1b9c1da63459235d378bb32fc1634a44607d0d4ea28b2e80248e0a467cbc447ca7492f27c03dd60c8d7ee2a5683743b007ac0bb1ebb26e1ad2daf427911d6b357022b6d4f80cbf7e8f14be674bf7e0bafdf3b1a2c679e70e23ba20437e6c67988d3812da316504bb1ba067116be45a95673356168586f41e1ba08107f789762ab026c4f99473f2db33ad9c4057250bfa37727089fd2c1c456e429664e39ad06e4b7e9424f7432954e7bd2d6043bf8e416f9489a7a81fdec6eca22a08dc72000000"], 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x44005) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x85, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}], 0x1c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000010180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffffeb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.810278149s ago: executing program 5 (id=8033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400009b000000000700000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'veth1_to_bridge\x00', 'netdevsim0\x00', {}, {0xff}, 0x2f, 0x6, 0x2, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x0, 0x0, 0x8004000, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 2.729279349s ago: executing program 5 (id=8034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r10}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) (async) r13 = socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) setsockopt$inet_mreqsrc(r13, 0x0, 0x26, &(0x7f0000000040)={@loopback, @broadcast, @multicast1}, 0xc) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000780)={{r1, &(0x7f0000000380)='k.*&\x00', 0x507802, &(0x7f00000003c0)={@align=0x6, {0x7, 0xd741, 0x0, 0xc0f}}, 0xb39, &(0x7f0000000640), &(0x7f0000000680)=0x5}, {[0x6, 0x8, 0x7, 0x9]}, 0x1, 0x8c, &(0x7f00000006c0)=""/140}) write$tun(r14, &(0x7f0000000800)={@void, @void, @x25={0x3, 0x3, 0xf7}}, 0x3) 2.271122836s ago: executing program 4 (id=8035): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010df2500000000", @ANYRES32=0x0, @ANYBLOB="172000002120000008000500", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163766c616e00040002800a000100aaaaaaaaaabb0000"], 0x48}}, 0x8004042) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.880092484s ago: executing program 4 (id=8038): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xfe, 0x5ae9}, {0x20, 0x7f, 0x80, 0xfffff00c}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f0000000440)=[{{&(0x7f0000000540)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="57c778df", 0x4}, {&(0x7f0000000180)="ef9b510000d71636360fbe1c6d229c19a9", 0x11}, {0x0, 0x13}], 0x3}}], 0x2, 0x48014) socket(0x10, 0x3, 0x0) 1.715442575s ago: executing program 5 (id=8040): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x8e, &(0x7f00000003c0)=""/142, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1, 0x1], &(0x7f0000000540)=[{0x1, 0x3, 0x6, 0x8}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x3, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0xab, 0x80, &(0x7f0000000740)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb55", &(0x7f0000000800)="b2aa2f37526cd6fb8f82581b6f1d9d90f6dffb3a71c5781adec5960424401c6cd7f67e0e96a9db7a529d3c70d6edad4028d72b7681958e097e02a58681239115d826fa5129f5c4f79dff426b9bcd12a95faf94fc94080e6833be6f22d25977449b869abfd4f1d63ce8126f8af945ed213aac68413429bdc164877e914a95f41d", 0x3, 0x0, 0x8}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="086495cc7ae4da000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="8c"], 0x20) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000003aa2aaaaaaaaa86dd6080000000383afffe800eff0000000000000000000000bbff02000000000000000000000000000102009078000005dc608cb02b00002fff00000000040000000000000000000001fe8000000000000000000000000000aa1d000d7168000000"], 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d0027bd7000fddbdf2526000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) 1.427215673s ago: executing program 1 (id=8042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0xfffe, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvfrom(r1, 0x0, 0x0, 0x983706c3b03e3dca, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x9, 0xf4c, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@delchain={0x24, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0x0, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_dellink={0x30, 0x11, 0x100, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r7, 0x60f80, 0x10a1}}, 0xfffffffffffffed9}}, 0x4) 1.351389208s ago: executing program 4 (id=8043): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000012000000050800000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000000000002900000008000002"], 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x44890) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000100)=0x14, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) setsockopt$inet_group_source_req(r8, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) unshare(0x22020400) read(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004600002c00000000d90690780a210104ac1414aa0702000000000000", @ANYRES32=0x41424344, @ANYRES64, @ANYBLOB="6775930f9078cdfcf96b36b1c508b70220c315a900000a7bc7da985825e9860ba31d15425be39b600eda29fa"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.057562314s ago: executing program 1 (id=8045): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x40002}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4916, 0xffbc) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x5ddb5000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000a34e44da10e10000ed21f9eaac99ce75db6717e60000000400000000000000005496fa55"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x800) 1.055880109s ago: executing program 0 (id=8046): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000702080003000b00e4002c000000ea2933af5effffffffff1e010000000051f60a84c9f4d4938037e786a6d00046683ea0786c73d04034938403000000", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 958.774947ms ago: executing program 0 (id=8047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x400006}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x90, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffff9d5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x0, 0x86b7}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8}]}, 0x90}}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 790.217184ms ago: executing program 0 (id=8048): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffeba, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24008840}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000008000000000000000800000091110d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffeba, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24008840}, 0x40810) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000008000000000000000800000091110d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) 715.772756ms ago: executing program 0 (id=8049): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56149, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 646.245191ms ago: executing program 5 (id=8050): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008040388f1d71d819cc0100627269646765ff0f1c0002800c002175368e43002b0e424c080000004b8b000c0087620104080000000000"], 0x4c}}, 0x80) 574.734271ms ago: executing program 4 (id=8051): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x2, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0xf]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'nq\x00', 0x5, 0x7, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x0, 0x40}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7f}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) 569.164452ms ago: executing program 1 (id=8052): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xf, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x80000000}, &(0x7f0000000200)=0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000240)={0x0, 0xffff, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={r3, 0xfffffffffffffff2, 0x0, [0xfffffffffffffffa, 0x1, 0x3, 0xbdf1, 0x5], [0x4, 0xff, 0x8000000000000001, 0x259c, 0x1, 0x10000, 0x2, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x7, 0x400, 0xfffffffffffffff7, 0xd, 0x8f, 0x1, 0x5, 0x81, 0x3ff, 0x7fffffff, 0x9, 0x3, 0xfffffffffffffffc, 0x5, 0xfffffffffffff7c0, 0xd, 0x7, 0x3, 0xe, 0x2, 0x9, 0x8000000000000000, 0x38230ac, 0x10, 0x2, 0x101, 0x9, 0x6, 0x0, 0xe431, 0x4, 0x101, 0x8, 0x7b93, 0xfffffffffffffb9d, 0x1, 0x80, 0x100000001, 0x5, 0x7, 0x10000, 0xffffffffffffff22, 0x1, 0x9, 0xaf, 0x80000001, 0x6, 0x1ed8, 0x5, 0xfffffffffffff238, 0x100000000, 0x101, 0x1400, 0x0, 0x1ff, 0xfffffffffffffffe, 0x8, 0x1, 0xc, 0x4, 0xd996, 0x5, 0x2, 0x8, 0xae, 0x6409, 0x3, 0x40, 0x2, 0x100000001, 0x1, 0x9, 0x8000000000000001, 0x10001, 0x3, 0xf4b, 0x2, 0x53, 0x1, 0xffffffff, 0x1000, 0x8, 0x6, 0x4, 0x3, 0x80, 0xa2, 0xffcf, 0x6, 0x81, 0x0, 0x100, 0x0, 0xc2f, 0x6, 0xe, 0xe, 0x7a, 0xd, 0xe, 0x80000001, 0x9f, 0x3, 0x1, 0x0, 0x6da, 0x6, 0xae67, 0x2, 0x4]}) r4 = socket(0x15, 0x80000, 0x8) write$nci(0xffffffffffffffff, &(0x7f0000000a80)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x0, {0x4, 0xf, "cc9e7b32466c0e72df4aef56a743294e5abee76e675f74b5c224c33d9b9db86f644eeada1a6217712572580ca0e0b017b2be24912077c57df7c28bb4f37fe15099abf424e09dcaa5e4eb938b23bbb9a6da9f91ef9d2d7beea174db1a1362e15ecaa5a195ba2f3b6c915af134b44e2f82a8395fe5728135158136347328d81445085acf9be945590806e75ac49f7213f3a808921c74af13174c07de97851f445dad7f6c2ab5419f091a0a125f323e4313e386c35f"}}, 0xb9) syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000b80)={0x7}, 0x1) r5 = accept4(r4, &(0x7f0000000bc0)=@alg, &(0x7f0000000c40)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000d00)={r1, 0x74, &(0x7f0000000c80)=[@in6={0xa, 0x4e23, 0x1f8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x3}]}, &(0x7f0000000d40)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000d80)={r6, 0x1000, "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"}, &(0x7f0000001dc0)=0x1008) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001e00)={r2, 0xe, "ccdc3a287e8def9ad3e3e168eded"}, &(0x7f0000001e40)=0x16) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000001e80)={r7, 0xb03}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), r8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000001f00), 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001f40)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000002040)=0xe8) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, 0x7, 0x6, 0x603, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc680}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002180)='dctcp', 0x5) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000003dc0)={{r4, &(0x7f00000021c0)='devlink\x00', 0x10300, &(0x7f0000002200)={@align=0xe9, {0x0, 0x22, 0xff, 0x6}}, 0x8, &(0x7f0000002240), &(0x7f0000002280)=0x8}, 0xa, &(0x7f0000003c80)=[{0x3, 0x4, &(0x7f00000022c0)='nfc\x00', &(0x7f0000002300)="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", 0x1000, 0x20}, {0x1, 0x7, &(0x7f0000003300)='veth0_to_team\x00', &(0x7f0000003340)="94085c83d3f3321b82f62702d242d53cd543431122ed1b8cdc61959ba7f09829ea312a8f7d51e7586e5d5eaa82bf67545fc19c563326f33c1432845e5a101aea8d50a389394ddfe8e89c3aa2cf1511cd977bd0033019b5aa3447491e0825f8d51f1c59b409bc618f13e05c2bdb8791775165c583d50213d395e812f9b8ea50f8f700582943d13189b8bb8ad57bfea4754c3b16f92e4104500bcf3f314541b33bac8298ee38c16763d4b4071c33e39d69e2b3df0f9ca5313f6ad19bfb648b583290416a", 0xc3, 0x10}, {0x3, 0x5f20, &(0x7f0000003440)='\x00', &(0x7f0000003480)="65d6cfa9387e55ccdb1c16ebbd0a93ae6ac6879b99d3e41ed0885fd84e688e30de8da1407f32a402393241b7a05a09a3c592671a798d1d22259d90eabe1ed0cffefb192f2c07cdf98893b9bb8ca5ed1f0f57a0781d5556951f42b6a44927f8692d50a33fa67a6a15c5b2b94084584d6e856afe76fc5ca694a299e1732278f60aace619ce14f8c36d8fda38172553c5863fe52eb91c5c65f01e36a258f144de84aa30ecd678153e30be10fae59646ad28b61adb975cc194a99c7f7baba5d5de7f4ab805f700cb28a638f6d9089e46f04474db54ab51af", 0xd6, 0xa}, {0x1, 0xffffffff, &(0x7f0000003580)='devlink\x00', &(0x7f00000035c0)="7cc0b6f6d2b6df72421acf02eca74d006b44598c455c6a308c354b4df99cefe51606044a571998f9edd5ef7b20fd1254d4dc6c819412787f522f53b36a22e490d90158f57655f84b67279fc7a44f5037fc9609b173f2619bb777a290d6f32ddcce98e86e2f22a1fd03cb10a787aa19fb83104a1faf7eaf989a7da1f2a8d97444a4271784fb139ad62a41057b7fffb50cd434fc95debb6d74bff0aff0266dd5a63efbec32aeb95ca351ce06b1a0fc2533b12f271bdb8c1f524546971aaeb3f4404ab3", 0xc2, 0x10}, {0x2, 0x9, &(0x7f00000036c0)='!\xec(*%,[\x00', &(0x7f0000003700)="a4773b27f3be487b378d92e47aa427cfa64f305bb87c84da1f3a39ce26b3f7199b382b14f3f59611a9c8f08aa0306a391b272c2f787f8924ffe461c15a0ea5d970624628ddf33621d6437b9c5a4c349a58876a58be7ab8a890749ec7f616e934e332", 0x62}, {0x3, 0x2, &(0x7f0000003780)='\\[^+\x00', &(0x7f00000037c0)="e3404f483a5619f7e9a5fdbf3dd85a2053d0a62cbe7368248e327b11a64b18837db9", 0x22, 0x1a}, {0x3, 0x4, &(0x7f0000003800)='\x00', &(0x7f0000003840)="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", 0xfc, 0x18}, {0x1, 0xe9, &(0x7f0000003940)='devlink\x00', &(0x7f0000003980)="723573ed40aeedfb8c5e7d280aeddce93081f2de4584560cdb6befeefd6cec43f34acd0fb24497a1434f39dc9e216a8367ae5db9b23b629cad23d7be0618fe313908cb18eb0240193c6dca1a1b305feee1d2ed917ad586fd76abeb96a9da9e471da1329c90e6c998b096edd903d24e13b2f1f4edee52e87e94836cdc39903a2db1a860fc536d63630dd8c35c4104619188dbc34c8f2e0d0fa01c07289712cb15d97c7946053c02d161d9d1f15239723ed7e7930735179a5f567f4e2a2f4a01b85c8775268429cf6b3c96d642867c7002a3c892d471c11d7252d4316bf1332207e24ec9b61fe94b80e5916f", 0xeb, 0x8}, {0x0, 0x4, &(0x7f0000003a80)='-\x00', &(0x7f0000003ac0)="05f15d24f601346008f225e6209abf80782cc17dad435aa5d7a0891dba01650d2fbad6aeb051aea8e53f577c963a16f069fc41741e91d921697649f45f1931efe6b0e1e61bf0524b7714a7b2d4b73b1391144f554c2918f7b628355516f80095d039386d57ed03a0a6ceb52aa8e9524f", 0x70, 0x10}, {0x2, 0x1, &(0x7f0000003b40)='veth0_to_team\x00', &(0x7f0000003b80)="eca47b42b6cc0fc074ce1866abd89307a2268d962eaee4fc783a9618df182dcd795a739fdb7592df5b38c37498e9d52dc7586bcf52395ddbe529f80198766466af92c517e0513d1e1d43f2b216adc5cc332218fe59772c75ab4fc09b49a2a84eb42fcd2437e501ece887c992df3ef831f8f84d3b6c6f04169d1482111ed8810f7cb826d5875821677e55c88ca5fedc52ecb1d545e34df7fad3eb0882f789d7a8b90a61d67f8aa3c590def691d3ae0371069dd8811aeba8e0f367a0b50481a33969f9c154a3da009440c6ee7ea12be300a4006e285feff1973d1435334b2786c6873d95fa17138314a55e5f03d4eac5522c16b3dc44", 0xf5, 0x10}]}) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000003e40)=@req={0x1ff, 0x3, 0x1, 0x7f}, 0x10) sendmsg$nl_route(r4, &(0x7f0000003f40)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd26, 0x25dfdbff, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x1, 0x3, {@in6_addr=@mcast1, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r5, 0x1) clock_gettime(0x0, &(0x7f0000003f80)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000003fc0)={r11, r12/1000+60000}, 0x10) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000004000)={0x6, 0x6000000000000000, 0x4, 0xffff, 0xa, 0x0, [{0xe, 0x1, 0x20, '\x00', 0xa}, {0x6, 0x3, 0x5387, '\x00', 0x1900}, {0xe4d, 0x0, 0x9095000, '\x00', 0x2400}, {0x45ff, 0x0, 0x4, '\x00', 0x800}, {0x1, 0x19, 0x7fff, '\x00', 0x2e82}, {0x4, 0x9, 0x2, '\x00', 0x800}, {0xa, 0x6, 0xa7b, '\x00', 0x800}, {0x5, 0x10001, 0x5, '\x00', 0x2000}, {0x4, 0x52d, 0x8, '\x00', 0x1000}, {0x8, 0x35, 0xee7, '\x00', 0x200}]}) ioctl$XFS_IOC_GETPARENTS(r5, 0xc028583e, &(0x7f0000004380)={{[0x0, 0xd58e, 0x3, 0x6]}, 0x0, 0x3, 0x5, 0x0, &(0x7f0000004280)=[{{@align=0x1000, {0x401, 0x0, 0xfffffffa, 0x8}}, 0x5, 0x0, 'devlink\x00'}, {{@align=0x4, {0xb, 0x2, 0x0, 0x2c2c0000000}}, 0x81, 0x0, 'devlink\x00'}, {{@align=0x3, {0x8000, 0x80, 0xa0, 0x1}}, 0x8, 0x0, '\x00'}, {{@align, {0x3da, 0x9, 0x4, 0x8000}}, 0x2, 0x0, ':#+/-&!\x00'}, {{@_ha_fsid={[0x9, 0x5]}, {0x7ff, 0x800, 0x9, 0x2}}, 0xffff, 0x0, '-\x00'}, {{@_ha_fsid={[0x8, 0x7]}, {0x2, 0x1, 0x5, 0x2}}, 0x4, 0x0, '\x1d&!&\x00'}]}) 412.586964ms ago: executing program 0 (id=8053): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000100)=0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRESDEC], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a7000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r1}, 0xc) 323.320345ms ago: executing program 1 (id=8054): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x10000}, 0x10}, 0x94) 323.043235ms ago: executing program 4 (id=8055): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffeffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x11, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffeffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x11, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 207.154078ms ago: executing program 1 (id=8056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2a, 0x80000, 0x2) getsockopt$bt_hci(r1, 0x84, 0x18, 0x0, &(0x7f0000001040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa8080000000000f7ff000000210d0000aaa8fa017242ba9380d414000000000000002900000005000000679db99d", 0x34) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000180)=0x800001, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r3, 0xb933, 0xff, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYRES16=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r6, 0x1, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=0x1, 0xffffffffffffffff, 0x38, 0x18, 0x0, @void, @value=r7, @void, @void, r8}, 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x20050800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200007824d292b6bcfc79009589bdd33fe6ba6903531bca2c0910c227d96a143eb4f824d1a23f845df1164cf21ca9b1e4b6994b0dc51c2e3620008908538f5bab6211b6933b1cda4634a8387db51b21bfdb59cee3571948ec8ea9f5ea6ef8f868969657786f3b6bb4ac30f163856a510cd40c5419079ac2085e41c3bb872b570800000000000000a83ee8c908fa82d771a21e08a3eaeb75522f56feb0b1cd6c1813f4ab04aca755e92997deba2082e8920a9a2640000b1528470a313879571b2563ddaf4231c82346e106fea2752548acf2ba4ee2713b44f5e6c1088ecb01", @ANYRESDEC=r8], 0x0, 0x2, 0xfffffffffffffde0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x36, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="f51c0571e9018c9252130000ffffff7f00000500009706431d4865d0f3fab8363c9a6e92de45b70d6895e9864fcb760d1af4a74b", @ANYRES32=r10, @ANYRES64=r8], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1b, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x82, &(0x7f0000000500)=""/130, 0x41100, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x18}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=r11, r5, 0x3, 0xbc60a79f2fb856db, 0xffffffffffffffff, @void, @value=r12, @void, @void, r8}, 0x20) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) listen(r2, 0x70000008) listen(r3, 0x8) r13 = socket$unix(0x1, 0x5, 0x0) accept$unix(r13, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x41) 168.143546ms ago: executing program 0 (id=8057): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x13, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="1a9e0000000000000000ffff02000fe5", 0x10}], 0x2) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44984}, 0x8005) close(r0) (async) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) close(0x3) (async) close(0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'ip_vti0\x00', r2, 0x10, 0x40, 0x800, 0x8, {{0xe, 0x4, 0x2, 0x3a, 0x38, 0x68, 0x0, 0xff, 0x4, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0xf, 0x4, [@broadcast, @multicast2, @broadcast]}, @generic={0x7, 0xa, "51aa500398f9e8dc"}, @ssrr={0x89, 0xb, 0x9b, [@local, @remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'ip_vti0\x00', r2, 0x10, 0x40, 0x800, 0x8, {{0xe, 0x4, 0x2, 0x3a, 0x38, 0x68, 0x0, 0xff, 0x4, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0xf, 0x4, [@broadcast, @multicast2, @broadcast]}, @generic={0x7, 0xa, "51aa500398f9e8dc"}, @ssrr={0x89, 0xb, 0x9b, [@local, @remote]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0xdb7, 0x3, 0x8516, r3, 0x3a5, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @value=r5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x60, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0xb881}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2d}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1a}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) r10 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) (async) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r13, 0x8}, &(0x7f00000000c0)=0x8) r14 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r15 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r15, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r14, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r15, 0x0, 0x485, 0x0, 0x0) sendto$packet(r7, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r7, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @local}, 0x14) 111.032896ms ago: executing program 4 (id=8058): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040)=0x5, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x0, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000000090102000000000000000007000005300002002c000180140003000800000000000000000000000000000000000000000000000908010073797a310200"/80], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x4, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, 0x0}, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000bd6bbccd257c3f02707e810000002ab2fdf3106894c75511114ecc4948cb1eb3fd5b8edbc79e81f21d881f1865c2c34ebefe16050b37bd3ee1fc698028", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000010000000000000000000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48880}, 0x844) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x4, 0x1, 0x9, 0x6, 0x7, 0x30, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x68, '\x00', 0x0, @fallback=0x29, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6, 0x9, &(0x7f0000000b40)=[r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x5, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[@ANYBLOB="07001f00000000000000000086dd6000000000102c03cb697a653e336f000000500000000000ff02000000000000000000000000000100000001"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff020000000000000000000000000001890e000e"], 0x0) 0s ago: executing program 1 (id=8059): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdc02, {0x12, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8044) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendto$inet(r4, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) r5 = accept$packet(r4, 0x0, 0x0) sendto$packet(r5, 0x0, 0x0, 0x4040044, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$802154_dgram(r2, &(0x7f0000000440)={0x24, @none={0x0, 0x2}}, 0x14) sendto$x25(r2, &(0x7f0000000480)="3086266dffbf3af5474822b5f9127a6d61f8", 0x12, 0x4800, &(0x7f0000000540)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 0s ago: executing program 1 (id=8068): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) unshare(0x24060400) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) epoll_create1(0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x1, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc010000000000000000000000000000000000004e2000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000"], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0x108, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0xffffffff, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e24, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x108}}, 0x0) kernel console output (not intermixed with test programs): . [ 942.075003][T32234] lo speed is unknown, defaulting to 1000 [ 942.081886][T32234] lo speed is unknown, defaulting to 1000 [ 942.110380][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6563'. [ 942.955054][T32239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6564'. [ 943.170701][T32248] IPv6: sit2: Disabled Multicast RS [ 943.238754][T32249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6567'. [ 943.249279][T32249] netlink: 'syz.4.6567': attribute type 1 has an invalid length. [ 943.259434][T32249] netlink: 'syz.4.6567': attribute type 2 has an invalid length. [ 943.655336][T32201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 943.843326][T32252] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6568'. [ 943.944555][T32260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6569'. [ 943.997312][ T6168] wlan0: Trigger new scan to find an IBSS to join [ 944.287761][T32278] lo speed is unknown, defaulting to 1000 [ 944.313385][T32278] lo speed is unknown, defaulting to 1000 [ 944.894524][T32290] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6578'. [ 944.959082][T32290] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6578'. [ 944.984727][T32290] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6578'. [ 945.136826][T32291] lo speed is unknown, defaulting to 1000 [ 945.220304][T32291] lo speed is unknown, defaulting to 1000 [ 945.560745][T32311] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6585'. [ 945.626089][T32313] netlink: 'syz.4.6586': attribute type 4 has an invalid length. [ 945.985142][T32331] xt_hashlimit: size too large, truncated to 1048576 [ 946.954379][ T3287] wlan0: Trigger new scan to find an IBSS to join [ 947.069801][T32346] netlink: 'syz.4.6596': attribute type 1 has an invalid length. [ 947.153526][T32346] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 947.730989][T32370] __nla_validate_parse: 4 callbacks suppressed [ 947.731012][T32370] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6599'. [ 947.904384][ T3381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.359038][T32394] netlink: 'syz.0.6608': attribute type 1 has an invalid length. [ 948.509448][T32391] netlink: 'syz.1.6607': attribute type 15 has an invalid length. [ 948.556118][T32391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.563722][T32391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.579224][T32391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.598776][T32391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.603883][T32404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6611'. [ 948.617186][T32408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 948.980888][T32421] ip6tnl1: entered allmulticast mode [ 949.139645][T32442] openvswitch: netlink: Unknown nsh attribute 0 [ 949.396396][T32452] syzkaller0: entered promiscuous mode [ 949.414063][T32452] syzkaller0: entered allmulticast mode [ 949.470965][T32459] ip6tnl0: Caught tx_queue_len zero misconfig [ 949.523110][T32460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 949.751054][T32477] siw: device registration error -23 [ 949.792877][T32477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6625'. [ 950.279705][T32497] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 950.307048][T32497] syzkaller0: entered promiscuous mode [ 950.312773][T32497] syzkaller0: entered allmulticast mode [ 950.327129][T32499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6631'. [ 950.447010][T32503] netlink: 'syz.4.6632': attribute type 2 has an invalid length. [ 950.706684][T32481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 951.056487][T32530] netlink: 'syz.0.6639': attribute type 21 has an invalid length. [ 951.091067][T32530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6639'. [ 951.130866][T32526] netlink: 'syz.0.6639': attribute type 4 has an invalid length. [ 951.183039][T32530] netlink: 'syz.0.6639': attribute type 4 has an invalid length. [ 951.189867][T32532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6640'. [ 952.106331][T32552] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6646'. [ 952.157302][T32557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6648'. [ 952.280313][T32559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6647'. [ 952.303811][T32559] nbd: must specify at least one socket [ 952.372217][T32569] netlink: 'syz.5.6652': attribute type 16 has an invalid length. [ 952.390511][T32569] netlink: 'syz.5.6652': attribute type 17 has an invalid length. [ 952.780480][T32585] __nla_validate_parse: 2 callbacks suppressed [ 952.780504][T32585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6657'. [ 952.808118][T32581] erspan0: entered promiscuous mode [ 952.813597][T32584] netlink: 'syz.4.6658': attribute type 7 has an invalid length. [ 952.823093][T32581] erspan0: entered allmulticast mode [ 952.877537][T32585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6657'. [ 953.667864][T32625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6670'. [ 953.755389][T32625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6670'. [ 953.845552][T32632] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 953.907654][T32641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6671'. [ 953.941961][T32645] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6676'. [ 954.085600][T32640] lo speed is unknown, defaulting to 1000 [ 954.116023][T32640] lo speed is unknown, defaulting to 1000 [ 954.129809][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6678'. [ 954.511470][T32664] lo speed is unknown, defaulting to 1000 [ 954.537069][T32668] syzkaller0: entered promiscuous mode [ 954.546617][T32668] syzkaller0: entered allmulticast mode [ 954.820074][T32664] lo speed is unknown, defaulting to 1000 [ 955.263363][T32688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6691'. [ 955.753169][T32696] syzkaller0: entered promiscuous mode [ 955.770663][T32696] syzkaller0: entered allmulticast mode [ 956.057684][T32701] netlink: 820 bytes leftover after parsing attributes in process `syz.1.6695'. [ 956.099695][T32701] netlink: 820 bytes leftover after parsing attributes in process `syz.1.6695'. [ 956.286397][T32703] batadv_slave_1: entered promiscuous mode [ 956.343609][T32709] tipc: Started in network mode [ 956.351706][T32709] tipc: Node identity 06e2f0de120e, cluster identity 4711 [ 956.364940][T32709] tipc: Enabled bearer , priority 0 [ 956.406493][T32711] syzkaller0: entered allmulticast mode [ 956.420569][T32710] tipc: Enabling of bearer rejected, already enabled [ 956.477471][T32702] batadv_slave_1: left promiscuous mode [ 956.571437][T32710] tipc: Disabling bearer [ 956.658491][T32718] syzkaller1: entered promiscuous mode [ 956.664574][T32718] syzkaller1: entered allmulticast mode [ 957.204941][T32743] vlan2: left allmulticast mode [ 957.210165][T32743] geneve0: left allmulticast mode [ 957.215778][T32743] vlan2: left promiscuous mode [ 957.220802][T32743] geneve0: left promiscuous mode [ 957.228085][T32743] bridge0: port 3(vlan2) entered disabled state [ 957.241913][T32743] bridge_slave_1: left allmulticast mode [ 957.248053][T32743] bridge_slave_1: left promiscuous mode [ 957.254925][T32743] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.258601][T32750] netlink: 'syz.4.6710': attribute type 1 has an invalid length. [ 957.270826][T32750] netlink: 'syz.4.6710': attribute type 1 has an invalid length. [ 957.857425][ T301] __nla_validate_parse: 5 callbacks suppressed [ 957.857447][ T301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6715'. [ 958.014417][ T313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6718'. [ 958.147628][ T313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 958.216171][ T321] xt_TCPMSS: Only works on TCP SYN packets [ 958.432915][ T334] tipc: Enabled bearer , priority 0 [ 958.526982][ T338] netlink: 'syz.3.6725': attribute type 21 has an invalid length. [ 958.550034][ T334] tipc: Resetting bearer [ 958.566082][ T338] IPv6: NLM_F_CREATE should be specified when creating new route [ 958.580254][ T338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 958.587647][ T338] IPv6: NLM_F_CREATE should be set when creating new route [ 958.594989][ T338] IPv6: NLM_F_CREATE should be set when creating new route [ 958.602252][ T338] IPv6: NLM_F_CREATE should be set when creating new route [ 958.648342][ T332] tipc: Resetting bearer [ 958.721630][ T345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6728'. [ 959.260791][ T363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6732'. [ 959.460270][ T370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6733'. [ 959.770295][ T378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6735'. [ 961.917066][ T332] tipc: Disabling bearer [ 961.936448][ T345] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 962.391707][ T409] netlink: 'syz.3.6747': attribute type 9 has an invalid length. [ 962.434427][ T411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6745'. [ 962.443477][ T411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6745'. [ 962.470233][ T413] netlink: 'syz.4.6746': attribute type 1 has an invalid length. [ 962.489053][ T411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6745'. [ 962.595612][ T413] 8021q: adding VLAN 0 to HW filter on device bond5 [ 962.679815][ T406] bond5: (slave gretap1): making interface the new active one [ 962.691026][ T406] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 962.691340][ T424] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 962.764894][ T428] pimreg: entered allmulticast mode [ 962.804431][ T424] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 962.823797][ T432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6750'. [ 962.830777][ T431] netlink: 'syz.4.6752': attribute type 1 has an invalid length. [ 962.834674][ T424] bond5 (unregistering): Released all slaves [ 962.862437][ T426] pimreg: left allmulticast mode [ 962.961286][ T431] bond6: entered promiscuous mode [ 962.993263][ T431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 963.060489][ T431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6752'. [ 963.131604][ T452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6752'. [ 963.565786][ T439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 963.579290][ T439] bond6: (slave gre3): The slave device specified does not support setting the MAC address [ 963.590278][ T439] bond6: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 963.603823][ T439] bond6: (slave gre3): making interface the new active one [ 963.612471][ T439] gre3: entered promiscuous mode [ 963.620549][ T439] bond6: (slave gre3): Enslaving as an active interface with an up link [ 963.636142][ T446] ip6gretap0: left allmulticast mode [ 963.646177][ T446] ip6gretap0: left promiscuous mode [ 963.651807][ T446] bridge0: port 3(ip6gretap0) entered disabled state [ 963.671940][ T446] bridge_slave_0: left allmulticast mode [ 963.678878][ T446] bridge_slave_0: left promiscuous mode [ 963.685451][ T446] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.704673][ T446] bridge_slave_1: left allmulticast mode [ 963.710481][ T446] bridge_slave_1: left promiscuous mode [ 963.717286][ T446] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.732489][ T446] bond0: (slave bond_slave_0): Releasing backup interface [ 963.744502][ T446] bond_slave_0: left allmulticast mode [ 963.761473][ T446] bond0: (slave bond_slave_1): Releasing backup interface [ 963.774980][ T446] bond_slave_1: left allmulticast mode [ 963.800413][ T446] team0: Port device team_slave_0 removed [ 963.834539][ T446] team0: Port device team_slave_1 removed [ 963.846318][ T446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.866453][ T446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.886315][ T446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.894965][ T446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.905190][ T446] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 963.961335][ T3287] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.987982][ T3287] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.017413][ T3287] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.040953][ T3287] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.050465][ T3287] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.059856][ T3287] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.069479][ T3287] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.098871][ T3287] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.350589][ T479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6763'. [ 964.667318][ T497] netlink: 'syz.3.6769': attribute type 2 has an invalid length. [ 965.030660][ T514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6772'. [ 965.075623][ T5635] Bluetooth: hci3: link tx timeout [ 965.092046][ T5635] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 965.179547][ T523] netlink: 'syz.1.6775': attribute type 13 has an invalid length. [ 965.188086][ T523] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6775'. [ 965.199530][ T523] syz_tun: refused to change device tx_queue_len [ 965.206492][ T523] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 965.282589][ T526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6776'. [ 965.329533][ T527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6776'. [ 965.512060][ T536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6780'. [ 965.550514][ T536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6780'. [ 965.676543][T15519] hid-generic 0005:0007:0007.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 965.926200][ T552] fido_id[552]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 967.114239][ T5635] Bluetooth: hci3: command 0x0405 tx timeout [ 995.040503][ T574] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 995.111104][ T578] veth1_to_bond: entered allmulticast mode [ 995.142182][ T580] veth1_to_bond: entered promiscuous mode [ 995.169513][ T570] netlink: 'syz.1.6784': attribute type 9 has an invalid length. [ 995.177638][ T570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6784'. [ 995.190655][ T580] veth1_to_bond: left promiscuous mode [ 995.197533][ T580] veth1_to_bond: left allmulticast mode [ 995.213248][ T570] macvlan3: entered promiscuous mode [ 995.219182][ T570] team0: entered promiscuous mode [ 995.225677][ T570] team_slave_0: entered promiscuous mode [ 995.234825][ T570] team_slave_1: entered promiscuous mode [ 995.241072][ T570] macvlan3: entered allmulticast mode [ 995.253161][ T570] team0: entered allmulticast mode [ 995.258956][ T570] team_slave_0: entered allmulticast mode [ 995.265484][ T570] team_slave_1: entered allmulticast mode [ 995.272531][ T570] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 995.436610][ T594] C: renamed from veth1_to_team [ 995.444900][ T594] netlink: 'syz.4.6792': attribute type 8 has an invalid length. [ 995.452856][ T594] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 995.538237][ T596] xt_hashlimit: size too large, truncated to 1048576 [ 995.596758][ T601] netlink: 'syz.4.6793': attribute type 32 has an invalid length. [ 995.690166][ T602] lo speed is unknown, defaulting to 1000 [ 995.699304][ T602] lo speed is unknown, defaulting to 1000 [ 995.967750][ T610] netlink: 'syz.3.6796': attribute type 13 has an invalid length. [ 995.999626][ T610] gretap0: refused to change device tx_queue_len [ 996.019567][ T610] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 996.462205][ T629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6802'. [ 996.613007][ T639] IPv6: Can't replace route, no match found [ 996.787611][ T636] bond5: option arp_interval: invalid value (18446744073709551615) [ 996.835177][ T636] bond5: option arp_interval: allowed values 0 - 2147483647 [ 996.845108][ T655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6804'. [ 996.895972][ T636] bond5 (unregistering): Released all slaves [ 996.940874][ T647] team_slave_1: Caught tx_queue_len zero misconfig [ 997.220745][ T668] tunl0: Caught tx_queue_len zero misconfig [ 997.252454][ T669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 997.417709][ T672] lo speed is unknown, defaulting to 1000 [ 997.467347][ T672] lo speed is unknown, defaulting to 1000 [ 997.564133][ T681] lo: Caught tx_queue_len zero misconfig [ 997.792447][ T699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6819'. [ 997.948999][ T703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6822'. [ 998.326774][ T719] netlink: 'syz.0.6827': attribute type 2 has an invalid length. [ 998.519907][ T723] lo speed is unknown, defaulting to 1000 [ 998.528383][ T723] lo speed is unknown, defaulting to 1000 [ 998.954369][ T753] netlink: 'syz.1.6838': attribute type 1 has an invalid length. [ 998.963049][ T753] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6838'. [ 998.986094][ T753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6838'. [ 999.006092][ T753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6838'. [ 1000.111300][ T801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6851'. [ 1000.121093][ T801] netlink: 'syz.4.6851': attribute type 3 has an invalid length. [ 1000.336574][ T815] syzkaller1: entered promiscuous mode [ 1000.352460][ T815] syzkaller1: entered allmulticast mode [ 1000.567836][ T827] x_tables: duplicate underflow at hook 2 [ 1000.695823][ T838] netlink: 'syz.1.6859': attribute type 1 has an invalid length. [ 1000.817047][ T842] bond5: entered promiscuous mode [ 1000.819196][ T844] netlink: 'syz.3.6860': attribute type 1 has an invalid length. [ 1000.822358][ T842] bond5: entered allmulticast mode [ 1000.836618][ T842] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1000.883471][ T845] bond6: Unable to set up delay as MII monitoring is disabled [ 1000.886973][ T847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 1000.913436][ T845] bond6 (unregistering): Released all slaves [ 1000.939704][ T852] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1001.005790][ T838] bridge3: entered promiscuous mode [ 1001.011393][ T838] bridge3: entered allmulticast mode [ 1001.018559][ T838] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 1001.034977][ T844] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1001.078252][ T3381] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1001.234505][ T864] syzkaller0: entered promiscuous mode [ 1001.248574][ T864] syzkaller0: entered allmulticast mode [ 1001.254576][ T3381] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1001.368304][ T874] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6867'. [ 1001.837920][ T892] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1001.891351][ T892] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1002.038783][ T898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6874'. [ 1002.092054][ T898] bond0: entered promiscuous mode [ 1002.111128][ T898] gretap0: entered promiscuous mode [ 1002.125125][ T898] debugfs: 'hsr0' already exists in 'hsr' [ 1002.136815][ T898] Cannot create hsr debugfs directory [ 1002.146470][ T898] hsr0: entered promiscuous mode [ 1002.157946][ T906] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1003.288729][ T952] netlink: 'syz.0.6885': attribute type 2 has an invalid length. [ 1003.342578][ T956] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1003.360411][ T958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6886'. [ 1003.593136][ T971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6892'. [ 1003.622013][ T974] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6893'. [ 1003.708021][ T975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6893'. [ 1003.733798][ T976] 8021q: VLANs not supported on nlmon0 [ 1003.840193][ T974] mac80211_hwsim hwsim57 »»»»»»: renamed from wlan0 (while UP) [ 1004.070956][ T1010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6900'. [ 1004.586649][ T1028] netlink: 'syz.4.6905': attribute type 1 has an invalid length. [ 1004.631960][ T984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1005.300593][ T1056] syzkaller0: entered promiscuous mode [ 1005.337314][ T1056] syzkaller0: entered allmulticast mode [ 1005.452410][ T1071] lo speed is unknown, defaulting to 1000 [ 1005.530312][ T1071] lo speed is unknown, defaulting to 1000 [ 1005.548893][ T1081] lo speed is unknown, defaulting to 1000 [ 1005.991749][ T1111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6927'. [ 1006.236157][ T1056] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1006.417952][ T1081] lo speed is unknown, defaulting to 1000 [ 1006.858644][ T1128] ip6tnl0: Caught tx_queue_len zero misconfig [ 1006.881964][ T1128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1006.961161][ T1132] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1007.788532][ T1164] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6940'. [ 1007.809258][ T1160] bond0: (slave bond_slave_1): Releasing backup interface [ 1008.971939][ T1175] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1009.457093][ T1195] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6949'. [ 1009.669060][ T1200] sctp: [Deprecated]: syz.3.6951 (pid 1200) Use of int in maxseg socket option. [ 1009.669060][ T1200] Use struct sctp_assoc_value instead [ 1009.732972][ T1202] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1009.775970][ T1205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6953'. [ 1009.806676][ T1205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6953'. [ 1009.919890][ T1209] netlink: 'syz.0.6955': attribute type 30 has an invalid length. [ 1009.954013][ T1210] vlan4: entered promiscuous mode [ 1009.965312][ T1214] netlink: 'syz.4.6957': attribute type 2 has an invalid length. [ 1009.974840][ T1210] bridge0: entered promiscuous mode [ 1010.012303][ T1220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6958'. [ 1010.100779][ T1214] þ: entered promiscuous mode [ 1010.139243][ T1220] sctp: [Deprecated]: syz.1.6958 (pid 1220) Use of int in max_burst socket option. [ 1010.139243][ T1220] Use struct sctp_assoc_value instead [ 1010.351140][ T1232] FAULT_INJECTION: forcing a failure. [ 1010.351140][ T1232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.377139][ T1229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6961'. [ 1010.380925][ T1232] CPU: 1 UID: 0 PID: 1232 Comm: syz.1.6962 Not tainted syzkaller #0 PREEMPT(full) [ 1010.380951][ T1232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1010.380963][ T1232] Call Trace: [ 1010.380971][ T1232] [ 1010.380980][ T1232] dump_stack_lvl+0xe8/0x150 [ 1010.381017][ T1232] should_fail_ex+0x40c/0x560 [ 1010.381048][ T1232] _copy_from_user+0x2d/0xb0 [ 1010.381077][ T1232] ___sys_sendmsg+0x1c6/0x360 [ 1010.381107][ T1232] ? __lock_acquire+0x683/0x2cf0 [ 1010.381140][ T1232] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.381173][ T1232] ? kstrtouint+0x6e/0xe0 [ 1010.381221][ T1232] ? __fget_files+0x2a/0x420 [ 1010.381246][ T1232] ? __fget_files+0x3a2/0x420 [ 1010.381284][ T1232] __sys_sendmmsg+0x273/0x4d0 [ 1010.381318][ T1232] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1010.381355][ T1232] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1010.381400][ T1232] ? ksys_write+0x242/0x270 [ 1010.381432][ T1232] ? __pfx_ksys_write+0x10/0x10 [ 1010.381467][ T1232] __x64_sys_sendmmsg+0xa0/0xc0 [ 1010.381494][ T1232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.381515][ T1232] do_syscall_64+0x174/0x580 [ 1010.381549][ T1232] ? trace_irq_disable+0x3b/0x140 [ 1010.381574][ T1232] ? clear_bhb_loop+0x40/0x90 [ 1010.381597][ T1232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.381616][ T1232] RIP: 0033:0x7fd626f9de59 [ 1010.381635][ T1232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.381651][ T1232] RSP: 002b:00007fd627ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1010.381673][ T1232] RAX: ffffffffffffffda RBX: 00007fd627225fa0 RCX: 00007fd626f9de59 [ 1010.381686][ T1232] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1010.381699][ T1232] RBP: 00007fd627ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.381711][ T1232] R10: 0000000014080880 R11: 0000000000000246 R12: 0000000000000001 [ 1010.381723][ T1232] R13: 00007fd627226038 R14: 00007fd627225fa0 R15: 00007ffe0e82e868 [ 1010.381754][ T1232] [ 1010.642906][ T1229] bond6: Unable to set down delay as MII monitoring is disabled [ 1010.655398][ T1229] bond6 (unregistering): Released all slaves [ 1010.686640][ T1238] tipc: Enabling of bearer rejected, failed to enable media [ 1010.744172][ T1235] x_tables: unsorted underflow at hook 4 [ 1010.993367][ T1252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6966'. [ 1011.051516][ T1251] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6967'. [ 1011.140827][ T1259] netlink: 'syz.3.6970': attribute type 1 has an invalid length. [ 1011.267305][ T1262] veth3: entered allmulticast mode [ 1011.412654][ T1265] veth0_to_bond: left promiscuous mode [ 1011.439129][ T1265] veth0_to_bond: left allmulticast mode [ 1011.468591][ T1265] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1011.555958][ T1259] macvlan2: entered promiscuous mode [ 1011.561420][ T1259] macvlan2: entered allmulticast mode [ 1011.569207][ T1259] bond6: entered promiscuous mode [ 1011.575491][ T1259] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1011.586077][ T1259] bond6: left promiscuous mode [ 1011.681394][ T1283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6976'. [ 1012.230005][ T1314] __nla_validate_parse: 2 callbacks suppressed [ 1012.230026][ T1314] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6983'. [ 1012.269529][ T1318] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6983'. [ 1012.454267][ T1321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1012.472180][ T1327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1012.604473][ T1334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6990'. [ 1012.623708][ T1334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6990'. [ 1012.649570][ T1334] netlink: 'syz.5.6990': attribute type 18 has an invalid length. [ 1012.739358][ T1341] syzkaller0: entered promiscuous mode [ 1012.761447][ T1341] syzkaller0: entered allmulticast mode [ 1012.783780][ T1346] netlink: 'syz.0.6991': attribute type 4 has an invalid length. [ 1012.836165][ T1350] netlink: 'syz.0.6991': attribute type 4 has an invalid length. [ 1013.099108][ T1364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1013.145805][ T1364] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1013.880087][ T1357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.519841][ T1399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1014.636980][ T1406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7014'. [ 1014.645130][ T1405] 8021q: VLANs not supported on sit0 [ 1014.699056][ T1405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7012'. [ 1015.249627][ T1435] bridge0: Device is already in use. [ 1015.501807][ T1443] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1015.521774][ T1443] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1015.898864][ T1443] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1015.912120][ T1443] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1015.921817][ T1467] veth1_to_team: entered allmulticast mode [ 1015.965579][ T1462] veth1_to_team: left allmulticast mode [ 1015.966953][ T1443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1015.997926][ T1443] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1016.171568][ T1468] tipc: Enabling of bearer rejected, failed to enable media [ 1016.173734][ T1443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1016.205227][ T1443] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1016.403064][ T1481] bond0: (slave dummy0): Releasing backup interface [ 1016.412477][ T1485] netlink: 'syz.3.7031': attribute type 11 has an invalid length. [ 1016.428571][ T1481] team0: Port device bridge_slave_0 removed [ 1016.436851][ T1481] bond0: (slave bond_slave_0): Releasing backup interface [ 1016.449446][ T1481] bond0: (slave bond_slave_1): Releasing backup interface [ 1016.469975][ T1481] team0: Port device team_slave_0 removed [ 1016.482891][ T1481] team0: Port device team_slave_1 removed [ 1016.492321][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.501517][ T1481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.509221][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.518125][ T1481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1017.605317][T17795] tipc: Subscription rejected, illegal request [ 1017.725337][ T1539] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7042'. [ 1017.748061][ T1539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7042'. [ 1017.805482][ T1539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7042'. [ 1017.842358][ T1539] netlink: set zone limit has 4 unknown bytes [ 1018.344973][ T1576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7056'. [ 1018.380562][ T1581] dummy0: left promiscuous mode [ 1018.406066][ T1581] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1018.420345][ T1581] mac80211_hwsim hwsim53 wlan0: left promiscuous mode [ 1018.427513][ T1581] mac80211_hwsim hwsim53 wlan0: left allmulticast mode [ 1018.441803][ T1581] vlan2: left promiscuous mode [ 1018.449272][ T1581] bridge0: left promiscuous mode [ 1018.475218][ T1581] bond6: left promiscuous mode [ 1018.480369][ T1581] gre3: left promiscuous mode [ 1018.495543][ T1583] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7054'. [ 1018.509752][ T1583] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7054'. [ 1019.030395][ T1598] netlink: 'syz.3.7060': attribute type 1 has an invalid length. [ 1019.219965][ T1598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1019.273108][ T1604] bond7: (slave dummy0): making interface the new active one [ 1019.306553][ T1604] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1019.480403][ T1614] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1019.506209][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7062'. [ 1019.622312][ T1621] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.7065'. [ 1019.623984][ T1617] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1020.343388][ T1638] FAULT_INJECTION: forcing a failure. [ 1020.343388][ T1638] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.359263][ T1638] CPU: 0 UID: 0 PID: 1638 Comm: syz.1.7069 Not tainted syzkaller #0 PREEMPT(full) [ 1020.359295][ T1638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1020.359307][ T1638] Call Trace: [ 1020.359315][ T1638] [ 1020.359322][ T1638] dump_stack_lvl+0xe8/0x150 [ 1020.359359][ T1638] should_fail_ex+0x40c/0x560 [ 1020.359388][ T1638] should_failslab+0xa8/0x100 [ 1020.359417][ T1638] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1020.359441][ T1638] ? local_lock_release+0x9c/0x160 [ 1020.359471][ T1638] ? __alloc_skb+0x1d7/0x7a0 [ 1020.359496][ T1638] ? __alloc_skb+0x1d7/0x7a0 [ 1020.359529][ T1638] __alloc_skb+0x1d7/0x7a0 [ 1020.359559][ T1638] alloc_skb_with_frags+0xc6/0x760 [ 1020.359604][ T1638] ? __pfx_make_kgid+0x10/0x10 [ 1020.359634][ T1638] sock_alloc_send_pskb+0x878/0x990 [ 1020.359654][ T1638] ? pid_vnr+0x143/0x1e0 [ 1020.359702][ T1638] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1020.359729][ T1638] ? __pfx___scm_send+0x10/0x10 [ 1020.359754][ T1638] ? tomoyo_check_unix_address+0x16d/0x7e0 [ 1020.359858][ T1638] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1020.359888][ T1638] unix_dgram_sendmsg+0x4da/0x17b0 [ 1020.359966][ T1638] ? lockdep_hardirqs_on+0x7a/0x110 [ 1020.359998][ T1638] ? trace_irq_disable+0x3b/0x140 [ 1020.360041][ T1638] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1020.360071][ T1638] ? aa_sock_msg_perm+0xda/0x1b0 [ 1020.360096][ T1638] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1020.360117][ T1638] sock_sendmsg_nosec+0x13a/0x180 [ 1020.360147][ T1638] ____sys_sendmsg+0x54e/0x850 [ 1020.360185][ T1638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1020.360228][ T1638] ? import_iovec+0x73/0xa0 [ 1020.360264][ T1638] ___sys_sendmsg+0x2a5/0x360 [ 1020.360295][ T1638] ? __lock_acquire+0x683/0x2cf0 [ 1020.360329][ T1638] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.360401][ T1638] ? __fget_files+0x2a/0x420 [ 1020.360429][ T1638] ? __fget_files+0x3a2/0x420 [ 1020.360472][ T1638] __sys_sendmmsg+0x273/0x4d0 [ 1020.360512][ T1638] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1020.360555][ T1638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1020.360613][ T1638] ? ksys_write+0x242/0x270 [ 1020.360645][ T1638] ? __pfx_ksys_write+0x10/0x10 [ 1020.360682][ T1638] __x64_sys_sendmmsg+0xa0/0xc0 [ 1020.360712][ T1638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.360734][ T1638] do_syscall_64+0x174/0x580 [ 1020.360765][ T1638] ? clear_bhb_loop+0x40/0x90 [ 1020.360791][ T1638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.360811][ T1638] RIP: 0033:0x7fd626f9de59 [ 1020.360831][ T1638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.360849][ T1638] RSP: 002b:00007fd627ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1020.360872][ T1638] RAX: ffffffffffffffda RBX: 00007fd627225fa0 RCX: 00007fd626f9de59 [ 1020.360887][ T1638] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1020.360901][ T1638] RBP: 00007fd627ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.360914][ T1638] R10: 0000000014080880 R11: 0000000000000246 R12: 0000000000000001 [ 1020.360928][ T1638] R13: 00007fd627226038 R14: 00007fd627225fa0 R15: 00007ffe0e82e868 [ 1020.360964][ T1638] [ 1020.830400][ T1643] xt_CT: No such helper "snmp_trap" [ 1020.948502][ T1653] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1020.963679][ T1653] syzkaller1: linktype set to 1 [ 1021.902998][ T30] audit: type=1800 audit(1784177999.706:28): pid=1669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7076" name=20 dev="tmpfs" ino=1293 res=0 errno=0 [ 1022.210953][ T1683] FAULT_INJECTION: forcing a failure. [ 1022.210953][ T1683] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.220967][ T1685] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1022.238930][ T1683] CPU: 0 UID: 0 PID: 1683 Comm: syz.0.7083 Not tainted syzkaller #0 PREEMPT(full) [ 1022.238958][ T1683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1022.238969][ T1683] Call Trace: [ 1022.238978][ T1683] [ 1022.238987][ T1683] dump_stack_lvl+0xe8/0x150 [ 1022.239025][ T1683] should_fail_ex+0x40c/0x560 [ 1022.239055][ T1683] should_failslab+0xa8/0x100 [ 1022.239086][ T1683] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1022.239112][ T1683] ? do_getname_kernel+0x54/0x230 [ 1022.239135][ T1683] ? do_getname_kernel+0x54/0x230 [ 1022.239167][ T1683] do_getname_kernel+0x54/0x230 [ 1022.239189][ T1683] ? kern_path+0x1b/0x150 [ 1022.239219][ T1683] kern_path+0x25/0x150 [ 1022.239248][ T1683] unix_find_other+0x19b/0xb40 [ 1022.239279][ T1683] ? __pfx_unix_find_other+0x10/0x10 [ 1022.239299][ T1683] ? skb_copy_datagram_from_iter+0x64a/0x720 [ 1022.239335][ T1683] unix_dgram_sendmsg+0x707/0x17b0 [ 1022.239378][ T1683] ? __might_fault+0xaf/0x130 [ 1022.239403][ T1683] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1022.239434][ T1683] ? aa_sock_msg_perm+0xda/0x1b0 [ 1022.239462][ T1683] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1022.239482][ T1683] sock_sendmsg_nosec+0x13a/0x180 [ 1022.239510][ T1683] ____sys_sendmsg+0x54e/0x850 [ 1022.239548][ T1683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1022.239600][ T1683] ? import_iovec+0x73/0xa0 [ 1022.239633][ T1683] ___sys_sendmsg+0x2a5/0x360 [ 1022.239663][ T1683] ? __lock_acquire+0x683/0x2cf0 [ 1022.239696][ T1683] ? __pfx____sys_sendmsg+0x10/0x10 [ 1022.239733][ T1683] ? kstrtouint+0x6e/0xe0 [ 1022.239784][ T1683] ? __fget_files+0x2a/0x420 [ 1022.239811][ T1683] ? __fget_files+0x3a2/0x420 [ 1022.239848][ T1683] __sys_sendmmsg+0x273/0x4d0 [ 1022.239887][ T1683] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1022.239928][ T1683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1022.239976][ T1683] ? ksys_write+0x242/0x270 [ 1022.240008][ T1683] ? __pfx_ksys_write+0x10/0x10 [ 1022.240042][ T1683] __x64_sys_sendmmsg+0xa0/0xc0 [ 1022.240070][ T1683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.240092][ T1683] do_syscall_64+0x174/0x580 [ 1022.240118][ T1683] ? trace_irq_disable+0x3b/0x140 [ 1022.240142][ T1683] ? clear_bhb_loop+0x40/0x90 [ 1022.240167][ T1683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.240188][ T1683] RIP: 0033:0x7f5f8599de59 [ 1022.240208][ T1683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.240225][ T1683] RSP: 002b:00007f5f86920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1022.240248][ T1683] RAX: ffffffffffffffda RBX: 00007f5f85c25fa0 RCX: 00007f5f8599de59 [ 1022.240264][ T1683] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1022.240276][ T1683] RBP: 00007f5f86920090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.240289][ T1683] R10: 0000000014080880 R11: 0000000000000246 R12: 0000000000000001 [ 1022.240300][ T1683] R13: 00007f5f85c26038 R14: 00007f5f85c25fa0 R15: 00007ffca0ee9368 [ 1022.240333][ T1683] [ 1022.741502][ T1691] syzkaller0: entered promiscuous mode [ 1022.747044][ T1691] syzkaller0: entered allmulticast mode [ 1022.901292][ T1703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7090'. [ 1022.983376][ T1711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1023.196199][ T1721] FAULT_INJECTION: forcing a failure. [ 1023.196199][ T1721] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.210084][ T1721] CPU: 1 UID: 0 PID: 1721 Comm: syz.3.7095 Not tainted syzkaller #0 PREEMPT(full) [ 1023.210113][ T1721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1023.210125][ T1721] Call Trace: [ 1023.210135][ T1721] [ 1023.210143][ T1721] dump_stack_lvl+0xe8/0x150 [ 1023.210180][ T1721] should_fail_ex+0x40c/0x560 [ 1023.210211][ T1721] should_failslab+0xa8/0x100 [ 1023.210242][ T1721] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1023.210269][ T1721] ? do_getname_kernel+0x54/0x230 [ 1023.210291][ T1721] ? do_getname_kernel+0x54/0x230 [ 1023.210323][ T1721] do_getname_kernel+0x54/0x230 [ 1023.210345][ T1721] ? kern_path+0x1b/0x150 [ 1023.210379][ T1721] kern_path+0x25/0x150 [ 1023.210408][ T1721] unix_find_other+0x19b/0xb40 [ 1023.210434][ T1721] ? __pfx_unix_find_other+0x10/0x10 [ 1023.210451][ T1721] ? skb_copy_datagram_from_iter+0x64a/0x720 [ 1023.210481][ T1721] unix_dgram_sendmsg+0x707/0x17b0 [ 1023.210518][ T1721] ? __might_fault+0xaf/0x130 [ 1023.210538][ T1721] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1023.210564][ T1721] ? aa_sock_msg_perm+0xda/0x1b0 [ 1023.210587][ T1721] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1023.210604][ T1721] sock_sendmsg_nosec+0x13a/0x180 [ 1023.210628][ T1721] ____sys_sendmsg+0x54e/0x850 [ 1023.210662][ T1721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1023.210701][ T1721] ? import_iovec+0x73/0xa0 [ 1023.210734][ T1721] ___sys_sendmsg+0x2a5/0x360 [ 1023.210763][ T1721] ? __lock_acquire+0x683/0x2cf0 [ 1023.210797][ T1721] ? __pfx____sys_sendmsg+0x10/0x10 [ 1023.210830][ T1721] ? kstrtouint+0x6e/0xe0 [ 1023.210883][ T1721] ? __fget_files+0x2a/0x420 [ 1023.210908][ T1721] ? __fget_files+0x3a2/0x420 [ 1023.210943][ T1721] __sys_sendmmsg+0x273/0x4d0 [ 1023.210979][ T1721] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1023.211029][ T1721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1023.211078][ T1721] ? ksys_write+0x242/0x270 [ 1023.211111][ T1721] ? __pfx_ksys_write+0x10/0x10 [ 1023.211150][ T1721] __x64_sys_sendmmsg+0xa0/0xc0 [ 1023.211179][ T1721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.211203][ T1721] do_syscall_64+0x174/0x580 [ 1023.211231][ T1721] ? trace_irq_disable+0x3b/0x140 [ 1023.211256][ T1721] ? clear_bhb_loop+0x40/0x90 [ 1023.211282][ T1721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.211302][ T1721] RIP: 0033:0x7f92ab79de59 [ 1023.211323][ T1721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.211341][ T1721] RSP: 002b:00007f92ac676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1023.211363][ T1721] RAX: ffffffffffffffda RBX: 00007f92aba25fa0 RCX: 00007f92ab79de59 [ 1023.211378][ T1721] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1023.211392][ T1721] RBP: 00007f92ac676090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.211404][ T1721] R10: 0000000014080880 R11: 0000000000000246 R12: 0000000000000001 [ 1023.211417][ T1721] R13: 00007f92aba26038 R14: 00007f92aba25fa0 R15: 00007fff3b8af1c8 [ 1023.211451][ T1721] [ 1023.610054][ T1727] bridge0: entered allmulticast mode [ 1023.617795][ T1727] bridge_slave_1: left allmulticast mode [ 1023.623631][ T1727] bridge_slave_1: left promiscuous mode [ 1023.630051][ T1727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.674114][ T1727] bridge_slave_0: left allmulticast mode [ 1023.679841][ T1727] bridge_slave_0: left promiscuous mode [ 1023.686632][ T1727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.803997][ T1736] xt_hashlimit: size too large, truncated to 1048576 [ 1023.986848][ T1750] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1024.331110][ T1766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7106'. [ 1024.345556][ T1763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7105'. [ 1024.365434][ T1768] FAULT_INJECTION: forcing a failure. [ 1024.365434][ T1768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.438563][ T1768] CPU: 1 UID: 0 PID: 1768 Comm: syz.4.7107 Not tainted syzkaller #0 PREEMPT(full) [ 1024.438594][ T1768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1024.438608][ T1768] Call Trace: [ 1024.438617][ T1768] [ 1024.438627][ T1768] dump_stack_lvl+0xe8/0x150 [ 1024.438666][ T1768] should_fail_ex+0x40c/0x560 [ 1024.438697][ T1768] _copy_to_user+0x31/0xb0 [ 1024.438749][ T1768] simple_read_from_buffer+0xe1/0x170 [ 1024.438783][ T1768] proc_fail_nth_read+0x1bb/0x230 [ 1024.438815][ T1768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1024.438847][ T1768] ? rw_verify_area+0x24a/0x4c0 [ 1024.438880][ T1768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1024.438907][ T1768] vfs_read+0x213/0xa80 [ 1024.438944][ T1768] ? __pfx___mutex_lock+0x10/0x10 [ 1024.438976][ T1768] ? __pfx_vfs_read+0x10/0x10 [ 1024.439017][ T1768] ? __fget_files+0x2a/0x420 [ 1024.439046][ T1768] ? __fget_files+0x3a2/0x420 [ 1024.439069][ T1768] ? __fget_files+0x2a/0x420 [ 1024.439104][ T1768] ksys_read+0x150/0x270 [ 1024.439136][ T1768] ? __pfx_ksys_read+0x10/0x10 [ 1024.439175][ T1768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.439198][ T1768] do_syscall_64+0x174/0x580 [ 1024.439226][ T1768] ? trace_irq_disable+0x3b/0x140 [ 1024.439253][ T1768] ? clear_bhb_loop+0x40/0x90 [ 1024.439278][ T1768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.439297][ T1768] RIP: 0033:0x7f846ff5e68e [ 1024.439318][ T1768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1024.439335][ T1768] RSP: 002b:00007f8470e7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1024.439358][ T1768] RAX: ffffffffffffffda RBX: 00007f8470e7c6c0 RCX: 00007f846ff5e68e [ 1024.439372][ T1768] RDX: 000000000000000f RSI: 00007f8470e7c0a0 RDI: 0000000000000006 [ 1024.439385][ T1768] RBP: 00007f8470e7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.439397][ T1768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.439409][ T1768] R13: 00007f8470226038 R14: 00007f8470225fa0 R15: 00007ffcbcf91f08 [ 1024.439443][ T1768] [ 1025.558187][ T1801] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1025.693733][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1025.815798][ T1808] netlink: 'syz.4.7117': attribute type 13 has an invalid length. [ 1025.845174][ T1811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7116'. [ 1026.036962][ T1820] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7119'. [ 1026.538037][ T1840] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7123'. [ 1026.561700][ T1838] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1026.896223][ T1850] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1026.988840][ T1842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7124'. [ 1026.997922][ T1842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7124'. [ 1027.007167][ T1842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7124'. [ 1027.480677][ T1873] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1027.561213][ T1880] syzkaller0: entered promiscuous mode [ 1027.571599][ T1880] syzkaller0: entered allmulticast mode [ 1027.627315][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.638234][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.646774][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.655200][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.663563][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.671992][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.680406][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.688841][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.697236][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.705646][ T1880] tc action pedit unable to extract header offset for header type (0x5) [ 1027.714071][ T1880] 0: reclassify loop, rule prio 0, protocol 800 [ 1027.897420][ T1884] geneve4: entered promiscuous mode [ 1027.918588][ T1885] team0: Port device tunl0 added [ 1028.142725][ T1891] __nla_validate_parse: 3 callbacks suppressed [ 1028.142749][ T1891] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7140'. [ 1028.166207][ T1895] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1028.179536][ T1891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7140'. [ 1028.536339][ T1911] netlink: 'syz.5.7145': attribute type 1 has an invalid length. [ 1028.607517][ T1911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1028.679469][ T1920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7144'. [ 1028.715565][ T1919] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1028.745166][ T1920] lo speed is unknown, defaulting to 1000 [ 1028.752907][ T1920] lo speed is unknown, defaulting to 1000 [ 1028.834310][ T1927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7147'. [ 1029.154887][ T1940] netlink: 'syz.5.7153': attribute type 11 has an invalid length. [ 1029.195328][ T1940] syzkaller0: entered promiscuous mode [ 1029.200870][ T1940] syzkaller0: entered allmulticast mode [ 1029.209554][ T1946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7155'. [ 1029.293630][ T1951] netlink: 'syz.5.7153': attribute type 1 has an invalid length. [ 1029.556850][ T1960] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1029.566124][ T1960] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1029.575605][ T1960] netlink: 'syz.4.7156': attribute type 6 has an invalid length. [ 1029.583569][ T1960] netlink: 'syz.4.7156': attribute type 5 has an invalid length. [ 1029.592218][ T1960] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1029.698583][ T1968] netlink: 'syz.3.7159': attribute type 1 has an invalid length. [ 1029.710918][ T1968] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1029.735866][ T1973] 0: reclassify loop, rule prio 0, protocol 700 [ 1029.763158][ T1968] netlink: 'syz.3.7159': attribute type 3 has an invalid length. [ 1029.781240][ T1968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1030.038351][ T1985] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 1030.045764][ T1985] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 1030.104656][ T1986] tipc: Enabled bearer , priority 0 [ 1030.126744][ T1986] tipc: Resetting bearer [ 1030.146225][ T1984] tipc: Disabling bearer [ 1030.357614][ T1991] netdevsim netdevsim4 €Â: renamed from netdevsim0 [ 1030.368717][ T1991] netlink: 'syz.4.7166': attribute type 2 has an invalid length. [ 1030.416681][ T1991] : entered promiscuous mode [ 1030.637488][ T30] audit: type=1804 audit(1784178008.446:29): pid=2004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7170" name="/newroot/368/cgroup.controllers" dev="tmpfs" ino=1896 res=1 errno=0 [ 1030.675593][ T30] audit: type=1800 audit(1784178008.446:30): pid=2004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7170" name="cgroup.controllers" dev="tmpfs" ino=1896 res=0 errno=0 [ 1030.825055][ T2011] netlink: 'syz.4.7172': attribute type 5 has an invalid length. [ 1030.866014][ T2011] ip6erspan0: entered allmulticast mode [ 1031.204203][ T2017] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1031.796397][ T2048] netlink: 'syz.4.7183': attribute type 1 has an invalid length. [ 1031.831058][ T2045] netlink: 'syz.0.7182': attribute type 1 has an invalid length. [ 1031.839264][ T2045] netlink: 'syz.0.7182': attribute type 2 has an invalid length. [ 1031.937786][ T2048] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1032.110525][ T2053] bond7: (slave veth3): Enslaving as an active interface with a down link [ 1032.120138][ T2065] netlink: 'syz.3.7186': attribute type 1 has an invalid length. [ 1032.197122][ T2057] vlan3: entered allmulticast mode [ 1032.234813][ T2057] veth0_to_bond: entered allmulticast mode [ 1032.286399][ T2057] bond7: (slave vlan3): Opening slave failed [ 1032.483228][ T2048] bond8: option updelay: invalid value (18446744073709518847) [ 1032.504186][ T2048] bond8: option updelay: allowed values 0 - 2147483647 [ 1032.521073][ T2048] bond8 (unregistering): Released all slaves [ 1032.652565][ T2065] bond8: entered promiscuous mode [ 1032.658706][ T2065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1032.669796][ T2070] bond8: entered allmulticast mode [ 1032.738527][ T2080] bond8: (slave bridge5): making interface the new active one [ 1032.746663][ T2080] bridge5: entered promiscuous mode [ 1032.752381][ T2080] bridge5: entered allmulticast mode [ 1032.762569][ T2080] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1032.827998][ T2089] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1032.965247][ T2099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.056897][ T2099] syzkaller0: entered promiscuous mode [ 1033.069028][ T2099] syzkaller0: entered allmulticast mode [ 1033.300340][ T2111] IPv6: NLM_F_CREATE should be specified when creating new route [ 1033.545478][ T2120] __nla_validate_parse: 25 callbacks suppressed [ 1033.545511][ T2120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7196'. [ 1033.569754][ T2116] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1033.606933][ T2116] bond6 (unregistering): Released all slaves [ 1034.006982][ T2136] veth0_to_team: entered promiscuous mode [ 1034.066751][ T2136] veth0_to_team: left promiscuous mode [ 1034.705636][ T2170] x_tables: duplicate underflow at hook 3 [ 1035.154701][ T2184] netlink: 'syz.5.7211': attribute type 1 has an invalid length. [ 1035.198646][ T2191] netlink: 'syz.4.7213': attribute type 1 has an invalid length. [ 1035.233443][ T2184] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1035.342103][ T2191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1035.377288][ T2194] vlan3: entered promiscuous mode [ 1035.382480][ T2194] bond8: entered promiscuous mode [ 1035.387928][ T2194] vlan3: entered allmulticast mode [ 1035.393101][ T2194] bond8: entered allmulticast mode [ 1035.399482][ T2200] netlink: 'syz.3.7212': attribute type 29 has an invalid length. [ 1035.609907][ T2208] netlink: 'syz.5.7216': attribute type 5 has an invalid length. [ 1035.723325][ T2207] syzkaller0: entered promiscuous mode [ 1035.742363][ T2207] syzkaller0: entered allmulticast mode [ 1035.951399][ T2224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1036.352041][ T2241] sctp: [Deprecated]: syz.5.7225 (pid 2241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1036.352041][ T2241] Use struct sctp_sack_info instead [ 1036.410419][ T2241] netlink: 'syz.5.7225': attribute type 1 has an invalid length. [ 1036.683031][ T2245] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7225'. [ 1036.744833][ T2241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1036.777390][ T2241] bond5: (slave bond6): making interface the new active one [ 1036.812475][ T2241] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1036.835605][ T2255] sctp: [Deprecated]: syz.1.7228 (pid 2255) Use of int in maxseg socket option. [ 1036.835605][ T2255] Use struct sctp_assoc_value instead [ 1036.854473][ T2257] syzkaller0: entered promiscuous mode [ 1036.861865][ T2257] syzkaller0: entered allmulticast mode [ 1036.952493][ T2260] netlink: 'syz.5.7229': attribute type 1 has an invalid length. [ 1036.969243][ T2260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7229'. [ 1037.040569][ T2255] syzkaller0: entered promiscuous mode [ 1037.050623][ T2255] syzkaller0: entered allmulticast mode [ 1037.285424][ T2267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7232'. [ 1041.156367][ T2270] erspan0: left promiscuous mode [ 1041.173218][ T2270] sit0: left promiscuous mode [ 1041.297929][ T2270] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1041.378394][ T2306] IPv6: sit2: Disabled Multicast RS [ 1041.559359][ T2316] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7242'. [ 1041.603134][ T2312] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7242'. [ 1041.991642][ T2343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7249'. [ 1042.562745][ T2349] batadv_slave_0: left promiscuous mode [ 1042.568769][ T2349] batadv_slave_0: left allmulticast mode [ 1042.775654][ T2349] bond2: left promiscuous mode [ 1042.780734][ T2349] veth3: left promiscuous mode [ 1042.800976][ T2349] geneve4: left promiscuous mode [ 1042.829355][ T3393] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.845526][ T3393] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1042.872754][ T3393] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.895118][ T3393] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1042.915408][ T3393] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.960434][ T3393] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1042.989836][ T3393] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.010027][ T3393] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1043.846387][ T2383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7260'. [ 1044.022480][ T2388] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1044.456987][ T2412] netlink: 'syz.0.7267': attribute type 1 has an invalid length. [ 1044.566668][ T2423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1044.646032][ T2412] bond6: entered promiscuous mode [ 1044.711802][ T2412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1044.801221][ T2416] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1044.826591][ T2416] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 1044.844955][ T2416] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1044.890358][ T2416] bond6: (slave gre1): making interface the new active one [ 1044.935822][ T2416] gre1: entered promiscuous mode [ 1044.982468][ T2416] bond6: (slave gre1): Enslaving as an active interface with an up link [ 1045.128698][ T2423] bond6 (unregistering): (slave gre1): Releasing backup interface [ 1045.176201][ T2423] gre1: left promiscuous mode [ 1045.200939][ T2423] bond6 (unregistering): Released all slaves [ 1045.402979][ T2464] netlink: 'syz.4.7275': attribute type 4 has an invalid length. [ 1045.424009][ T2464] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.7275'. [ 1045.659346][ T2474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7277'. [ 1045.671836][ T2476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7278'. [ 1045.700306][ T2476] netlink: 'syz.0.7278': attribute type 1 has an invalid length. [ 1045.817121][ T2471] netlink: 'syz.1.7276': attribute type 7 has an invalid length. [ 1045.848709][ T2471] netlink: 'syz.1.7276': attribute type 8 has an invalid length. [ 1046.249117][ T2495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7280'. [ 1046.383220][ T2497] netlink: 'syz.3.7280': attribute type 1 has an invalid length. [ 1048.865509][ T2476] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1049.528636][ T2529] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7288'. [ 1049.558828][ T2540] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1049.813758][ T2551] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7291'. [ 1049.839991][ T2544] syzkaller1: entered promiscuous mode [ 1049.847299][ T2544] syzkaller1: entered allmulticast mode [ 1050.515167][ T2584] netlink: 23 bytes leftover after parsing attributes in process `syz.5.7300'. [ 1050.582315][ T2588] netlink: 'syz.4.7299': attribute type 4 has an invalid length. [ 1050.937715][ T2608] netlink: 'syz.0.7301': attribute type 1 has an invalid length. [ 1051.635805][ T2615] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1054.358728][ T2603] syzkaller0: entered promiscuous mode [ 1054.364804][ T2603] syzkaller0: entered allmulticast mode [ 1054.395503][ T2613] gretap1: entered allmulticast mode [ 1054.400376][ T2620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7304'. [ 1057.800200][ T2657] syzkaller0: entered promiscuous mode [ 1057.809728][ T2657] syzkaller0: entered allmulticast mode [ 1057.834800][ T2679] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1058.073470][ T2684] 8021q: VLANs not supported on lo [ 1058.973478][ T2718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7317'. [ 1059.542207][ T2726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7322'. [ 1063.483677][ T2765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7332'. [ 1065.247105][ T2768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7333'. [ 1065.280215][ T2765] lo speed is unknown, defaulting to 1000 [ 1065.297808][ T2765] lo speed is unknown, defaulting to 1000 [ 1065.463662][ T2781] : renamed from veth0_to_bond [ 1065.558044][ T2793] netlink: 'syz.1.7339': attribute type 1 has an invalid length. [ 1065.727433][ T2795] gretap1: entered allmulticast mode [ 1065.775151][ T2795] bond6: (slave gretap1): making interface the new active one [ 1065.783779][ T2795] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1066.163017][ T2824] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7346'. [ 1066.198656][ T2808] netlink: 'syz.1.7343': attribute type 29 has an invalid length. [ 1066.221502][ T2808] netlink: 'syz.1.7343': attribute type 1 has an invalid length. [ 1066.408447][ T2830] syz_tun: entered allmulticast mode [ 1067.196761][ T2889] sock: sock_timestamping_bind_phc: sock not bind to device [ 1067.218099][ T2890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7357'. [ 1067.637896][ T2922] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7363'. [ 1067.665847][ T2922] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1067.895321][ T2935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7365'. [ 1067.915438][ T2935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7365'. [ 1068.158909][ T2947] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7371'. [ 1068.570973][ T2948] bridge8: entered promiscuous mode [ 1068.576629][ T2948] bridge8: entered allmulticast mode [ 1068.641657][ T2958] macvlan1: entered promiscuous mode [ 1068.659949][ T2958] macvlan1: entered allmulticast mode [ 1068.679464][ T2958] veth1_vlan: entered allmulticast mode [ 1068.859607][ T2968] openvswitch: netlink: Multiple metadata blocks provided [ 1068.907539][ T2972] vlan3: entered allmulticast mode [ 1068.922834][ T2972] bridge_slave_0: entered allmulticast mode [ 1068.952376][ T2972] bridge0: port 1(vlan3) entered blocking state [ 1068.972121][ T2972] bridge0: port 1(vlan3) entered disabled state [ 1068.989458][ T2972] vlan3: entered promiscuous mode [ 1068.997816][ T2972] bridge_slave_0: entered promiscuous mode [ 1069.238687][ T2994] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.7382'. [ 1069.262540][ T2995] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7383'. [ 1069.737797][ T3018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7390'. [ 1070.036597][T17793] bond5: (slave bridge3): link status up again after 0 ms [ 1070.084488][ T6168] bond5: (slave bridge3): link status up again after 0 ms [ 1070.125370][ T6168] bond5: (slave bridge3): link status up again after 0 ms [ 1070.141813][ T3024] vlan4: entered allmulticast mode [ 1070.151466][ T3024] bridge4: entered allmulticast mode [ 1070.158093][ T3033] bridge4: port 1(erspan0) entered blocking state [ 1070.166212][ T3033] bridge4: port 1(erspan0) entered disabled state [ 1070.166532][ T6171] bond5: (slave bridge3): link status up again after 0 ms [ 1070.172909][ T3033] erspan0: entered allmulticast mode [ 1070.226690][ T3033] erspan0: left allmulticast mode [ 1070.237950][ T6171] bond5: (slave bridge3): link status up again after 0 ms [ 1070.284002][ T6171] bond5: (slave bridge3): link status up again after 0 ms [ 1070.293556][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1070.347255][ T3042] __nla_validate_parse: 3 callbacks suppressed [ 1070.347276][ T3042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7393'. [ 1070.423944][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1070.482192][ T3053] xt_TCPMSS: Only works on TCP SYN packets [ 1070.764067][ T3059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7396'. [ 1070.809168][ T3063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7395'. [ 1070.863461][ T3063] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7395'. [ 1070.913382][ T3063] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7395'. [ 1071.050760][ T3073] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7399'. [ 1071.108558][ T3073] netlink: 'syz.3.7399': attribute type 1 has an invalid length. [ 1071.175725][ T3073] bond9: entered promiscuous mode [ 1071.184579][ T3073] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1071.236196][ T3073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7399'. [ 1071.261710][ T3073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7399'. [ 1071.310992][ T3080] netlink: 'syz.4.7400': attribute type 21 has an invalid length. [ 1071.321065][ T3080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7400'. [ 1071.367528][ T3077] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7400'. [ 1071.977028][ T3120] netlink: 'syz.4.7408': attribute type 8 has an invalid length. [ 1072.692594][ T3161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.703408][ T3161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.727676][ T3169] net_ratelimit: 19 callbacks suppressed [ 1072.727697][ T3169] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1072.729297][ T3161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.802577][ T3161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.816395][ T3161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.830371][ T3161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1072.841374][ T3161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.856041][ T3161] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1072.885690][T17795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.892935][T17795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.908287][T17795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.915570][T17795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.030270][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1073.215310][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1073.292909][ T3188] vlan3: entered allmulticast mode [ 1073.312859][ T3188] bridge4: entered allmulticast mode [ 1073.338181][ T3188] bridge4: port 1(erspan0) entered blocking state [ 1073.374686][ T3188] bridge4: port 1(erspan0) entered disabled state [ 1073.401763][ T3188] erspan0: entered allmulticast mode [ 1073.437700][ T3188] erspan0: entered promiscuous mode [ 1073.451303][ T3188] bridge4: port 1(erspan0) entered blocking state [ 1073.457959][ T3188] bridge4: port 1(erspan0) entered forwarding state [ 1073.644810][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1073.744984][ T3239] netlink: 'syz.4.7435': attribute type 1 has an invalid length. [ 1073.763262][ T3240] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1073.773101][ T3242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1073.855874][ T3239] bond9: entered promiscuous mode [ 1073.871894][ T3239] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1073.900036][ T3252] netlink: 'syz.5.7437': attribute type 1 has an invalid length. [ 1073.916438][ T13] bond5: (slave bridge3): failed to get link speed/duplex [ 1074.041647][ T13] bond5: (slave bridge3): failed to get link speed/duplex [ 1074.127718][ T3239] bond9: (slave bridge10): making interface the new active one [ 1074.153773][ T3239] bridge10: entered promiscuous mode [ 1074.180660][ T3239] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 1074.334246][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1075.446976][ T3330] netlink: 'syz.5.7454': attribute type 4 has an invalid length. [ 1075.456061][ T3316] lo speed is unknown, defaulting to 1000 [ 1075.500296][ T3333] netlink: 'syz.5.7454': attribute type 4 has an invalid length. [ 1075.508984][ T3316] lo speed is unknown, defaulting to 1000 [ 1075.611207][ T3330] vlan4: entered allmulticast mode [ 1075.627068][ T3330] bridge_slave_0: entered allmulticast mode [ 1075.642211][ T3330] bridge0: port 1(vlan4) entered blocking state [ 1075.657212][ T3330] bridge0: port 1(vlan4) entered disabled state [ 1075.678144][ T3330] vlan4: entered promiscuous mode [ 1075.690024][ T3330] bridge_slave_0: entered promiscuous mode [ 1075.881917][ T3345] __nla_validate_parse: 14 callbacks suppressed [ 1075.881939][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1075.906481][ T3350] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1076.130792][ T3363] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1076.386512][ T3375] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7466'. [ 1076.456081][ T3378] netlink: 'syz.3.7467': attribute type 1 has an invalid length. [ 1076.479454][ T3378] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7467'. [ 1076.613163][ T3387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1076.759294][ T3391] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7468'. [ 1077.767594][ T3434] net_ratelimit: 32 callbacks suppressed [ 1077.767617][ T3434] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1077.787095][ T1250] bond5: (slave bridge3): failed to get link speed/duplex [ 1077.891063][ T3440] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7478'. [ 1077.924090][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1078.054072][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1078.184775][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1078.304722][ T1250] bond5: (slave bridge3): failed to get link speed/duplex [ 1078.426172][ T1250] bond5: (slave bridge3): failed to get link speed/duplex [ 1078.554729][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1078.571746][ T3469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.684304][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1078.728398][ T3477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7490'. [ 1079.016296][ T3492] netlink: 'syz.1.7495': attribute type 26 has an invalid length. [ 1079.278507][ T3509] xt_hashlimit: size too large, truncated to 1048576 [ 1079.369818][ T3522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1079.395383][ T3525] netlink: 'syz.0.7500': attribute type 11 has an invalid length. [ 1079.407965][ T3525] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7500'. [ 1079.420021][ T3525] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7500'. [ 1080.066949][ T3559] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7509'. [ 1080.110619][ T3536] bridge4: port 1(erspan0) entered disabled state [ 1080.460371][ T3561] syzkaller1: entered promiscuous mode [ 1080.472495][ T3561] syzkaller1: entered allmulticast mode [ 1081.395172][ T3624] netlink: 'syz.5.7521': attribute type 4 has an invalid length. [ 1081.415534][ T3624] __nla_validate_parse: 3 callbacks suppressed [ 1081.415555][ T3624] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7521'. [ 1081.526072][ T3626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7523'. [ 1081.905013][ T3665] x_tables: duplicate underflow at hook 2 [ 1082.041774][ T3670] netlink: 'syz.1.7532': attribute type 1 has an invalid length. [ 1082.074865][ T3670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7532'. [ 1082.101616][ T3670] bond4: (slave veth0_to_bond): Releasing active interface [ 1082.148403][ T3670] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7532'. [ 1082.172686][ T3680] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1082.196216][ T3678] syzkaller0: entered promiscuous mode [ 1082.212688][ T3678] syzkaller0: entered allmulticast mode [ 1082.490781][ T3693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7540'. [ 1082.523289][ T3695] bond0: entered promiscuous mode [ 1082.528889][ T3695] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1082.542593][ T3695] bond0: left promiscuous mode [ 1082.547861][ T3695] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 1082.576428][ T3697] bond0: entered promiscuous mode [ 1082.581669][ T3697] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1082.592445][ T3697] bond0: left promiscuous mode [ 1082.601511][ T3697] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 1082.760501][ T3702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7539'. [ 1082.854451][T17795] net_ratelimit: 27 callbacks suppressed [ 1082.854473][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1082.974961][ T3709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7542'. [ 1082.994436][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1083.104986][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1083.234127][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1083.476461][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1083.566876][ T3737] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1083.685127][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1083.814428][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1083.954154][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1083.957964][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7554'. [ 1084.074801][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1084.127332][ T3757] pimreg: entered allmulticast mode [ 1084.156771][ T3757] pimreg: left allmulticast mode [ 1084.220566][ T3759] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7553'. [ 1084.224309][ T3765] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7555'. [ 1084.307287][ T3766] bridge_slave_0: left allmulticast mode [ 1084.332439][ T3766] bridge_slave_0: left promiscuous mode [ 1084.356270][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.420921][ T3766] bridge_slave_1: left allmulticast mode [ 1084.434737][ T3766] bridge_slave_1: left promiscuous mode [ 1084.444913][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.487718][ T3766] bond0: (slave bond_slave_0): Releasing backup interface [ 1084.507154][ T3766] bond_slave_0: left promiscuous mode [ 1084.531114][ T3766] team0: Port device team_slave_0 removed [ 1084.555174][ T3766] team0: Port device team_slave_1 removed [ 1084.561959][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.569813][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.582943][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.591757][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.672186][ T3794] netlink: 'syz.0.7563': attribute type 1 has an invalid length. [ 1084.708920][ T3777] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1084.741922][ T3790] macvlan2: entered promiscuous mode [ 1084.750859][ T3790] macvlan2: entered allmulticast mode [ 1084.758786][ T3790] bond10: entered promiscuous mode [ 1084.768247][ T3790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1084.781124][ T3790] bond10: left promiscuous mode [ 1084.835977][ T3794] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1084.923246][ T3798] veth9: entered allmulticast mode [ 1084.942836][ T3798] bond6: (slave veth9): Enslaving as an active interface with an up link [ 1084.978275][ T3802] bond6 (unregistering): (slave veth9): Releasing backup interface [ 1085.002517][ T3802] bond6 (unregistering): Released all slaves [ 1085.699399][ T3845] bond7: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1085.877152][ T3845] bond7 (unregistering): Released all slaves [ 1086.622781][ T3902] netlink: 'syz.3.7590': attribute type 2 has an invalid length. [ 1086.637955][ T3902] __nla_validate_parse: 12 callbacks suppressed [ 1086.637976][ T3902] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7590'. [ 1086.837795][ T3908] netlink: 'syz.4.7593': attribute type 2 has an invalid length. [ 1087.020886][ T3921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7597'. [ 1087.022675][ T3919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7596'. [ 1087.228263][ T3928] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 1087.271696][ T3928] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 1087.912362][ T3962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7608'. [ 1087.924327][ T36] net_ratelimit: 24 callbacks suppressed [ 1087.924348][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1087.930337][ T3965] netlink: 'syz.0.7609': attribute type 1 has an invalid length. [ 1088.006846][ T3965] bond6: entered promiscuous mode [ 1088.012916][ T3965] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1088.085701][ T13] bond5: (slave bridge3): failed to get link speed/duplex [ 1088.169228][ T3978] syzkaller0: entered promiscuous mode [ 1088.201916][ T3978] syzkaller0: entered allmulticast mode [ 1088.234178][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1088.363935][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1088.407106][ T3987] netlink: 'syz.1.7615': attribute type 1 has an invalid length. [ 1088.429274][ T3987] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7615'. [ 1088.486806][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1088.614215][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1088.734081][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1088.844028][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1088.908810][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7622'. [ 1088.925688][ T4012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7624'. [ 1088.964002][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1088.987461][ T4013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1089.759779][ T4038] syzkaller0: entered promiscuous mode [ 1089.795540][ T4038] syzkaller0: entered allmulticast mode [ 1090.331245][ T4063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7633'. [ 1090.465532][ T4068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7636'. [ 1090.568031][ T4063] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7633'. [ 1090.951768][ T4081] syzkaller0: entered promiscuous mode [ 1090.969063][ T4081] syzkaller0: entered allmulticast mode [ 1091.443069][ T4097] xt_hashlimit: size too large, truncated to 1048576 [ 1091.796257][ T4115] __nla_validate_parse: 2 callbacks suppressed [ 1091.796281][ T4115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7648'. [ 1091.891239][ T4110] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1092.126504][ T4127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7650'. [ 1092.221357][ T4130] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7650'. [ 1092.528235][ T4138] netlink: 'syz.1.7652': attribute type 3 has an invalid length. [ 1092.948911][ T4147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7656'. [ 1092.966793][ T36] net_ratelimit: 26 callbacks suppressed [ 1092.966816][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1092.985285][ T4147] FAULT_INJECTION: forcing a failure. [ 1092.985285][ T4147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.001366][ T4145] syzkaller0: entered promiscuous mode [ 1093.013955][ T4145] syzkaller0: entered allmulticast mode [ 1093.024927][ T4147] CPU: 0 UID: 0 PID: 4147 Comm: syz.1.7656 Not tainted syzkaller #0 PREEMPT(full) [ 1093.024958][ T4147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1093.024971][ T4147] Call Trace: [ 1093.024980][ T4147] [ 1093.024990][ T4147] dump_stack_lvl+0xe8/0x150 [ 1093.025034][ T4147] should_fail_ex+0x40c/0x560 [ 1093.025069][ T4147] _copy_from_iter+0x1d3/0x1660 [ 1093.025099][ T4147] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1093.025137][ T4147] ? __pfx_policy_nodemask+0x10/0x10 [ 1093.025173][ T4147] ? __pfx__copy_from_iter+0x10/0x10 [ 1093.025204][ T4147] ? alloc_pages_mpol+0x24a/0x380 [ 1093.025246][ T4147] copy_page_from_iter+0x219/0x2d0 [ 1093.025280][ T4147] tun_get_user+0x1bf1/0x4370 [ 1093.025315][ T4147] ? tun_get_user+0x6e7/0x4370 [ 1093.025363][ T4147] ? aa_file_perm+0x4ed/0x15f0 [ 1093.025390][ T4147] ? __pfx_tun_get_user+0x10/0x10 [ 1093.025423][ T4147] ? __lock_acquire+0x683/0x2cf0 [ 1093.025471][ T4147] ? ref_tracker_alloc+0x341/0x4b0 [ 1093.025496][ T4147] ? get_pid_task+0x20/0x1f0 [ 1093.025528][ T4147] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1093.025557][ T4147] ? tun_get+0x1c/0x2f0 [ 1093.025586][ T4147] ? tun_get+0x1c/0x2f0 [ 1093.025620][ T4147] ? tun_get+0x1c/0x2f0 [ 1093.025648][ T4147] ? tun_get+0x1c/0x2f0 [ 1093.025681][ T4147] tun_chr_write_iter+0x113/0x200 [ 1093.025713][ T4147] vfs_write+0x612/0xba0 [ 1093.025758][ T4147] ? __pfx_vfs_write+0x10/0x10 [ 1093.025811][ T4147] ? __fget_files+0x2a/0x420 [ 1093.025849][ T4147] ksys_write+0x150/0x270 [ 1093.025884][ T4147] ? __pfx_ksys_write+0x10/0x10 [ 1093.025926][ T4147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.025951][ T4147] do_syscall_64+0x174/0x580 [ 1093.025984][ T4147] ? trace_irq_disable+0x3b/0x140 [ 1093.026013][ T4147] ? clear_bhb_loop+0x40/0x90 [ 1093.026044][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.026066][ T4147] RIP: 0033:0x7fd626f5e68e [ 1093.026089][ T4147] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1093.026107][ T4147] RSP: 002b:00007fd627ed6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1093.026131][ T4147] RAX: ffffffffffffffda RBX: 00007fd627ed76c0 RCX: 00007fd626f5e68e [ 1093.026146][ T4147] RDX: 00000000000000ed RSI: 00002000000001c0 RDI: 00000000000000c8 [ 1093.026161][ T4147] RBP: 00007fd627ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.026175][ T4147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.026188][ T4147] R13: 00007fd627226038 R14: 00007fd627225fa0 R15: 00007ffe0e82e868 [ 1093.026224][ T4147] [ 1093.027134][ T4145] 0: reclassify loop, rule prio 0, protocol 800 [ 1093.293272][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1093.393491][ T4151] netlink: 'syz.3.7657': attribute type 5 has an invalid length. [ 1093.574070][ T13] bond5: (slave bridge3): failed to get link speed/duplex [ 1093.694782][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1093.793552][ T4160] syzkaller0: entered promiscuous mode [ 1093.821109][ T4160] syzkaller0: entered allmulticast mode [ 1093.860177][ T4172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.924393][ T13] bond5: (slave bridge3): failed to get link speed/duplex [ 1094.050826][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1094.071595][ T4185] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1094.091907][ T4185] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1094.102904][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1094.298424][ T4187] geneve5: entered promiscuous mode [ 1094.387893][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.400693][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.421586][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.452013][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.484639][ T13] bond5: (slave bridge3): failed to get link speed/duplex [ 1094.550824][ T4192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7667'. [ 1094.566195][ T4194] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7669'. [ 1094.703625][ T4205] xt_hashlimit: size too large, truncated to 1048576 [ 1094.884126][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1095.095419][ T4213] syzkaller0: entered promiscuous mode [ 1095.117345][ T4213] syzkaller0: entered allmulticast mode [ 1095.219573][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7675'. [ 1095.319630][ T4230] x_tables: duplicate underflow at hook 1 [ 1095.391226][ T4233] x_tables: duplicate underflow at hook 1 [ 1095.522814][ T4235] netlink: 'syz.3.7677': attribute type 1 has an invalid length. [ 1095.537309][ T4235] netlink: 'syz.3.7677': attribute type 2 has an invalid length. [ 1095.550675][ T4238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1095.560695][ T4239] 0ªX¹¦À: renamed from batadv0 (while UP) [ 1095.588777][ T4239] 0ªX¹¦À: entered allmulticast mode [ 1096.320458][ T4272] syzkaller0: entered promiscuous mode [ 1096.332916][ T4272] syzkaller0: entered allmulticast mode [ 1096.386334][ T4278] erspan0: left promiscuous mode [ 1096.426248][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.437474][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.505017][ T4298] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1099.546463][ T4298] net_ratelimit: 11 callbacks suppressed [ 1099.546485][ T4298] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1099.632442][ T4305] __nla_validate_parse: 4 callbacks suppressed [ 1099.632466][ T4305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7693'. [ 1099.679077][ T4295] lo speed is unknown, defaulting to 1000 [ 1099.686307][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1099.703998][ T4295] lo speed is unknown, defaulting to 1000 [ 1099.712820][ T4305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1099.814633][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1099.934220][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1099.945495][ T4318] netlink: 'syz.0.7695': attribute type 2 has an invalid length. [ 1100.004190][ T4318] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7695'. [ 1100.074893][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1100.205455][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1100.241597][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7696'. [ 1100.344190][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1100.479237][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1100.717866][ T4344] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7700'. [ 1100.727669][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1100.956026][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1102.238224][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7708'. [ 1103.596863][ T4428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7717'. [ 1104.037668][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7719'. [ 1104.585248][T17793] net_ratelimit: 31 callbacks suppressed [ 1104.585274][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1104.734049][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1104.756386][ T4477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1104.774974][ T4477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1104.803723][ T4477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1104.876001][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1104.978197][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7729'. [ 1105.103336][ T4489] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1105.234003][ T4484] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1105.294177][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1105.347738][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7733'. [ 1105.422098][ T4497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7735'. [ 1105.489887][ T4499] netlink: 'syz.1.7734': attribute type 11 has an invalid length. [ 1105.507470][ T4499] netlink: 'syz.1.7734': attribute type 4 has an invalid length. [ 1105.538705][ T4499] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1108.558381][ T4494] hsr_slave_0: left promiscuous mode [ 1108.564515][ T4494] hsr_slave_1: left promiscuous mode [ 1108.616339][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1108.734841][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1108.783251][ T4515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1108.817085][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7741'. [ 1108.828437][ T4515] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 1108.977799][ T4519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1109.339243][ T4547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7745'. [ 1109.353350][ T4547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7745'. [ 1109.545266][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1109.619934][ T4554] FAULT_INJECTION: forcing a failure. [ 1109.619934][ T4554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.637556][ T4554] CPU: 1 UID: 0 PID: 4554 Comm: syz.5.7748 Not tainted syzkaller #0 PREEMPT(full) [ 1109.637585][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1109.637598][ T4554] Call Trace: [ 1109.637608][ T4554] [ 1109.637617][ T4554] dump_stack_lvl+0xe8/0x150 [ 1109.637657][ T4554] should_fail_ex+0x40c/0x560 [ 1109.637688][ T4554] _copy_to_user+0x31/0xb0 [ 1109.637722][ T4554] simple_read_from_buffer+0xe1/0x170 [ 1109.637757][ T4554] proc_fail_nth_read+0x1bb/0x230 [ 1109.637789][ T4554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1109.637826][ T4554] ? rw_verify_area+0x24a/0x4c0 [ 1109.637858][ T4554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1109.637885][ T4554] vfs_read+0x213/0xa80 [ 1109.637922][ T4554] ? __pfx___mutex_lock+0x10/0x10 [ 1109.637955][ T4554] ? __pfx_vfs_read+0x10/0x10 [ 1109.637988][ T4554] ? __fget_files+0x2a/0x420 [ 1109.638021][ T4554] ? __fget_files+0x3a2/0x420 [ 1109.638047][ T4554] ? __fget_files+0x2a/0x420 [ 1109.638084][ T4554] ksys_read+0x150/0x270 [ 1109.638119][ T4554] ? __pfx_ksys_read+0x10/0x10 [ 1109.638160][ T4554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.638184][ T4554] do_syscall_64+0x174/0x580 [ 1109.638213][ T4554] ? trace_irq_disable+0x3b/0x140 [ 1109.638240][ T4554] ? clear_bhb_loop+0x40/0x90 [ 1109.638273][ T4554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.638294][ T4554] RIP: 0033:0x7f13eaf5e68e [ 1109.638315][ T4554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1109.638333][ T4554] RSP: 002b:00007f13ebed9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1109.638356][ T4554] RAX: ffffffffffffffda RBX: 00007f13ebeda6c0 RCX: 00007f13eaf5e68e [ 1109.638371][ T4554] RDX: 000000000000000f RSI: 00007f13ebeda0a0 RDI: 0000000000000007 [ 1109.638384][ T4554] RBP: 00007f13ebeda090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.638397][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.638425][ T4554] R13: 00007f13eb226038 R14: 00007f13eb225fa0 R15: 00007ffd5a60b1e8 [ 1109.638463][ T4554] [ 1109.863319][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1109.974310][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1110.084306][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1110.126524][ T4574] netlink: 'syz.0.7754': attribute type 1 has an invalid length. [ 1110.198260][ T4574] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1110.240387][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1110.373999][ T13] bond5: (slave bridge3): failed to get link speed/duplex [ 1110.485579][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1110.613998][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1110.818633][ T6171] bond5: (slave bridge3): failed to get link speed/duplex [ 1110.966398][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1111.083964][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1112.329523][ T4659] ipt_REJECT: ECHOREPLY no longer supported. [ 1112.348300][ T4659] netlink: 'syz.4.7765': attribute type 5 has an invalid length. [ 1112.392737][ T4668] netlink: 'syz.4.7765': attribute type 5 has an invalid length. [ 1112.767282][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7772'. [ 1112.798561][ T4694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7771'. [ 1113.123642][ T4710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7775'. [ 1113.281363][ T4718] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7776'. [ 1113.457621][ T4727] netlink: 'syz.3.7778': attribute type 13 has an invalid length. [ 1113.553052][ T4734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7780'. [ 1113.955395][ T30] audit: type=1804 audit(1784178091.776:31): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7783" name="/newroot/387/cgroup.controllers" dev="tmpfs" ino=2007 res=1 errno=0 [ 1114.007072][ T30] audit: type=1800 audit(1784178091.776:32): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7783" name="cgroup.controllers" dev="tmpfs" ino=2007 res=0 errno=0 [ 1114.125640][ T4745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7784'. [ 1114.530678][ T4768] netlink: 'syz.0.7789': attribute type 2 has an invalid length. [ 1114.731005][ T4773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7791'. [ 1114.839631][ T4784] FAULT_INJECTION: forcing a failure. [ 1114.839631][ T4784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.879859][ T4784] CPU: 0 UID: 0 PID: 4784 Comm: syz.5.7794 Not tainted syzkaller #0 PREEMPT(full) [ 1114.879891][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1114.879903][ T4784] Call Trace: [ 1114.879911][ T4784] [ 1114.879920][ T4784] dump_stack_lvl+0xe8/0x150 [ 1114.879956][ T4784] should_fail_ex+0x40c/0x560 [ 1114.879986][ T4784] _copy_from_user+0x2d/0xb0 [ 1114.880017][ T4784] ___sys_recvmsg+0x173/0x5a0 [ 1114.880048][ T4784] ? __pfx____sys_recvmsg+0x10/0x10 [ 1114.880073][ T4784] ? __fget_files+0x2a/0x420 [ 1114.880120][ T4784] ? __fget_files+0x3a2/0x420 [ 1114.880158][ T4784] do_recvmmsg+0x31a/0x7f0 [ 1114.880189][ T4784] ? __pfx_do_recvmmsg+0x10/0x10 [ 1114.880234][ T4784] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1114.880265][ T4784] ? __fget_files+0x3a2/0x420 [ 1114.880300][ T4784] __x64_sys_recvmmsg+0x198/0x250 [ 1114.880324][ T4784] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1114.880355][ T4784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.880379][ T4784] do_syscall_64+0x174/0x580 [ 1114.880406][ T4784] ? trace_irq_disable+0x3b/0x140 [ 1114.880433][ T4784] ? clear_bhb_loop+0x40/0x90 [ 1114.880459][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.880479][ T4784] RIP: 0033:0x7f13eaf9de59 [ 1114.880506][ T4784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.880522][ T4784] RSP: 002b:00007f13ebeda028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1114.880544][ T4784] RAX: ffffffffffffffda RBX: 00007f13eb225fa0 RCX: 00007f13eaf9de59 [ 1114.880559][ T4784] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 1114.880571][ T4784] RBP: 00007f13ebeda090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.880584][ T4784] R10: 0000000040002000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.880596][ T4784] R13: 00007f13eb226038 R14: 00007f13eb225fa0 R15: 00007ffd5a60b1e8 [ 1114.880630][ T4784] [ 1115.080332][ T4655] net_ratelimit: 22 callbacks suppressed [ 1115.080356][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1115.156914][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7798'. [ 1115.207017][ T4807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7799'. [ 1115.259886][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1115.395483][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1115.518357][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1115.634275][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1115.856182][ T4837] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7804'. [ 1115.866581][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1116.092075][ T4852] FAULT_INJECTION: forcing a failure. [ 1116.092075][ T4852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.105975][ T4852] CPU: 1 UID: 0 PID: 4852 Comm: syz.3.7810 Not tainted syzkaller #0 PREEMPT(full) [ 1116.106004][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1116.106015][ T4852] Call Trace: [ 1116.106023][ T4852] [ 1116.106032][ T4852] dump_stack_lvl+0xe8/0x150 [ 1116.106069][ T4852] should_fail_ex+0x40c/0x560 [ 1116.106099][ T4852] _copy_to_user+0x31/0xb0 [ 1116.106129][ T4852] simple_read_from_buffer+0xe1/0x170 [ 1116.106161][ T4852] proc_fail_nth_read+0x1bb/0x230 [ 1116.106192][ T4852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1116.106223][ T4852] ? rw_verify_area+0x24a/0x4c0 [ 1116.106252][ T4852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1116.106278][ T4852] vfs_read+0x213/0xa80 [ 1116.106313][ T4852] ? __pfx___mutex_lock+0x10/0x10 [ 1116.106343][ T4852] ? __pfx_vfs_read+0x10/0x10 [ 1116.106373][ T4852] ? __fget_files+0x2a/0x420 [ 1116.106401][ T4852] ? __fget_files+0x3a2/0x420 [ 1116.106424][ T4852] ? __fget_files+0x2a/0x420 [ 1116.106458][ T4852] ksys_read+0x150/0x270 [ 1116.106487][ T4852] ? __pfx_ksys_read+0x10/0x10 [ 1116.106525][ T4852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.106549][ T4852] do_syscall_64+0x174/0x580 [ 1116.106577][ T4852] ? trace_irq_disable+0x3b/0x140 [ 1116.106602][ T4852] ? clear_bhb_loop+0x40/0x90 [ 1116.106628][ T4852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.106648][ T4852] RIP: 0033:0x7f92ab75e68e [ 1116.106669][ T4852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1116.106687][ T4852] RSP: 002b:00007f92ac675fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1116.106709][ T4852] RAX: ffffffffffffffda RBX: 00007f92ac6766c0 RCX: 00007f92ab75e68e [ 1116.106724][ T4852] RDX: 000000000000000f RSI: 00007f92ac6760a0 RDI: 0000000000000006 [ 1116.106738][ T4852] RBP: 00007f92ac676090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.106751][ T4852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.106762][ T4852] R13: 00007f92aba26038 R14: 00007f92aba25fa0 R15: 00007fff3b8af1c8 [ 1116.106813][ T4852] [ 1119.187048][ T4858] __nla_validate_parse: 1 callbacks suppressed [ 1119.187071][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7811'. [ 1119.324077][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1119.338232][ T4868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7815'. [ 1119.346520][ T4867] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7814'. [ 1119.385976][ T4867] syzkaller0: entered promiscuous mode [ 1119.401809][ T4867] syzkaller0: entered allmulticast mode [ 1119.681072][ T4888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7820'. [ 1119.734277][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1119.854239][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1120.024865][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1121.153420][ T4920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7828'. [ 1121.180061][ T4922] netlink: 420 bytes leftover after parsing attributes in process `syz.5.7829'. [ 1123.659634][ T4929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7831'. [ 1123.680855][ T4929] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1123.714238][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1123.826691][ T4933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.847333][ T4943] veth0_to_team: entered promiscuous mode [ 1123.865561][ T4943] gretap0: entered promiscuous mode [ 1123.876458][ T4943] debugfs: 'hsr1' already exists in 'hsr' [ 1123.888317][ T4943] Cannot create hsr debugfs directory [ 1123.944363][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1124.041003][ T4951] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1124.084817][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1124.204021][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1124.305953][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1124.316145][ T4975] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1124.330854][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7843'. [ 1124.344630][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1124.371097][ T4975] ipvlan0: entered allmulticast mode [ 1124.382481][ T4975] bridge0: entered allmulticast mode [ 1124.720652][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1124.917448][ T5011] netlink: 'syz.3.7852': attribute type 4 has an invalid length. [ 1125.117099][ T5018] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7851'. [ 1128.207344][ T5006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1128.274019][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1128.320937][ T5010] lo speed is unknown, defaulting to 1000 [ 1128.339069][ T5010] lo speed is unknown, defaulting to 1000 [ 1128.424940][ T5029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7854'. [ 1128.577151][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7859'. [ 1128.597831][ T5029] bond7 (unregistering): Released all slaves [ 1128.612531][ T5041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7859'. [ 1128.744815][ T4655] net_ratelimit: 1 callbacks suppressed [ 1128.744837][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1128.871367][ T5049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.132319][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7866'. [ 1129.188683][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1129.337939][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7867'. [ 1131.277927][ T5090] xt_hashlimit: max too large, truncated to 1048576 [ 1133.410935][ T5079] dummy0: entered allmulticast mode [ 1133.434368][ T5079] dummy0: left allmulticast mode [ 1133.464305][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1133.582298][ T5095] netlink: 4412 bytes leftover after parsing attributes in process `syz.0.7872'. [ 1133.594095][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1133.704134][ T6168] bond5: (slave bridge3): link status up again after 0 ms [ 1133.720463][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1133.778481][ T5110] veth1_to_team: entered allmulticast mode [ 1133.844252][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1133.854404][ T5110] veth1_to_team: left allmulticast mode [ 1133.879797][ T5118] netlink: 'syz.1.7879': attribute type 10 has an invalid length. [ 1133.929582][ T5118] tipc: Enabling of bearer rejected, failed to enable media [ 1133.974107][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1133.981476][ T5125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7882'. [ 1134.028952][ T5125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7882'. [ 1134.069740][ T5125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7882'. [ 1134.087447][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1134.364489][ T1250] bond5: (slave bridge3): failed to get link speed/duplex [ 1134.623502][ T5135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7885'. [ 1134.646971][ T5135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7885'. [ 1134.678740][ T5144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7885'. [ 1134.696297][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7885'. [ 1137.923992][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1138.047172][ T5168] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1138.094104][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1138.134140][ T5168] Can't find ip_set type h [ 1138.154385][ T5169] Can't find ip_set type h [ 1138.224052][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1138.344185][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1138.475291][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1138.517581][ T5199] bond0: (slave ip6tnl0): refused to change device type [ 1138.598124][ T5187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7897'. [ 1138.658262][ T5199] ip6erspan0: entered allmulticast mode [ 1138.865897][ T6168] net_ratelimit: 1 callbacks suppressed [ 1138.865920][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1138.919607][ T5208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7900'. [ 1139.025584][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1139.163927][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1139.283120][ T5218] xt_bpf: check failed: parse error [ 1139.415732][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1139.601114][ T5237] netlink: 'syz.0.7909': attribute type 10 has an invalid length. [ 1142.913381][ T5232] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1142.923650][ T5232] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1142.924629][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.934661][ T5232] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1142.967561][ T5237] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1142.995759][ T5267] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1143.010212][ T5240] tipc: Enabling of bearer rejected, failed to enable media [ 1143.039499][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7911'. [ 1143.075474][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1143.203956][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1143.284641][ T5283] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20000 [ 1143.309616][ T5291] netlink: 'syz.1.7922': attribute type 13 has an invalid length. [ 1143.317932][ T5291] netlink: 'syz.1.7922': attribute type 17 has an invalid length. [ 1143.346537][ T5283] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1143.365422][ T5293] netlink: 276 bytes leftover after parsing attributes in process `syz.5.7918'. [ 1143.415668][ T5296] netlink: 'syz.3.7921': attribute type 13 has an invalid length. [ 1143.431904][ T5296] netlink: 'syz.3.7921': attribute type 17 has an invalid length. [ 1143.564123][ T5291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1143.575284][ T5291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1143.594299][ T5291] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1144.741460][ T5335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7930'. [ 1145.208479][ T5349] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7933'. [ 1145.589619][ T5296] erspan0: left allmulticast mode [ 1145.611179][ T5296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.664790][ T5296] xfrm0: left allmulticast mode [ 1145.681173][ T5296] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1145.702693][ T6174] bridge0: port 1(vlan3) entered blocking state [ 1145.709181][ T6174] bridge0: port 1(vlan3) entered forwarding state [ 1145.755789][ T5351] netlink: 'syz.3.7934': attribute type 1 has an invalid length. [ 1145.756253][T15524] lo speed is unknown, defaulting to 1000 [ 1145.769720][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1145.815364][ T1250] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.829112][ T1250] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.841907][ T1250] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.855256][ T1250] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.898066][T15506] lo speed is unknown, defaulting to 1000 [ 1146.041762][ T1250] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.072351][ T1250] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.124365][ T1250] bond5: (slave bridge3): failed to get link speed/duplex [ 1146.179452][ T5352] vlan5: entered allmulticast mode [ 1146.208224][ T5352] bond11: entered allmulticast mode [ 1146.290298][T15520] lo speed is unknown, defaulting to 1000 [ 1146.324001][T17796] bond5: (slave bridge3): failed to get link speed/duplex [ 1146.337117][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.362196][ T5356] netlink: 'syz.0.7935': attribute type 21 has an invalid length. [ 1146.367681][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.455851][ T5356] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7935'. [ 1147.039152][ T5398] tipc: Enabled bearer , priority 0 [ 1147.069279][ T5403] x_tables: duplicate underflow at hook 2 [ 1147.126915][ T5403] nft_compat: unsupported protocol 5 [ 1147.339649][ T5398] tipc: Disabling bearer [ 1147.383919][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1147.420668][ T5418] netdevsim netdevsim5 €Â: renamed from netdevsim0 [ 1147.476009][ T5424] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7945'. [ 1147.488560][ T5424] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7945'. [ 1147.544639][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1148.088063][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.146064][ T5433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.309012][ T5454] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1148.452468][ T5433] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1148.681674][ T5462] sctp: [Deprecated]: syz.1.7951 (pid 5462) Use of int in max_burst socket option deprecated. [ 1148.681674][ T5462] Use struct sctp_assoc_value instead [ 1148.809549][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7953'. [ 1148.819975][ T5469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1149.644556][ T5481] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7956'. [ 1152.135464][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1152.273952][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1152.386706][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1152.411017][ T5498] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1152.461812][ T5505] netlink: 'syz.5.7960': attribute type 4 has an invalid length. [ 1152.490144][ T5505] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7960'. [ 1152.597848][ T5503] bond7 (unregistering): Released all slaves [ 1152.674140][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1152.746093][ T5516] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7965'. [ 1152.824559][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1152.976733][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1152.997804][ T5533] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1153.206678][ T6168] bond5: (slave bridge3): failed to get link speed/duplex [ 1153.381313][ T5551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7974'. [ 1153.411142][ T5551] block nbd0: reconnected socket [ 1153.443572][T27110] block nbd0: Receive control failed (result -107) [ 1154.082849][ T5561] x_tables: duplicate underflow at hook 3 [ 1156.787781][ T6174] bridge_slave_1: left allmulticast mode [ 1156.808298][ T6174] bridge_slave_1: left promiscuous mode [ 1156.820984][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.848932][ T6174] bridge_slave_0: left allmulticast mode [ 1156.862810][ T6174] bridge_slave_0: left promiscuous mode [ 1156.869568][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.171440][ T5580] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1157.477996][ T6174] erspan0 (unregistering): left promiscuous mode [ 1157.550946][ T6174] batman_adv: batadv0: Removing interface: gretap5 [ 1157.610959][ T6174] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1157.656321][ T6174] team0: Port device bridge0 removed [ 1157.738345][ T6174] team0: Port device bridge1 removed [ 1157.879563][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.895515][ T6174] bond0 (unregistering): Released all slaves [ 1157.915586][ T6174] bond1 (unregistering): Released all slaves [ 1157.932352][ T6174] bond2 (unregistering): Released all slaves [ 1157.949823][ T6174] bond3 (unregistering): Released all slaves [ 1157.967967][ T6174] bond4 (unregistering): Released all slaves [ 1157.983521][ T6174] bond5 (unregistering): (slave veth3): Releasing active interface [ 1157.993738][ T6174] batadv0: entered promiscuous mode [ 1158.000604][ T6174] bond5 (unregistering): (slave batadv0): Releasing active interface [ 1158.018458][ T6174] bond5 (unregistering): Released all slaves [ 1158.033159][ T6174] bond6 (unregistering): Released all slaves [ 1158.050509][ T6174] bond7 (unregistering): Released all slaves [ 1158.066125][ T6174] bond8 (unregistering): Released all slaves [ 1158.090000][ T6174] bond9 (unregistering): Released all slaves [ 1158.105880][ T6174] bond10 (unregistering): (slave bond11): Releasing backup interface [ 1158.115270][ T6174] bond10 (unregistering): Released all slaves [ 1158.131258][ T6174] bond11 (unregistering): Released all slaves [ 1158.148067][ T6174] bond12 (unregistering): Released all slaves [ 1158.166387][ T6174] bond13 (unregistering): (slave dummy0): Releasing active interface [ 1158.176468][ T6174] bond13 (unregistering): Released all slaves [ 1158.192098][ T6174] bond14 (unregistering): Released all slaves [ 1158.207403][ T6174] bond15 (unregistering): Released all slaves [ 1158.274851][ T5581] syzkaller1: entered promiscuous mode [ 1158.286645][ T5581] syzkaller1: entered allmulticast mode [ 1158.583658][ T5602] --map-set only usable from mangle table [ 1158.603671][ T6174] þ: left promiscuous mode [ 1158.724911][ T1250] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1158.802653][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1158.821316][ T5600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.853410][ T6174] tipc: Disabling bearer [ 1158.900638][ T6174] tipc: Disabling bearer [ 1158.928260][ T6174] tipc: Disabling bearer [ 1158.956232][ T6174] tipc: Left network mode [ 1159.004215][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1159.079387][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7992'. [ 1159.586115][ T5648] netlink: 'syz.4.7998': attribute type 1 has an invalid length. [ 1159.911621][ T5668] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8001'. [ 1159.985281][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8001'. [ 1163.198173][ T5644] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7998'. [ 1163.225551][ T5644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7998'. [ 1163.235266][ T5644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7998'. [ 1163.249117][ T5665] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8001'. [ 1163.274886][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1163.394344][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1163.407117][ T5678] netlink: 580 bytes leftover after parsing attributes in process `syz.5.8003'. [ 1163.421373][ T5680] netlink: 124 bytes leftover after parsing attributes in process `syz.4.8004'. [ 1163.543963][ T1250] bond5: (slave bridge3): failed to get link speed/duplex [ 1163.573233][ T5691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8004'. [ 1163.804701][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1163.863622][ T5708] netlink: 'syz.5.8011': attribute type 2 has an invalid length. [ 1163.941072][ T5708] netlink: 'syz.5.8011': attribute type 8 has an invalid length. [ 1163.967380][ T5719] pimreg9: entered allmulticast mode [ 1164.253379][ T5716] 0ªX¹¦À: left allmulticast mode [ 1164.526108][ T5716] ip6erspan0: left allmulticast mode [ 1164.543467][ T5760] __nla_validate_parse: 3 callbacks suppressed [ 1164.543487][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8017'. [ 1164.566922][ T5760] nbd: must specify a size in bytes for the device [ 1164.577009][ T5716] vlan3: left promiscuous mode [ 1164.593996][ T5716] bond8: left promiscuous mode [ 1164.602591][ T5716] vlan3: left allmulticast mode [ 1164.608084][ T5716] bond8: left allmulticast mode [ 1164.616380][ T5716] bridge8: left promiscuous mode [ 1164.621456][ T5716] bridge8: left allmulticast mode [ 1164.635428][ T5716] bond9: left promiscuous mode [ 1164.640509][ T5716] bridge10: left promiscuous mode [ 1164.899299][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1164.938984][ T5770] bridge0: port 1(syz_tun) entered blocking state [ 1164.961841][ T5770] bridge0: port 1(syz_tun) entered disabled state [ 1164.978863][ T5770] syz_tun: entered allmulticast mode [ 1164.988990][ T5770] syz_tun: entered promiscuous mode [ 1165.052314][ T5770] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8018'. [ 1165.069080][ T5770] tc_dump_action: action bad kind [ 1165.104162][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1165.226825][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1165.364028][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1165.451238][ T5789] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1165.484395][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1165.629543][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8027'. [ 1165.647670][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8027'. [ 1165.787014][ T6174] hsr_slave_0: left promiscuous mode [ 1165.824844][ T6174] hsr_slave_1: left promiscuous mode [ 1166.359188][ T5834] ipt_REJECT: ECHOREPLY no longer supported. [ 1166.466794][ T5842] No such timeout policy "syz0" [ 1166.576832][ T6174] team0 (unregistering): Port device team_slave_1 removed [ 1166.620952][ T6174] team0 (unregistering): Port device team_slave_0 removed [ 1166.976301][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1167.676412][ T6174] IPVS: stop unused estimator thread 0... [ 1167.710070][ T5882] vlan4: left promiscuous mode [ 1167.742043][ T5882] bridge_slave_0: left promiscuous mode [ 1167.767577][ T5883] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8040'. [ 1167.927394][ T5886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8042'. [ 1168.092639][ T5831] infiniband syz0: set active [ 1168.097863][ T5831] infiniband syz0: added bond_slave_0 [ 1168.124982][ T5831] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1168.139839][ T5897] netlink: 'syz.4.8043': attribute type 10 has an invalid length. [ 1168.156009][ T5831] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1168.197070][ T5897] team0: Port device bridge0 added [ 1168.207357][ T5831] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1168.295858][ T3287] net_ratelimit: 9 callbacks suppressed [ 1168.295881][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1168.322039][ T5831] RDS/IB: syz0: added [ 1168.362561][ T5831] smc: adding ib device syz0 with port count 1 [ 1168.386236][ T5831] smc: ib device syz0 port 1 has no pnetid [ 1168.491963][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1168.749383][ T5920] netlink: 'syz.4.8051': attribute type 13 has an invalid length. [ 1168.765731][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1168.802048][ T5920] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1168.903971][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1169.034625][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1169.174217][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1169.262873][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8058'. [ 1169.303362][ T5947] sctp: [Deprecated]: syz.0.8057 (pid 5947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1169.303362][ T5947] Use struct sctp_sack_info instead [ 1169.321784][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1169.331647][ T5946] xt_hashlimit: size too large, truncated to 1048576 [ 1169.469960][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1169.604033][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1169.726155][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1170.511709][ T5991] [ 1170.514123][ T5991] ====================================================== [ 1170.521286][ T5991] WARNING: possible circular locking dependency detected [ 1170.528358][ T5991] syzkaller #0 Not tainted [ 1170.532874][ T5991] ------------------------------------------------------ [ 1170.540175][ T5991] syz.1.8068/5991 is trying to acquire lock: [ 1170.546187][ T5991] ffff88801c28c210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 1170.556886][ T5991] [ 1170.556886][ T5991] but task is already holding lock: [ 1170.564481][ T5991] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 1170.574827][ T5991] [ 1170.574827][ T5991] which lock already depends on the new lock. [ 1170.574827][ T5991] [ 1170.585255][ T5991] [ 1170.585255][ T5991] the existing dependency chain (in reverse order) is: [ 1170.594543][ T5991] [ 1170.594543][ T5991] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1170.602393][ T5991] cpus_read_lock+0x42/0x160 [ 1170.607557][ T5991] static_key_slow_inc+0x12/0x30 [ 1170.613052][ T5991] nbd_genl_reconfigure+0x1301/0x1e80 [ 1170.619048][ T5991] genl_family_rcv_msg_doit+0x233/0x340 [ 1170.625149][ T5991] genl_rcv_msg+0x614/0x7a0 [ 1170.630181][ T5991] netlink_rcv_skb+0x226/0x4a0 [ 1170.635484][ T5991] genl_rcv+0x28/0x40 [ 1170.640083][ T5991] netlink_unicast+0x7bb/0x940 [ 1170.645381][ T5991] netlink_sendmsg+0x813/0xb40 [ 1170.650664][ T5991] sock_sendmsg_nosec+0x13a/0x180 [ 1170.656220][ T5991] ____sys_sendmsg+0x54e/0x850 [ 1170.661519][ T5991] ___sys_sendmsg+0x2a5/0x360 [ 1170.666742][ T5991] __x64_sys_sendmsg+0x1b1/0x290 [ 1170.672233][ T5991] do_syscall_64+0x174/0x580 [ 1170.677446][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.683868][ T5991] [ 1170.683868][ T5991] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1170.691543][ T5991] __mutex_lock+0x19d/0x1550 [ 1170.696670][ T5991] nbd_queue_rq+0x373/0x1150 [ 1170.701883][ T5991] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1170.708041][ T5991] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1170.714941][ T5991] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1170.721451][ T5991] blk_mq_run_work_fn+0x16c/0x300 [ 1170.727008][ T5991] process_scheduled_works+0xa8e/0x14e0 [ 1170.733103][ T5991] worker_thread+0xa47/0xfb0 [ 1170.738259][ T5991] kthread+0x388/0x470 [ 1170.743126][ T5991] ret_from_fork+0x514/0xb70 [ 1170.748279][ T5991] ret_from_fork_asm+0x1a/0x30 [ 1170.753574][ T5991] [ 1170.753574][ T5991] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1170.760955][ T5991] __mutex_lock+0x19d/0x1550 [ 1170.766085][ T5991] nbd_queue_rq+0xc1/0x1150 [ 1170.771124][ T5991] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1170.777225][ T5991] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1170.784083][ T5991] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1170.790603][ T5991] blk_mq_run_work_fn+0x16c/0x300 [ 1170.796149][ T5991] process_scheduled_works+0xa8e/0x14e0 [ 1170.802219][ T5991] worker_thread+0xa47/0xfb0 [ 1170.807331][ T5991] kthread+0x388/0x470 [ 1170.811926][ T5991] ret_from_fork+0x514/0xb70 [ 1170.817044][ T5991] ret_from_fork_asm+0x1a/0x30 [ 1170.822353][ T5991] [ 1170.822353][ T5991] -> #4 (set->srcu){.+.+}-{0:0}: [ 1170.829486][ T5991] __synchronize_srcu+0xc9/0x2f0 [ 1170.834982][ T5991] elevator_switch+0x1e8/0x7b0 [ 1170.840324][ T5991] elevator_change+0x2fa/0x480 [ 1170.845616][ T5991] elevator_set_default+0x375/0x440 [ 1170.851340][ T5991] blk_register_queue+0x3f3/0x4e0 [ 1170.856934][ T5991] __add_disk+0x6cb/0xe30 [ 1170.861829][ T5991] add_disk_fwnode+0xfb/0x4b0 [ 1170.867033][ T5991] nbd_dev_add+0x733/0xb60 [ 1170.871981][ T5991] nbd_init+0x15f/0x1e0 [ 1170.876737][ T5991] do_one_initcall+0x250/0x870 [ 1170.882032][ T5991] do_initcall_level+0x10a/0x1a0 [ 1170.887535][ T5991] do_initcalls+0x59/0xa0 [ 1170.892403][ T5991] kernel_init_freeable+0x29d/0x3e0 [ 1170.898216][ T5991] kernel_init+0x1d/0x1d0 [ 1170.903072][ T5991] ret_from_fork+0x514/0xb70 [ 1170.908195][ T5991] ret_from_fork_asm+0x1a/0x30 [ 1170.913477][ T5991] [ 1170.913477][ T5991] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1170.921472][ T5991] __mutex_lock+0x19d/0x1550 [ 1170.926599][ T5991] elevator_change+0x1af/0x480 [ 1170.931920][ T5991] elevator_set_none+0xb5/0x140 [ 1170.937296][ T5991] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1170.943637][ T5991] nbd_start_device+0x189/0xb30 [ 1170.949019][ T5991] nbd_genl_connect+0x1597/0x1c10 [ 1170.954576][ T5991] genl_family_rcv_msg_doit+0x233/0x340 [ 1170.960664][ T5991] genl_rcv_msg+0x614/0x7a0 [ 1170.965694][ T5991] netlink_rcv_skb+0x226/0x4a0 [ 1170.970990][ T5991] genl_rcv+0x28/0x40 [ 1170.975498][ T5991] netlink_unicast+0x7bb/0x940 [ 1170.980790][ T5991] netlink_sendmsg+0x813/0xb40 [ 1170.986077][ T5991] sock_sendmsg_nosec+0x13a/0x180 [ 1170.991667][ T5991] ____sys_sendmsg+0x54e/0x850 [ 1170.996961][ T5991] ___sys_sendmsg+0x2a5/0x360 [ 1171.002183][ T5991] __x64_sys_sendmsg+0x1b1/0x290 [ 1171.007656][ T5991] do_syscall_64+0x174/0x580 [ 1171.012778][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.019197][ T5991] [ 1171.019197][ T5991] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1171.027995][ T5991] blk_alloc_queue+0x544/0x690 [ 1171.033335][ T5991] __blk_mq_alloc_disk+0x194/0x390 [ 1171.039086][ T5991] nbd_dev_add+0x494/0xb60 [ 1171.044040][ T5991] nbd_init+0x15f/0x1e0 [ 1171.048817][ T5991] do_one_initcall+0x250/0x870 [ 1171.054196][ T5991] do_initcall_level+0x10a/0x1a0 [ 1171.059663][ T5991] do_initcalls+0x59/0xa0 [ 1171.064547][ T5991] kernel_init_freeable+0x29d/0x3e0 [ 1171.070313][ T5991] kernel_init+0x1d/0x1d0 [ 1171.075253][ T5991] ret_from_fork+0x514/0xb70 [ 1171.080373][ T5991] ret_from_fork_asm+0x1a/0x30 [ 1171.085772][ T5991] [ 1171.085772][ T5991] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1171.093074][ T5991] fs_reclaim_acquire+0x71/0x100 [ 1171.098911][ T5991] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1171.104812][ T5991] __kernfs_iattrs+0xdd/0x380 [ 1171.110016][ T5991] kernfs_iop_setattr+0xe6/0x3f0 [ 1171.115482][ T5991] notify_change+0xbba/0xea0 [ 1171.120607][ T5991] do_truncate+0x1c2/0x250 [ 1171.125545][ T5991] path_openat+0x2fed/0x3830 [ 1171.130673][ T5991] do_file_open+0x23e/0x4a0 [ 1171.135721][ T5991] do_sys_openat2+0x115/0x200 [ 1171.140925][ T5991] __x64_sys_openat+0x138/0x170 [ 1171.146306][ T5991] do_syscall_64+0x174/0x580 [ 1171.151428][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.157848][ T5991] [ 1171.157848][ T5991] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1171.166368][ T5991] __lock_acquire+0x1520/0x2cf0 [ 1171.171749][ T5991] lock_acquire+0x106/0x350 [ 1171.176793][ T5991] down_read+0x4a/0x330 [ 1171.181495][ T5991] kernfs_iop_permission+0x7f/0x430 [ 1171.187244][ T5991] inode_permission+0x3de/0x5f0 [ 1171.192632][ T5991] cgroup_attach_permissions+0x28e/0x9f0 [ 1171.198891][ T5991] __cgroup_procs_write+0x24b/0x320 [ 1171.204623][ T5991] cgroup_threads_write+0x24/0x50 [ 1171.210171][ T5991] cgroup_file_write+0x331/0x8f0 [ 1171.215679][ T5991] kernfs_fop_write_iter+0x3a4/0x540 [ 1171.221489][ T5991] vfs_write+0x612/0xba0 [ 1171.226360][ T5991] ksys_write+0x150/0x270 [ 1171.231226][ T5991] do_syscall_64+0x174/0x580 [ 1171.236345][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.242762][ T5991] [ 1171.242762][ T5991] other info that might help us debug this: [ 1171.242762][ T5991] [ 1171.252985][ T5991] Chain exists of: [ 1171.252985][ T5991] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 1171.252985][ T5991] [ 1171.266986][ T5991] Possible unsafe locking scenario: [ 1171.266986][ T5991] [ 1171.274577][ T5991] CPU0 CPU1 [ 1171.279975][ T5991] ---- ---- [ 1171.285343][ T5991] rlock(cpu_hotplug_lock); [ 1171.289934][ T5991] lock(&nsock->tx_lock); [ 1171.296870][ T5991] lock(cpu_hotplug_lock); [ 1171.303898][ T5991] rlock(&root->kernfs_iattr_rwsem); [ 1171.309282][ T5991] [ 1171.309282][ T5991] *** DEADLOCK *** [ 1171.309282][ T5991] [ 1171.317461][ T5991] 4 locks held by syz.1.8068/5991: [ 1171.322570][ T5991] #0: ffff888078d5c450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1171.331504][ T5991] #1: ffff88807ecbac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1171.341264][ T5991] #2: ffffffff8eb99560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 1171.351014][ T5991] #3: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 1171.361637][ T5991] [ 1171.361637][ T5991] stack backtrace: [ 1171.367531][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.1.8068 Not tainted syzkaller #0 PREEMPT(full) [ 1171.367557][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1171.367568][ T5991] Call Trace: [ 1171.367577][ T5991] [ 1171.367586][ T5991] dump_stack_lvl+0xe8/0x150 [ 1171.367611][ T5991] print_circular_bug+0x2e1/0x300 [ 1171.367630][ T5991] check_noncircular+0x12e/0x150 [ 1171.367657][ T5991] __lock_acquire+0x1520/0x2cf0 [ 1171.367681][ T5991] ? __lock_acquire+0x683/0x2cf0 [ 1171.367706][ T5991] ? kernfs_iop_permission+0x7f/0x430 [ 1171.367726][ T5991] lock_acquire+0x106/0x350 [ 1171.367746][ T5991] ? kernfs_iop_permission+0x7f/0x430 [ 1171.367767][ T5991] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1171.367789][ T5991] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1171.367809][ T5991] down_read+0x4a/0x330 [ 1171.367825][ T5991] ? kernfs_iop_permission+0x7f/0x430 [ 1171.367845][ T5991] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1171.367865][ T5991] kernfs_iop_permission+0x7f/0x430 [ 1171.367887][ T5991] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1171.367907][ T5991] inode_permission+0x3de/0x5f0 [ 1171.367929][ T5991] cgroup_attach_permissions+0x28e/0x9f0 [ 1171.367954][ T5991] __cgroup_procs_write+0x24b/0x320 [ 1171.367976][ T5991] cgroup_threads_write+0x24/0x50 [ 1171.367992][ T5991] ? __pfx_cgroup_threads_write+0x10/0x10 [ 1171.368009][ T5991] cgroup_file_write+0x331/0x8f0 [ 1171.368025][ T5991] ? kernfs_fop_write_iter+0x22b/0x540 [ 1171.368042][ T5991] ? __pfx_cgroup_file_write+0x10/0x10 [ 1171.368059][ T5991] ? __kmalloc_noprof+0x396/0x720 [ 1171.368077][ T5991] ? vfs_write+0x22b/0xba0 [ 1171.368099][ T5991] ? __kmalloc_noprof+0x1ad/0x720 [ 1171.368120][ T5991] ? __pfx_cgroup_file_write+0x10/0x10 [ 1171.368135][ T5991] kernfs_fop_write_iter+0x3a4/0x540 [ 1171.368153][ T5991] vfs_write+0x612/0xba0 [ 1171.368178][ T5991] ? __pfx_vfs_write+0x10/0x10 [ 1171.368201][ T5991] ? __pfx_do_futex+0x10/0x10 [ 1171.368223][ T5991] ? kmem_cache_free+0x182/0x650 [ 1171.368249][ T5991] ksys_write+0x150/0x270 [ 1171.368273][ T5991] ? __pfx_ksys_write+0x10/0x10 [ 1171.368298][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.368315][ T5991] do_syscall_64+0x174/0x580 [ 1171.368338][ T5991] ? clear_bhb_loop+0x40/0x90 [ 1171.368356][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.368372][ T5991] RIP: 0033:0x7fd626f9de59 [ 1171.368387][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.368401][ T5991] RSP: 002b:00007fd627eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1171.368419][ T5991] RAX: ffffffffffffffda RBX: 00007fd627226090 RCX: 00007fd626f9de59 [ 1171.368432][ T5991] RDX: 0000000000000012 RSI: 0000200000000240 RDI: 0000000000000009 [ 1171.368443][ T5991] RBP: 00007fd627033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1171.368453][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.368463][ T5991] R13: 00007fd627226128 R14: 00007fd627226090 R15: 00007ffe0e82e868 [ 1171.368481][ T5991] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1172.176427][T27108] syz_tun (unregistering): left allmulticast mode [ 1172.209051][T27108] syz_tun (unregistering): left promiscuous mode [ 1172.221975][T27108] bridge0: port 1(syz_tun) entered disabled state [ 1172.490519][ T5984] syz_tun (unregistering): left allmulticast mode [ 1172.659997][ T6174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.774799][ T6174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.844830][ T6174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.945779][ T6174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.568973][ T6174] team0: Port device tunl0 removed [ 1173.588798][ T6174] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1173.641916][ T6174] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1173.661066][ T6174] bond0 (unregistering): Released all slaves [ 1173.673540][ T6174] bond1 (unregistering): Released all slaves [ 1173.687141][ T6174] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1173.696407][ T6174] bond2 (unregistering): Released all slaves [ 1173.708176][ T6174] bond3 (unregistering): Released all slaves [ 1173.722827][ T6174] bond4 (unregistering): Released all slaves [ 1173.740311][ T6174] bond5 (unregistering): Released all slaves [ 1173.752927][ T6174] bond6 (unregistering): Released all slaves [ 1173.772449][ T6174] bond7 (unregistering): Released all slaves [ 1173.788545][ T6174] bond8 (unregistering): Released all slaves [ 1173.813920][ T36] net_ratelimit: 16 callbacks suppressed [ 1173.813956][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1173.924987][ T6174] tipc: Left network mode [ 1173.952665][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1174.074895][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1174.194163][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1174.663988][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1174.775695][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1174.893882][T17793] bond5: (slave bridge3): failed to get link speed/duplex [ 1174.936984][ T6174] IPVS: stop unused estimator thread 0... [ 1175.003976][ T36] bond5: (slave bridge3): failed to get link speed/duplex [ 1175.115633][ T3287] bond5: (slave bridge3): failed to get link speed/duplex [ 1175.147959][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1175.184719][ T6174] bond0: (slave netdevsim1): Releasing backup interface [ 1175.193475][ T6174] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 1175.264577][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1175.499361][ T6174] gretap0 (unregistering): left promiscuous mode [ 1175.522072][ T6174] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1175.557865][ T6174] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 1175.566112][ T6174] bridge5 (unregistering): left promiscuous mode [ 1175.572489][ T6174] bridge5 (unregistering): left allmulticast mode [ 1175.585798][ T6174] bond0 (unregistering): Released all slaves [ 1175.593581][ T6174] bond1 (unregistering): Released all slaves [ 1175.608788][ T6174] bond2 (unregistering): Released all slaves [ 1175.618349][ T6174] bond3 (unregistering): Released all slaves [ 1175.627654][ T6174] bond4 (unregistering): Released all slaves [ 1175.637018][ T6174] bond5 (unregistering): Released all slaves [ 1175.647060][ T6174] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1175.657298][ T6174] bond6 (unregistering): Released all slaves [ 1175.667304][ T6174] bond7 (unregistering): (slave dummy0): Releasing active interface [ 1175.677347][ T6174] bond7 (unregistering): Released all slaves [ 1175.688494][ T6174] bond8 (unregistering): Released all slaves [ 1175.697641][ T6174] bond9 (unregistering): Released all slaves [ 1175.707611][ T6174] bond10 (unregistering): Released all slaves [ 1175.717387][ T6174] bond11 (unregistering): Released all slaves [ 1175.727619][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1175.735104][T15521] syz0: Port: 1 Link DOWN [ 1175.810083][ T6174] tipc: Left network mode [ 1175.852053][ T6174] IPVS: stopping backup sync thread 5267 ... [ 1176.093221][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1176.343211][ T6174] veth0_to_team: left promiscuous mode [ 1176.359096][ T6174] hsr_slave_0: left promiscuous mode [ 1176.365637][ T6174] hsr_slave_1: left promiscuous mode [ 1176.524104][T17793] smc: removing ib device syz0 [ 1176.582999][T17795] smc: removing ib device syz1 [ 1176.591652][T15524] lo speed is unknown, defaulting to 1000 [ 1176.592609][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1176.600496][T15524] syz1: Port: 1 Link DOWN [ 1176.612837][T17795] smbdirect: ib_dev[syz1] removed [ 1176.637969][T17793] smbdirect: ib_dev[syz0] removed [ 1177.350492][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1177.890886][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1178.099264][ T6174] IPVS: stop unused estimator thread 0... [ 1178.202227][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1178.428630][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1178.844078][ T4655] net_ratelimit: 26 callbacks suppressed [ 1178.844101][ T4655] bond5: (slave bridge3): failed to get link speed/duplex [ 1178.964020][ T1250] bond5: (slave bridge3): failed to get link speed/duplex [ 1179.074014][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1179.183992][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1179.294002][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1179.403992][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1179.514041][T17795] bond5: (slave bridge3): failed to get link speed/duplex [ 1179.623994][ T6174] bond5: (slave bridge3): failed to get link speed/duplex [ 1179.734016][ T1250] bond5: (slave bridge3): failed to get link speed/duplex [ 1179.844010][ T1250] bond5: (slave bridge3): failed to get link speed/duplex