last executing test programs: 1m22.494191441s ago: executing program 4 (id=2868): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a80060000000200000004000580"], 0x54}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 19.413908985s ago: executing program 4 (id=2870): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x840, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0xcb8}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 19.382820194s ago: executing program 4 (id=2882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}, 0x1, 0x0, 0x0, 0x40084}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x2000019e, 0x1}}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x10, @loopback, 0x3}}, [0x3ff, 0x9, 0x3, 0x10001, 0x5, 0x3, 0x1000, 0x200, 0x2000400, 0x6, 0xcc83, 0x5, 0x9, 0x9, 0x6]}, &(0x7f0000000600)=0x100) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000640)={r6, 0x8, 0x3, [0xc, 0xfff, 0x80]}, 0xe) 18.793205775s ago: executing program 4 (id=2883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xffff}, {0xfff3, 0xfff1}}, [@TCA_CHAIN={0x6, 0xb, 0x126}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x5, 0x1000000, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0xfffd, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x1234, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x2000000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-256\x00'}, 0x0, 0xc0}}]}, 0x13c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000000c0)="4b0003000000", 0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r5, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 18.493093948s ago: executing program 4 (id=2887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x80, 0xfd}, {0x7, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 3.633175448s ago: executing program 1 (id=2977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$inet(0x2, 0x2, 0x8) (async) r1 = socket$inet(0x2, 0x2, 0x8) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000514070008"], 0x4a) (async) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000514070008"], 0x4a) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r8, @ANYRESHEX=r2, @ANYRES32=r8], 0x60}}, 0x8000) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r8, @ANYRESHEX=r2, @ANYRES32=r8], 0x60}}, 0x8000) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000001c0)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}, r8}, 0xc) (async) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000001c0)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}, r8}, 0xc) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f0000000100)=0x97, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f0000000100)=0x97, 0x4) sendmmsg$inet6(r9, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r9, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x100db30}], 0x1, 0x40002062, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060088470000100015"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000024c0)={&(0x7f0000002540)=ANY=[@ANYBLOB="9c110000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250c000000800001800800030000000000140002006772657461703000000000000000000014000200677265746170300000000000000000001400020070696d367265670000000000000000001400020076657468305f746f5f6261746164760008000300020000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r8, @ANYBLOB="08110380b60005006045a774258d89b31677bc3cfc2261f351e42b557359c240d5d173bf933632f244568d931e71eddd6862be0a1dfa7b2f9e24f442974d263ddc263610809f58e75231a6b8077767c042f91a329f92995790bad393a58ab3f2230a6cc77d29d8c77ecd2dd846c9839d438615a527f5b405a55ceee8d66ca24d4855331a68f9675b12fd9dcb2afe4ec2a85f8cd4eb0a3c7e7bd4e00b73f1c0ae93d76697fec7c35917a95742504da2ac13d4bfcd697e91bae7d900000800020000000080080002003a850000041004005cbb5b6472e7294b2e8c67b456e1a04fc89e756cf09f82242fca932f1cd91251477e0c5153070f5bbe11398b8804b2802e789de01ce56688435aabaa2057feaf7511d28ff045b57f16f43aa67c6c1c613cc063600f70b353eb728c95ae50bae372c986c7a6ccec5514cf7e4251733c9ce5d2c71e92d57056ec507862563fb060c300b0f01ac30eb93b219129639356b17b6580f88ad5fe3ae5bb892162b1fdb487e884033f9ac37536f65bd75a838c3dade8f59e1a16abb0f30610efa77d60dfb746fa338ab8acbd2fe2b176c2c42f623edf0137cc3ded7cef517c640632ef65aa3e0b1a5e13e71279ea404fa190df7bfdd52094c9f6bd14fdea46dca8fe573b2b103fef8879f7ed033c5e61bd40b94edb66f7608280e1311abb6b3c1865707130ffd8fe3816b634a7ae539da9cc30935b74d347d84358c0e2d1da8e69361762f5bb67597febe6b47eceeee657bdf78e364c5bfdf40939608fb2f1e0da05ae19697d693ae32e563ef872089cdb6e1abc67fd677b3e7192f9190c862e0998912b810920ec42e532324749ffe6beda9f6d12234558653f50976c52984e665fb5b8a5cd49ab4dfe2fc07aba8cfde0f6e830a7cc3f11965d0cb0539f5819e2787d086d4b0deae1b163d2eecf2d4600271cb8c70977a0ec912f137d71dccca96157c9b9ce9ad5cb71c8a06e125be82c845cc72d290b38f3a5dd6ab0bc7156f5c8869481a3310e7d9f62606146407af610f7bf963e0dddbbb37845afac9bea35a94bf6cd563ad86cf671a2e0ae92d1d4172c34cb47a83041896359e0bb83136a124ac14e424d783745428157101c2905c92877b467237f81521a4a8d80bf6f184a17534a91b1cde41d5467edf76647c17a5576b8dee95ad9655286098ba22575edbf623a734fbb834dcd500a53980e33bb18bfa31fea3cd2a86e768cf2f31f3dbc8a147ee4b2359e1bbe668c8ff815ba82c1f278092d581b00521a3306503b4e9bd95afa2e93e5dd83b22080d1e1a98c1f1463db356aa0c052084f2267328486b087dfb877fa9263fa4a6b350f9b405fff13d32e39c724abc9abad5cf833be9a2a38e4afb12c4bd3b61a13600b94ccd98206337d77424c24294f56667135e7f757f0ae05917197956770a72861235dae640b89d6ce8e06155a7261f35c139904c37cd772d6620743289bdc44210b24a34a8e48976ed7166ff5593f6c9decc4285d045487f357abf878401e87ebe27cb0d298f2b941f2344dc64e6f2258337fac32ec857591dd2270909afa355d284bf1a5811bd60eba27ffdc0eb022e5e101454a1d0d7b0b786a28b85ded447bd94adc344ac061dae2a63fd77b4e197d6fd31b699b2b6fe2431087723f4a8d3ba32ba96957405861a9d2576f7ccc2d07ffea421e4a966cfb21ac86f2844f98214df05e251e9a02fed05fd1b392b7bdcd5e02a015b7b8a077e51422da8a2668e8f514b4825ae0b0efc2c3a8df676db2b9257645578a737f8a6124fe88fc3e2694b8350f130fb7b87c325d28c57aee19042eccbf052dc55770a45978defbe1744f453f1d618aaa007e0f55ac20934b98b57700ed2ade10ebc97d55b5d255bb85ac18e2d5201c9b9294d1125e70bdf0ca22d61726fbc96649f41a5e2bbf682e1db52a0896d866b7cd1ec11eabd3e97bb6b870935e3c67cf5e2487f26d415d65c03e0fe7cb6ec1d1759e8af9bc4303ea6d03eaf194f387945113a7c7c3933e68457fc4314d70df540a593c1d76daf848d52f60181969cb92b4a81c2d2024c0871fc51533a65addedb55737f455f46911428b418aade93a9c7fb4346e7a901a1e47b6e31984610730c1cdd0001574f5bd2db82344b08edd540e44d49f465bffe73f9463b2955aba65a8e92b227606d71fa558183ee697f2c82fb20f96587330affdb4448dcbd2d95cff1e944f22238b57d9a80ddf6a56453a5b2dcae20cc634f3572c825183f35d5b872e15a27e0528bc2cbb940f39c5cf212c032c667ace18e551ed80847c31849f34d7fb30b99e215c8b304e2fcb13b0d98e2f25054746b02d9cc1dd13ddec85fe3e363af6e7c780ca03ac033844d0c249c5cc4a8372fd618ad650809bc42de641d64447f58d120261c178fe71633af555e5e77bacae11d42ea6fe7a52be9a84a2a06fcf1c092ed5e36c01c75b7dc36858f92ec160acb2e1ad8c1bd61dbff7a99c77615b7346f6de339bb689ff82208d771205de577255be83f9d0e3cdad08cf35b6b8162c0fc3272dee3f7fa5d0dff02661ca95b115fb567041f24977640431f4c70011e049ea2bed7d5cb7e4a2838b79d3e433b62aad4af33fcfbdc262c436f5291df172c27334e7ac7ca3c7a80e66dde6e852142a7a434e50e5f1a323497d879e5e61542bf5bc31ea80b93f8aa9f7dc0fd931730eb47f95abd0706c9056bdb0579e84d125da9248e314c2ca3ebbfc70c7bb8bf0c83d8206761b8fd858616b55de96dea8f430ed2badac67a6968d933036f0a272b5f6412016eb80954ac9f1c274a6062680988c8be61691d88e266ae2c627613d5d679495217ce892c93f95ddf784287ea3b09c4fb1770d6a11478cfbaf1e281f07845f23b360e7d66f627497d04e2355316b9e94b25ae9fc36799a83ded3e53750cf4a47f204722500adcda67e98beeba67e0c99fc827df6609fa1b0a9fb6e8c71640872a361753b46a9b34c47a4e5492b206a78ac63146d504019453afebd37cec25b737b0f2e382262730fc6110ac81b0299e8a76923d83b1511ac39adf4b9c85ba4bae62f0d85126306f6fba4295497990b593db8b0dac3d59118de2180919859cde975666545be9c17839fdd5e09f5f1f9afc20b2bc99e288398580afd59770c163f192d30e3d81b2dc80831205c10d652cd50651a4ca8faa280f29aab4d6d30c5284dc32a6ec51324a818011e4904de31974225b42d628c885baa42079a7b043a739f3212d198f788623ff714b6320ae6209cb2d14a1065b85a7e4cfbd166069944922daca897ba1b3bf3aeefef6625b3b748ba60f0e96806c7d440f86b9d872c99b5d29f3ced0a3b1812056fb4834f97a4292c60f85cd320c55225fb579eeaa364489030c1751f76d0fd502accfbf5ef4ab3fbb5fe181289d5d95cc31fc47273dadbf0e087dd6c0ad8ac4b8e3ea3f34822169d14b0089ddddadb2e5b5301e18d4b29fa7b139ff9cbbb35cf944304cd407a65182d0d532579ab6cf1f2888438404a94b4ae4e121caf21f6ba5e284e343e00bfd36cbb8dcff83da239a42e10906bfe9ec1d1aaa265abfa1e776bd127ff79a93c0f8e682ac284ec64a3f1e78786e5a8b3d1fe0d8ecde166f289ebfbca6930e71f07d8a95f2c28be53e26acaac732afc0b1d471b1402282d0184727b69f3917f5a23063bce019de26354eb4c56fabbd533314c292f7f46fe4bfcbf9c1b3ad7dd10c23db1837906eb373a247739e2734b051103d05bd06af113757b2dc33c7e56be328d663b10a354a3e3887b9c453de24f2521b5ace6b8076d9847699ed00b6f5d59e641267e1db4d41bd8ffa3ac66ec848cd95b5abbea247ec07886736c593aae3d68cb53b93f05b9f20662055f41bc8a94514f6fc734400e77ba0d8b1e21e7b3b78cea6424c9e9cfeb732683f3ef2430cd587f1f93c6f3e1cb8e3bc81be9a9b74e9b9480347e891c9f08042bf5e9ef0fa2554c04414624cac2ade6d88136a7b3de9a9c3511653a70efe26207e0a8491550eab0c58cf430f0743e7aa0ff407b622569f016b6831ac7add2e0ac2f1bde438492cc4ff3a9b6e3829eef2a8892fdfae85eafb5b8daf04052963ba055ad770f2394d5a90cdc45e24cf156811f0310fdd65b1436142be93d0e47e1335c8010836bda2421574c960293d2eea14ffd869caf150a1eb2ad8d486603e5f1ca6ac041fd95d44b62972fba44d05c4f3a518f18e585352f7b813c4a7a17167017d0a2cadeffddeac9893c56e4bf0258f4aaf4b83f926962f99c0e9cd2977e7ffef9fdd7933e69566efc76355e2a171acc1506c2457d601cfc6da1213c1e8f1d566613a332623a8e4befb358b0e20cd16c6f4f073dafa9717d3eb215bc4b311f18cbca5c622cadb9e4335cf4cf17309746e1671d820b7880bdc9966995a34e0b0cfdde3c33d00c55c1b0a292337ef9e025d858eed1ecbc8ed4df0e59d5692676103145cff8f5ec7d961ecd792b4d61a4d13dcc7ee8cdf301d1cb30284c169ecaac1c0e2d44f270165f412c6eb08ab0d4c5dcdb348aa7a826be39b0ebeddf29e85c2430b7e9d8448a65b1f88907021e20c8a87b837fae194e514dcf6adebb0a3fc28556a01cb5e1069a6c95b2c5a7db53ef6d8ed457453aee8e1d2d20de5f5c4796d6f919d9f53e4f1b010aa6e43b364f8a6d5656bed565e87323d1920e5dcdc480b99a939ba0d71c0621ec619ac392fc779115500bfdb5f4ce51a8a65f13e76c1229fae3598d1f71a5be4d2ad0cad64f41007f82e84c90d182ce024868f69b23866b123475012b0b46b0ab62f8d06b6af5b5b42dd7c85041d34acc419a37aaeec914e8fb441df1fed4f9aad007bb42a7acb7e5236a952afde3d08fbc5c8e55424c1a521c68999280f601bba467c7b69d0b277f3497340826997a09d9409136dff0a4205fc657f79bd0741d3289dd0ab27a5a1e1815988efd6555f14a2042a374cd3fb89e175457252a97301b5b353d2a42d3832dfc30ecf63183aaa4f9a7db37d4fff1faaf7c66913b241fc0f2cc01ab441c73a82fe413f1fda84971a9ca2c00b94baf53eb9220c780a3dd15626aad081510d27f18d1cf539e436b6679b034aacc195bf34fe9e87f7d0aa88d66616bdc1706e13a75c2f0180eb35a1fc24f49d5493ed812c152a3ffcef80360737f1068398c2d57b2d61d2779e7d2e78088eec2d10859e68f12579c3087a37d24a609165e181c26aaee8f6f3d870f661b39db5b727713474f174e0e303fc45fd48c259b24b437d428e0194f4a8d6b5047b6d3c39be964b305a48acad73b0c3c583a715cb84993f14c83e5cc7bdecef29baf531ae3bf29170d0215241c32cf1d9882e774b19abda16c0b5629f05ac07d32f900e9475000c71f6c464b385ef25a2eaa7ca014af347ca158a224cbeb0f0da01cb55ed075d45c81746e78a3f5325074c8eaf5a934ce2e0104e07215500dbcd16ca9708e6cb1ee35fad769bf33f5300e540423175beeb3388ad8769caa2a86edc2a901b31020ba2fb4120b19195a3f5bf89ed4439f9496e8263b17239f8a11be40449122d31fc9f88af3244965496caa13846553e65964e4450625eed92e02900c131c3f58fc75b4ca5f342d8bb2df31f2891c5bf1f9fc94e0e8d1dc33882d5570afac0737e8add553ec6000f5ef6321b320c8784f173b7b56e55e14a47da67402293b70a144d70f3d81bac526aed5aede5700d2c8e393ad3700f8f5abee2baceec5338f04b7263afe8c4d2aacff2745e9960b11c68598fc2893e0c6413733eb658a6d45340ffadb99f47299e81e99eaaace30b8ef8ee9f50f71d4ce94405293173cb73462d3e683592a0b0a456c68f20e97eb431199ad1e22f009ed69d7efd7e98cd82308569e2f9f1b139abc6a1d53ee6eee1e26b94f9f43a60fb4628a040987f8581ff3f2802808edbcba00b4ed7b6b4959a1f453389ac7dd9167b4cbc21ddfbd517fafd9a94ecdc4843096669464fce92a2221927238a4e26ee888aa742e7ac8d25a3304ba4f38dfb7cae094fbac66d9e939348e9b84f37b6548d2dd70eb0f76f1d1d136a74ed3f215e5b822a24d7d1987548dc8efc69eadbe42d48d380003803400018004000300080001004eaa00000b0002006d756c746971000004000300040003000f00020073797a6b616c6c657230000063f2833ac40ebb4905e6b3ffccf47ca28dee22f484097b030cc8bd865a25dcd7c653e2883372319dc55de4d9162102d5ad6d6212332743612e5b1d53570dfe9c3b43dbc2264bb0fc8742c7066ccd4f0b71efcaece18a4f025655f1523cf0f7fbbd59fe86257717c4ca913f88846f75c9d82a361bec55f9e0ee14bbb3af619959e0"], 0x119c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0x836fa7871d73e1a8, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x2, 0x8, 0x6, 0x2, 0x1, 0xef0000, 0xff}}, {0x0, 0x2, [0x6, 0x7, 0x5]}}, {{0x0, 0x1, {0x7f, 0x2, 0xc, 0x5, 0x1, 0x401, 0x9}}, {0x0, 0x2, [0x5, 0x62ff, 0x6]}}, {{0x0, 0x1, {0x8, 0x28, 0x5, 0x3, 0x1, 0xfffffffb, 0x1b}}, {0x0, 0x2, [0x5, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x9d}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0x836fa7871d73e1a8, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x2, 0x8, 0x6, 0x2, 0x1, 0xef0000, 0xff}}, {0x0, 0x2, [0x6, 0x7, 0x5]}}, {{0x0, 0x1, {0x7f, 0x2, 0xc, 0x5, 0x1, 0x401, 0x9}}, {0x0, 0x2, [0x5, 0x62ff, 0x6]}}, {{0x0, 0x1, {0x8, 0x28, 0x5, 0x3, 0x1, 0xfffffffb, 0x1b}}, {0x0, 0x2, [0x5, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x9d}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.288445718s ago: executing program 2 (id=2981): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/15, 0xf) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003000)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/5, 0x5}], 0x7, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/151, 0x97}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000000b00)=""/39, 0x27}], 0x4}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000000c00)=""/72, 0x48}, {&(0x7f0000000c80)=""/184, 0xb8}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/202, 0xca}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/90, 0x5a}], 0x8}}], 0x3, 0x1, &(0x7f00000030c0)={0x0, 0x3938700}) 3.191941477s ago: executing program 0 (id=2982): socket$phonet(0x23, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, 0x36, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3.060044441s ago: executing program 0 (id=2983): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x24664885dea98ba5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000ffffffffffffffa200001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.921213368s ago: executing program 2 (id=2985): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000a10008000000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x3, 0xc1, 0xfffffffd, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{0x4}, 0x3, 0x2, 0x0, 0x0, "03af03b06876073f"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000844}, 0x480c4) 2.875714142s ago: executing program 0 (id=2986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000884}, 0x20000000) 2.780154999s ago: executing program 1 (id=2987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x20, 0x2d, 0x107, 0x70bd2c, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x340000c5}, 0x4008030) 2.729313608s ago: executing program 2 (id=2988): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffff9}, [@generic={0x91, 0x1, 0x1, 0x6c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) splice(r0, &(0x7f00000001c0)=0x6, r1, &(0x7f0000000200)=0x5, 0xffffffffffffffff, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002a80)=ANY=[], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="f02600001900010028bd7000fbdbdf251d010900500012804900d58033ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c42640000008c26068088"], 0x26f0}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.672542335s ago: executing program 0 (id=2989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a0000000000006111900000000000180000000000000000000000000095000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 2.516399042s ago: executing program 1 (id=2990): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00010000031401002abd700001dcdf250900020073797a31000000000800410073a825533a09b6cc771b91cba5a86977001400330076657468315f746f5f626f6e6400000009000200730000000008004100736977001400330077673200000000000000000000000000090002e772797a30000000000800410073697700140033007665746830000000000000000000000009000200010000000000000008004100727865001400330070696d726567310000000000000000000900020073797a30000000000800410072786500140033006c"], 0x100}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008080) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) 2.512213456s ago: executing program 0 (id=2991): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d2d5f2c2829"], 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x40040) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x120, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x120, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1e9, 0x8, 0x1, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2a8) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x2, 0x1, 0x0, @empty, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x4, 0x9, {0x25, 0x4, 0x0, 0x7, 0x2, 0x65, 0x0, 0xff, 0x1, 0x7, @multicast2, @loopback, {[@noop, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x27, 0x44, [@rand_addr=0x64010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, @multicast1, @private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2]}, @noop, @ssrr={0x89, 0xb, 0xc3, [@loopback, @local]}, @lsrr={0x83, 0x2b, 0x9e, [@private=0xa010100, @multicast2, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010101, @multicast2, @rand_addr=0x64010102, @multicast2, @multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xcd, [@local, @loopback, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r1], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x2404c840) 2.419749941s ago: executing program 1 (id=2992): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30000000100005ff00000000000000000000004aac1cbb469d25603184ec321d0121f1cd01ff33d37ad8196cb489d48ef433cbe845014107000000000000003401860853d7e0dbdeb74e371b25784c607948bf30ace8ffc4eb8237e8a749d8c116fdec46af8f96622c96f5a45a53cb4a02ab36e47f04342e2859a425e542bca924fbcaf74e9e6d3f86b29e669d7759788d9929bea56f7c2c451532cb1549df5ae58dd9c4b8a11acf5316565f403110ad37458fc9bf54ae0a46c921f0b6ae6744745419217910cc0a6b708bfc7eb763356c8c2472003f7b35", @ANYRES32=0x0, @ANYBLOB="000000000000000010001280080001007369740004000280"], 0x30}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="a50a00000500000061112400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000020100100000100000000000000000000001800000000000000100100000c000000aa00000000000000"], 0x30}, 0xfc40) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000102400000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000002f00090027bd0c000000000044000000080018000aac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x4046800}, 0x4000014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x14004040) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r6) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x2, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2.390222523s ago: executing program 2 (id=2993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) (async) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) (async) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x206980, 0x0) write$tun(r5, &(0x7f0000000400)={@val={0x0, 0x88e7}, @val={0x1, 0x1, 0x5, 0x1, 0x8, 0x5}, @x25={0x0, 0x9, 0x5, "8b33e48dd3b509657c2dd459e843ce603f9b71fefa1a05fe0a411f162066b51581587d4ab68b23ee66434cd09f0346e21ec39cee03678e25b836103260cbcde810dda1ff31c4382fb5863a9d05f6182e952141b0c616f2d8fd3b"}}, 0x6b) (async) write$tun(r5, &(0x7f0000000400)={@val={0x0, 0x88e7}, @val={0x1, 0x1, 0x5, 0x1, 0x8, 0x5}, @x25={0x0, 0x9, 0x5, "8b33e48dd3b509657c2dd459e843ce603f9b71fefa1a05fe0a411f162066b51581587d4ab68b23ee66434cd09f0346e21ec39cee03678e25b836103260cbcde810dda1ff31c4382fb5863a9d05f6182e952141b0c616f2d8fd3b"}}, 0x6b) 2.007108875s ago: executing program 3 (id=2994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/15, 0xf) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003000)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/5, 0x5}], 0x7, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/151, 0x97}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000000b00)=""/39, 0x27}], 0x4}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000000c00)=""/72, 0x48}, {&(0x7f0000000c80)=""/184, 0xb8}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/202, 0xca}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/90, 0x5a}], 0x8}}], 0x3, 0x1, &(0x7f00000030c0)={0x0, 0x3938700}) 1.974659325s ago: executing program 3 (id=2995): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x24664885dea98ba5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000e300001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.899525012s ago: executing program 1 (id=2996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6e4e9a1d78ad62ceef1884308000000000000008180ca8395ccfda2e4993c8cf581", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0xf3904009901c17ea) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'veth0_to_team\x00', 0x20}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000004c0)=0xfffffffd) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x1, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0xa7, 0x1, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xffc, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @local}) 1.84423118s ago: executing program 0 (id=2997): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 1.755480451s ago: executing program 3 (id=2998): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000300)=0x80008, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f00000001c0)) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000a10008000000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/12, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000040000000302000003af03b06876073f"], 0x48}, 0x1, 0x0, 0x0, 0x24000844}, 0x480c4) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e46a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc6c875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0x9b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)={r10, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000280)={r10, 0x0, 0x5, [0x8, 0x100, 0x0, 0x4, 0x6]}, 0x12) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) 1.69099055s ago: executing program 2 (id=2999): r0 = socket(0x29, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0100000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000006f13691ddf5eee06e3"], 0x50) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x607, 0x6, 0x4101, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x1}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x1, 'rr\x00', 0x9, 0xf, 0x59}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x18, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r11, @ANYBLOB="4000308014000400403a050c5baee2004ef2b6d713459a7a200001800800010016f3175d140003800800020002000000060001000003000005000200"], 0x5c}}, 0x0) close(0x4) socket$inet6_udp(0xa, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000640)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e23, 0x4373, @private2, 0x1}}}, &(0x7f0000000500)=0x84) 1.178701217s ago: executing program 2 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0x10, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x4040004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4d, 0x0, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01008000000005dcdf2501000000080056ce", @ANYRES32=r10, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000008000008000600", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x400000000000000}, 0x0) (async) unshare(0x100000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0xbc, 0x4, 0x3, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0xbe, 0x7fff}}) (async) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f00000013c0)={0x998, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7a8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa1b1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r7}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x4}, {0x8, 0x4, 0xbf}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4f}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x4844}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x14, 0x4, 0x0, 0x0, 0x0, 0x6, 0x3}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_FLOW={0x8}]}, 0x34}}, 0x40010) 1.150703865s ago: executing program 1 (id=3001): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x2, 0x5, 0x10000, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xc}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000100000005000000fbff000000000000000000002e"], 0x0, 0x3a}, 0x28) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000ff7f000000000016009aaa00009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0022, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4001010}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6122c30820699471faa123fc574414033583562bef03c5b01b30ecffcdb110bd751d861d1fe850e7c16a1"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001010a421b211f6cdffaa7c8ec2255bab001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xd6, 0x0, 0x0, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x8, 0x40, 0x10001, 0x7f}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.073650659s ago: executing program 3 (id=3002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000890000000800000002"], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000480), &(0x7f0000000280)=@udp=r3, 0x1}, 0x20) recvmmsg$unix(r3, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1}}], 0x1, 0x10041, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0xa4ff) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0xe, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRES16=r10, @ANYBLOB="10030000001b0000000208008000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8051}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newrule={0x17, 0x20, 0x1, 0x2000, 0x25dfdbf6, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x12}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 882.323198ms ago: executing program 4 (id=2894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) unshare(0x28040680) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, &(0x7f00000002c0)='ps}', &(0x7f0000000300)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) (async, rerun: 32) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) write$bt_hci(r6, &(0x7f0000000140)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x580, 0xf8, 0x1c8, 0x3c8, 0xf8, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc0}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x318, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x2e8, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x94, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x7}, {0xc, 0x4, 0xfc9}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0xfffffffffffffffb}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x3ff}, {0xc, 0x4, 0x20}, {0xc, 0x4, 0xd48}, {0xc}, {0xc, 0x4, 0xa79}, {0xc, 0x4, 0x7}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MIN_RATE64={0x58, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x23}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x800}, {0xc, 0x3, 0x6}, {0xc}, {0xc, 0x3, 0x7}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x1}, {0xc}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xb}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x713}, {0xc, 0x3, 0x100000001}]}, @TCA_MQPRIO_MAX_RATE64={0x88, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0x81}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xffffffff00000000}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x130}, {0xc, 0x4, 0x8d9}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xd}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x40, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x3}, {0xc, 0x3, 0x1ff}, {0xc, 0x3, 0x53fb}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x10001}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x4}, {0xc, 0x4, 0x7fff}, {0xc, 0x4, 0xbd}, {0xc, 0x4, 0x7f}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}]}]}}}]}, 0x318}}, 0x20000000) (async) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48010) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r9, 0x40285881, &(0x7f00000000c0)={r4, 0x0, 0x4, 0x5, 0x1b000, 0x1}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {}, {}, {}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) (async, rerun: 64) r11 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x4040) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x2}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r12, @ANYBLOB="02042fbd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008028e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000002008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000000001006e657464657673696d000000000002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x11c}, 0x1, 0x0, 0x0, 0x14}, 0x40) 215.18254ms ago: executing program 3 (id=3004): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/15, 0xf) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003000)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/5, 0x5}], 0x7, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/151, 0x97}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000000b00)=""/39, 0x27}], 0x4}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000000c00)=""/72, 0x48}, {&(0x7f0000000c80)=""/184, 0xb8}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/202, 0xca}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/90, 0x5a}], 0x8}}], 0x3, 0x1, &(0x7f00000030c0)={0x0, 0x3938700}) 0s ago: executing program 3 (id=3005): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0xc0800) accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000100)='%-\x00', 0x0, &(0x7f0000000140)={@align=0x8, {0x1, 0x2, 0x8, 0x6}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x9}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001280)={@vsock={0x28, 0x0, 0x2711}, {&(0x7f0000000240)=""/4096, 0x1000}, &(0x7f0000001240), 0x60}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001280)={@vsock={0x28, 0x0, 0x2711}, {&(0x7f0000000240)=""/4096, 0x1000}, &(0x7f0000001240), 0x60}, 0xa0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f0000001340)=[0x2, 0x1]) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f0000001340)=[0x2, 0x1]) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000013c0)=@generic={&(0x7f0000001380)='./file0\x00', r3}, 0x18) sendmsg$AUDIT_USER(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, 0x3ed, 0x204, 0x70bd2b, 0x25dfdbff, "9377ea7716042d8c6c177ce110b962367fb2072c6ccaa0", ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000001500)=r4) r5 = accept4$alg(r3, 0x0, 0x0, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001540), r6) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xc8, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2d}}}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x40800) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xc8, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2d}}}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x40800) socketpair(0x2a, 0x3, 0x7, &(0x7f0000001740)) (async) socketpair(0x2a, 0x3, 0x7, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a40)=0x14) (async) getpeername$packet(r3, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a40)=0x14) sendmsg$inet(r9, &(0x7f0000001b80)={&(0x7f0000001780)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000017c0)="a46dba1a2cdd14d419fd885e6f802eeadae270e7016f1f84508b8b9510fd1800bb61a271cc0239b9e1f3351e0d159b57a0dd1075", 0x34}, {&(0x7f0000001800)="417727d0e2395f006f16a53942526dfbf65e1e0906f932b03c6eb10cf7764828ebae790b96051c473362ba6591e550f7edd4deac2c12b061da3db37d3fb0ffbb4be0f000c5fc17da0452a6a3ba8149c7a365fb7b105aab44a589764b28b3baf4dd013d523b01757ebf022d5356117affcc16d78124c559c919917d6b5e868da7caa452b1c66e7c6fa3602f0639949738c8760c6c8fe9ba1be5d8b62de2841d762dc1755d9f5e2c", 0xa7}, {&(0x7f00000018c0)="e3c3cb6859ad24d2bea53c1c32faffd5a4c10ad523e125296e417da7e482068d9514954f86f885b99458a5b2d3dd240eaac03b32bf54fe4b", 0x38}, {&(0x7f0000001900)="ebdc97abccea9cd21d812126b1bd552c8a64e4ef4e7cb0fbb5111e96e97bb534353d02176717b76d1351506afe0f26e555ce5991bb427ff6162bb30a13a7c2ecbd5001c615c92118a780f3fed5c30de8343ee74813af2de6e4ca936a22fe1bb438078b515d772cabee9b04d82847629ac9de70ab7d6ca29a09b346864ea9a8306b6eb57d3275c63fe7ca0b930aa2d5504f19099e4f836be1eb507bad51ad35875d1ba2249f341d1c5ceea247cfdb43b16b6a963dc5", 0xb5}], 0x4, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010102, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xf1, 0x0, 0x6, [0x32b, 0x80, 0x1, 0x8001, 0xbf, 0x1]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xd0}, 0x4048004) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000001c80)={&(0x7f0000001bc0), 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x4040) splice(r8, &(0x7f0000001cc0), r1, &(0x7f0000001d00)=0xfffffffffffffffe, 0x5, 0x9) (async) splice(r8, &(0x7f0000001cc0), r1, &(0x7f0000001d00)=0xfffffffffffffffe, 0x5, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{r5}, &(0x7f0000001d40), &(0x7f0000001d80)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{r5}, &(0x7f0000001d40), &(0x7f0000001d80)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0x94, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000081}, 0x40) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000001fc0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002040)={{{@in=@multicast1, @in6}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000002140)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002040)={{{@in=@multicast1, @in6}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000002140)=0xe8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r12, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x3c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) getpeername(r5, &(0x7f0000002280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000002300)=0x80) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x38}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x88000}, 0x8041) (async) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x38}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x88000}, 0x8041) kernel console output (not intermixed with test programs): *4096kB (M) = 15360kB [ 345.628097][T13005] Node 0 DMA32: 779*4kB (UME) 568*8kB (UME) 664*16kB (UME) 603*32kB (UME) 103*64kB (UME) 160*128kB (UM) 127*256kB (UME) 23*512kB (UM) 16*1024kB (UM) 9*2048kB (UME) 193*4096kB (UM) = 934284kB [ 345.628239][T13005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.628329][T13005] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 5*16kB (UM) 6*32kB (UM) 4*64kB (UM) 3*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939500kB [ 345.628490][T13005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.628605][T13005] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.628621][T13005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.628635][T13005] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.628649][T13005] 44076 total pagecache pages [ 345.628656][T13005] 0 pages in swap cache [ 345.628663][T13005] Free swap = 124996kB [ 345.628669][T13005] Total swap = 124996kB [ 345.628677][T13005] 2097051 pages RAM [ 345.628683][T13005] 0 pages HighMem/MovableOnly [ 345.628690][T13005] 428722 pages reserved [ 345.628696][T13005] 0 pages cma reserved [ 345.777464][T13007] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 345.826319][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 346.524856][T13009] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1676'. [ 346.724789][T13012] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1676'. [ 347.227728][T13044] No such timeout policy "syz0" [ 347.342712][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 347.536934][T13053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1685'. [ 347.560120][T10904] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 347.606078][T13046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.707953][T13053] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 347.885575][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 349.339913][T13107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.866619][T13112] xt_hashlimit: size too large, truncated to 1048576 [ 350.943624][T13080] geneve3: left promiscuous mode [ 350.943648][T13080] geneve3: left allmulticast mode [ 351.012285][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.012380][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.012450][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.113339][ T40] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.287481][T13123] bond11: entered promiscuous mode [ 351.554679][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 351.554743][T13141] netlink: 'syz.2.1704': attribute type 20 has an invalid length. [ 351.554774][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 351.836596][T13150] batadv0: entered promiscuous mode [ 351.836618][T13150] batadv0: entered allmulticast mode [ 352.215663][T13166] xt_MASQUERADE: bad rangesize 20224 [ 352.978883][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'. [ 352.978940][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 353.064281][T13208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1719'. [ 353.174975][T13201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'. [ 353.312042][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1718'. [ 355.193677][T13276] syzkaller0: entered promiscuous mode [ 355.193734][T13276] syzkaller0: entered allmulticast mode [ 355.220212][T13276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1730'. [ 355.259014][T13276] tipc: Started in network mode [ 355.259077][T13276] tipc: Node identity 0277eeef135b, cluster identity 4711 [ 355.289451][T13276] tipc: Enabled bearer , priority 0 [ 355.330475][T13289] ip6gretap0: entered promiscuous mode [ 355.338225][T13289] ip6gretap0: left promiscuous mode [ 355.471457][T13280] tipc: Resetting bearer [ 355.544245][T13275] tipc: Resetting bearer [ 355.689014][T13275] tipc: Disabling bearer [ 356.330956][T13320] net_ratelimit: 493 callbacks suppressed [ 356.331044][T13320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.646985][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 356.647010][T13328] openvswitch: netlink: Flow key attribute not present in set flow. [ 356.647252][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 356.647266][T13330] openvswitch: netlink: Flow key attribute not present in set flow. [ 357.354784][T13336] nbd1: detected capacity change from 0 to 63 [ 357.633359][ T5624] block nbd1: Receive control failed (result -104) [ 358.479171][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 358.837229][T13396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1754'. [ 359.614616][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1764'. [ 359.733849][T13436] netlink: 105 bytes leftover after parsing attributes in process `syz.4.1764'. [ 360.078167][T13452] FAULT_INJECTION: forcing a failure. [ 360.078167][T13452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.078202][T13452] CPU: 1 UID: 0 PID: 13452 Comm: syz.2.1769 Not tainted syzkaller #0 PREEMPT(full) [ 360.078224][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.078235][T13452] Call Trace: [ 360.078325][T13452] [ 360.078411][T13452] dump_stack_lvl+0xe8/0x150 [ 360.078558][T13452] should_fail_ex+0x410/0x560 [ 360.078698][T13452] prepare_alloc_pages+0x223/0x600 [ 360.078750][T13452] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 360.078774][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 360.078828][T13452] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 360.078851][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 360.078876][T13452] ? __pfx_policy_nodemask+0x10/0x10 [ 360.078904][T13452] ? __get_vm_area_node+0x155/0x2f0 [ 360.078941][T13452] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 360.078965][T13452] ? __vmalloc_noprof+0xd2/0x120 [ 360.078994][T13452] __alloc_pages_noprof+0x10/0x100 [ 360.079015][T13452] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 360.079042][T13452] ? alloc_pages_noprof+0x140/0x2b0 [ 360.079069][T13452] __kasan_populate_vmalloc+0xb7/0x1c0 [ 360.079094][T13452] alloc_vmap_area+0xd1a/0x1420 [ 360.079133][T13452] ? __pfx_alloc_vmap_area+0x10/0x10 [ 360.079156][T13452] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 360.079178][T13452] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 360.079197][T13452] ? __get_vm_area_node+0x155/0x2f0 [ 360.079228][T13452] __get_vm_area_node+0x200/0x2f0 [ 360.079261][T13452] __vmalloc_node_range_noprof+0x343/0x1540 [ 360.079289][T13452] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 360.079335][T13452] ? bpf_prog_update_insn_ptrs+0x46f/0x4b0 [ 360.079408][T13452] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.079440][T13452] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 360.079491][T13452] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 360.079511][T13452] __vmalloc_noprof+0xd2/0x120 [ 360.079537][T13452] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 360.079563][T13452] bpf_prog_alloc_no_stats+0x47/0x560 [ 360.079588][T13452] bpf_jit_subprogs+0xb04/0x4590 [ 360.079635][T13452] bpf_check+0x1ca8/0x2ef0 [ 360.079675][T13452] ? __pfx_bpf_check+0x10/0x10 [ 360.079699][T13452] ? bpf_obj_name_cpy+0x194/0x1e0 [ 360.079729][T13452] bpf_prog_load+0x14d6/0x1c20 [ 360.079764][T13452] ? __pfx_bpf_prog_load+0x10/0x10 [ 360.079811][T13452] __sys_bpf+0xd0d/0xd90 [ 360.079839][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 360.079870][T13452] ? __fget_files+0x2a/0x420 [ 360.079924][T13452] ? ksys_write+0x242/0x270 [ 360.079964][T13452] ? __pfx_ksys_write+0x10/0x10 [ 360.079996][T13452] __x64_sys_bpf+0xba/0xd0 [ 360.080019][T13452] do_syscall_64+0x166/0x520 [ 360.080156][T13452] ? trace_irq_disable+0x3b/0x140 [ 360.080173][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.080234][T13452] ? clear_bhb_loop+0x70/0xc0 [ 360.080256][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.080274][T13452] RIP: 0033:0x7f78ae19e159 [ 360.080326][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.080349][T13452] RSP: 002b:00007f78af0a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.080377][T13452] RAX: ffffffffffffffda RBX: 00007f78ae425fa0 RCX: 00007f78ae19e159 [ 360.080390][T13452] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 360.080402][T13452] RBP: 00007f78af0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 360.080413][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.080423][T13452] R13: 00007f78ae426038 R14: 00007f78ae425fa0 R15: 00007ffd4ecf30f8 [ 360.080451][T13452] [ 360.329002][T13452] syz.2.1769: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 360.329129][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.2.1769 Not tainted syzkaller #0 PREEMPT(full) [ 360.329151][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.329166][T13452] Call Trace: [ 360.329177][T13452] [ 360.329184][T13452] dump_stack_lvl+0xe8/0x150 [ 360.329217][T13452] warn_alloc+0x24d/0x270 [ 360.329237][T13452] ? lockdep_hardirqs_on+0x7b/0x110 [ 360.329338][T13452] ? __pfx_warn_alloc+0x10/0x10 [ 360.329355][T13452] ? kfree+0x1c5/0x650 [ 360.329386][T13452] ? __get_vm_area_node+0x219/0x2f0 [ 360.329418][T13452] __vmalloc_node_range_noprof+0x36b/0x1540 [ 360.329445][T13452] ? bpf_prog_update_insn_ptrs+0x46f/0x4b0 [ 360.329496][T13452] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.329527][T13452] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 360.329555][T13452] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 360.329575][T13452] __vmalloc_noprof+0xd2/0x120 [ 360.329600][T13452] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 360.329624][T13452] bpf_prog_alloc_no_stats+0x47/0x560 [ 360.329648][T13452] bpf_jit_subprogs+0xb04/0x4590 [ 360.329693][T13452] bpf_check+0x1ca8/0x2ef0 [ 360.329729][T13452] ? __pfx_bpf_check+0x10/0x10 [ 360.329751][T13452] ? bpf_obj_name_cpy+0x194/0x1e0 [ 360.329787][T13452] bpf_prog_load+0x14d6/0x1c20 [ 360.329819][T13452] ? __pfx_bpf_prog_load+0x10/0x10 [ 360.329865][T13452] __sys_bpf+0xd0d/0xd90 [ 360.329893][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 360.329923][T13452] ? __fget_files+0x2a/0x420 [ 360.329964][T13452] ? ksys_write+0x242/0x270 [ 360.329993][T13452] ? __pfx_ksys_write+0x10/0x10 [ 360.330023][T13452] __x64_sys_bpf+0xba/0xd0 [ 360.330042][T13452] do_syscall_64+0x166/0x520 [ 360.330064][T13452] ? trace_irq_disable+0x3b/0x140 [ 360.330081][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.330101][T13452] ? clear_bhb_loop+0x70/0xc0 [ 360.330123][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.330139][T13452] RIP: 0033:0x7f78ae19e159 [ 360.330156][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.330176][T13452] RSP: 002b:00007f78af0a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.330195][T13452] RAX: ffffffffffffffda RBX: 00007f78ae425fa0 RCX: 00007f78ae19e159 [ 360.330208][T13452] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 360.330220][T13452] RBP: 00007f78af0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 360.330230][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.330241][T13452] R13: 00007f78ae426038 R14: 00007f78ae425fa0 R15: 00007ffd4ecf30f8 [ 360.330271][T13452] [ 360.343520][T13452] Mem-Info: [ 360.343551][T13452] active_anon:6362 inactive_anon:0 isolated_anon:0 [ 360.343551][T13452] active_file:2 inactive_file:43420 isolated_file:0 [ 360.343551][T13452] unevictable:0 dirty:299 writeback:0 [ 360.343551][T13452] slab_reclaimable:11190 slab_unreclaimable:106415 [ 360.343551][T13452] mapped:29755 shmem:669 pagetables:1325 [ 360.343551][T13452] sec_pagetables:0 bounce:0 [ 360.343551][T13452] kernel_misc_reclaimable:0 [ 360.343551][T13452] free:1222074 free_pcp:10411 free_cma:0 [ 360.343619][T13452] Node 0 active_anon:25448kB inactive_anon:0kB active_file:8kB inactive_file:173480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119020kB dirty:1196kB writeback:0kB shmem:2676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15752kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 360.343711][T13452] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 360.343785][T13452] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.343873][T13452] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 360.343939][T13452] Node 0 DMA32 free:933436kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25448kB inactive_anon:0kB active_file:8kB inactive_file:173480kB unevictable:0kB writepending:1196kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:41644kB local_pcp:21100kB free_cma:0kB [ 360.344010][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 360.344071][T13452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.344138][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 360.344204][T13452] Node 1 Normal free:3939500kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.344273][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 360.344335][T13452] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 360.344530][T13452] Node 0 DMA32: 719*4kB (UME) 162*8kB (UME) 181*16kB (UME) 622*32kB (UME) 144*64kB (UME) 174*128kB (UM) 128*256kB (UME) 21*512kB (UM) 16*1024kB (UM) 4*2048kB (UE) 197*4096kB (UM) = 933468kB [ 360.344823][T13452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 360.344989][T13452] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 5*16kB (UM) 6*32kB (UM) 4*64kB (UM) 3*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939500kB [ 360.345253][T13452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.345283][T13452] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 360.345319][T13452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.345348][T13452] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 360.345378][T13452] 44087 total pagecache pages [ 360.345388][T13452] 0 pages in swap cache [ 360.345410][T13452] Free swap = 124996kB [ 360.345417][T13452] Total swap = 124996kB [ 360.345424][T13452] 2097051 pages RAM [ 360.345446][T13452] 0 pages HighMem/MovableOnly [ 360.345452][T13452] 428722 pages reserved [ 360.345461][T13452] 0 pages cma reserved [ 361.235156][T13462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1772'. [ 361.572554][T13469] netlink: 'syz.4.1773': attribute type 4 has an invalid length. [ 361.853465][T13489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1774'. [ 361.906667][T13475] syzkaller0: entered promiscuous mode [ 361.906723][T13475] syzkaller0: entered allmulticast mode [ 362.019653][T13492] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 362.184623][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1778'. [ 362.210205][T13496] netlink: 'syz.0.1779': attribute type 2 has an invalid length. [ 362.331588][T13504] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1782'. [ 362.331616][T13504] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1782'. [ 362.473478][T13508] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1783'. [ 362.473831][T13508] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1783'. [ 363.673156][T13515] netlink: 'syz.3.1784': attribute type 15 has an invalid length. [ 363.673178][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1784'. [ 363.990908][ T1968] block nbd1: Connection timed out, retrying (0/1 alive) [ 363.991449][ T1968] block nbd1: Connection timed out, retrying (0/1 alive) [ 363.991497][ T1968] block nbd1: Connection timed out, retrying (0/1 alive) [ 363.994599][ T1968] block nbd1: Connection timed out, retrying (0/1 alive) [ 363.995134][ T1968] block nbd1: Dead connection, failed to find a fallback [ 363.995152][ T1968] block nbd1: shutting down sockets [ 363.995274][ T1968] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.006338][ T1968] Buffer I/O error on dev nbd1, logical block 3, async page read [ 364.006578][ T1968] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.006607][ T1968] Buffer I/O error on dev nbd1, logical block 2, async page read [ 364.006628][ T1968] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.006649][ T1968] Buffer I/O error on dev nbd1, logical block 1, async page read [ 364.006668][ T1968] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.006688][ T1968] Buffer I/O error on dev nbd1, logical block 0, async page read [ 364.015552][T13549] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.1794'. [ 364.045794][ T4947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.045857][ T4947] Buffer I/O error on dev nbd1, logical block 0, async page read [ 364.046551][ T4947] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.046613][ T4947] Buffer I/O error on dev nbd1, logical block 1, async page read [ 364.047660][ T4947] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.047716][ T4947] Buffer I/O error on dev nbd1, logical block 2, async page read [ 364.047987][ T4947] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.048026][ T4947] Buffer I/O error on dev nbd1, logical block 3, async page read [ 364.048248][ T4947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.048292][ T4947] Buffer I/O error on dev nbd1, logical block 0, async page read [ 364.048967][ T4947] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 364.049007][ T4947] Buffer I/O error on dev nbd1, logical block 1, async page read [ 364.060929][T10965] ldm_validate_partition_table(): Disk read failed. [ 364.069060][T10965] Dev nbd1: unable to read RDB block 0 [ 364.087413][T10965] nbd1: unable to read partition table [ 364.122112][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 364.217854][T10965] ldm_validate_partition_table(): Disk read failed. [ 364.227199][T10965] Dev nbd1: unable to read RDB block 0 [ 364.248623][T10965] nbd1: unable to read partition table [ 364.358382][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 364.622321][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 365.153933][ T5279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.448096][T13579] syz_tun: Device is already in use. [ 365.494536][T13583] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 365.570109][T13584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.699297][T13629] netlink: 'syz.0.1804': attribute type 9 has an invalid length. [ 366.712985][T13631] syzkaller0: entered promiscuous mode [ 366.713022][T13631] syzkaller0: entered allmulticast mode [ 367.328895][T13653] __nla_validate_parse: 2 callbacks suppressed [ 367.328943][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 367.474880][T13663] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 367.474902][T13663] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1809'. [ 368.277089][T13684] veth0: entered promiscuous mode [ 368.277128][T13684] veth0: entered allmulticast mode [ 368.568358][T13696] netlink: 'syz.4.1816': attribute type 1 has an invalid length. [ 368.620636][T13665] netlink: 'syz.1.1807': attribute type 21 has an invalid length. [ 368.620662][T13665] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.620755][T13665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.620765][T13665] IPv6: NLM_F_CREATE should be set when creating new route [ 368.620806][T13665] IPv6: NLM_F_CREATE should be set when creating new route [ 368.620827][T13665] IPv6: NLM_F_CREATE should be set when creating new route [ 369.166232][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 369.166253][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 369.166276][T13715] netlink: 'syz.4.1820': attribute type 19 has an invalid length. [ 369.166289][T13715] netlink: 'syz.4.1820': attribute type 20 has an invalid length. [ 369.209307][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 369.209406][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 369.209432][T13715] netlink: 'syz.4.1820': attribute type 19 has an invalid length. [ 369.209445][T13715] netlink: 'syz.4.1820': attribute type 20 has an invalid length. [ 369.405189][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.405287][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.405355][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.410596][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1821'. [ 369.410999][T13720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1821'. [ 369.562873][ T147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.421721][T13759] netlink: 'syz.4.1832': attribute type 2 has an invalid length. [ 370.455329][T13760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1831'. [ 370.570106][T13761] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1832'. [ 370.577498][T13761] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.024642][T13785] netlink: 'syz.0.1834': attribute type 32 has an invalid length. [ 371.727818][T13810] 0: reclassify loop, rule prio 0, protocol 03 [ 372.301729][T13830] No such timeout policy "syz1" [ 373.023717][T13842] bond12: invalid ARP target 0.0.0.0 specified for addition [ 373.023744][T13842] bond12: option arp_ip_target: invalid value (0) [ 373.028814][T13842] bond12 (unregistering): Released all slaves [ 373.105435][T13846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1846'. [ 373.167794][T13846] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20004 [ 373.230898][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1850'. [ 374.208894][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1856'. [ 374.208920][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1856'. [ 374.324576][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1856'. [ 374.326447][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1856'. [ 374.416989][T13882] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1854'. [ 374.684168][T13910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1859'. [ 375.413131][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 375.604566][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 375.807154][T13949] openvswitch: netlink: Tunnel attr 166 out of range max 16 [ 376.322953][T13967] sch_tbf: burst 1520 is lower than device lo mtu (65505) ! [ 377.561198][T13968] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 377.725834][T13996] validate_nla: 2 callbacks suppressed [ 377.726032][T13996] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 377.804099][T13996] 8021q: adding VLAN 0 to HW filter on device bond12 [ 377.888485][T13996] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 377.952813][T14002] bond12: (slave veth15): Enslaving as an active interface with a down link [ 378.389237][T14023] FAULT_INJECTION: forcing a failure. [ 378.389237][T14023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 378.389272][T14023] CPU: 1 UID: 0 PID: 14023 Comm: syz.0.1879 Not tainted syzkaller #0 PREEMPT(full) [ 378.389292][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.389304][T14023] Call Trace: [ 378.389311][T14023] [ 378.389319][T14023] dump_stack_lvl+0xe8/0x150 [ 378.389351][T14023] should_fail_ex+0x410/0x560 [ 378.389378][T14023] prepare_alloc_pages+0x223/0x600 [ 378.389405][T14023] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 378.389429][T14023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.389449][T14023] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 378.389473][T14023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.389498][T14023] ? __pfx_policy_nodemask+0x10/0x10 [ 378.389526][T14023] __alloc_pages_noprof+0x10/0x100 [ 378.389547][T14023] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 378.389595][T14023] ? alloc_pages_noprof+0x140/0x2b0 [ 378.389623][T14023] __kasan_populate_vmalloc+0xb7/0x1c0 [ 378.389649][T14023] alloc_vmap_area+0xd1a/0x1420 [ 378.389690][T14023] ? __pfx_alloc_vmap_area+0x10/0x10 [ 378.389713][T14023] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 378.389733][T14023] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 378.389752][T14023] ? __get_vm_area_node+0x155/0x2f0 [ 378.389785][T14023] __get_vm_area_node+0x200/0x2f0 [ 378.389818][T14023] __vmalloc_node_range_noprof+0x343/0x1540 [ 378.389845][T14023] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 378.389875][T14023] ? bpf_prog_update_insn_ptrs+0x46f/0x4b0 [ 378.389926][T14023] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 378.389959][T14023] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 378.389990][T14023] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 378.390009][T14023] __vmalloc_noprof+0xd2/0x120 [ 378.390036][T14023] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 378.390061][T14023] bpf_prog_alloc_no_stats+0x47/0x560 [ 378.390086][T14023] bpf_jit_subprogs+0xb04/0x4590 [ 378.390133][T14023] bpf_check+0x1ca8/0x2ef0 [ 378.390176][T14023] ? __pfx_bpf_check+0x10/0x10 [ 378.390199][T14023] ? bpf_obj_name_cpy+0x194/0x1e0 [ 378.390230][T14023] bpf_prog_load+0x14d6/0x1c20 [ 378.390264][T14023] ? __pfx_bpf_prog_load+0x10/0x10 [ 378.390311][T14023] __sys_bpf+0xd0d/0xd90 [ 378.390341][T14023] ? __pfx___sys_bpf+0x10/0x10 [ 378.390372][T14023] ? __fget_files+0x2a/0x420 [ 378.390415][T14023] ? ksys_write+0x242/0x270 [ 378.390444][T14023] ? __pfx_ksys_write+0x10/0x10 [ 378.390476][T14023] __x64_sys_bpf+0xba/0xd0 [ 378.390498][T14023] do_syscall_64+0x166/0x520 [ 378.390523][T14023] ? trace_irq_disable+0x3b/0x140 [ 378.390541][T14023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.390559][T14023] ? clear_bhb_loop+0x70/0xc0 [ 378.390581][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.390599][T14023] RIP: 0033:0x7f95ff59e159 [ 378.390616][T14023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.390629][T14023] RSP: 002b:00007f96003b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.390648][T14023] RAX: ffffffffffffffda RBX: 00007f95ff825fa0 RCX: 00007f95ff59e159 [ 378.390661][T14023] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 378.390671][T14023] RBP: 00007f96003b2090 R08: 0000000000000000 R09: 0000000000000000 [ 378.390682][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.390693][T14023] R13: 00007f95ff826038 R14: 00007f95ff825fa0 R15: 00007fff6b681ca8 [ 378.390722][T14023] [ 378.525963][T13996] dummy0: entered promiscuous mode [ 378.550230][T14023] syz.0.1879: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 378.550363][T14023] CPU: 0 UID: 0 PID: 14023 Comm: syz.0.1879 Not tainted syzkaller #0 PREEMPT(full) [ 378.550384][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.550395][T14023] Call Trace: [ 378.550402][T14023] [ 378.550410][T14023] dump_stack_lvl+0xe8/0x150 [ 378.550442][T14023] warn_alloc+0x24d/0x270 [ 378.550462][T14023] ? lockdep_hardirqs_on+0x7b/0x110 [ 378.550489][T14023] ? __pfx_warn_alloc+0x10/0x10 [ 378.550505][T14023] ? kfree+0x1c5/0x650 [ 378.550535][T14023] ? __get_vm_area_node+0x219/0x2f0 [ 378.550569][T14023] __vmalloc_node_range_noprof+0x36b/0x1540 [ 378.550595][T14023] ? bpf_prog_update_insn_ptrs+0x46f/0x4b0 [ 378.550645][T14023] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 378.550676][T14023] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 378.550704][T14023] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 378.550728][T14023] __vmalloc_noprof+0xd2/0x120 [ 378.550757][T14023] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 378.550780][T14023] bpf_prog_alloc_no_stats+0x47/0x560 [ 378.550805][T14023] bpf_jit_subprogs+0xb04/0x4590 [ 378.550850][T14023] bpf_check+0x1ca8/0x2ef0 [ 378.550887][T14023] ? __pfx_bpf_check+0x10/0x10 [ 378.550909][T14023] ? bpf_obj_name_cpy+0x194/0x1e0 [ 378.550938][T14023] bpf_prog_load+0x14d6/0x1c20 [ 378.550970][T14023] ? __pfx_bpf_prog_load+0x10/0x10 [ 378.551015][T14023] __sys_bpf+0xd0d/0xd90 [ 378.551050][T14023] ? __pfx___sys_bpf+0x10/0x10 [ 378.551080][T14023] ? __fget_files+0x2a/0x420 [ 378.551122][T14023] ? ksys_write+0x242/0x270 [ 378.551151][T14023] ? __pfx_ksys_write+0x10/0x10 [ 378.551182][T14023] __x64_sys_bpf+0xba/0xd0 [ 378.551203][T14023] do_syscall_64+0x166/0x520 [ 378.551226][T14023] ? trace_irq_disable+0x3b/0x140 [ 378.551243][T14023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.551262][T14023] ? clear_bhb_loop+0x70/0xc0 [ 378.551283][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.551301][T14023] RIP: 0033:0x7f95ff59e159 [ 378.551317][T14023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.551332][T14023] RSP: 002b:00007f96003b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.551350][T14023] RAX: ffffffffffffffda RBX: 00007f95ff825fa0 RCX: 00007f95ff59e159 [ 378.551363][T14023] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 378.551375][T14023] RBP: 00007f96003b2090 R08: 0000000000000000 R09: 0000000000000000 [ 378.551386][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.551396][T14023] R13: 00007f95ff826038 R14: 00007f95ff825fa0 R15: 00007fff6b681ca8 [ 378.551426][T14023] [ 378.567705][T14023] Mem-Info: [ 378.567738][T14023] active_anon:6573 inactive_anon:0 isolated_anon:0 [ 378.567738][T14023] active_file:2 inactive_file:43427 isolated_file:0 [ 378.567738][T14023] unevictable:0 dirty:169 writeback:0 [ 378.567738][T14023] slab_reclaimable:11742 slab_unreclaimable:105901 [ 378.567738][T14023] mapped:29788 shmem:689 pagetables:1315 [ 378.567738][T14023] sec_pagetables:0 bounce:0 [ 378.567738][T14023] kernel_misc_reclaimable:0 [ 378.567738][T14023] free:1220503 free_pcp:11694 free_cma:0 [ 378.567805][T14023] Node 0 active_anon:26292kB inactive_anon:0kB active_file:8kB inactive_file:173508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119152kB dirty:676kB writeback:0kB shmem:2756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16116kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 378.586604][T14023] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 378.586674][T14023] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.586744][T14023] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 378.586809][T14023] Node 0 DMA32 free:927184kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26292kB inactive_anon:0kB active_file:8kB inactive_file:173508kB unevictable:0kB writepending:676kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:46720kB local_pcp:22492kB free_cma:0kB [ 378.586895][T14023] lowmem_reserve[]: 0 0 0 0 0 [ 378.586942][T14023] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.587031][T14023] lowmem_reserve[]: 0 0 0 0 0 [ 378.587094][T14023] Node 1 Normal free:3939468kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.587162][T14023] lowmem_reserve[]: 0 0 0 0 0 [ 378.587223][T14023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 378.587398][T14023] Node 0 DMA32: 123*4kB (UME) 23*8kB (ME) 139*16kB (ME) 376*32kB (UME) 198*64kB (UME) 168*128kB (UME) 122*256kB (UM) 22*512kB (UME) 16*1024kB (UM) 8*2048kB (UM) 196*4096kB (UM) = 927188kB [ 378.587951][T14023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 378.588140][T14023] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 5*16kB (UM) 5*32kB (UM) 4*64kB (UM) 3*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939468kB [ 378.588405][T14023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.588435][T14023] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.588449][T14023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.588479][T14023] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.588509][T14023] 44114 total pagecache pages [ 378.588516][T14023] 0 pages in swap cache [ 378.588538][T14023] Free swap = 124996kB [ 378.588545][T14023] Total swap = 124996kB [ 378.588567][T14023] 2097051 pages RAM [ 378.588574][T14023] 0 pages HighMem/MovableOnly [ 378.588580][T14023] 428722 pages reserved [ 378.588602][T14023] 0 pages cma reserved [ 378.729582][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.359491][T14029] netlink: 'syz.4.1880': attribute type 83 has an invalid length. [ 379.635871][T14031] __nla_validate_parse: 11 callbacks suppressed [ 379.635910][T14031] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1881'. [ 380.184314][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 380.258384][T14067] netlink: 'syz.1.1889': attribute type 20 has an invalid length. [ 380.258422][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 380.337429][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1890'. [ 380.341428][T14062] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.341622][T14062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.341648][T14062] IPv6: NLM_F_CREATE should be set when creating new route [ 380.341718][T14062] IPv6: NLM_F_CREATE should be set when creating new route [ 380.341756][T14062] IPv6: NLM_F_CREATE should be set when creating new route [ 380.368290][T14062] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1888'. [ 380.428463][T14072] sctp: [Deprecated]: syz.1.1889 (pid 14072) Use of int in maxseg socket option. [ 380.428463][T14072] Use struct sctp_assoc_value instead [ 380.993387][T14089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1892'. [ 381.475976][T14088] syzkaller0: entered promiscuous mode [ 381.475999][T14088] syzkaller0: entered allmulticast mode [ 381.798341][T14117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1897'. [ 381.810087][T14120] FAULT_INJECTION: forcing a failure. [ 381.810087][T14120] name failslab, interval 1, probability 0, space 0, times 0 [ 381.810135][T14120] CPU: 0 UID: 0 PID: 14120 Comm: syz.3.1898 Not tainted syzkaller #0 PREEMPT(full) [ 381.810159][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.810169][T14120] Call Trace: [ 381.810183][T14120] [ 381.810190][T14120] dump_stack_lvl+0xe8/0x150 [ 381.810221][T14120] should_fail_ex+0x410/0x560 [ 381.810248][T14120] should_failslab+0xa8/0x100 [ 381.810273][T14120] __kmalloc_cache_node_noprof+0xaa/0x620 [ 381.810292][T14120] ? __lock_acquire+0x747/0x2de0 [ 381.810350][T14120] ? __get_vm_area_node+0x155/0x2f0 [ 381.810374][T14120] ? __get_vm_area_node+0x155/0x2f0 [ 381.810405][T14120] __get_vm_area_node+0x155/0x2f0 [ 381.810433][T14120] __vmalloc_node_range_noprof+0x343/0x1540 [ 381.810460][T14120] ? bpf_prog_calc_tag+0x51/0x370 [ 381.810483][T14120] ? lock_acquire+0x115/0x350 [ 381.810508][T14120] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 381.810548][T14120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.810585][T14120] ? bpf_prog_calc_tag+0x51/0x370 [ 381.810604][T14120] __vmalloc_noprof+0xd2/0x120 [ 381.810628][T14120] ? bpf_prog_calc_tag+0x51/0x370 [ 381.810652][T14120] bpf_prog_calc_tag+0x51/0x370 [ 381.810676][T14120] bpf_jit_subprogs+0xbf9/0x4590 [ 381.810721][T14120] bpf_check+0x1ca8/0x2ef0 [ 381.810757][T14120] ? __pfx_bpf_check+0x10/0x10 [ 381.810802][T14120] ? bpf_obj_name_cpy+0x194/0x1e0 [ 381.810832][T14120] bpf_prog_load+0x14d6/0x1c20 [ 381.810863][T14120] ? __pfx_bpf_prog_load+0x10/0x10 [ 381.810909][T14120] __sys_bpf+0xd0d/0xd90 [ 381.810937][T14120] ? __pfx___sys_bpf+0x10/0x10 [ 381.810963][T14120] ? __fget_files+0x2a/0x420 [ 381.811013][T14120] ? ksys_write+0x242/0x270 [ 381.811042][T14120] ? __pfx_ksys_write+0x10/0x10 [ 381.811070][T14120] __x64_sys_bpf+0xba/0xd0 [ 381.811089][T14120] do_syscall_64+0x166/0x520 [ 381.811113][T14120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.811130][T14120] ? clear_bhb_loop+0x70/0xc0 [ 381.811152][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.811170][T14120] RIP: 0033:0x7ff68fb9e159 [ 381.811196][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.811210][T14120] RSP: 002b:00007ff690a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.811229][T14120] RAX: ffffffffffffffda RBX: 00007ff68fe25fa0 RCX: 00007ff68fb9e159 [ 381.811242][T14120] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 381.811254][T14120] RBP: 00007ff690a24090 R08: 0000000000000000 R09: 0000000000000000 [ 381.811264][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.811275][T14120] R13: 00007ff68fe26038 R14: 00007ff68fe25fa0 R15: 00007ffc73857d28 [ 381.811305][T14120] [ 381.835878][T14119] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1896'. [ 381.892373][T14117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1897'. [ 381.899459][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.899496][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.012647][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 382.377228][T14119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.050114][T14161] netlink: 'syz.2.1904': attribute type 11 has an invalid length. [ 383.418586][T14171] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 383.467683][T14173] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 383.473936][T14172] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 384.295451][T14207] netlink: 'syz.1.1912': attribute type 2 has an invalid length. [ 384.355893][T14207] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 384.359678][T14207] dummy0: left promiscuous mode [ 384.400436][T14207] team0: Port device dummy0 added [ 384.728766][T14229] __nla_validate_parse: 9 callbacks suppressed [ 384.728802][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1918'. [ 385.209382][T14253] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 385.752654][T14272] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 385.843912][T14272] 8021q: adding VLAN 0 to HW filter on device bond13 [ 385.862337][T14282] netlink: ct family unspecified [ 385.862370][T14282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.889908][T14275] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 385.920476][T14272] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1930'. [ 385.920890][T14278] syzkaller0: entered promiscuous mode [ 385.920902][T14278] syzkaller0: entered allmulticast mode [ 386.589605][T14305] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1938'. [ 387.139497][T14321] netlink: 'syz.2.1943': attribute type 3 has an invalid length. [ 387.684644][T14351] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 388.040377][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1952'. [ 390.482815][T14344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.533238][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'. [ 391.045477][T14394] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 391.405749][T14407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1957'. [ 391.772369][T14425] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1963'. [ 391.844752][T14421] can: request_module (can-proto-0) failed. [ 391.955516][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'. [ 392.206005][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'. [ 392.249044][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 392.346514][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'. [ 392.389632][T14446] IPVS: rr: FWM 3 0x00000003 - no destination available [ 392.694839][T14451] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 392.929575][T14467] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 392.951063][T14451] bond3: entered promiscuous mode [ 392.961514][T14451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.187965][T14462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.188304][T14462] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 393.188320][T14462] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 393.224657][T14462] bond3: (slave gre1): making interface the new active one [ 393.224680][T14462] gre1: entered promiscuous mode [ 393.226076][T14462] bond3: (slave gre1): Enslaving as an active interface with an up link [ 393.337289][T14475] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 393.442855][T14478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1973'. [ 393.568491][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 393.571461][T14484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.741019][T14489] openvswitch: netlink: IPv4 tun info is not correct [ 393.758533][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'. [ 394.133713][T14503] netlink: 'syz.3.1980': attribute type 11 has an invalid length. [ 394.587622][T14518] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 394.587647][T14518] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 394.797043][T14526] x_tables: duplicate underflow at hook 1 [ 395.007770][T14535] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 395.007983][T14526] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 395.133997][T14542] netlink: 'syz.4.1991': attribute type 10 has an invalid length. [ 395.137475][T14542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.333768][T14550] Cannot find map_set index 2 as target [ 395.645715][T14561] bond5: option primary_reselect: invalid value (6) [ 395.655971][T14561] bond5 (unregistering): Released all slaves [ 395.761558][T14560] ipvlan2: entered promiscuous mode [ 395.780146][T14560] team0: Device ipvlan2 failed to register rx_handler [ 395.959891][T14565] __nla_validate_parse: 3 callbacks suppressed [ 395.959912][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 396.057446][T14570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1998'. [ 396.057468][T14570] veth1_to_batadv: default FDB implementation only supports local addresses [ 396.545954][T14580] syzkaller0: entered promiscuous mode [ 396.545993][T14580] syzkaller0: entered allmulticast mode [ 396.637422][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 397.962227][T14592] x_tables: duplicate underflow at hook 1 [ 398.057566][T14598] mac80211_hwsim hwsim11 ..ãc¤±: renamed from wlan1 [ 398.416803][T14621] netlink: 'syz.1.2010': attribute type 21 has an invalid length. [ 398.416841][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 398.418186][T14621] netlink: 'syz.1.2010': attribute type 21 has an invalid length. [ 398.418235][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 398.544467][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 398.963518][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2016'. [ 399.329884][T14658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2020'. [ 399.424606][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 399.444331][T14644] veth9: entered allmulticast mode [ 399.473584][T14644] bond5: (slave veth9): Enslaving as an active interface with an up link [ 399.477626][T14650] syzkaller1: entered promiscuous mode [ 399.477664][T14650] syzkaller1: entered allmulticast mode [ 399.697119][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 400.018788][T14674] x_tables: duplicate underflow at hook 2 [ 400.320701][T14681] netlink: zone id is out of range [ 400.320755][T14681] netlink: zone id is out of range [ 400.320874][T14681] netlink: zone id is out of range [ 400.320933][T14681] netlink: zone id is out of range [ 400.320940][T14681] netlink: zone id is out of range [ 400.320947][T14681] netlink: zone id is out of range [ 400.320954][T14681] netlink: zone id is out of range [ 400.320962][T14681] netlink: zone id is out of range [ 400.320969][T14681] netlink: zone id is out of range [ 400.320976][T14681] netlink: zone id is out of range [ 400.751124][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 401.508792][T14727] __nla_validate_parse: 1 callbacks suppressed [ 401.508845][T14727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2033'. [ 402.721737][T14765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2040'. [ 402.909556][T14778] syzkaller1: entered allmulticast mode [ 402.939447][T14778] syzkaller1: left allmulticast mode [ 402.998131][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 403.278961][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 403.363973][T14796] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 403.446416][T14807] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 403.537231][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2049'. [ 406.323409][T14797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.003230][ T31] audit: type=1804 audit(1790346869.804:45): pid=14854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2061" name="/newroot/421/memory.events" dev="tmpfs" ino=2189 res=1 errno=0 [ 407.003329][ T31] audit: type=1800 audit(1790346869.804:46): pid=14854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2061" name="memory.events" dev="tmpfs" ino=2189 res=0 errno=0 [ 407.008963][T14850] bond13: option min_links: invalid value (18446744073709551612) [ 407.008988][T14850] bond13: option min_links: allowed values 0 - 2147483647 [ 407.081694][T14850] bond13 (unregistering): Released all slaves [ 407.245844][T14858] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2056'. [ 407.275211][T14863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2064'. [ 407.450442][T14869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2065'. [ 407.494199][T14869] bond4: Unable to set down delay as MII monitoring is disabled [ 407.497598][T14869] bond4 (unregistering): Released all slaves [ 407.794087][T14878] netlink: 'syz.4.2067': attribute type 4 has an invalid length. [ 407.904058][T14877] wg0: entered promiscuous mode [ 408.096204][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 408.162956][ T5841] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.163001][ T5841] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.163033][ T5841] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.163064][ T5841] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.286499][T14893] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2073'. [ 408.307767][T14895] net_ratelimit: 65 callbacks suppressed [ 408.307788][T14895] ip_tables: iptables: counters copy to user failed while replacing table [ 408.331372][T14895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2069'. [ 408.417573][T14898] atomic_op ffff88802ff169e0 conn xmit_atomic 0000000000000000 [ 408.515276][T14903] ovs-dp0: entered promiscuous mode [ 409.169151][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'. [ 409.300995][T14931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2082'. [ 409.380236][T14934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'. [ 410.050318][T14961] nbd: must specify a size in bytes for the device [ 410.135100][T14969] netlink: 'syz.4.2092': attribute type 1 has an invalid length. [ 410.135120][T14969] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2092'. [ 410.900538][T15011] IPv4: Oversized IP packet from 127.202.26.0 [ 411.415221][T15027] batman_adv: batadv0: Adding interface: macvtap2 [ 411.415273][T15027] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.415315][T15027] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 411.582930][T15033] batman_adv: batadv0: Removing interface: macvtap1 [ 411.628284][T15033] batman_adv: batadv0: Removing interface: macvtap2 [ 412.233984][T15056] netlink: 'syz.2.2113': attribute type 2 has an invalid length. [ 412.327170][T15057] netlink: 'syz.1.2110': attribute type 1 has an invalid length. [ 412.880056][ T31] audit: type=1107 audit(1790346875.684:47): pid=15071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 412.884998][T15075] __nla_validate_parse: 3 callbacks suppressed [ 412.885030][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 412.885044][T15075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2117'. [ 412.927145][T15078] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 413.090051][T15082] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 413.170670][T15082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 413.181842][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2121'. [ 413.181868][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2121'. [ 413.182047][T15084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2121'. [ 413.431651][T15095] netlink: 'syz.0.2124': attribute type 4 has an invalid length. [ 413.431688][T15095] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.2124'. [ 413.461082][T15095] netlink: 'syz.0.2124': attribute type 2 has an invalid length. [ 413.465103][T15096] netlink: 'syz.0.2124': attribute type 2 has an invalid length. [ 413.472887][T15095] ip_tables: iptables: counters copy to user failed while replacing table [ 413.475627][T15096] ip_tables: iptables: counters copy to user failed while replacing table [ 413.694624][T15102] ip_tables: iptables: counters copy to user failed while replacing table [ 413.724048][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2125'. [ 413.724090][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2125'. [ 413.852552][T15111] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2129'. [ 413.890063][T15112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2129'. [ 414.012585][T15115] netlink: 'syz.1.2127': attribute type 6 has an invalid length. [ 415.160715][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.160715][T15155] Use struct sctp_assoc_value instead [ 415.160771][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.160771][T15155] Use struct sctp_assoc_value instead [ 415.160810][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.160810][T15155] Use struct sctp_assoc_value instead [ 415.160847][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.160847][T15155] Use struct sctp_assoc_value instead [ 415.160884][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.160884][T15155] Use struct sctp_assoc_value instead [ 415.160921][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.160921][T15155] Use struct sctp_assoc_value instead [ 415.160958][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.160958][T15155] Use struct sctp_assoc_value instead [ 415.160996][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.160996][T15155] Use struct sctp_assoc_value instead [ 415.161032][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.161032][T15155] Use struct sctp_assoc_value instead [ 415.161071][T15155] sctp: [Deprecated]: syz.4.2138 (pid 15155) Use of int in maxseg socket option. [ 415.161071][T15155] Use struct sctp_assoc_value instead [ 415.454608][T15161] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 415.525315][T15161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.881497][T15163] bond5: (slave veth5): Enslaving as an active interface with a down link [ 415.978239][T15171] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 415.978581][T15171] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 416.054623][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.402810][T15190] netlink: 'syz.2.2148': attribute type 5 has an invalid length. [ 416.402832][T15190] netlink: 'syz.2.2148': attribute type 15 has an invalid length. [ 416.917164][T15203] wg0: left promiscuous mode [ 416.938914][T15203] syzkaller0: left promiscuous mode [ 416.939344][T15203] tipc: Resetting bearer [ 416.939553][T15203] tipc: Resetting bearer [ 416.961411][T15203] bond11: left promiscuous mode [ 417.042573][T15209] tipc: Resetting bearer [ 417.823698][T15249] macsec0: entered promiscuous mode [ 417.823723][T15249] batadv_slave_1: entered promiscuous mode [ 417.823962][T15249] macsec0: entered allmulticast mode [ 417.823977][T15249] batadv_slave_1: entered allmulticast mode [ 417.825558][T15249] batadv_slave_1: left allmulticast mode [ 417.826576][T15249] batadv_slave_1: left promiscuous mode [ 418.149789][T15257] netlink: 'syz.3.2165': attribute type 15 has an invalid length. [ 418.149821][T15257] __nla_validate_parse: 8 callbacks suppressed [ 418.149831][T15257] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2165'. [ 418.178155][T15261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2166'. [ 418.323514][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 418.416063][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 418.764645][T15294] Bluetooth: MGMT ver 1.23 [ 418.773363][T15294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2174'. [ 418.955469][T15281] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2173'. [ 419.580695][T15312] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 419.580866][T15312] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 419.581026][T15312] veth0_virt_wifi: entered allmulticast mode [ 419.608128][T15312] veth0_virt_wifi: entered promiscuous mode [ 419.736404][T15320] netlink: 'syz.1.2182': attribute type 83 has an invalid length. [ 419.938841][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 419.955507][T15332] Cannot find add_set index 2 as target [ 421.263223][T15378] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 421.341410][T15360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.342198][ T5841] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.342255][ T5841] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.342351][ T5841] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.342390][ T5841] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.342452][ T5841] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.342491][ T5841] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.342554][ T5841] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.342616][ T5841] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.590818][T15382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2201'. [ 421.597972][T15382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2201'. [ 421.667322][T15385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2199'. [ 421.861606][T15388] veth1_to_bond: entered allmulticast mode [ 421.869447][T15388] veth1_to_bond: entered promiscuous mode [ 421.940835][T15388] veth1_to_bond (unregistering): left promiscuous mode [ 421.940878][T15388] veth1_to_bond (unregistering): left allmulticast mode [ 421.988276][T15388] bond0: (slave bond_slave_1): Releasing backup interface [ 422.884823][T15429] siw: device registration error -23 [ 423.180526][T15441] __nla_validate_parse: 2 callbacks suppressed [ 423.180544][T15441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2215'. [ 423.236724][T15441] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2215'. [ 423.447657][T15455] netlink: ct family unspecified [ 423.447763][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.559701][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 423.580392][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 423.580784][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 423.603752][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 423.604041][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 423.604372][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 423.760867][T15459] netlink: 'syz.3.2220': attribute type 1 has an invalid length. [ 424.483779][T15477] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2223'. [ 424.528089][T15485] netlink: 'syz.4.2224': attribute type 10 has an invalid length. [ 424.531542][T15485] netlink: 'syz.4.2224': attribute type 10 has an invalid length. [ 424.897326][T15496] netlink: 'syz.2.2229': attribute type 4 has an invalid length. [ 425.033820][T15505] netlink: 'syz.0.2231': attribute type 11 has an invalid length. [ 425.035618][T15505] netlink: 'syz.0.2231': attribute type 11 has an invalid length. [ 425.039965][T15504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.451551][T15517] netlink: ct family unspecified [ 425.451583][T15517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.582632][T15524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.991759][T15535] xt_LOG: level 115 >= 8 [ 426.339998][T15554] netlink: 'syz.3.2242': attribute type 6 has an invalid length. [ 426.726074][T15567] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 426.749820][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 426.751651][T15567] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20001 [ 427.082421][T15580] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 427.104781][T15578] pim6reg1: entered promiscuous mode [ 427.104817][T15578] pim6reg1: entered allmulticast mode [ 427.273114][T15585] veth1_to_team: entered promiscuous mode [ 427.316465][T15585] veth1_to_team: left promiscuous mode [ 427.445746][T15599] netlink: 'syz.0.2256': attribute type 1 has an invalid length. [ 427.446059][T15600] netlink: 'syz.0.2256': attribute type 1 has an invalid length. [ 427.507803][T15586] hsr_slave_1 (unregistering): left promiscuous mode [ 427.530675][T15592] team0: Device wg1 is of different type [ 427.544052][T15592] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 427.786437][T15593] bridge6: entered promiscuous mode [ 427.896778][T15592] bridge6: entered promiscuous mode [ 427.927787][T15609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 428.127475][T15602] syzkaller0: entered promiscuous mode [ 428.127499][T15602] syzkaller0: entered allmulticast mode [ 428.224701][T15634] x_tables: duplicate underflow at hook 2 [ 428.458501][T15647] __nla_validate_parse: 11 callbacks suppressed [ 428.458538][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'. [ 428.756319][T15647] veth0_virt_wifi (unregistering): left allmulticast mode [ 428.756345][T15647] veth0_virt_wifi (unregistering): left promiscuous mode [ 428.756431][T15647] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 430.134099][T15693] syz_tun: entered allmulticast mode [ 430.395973][T15688] dvmrp8: entered allmulticast mode [ 430.614771][T15687] syz_tun: left allmulticast mode [ 431.000615][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2279'. [ 431.151208][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2279'. [ 431.418523][ T5624] Bluetooth: hci3: link tx timeout [ 431.418787][ T5624] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.809988][T15756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2286'. [ 431.829684][T15758] openvswitch: netlink: IP tunnel TTL not specified. [ 431.976614][T15765] netlink: 'syz.1.2288': attribute type 83 has an invalid length. [ 431.990545][T15762] netlink: 'syz.4.2286': attribute type 3 has an invalid length. [ 431.990582][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 433.108779][T15795] tipc: Resetting bearer [ 433.196280][T15795] syzkaller0: entered promiscuous mode [ 433.196529][T15795] tipc: Resetting bearer [ 433.218084][T15795] tipc: Resetting bearer [ 433.384641][T15799] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 433.423697][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 433.627216][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2300'. [ 433.724123][T15803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2300'. [ 437.295850][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 437.919140][T15813] tc_dump_action: action bad kind [ 438.078047][T15833] netlink: 'syz.2.2308': attribute type 1 has an invalid length. [ 438.144589][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 438.169330][T15841] netlink: 'syz.3.2310': attribute type 3 has an invalid length. [ 438.214660][T15833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 438.271333][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2311'. [ 438.496049][T15844] bond6: entered promiscuous mode [ 438.496073][T15844] bond6: entered allmulticast mode [ 438.500507][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 438.593958][T15833] macvlan2: entered promiscuous mode [ 438.594012][T15833] macvlan2: entered allmulticast mode [ 438.617186][T15833] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 439.191263][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 439.257169][T15884] openvswitch: netlink: Message has 8 unknown bytes. [ 439.278010][T15882] netlink: 'syz.2.2322': attribute type 1 has an invalid length. [ 439.278066][T15882] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2322'. [ 439.298299][T15879] sctp: [Deprecated]: syz.3.2321 (pid 15879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.298299][T15879] Use struct sctp_sack_info instead [ 440.016488][T15905] syzkaller0: entered promiscuous mode [ 440.016524][T15905] syzkaller0: entered allmulticast mode [ 440.154213][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.517987][T15909] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.518177][T15909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.518189][T15909] IPv6: NLM_F_CREATE should be set when creating new route [ 440.518254][T15909] IPv6: NLM_F_CREATE should be set when creating new route [ 440.518292][T15909] IPv6: NLM_F_CREATE should be set when creating new route [ 440.527790][T15909] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2329'. [ 440.561436][T15924] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 440.583725][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 440.697357][T15930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2333'. [ 440.699257][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2333'. [ 440.826804][T15925] bond14: option lacp_active: invalid value (5) [ 440.840489][T15925] bond14 (unregistering): Released all slaves [ 440.928905][T15929] bond5: (slave veth5): Releasing active interface [ 440.962640][T15933] team0: Mode changed to "loadbalance" [ 441.358249][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 441.526451][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'. [ 441.788950][T15961] bridge4: port 1(erspan0) entered blocking state [ 441.789134][T15961] bridge4: port 1(erspan0) entered disabled state [ 441.790716][T15961] erspan0: entered allmulticast mode [ 441.815221][T15961] erspan0: entered promiscuous mode [ 442.487607][T15990] netlink: ct family unspecified [ 442.487661][T15990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.507549][T15991] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 442.684664][T15998] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 442.701498][T15991] macvlan2: entered promiscuous mode [ 442.701520][T15991] macvlan2: entered allmulticast mode [ 442.714943][T15991] bond7: entered promiscuous mode [ 442.714978][T15991] bridge4: entered promiscuous mode [ 442.715963][T15991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 442.752400][T15991] bond7: left promiscuous mode [ 442.752426][T15991] bridge4: left promiscuous mode [ 443.137308][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 443.138097][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'. [ 443.615215][T16023] IPVS: Scheduler module ip_vs_sip not found [ 444.142361][T16045] dvmrp6: entered allmulticast mode [ 444.245694][T16052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2365'. [ 444.505662][T16060] netlink: ct family unspecified [ 444.505693][T16060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.606533][T13808] udevd[13808]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 444.685431][T10984] udevd[10984]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 444.749821][T16065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2368'. [ 445.262094][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.013796][T16091] syzkaller1: entered promiscuous mode [ 446.013819][T16091] syzkaller1: entered allmulticast mode [ 446.180894][T10904] tipc: Subscription rejected, illegal request [ 446.199461][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2378'. [ 446.356176][T16108] vlan3: entered promiscuous mode [ 446.356199][T16108] syz_tun: entered promiscuous mode [ 447.106333][T16128] netlink: ct family unspecified [ 447.106415][T16128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.279479][T16136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.479875][T16151] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2390'. [ 447.819691][T16159] netlink: 'syz.2.2391': attribute type 1 has an invalid length. [ 448.448080][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 448.448121][T16178] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2399'. [ 448.482574][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 448.482617][T16179] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2399'. [ 448.747562][T16194] block nbd2: server does not support multiple connections per device. [ 448.853929][T16194] block nbd2: shutting down sockets [ 449.268183][T16178] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 449.509834][T16196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.509861][T16196] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 449.751137][T16196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.751176][T16196] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 449.888803][T16196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 449.888844][T16196] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 449.943216][T16231] x_tables: duplicate entry at hook 1 [ 450.099966][T16225] geneve0: entered promiscuous mode [ 450.109825][T16196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.109862][T16196] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 450.144702][T16239] xt_REDIRECT: bad rangesize 26624. [ 450.148964][T16225] geneve0: left promiscuous mode [ 450.165930][T16239] openvswitch: netlink: Duplicate or invalid key (type 0). [ 450.390656][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2409'. [ 450.945120][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2413'. [ 451.133114][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 451.226571][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2416'. [ 451.239897][T16255] ovs-s!!: entered promiscuous mode [ 451.290308][T16266] xt_hashlimit: size too large, truncated to 1048576 [ 451.290625][T16266] xt_hashlimit: overflow, try lower: 0/0 [ 452.003607][T16300] netlink: 'syz.2.2425': attribute type 4 has an invalid length. [ 452.003629][T16300] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.2425'. [ 452.645132][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 452.751084][T16323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2432'. [ 452.775458][T16323] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 452.826546][T16323] xt_bpf: check failed: parse error [ 452.871148][T16323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.116954][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 453.426546][T16344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.888368][T16359] can: request_module (can-proto-0) failed. [ 453.939934][T16367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2447'. [ 454.008204][T16367] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2447'. [ 454.518041][T16382] bridge1: port 1(erspan0) entered disabled state [ 454.701557][T16391] netlink: 'syz.3.2452': attribute type 10 has an invalid length. [ 455.588779][T16417] netlink: 'syz.0.2457': attribute type 1 has an invalid length. [ 455.644750][T16403] netlink: 'syz.2.2454': attribute type 4 has an invalid length. [ 455.644805][T16403] __nla_validate_parse: 4 callbacks suppressed [ 455.644815][T16403] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2454'. [ 455.644846][T16403] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 456.033500][T16420] bond4: (slave veth9): Enslaving as an active interface with a down link [ 456.085844][T16420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2457'. [ 456.089027][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2457'. [ 456.274336][T16422] bond4: (slave veth11): Enslaving as an active interface with a down link [ 456.584641][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.584674][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.584794][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.584817][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.584849][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.584871][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.976957][T16461] netlink: 'syz.0.2461': attribute type 21 has an invalid length. [ 457.174042][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 457.260069][T16479] netlink: Conntrack attr type has unexpected length (type=1, length=1, expected=0) [ 457.260157][T16479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.488722][T16490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2467'. [ 457.923379][T16501] warn_alloc: 1 callbacks suppressed [ 457.923412][T16501] syz.3.2470: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 457.923632][T16501] CPU: 0 UID: 0 PID: 16501 Comm: syz.3.2470 Not tainted syzkaller #0 PREEMPT(full) [ 457.923660][T16501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.923671][T16501] Call Trace: [ 457.923679][T16501] [ 457.923687][T16501] dump_stack_lvl+0xe8/0x150 [ 457.923721][T16501] warn_alloc+0x24d/0x270 [ 457.923742][T16501] ? kasan_save_track+0x4f/0x80 [ 457.923762][T16501] ? kasan_save_track+0x3e/0x80 [ 457.923784][T16501] ? __pfx_warn_alloc+0x10/0x10 [ 457.923799][T16501] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 457.923961][T16501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.924000][T16501] __vmalloc_node_range_noprof+0x127/0x1540 [ 457.924051][T16501] ? rcu_is_watching+0x16/0xb0 [ 457.924091][T16501] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.924119][T16501] ? __kmalloc_cache_noprof+0x321/0x600 [ 457.924139][T16501] ? __kmalloc_cache_noprof+0x14d/0x600 [ 457.924157][T16501] ? xskq_create+0x56/0x220 [ 457.924229][T16501] xskq_create+0x148/0x220 [ 457.924252][T16501] ? xsk_init_queue+0x8a/0xe0 [ 457.924278][T16501] xsk_init_queue+0x8a/0xe0 [ 457.924302][T16501] xsk_setsockopt+0x5e0/0x960 [ 457.924326][T16501] ? __pfx_xsk_setsockopt+0x10/0x10 [ 457.924356][T16501] ? __pfx_aa_sk_perm+0x10/0x10 [ 457.924434][T16501] ? aa_sock_opt_perm+0x142/0x1e0 [ 457.924489][T16501] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 457.924521][T16501] ? __pfx_xsk_setsockopt+0x10/0x10 [ 457.924544][T16501] do_sock_setsockopt+0x17c/0x1b0 [ 457.924576][T16501] __x64_sys_setsockopt+0x13d/0x1b0 [ 457.924608][T16501] do_syscall_64+0x166/0x520 [ 457.924634][T16501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.924653][T16501] ? clear_bhb_loop+0x70/0xc0 [ 457.924677][T16501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.924697][T16501] RIP: 0033:0x7ff68fb9e159 [ 457.924715][T16501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.924732][T16501] RSP: 002b:00007ff690a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 457.924752][T16501] RAX: ffffffffffffffda RBX: 00007ff68fe25fa0 RCX: 00007ff68fb9e159 [ 457.924767][T16501] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 457.924779][T16501] RBP: 00007ff68fc3506b R08: 0000000000000004 R09: 0000000000000000 [ 457.924792][T16501] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.924804][T16501] R13: 00007ff68fe26038 R14: 00007ff68fe25fa0 R15: 00007ffc73857d28 [ 457.924839][T16501] [ 457.930180][T16501] Mem-Info: [ 457.930194][T16501] active_anon:6557 inactive_anon:0 isolated_anon:0 [ 457.930194][T16501] active_file:2 inactive_file:43458 isolated_file:0 [ 457.930194][T16501] unevictable:0 dirty:164 writeback:0 [ 457.930194][T16501] slab_reclaimable:11680 slab_unreclaimable:110552 [ 457.930194][T16501] mapped:30348 shmem:667 pagetables:1356 [ 457.930194][T16501] sec_pagetables:0 bounce:0 [ 457.930194][T16501] kernel_misc_reclaimable:0 [ 457.930194][T16501] free:1215180 free_pcp:9773 free_cma:0 [ 457.930283][T16501] Node 0 active_anon:26228kB inactive_anon:0kB active_file:8kB inactive_file:173632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121392kB dirty:656kB writeback:0kB shmem:2668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16068kB pagetables:5256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 457.930378][T16501] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 457.930448][T16501] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.930523][T16501] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 457.930609][T16501] Node 0 DMA32 free:907260kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26228kB inactive_anon:0kB active_file:8kB inactive_file:173632kB unevictable:0kB writepending:656kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:37316kB local_pcp:20704kB free_cma:0kB [ 457.930706][T16501] lowmem_reserve[]: 0 0 0 0 0 [ 457.930774][T16501] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.930845][T16501] lowmem_reserve[]: 0 0 0 0 0 [ 457.930914][T16501] Node 1 Normal free:3938100kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1776kB local_pcp:0kB free_cma:0kB [ 457.931006][T16501] lowmem_reserve[]: 0 0 0 0 0 [ 457.931073][T16501] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 457.931308][T16501] Node 0 DMA32: 1067*4kB (UME) 424*8kB (UME) 413*16kB (UM) 674*32kB (UME) 135*64kB (UM) 40*128kB (UM) 116*256kB (UME) 15*512kB (UM) 13*1024kB (UM) 6*2048kB (UM) 194*4096kB (UM) = 907196kB [ 457.931659][T16501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 457.931831][T16501] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3938152kB [ 457.940249][T16501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.940282][T16501] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.940314][T16501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.940350][T16501] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.940382][T16501] 44123 total pagecache pages [ 457.940406][T16501] 0 pages in swap cache [ 457.940412][T16501] Free swap = 124996kB [ 457.940419][T16501] Total swap = 124996kB [ 457.940443][T16501] 2097051 pages RAM [ 457.940450][T16501] 0 pages HighMem/MovableOnly [ 457.940473][T16501] 428722 pages reserved [ 457.940480][T16501] 0 pages cma reserved [ 458.725912][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 458.734473][T16515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2474'. [ 458.811348][T16517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2475'. [ 458.955938][T16528] syzkaller0: entered promiscuous mode [ 458.956644][T16528] syzkaller0: entered allmulticast mode [ 459.128609][T16539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2477'. [ 459.268581][T16534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2477'. [ 459.316951][T16540] ip_tables: iptables: counters copy to user failed while replacing table [ 460.013850][T16563] wg2 speed is unknown, defaulting to 1000 [ 460.014071][T16563] wg2 speed is unknown, defaulting to 1000 [ 460.016374][T16561] erspan0: left allmulticast mode [ 460.016397][T16561] erspan0: left promiscuous mode [ 460.016627][T16561] bridge1: port 1(erspan0) entered disabled state [ 460.078797][T16561] bond4: (slave syz_tun): Removing an active aggregator [ 460.083973][T16561] bond4: (slave syz_tun): Releasing backup interface [ 460.142791][T16561] team0: Port device dummy0 removed [ 460.144380][T16561] bridge_slave_0: left allmulticast mode [ 460.144401][T16561] bridge_slave_0: left promiscuous mode [ 460.146090][T16561] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.156075][T16561] bridge_slave_1: left allmulticast mode [ 460.156099][T16561] bridge_slave_1: left promiscuous mode [ 460.156574][T16561] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.219472][T16561] bond0: (slave bond_slave_0): Releasing backup interface [ 460.274739][T16561] bond0: (slave bond_slave_1): Releasing backup interface [ 460.308426][T16561] team0: Port device team_slave_0 removed [ 460.317173][T16561] team0: Port device team_slave_1 removed [ 460.317532][T16561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 460.432713][T16563] wg2 speed is unknown, defaulting to 1000 [ 460.517132][T16563] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 460.524143][T16563] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 460.524211][T16563] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 460.590219][T16579] syzkaller1: entered promiscuous mode [ 460.590241][T16579] syzkaller1: entered allmulticast mode [ 460.643954][T16563] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 460.805763][T16563] wg2 speed is unknown, defaulting to 1000 [ 460.923829][T16563] wg2 speed is unknown, defaulting to 1000 [ 460.979646][T16563] wg2 speed is unknown, defaulting to 1000 [ 461.004080][T16586] syzkaller0: entered promiscuous mode [ 461.004104][T16586] syzkaller0: entered allmulticast mode [ 461.037422][T16563] wg2 speed is unknown, defaulting to 1000 [ 461.044773][T16563] wg2 speed is unknown, defaulting to 1000 [ 461.334992][T16599] bond_slave_1: entered allmulticast mode [ 461.335675][T16599] __nla_validate_parse: 2 callbacks suppressed [ 461.335705][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 462.935234][T16651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2504'. [ 463.425232][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2505'. [ 463.570851][T16662] syzkaller1: entered promiscuous mode [ 463.570907][T16662] syzkaller1: entered allmulticast mode [ 463.683298][T16665] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2508'. [ 464.669910][T16695] netlink: 'syz.0.2515': attribute type 39 has an invalid length. [ 465.834591][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 465.867140][T16721] bond8: ARP target 9.0.0.0 is already present [ 465.867164][T16721] bond8: option arp_ip_target: invalid value (9) [ 465.888667][T16721] bond8 (unregistering): Released all slaves [ 466.407525][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 467.079720][T16752] Cannot find del_set index 3 as target [ 467.723977][T16760] bond14: invalid NS target :: specified for addition [ 467.724006][T16760] bond14: option ns_ip6_target: invalid value (18446744073709551615) [ 467.761383][T16760] bond14 (unregistering): Released all slaves [ 467.849737][T16771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2532'. [ 467.986475][T16768] netlink: 'syz.3.2531': attribute type 23 has an invalid length. [ 468.592262][T16805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2540'. [ 469.297889][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'. [ 469.297923][T16815] netlink: 'syz.1.2543': attribute type 10 has an invalid length. [ 469.297938][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'. [ 469.344702][T16815] geneve4: entered promiscuous mode [ 469.344725][T16815] geneve4: entered allmulticast mode [ 469.458811][T16818] netlink: 'syz.3.2545': attribute type 21 has an invalid length. [ 469.642687][T16814] dvmrp0: entered allmulticast mode [ 469.650290][T16820] dvmrp0: left allmulticast mode [ 469.852655][T16828] netlink: 'syz.2.2547': attribute type 1 has an invalid length. [ 469.879342][T16820] nbd: socks must be embedded in a SOCK_ITEM attr [ 469.971522][T16820] Cannot find add_set index 34 as target [ 470.764028][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 470.915545][T16840] wg2 speed is unknown, defaulting to 1000 [ 471.192889][T16859] ip_tables: iptables: counters copy to user failed while replacing table [ 471.351052][T16861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2558'. [ 471.466997][T16861] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2558'. [ 471.701166][T16870] ip_tables: iptables: counters copy to user failed while replacing table [ 471.714105][T16870] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2560'. [ 473.304423][T16919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.010158][T16935] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2575'. [ 474.300558][T16946] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 474.581038][T16955] netlink: 'syz.2.2581': attribute type 3 has an invalid length. [ 475.075339][T16963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 475.171304][T16971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2585'. [ 475.396056][T16979] openvswitch: netlink: IP tunnel dst address not specified [ 475.396091][T16979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.596464][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 475.630428][T16987] vlan4: entered allmulticast mode [ 475.852702][T16997] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 476.210507][T17006] ±ÿ: renamed from lo [ 476.845246][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2599'. [ 476.864731][T17018] bridge0: port 3(wlan0) entered blocking state [ 476.864939][T17018] bridge0: port 3(wlan0) entered disabled state [ 476.865260][T17018] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 476.878178][T17018] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 478.655005][T17072] netlink: 'syz.2.2611': attribute type 4 has an invalid length. [ 478.655026][T17072] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2611'. [ 479.286069][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'. [ 479.347197][T17099] netlink: 'syz.1.2615': attribute type 3 has an invalid length. [ 479.347250][T17099] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2615'. [ 479.374418][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 479.374457][T17102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'. [ 479.748497][T17106] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 479.946262][T17091] tipc: Resetting bearer [ 480.437538][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2617'. [ 481.079719][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'. [ 481.079810][T17137] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2624'. [ 481.093288][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'. [ 481.612549][T17153] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 481.920545][T17166] __nla_validate_parse: 1 callbacks suppressed [ 481.920564][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2629'. [ 481.958371][T17166] netlink: 'syz.4.2629': attribute type 2 has an invalid length. [ 481.958394][T17166] netlink: 'syz.4.2629': attribute type 2 has an invalid length. [ 482.694961][T17187] wg2 speed is unknown, defaulting to 1000 [ 482.716783][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 483.674708][T17214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2640'. [ 483.720107][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2640'. [ 484.141421][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 484.141444][T17238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2645'. [ 484.141646][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 484.141660][T17238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2645'. [ 484.752327][T17248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2646'. [ 485.087930][T17262] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2650'. [ 485.319372][T17274] netlink: 'syz.3.2652': attribute type 1 has an invalid length. [ 485.319396][T17274] netlink: 'syz.3.2652': attribute type 2 has an invalid length. [ 485.434638][T11096] udevd[11096]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 485.517126][T17258] smbdirect: ib_dev[syz1] removed [ 486.052292][T17283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.071170][T17283] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.246953][T17283] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 486.356675][T17290] tc_dump_action: action bad kind [ 487.530361][T17349] __nla_validate_parse: 4 callbacks suppressed [ 487.530398][T17349] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2668'. [ 487.836091][T17347] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2668'. [ 488.383424][T17371] macvtap0: entered allmulticast mode [ 488.383446][T17371] veth0_to_bridge: entered allmulticast mode [ 488.410952][T17371] veth0_to_bridge: left allmulticast mode [ 490.347086][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 490.347992][T17409] netlink: 'syz.4.2680': attribute type 2 has an invalid length. [ 490.348009][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 490.435339][T17414] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 490.480628][T17414] 8021q: adding VLAN 0 to HW filter on device bond14 [ 490.499286][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 490.602782][T17414] gretap0: entered promiscuous mode [ 490.637856][T17414] bond14: (slave gretap0): making interface the new active one [ 490.660198][T17414] bond14: (slave gretap0): Enslaving as an active interface with an up link [ 490.799282][T17414] 8021q: adding VLAN 0 to HW filter on device bond15 [ 490.801817][T17414] bond14: (slave bond15): Enslaving as an active interface with a down link [ 491.390978][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 491.989409][T17461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2692'. [ 492.110784][T17462] syzkaller0: entered promiscuous mode [ 492.110845][T17462] syzkaller0: entered allmulticast mode [ 492.599162][T17478] wg2 speed is unknown, defaulting to 1000 [ 492.632706][T17474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2696'. [ 492.765626][T17489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2700'. [ 493.328487][T17504] ipvlan3: entered promiscuous mode [ 493.538388][T17508] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2705'. [ 493.928392][T17522] pimreg: tun_chr_ioctl cmd 1074812118 [ 493.979566][T17522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2707'. [ 493.994033][T17526] pimreg: tun_chr_ioctl cmd 1074025673 [ 493.994155][T17522] pimreg: tun_chr_ioctl cmd 1074812118 [ 493.997089][T17522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2707'. [ 494.158828][T17536] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2709'. [ 494.508362][T17544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2711'. [ 494.620507][T17550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2714'. [ 494.723321][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2711'. [ 494.767574][T17558] : renamed from bridge_slave_1 [ 496.212772][T17598] Bluetooth: MGMT ver 1.23 [ 496.306295][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'. [ 496.850914][ T31] audit: type=1804 audit(1790346959.654:48): pid=17625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2731" name="/newroot/553/memory.events" dev="tmpfs" ino=2855 res=1 errno=0 [ 497.023918][ T40] IPVS: starting estimator thread 0... [ 497.130466][T17636] IPVS: using max 29 ests per chain, 69600 per kthread [ 497.656871][T17657] netlink: 'syz.4.2738': attribute type 1 has an invalid length. [ 497.726638][T17656] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 498.369835][T17681] __nla_validate_parse: 2 callbacks suppressed [ 498.369855][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'. [ 498.514998][T17688] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 498.515025][T17688] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 498.559781][T17688] netlink: 1080 bytes leftover after parsing attributes in process `syz.1.2750'. [ 499.411613][T17724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2754'. [ 499.765437][T17740] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2758'. [ 500.175386][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 500.892870][T17792] IPVS: Error connecting to the multicast addr [ 501.060379][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 501.166467][T17799] pim6reg1: entered promiscuous mode [ 501.166490][T17799] pim6reg1: entered allmulticast mode [ 501.598715][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.855055][T17830] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 501.875937][T17832] batadv_slave_1: entered promiscuous mode [ 501.877187][T17830] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 501.903452][T17830] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2780'. [ 501.964416][T17826] batadv_slave_1: left promiscuous mode [ 502.835467][T17863] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 502.938360][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 502.997466][T17876] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2785'. [ 503.008889][T17863] 8021q: adding VLAN 0 to HW filter on device bond7 [ 503.054092][T17869] bond7: (slave veth15): Enslaving as an active interface with a down link [ 503.098208][T17882] netlink: 'syz.1.2790': attribute type 12 has an invalid length. [ 503.165450][T17882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2790'. [ 503.975610][T17897] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 504.120316][T17899] netlink: ct family unspecified [ 504.120385][T17899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.332435][T17907] __nla_validate_parse: 1 callbacks suppressed [ 504.332470][T17907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2797'. [ 504.647432][T17912] 8021q: adding VLAN 0 to HW filter on device bond14 [ 504.992403][T17929] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2803'. [ 504.992428][T17929] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2803'. [ 504.992441][T17929] netlink: 'syz.4.2803': attribute type 5 has an invalid length. [ 504.992453][T17929] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2803'. [ 505.080642][T17931] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2803'. [ 505.080684][T17931] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2803'. [ 505.080715][T17931] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2803'. [ 505.126459][T17938] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2805'. [ 506.330592][T17962] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 507.012559][T17944] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 507.012597][T17944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.311089][T17996] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2814'. [ 507.384456][T17999] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2814'. [ 507.416322][T17962] bond15 (unregistering): Released all slaves [ 508.039178][T18006] Bluetooth: hci0: unsupported parameter 5135 [ 508.039202][T18006] Bluetooth: hci0: unsupported parameter 8192 [ 508.039214][T18006] Bluetooth: hci0: unsupported parameter 5135 [ 508.039226][T18006] Bluetooth: hci0: unsupported parameter 8192 [ 509.349663][T18051] sit1: entered promiscuous mode [ 509.595444][T18062] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 509.595469][T18062] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 509.665229][T18069] __nla_validate_parse: 5 callbacks suppressed [ 509.665251][T18069] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.2830'. [ 510.457981][T18089] nbd: must specify an index to disconnect [ 510.680058][T18095] xt_hashlimit: size too large, truncated to 1048576 [ 510.707422][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2838'. [ 510.747170][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 510.818709][T18093] @0Ù: renamed from bond_slave_1 [ 511.116557][T18101] netlink: 'syz.1.2841': attribute type 21 has an invalid length. [ 511.259763][T18103] xt_hashlimit: size too large, truncated to 1048576 [ 511.260057][T18103] xt_hashlimit: Unknown mode mask A2BF, kernel too old? [ 511.435590][T18110] ieee802154 phy1 wpan1: encryption failed: -90 [ 511.548072][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'. [ 511.878898][T18134] netlink: 'syz.3.2850': attribute type 16 has an invalid length. [ 511.878919][T18134] netlink: 'syz.3.2850': attribute type 17 has an invalid length. [ 512.775736][T18156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.808989][T18157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.858203][T18164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 512.867718][T18156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.882623][T18164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 512.884240][T18164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 512.890925][T18164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 512.901516][T18164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 513.050119][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 513.059494][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 513.063857][T18134] veth9: left allmulticast mode [ 513.064540][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 513.067261][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 513.076872][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 514.081775][T18195] netlink: zone id is out of range [ 514.081826][T18195] netlink: zone id is out of range [ 514.081835][T18195] netlink: zone id is out of range [ 514.081841][T18195] netlink: zone id is out of range [ 514.081865][T18195] netlink: zone id is out of range [ 514.081873][T18195] netlink: zone id is out of range [ 514.082912][T18195] netlink: zone id is out of range [ 514.082920][T18195] netlink: zone id is out of range [ 514.082945][T18195] netlink: zone id is out of range [ 514.082952][T18195] netlink: zone id is out of range [ 514.174858][T10893] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 514.935827][T18188] bond3: left promiscuous mode [ 514.935851][T18188] gre1: left promiscuous mode [ 515.034367][T18188] sit1: left promiscuous mode [ 515.073850][ T1121] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.074382][T10906] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.074418][T10906] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.074449][T10906] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.102282][T18164] Bluetooth: hci5: command tx timeout [ 515.213736][T18212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2863'. [ 515.321552][T18159] wg2 speed is unknown, defaulting to 1000 [ 515.873024][T18159] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.873349][T18159] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.873650][T18159] bridge_slave_0: entered allmulticast mode [ 515.877477][T18159] bridge_slave_0: entered promiscuous mode [ 515.883897][T18159] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.884158][T18159] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.884402][T18159] bridge_slave_1: entered allmulticast mode [ 515.887703][T18159] bridge_slave_1: entered promiscuous mode [ 515.904372][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 515.974701][T18159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.981610][T18159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.030723][T18159] team0: Port device team_slave_0 added [ 516.049520][T18159] team0: Port device team_slave_1 added [ 516.166441][T18159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.166464][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.166488][T18159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.168179][T18159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.168202][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.168226][T18159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.482845][T18159] hsr_slave_0: entered promiscuous mode [ 516.486824][T18159] hsr_slave_1: entered promiscuous mode [ 516.493242][T18159] debugfs: 'hsr0' already exists in 'hsr' [ 516.493276][T18159] Cannot create hsr debugfs directory [ 516.860105][T18190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.017930][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'. [ 517.017953][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 517.017976][T18259] netlink: 'syz.2.2867': attribute type 13 has an invalid length. [ 517.182156][ T5619] Bluetooth: hci5: command tx timeout [ 517.236702][T18266] tipc: Resetting bearer [ 517.932132][ T5837] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.951800][ T5837] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.951847][ T5837] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.952005][ T5837] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.024955][T18266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.188677][T18159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.286969][T18298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2874'. [ 518.286991][T18298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2874'. [ 518.313506][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2874'. [ 518.566146][T18159] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.768882][T18159] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.022935][T18159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 519.029514][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.038925][T18159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 519.057546][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 519.058786][T18159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 519.070063][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 519.072026][T18159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 519.082586][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 519.215124][T18159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.262573][ T5619] Bluetooth: hci5: command tx timeout [ 519.267944][T18159] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.285132][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.285314][T10893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.303647][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.303736][T10893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.780626][T18159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.841136][T18159] veth0_vlan: entered promiscuous mode [ 519.854293][T18159] veth1_vlan: entered promiscuous mode [ 519.901211][T18159] veth0_macvtap: entered promiscuous mode [ 519.907888][T18159] veth1_macvtap: entered promiscuous mode [ 519.938430][T18159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.956488][T18159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.991240][T10893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.992020][T10893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.043524][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.104479][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.111992][T10906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.112047][T10906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.190733][T10906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.190754][T10906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.297356][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2851'. [ 521.342264][ T5619] Bluetooth: hci5: command tx timeout [ 563.024686][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.169334][T18345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2878'. [ 580.334589][T18342] netlink: 'syz.1.2879': attribute type 1 has an invalid length. [ 580.334629][T18342] netlink: 908 bytes leftover after parsing attributes in process `syz.1.2879'. [ 580.844480][T18368] netlink: 'syz.4.2883': attribute type 11 has an invalid length. [ 581.029898][T18375] netlink: 'syz.4.2887': attribute type 1 has an invalid length. [ 581.185342][T18375] 8021q: adding VLAN 0 to HW filter on device bond15 [ 581.417477][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 581.420610][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 581.771462][T18380] 8021q: adding VLAN 0 to HW filter on device bond15 [ 581.777923][T18380] bond15: (slave gre1): The slave device specified does not support setting the MAC address [ 581.795385][T18380] bond15: (slave gre1): Error -95 calling set_mac_address [ 581.849273][T18375] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 581.864295][T18397] bond15 (unregistering): Released all slaves [ 582.564827][T18164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 582.582955][T18164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 582.591237][T18164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 582.602060][T18164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.606954][T18164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.950548][T18426] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2897'. [ 583.438161][T18448] Cannot find set identified by id 0 to match [ 583.816885][T18459] tipc: Enabled bearer , priority 0 [ 583.817564][T18459] syzkaller0: entered promiscuous mode [ 583.817583][T18459] syzkaller0: entered allmulticast mode [ 583.895940][T18459] tipc: Resetting bearer [ 583.961272][T18457] tipc: Resetting bearer [ 584.119375][T18457] tipc: Disabling bearer [ 584.292435][T18419] wg2 speed is unknown, defaulting to 1000 [ 584.642610][T18486] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2915'. [ 584.702136][ T5619] Bluetooth: hci1: command tx timeout [ 584.801629][T18495] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 585.731869][T18526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2925'. [ 585.786771][T18419] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.788118][T18419] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.788283][T18419] bridge_slave_0: entered allmulticast mode [ 585.798734][T18419] bridge_slave_0: entered promiscuous mode [ 585.804360][T18419] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.804555][T18419] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.805370][T18419] bridge_slave_1: entered allmulticast mode [ 585.808483][T18419] bridge_slave_1: entered promiscuous mode [ 586.072798][T18419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.084638][T18419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.177011][T18528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2926'. [ 586.212281][T18419] team0: Port device team_slave_0 added [ 586.215148][T18419] team0: Port device team_slave_1 added [ 586.256599][T18419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.256616][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.256638][T18419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.258582][T18419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.258596][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.258617][T18419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.612988][T18419] hsr_slave_0: entered promiscuous mode [ 586.614449][T18533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2928'. [ 586.617632][T18419] hsr_slave_1: entered promiscuous mode [ 586.620046][T18419] debugfs: 'hsr0' already exists in 'hsr' [ 586.620066][T18419] Cannot create hsr debugfs directory [ 586.783101][ T5619] Bluetooth: hci1: command tx timeout [ 586.805384][T18534] tipc: Started in network mode [ 586.805446][T18534] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 586.805525][T18534] tipc: Enabling of bearer rejected, failed to enable media [ 586.871585][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 587.678748][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 588.207567][T18564] syzkaller0: entered promiscuous mode [ 588.207606][T18564] syzkaller0: entered allmulticast mode [ 588.372774][T18567] syzkaller0: entered promiscuous mode [ 588.372796][T18567] syzkaller0: entered allmulticast mode [ 588.609705][T18578] tipc: Enabled bearer , priority 0 [ 588.865669][ T5619] Bluetooth: hci1: command tx timeout [ 589.065968][T18566] tipc: Resetting bearer [ 589.118326][T18566] tipc: Disabling bearer [ 589.186357][T18602] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 589.201822][T18596] team0: Device wg1 is of different type [ 589.232720][T18596] net_ratelimit: 496 callbacks suppressed [ 589.232755][T18596] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 589.241635][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2942'. [ 589.447853][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 589.591124][T18596] bond3: option arp_validate: invalid value (1048579) [ 589.600369][T18596] bond3 (unregistering): Released all slaves [ 589.747663][T18598] bond3: option arp_validate: invalid value (1048579) [ 589.764964][T18598] bond3 (unregistering): Released all slaves [ 589.803745][T18602] bridge1: entered promiscuous mode [ 589.883900][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 590.077960][T18626] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20001 [ 590.078838][T18626] netlink: Invalid conntrack helper [ 590.078867][T18626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.272868][T18630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 590.942151][ T5619] Bluetooth: hci1: command tx timeout [ 592.279259][T18605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.361406][T18419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 592.456451][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.465647][T18419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 592.568527][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.573360][T18419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 592.576935][T18641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2953'. [ 592.608950][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.619331][T18419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 592.643340][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 592.673594][T18645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2954'. [ 592.716800][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2954'. [ 592.917779][T18653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2956'. [ 592.920504][T18653] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 593.037685][T18667] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2959'. [ 593.098610][T18419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.191821][T18419] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.240328][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.240443][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.267398][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.267503][T10893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.077883][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'. [ 594.291556][T18705] block nbd0: reconnected socket [ 594.301687][ T5619] block nbd0: Receive control failed (result -32) [ 594.452433][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2967'. [ 594.691547][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2968'. [ 594.750960][T18721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.644257][T18419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.129691][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 596.320915][T18772] netlink: 'syz.0.2982': attribute type 1 has an invalid length. [ 596.936297][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 596.938429][T18419] veth0_vlan: entered promiscuous mode [ 596.987973][T18419] veth1_vlan: entered promiscuous mode [ 597.170128][T18419] veth0_macvtap: entered promiscuous mode [ 597.330549][T18419] veth1_macvtap: entered promiscuous mode [ 597.353815][T18801] netlink: 'syz.1.2992': attribute type 83 has an invalid length. [ 597.480800][T18419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.658315][T18419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.764465][T18821] tipc: Started in network mode [ 597.764494][T18821] tipc: Node identity e6f13b5b4a42, cluster identity 4711 [ 597.765824][T18821] tipc: Enabled bearer , priority 0 [ 597.784579][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.786950][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.786987][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.787019][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.097851][T18820] tipc: Disabling bearer [ 598.286275][T10893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.286330][T10893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.406077][T18838] __nla_validate_parse: 3 callbacks suppressed [ 598.406095][T18838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3000'. [ 598.454209][T10906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.454246][T10906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.566995][T18841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.859453][T18853] No such timeout policy "syz1" [ 598.881977][T18853] No such timeout policy "syz1" [ 598.882845][T18853] No such timeout policy "syz1" [ 598.913242][T18853] No such timeout policy "syz1" [ 598.913970][T18853] No such timeout policy "syz1" [ 598.918756][T18853] No such timeout policy "syz1" [ 598.919510][T18853] No such timeout policy "syz1" [ 598.950286][T18853] No such timeout policy "syz1" [ 598.964969][T18853] No such timeout policy "syz1" [ 598.967906][T18853] No such timeout policy "syz1" [ 599.568322][T18164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 599.582040][T18164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 599.590946][T18164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 599.607705][T18164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 599.613198][T18164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 599.638412][ T5619] [ 599.640772][ T5619] ====================================================== [ 599.647823][ T5619] WARNING: possible circular locking dependency detected [ 599.655001][ T5619] syzkaller #0 Not tainted [ 599.659423][ T5619] ------------------------------------------------------ [ 599.666513][ T5619] kworker/u9:3/5619 is trying to acquire lock: [ 599.672660][ T5619] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 599.683268][ T5619] [ 599.683268][ T5619] but task is already holding lock: [ 599.690634][ T5619] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 599.700052][ T5619] [ 599.700052][ T5619] which lock already depends on the new lock. [ 599.700052][ T5619] [ 599.710449][ T5619] [ 599.710449][ T5619] the existing dependency chain (in reverse order) is: [ 599.719459][ T5619] [ 599.719459][ T5619] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 599.727534][ T5619] down_write+0x96/0x200 [ 599.732352][ T5619] kernfs_add_one+0x41/0x6f0 [ 599.737454][ T5619] kernfs_create_dir_ns+0x1a1/0x230 [ 599.743160][ T5619] internal_create_group+0x440/0x1180 [ 599.749051][ T5619] cpuhp_invoke_callback+0x434/0x810 [ 599.754852][ T5619] cpuhp_issue_call+0x3f0/0x750 [ 599.760215][ T5619] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 599.766793][ T5619] __cpuhp_setup_state+0x3f/0x60 [ 599.772240][ T5619] do_one_initcall+0x250/0x870 [ 599.777518][ T5619] do_initcall_level+0x10a/0x1a0 [ 599.783036][ T5619] do_initcalls+0x59/0xa0 [ 599.787876][ T5619] kernel_init_freeable+0x29d/0x3e0 [ 599.793581][ T5619] kernel_init+0x22/0x1d0 [ 599.798421][ T5619] ret_from_fork+0x514/0xb70 [ 599.803556][ T5619] ret_from_fork_asm+0x1a/0x30 [ 599.808842][ T5619] [ 599.808842][ T5619] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 599.816650][ T5619] [ 599.816650][ T5619] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 599.824367][ T5619] cpus_read_lock+0x42/0x160 [ 599.829472][ T5619] static_key_slow_inc+0x12/0x30 [ 599.834947][ T5619] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 599.841282][ T5619] nbd_genl_foreach_sock+0x265/0x450 [ 599.847082][ T5619] nbd_genl_reconfigure+0xbbb/0x1040 [ 599.852891][ T5619] genl_family_rcv_msg_doit+0x233/0x340 [ 599.859031][ T5619] genl_rcv_msg+0x614/0x7a0 [ 599.864045][ T5619] netlink_rcv_skb+0x226/0x4a0 [ 599.869384][ T5619] genl_rcv+0x28/0x40 [ 599.873879][ T5619] netlink_unicast+0x7bd/0x940 [ 599.879162][ T5619] netlink_sendmsg+0x813/0xb40 [ 599.884433][ T5619] sock_sendmsg_nosec+0x13a/0x180 [ 599.889968][ T5619] ____sys_sendmsg+0x54e/0x850 [ 599.895245][ T5619] ___sys_sendmsg+0x2a5/0x360 [ 599.900437][ T5619] __x64_sys_sendmsg+0x1b1/0x290 [ 599.905894][ T5619] do_syscall_64+0x166/0x520 [ 599.911015][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.917438][ T5619] [ 599.917438][ T5619] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 599.925084][ T5619] __mutex_lock+0x19d/0x1550 [ 599.930196][ T5619] nbd_queue_rq+0x373/0xff0 [ 599.935212][ T5619] blk_mq_dispatch_rq_list+0x499/0x1990 [ 599.941368][ T5619] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 599.948250][ T5619] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 599.954746][ T5619] blk_mq_run_work_fn+0x16c/0x300 [ 599.960286][ T5619] process_scheduled_works+0xc3d/0x1630 [ 599.966343][ T5619] worker_thread+0xa47/0xfb0 [ 599.971446][ T5619] kthread+0x38b/0x480 [ 599.976021][ T5619] ret_from_fork+0x514/0xb70 [ 599.981122][ T5619] ret_from_fork_asm+0x1a/0x30 [ 599.986436][ T5619] [ 599.986436][ T5619] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 599.993637][ T5619] __mutex_lock+0x19d/0x1550 [ 599.998744][ T5619] nbd_queue_rq+0xc1/0xff0 [ 600.003673][ T5619] blk_mq_dispatch_rq_list+0x499/0x1990 [ 600.009731][ T5619] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 600.016574][ T5619] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 600.023070][ T5619] blk_mq_run_work_fn+0x16c/0x300 [ 600.028608][ T5619] process_scheduled_works+0xc3d/0x1630 [ 600.034672][ T5619] worker_thread+0xa47/0xfb0 [ 600.039796][ T5619] kthread+0x38b/0x480 [ 600.044388][ T5619] ret_from_fork+0x514/0xb70 [ 600.049489][ T5619] ret_from_fork_asm+0x1a/0x30 [ 600.054768][ T5619] [ 600.054768][ T5619] -> #4 (set->srcu){.+.+}-{0:0}: [ 600.061882][ T5619] __synchronize_srcu+0xc9/0x2f0 [ 600.067340][ T5619] elevator_switch+0x1e8/0x7b0 [ 600.072693][ T5619] elevator_change+0x2fa/0x480 [ 600.077964][ T5619] elevator_set_default+0x375/0x440 [ 600.083672][ T5619] blk_register_queue+0x3f3/0x4e0 [ 600.089280][ T5619] __add_disk+0x6b8/0xdb0 [ 600.094157][ T5619] add_disk_fwnode+0x100/0x3a0 [ 600.099432][ T5619] nbd_dev_add+0x733/0xb60 [ 600.104352][ T5619] nbd_init+0x168/0x1f0 [ 600.109121][ T5619] do_one_initcall+0x250/0x870 [ 600.114407][ T5619] do_initcall_level+0x10a/0x1a0 [ 600.119861][ T5619] do_initcalls+0x59/0xa0 [ 600.124699][ T5619] kernel_init_freeable+0x29d/0x3e0 [ 600.130406][ T5619] kernel_init+0x22/0x1d0 [ 600.135245][ T5619] ret_from_fork+0x514/0xb70 [ 600.140343][ T5619] ret_from_fork_asm+0x1a/0x30 [ 600.145619][ T5619] [ 600.145619][ T5619] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 600.153426][ T5619] __mutex_lock+0x19d/0x1550 [ 600.158532][ T5619] elevator_change+0x1af/0x480 [ 600.163804][ T5619] elevator_set_none+0xb5/0x140 [ 600.169161][ T5619] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 600.175479][ T5619] nbd_start_device+0x189/0xb30 [ 600.180840][ T5619] nbd_genl_connect+0x167d/0x1cd0 [ 600.186371][ T5619] genl_family_rcv_msg_doit+0x233/0x340 [ 600.192431][ T5619] genl_rcv_msg+0x614/0x7a0 [ 600.197443][ T5619] netlink_rcv_skb+0x226/0x4a0 [ 600.202721][ T5619] genl_rcv+0x28/0x40 [ 600.207210][ T5619] netlink_unicast+0x7bd/0x940 [ 600.212482][ T5619] netlink_sendmsg+0x813/0xb40 [ 600.217757][ T5619] sock_sendmsg_nosec+0x13a/0x180 [ 600.223288][ T5619] ____sys_sendmsg+0x54e/0x850 [ 600.228566][ T5619] ___sys_sendmsg+0x2a5/0x360 [ 600.233755][ T5619] __x64_sys_sendmsg+0x1b1/0x290 [ 600.239204][ T5619] do_syscall_64+0x166/0x520 [ 600.244309][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.250712][ T5619] [ 600.250712][ T5619] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 600.259312][ T5619] blk_alloc_queue+0x544/0x690 [ 600.264589][ T5619] __blk_mq_alloc_disk+0x194/0x390 [ 600.270214][ T5619] nbd_dev_add+0x494/0xb60 [ 600.275141][ T5619] nbd_init+0x168/0x1f0 [ 600.279810][ T5619] do_one_initcall+0x250/0x870 [ 600.285100][ T5619] do_initcall_level+0x10a/0x1a0 [ 600.290564][ T5619] do_initcalls+0x59/0xa0 [ 600.295405][ T5619] kernel_init_freeable+0x29d/0x3e0 [ 600.301117][ T5619] kernel_init+0x22/0x1d0 [ 600.305956][ T5619] ret_from_fork+0x514/0xb70 [ 600.311053][ T5619] ret_from_fork_asm+0x1a/0x30 [ 600.316336][ T5619] [ 600.316336][ T5619] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 600.323534][ T5619] fs_reclaim_acquire+0x71/0x100 [ 600.328979][ T5619] kmem_cache_alloc_noprof+0x5f/0x600 [ 600.334864][ T5619] __kernfs_iattrs+0xdd/0x380 [ 600.340045][ T5619] kernfs_iop_setattr+0xe6/0x3f0 [ 600.345493][ T5619] notify_change+0xbba/0xea0 [ 600.350595][ T5619] do_truncate+0x1c2/0x250 [ 600.355525][ T5619] path_openat+0x15b5/0x1d60 [ 600.360620][ T5619] do_file_open+0x23e/0x4a0 [ 600.365632][ T5619] do_sys_openat2+0x115/0x200 [ 600.370820][ T5619] __x64_sys_openat+0x138/0x170 [ 600.376180][ T5619] do_syscall_64+0x166/0x520 [ 600.381279][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.387686][ T5619] [ 600.387686][ T5619] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 600.396185][ T5619] __lock_acquire+0x164c/0x2de0 [ 600.401544][ T5619] lock_acquire+0x115/0x350 [ 600.406551][ T5619] down_write+0x96/0x200 [ 600.411309][ T5619] kernfs_link_sibling+0x4c7/0x5a0 [ 600.416931][ T5619] kernfs_add_one+0x2db/0x6f0 [ 600.422116][ T5619] kernfs_create_dir_ns+0x1a1/0x230 [ 600.427827][ T5619] sysfs_create_dir_ns+0x12f/0x2a0 [ 600.433451][ T5619] kobject_add_internal+0x622/0xcd0 [ 600.439237][ T5619] kobject_add+0x163/0x240 [ 600.444206][ T5619] device_add+0x3fa/0xb80 [ 600.449094][ T5619] hci_conn_add_sysfs+0xd5/0x210 [ 600.454603][ T5619] hci_conn_complete_evt+0x8a8/0x1350 [ 600.460524][ T5619] hci_event_packet+0x6cd/0xf10 [ 600.465886][ T5619] hci_rx_work+0x3ee/0x1020 [ 600.470950][ T5619] process_scheduled_works+0xc3d/0x1630 [ 600.477006][ T5619] worker_thread+0xa47/0xfb0 [ 600.482110][ T5619] kthread+0x38b/0x480 [ 600.486683][ T5619] ret_from_fork+0x514/0xb70 [ 600.491778][ T5619] ret_from_fork_asm+0x1a/0x30 [ 600.497055][ T5619] [ 600.497055][ T5619] other info that might help us debug this: [ 600.497055][ T5619] [ 600.507265][ T5619] Chain exists of: [ 600.507265][ T5619] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 600.507265][ T5619] [ 600.521744][ T5619] Possible unsafe locking scenario: [ 600.521744][ T5619] [ 600.529241][ T5619] CPU0 CPU1 [ 600.534655][ T5619] ---- ---- [ 600.540020][ T5619] lock(&root->kernfs_rwsem); [ 600.544771][ T5619] lock(cpuhp_state_mutex); [ 600.551867][ T5619] lock(&root->kernfs_rwsem); [ 600.559141][ T5619] lock(&root->kernfs_iattr_rwsem); [ 600.564414][ T5619] [ 600.564414][ T5619] *** DEADLOCK *** [ 600.564414][ T5619] [ 600.572605][ T5619] locks held by kworker/u9:3/5619: 4, last CPU#0: [ 600.579054][ T5619] #0: ffff88802840c940 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.590059][ T5619] #1: ffffc90004317c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.602051][ T5619] #2: ffff88805197c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 600.611872][ T5619] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 600.621702][ T5619] [ 600.621702][ T5619] stack backtrace: [ 600.627581][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 600.637023][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.647069][ T5619] Workqueue: hci4 hci_rx_work [ 600.651745][ T5619] Call Trace: [ 600.655024][ T5619] [ 600.657947][ T5619] dump_stack_lvl+0xe8/0x150 [ 600.662533][ T5619] print_circular_bug+0x2e2/0x300 [ 600.667553][ T5619] check_noncircular+0x12f/0x150 [ 600.672484][ T5619] __lock_acquire+0x164c/0x2de0 [ 600.677327][ T5619] ? __lock_acquire+0x747/0x2de0 [ 600.682257][ T5619] lock_acquire+0x115/0x350 [ 600.686752][ T5619] ? kernfs_link_sibling+0x4c7/0x5a0 [ 600.692035][ T5619] down_write+0x96/0x200 [ 600.696276][ T5619] ? kernfs_link_sibling+0x4c7/0x5a0 [ 600.701552][ T5619] ? __pfx_down_write+0x10/0x10 [ 600.706398][ T5619] ? kernfs_root+0x1c/0x230 [ 600.710893][ T5619] ? kernfs_root+0x1c/0x230 [ 600.715383][ T5619] ? kernfs_root+0x1c/0x230 [ 600.719873][ T5619] ? kernfs_root+0x1ea/0x230 [ 600.724456][ T5619] kernfs_link_sibling+0x4c7/0x5a0 [ 600.729569][ T5619] kernfs_add_one+0x2db/0x6f0 [ 600.734243][ T5619] kernfs_create_dir_ns+0x1a1/0x230 [ 600.739437][ T5619] sysfs_create_dir_ns+0x12f/0x2a0 [ 600.744542][ T5619] ? kasan_check_range+0x97/0x2c0 [ 600.749556][ T5619] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 600.755183][ T5619] ? do_raw_spin_unlock+0xf5/0x200 [ 600.760288][ T5619] kobject_add_internal+0x622/0xcd0 [ 600.765473][ T5619] kobject_add+0x163/0x240 [ 600.769888][ T5619] ? __pfx_kobject_add+0x10/0x10 [ 600.774820][ T5619] ? get_device_parent+0x366/0x3a0 [ 600.779923][ T5619] device_add+0x3fa/0xb80 [ 600.784253][ T5619] hci_conn_add_sysfs+0xd5/0x210 [ 600.789202][ T5619] hci_conn_complete_evt+0x8a8/0x1350 [ 600.794591][ T5619] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 600.800574][ T5619] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 600.806374][ T5619] ? skb_pull_data+0xf0/0x200 [ 600.811149][ T5619] hci_event_packet+0x6cd/0xf10 [ 600.815999][ T5619] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 600.821795][ T5619] ? __pfx_hci_event_packet+0x10/0x10 [ 600.827161][ T5619] ? audit_filter_rules+0x45f0/0x5d10 [ 600.832554][ T5619] ? hci_send_to_monitor+0xe2/0x590 [ 600.837806][ T5619] hci_rx_work+0x3ee/0x1020 [ 600.842301][ T5619] ? process_scheduled_works+0x97a/0x1630 [ 600.848012][ T5619] process_scheduled_works+0xc3d/0x1630 [ 600.853560][ T5619] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.859531][ T5619] ? assign_work+0x3cf/0x5d0 [ 600.864114][ T5619] worker_thread+0xa47/0xfb0 [ 600.868708][ T5619] kthread+0x38b/0x480 [ 600.872762][ T5619] ? __pfx_worker_thread+0x10/0x10 [ 600.877879][ T5619] ? __pfx_kthread+0x10/0x10 [ 600.882456][ T5619] ret_from_fork+0x514/0xb70 [ 600.887035][ T5619] ? __pfx_ret_from_fork+0x10/0x10 [ 600.892140][ T5619] ? __switch_to+0xc89/0x1420 [ 600.896845][ T5619] ? __pfx_kthread+0x10/0x10 [ 600.901420][ T5619] ret_from_fork_asm+0x1a/0x30 [ 600.906190][ T5619] SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 602.163338][T10893] bond1 (unregistering): (slave gretap1): Releasing active interface [ 602.191049][T10893] bond3 (unregistering): (slave gre1): Releasing backup interface [ 602.325518][T10893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.326580][T10893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.327130][T10893] bond0 (unregistering): Released all slaves [ 602.329989][T10893] bond1 (unregistering): Released all slaves [ 602.368886][T10893] bond2 (unregistering): Released all slaves [ 602.380321][T10893] bond3 (unregistering): Released all slaves [ 602.400860][T10893] bond4 (unregistering): (slave veth9): Releasing active interface [ 602.401861][T10893] bond4 (unregistering): (slave veth11): Releasing active interface [ 602.418734][T10893] bond4 (unregistering): Released all slaves [ 602.468183][T10893] tipc: Left network mode [ 603.050329][T10893] team0 (unregistering): Port device team_slave_1 removed [ 603.080658][T10893] team0 (unregistering): Port device team_slave_0 removed [ 603.210939][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 603.340696][T10893] IPVS: stop unused estimator thread 0... [ 603.411233][T10893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.470744][T10893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.536446][T10893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.600938][T10893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.626078][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 603.719603][T10893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.770091][T10893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.825869][T10893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.875287][T10893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.975513][T10893] bridge_slave_1: left allmulticast mode [ 603.975548][T10893] bridge_slave_1: left promiscuous mode [ 603.975783][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.978217][T10893] bridge_slave_0: left allmulticast mode [ 603.978237][T10893] bridge_slave_0: left promiscuous mode [ 603.978365][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.983825][T10893] bridge_slave_1: left allmulticast mode [ 603.983845][T10893] bridge_slave_1: left promiscuous mode [ 603.983957][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.996588][T10893] bridge_slave_0: left allmulticast mode [ 603.996609][T10893] bridge_slave_0: left promiscuous mode [ 603.996733][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.196098][T10893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.197851][T10893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.198946][T10893] bond0 (unregistering): Released all slaves [ 604.251147][T10893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.261542][T10893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.266459][T10893] bond0 (unregistering): Released all slaves [ 604.269213][T10893] bond1 (unregistering): Released all slaves [ 604.274490][T10893] bond2 (unregistering): Released all slaves [ 604.292884][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 604.363144][T10893] tipc: Left network mode [ 604.664258][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 604.726366][T10893] hsr_slave_0: left promiscuous mode [ 604.727088][T10893] hsr_slave_1: left promiscuous mode [ 604.727928][T10893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.727958][T10893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.728743][T10893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.728758][T10893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.786033][T10893] hsr_slave_0: left promiscuous mode [ 604.786775][T10893] hsr_slave_1: left promiscuous mode [ 604.787597][T10893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.787615][T10893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.788382][T10893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.788396][T10893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.858162][T10893] veth1_macvtap: left promiscuous mode [ 604.858216][T10893] veth0_macvtap: left promiscuous mode [ 604.858312][T10893] veth1_vlan: left promiscuous mode [ 604.858388][T10893] veth0_vlan: left promiscuous mode [ 604.860224][T10893] veth1_macvtap: left promiscuous mode [ 604.860262][T10893] veth0_macvtap: left promiscuous mode [ 604.860355][T10893] veth1_vlan: left promiscuous mode [ 604.860422][T10893] veth0_vlan: left promiscuous mode [ 605.150213][T10893] team0 (unregistering): Port device team_slave_1 removed [ 605.161109][T10893] team0 (unregistering): Port device team_slave_0 removed [ 605.320935][T10893] team0 (unregistering): Port device team_slave_1 removed [ 605.344280][T10893] team0 (unregistering): Port device team_slave_0 removed [ 605.918291][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 606.267928][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 606.588991][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 606.953555][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 607.261787][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 607.579733][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 607.886460][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 608.208663][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12