last executing test programs: 18.167863166s ago: executing program 1 (id=9004): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) (async) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xd8}, 0x14) (async) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={r3, @empty, @rand_addr=0x64010102}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 17.653065351s ago: executing program 1 (id=9008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)={0x3c, r3, 0xa2b, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="6ca34bce21e1"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e539338222f58ae1c63ea917aedebd00"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000024c0)={{0xffffffffffffffff, &(0x7f0000001340)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x0, &(0x7f0000001380)={@_ha_fsid={[0x9, 0x81]}, {0x101, 0x2, 0x0, 0x5}}, 0x1, &(0x7f00000013c0)={@_ha_fsid}, &(0x7f0000001400)=0x5}, {[0x40, 0x3, 0x7, 0x9]}, 0x4, 0x1f, &(0x7f0000001440)=""/31}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000002640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002600)={&(0x7f0000002680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00013abd70000000000008000300fe000000000000000000000000379e9b75219e54de07c6c89b1190d82263a4409d60f6ca2a949f5cece32a0fb6d3f85c0752ac1817f421336afcffffff1a42a9f36207f90b82a8e6b19e4377ee4f6fecdf25f793dbe5048ddc1385886f4358ceec37f73e6ea13eec2d3454a7943fcc8f32026de28d58a5dfafb1d5e7aba8b26754b87e34467467fc1578b4ed911bbe670e0daf9f0fe3726a99b6224a2878a37405ddf753faa00da5b852f052f5488ee713b84dfce17eb1cabbad68c9b209c9922c1e", @ANYRES32=r5, @ANYBLOB="0c00990009000000240000000800db00", @ANYRES32=r6, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) preadv(r8, &(0x7f0000000000)=[{&(0x7f00000014c0)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/4076, 0xfec}, {&(0x7f00000011c0)=""/251, 0xfb}], 0x3, 0x8, 0x45) 17.395196037s ago: executing program 1 (id=9010): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000440)="c21b572ca640722944b85c2340a21d49402a3361ba621129f1273a957300cacf135222bfe4fa7ebe707f5ec83356d49f7541d0528bc6101ca2673cc142b50898535ab4a6e076c9192bad63dd1cd55b774eda3abcb754bb3fe033ab82974919d858a6f79308492c8c30a7f77102d3af64914092dbaee3bf09b2a183ad8485853034c57bb52c792035f955662f7c4807a938012e2713eb29233b465831c5a6896d6e5954cf", 0xa4, 0x4040, &(0x7f0000000500)={0xa, 0x4e20, 0xde, @empty, 0x7}, 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42001, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x2, 0x6, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000300)={&(0x7f0000000340)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)='\'', 0x1}], 0x1}, 0x804) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x8, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x4, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0xb}, {0xfff, 0x1000006, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x3ff, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x10000008, 0x3, 0x7, 0x8, 0x6}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0xffffffff, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xa, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0x5, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0xe, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x100}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x52, 0x1}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.818964982s ago: executing program 1 (id=9016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c0000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mmap(&(0x7f0000938000/0x8000)=nil, 0x8000, 0x2, 0x22052, r1, 0x41877000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0xd, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fc7f000000000000ff000000180100002020642500000000002020207b1af8ff00000000bfa1080000e6ff0047010000f6ffffffb702000008000000b7030000ff0015ff850000007200000095"], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=r8, 0x4) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r9}, 0x8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) getsockopt$inet6_mreq(r11, 0x29, 0x15, &(0x7f0000000880)={@ipv4, 0x0}, &(0x7f00000008c0)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) sendmsg$nl_route(r13, &(0x7f0000000b40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c00)=@ipv4_newroute={0x44, 0x18, 0x200, 0x70bd27, 0x25dfdbfb, {0x2, 0x14, 0x10, 0xaf, 0xfc, 0x3, 0xfd, 0xa, 0x1200}, [@RTA_OIF={0x8, 0x4, r12}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010102}, @RTA_DST={0x8, 0x1, @local}, @RTA_UID={0x8, 0x19, r14}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x40041) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@mcast1, @in6=@empty, 0x4e20, 0x6, 0x4e22, 0x5, 0xa, 0x100, 0x80, 0x21, r4, r14}, {0x7, 0x7fffffff, 0x1, 0x9b09, 0x9, 0xeb, 0x1, 0x4}, {0xad3, 0xe, 0x0, 0x37}, 0xfffffffb, 0x6e6bbd, 0x2}, {{@in6=@private2, 0x4d6, 0x33}, 0xa, @in6=@remote, 0x3504, 0x1, 0x1, 0x4, 0x80, 0x9, 0x1}}, 0xe8) read(r10, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) getsockopt$inet_opts(r5, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 16.282505434s ago: executing program 1 (id=9022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x1ff, 0x8, 0x80, 0x6, 0xfffffffb, 0x80000001, 0xd, 0x800}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x88c1}, 0x814) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="27030200d1eb14120600002fb96d13cec9621e4c6cd35377ddb0fea881469bb48e47186907a980b5399d3cc0bf94e4643c9bcbd94f1dc0d19bc17e7328adb926bb69577b9bbf47e02ad0be5457eaf08ced69874de9cfe27810d306b15fb1dddb119415abe6c817f660667755bd869a879b48636108d73eed58c4e7ec31dd0736d3bcc1fdded4d30108c268a3f29736dd7b90982f7228f4ba02f7aec08eca3d47f738103b0d8eebd1eb0e88e915a8705cec24e2b99239943dcdc59d393be1d09bd0effa7690de9e829bf32c46ee", 0xcd}], 0x1}, 0x45) shutdown(r0, 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x2010, r0, 0x6fd73000) socket$key(0xf, 0x3, 0x2) 15.502303921s ago: executing program 1 (id=9028): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0}, 0x40) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000100)={0x0, 0x80000001}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x401}, &(0x7f0000000200)=0x8) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0e, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x40) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x8000000000000000, 0x4}) close(0x4) 4.040546029s ago: executing program 2 (id=9088): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x800) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x39, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x170, 0x170, 0x9, [@fwd={0xd}, @int={0x3, 0x0, 0x0, 0x1, 0x18, 0x2a, 0x0, 0x8, 0x3}, @union={0x0, 0x3, 0x0, 0x5, 0x1, 0x8, [{0x9, 0x3}, {0x1, 0x3, 0x3}, {0xa, 0x2, 0x2}]}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @struct={0xf, 0x5, 0x0, 0x4, 0x1, 0x8, [{0x3, 0x1, 0x87}, {0xc, 0x3, 0x8}, {0x8, 0x5, 0x8001}, {0x9, 0x1, 0x200}, {0x5, 0x5, 0x1000}]}, @var={0x4, 0x0, 0x0, 0xe, 0x1, 0x3}, @struct={0xa, 0xa, 0x0, 0x4, 0x0, 0x10001, [{0x8, 0x4, 0x1000}, {0x5, 0x0, 0x2}, {0x3, 0x3, 0x1}, {0xf, 0x4, 0x10000}, {0x4, 0x5}, {0x8, 0x0, 0x4800}, {0x0, 0x4, 0xffffff81}, {0x6, 0x0, 0x6}, {0xe, 0x3, 0x9}, {0xc, 0x1}]}, @float={0xd, 0x0, 0x0, 0x10, 0x2}, @ptr={0xc, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x5}, {0xa, 0x2}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x0, 0x30]}}, &(0x7f0000000640)=""/125, 0x191, 0x7d, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8, '\x00', r4, r5, 0x4, 0x0, 0x3}, 0x50) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000780)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x140c, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x9000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r6}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x8, 0xfffff8e8, 0x4, 0x20000, r8, 0x1, '\x00', r4, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x8, 0xfffff8e8, 0x4, 0x20000, r8, 0x1, '\x00', r4, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x7}, 0x50) socket$rds(0x15, 0x5, 0x0) (async) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f00000019c0)={@isdn={0x22, 0x4, 0x3, 0xf, 0x9}, {&(0x7f0000000980)=""/4096, 0x1000}, &(0x7f0000001980), 0x9}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f00000019c0)={@isdn={0x22, 0x4, 0x3, 0xf, 0x9}, {&(0x7f0000000980)=""/4096, 0x1000}, &(0x7f0000001980), 0x9}, 0xa0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)=@newchain={0x44, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {0x9, 0xfff3}, {0x9, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x40, 0xbc}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x71, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4895}, 0x4000) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000001bc0)={'tunl0\x00', 0xfffffffffffff720, 0x7}) unshare(0x10000000) syz_genetlink_get_family_id$team(&(0x7f0000001cc0), r9) splice(r2, &(0x7f0000001d00)=0x2, r8, &(0x7f0000001d40)=0x1, 0xe37, 0x0) sendmmsg$inet(r1, &(0x7f0000002280)=[{{&(0x7f0000001d80)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)="66687a2a9b2a33619048ac8e1c83583b046ca004dbeafe53244935953fde70728b7ff716d7f41c64e01731a95b3ec48cbe4a7ec7c03b5545c938b1d5105f08ac5137de93988faeea", 0x48}, {&(0x7f0000001e40)="aa62b47e87bdd366e674c8fa16558c3f4604a26fa043cffc0ee2df7f4338c68ef58275cedf2c06af23f9e6dc6b7b07b224fea9af60fcb0", 0x37}, {&(0x7f0000001e80)="eca50070b02b136ba12df4ce909a98a1a7d3dba403f751b3ff58114f9cc70b871a241ea7f021f0b46d07ee790f9a2d4112b374d67855629cc569af199e624eff1f30a95fdb7c586f41e986e9c3cb4af1c56a655583aaccc6a9f9c844759ef22b0b9a09ff413b8f56e4a0e37c0524be0131c9493b37b3605f3fb464969352baeb3594d48c5b7d13cd41d7ac34dcf25da69eb57581b0ee8f0d70da1cdf91eb86d1e10b096c2b6ec857026a59f93d4eebf6d2aebd28d745958c6df876e055f3c7981391bbfe8fc08d9654cbaa726673c994e6fe", 0xd2}, {&(0x7f0000001f80)="f0a597b7e15f71fb23487b3728ca4614e90eacbb9331de2b7abd32013050c97cf9c19e5f8f6ef2af8fd76fd0904120f67a8285d9e1bae08cd5", 0x39}], 0x4, &(0x7f0000002000)=[@ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0xf, 0xae, [@multicast1, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0xa1, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010101}]}]}}}], 0x38}}, {{&(0x7f0000002040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002080)="8a8418ee8999b6b75a5322beb001e7bdcb2d57e34170cdff619b0219bb34705628ed0d792365c863cbc46e1f95a7fcfa956240d80a13a4832ac2c33149fb41eb4d7873449a39cb481d16a35eb7a66cde13ad022ff746708bd32feaf8dbbbe1c275b16189319f4224f6acadd38dc56dd74120b8cae0c97cd2629c3112ec900ff3c7488fdda6c70c29f0f3e6cb11fffe33798b4d147ca929ec1d2e1fb1d64251b14f661068fb2554ff63ec4eb971774f13c5165a7ad2cb8ae18d8532f2be1f6e188971e24d550523393e4de38fd8869e776c0ba47a4ebae2a4a9bd06ca48b3882174108e446bfe3c2b5d7f0fc09e18a964cce32a2e4b", 0xf5}, {&(0x7f0000002180)="2a3505d43d4056eb0e3907f30dd7319337a0df2dc4750eafc966281ce6da4db50f6ca3bf86", 0x25}, {&(0x7f00000021c0)="e1e9", 0x2}, {&(0x7f0000002200)='1%;\a', 0x4}], 0x4}}], 0x2, 0x40008d5) write(r9, &(0x7f0000002300)="ed0755b3cef7ef67ff7541e65a19fcaad177791dac446a869d552cb7acef1c99bc138bbfed993d91ff81d85a43402647b0a36b15ad1447f496bea90ed10e054937ada93dc940cc36d57d030cd377b798d1e03e82f8798244002c5776275d00c13823600d8ee8ae91b2c2f7d9cca4ac380f62a48014e93a6061dfac38f8986587b454161e6b1b3dfb9cdb1a9ebedfb22101d6a0", 0x93) sendmsg$NFT_BATCH(r2, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002580)={'sit0\x00', &(0x7f0000002540)={'erspan0\x00', r4, 0x0, 0x10, 0x8, 0x8, {{0x6, 0x4, 0x3, 0x12, 0x18, 0x66, 0x0, 0x61, 0x29, 0x0, @local, @empty, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0xf01cd312d28eba3e}, 0xc, &(0x7f00000026c0)={&(0x7f00000025c0)={0xf8, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0xf01cd312d28eba3e}, 0xc, &(0x7f00000026c0)={&(0x7f00000025c0)={0xf8, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x10, 0x140f, 0x400, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000002940)={r1, &(0x7f0000002840)='*^-:%%\x00', 0x18002, &(0x7f0000002880)={@_ha_fsid={[0x6, 0x4]}, {0x89, 0x4, 0x9, 0xe}}, 0x3, &(0x7f00000028c0), &(0x7f0000002900)=0x1}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000002940)={r1, &(0x7f0000002840)='*^-:%%\x00', 0x18002, &(0x7f0000002880)={@_ha_fsid={[0x6, 0x4]}, {0x89, 0x4, 0x9, 0xe}}, 0x3, &(0x7f00000028c0), &(0x7f0000002900)=0x1}) setsockopt$sock_int(r12, 0x1, 0x29, &(0x7f0000002980)=0x9, 0x4) (async) setsockopt$sock_int(r12, 0x1, 0x29, &(0x7f0000002980)=0x9, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000029c0)) 3.528594426s ago: executing program 2 (id=9091): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5b30, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000500)="962b07a3f9c8", 0x6}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x38}, 0x42090) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r2}, &(0x7f00000002c0), &(0x7f0000000740)='%pB \x00'}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="80000000000101010000000000000000050000050c0016400000000600003a8f0800154000000000343a1880080002400000000608000140000100000800034000000f550000000000000002080002400000009b0800014000b4c62c88000c4000fffff308000340000000020800024000000005"], 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x1) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x24, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0x9}, {0x0, 0x9}, {0xffe0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000004060500004e6114240000001f000003050073797a3100"/40], 0x28}, 0x1, 0x0, 0x0, 0x4040095}, 0x40) unshare(0x8040480) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r11, 0x4) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000007c0)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.727221242s ago: executing program 2 (id=9094): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x7f, 0x8}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) pselect6(0x40, &(0x7f0000000480)={0x6, 0x5, 0x7, 0x8, 0x3, 0xffffffffffffff21, 0x1c, 0x2e61e35e}, &(0x7f0000000500)={0x100000001, 0x6, 0xd, 0x5, 0x7f, 0x5, 0x4, 0xe5}, &(0x7f0000000540)={0x3, 0x6, 0x8, 0x9d7d, 0x2, 0xfffffffffffffff9, 0x7, 0x73ee}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0xef]}, 0x8}) sendmsg$sock(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000200)=0x9, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c"], 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2710}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 2.72529006s ago: executing program 3 (id=9095): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) connect$unix(r2, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r2, &(0x7f0000000340), 0x307017fdb7a66cb, 0x0) (async) connect$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ppoll(&(0x7f0000000400)=[{r1, 0x4636}, {r2, 0xc198}], 0x2, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0x33, 0x0, &(0x7f0000000440)) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x9, 0x7, 0x100, 0x2100, 0xffffffffffffffff, 0xffff, '\x00', r3, r5, 0x1, 0x1, 0x3, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004930000850000000200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f00000006c0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9463, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xc, 0xa, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xe, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2.507562305s ago: executing program 3 (id=9096): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002be5bf8bd0b167f3cd72c339866bc64678d63f8d57508c05620deafcb1c2adc224e0509455cd3b3f314172e3baed3a9e9333177ce600fdbb2c6cafa26ad5d582d2a1a334e973857b5087ddad69e5381fa953d799d0cdafb7713f4b74234d68360eb38097a2c0a80cf62e63f4e918209f28645f49db518c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x77, 0x0, 0x45, 0x3, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x700, 0x7800, 0x30000, 0x1}}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000003000)={{r2, &(0x7f0000000900)='GPL\x00', 0x40000, &(0x7f0000000940)={@align=0x4, {0x100, 0x7, 0x0, 0xffffffffffffffff}}, 0x0, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x5}, 0x7, &(0x7f0000002f00)=[{0x1, 0x7, &(0x7f0000000a00)=':$\'\x00', &(0x7f0000000a40)="9c69fbba9eb2843739bda7637c996bf8162b05f529363901e4cfc8ed7cfce80e63f7550523d213c68ecfbdcf9ec379f38c5b68ee385b1643fa361975172ac4f9a7326675968d5c1dc7fe5374fd15bc8b58fd90a09adf074e50607fc3fcaeffca13fe1bbd80121d7afa6ae6c2fe1ec6dec04dcabb530a09af063d6f7c8548c1324942c7c55841eeed9233f82e4b1ff464728b9c99138386e188506e177bbdff86f7ac48d0c52256ea2452ccfec72847c76f8b3731f3ad3910c79b833ef81ec747f75b0c695868b74c3f75461a6a9f8ce8689f115331c09173b3e573e03a14e4b691abd800bdf8717feadc6680b725072def72b92b005f492321d9b80c47bf4fdf7237ddc73472576e5ac54de92061c9a5ac3dd19512a177f4732d0ed35056c40b52727a621ce54f700ab9e0309a10070d16e233132f2328207c2e873842c66b9616ca9d8385e70d7721a39db8130abc68b7695fa97710b7b71501105acde2355d1486ddd0f0e0f2e1fe421aab7f2add45058a4cbbf3273a81137f06fb72cce764e0851c901720398658fa38fdb6b70cde6f2daba1f6904a617055ca1a1e64b4b96ea75f35298a945909fbc016b438e701f0f27f98ca5fcc2c7a1a15aa936576b1d73da5a4a76f9cfa99432410d4beb966a5e7decb84a457b75bfb3beabe47346a1b1c797530bf714811fdb1796f81c01cda1408c348f39c2ca929fb83d14f319e7c0845c73dacc79ccb0e4611bd17d79dbe53c99feb6159641ea58324cfa6b352592e59a50c7a367e8d55e78b1968e6cc3a96f674b81af9cd311089425ca8a088803e63904ad7813cae6908a5541ef04aa80c9bbe0bdba94e0c397db0aacb8359d2b324fe5bfb47f075bd658df338db4b891a7b06072ae1d7b0c62f97a76739413c5a906f8d06eec950d04fa5beebc073bf497455eb2e6433bc717050277ab0b311d6a2412f53ad1160c4c9c72fdaf00db7fe48f91430d9e5b989bebdc5b303faff0baf00aae7d9c79760dc13c85a4336ffa1f8f8aeb11ea23808c0a95896f002a86cac370d7391eaeb542a8609b3aca6f5b7b68df8b6a1fa997f142c376e08b7c922e5cde69fdec07e7528c3ab1917a12ab43a397576bc8f384e4d3e30845fcff8cbbc2208a3ad98da64c0edc35b8e1bf26b828a659eeee9640136229ffe1e78771297b36c2a9ae3aa9790406764d68ffb396964ef93fba31666755065a4fe638286d3d030634a04135a239d1173703097a448369fd2f0bb1d8391b5e4b8432dbe037d98ec569aeb9090f7caa8af754f23706dbf93b6276af7d808926b2a82d63d5cccfa3df9a586d7592a835ae4e3681d71801951e60bc313711e96aa6438049394cf38da0712d827d4343ee7a2f808854bc6a228e468ec469d5b4ee0b0be23bc1b320f19e737779d710676616575602f540ea3c757d4013fb56e48eabe6c1b4d55ecdf188d10aaf55a96c9651e6ff8aa49bbaf2db3cb59da9320bb2822cbeeded058e1a8117155d25c5e22fde9eb04b6d79741c7605b0994154f7f35f7c5aa386ce1b24ad7e7ffe6157aa5a45f1bf98d7fd6dfa70856430ca51a6290990352984000a610b730c6b25c7833683c41bdb64c25bf3189c768a9977ff244c4c5ca5ef04955b0d5507d10050eab1eca847ec4b57836b3e524cbfc1ad354724838f58d8600b79715f2d5d3ff7d5cb15b752be3d91bd8d5e747b2c05409d44ede3db51c426fdb1599d6808178fe12cf85b0c11f0f9bd663bcdec29e576cdca620e4356315bb53a916adb9bd95431a3aa0237d6c31711e3d7e1bf4e90dc12ef111198637d2963ef7756935c5087d9e23dbcb241a954e0110f172c934b4175b7c69196f0359496597077a63b9b7a7e9166b58ca8fd6c90693c7b4aa5e9205b7b9eeec9471630ea4b4584a465ebe9c5832e29ebb61eff9da69ebd1807efb42b214ac17e41c724dbd7e86c9d5b93468c67ca83a2e06d279761dcc466814009ba8b7c70b3a89726e2e63df22a2cd6a85434ed3dfb735e17baff39fbeb47e4727aea93c43fc915b68e4604dc9ce638d5a3bb948d8332ff7eaf04b92b9083b4950e300afbff7b1b6a94b3b20eb5b0de3f21b47bf0ed45965780eae0554f403122de2cb13b36fc59ca7872dfea86f539622158c1b7007a6d1d54f0ad180a591c628ae45bc7761da392bae17e304f24e13911c13d47a36f7b7ebe82402397ca6e49f28025be05eb9e9ce290922c99a9e68f2fffe74719ebbcafc714afff4c10115058799d48f15e6c2e6e2eecb3e511b6509661c2e4f1be97f06d6fc885a8afccc0787169ffdec104ecf11677a96c7db15c4a7d084a4c12dd7227b704adfa469d9f090e8489619fe5eb421878f2218c472229892a3cbc21120b4358ebee9b7b71ce9ba3b147d17231794c587da9ea4caf9eccb0dc436d07c683b10edb791d5747eefebd4bc9b7074309efba77b586b65b47cb81f426d7543d776dbd5038894f28dd636df0c896cc5a3ba29e3ff8365fa12bd4bad509177243dd25a6d52caa48926eb955dc411fd8da7886c64fca754a50f22d90abae85a3bf51100955f96c54758e7dffa518a977966930181fb82baf5a5f76eaeb31dff6e54c032e5e7e568f20b459920e2aad5b4761ea587f8b9b15744304028bc52fc4657e0246109bf275edc94fa7835b486ee7fbdfd4c65be2093796b2a62e1c318815f50df02da44ca7bf3704010e9f3a81a773db982eaad985b10c306fc411226f0c76447e83b3981abca2adb867e373c2520c4688ed904477553741b9dd9cfdf061cf1feb1585b1d9f0cab007725a95342ca25b996b68c4a0adc446c930eeaa143eda6bcc8eee36c6b005c33802b7cf6e8b205d9baf8a555ff77d02409bfc4bf4d4052aec8a1b402ac21c06688f14c23d28d2233a836212d31e461a4de35f841f57897d4fe1d05e39df5f22389c9b19911e4414d2181bba4a839732e9f0826e3fdf2744106d5f085cc2388c2816123e39c15dced308d5739ff1520d1b590e950a68ac62877089d4a777ff275fda01e2d357106f80866fb0e3af0f8a7cff36cab3ed967e2ff85e2640532a26e8642407c0150885902cc75e2336ef26eb58288ae7216e987b976abafae61985cdb8b56f9e8d6aa5212278c55e7b5314609d59a20bc2cf7c0f1e96300147dda8bbb9ac5e02dd62e5978481f363263b47c851ce7d62a65459504765af524fa6d2db42a28e9fff80f2d4cea07a8df8e99efd74cee8e169ce79497a3af5d72e8320b3886d7e8d6e106d98867467efb98ecce2abfc1c88b0d9e0fea390c95ac21d0366079a66c7193733f5057896b9719ae1265f63ff47087bf1751a916ad317e6f533b2874eb87b71b57418a3aea97896f361313d847216f704940fa32e05feaaa7d96c68e77f72ff62b251e5c425a9a58fc2fe5fb592347729c589f2b426621d0f3f9598be512d2dae8de823fd709fca15021a442aed1c2826e41e83468ed790713515f583c2590bc717f722802f3dea2c0192e879c50c9fb0b5bd24eeb317bb0aa7cbe5c88a07a294326af09f77a7fa73d6d7eb247407db63033bc139b29a3a4c56678c4014e671ec780b20eb605e7016a6ec75118b06440f869856cb272096a206d0e8813aedb05766d9beb25b1e704cfe40865de05c7dfb832e485e68ba79964f3d4120492b0c735c676831672f08e64454b1aea5a17503b2d34c4f56cf44d2e3de1ed28a676607a10f7ff152501a27912ffe7c22bd966e4f9f58ce60c58f0f7275f36abd543a21980612763c4c18e88b38f0783f08f03f5492a02f9374cbde1c5e07e0d3d6494931d1343d47cda506ffb1f3d88d78614e1becf080cfa91bf23b14587dfc4adb0b3fc9821337d0d4abca43bb0fec6ebb834791cbd9f82e5539f61375bbd0e57c1037257e089dc2a237f9de86a9b62075d29c808130e2a1ced2e80adfbb498c9d7b8fda99e46091c125948ee27371838eed73e2b61bd189e43ddf5c5c03aef5bb6521ff6da5368a35074f5082f4540a69bf65fd19cffa28c72bf6aaae993b433205700521ab74a40231f81daaa3c69d845ccab206ca811e01e428e6d3519e269459c2634dca38405e3247a2c7003c58e0af71ec05471fd570ddb00e9e7bda431b3ee4c4074877ff9261bb7e828c1b973538c528df7d38495f7ef025afc791764ce544dd2969913e65e23d804d5ef94fd7ce53d33c07452ec2d8b97700ac43ff3de556bf8baa09669c8d2368a8ca84e35f7f0ad2e78811e288be18332b3a72dbd16dd53d65e173adae183845c917e0480f319a29d9a47aaac1e1cd928ce7c6e3cf03cac08df1d0bcb6d0fd2c25ccc771a3718a131118cbf112f63b9a02b4cc7d5a96e4a662e549cba5e5d0b7d621103ea6612256ee20ccf184dcc325290cfc06ae9c1a569c8177f4ac9df3e1cf129116a64541413ed445bee05899745dcf9a4879fc57fbad7728f134a8d09e085e57d2262af2292e74eadee255133033f1edfca05789309e506580226f2e466c8ec8584e9e5d3d127ff2e195d19efc9ecbb7181a81903d6a369c413f93c3b1c445690679ffb8811c8028e60149c05c52d7c65f5788cdc3c48e676f565408a7e32359ea6d8d84bf7dfc6f88661ef326d3662ebf04e7852d5913d43acb03e708bb6a43631b3600855d09663f7bca7640369cee39914112de5721621fb1b193c17b0a603821eae0bb415daafcaee1e5459a1217a27cd33b0c2658f990aced39f699ef2387f09238a0806b03af059c095663b7068c5edd96a05f7be37f398eab49deef2d71d93b2cab977f2346c78498d3ad189f3e82361fdb259f7606d484e78be7df531935fdef1e077f010d2f04053ca1a7440347582a5fce64ff1fd621b5963497fc57ac0654a30098892cbc1909ccdf97c20a5dcea37ed89713f5238dff49a065693b74d543a6f7eb54ae35588aa703626c0d604c63065b44c0871858fc875c9f20b70ed974d31ae463d83d1652a723cd76751952419bf7f5fbf1ea218d75a2fefd63f7da10549a916d23a9cb2986c05cd08058500329eefe37cc21b94ac3af2fecc5f7f5144ed5ac4024f86b28946dbf099e2d789a7c554ab44779d25a9e101ef5671177b62284483b725ec52065211ccaf4f5d5dfae91f408b1c73de1d26e43ff15cdf9077044da26a55107213831a5c2fc75940bbaad683bea17b4a0cea0748a42a00c4920f3f190990d002eea30b44cadb01aa451f3514aa6e30fcbdb5db1e5ea7479af08809b5683fc9956ee93209e9ae3c66ce124888d35cab00ad8ef70be684faf0fd2531e46045dbd025d093aadd337dcc0e11e10ec994705f682f56b4492285265917b3623a2dc2b8930894a8bc10e981a1333707486475b5ccf25fc15b513668f640beae791d3891e2c415a1707e588078a9b26e29cb77d7cfddc39535a8010e12fba17d44915e205ad9b658f345ec5c8e8dd4d0ba678f1131bc7c7a9772bb2381878b4c32a666cf93df43ede0a5ea6950f366873068645cddbcf648fd63af66b2ca7f833847c4d7e187f5c8d9056d0c76e91a6e9d856f4c89c4291dde4d7565f4d084864dadc0d0a4ad0c816f725eb187f89fd924d7646f6c8d9543c4d4ff8cb24bd07004042fc562f82543e34c80b1a0e84641a9012a7e325cdc0a267d61061f45057cf54ba6393a7f18eaf409e5f7a3571c9251a993548ea2c6c53e3d116ead8601f1e1bad4c42982a497e8bea42b233f67a55f9c491b1cdc8859237d7633b1aabbcad30af51283c56e7f67383c6e5580b2fe00b2fc2c2ce81aa958bed292eff65efd517f532148050483", 0x1000, 0x8}, {0x3, 0xffff, &(0x7f0000001a40)='.\'\\/#\x00', &(0x7f0000001a80)="e200e74b6bd4be3e29c2cf192c5e46efb2f90a39c2cc1afdc9e28afe4d8364e204a2aefc4653dc7012d485c2275856b1fad0ae1dbe2338f89264b5c300b6d71d2a497cc8fdebd26ab1a59d63f387edc0dacb7c56fe102a6ac27d5945922131f975d28c5b8c78e24ceb4738179fc2dcf7b6ed8ab196b9733d024cb90bd180be1db0f6c9c31e7096b22341c7bd15f5ce7807e271262222ab82f799e690a140e8568ee39aac6011b6927905a1033f305995b42cf5d0e42931b7054fe672085fe34446f9338f267e0aa2a07bd1550361283a93876412", 0xd4, 0x30}, {0x1, 0x4, &(0x7f0000001b80)='\x00', &(0x7f0000001bc0)="49272981d6b283b42f29cb88d3b2627e6cc5451d76c94199ace32ef03602948d15a1af6168a366a0023f63409885debf986568340439a4eada8d78bfa74e9276dda620f38ea574364ac82c790714b4e43fcea168854d3569b50fde4c35bbd959a4b696ae6e63ba6649f5937e08ddf13eb44053adbe626d0826b8c657a84187e4c4f556c5a3504fc4d4e00f121c0cce52e1d15c28370505fc022b6a985947e5b2ed357c1670de403a602fc2372f74a65670a6bb95fe8692180f8cddaa65a0cc9ba25f539eb08fd619", 0xc8}, {0x3, 0x8001, &(0x7f0000001cc0)='#\r\x00', &(0x7f0000001d00)="8a4b76", 0x3, 0x20}, {0x2, 0xe, &(0x7f0000001d40)='\x00', &(0x7f0000001d80)="12c3c385d136ed443967a6c2e5e16586083ff636a20b4a1e8208b1cd881e20cd9f91b782ee0649e51428288f18286bdb", 0x30, 0x20}, {0x3, 0x5, &(0x7f0000001dc0)='GPL\x00', &(0x7f0000001e00)="1de8bbfe6b18ceb6f762b9b4585bedefde10e5f91580063d244f0fbdafcc0959168bf55be44e422114dff5f45208b9d749f3aa78cd90bc5a8b0101822da2e428180ec0dc4fcca438bf791579d95f36ebb0b713db0d238c8772f19c197fc162985aa2376a72bec8238fee1a4c6ffe9861b8ef6a4f306410fc69fe79024348f2e0fd92b6bf1d358022ed", 0x89, 0xa}, {0x2, 0x9, &(0x7f0000001ec0)='\x06', &(0x7f0000001f00)="c261c3b6e8472db798e708ac0458454caab0ceed2a8dae8617f9530f9599717fdb86e9757cba2d6160ae03d63cd8685927aca95426121e44d21d015223f798f7000de0f975d365e0d2affd81b2b250d7d3ee78298a4eea8d2b0e5cb7b696320d7c41307067f751ac047172dae48c9685cc521c15c4918a4cbc9fba1ff47c9314ad8ca92bb6d759deca2e66a626c14064fc33259f5ea7bd62bb07663155be36ecb49d063929ac0d5aa55d09ed69a4e8cea4238b59a745ba0e650aa0f47e4f1ec439c363705e626e840133a76580418db60c2ac4d3aa4c1f57fe96c4f7736881d9b4a740052426298a09c692186dddbca992e7737c9b93b05beac1759abc1c1230170d5cc17ab1547c5d37c5f55e316657b0a270d5d2f5157f98694330e40a5e424fd61a6646717361744d766a8073daacdf0b4921a5f16183d2076a98d4c26b8069b48954b9c7dfbae731719f03b3cdb1829f56644a35b55e5dcd1d9c53c15ab5ecb5478519f4b5ed1777848592834e782f34a7f6cf50501d3eb48b2897bbbda84990d7ee4bb2d6c3b46362a0015a039c53a3c24c3701f6dce67bfcefc5468fdff6b3b513a5a78dd18be4977f59c19afb4bd0009c629b1df7686dfeb900ce747b57c10c4757125d89c45c6d5aa8d6aa0bb418d4496974e274c12582b6222f0e970f23b6b92f8e9a61791276b9ebc5703bb0fe9beb7ef1b6e5e495c8949a9a7fa0d2abf63458eb605594aa3b8b14967b491bc7c56f9d87d5e103d029610edef3c8ef0a45a84045b4dea327575d7c5308f6a308c585b577d6835ddd4bef6cc4bccc8cdd9effe0c226e2a5bf05233efcb3c016d285f9205161212817ed51b6978f901246563fab77ed4d46657a21f5990e0465baa27213c77bcce76a86191e04022afe19aa24b1fdb1b0cc418bc701ff14e455f3e4fe006af7a8e0b5b68698995203a9339d381f9ce2c88be4fdaea1161e62cd6edd40628f35b8dfe89b4d168cce163d7c406793b3472168db47e245975441cd73d7d1d9e15f1a297f7c61d63beb57975d438b21c252aca228cba97762930aca34c21461ecf15569df43cc7822b224d8b738c4978b4c5c43ed823239836924c45e049d7913fac55f349eb9da325ab50d7f3724d20b0bd614aa35a9a39c94fff3b4deeff4609cb274671fcac5fd2dbd9ee40de9abde01df4af0f5b8cd286e4fb300593993911e11a31b5ac140502dcace7294ffaa75cdbf59ed0c4b831cef4032831c2834c1f786b689965e2b53db5eda8021e8e48628ef195dd4078df8b0e235483a5015138084b836d9608a6d807d98de479ec6df25deda5155ba39664bd4a20098e76dd5fb3f95a8815170fbcb0b1715f3f735177d4d2f646d2ed06404fe4be57310b8e3d185d6f304df9d02409dd1a5622383afa5137d8c207dbbd9d73ffb5aaa7b8c179f39289f1791f0074289be804867bceebe7c39005f9d8d121efdf4d8539a5fb582b5ca41a78200adfec0e6d1a65cb0d79cbe22cc8e4690853e0ecee2c8a199b57fcdfc966058d9b234a422a96e0d7e8fc115c4eb210b903538debb39cf8bdb62c4e674128490534dc940fbaa34b125f3e6b2bbdea66e57bc9a489293e231878056d08f834f1b2a76e5de4a772c5d6de89f9aae0ee712b2344a7f66a005d760ba0a86cd654d40cb4ac53dbfd3481b133cf52644bd5a175d3d2d97501ed768ef27014ef5c7a30b51c8f65d1bf83f445e5a2241a50fca76ea7e0030c6ba8706bfb0e364b7b67e8b33d38e0317f509240d6a939dc662ba05deb2e79590b5a4628d7a5886c93412b8170ddc81739892ca186fdf2a1d254db8a70e690ff89bc1aaf7f2a79e64d54d75295c295b7a3540e64ea7d6ea911223ed1a55eecc34bda27f3e10f2c53e9e2d65817cddd66c116de964eb6122f5c840d8bb6dbcffd8e5becffa6fe52af508b79a2d425a1195f3fd671728be08d4f644bd14bc728d9eff47aec51fb845e7599880a1b272a7c7cab8b43c93576a7ac52df3b8be76d892296720bd0a9b1402cdd9ac10dff1e8647489b0b662995476c31d1b693a9a793e190ddbad324d98429e7e9a688a08fc09e41e82ddbde65a3c01132628400928e13821740556e1d9cb3c6ef5cac6dddbb1e7a26b8de89ffdc28cbe0c84e3b5c34c52461f388eee4cd3a0c245735f308074d8546a42b25933d71eee4b1f62e27f810c80009f13af75d39e77beb4721a8125eb93f6c1743fd703d2041ed92e5a7440ed45f8c91f2dadde95f1c1ef5bf2bf7196e0252fe32370525f1ce93f58bbd830178dfa0103258ac10d5930dffdf67a7f204c7abeb8ec1e2a54a545ad4b404fe9e88d5d1c99de88497b79456a137d585e455cf78661dddb12769f2806e0c040898f6b5169bb605301db1d06a5ec6299820136e5b07e1f5fff24d96ae249beac2233ff65137a480e66fb537069327a952372ca32ce93e40877e90dd65602d29b8fec15a502348d76de8b1d3d9d0e1f53a00d958f5ca5f08fe8b24e20291445437bb6be0325976e6c6210cd8a574a217597946d595b2db432092db81f82a0f6809f4b40439143004efb7b2a3f1415c0fe78c150de5ac25554859d15613cb5a3e03bacf252a6a5d9f78e815d37f26831726a4a1252625dbdf40f999acf73d7f0837515f96ea08869eda4641833f71cda2f71c3e1a569e02d42af0fc5003e490def1640cb446d655751f478c9cfa2d6a7ba852acfdc05f3846f9b6d68949a59dfb11601c49a0778271c7940db21a4e3b62d51f679cf3dcbde561b41b4d97462eb3b7e40d0315495a91568b7be07ad3d5a549f209b178ed2821c05abb8682cdbc019956b218f5187d9cc610f6aae88c8aa996648a15138599e083b0b7fd5fc14e7b27d072e5399f7b9f35dc25f5fff1afda9b705677565bfebe52f7f2b36c4f1c45f8ea56f1a8ba8c5f7d187c820aa8b9d0065bdcd1e01789e3c500fa253801d3da1369a3556343c9c2191f393df271a9054c8de187f3a45a29b834c8ee21ba72c7ec4b0694ae051a99094d2de0e2ea358645bc97f3b21fabb410b92af3796da9b5c3bf1c381b9185601e127cd7a7259ca32daa9378cb8ac3d5a23f996a3fdfc4ae7a8ca2298fb32a163048c2e58ef8d195048f726f47e2be8797b96291a7a60bbe744dff17ad362559f63747193d66bdc6b5ccbbb8fea40b4d4690efc6b52ed8d443d2d7db8b16d5bcc977ff0237baa341f5ef163a8f12f63eb420138708f49083329d1990a0d99ada0e4591225c15ead69b3b4ecded2b957b817362c42a8bec71fddb76b7aefadce52e083f094693e87e7d259d73eae70b13de0de5e1e237d272dec7b63d0538eee7cc86d4c3f619f71deaecc2992fb25cb84d3df13bcf36d5d0b0a87e13e16a9b205ac51d6e52d3c1dc3123209c4779583b2be4df261af2524f7b09c0d117e2248b7bd36d2c44c56d8141d8bcf1e440f6ddc9ff6880a2f153905dfccfcdd3191a3cbdc8130880b2f6fb531bb1d85f5b927b0fc9f5ca130e0108e664166c77ce8188dde94c92136548f2caa26845a5b01a405af2975b0dde35af3ac270f28f54191a84c33de9e42faa8126e0c0983ac36dcf63900148b7d5b5c4b20238c6b20194cdc2b1d23dd5345765a2aa3a1d6d6ecefc8e198328788ad9a2caa83e540737bcfc070d63dd97f0312673f79cffa4c72c9d4fd99ec1d702a581c52f3e929c6883c134c4a8de7e7cd168d758dcd9b2af1972a88484349544851eee5dc1fc38ab5182847323f13d7f117151171fc46fe028ee285d8889bd7f19cab68824d946c3d8c553a866d9ced4c2589b47ebb0e8a1c5e99c65f8952e18af70fae53e2045ae130fecf32d5b024c06902e4f74c3723d42d27186b644c3037ae33659a05fed69f4abc82dbad8b4488456c58e67c87c1382a241f8ecb5ffbd2b0cb1d6ea73e72b202852c7ca3e709a716349ce3b3c7d5329cb5a1e3d6dc9b8de151dd91a405b64d99e1826758041896aba44247170a960992c87355389d3e0f2dbb391c1e75382c8b523d532c08f26419f6f76613cf81275039ce6d4190c70d474f94bd318067a73e6154eebd67c7a449b70eb69bdb5829737f1485ba1c31ef01405f0e98db35d7927b839b6e05a801b204a2d2baf27de16d305f7375e7d29e10f4cd7cececf4cc546f65756cf2da5ed86e0540c1fb041d7b6d3499a5901914791105174e0e9d79992707139feaf15268a5dbd8e5de2a266604dee3efc91d82cc7489c53663e0d5d9da78ef5091894dfbc0666e5f7d935a510809743d5cb0697ff60866f8fba90aefe75af15218b5d3e6ce57ed8cec4de08ea17cb587d3fd43adf50199c1e55978fd7936d26ce20b0a42130cfa179abfddfe9681de0988e5292412e6a90f94f2af96715c3c766ef2cd3cd7e1be767a76dd323b7cb20309ec4c58c51d078f081113d09c6cac0b848a701fb65b9e40ddb6449d7861687a3ac223ef6ada9b21bcf4a5069f9d38620e62a84a2be401e46fc724a07314b522f6b3422d5c8887132e6e4da1de069d4df4ebe405506d9c76385ebea152085193dd1c327b2b62ef6988844131c7b7c2808c5e30a1ee9fd2b3790035a321704a5cf33243404e82fb9c6f93434ead371df7c6ba3597dde6850c34656fb75eb2018a278225f96443b303ccbb20b08c8f77112aa8d5f23474c474821708a4b547e34333a2ade2952239f2e6cd7dde5ed45266ab93674591ed4ed0e4b987a015e49a1f9d1ab93ea7ae12f9ee39099981712e694e102a957df86330d0cc1cd4b6ff289c7240a398594688fce92c78635eb8209a0db10280f4a9d1cf643aaec872804388a7116cc1fd4800a4f72b502520e0ba6c92d06ec832b2f2a5b7c6876d79f5d5d5a01d8f63834702761d9b5277ddc741be145bcc3825c29b579456be86704b482d150133349a0d9f1cdee09d1ff541c5b95a8166e98ae1fecac2b1f7c0454c72dfb17c5f7100fc37ade85092b026bdde5004f5e448e3213ded19510173ae20ac05c965cb29645ad2710001badf1dd41ff364865b94ffa504af07ea368ee42535072b3e22e7f74cc3d212fbb130abc8e6ce35860b53be6d07181d0d3381bd42c31b842e5fdcce5723b1b1ba93611905342ba9eb167aa4150d908c488b11a3f5af8b19b790219ee3f05edadbbb042ea7514052452771ef47d2754ac9bb1adf143ff398505ff8828e6ab628dd3827fe45ec2694b25380cef8609a63d429e6a6fee94251bcf580aedbc18798675cf8cab66c44c86e59674442be7cecfacd8ef48fcb4baa60b391562c52a469a8275af31d57ccb88521e990384e7dd3227e16815dbc007c7e71d0c42502babe68b8975d7daf804159c68b5501e1a7740df006c5dcdfd403472341d16b346c5c67f3df7a4b6da0f0ad6b1b9701d10bd0bea20de76e67fc0f970186f6ee0e8d33491bfe45a7a6c1655be01086ca003cd2479ed2a0f625d90078c75ad5ba0977ab605ce0b8da398ad6b9c53dc2546358172172f2141a8f5caecfe47bbe5718d94badf918a11a07d934efaac59562577376e37f714b12eb85e3ff28bc93293ab942c8a819ee317aeb87ff96f0e5d05e4f70b07d4e0b996589404ef1fa2ee0f14ed46c6eaa58d56837537c517279110c9253b53c12f7f252de856b07b3adcd3ea8a8645d2c461429d8fcade1a83a27fbb6de177099db36a6fede25471e3290dd45a923489ef63bca4fd0ea46a482b7caba8046d5318d33534f9dd1bd4ad25777fe42c785cecd069af42fcf7f48046cc2c9c21aed632ac27982a223e20629371dafeb6dde984fad28c27e76808c68", 0x1000, 0x10}]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003140)=@bpf_ext={0x1c, 0x12, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x66497c22}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x32}, @call={0x85, 0x0, 0x0, 0x68}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1e0000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @alu={0x4, 0x0, 0x3, 0x6, 0xb, 0x6, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x5a, &(0x7f00000006c0)=""/90, 0x40f00, 0x1, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000880)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xc, 0x2, 0x5109}, 0x10, 0x19633, r4, 0x3, &(0x7f00000030c0)=[r7, r0, r0], &(0x7f0000003100)=[{0x4, 0x4, 0x9, 0x4}, {0x0, 0x1, 0xd}, {0x5, 0x2, 0x8, 0xa}], 0x10, 0x1ff}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r8}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 2.330139652s ago: executing program 3 (id=9098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {r0, 0x2651}, {r0, 0x2020}, {r0, 0x2a4}, {r0, 0x1098}, {r0, 0x70}, {r0, 0x402}, {r0, 0x8}, {r0, 0x1}], 0x9, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x4]}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@op={0x18}, @assoc={0x18}], 0x30, 0x24004000}], 0x1, 0x800) write$tun(r0, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x30, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast}, "2197e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a"}}, 0x3e) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, 0x0, &(0x7f0000000240)) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000040)=""/36, &(0x7f0000000080)=0x24) 2.204088901s ago: executing program 0 (id=9099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000140)=""/153}, 0x90) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000200)={'macvlan0\x00', @random="0200ff7fdfff"}) unshare(0x20400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000000000006000a000a002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d000aef9000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FIOCLEX(r2, 0x5451) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000280)={0xfffffffffffffe01, 0x28, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000140)=""/153}, 0x90) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000200)={'macvlan0\x00', @random="0200ff7fdfff"}) (async) unshare(0x20400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000000000006000a000a002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d000aef9000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) ioctl$FIOCLEX(r2, 0x5451) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000280)={0xfffffffffffffe01, 0x28, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 1.945509433s ago: executing program 3 (id=9100): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000780)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000007c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000007c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000009c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000009c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a00)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000ac0)) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b00)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b40)) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000b80)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1500}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="07960e0300000000000031d9a58695a5f844d3cb97292f371d5923927db467e15c90628c0abb1fbba39fb49f85f8f261a9960da9b7a47c07f50eff5a8d2fc532738204", 0x43}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000540)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000005c0)='0', 0x1}], 0x1, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.944525968s ago: executing program 4 (id=9101): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in=@dev={0xac, 0x14, 0x14, 0x34}, 0xfe, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd27, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r2}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0x140, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_TUPLE_ORIG={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000001) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 1.788785329s ago: executing program 0 (id=9102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r2, 0x218, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x81) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f00000004c0)=@framed, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000540)={r4, &(0x7f0000000580), &(0x7f00000005c0)=""/73}, 0x70) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540000001000010029bd7000fbdbdf250000522d", @ANYRES32=0x0, @ANYBLOB="8db20200011a0100140003006e657464657673696d300000000000000c0016800800018004000c8014001400776c616e3100"/60], 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740), 0xc) (async) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f00000007c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000880)="80", 0x1}], 0x13}, 0x44) (async) recvmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/47, 0x2f}, {&(0x7f0000000980)=""/8, 0x8}], 0x2, &(0x7f00000009c0)=""/21, 0x15}, 0x7}], 0x1, 0x10020, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f0000000a00)=""/4116, 0x1014) (async) sendmmsg$alg(r8, &(0x7f0000001a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delrule={0x24, 0x21, 0x129, 0x40000, 0x25dfdbff, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e24000004040880bc00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e2000000001ff01000000000000000000000000000102000000240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000300070000004c02008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2402098058000080060001000200000041000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff050003000100000064000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a00000014000200000000000000000000000000000000010500030002000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300030000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000000500030001000000060001000200000008000200640101000500030000000000060001000200000008000200ac1e0101050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff020000000000000000000000000001050003000200000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e2200000000000000000000000008000100", @ANYRES32=r10], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.752654128s ago: executing program 3 (id=9103): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x2, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000009c0)=0x88, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bind$inet(r1, &(0x7f0000000e00)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000e40)="8ce2ad4d4f95e087a7846d3f81", 0xfdef, 0x0, &(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x10) sendmsg$key(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x2, 0xa, 0x1, 0x8, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0xc012) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000f80)={0x0, 'bridge0\x00', {0x101}, 0x2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000fc0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x2, 0x3, 0xd, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000001000)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0xdc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) 1.462905573s ago: executing program 4 (id=9104): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x71}, 0x94) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x10001}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='\x00', 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9463, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.388892973s ago: executing program 0 (id=9105): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000380)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0x10, 0x1, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.330794232s ago: executing program 2 (id=9106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000850000001f0000009500"/32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b34715ec070050d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b34715ec070050d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.223337903s ago: executing program 2 (id=9107): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000400), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x4) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000540)=@gcm_128={{0x304}, "2821ab78a5f3d6b6", "06968e081f6e5ed4cc03ec1d7bc183f0", '\x00', "ac4f47a4e0f276d4"}, 0x28) (async) socket$netlink(0x10, 0x3, 0x0) (async) unshare(0x8000400) (async) pselect6(0x40, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x0, 0x800, 0x200000000000000, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket(0x1, 0x5, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@getaddr={0x14, 0x16, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x84) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)={0x30, r7, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000c8e728340020000000002020207b1af8ff00000000bfa100000000000007010000f9ffffffb708000000b70300000000002885000000c700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x98, &(0x7f0000000200)=""/152, 0x41000, 0xa}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@private2, 0x0, r4}) 1.186401608s ago: executing program 0 (id=9108): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) unshare(0x22020400) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1c}}, 0x4008054) socket(0x2b, 0x5, 0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800110101000000000000000a000000000300080000000008000600ff0700000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = socket$inet6(0xa, 0x3, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001900), 0xfffffedf, 0x10, &(0x7f0000001940), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r4, 0x0, 0xe, 0x0, &(0x7f0000001a00)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r3, &(0x7f0000001a40)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r3, &(0x7f0000001a80)=[{&(0x7f0000001ac0)=',', 0xffdf}], 0x1) socket$kcm(0xf, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb08004500e4140000000001170000010203040506070800000c00020006000600080000000e00030008001400040007"], 0x68}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) 1.182922765s ago: executing program 4 (id=9109): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1412, 0x200, 0x9, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x20008001) 980.352805ms ago: executing program 4 (id=9110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 624.55852ms ago: executing program 4 (id=9111): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}}, 0x0, 0x2a, 0x0, 0x1, 0x230}, 0x28) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000cfff27bd7400fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3c6a02002b9205001c0012800b00010067726574617000000c000280f1500700000000000a000100aaaaaaaaaa0cf4ff"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) 407.552409ms ago: executing program 2 (id=9112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000100)={0x6, 'wg1\x00', {}, 0x108}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000004c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000540)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000000200110000"], 0x50}}], 0x2, 0x4004810) r8 = socket(0x1d, 0x2, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff3}, {0x1, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'bridge_slave_0\x00', {0x4}, 0xf1ee}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="0800040036ee"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmmsg(r1, &(0x7f0000000380), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="20100000000000008914ac35d16b4be1e80000000000000067656e65766500000800028004000e00"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 339.741839ms ago: executing program 4 (id=9113): socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c0ffffff000000000a00000085eeffff270000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r5, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000240)={r2, r7}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 136.666907ms ago: executing program 3 (id=9114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x62080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4102}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffe01, 0x3, 0x5, 0xb88d, 0xf2f, 0x5, 0x8, 0x6, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044855}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r4 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000300), 0x56) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="79114800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x20000, &(0x7f0000001880)=""/131072, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x40000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x6, &(0x7f0000000840)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x7001}) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) (rerun: 32) close(r13) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 135.763575ms ago: executing program 0 (id=9115): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000100)={@fallback=r2, r1, 0x2f}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x2, 0x1011, &(0x7f0000000440)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 0s ago: executing program 0 (id=9116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0xb4, r1, 0x1, 0x70bd26, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x3, 0x4, 0x0, @loopback, @empty, 0x10, 0x40, 0x7f, 0x8a7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0xc, 0xd, 0x4, 0x8, @remote, @remote, 0x8000, 0x7, 0x3ff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x100, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): to load match [ 953.862787][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.862796][ T7898] unable to load match [ 953.877365][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.877375][ T7898] unable to load match [ 953.877804][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.877812][ T7898] unable to load match [ 953.878229][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.878236][ T7898] unable to load match [ 953.895790][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.895802][ T7898] unable to load match [ 953.896286][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.896294][ T7898] unable to load match [ 953.896724][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.896731][ T7898] unable to load match [ 953.897155][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.897162][ T7898] unable to load match [ 953.925862][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.925872][ T7898] unable to load match [ 953.926333][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.926341][ T7898] unable to load match [ 953.926751][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.926758][ T7898] unable to load match [ 953.931988][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.931998][ T7898] unable to load match [ 953.932415][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.932423][ T7898] unable to load match [ 953.949649][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.949659][ T7898] unable to load match [ 953.950207][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.950215][ T7898] unable to load match [ 953.950674][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.950681][ T7898] unable to load match [ 953.951094][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.951101][ T7898] unable to load match [ 953.975795][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.975806][ T7898] unable to load match [ 953.976252][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.976260][ T7898] unable to load match [ 953.976678][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.976685][ T7898] unable to load match [ 953.991932][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.991942][ T7898] unable to load match [ 953.999981][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 953.999992][ T7898] unable to load match [ 954.018334][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.018344][ T7898] unable to load match [ 954.055975][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.055985][ T7898] unable to load match [ 954.056473][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.056481][ T7898] unable to load match [ 954.056897][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.056905][ T7898] unable to load match [ 954.103304][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.103315][ T7898] unable to load match [ 954.103810][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.103818][ T7898] unable to load match [ 954.104234][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.104241][ T7898] unable to load match [ 954.104669][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.104676][ T7898] unable to load match [ 954.167473][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.167486][ T7898] unable to load match [ 954.167974][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.167982][ T7898] unable to load match [ 954.168390][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.168397][ T7898] unable to load match [ 954.168858][ T7917] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 954.173047][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8137'. [ 954.174640][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.174649][ T7898] unable to load match [ 954.175097][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.175105][ T7898] unable to load match [ 954.185814][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.185824][ T7898] unable to load match [ 954.207272][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.207282][ T7898] unable to load match [ 954.207768][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.207776][ T7898] unable to load match [ 954.208190][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.208198][ T7898] unable to load match [ 954.208606][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.208613][ T7898] unable to load match [ 954.244501][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.244511][ T7898] unable to load match [ 954.247199][ T7906] IPVS: stopping backup sync thread 7917 ... [ 954.276899][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.276910][ T7898] unable to load match [ 954.279930][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.279940][ T7898] unable to load match [ 954.282228][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.282237][ T7898] unable to load match [ 954.294866][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.294876][ T7898] unable to load match [ 954.295318][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.295327][ T7898] unable to load match [ 954.308043][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.308052][ T7898] unable to load match [ 954.308967][ T7910] netlink: 'syz.4.8135': attribute type 10 has an invalid length. [ 954.310650][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.310660][ T7898] unable to load match [ 954.348424][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.348436][ T7898] unable to load match [ 954.350795][ T1224] s`z1: Port: 1 Link DOWN [ 954.350859][ T7915] tun0: tun_chr_ioctl cmd 2148553947 [ 954.352694][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.352703][ T7898] unable to load match [ 954.380494][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.380506][ T7898] unable to load match [ 954.380990][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.380998][ T7898] unable to load match [ 954.386910][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.386919][ T7898] unable to load match [ 954.395316][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.395326][ T7898] unable to load match [ 954.395797][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.395805][ T7898] unable to load match [ 954.442664][ T7910] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8135'. [ 954.449485][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.449496][ T7898] unable to load match [ 954.452606][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.452615][ T7898] unable to load match [ 954.458053][ T7915] netlink: 'syz.3.8137': attribute type 1 has an invalid length. [ 954.566136][ T7915] bond8: option mode: invalid value (13) [ 954.577222][ T7915] bond8 (unregistering): Released all slaves [ 954.727384][ T7898] policy can only be matched on NF_INET_PRE_ROUTING [ 954.727398][ T7898] unable to load match [ 954.929772][ T7928] macvlan0: left promiscuous mode [ 955.045313][ T7941] netlink: 324 bytes leftover after parsing attributes in process `syz.4.8139'. [ 955.047536][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8139'. [ 955.327961][ T7931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 955.803452][ T7967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8148'. [ 955.999391][ T7967] netlink: 'syz.2.8148': attribute type 1 has an invalid length. [ 956.126570][ T7972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8150'. [ 956.359835][ T7968] veth9: entered allmulticast mode [ 956.863929][ T8005] netlink: 67 bytes leftover after parsing attributes in process `syz.2.8156'. [ 956.896897][ T8017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8159'. [ 956.896928][ T8017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8159'. [ 956.899143][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8159'. [ 956.899168][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8159'. [ 957.003982][ T1230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 957.293651][ T1226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 957.742542][ T8048] erspan0: entered promiscuous mode [ 957.771637][ T8050] xt_nfacct: accounting object `syz' does not exist [ 958.010619][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8171'. [ 958.010641][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8171'. [ 958.077328][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8171'. [ 958.180092][ T8056] bond9: entered promiscuous mode [ 958.180275][ T8056] bond9: entered allmulticast mode [ 958.572256][ T8079] C: renamed from veth1_to_team (while UP) [ 958.618008][ T8079] netlink: 'syz.2.8177': attribute type 1 has an invalid length. [ 958.619161][ T8079] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 959.096279][T28132] nci: nci_ntf_packet: unknown ntf opcode 0x123 [ 959.637485][ T8117] syzkaller0: entered promiscuous mode [ 959.637542][ T8117] syzkaller0: entered allmulticast mode [ 961.980936][ T8098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 962.241725][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.241746][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.336521][ T8150] netlink: NAT attribute has 8 unknown bytes [ 962.336555][ T8150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.358633][ T8148] __nla_validate_parse: 4 callbacks suppressed [ 962.358649][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8196'. [ 962.358665][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8196'. [ 962.445167][ T8147] netlink: 'syz.4.8195': attribute type 1 has an invalid length. [ 962.500967][ T8161] netlink: 'syz.1.8198': attribute type 1 has an invalid length. [ 962.612668][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8198'. [ 962.631680][ T8172] netlink: 320 bytes leftover after parsing attributes in process `syz.1.8198'. [ 962.632774][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8198'. [ 962.662797][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8198'. [ 963.066082][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8196'. [ 963.066121][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8196'. [ 963.072306][ T8147] veth5: entered allmulticast mode [ 963.176886][ T8161] 8021q: adding VLAN 0 to HW filter on device bond15 [ 963.192158][ T8163] bond15: entered allmulticast mode [ 963.238733][ T8163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8198'. [ 963.252303][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8198'. [ 963.436762][ T8173] bond15: (slave ip6gretap2): making interface the new active one [ 963.436785][ T8173] ip6gretap2: entered allmulticast mode [ 963.439894][ T8173] bond15: (slave ip6gretap2): Enslaving as an active interface with an up link [ 964.749687][ T8224] vlan2: entered promiscuous mode [ 964.891672][ T8233] netlink: 'syz.4.8215': attribute type 3 has an invalid length. [ 965.444905][ T8228] vlan2: entered promiscuous mode [ 965.594252][ T8237] batadv_slave_1: entered promiscuous mode [ 965.595296][ T8237] batadv_slave_1: left promiscuous mode [ 965.712540][ T8242] xt_connbytes: Forcing CT accounting to be enabled [ 965.780363][ T8249] bridge0: port 5(bond0) entered blocking state [ 965.780758][ T8249] bridge0: port 5(bond0) entered disabled state [ 965.781081][ T8249] bond0: entered allmulticast mode [ 965.781097][ T8249] bond_slave_0: entered allmulticast mode [ 965.781427][ T8249] bond_slave_1: entered allmulticast mode [ 965.819237][ T8249] bond0: entered promiscuous mode [ 965.819257][ T8249] bond_slave_0: entered promiscuous mode [ 965.836748][ T8249] bond_slave_1: entered promiscuous mode [ 965.884120][ T8249] bridge0: port 5(bond0) entered blocking state [ 965.884209][ T8249] bridge0: port 5(bond0) entered forwarding state [ 966.046754][ T8258] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 966.115877][ T8253] netlink: zone id is out of range [ 966.115892][ T8253] netlink: zone id is out of range [ 966.115900][ T8253] netlink: zone id is out of range [ 966.115908][ T8253] netlink: zone id is out of range [ 966.115916][ T8253] netlink: zone id is out of range [ 966.115924][ T8253] netlink: zone id is out of range [ 966.115934][ T8253] netlink: zone id is out of range [ 966.115941][ T8253] netlink: zone id is out of range [ 966.115949][ T8253] netlink: zone id is out of range [ 966.195659][ T8249] hsr_slave_1 (unregistering): left promiscuous mode [ 968.579806][ T8349] tipc: Enabled bearer , priority 0 [ 968.789337][ T8348] tipc: Disabling bearer [ 968.864457][ T8352] veth5: entered allmulticast mode [ 968.918088][ T8358] veth7: entered allmulticast mode [ 969.788357][ T8384] netlink: 'syz.3.8250': attribute type 29 has an invalid length. [ 969.791690][ T8383] __nla_validate_parse: 173 callbacks suppressed [ 969.791707][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8251'. [ 969.812044][ T8381] sctp: [Deprecated]: syz.3.8250 (pid 8381) Use of int in max_burst socket option deprecated. [ 969.812044][ T8381] Use struct sctp_assoc_value instead [ 969.840167][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8251'. [ 969.855457][ T8383] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8251'. [ 970.192090][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8258'. [ 970.274665][ T8411] tipc: Enabled bearer , priority 0 [ 970.308435][ T8411] tipc: Resetting bearer [ 981.863084][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 994.025982][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.224303][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1055.470992][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1094.233507][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8267'. [ 1094.693742][ T8473] veth0_to_bridge: entered promiscuous mode [ 1094.696004][ T8473] macvtap1: entered allmulticast mode [ 1094.696024][ T8473] veth0_to_bridge: entered allmulticast mode [ 1094.737303][ T8473] veth0_to_bridge: left allmulticast mode [ 1094.737433][ T8473] veth0_to_bridge: left promiscuous mode [ 1094.849467][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8275'. [ 1094.875882][ T8474] veth0_to_bridge: entered promiscuous mode [ 1094.877811][ T8474] macvtap1: entered allmulticast mode [ 1094.877829][ T8474] veth0_to_bridge: entered allmulticast mode [ 1094.905630][ T8474] veth0_to_bridge: left allmulticast mode [ 1094.905658][ T8474] veth0_to_bridge: left promiscuous mode [ 1095.912771][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8281'. [ 1095.943880][ T8539] syzkaller1: entered promiscuous mode [ 1095.943901][ T8539] syzkaller1: entered allmulticast mode [ 1096.146524][ T8547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8283'. [ 1096.146702][ T8547] ipvlan0: left promiscuous mode [ 1096.168751][ T8547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8283'. [ 1096.408896][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8286'. [ 1096.728858][ T8572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1096.993234][ T8590] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8294'. [ 1097.220081][ T8594] netlink: 'syz.2.8295': attribute type 1 has an invalid length. [ 1097.330760][ T8594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1098.535252][ T8609] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8298'. [ 1098.838453][ T8613] netlink: 'syz.4.8299': attribute type 26 has an invalid length. [ 1098.957814][ T8614] net_ratelimit: 1709 callbacks suppressed [ 1098.957834][ T8614] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1101.533406][ T8613] 8021q: VLANs not supported on ipvlan0 [ 1101.876105][ T8629] netlink: 'syz.2.8301': attribute type 1 has an invalid length. [ 1102.012044][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8304'. [ 1102.012067][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8304'. [ 1102.012090][ T8627] netlink: 'syz.0.8304': attribute type 12 has an invalid length. [ 1102.081038][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8304'. [ 1102.081059][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8304'. [ 1102.081082][ T8627] netlink: 'syz.0.8304': attribute type 12 has an invalid length. [ 1102.579891][ T8657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8308'. [ 1102.701386][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8307'. [ 1103.232523][ T8674] syzkaller1: entered promiscuous mode [ 1103.232547][ T8674] syzkaller1: entered allmulticast mode [ 1104.168772][ T8692] ip_tables: iptables: counters copy to user failed while replacing table [ 1104.171544][ T8692] netlink: 'syz.3.8318': attribute type 1 has an invalid length. [ 1104.768219][ T8700] netlink: 'syz.1.8322': attribute type 1 has an invalid length. [ 1105.136880][ T8726] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 1105.446124][ T8743] IPVS: set_ctl: invalid protocol: 103 172.20.20.54:20004 [ 1106.453301][ T8754] syzkaller0: entered promiscuous mode [ 1106.453323][ T8754] syzkaller0: entered allmulticast mode [ 1108.537870][ T8779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1108.538239][ T8779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1108.600248][ T8772] can: request_module (can-proto-3) failed. [ 1108.695008][ T8775] batman_adv: batadv0: Adding interface: veth0 [ 1108.695026][ T8775] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.695053][ T8775] batman_adv: batadv0: Interface activated: veth0 [ 1108.701362][ T8785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.701385][ T8785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.746219][ T8785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.746398][ T8785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.755502][ T8785] batman_adv: batadv0: Interface deactivated: dummy0 [ 1108.755677][ T8785] batman_adv: batadv0: Removing interface: dummy0 [ 1108.796421][ T8785] batman_adv: batadv0: Interface deactivated: veth0 [ 1108.796615][ T8785] batman_adv: batadv0: Removing interface: veth0 [ 1108.970137][ T8795] SET target dimension over the limit! [ 1108.970264][ T8796] SET target dimension over the limit! [ 1111.125704][ T8816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1111.384934][ T8766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1111.591661][ T8826] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8356'. [ 1111.674558][ T8833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8359'. [ 1111.761879][ T8829] syzkaller0: entered promiscuous mode [ 1111.762051][ T8829] syzkaller0: entered allmulticast mode [ 1111.874512][ T8847] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8361'. [ 1112.109695][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1112.379730][ T8858] netlink: 'syz.1.8363': attribute type 4 has an invalid length. [ 1112.402086][ T8858] netlink: 'syz.1.8363': attribute type 4 has an invalid length. [ 1112.536286][ T8861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8364'. [ 1112.919437][ T8873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1112.964990][ T8873] syzkaller0: entered promiscuous mode [ 1112.965170][ T8873] syzkaller0: entered allmulticast mode [ 1113.058949][ T8885] netlink: 'syz.1.8373': attribute type 4 has an invalid length. [ 1113.058971][ T8885] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.8373'. [ 1113.688871][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8371'. [ 1113.805279][ T8899] bond0: (slave bond_slave_1): Releasing backup interface [ 1113.808711][ T8899] bond_slave_1 (unregistering): left promiscuous mode [ 1113.808736][ T8899] bond_slave_1 (unregistering): left allmulticast mode [ 1114.325539][ T8930] netlink: 'syz.0.8381': attribute type 11 has an invalid length. [ 1114.479113][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8382'. [ 1115.014122][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8385'. [ 1115.172306][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1116.300268][ T8976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1116.596008][ T8985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1116.639250][ T8991] __nla_validate_parse: 3 callbacks suppressed [ 1116.639269][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8399'. [ 1116.662504][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8399'. [ 1116.781792][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8400'. [ 1116.807833][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8398'. [ 1116.915151][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.355589][ T9011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8403'. [ 1117.897995][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8410'. [ 1117.961927][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8411'. [ 1118.130003][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8412'. [ 1118.357785][ T9051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8419'. [ 1118.357808][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8419'. [ 1119.241644][ T9088] bond7: option ad_user_port_key: invalid value (1088) [ 1119.241668][ T9088] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 1119.322711][ T9088] bond7 (unregistering): Released all slaves [ 1120.137149][ T9128] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1120.329258][ T9136] ip6gre2: entered promiscuous mode [ 1120.329280][ T9136] ip6gre2: entered allmulticast mode [ 1120.762564][T28124] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1120.764449][T28124] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1120.779195][ T9155] lo: left promiscuous mode [ 1120.779369][ T9155] tunl0: left promiscuous mode [ 1120.779477][ T9155] gre0: left promiscuous mode [ 1120.779693][ T9155] ip_vti0: left promiscuous mode [ 1120.779801][ T9155] ip6_vti0: left promiscuous mode [ 1120.779908][ T9155] sit0: left promiscuous mode [ 1120.780019][ T9155] ip6tnl0: left promiscuous mode [ 1120.780129][ T9155] ip6gre0: left promiscuous mode [ 1120.780246][ T9155] syz_tun: left promiscuous mode [ 1120.780401][ T9155] ip6gretap0: left promiscuous mode [ 1120.780530][ T9155] vcan0: left promiscuous mode [ 1120.780675][ T9155] team0: left promiscuous mode [ 1120.782607][ T9155] nlmon0: left promiscuous mode [ 1120.782754][ T9155] batadv0: left promiscuous mode [ 1120.784144][ T1225] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1120.794578][ T9155] vxcan0: left promiscuous mode [ 1120.794745][ T9155] vxcan1: left promiscuous mode [ 1120.794887][ T9155] veth0: left promiscuous mode [ 1120.795021][ T9155] veth1: left promiscuous mode [ 1120.795155][ T9155] wg0: left promiscuous mode [ 1120.795288][ T9155] wg2: left promiscuous mode [ 1120.795416][ T9155] veth0_to_bridge: left promiscuous mode [ 1120.795552][ T9155] veth1_to_bridge: left promiscuous mode [ 1120.795714][ T9155] bridge_slave_1: left promiscuous mode [ 1120.795849][ T9155] bond_slave_0: left promiscuous mode [ 1120.795959][ T9155] veth1_to_bond: left promiscuous mode [ 1120.798812][ T9155] bond_slave_1: left promiscuous mode [ 1120.798934][ T9155] veth0_to_team: left promiscuous mode [ 1120.799068][ T9155] team_slave_0: left promiscuous mode [ 1120.801218][ T9155] veth1_to_team: left promiscuous mode [ 1120.801374][ T9155] team_slave_1: left promiscuous mode [ 1120.801508][ T9155] veth1_to_batadv: left promiscuous mode [ 1120.801644][ T9155] batadv_slave_1: left promiscuous mode [ 1120.801777][ T9155] xfrm0: left promiscuous mode [ 1120.801926][ T9155] veth0_to_hsr: left promiscuous mode [ 1120.805306][ T9155] veth1_to_hsr: left promiscuous mode [ 1120.805614][ T9155] hsr0: left promiscuous mode [ 1120.805752][ T9155] veth1_virt_wifi: left promiscuous mode [ 1120.805881][ T9155] veth0_virt_wifi: left promiscuous mode [ 1120.806015][ T9155] virt_wifi0: left promiscuous mode [ 1120.806378][ T9155] vlan0: left promiscuous mode [ 1120.806706][ T9155] vlan1: left promiscuous mode [ 1120.810026][ T9155] macvlan1: left promiscuous mode [ 1120.815774][ T9155] ipvlan1: left promiscuous mode [ 1120.816187][ T9155] macvtap0: left promiscuous mode [ 1120.816324][ T9155] macsec0: left promiscuous mode [ 1120.829007][ T9155] geneve1: left promiscuous mode [ 1120.829165][ T9155] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1120.829284][ T9155] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 1120.829402][ T9155] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 1120.829542][ T9155] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 1120.834838][ T9155] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 1120.834990][ T9155] gre1: left promiscuous mode [ 1120.842956][ T9155] ip6erspan0: left promiscuous mode [ 1120.843093][ T9155] macvlan2: left promiscuous mode [ 1120.843263][ T9155] syztnl1: left promiscuous mode [ 1120.843365][ T9155] bond1: left promiscuous mode [ 1120.843635][ T9155] bridge1: left promiscuous mode [ 1120.843776][ T9155] bond2: left promiscuous mode [ 1120.843894][ T9155] macsec1: left promiscuous mode [ 1120.844028][ T9155] bond5: left promiscuous mode [ 1120.847019][ T9155] syzkaller0: left promiscuous mode [ 1120.851395][ T9155] bond6: left promiscuous mode [ 1120.851933][ T9155] bond9: left promiscuous mode [ 1120.998137][ T1228] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1121.206696][ T9165] xt_limit: Overflow, try lower: 6/2147483648 [ 1121.543866][ T1228] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1121.872320][ T9178] bridge2: entered promiscuous mode [ 1122.926699][ T9214] __nla_validate_parse: 43 callbacks suppressed [ 1122.926719][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8467'. [ 1123.761764][ T9236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1123.787798][ T9236] syzkaller0: entered promiscuous mode [ 1123.787820][ T9236] syzkaller0: entered allmulticast mode [ 1124.406758][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8480'. [ 1124.411710][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8480'. [ 1124.559448][ T9265] Bluetooth: MGMT ver 1.23 [ 1124.674683][ T9270] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1125.009429][ T9285] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20004 [ 1125.126652][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8486'. [ 1125.153111][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1125.916942][ T9320] FAULT_INJECTION: forcing a failure. [ 1125.916942][ T9320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.916977][ T9320] CPU: 0 UID: 0 PID: 9320 Comm: syz.4.8498 Not tainted syzkaller #0 PREEMPT(full) [ 1125.916998][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1125.917010][ T9320] Call Trace: [ 1125.917019][ T9320] [ 1125.917028][ T9320] dump_stack_lvl+0xe8/0x150 [ 1125.917060][ T9320] should_fail_ex+0x410/0x560 [ 1125.917090][ T9320] _copy_from_user+0x2d/0xb0 [ 1125.917126][ T9320] __sys_bpf+0x2e7/0xd90 [ 1125.917159][ T9320] ? __pfx___sys_bpf+0x10/0x10 [ 1125.917195][ T9320] ? __fget_files+0x2a/0x420 [ 1125.917240][ T9320] ? ksys_write+0x242/0x270 [ 1125.917262][ T9320] ? __pfx_ksys_write+0x10/0x10 [ 1125.917286][ T9320] __x64_sys_bpf+0xba/0xd0 [ 1125.917310][ T9320] do_syscall_64+0x166/0x520 [ 1125.917334][ T9320] ? trace_irq_disable+0x3b/0x140 [ 1125.917354][ T9320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.917374][ T9320] ? clear_bhb_loop+0x70/0xc0 [ 1125.917397][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.917416][ T9320] RIP: 0033:0x7f918399e1d9 [ 1125.917434][ T9320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.917450][ T9320] RSP: 002b:00007f918483b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1125.917471][ T9320] RAX: ffffffffffffffda RBX: 00007f9183c26090 RCX: 00007f918399e1d9 [ 1125.917485][ T9320] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1125.917497][ T9320] RBP: 00007f918483b090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.917509][ T9320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.917521][ T9320] R13: 00007f9183c26128 R14: 00007f9183c26090 R15: 00007ffff13d8fb8 [ 1125.917553][ T9320] [ 1126.238790][ T9325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8502'. [ 1126.238970][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8502'. [ 1126.575845][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8505'. [ 1126.694312][ T9345] syzkaller0: entered promiscuous mode [ 1126.694486][ T9345] syzkaller0: entered allmulticast mode [ 1126.940373][ T9359] netlink: 'syz.1.8508': attribute type 1 has an invalid length. [ 1127.035677][ T9366] netlink: 'syz.1.8508': attribute type 1 has an invalid length. [ 1127.881680][ T9405] netlink: 'syz.3.8518': attribute type 1 has an invalid length. [ 1128.022000][ T9395] netlink: 'syz.2.8516': attribute type 1 has an invalid length. [ 1131.903352][ T9359] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1131.904987][ T9371] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1131.919090][ T9405] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1132.217039][ T9427] 0: reclassify loop, rule prio 0, protocol 03 [ 1132.240833][ T9434] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8522'. [ 1132.413030][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8520'. [ 1132.598944][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8527'. [ 1132.621343][ T9453] Bluetooth: hci0: unsupported parameter 5135 [ 1132.621365][ T9453] Bluetooth: hci0: unsupported parameter 8192 [ 1132.621378][ T9453] Bluetooth: hci0: unsupported parameter 5135 [ 1132.621389][ T9453] Bluetooth: hci0: unsupported parameter 8192 [ 1133.188345][ T9479] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.8534'. [ 1133.190324][ T9479] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 1133.224035][ T9479] 1ªX¹¦Dö»: entered allmulticast mode [ 1133.394296][ T9469] syzkaller0: entered promiscuous mode [ 1133.394320][ T9469] syzkaller0: entered allmulticast mode [ 1133.880155][ T9503] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.8543'. [ 1133.927682][ T9503] xt_REDIRECT: bad rangesize 26624. [ 1133.960036][ T9504] lo: entered promiscuous mode [ 1133.969790][ T9504] tunl0: entered promiscuous mode [ 1133.989911][ T9504] gre0: entered promiscuous mode [ 1134.060587][ T9504] gretap0: entered promiscuous mode [ 1134.157475][ T9504] ip_vti0: entered promiscuous mode [ 1134.159095][ T9504] ip6_vti0: entered promiscuous mode [ 1134.167387][ T9504] sit0: entered promiscuous mode [ 1134.183600][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1134.248393][ T9504] ip6tnl0: entered promiscuous mode [ 1134.260480][ T9504] ip6gre0: entered promiscuous mode [ 1134.495227][ T9504] vcan0: entered promiscuous mode [ 1134.559655][ T9504] bond0: entered promiscuous mode [ 1134.588794][ T9504] team0: entered promiscuous mode [ 1134.699058][ T9504] nlmon0: entered promiscuous mode [ 1134.719495][ T9504] vxcan0: entered promiscuous mode [ 1134.720513][ T9504] vxcan1: entered promiscuous mode [ 1134.734019][ T9504] veth0: entered promiscuous mode [ 1134.761531][ T9504] veth1: entered promiscuous mode [ 1134.781369][ T9504] wg0: entered promiscuous mode [ 1134.840725][ T9504] wg2: entered promiscuous mode [ 1134.847098][ T9504] veth0_to_bridge: entered promiscuous mode [ 1134.851561][ T9504] bridge_slave_0: entered promiscuous mode [ 1134.856945][ T9504] veth1_to_bridge: entered promiscuous mode [ 1134.876658][ T9504] bridge_slave_1: entered promiscuous mode [ 1134.881454][ T9504] veth0_to_bond: entered promiscuous mode [ 1134.882050][ T9504] bond_slave_0: entered promiscuous mode [ 1134.888788][ T9504] veth1_to_bond: entered promiscuous mode [ 1134.894036][ T9504] bond_slave_1: entered promiscuous mode [ 1134.904656][ T9504] team_slave_0: entered promiscuous mode [ 1134.908931][ T9504] veth1_to_team: entered promiscuous mode [ 1134.921004][ T9504] team_slave_1: entered promiscuous mode [ 1134.929230][ T9504] veth0_to_batadv: entered promiscuous mode [ 1134.940488][ T9504] batadv_slave_0: entered promiscuous mode [ 1134.948555][ T9504] veth1_to_batadv: entered promiscuous mode [ 1134.955020][ T9504] batadv_slave_1: entered promiscuous mode [ 1134.961850][ T9504] xfrm0: entered promiscuous mode [ 1134.968589][ T9504] veth0_to_hsr: entered promiscuous mode [ 1134.977913][ T9504] veth1_to_hsr: entered promiscuous mode [ 1135.000014][ T9504] hsr0: entered promiscuous mode [ 1135.007733][ T9504] veth1_virt_wifi: entered promiscuous mode [ 1135.016209][ T9504] veth0_virt_wifi: entered promiscuous mode [ 1135.046060][ T9504] vlan0: entered promiscuous mode [ 1135.052302][ T9504] vlan1: entered promiscuous mode [ 1135.068926][ T9504] macvlan1: entered promiscuous mode [ 1135.093426][ T9504] ipvlan0: entered promiscuous mode [ 1135.098415][ T9504] ipvlan1: entered promiscuous mode [ 1135.122510][ T9504] macvtap0: entered promiscuous mode [ 1135.135681][ T9504] macsec0: entered promiscuous mode [ 1135.141366][ T9504] geneve0: entered promiscuous mode [ 1135.147975][ T9504] geneve1: entered promiscuous mode [ 1135.160523][ T9504] netdevsim netdevsim4 €Â: entered promiscuous mode [ 1135.170306][ T9504] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1135.187416][ T9504] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1135.200605][ T9504] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1135.232146][ T9504] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 1135.286292][ T9504] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 1135.288646][ T9504] gtp0: entered promiscuous mode [ 1135.579017][ T9504] pimreg0: entered promiscuous mode [ 1135.588236][ T9504] macvlan2: entered promiscuous mode [ 1135.592547][ T9504] gtp1: entered promiscuous mode [ 1135.603325][ T9504] bond1: entered promiscuous mode [ 1135.612156][ T9504] : entered promiscuous mode [ 1135.622719][ T9504] macvlan3: entered promiscuous mode [ 1135.630892][ T9504] macvlan4: entered promiscuous mode [ 1135.635543][ T9504] gre1: entered promiscuous mode [ 1135.644928][ T9504] virt_wifi0: left allmulticast mode [ 1135.652475][ T9504] ip6erspan0: entered promiscuous mode [ 1135.668884][ T9504] bridge1: entered promiscuous mode [ 1135.678166][ T9504] bond2: entered promiscuous mode [ 1135.680880][ T9504] bond3: entered promiscuous mode [ 1135.680898][ T9504] veth3: entered promiscuous mode [ 1135.686661][ T9504] veth2: entered promiscuous mode [ 1135.690897][ T9504] bridge2: entered promiscuous mode [ 1135.694849][ T9504] gtp2: entered promiscuous mode [ 1135.697249][ T9504] xfrm1: entered promiscuous mode [ 1135.703520][ T9504] macsec2: entered promiscuous mode [ 1135.709178][ T9504] gretap1: entered promiscuous mode [ 1135.712482][ T9504] sit2: entered promiscuous mode [ 1135.755220][ T9504] bond4: entered promiscuous mode [ 1135.755246][ T9504] geneve2: entered promiscuous mode [ 1135.762215][ T9504] vxlan0: entered promiscuous mode [ 1135.770275][ T9504] ip6tnl1: entered promiscuous mode [ 1135.774344][ T9504] gtp3: entered promiscuous mode [ 1135.787831][ T9504] bond6: entered promiscuous mode [ 1135.793832][ T9504] vlan2: entered promiscuous mode [ 1135.794732][ T9504] ip6gre1: entered promiscuous mode [ 1135.796498][ T9504] bridge3: entered promiscuous mode [ 1135.805704][ T9504] ip6tnl2: entered promiscuous mode [ 1135.807090][ T9504] batadv0: entered promiscuous mode [ 1135.814864][ T9504] geneve3: entered promiscuous mode [ 1135.830788][ T9504] bond7: entered promiscuous mode [ 1135.836575][ T9504] erspan1: entered promiscuous mode [ 1135.839038][ T9504] ipip0: entered promiscuous mode [ 1135.841473][ T9504] gre2: entered promiscuous mode [ 1135.908076][ T9504] macsec3: entered promiscuous mode [ 1135.913430][ T9504] veth4: entered promiscuous mode [ 1135.913594][ T9504] veth5: entered promiscuous mode [ 1135.913799][ T9504] sit3: entered promiscuous mode [ 1135.947910][ T9504] syzkaller0: entered promiscuous mode [ 1136.099009][ T9507] syzkaller0: entered allmulticast mode [ 1141.104341][T17955] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.104390][T17955] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.113114][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.113150][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.116010][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.116043][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.116077][ T13] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.116099][ T13] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.130390][ T1225] syz0: Port: 1 Link DOWN [ 1141.534467][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8555'. [ 1141.553526][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8555'. [ 1141.617531][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8555'. [ 1141.620164][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8555'. [ 1141.766935][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1141.766968][ T9576] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1142.029017][ T9582] sctp: [Deprecated]: syz.2.8558 (pid 9582) Use of int in maxseg socket option. [ 1142.029017][ T9582] Use struct sctp_assoc_value instead [ 1142.271115][ T9588] lo: entered promiscuous mode [ 1142.280252][ T9588] tunl0: entered promiscuous mode [ 1142.299120][ T9588] gre0: entered promiscuous mode [ 1142.541308][ T9588] 1ªX¹¦Dö»: entered promiscuous mode [ 1142.577743][ T9588] erspan0: entered promiscuous mode [ 1142.606904][ T9588] ip_vti0: entered promiscuous mode [ 1142.614633][ T9588] ip6_vti0: entered promiscuous mode [ 1142.616170][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.616526][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.616798][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.617059][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.617318][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.621333][ T9588] sit0: entered promiscuous mode [ 1142.622021][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.622291][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.624883][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.625147][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.625430][ T9596] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.669997][ T9588] ip6tnl0: entered promiscuous mode [ 1142.692344][ T9588] ip6gre0: entered promiscuous mode [ 1142.711045][ T9588] syz_tun: entered promiscuous mode [ 1142.736788][ T9588] ip6gretap0: entered promiscuous mode [ 1142.745989][ T9588] vcan0: entered promiscuous mode [ 1142.750273][ T9588] bond0: entered promiscuous mode [ 1142.750292][ T9588] bond_slave_0: entered promiscuous mode [ 1142.755133][ T9588] team0: entered promiscuous mode [ 1142.755152][ T9588] team_slave_0: entered promiscuous mode [ 1142.755323][ T9588] team_slave_1: entered promiscuous mode [ 1142.766570][ T9588] dummy0: entered promiscuous mode [ 1142.767665][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8564'. [ 1142.774686][ T9588] nlmon0: entered promiscuous mode [ 1142.776945][ T9588] veth0: entered promiscuous mode [ 1142.780829][ T9588] veth1: entered promiscuous mode [ 1142.790768][ T9588] wg0: entered promiscuous mode [ 1142.799210][ T9588] wg2: entered promiscuous mode [ 1142.801174][ T9588] veth0_to_bridge: entered promiscuous mode [ 1142.809596][ T9588] bridge_slave_0: entered promiscuous mode [ 1142.816407][ T9588] veth1_to_bridge: entered promiscuous mode [ 1142.825471][ T9588] bridge_slave_1: entered promiscuous mode [ 1142.848400][ T9588] veth0_to_bond: entered promiscuous mode [ 1142.919118][ T9588] veth0_to_batadv: entered promiscuous mode [ 1142.931182][ T9588] batadv_slave_0: entered promiscuous mode [ 1142.938888][ T9588] veth1_to_batadv: entered promiscuous mode [ 1142.946247][ T9588] batadv_slave_1: entered promiscuous mode [ 1142.950367][ T9588] xfrm0: entered promiscuous mode [ 1142.970704][ T9588] veth0_to_hsr: entered promiscuous mode [ 1142.996783][ T9588] veth1_to_hsr: entered promiscuous mode [ 1143.031367][ T9588] hsr0: entered promiscuous mode [ 1143.080973][ T9588] veth1_virt_wifi: entered promiscuous mode [ 1143.095456][ T9588] veth0_virt_wifi: entered promiscuous mode [ 1143.109363][ T9588] virt_wifi0: entered promiscuous mode [ 1143.139944][ T9588] vlan0: entered promiscuous mode [ 1143.157560][ T9588] vlan1: entered promiscuous mode [ 1143.170185][ T9588] macvlan0: entered promiscuous mode [ 1143.182503][ T9588] macvlan1: entered promiscuous mode [ 1143.191991][ T9588] ipvlan0: entered promiscuous mode [ 1143.192163][ T9588] ipvlan1: entered promiscuous mode [ 1143.206959][ T9588] macvtap0: entered promiscuous mode [ 1143.221097][ T9588] geneve1: entered promiscuous mode [ 1143.227247][ T9588] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1143.231350][ T9588] geneve2: entered promiscuous mode [ 1143.231471][ T9588] bond1: entered promiscuous mode [ 1143.240599][ T9588] bond2: entered promiscuous mode [ 1143.241569][ T9588] vxlan0: entered promiscuous mode [ 1143.241898][ T9588] ip6gretap1: entered promiscuous mode [ 1143.251696][ T9588] ip6tnl1: entered promiscuous mode [ 1143.256427][ T9588] nicvf0: entered promiscuous mode [ 1143.258077][ T9588] bond3: entered promiscuous mode [ 1143.258201][ T9588] batadv1: entered promiscuous mode [ 1143.258592][ T9588] vlan2: entered promiscuous mode [ 1143.265260][ T9588] netdevsim netdevsim0 eth0: entered promiscuous mode [ 1143.266641][ T9588] netdevsim netdevsim0 eth1: entered promiscuous mode [ 1143.266764][ T9588] netdevsim netdevsim0 eth2: entered promiscuous mode [ 1143.266871][ T9588] netdevsim netdevsim0 eth3: entered promiscuous mode [ 1143.268160][ T9588] bond4: entered promiscuous mode [ 1143.268176][ T9588] bond5: entered promiscuous mode [ 1143.289907][ T9588] gretap1: entered promiscuous mode [ 1143.294596][ T9588] bridge1: entered promiscuous mode [ 1143.298110][ T9588] bridge2: entered promiscuous mode [ 1143.301522][ T9588] syztnl1: entered promiscuous mode [ 1143.301706][ T9588] gre1: entered promiscuous mode [ 1143.302023][ T9588] bond6: entered promiscuous mode [ 1143.310331][ T9588] macvlan2: entered promiscuous mode [ 1143.312610][ T9588] gtp0: entered promiscuous mode [ 1143.315687][ T9588] gre2: entered promiscuous mode [ 1143.371333][ T9588] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 1143.371494][ T9588] bond7: entered promiscuous mode [ 1143.371606][ T9588] veth2: entered promiscuous mode [ 1143.372382][ T9588] veth3: entered promiscuous mode [ 1143.373932][ T9588] gre3: entered promiscuous mode [ 1143.432426][ T9588] gtp1: entered promiscuous mode [ 1143.441562][ T9588] vxcan0: entered promiscuous mode [ 1143.441732][ T9588] vxcan1: entered promiscuous mode [ 1143.441869][ T9588] veth4: entered promiscuous mode [ 1143.442007][ T9588] veth5: entered promiscuous mode [ 1143.442161][ T9588] veth6: entered promiscuous mode [ 1143.442330][ T9588] veth7: entered promiscuous mode [ 1143.446329][ T9588] vxlan1: entered promiscuous mode [ 1143.450548][ T9588] ipip0: entered promiscuous mode [ 1143.451325][ T9588] gre4: entered promiscuous mode [ 1143.456961][ T9588] bond8: entered promiscuous mode [ 1143.462697][ T9588] vlan3: entered promiscuous mode [ 1143.467049][ T9588] syzkaller0: entered promiscuous mode [ 1143.483826][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.483855][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.483891][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.483912][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.483944][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.483966][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.484011][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.484041][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.668993][ T9597] syzkaller0: entered allmulticast mode [ 1143.741361][ T9611] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8565'. [ 1143.933727][ T9619] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8565'. [ 1144.051647][ T9626] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8568'. [ 1144.070080][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8568'. [ 1144.345776][ T9631] rdma_rxe: rxe_newlink: failed to add lo [ 1148.384631][ T9625] __nla_validate_parse: 2 callbacks suppressed [ 1148.384653][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8567'. [ 1148.641459][ T9642] Bluetooth: hci0: unsupported parameter 5135 [ 1148.641480][ T9642] Bluetooth: hci0: unsupported parameter 8192 [ 1148.641490][ T9642] Bluetooth: hci0: unsupported parameter 5135 [ 1148.641500][ T9642] Bluetooth: hci0: unsupported parameter 8192 [ 1148.668495][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1149.550894][ T9688] vlan3: entered promiscuous mode [ 1149.658563][ T9698] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8583'. [ 1149.663688][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8583'. [ 1149.664517][ T9697] netlink: 'syz.3.8582': attribute type 44 has an invalid length. [ 1149.981929][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8586'. [ 1149.997904][ T9710] FAULT_INJECTION: forcing a failure. [ 1149.997904][ T9710] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.997934][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.3.8585 Not tainted syzkaller #0 PREEMPT(full) [ 1149.997957][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1149.997969][ T9710] Call Trace: [ 1149.997976][ T9710] [ 1149.997985][ T9710] dump_stack_lvl+0xe8/0x150 [ 1149.998015][ T9710] should_fail_ex+0x410/0x560 [ 1149.998043][ T9710] should_failslab+0xa8/0x100 [ 1149.998067][ T9710] __kmalloc_cache_noprof+0xa3/0x600 [ 1149.998090][ T9710] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 1149.998112][ T9710] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 1149.998142][ T9710] bpf_prog_alloc_no_stats+0xd8/0x560 [ 1149.998163][ T9710] ? bpf_prog_alloc+0x2a/0x1a0 [ 1149.998188][ T9710] bpf_prog_alloc+0x3c/0x1a0 [ 1149.998213][ T9710] bpf_prog_load+0x7f8/0x1c20 [ 1149.998248][ T9710] ? __pfx_bpf_prog_load+0x10/0x10 [ 1149.998290][ T9710] __sys_bpf+0xd0d/0xd90 [ 1149.998319][ T9710] ? __pfx___sys_bpf+0x10/0x10 [ 1149.998351][ T9710] ? __fget_files+0x2a/0x420 [ 1149.998394][ T9710] ? ksys_write+0x242/0x270 [ 1149.998416][ T9710] ? __pfx_ksys_write+0x10/0x10 [ 1149.998441][ T9710] __x64_sys_bpf+0xba/0xd0 [ 1149.998464][ T9710] do_syscall_64+0x166/0x520 [ 1149.998488][ T9710] ? trace_irq_disable+0x3b/0x140 [ 1149.998508][ T9710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.998528][ T9710] ? clear_bhb_loop+0x70/0xc0 [ 1149.998557][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.998575][ T9710] RIP: 0033:0x7f140039e1d9 [ 1149.998592][ T9710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.998607][ T9710] RSP: 002b:00007f14011b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1149.998626][ T9710] RAX: ffffffffffffffda RBX: 00007f1400625fa0 RCX: 00007f140039e1d9 [ 1149.998640][ T9710] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1149.998651][ T9710] RBP: 00007f14011b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.998662][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.998673][ T9710] R13: 00007f1400626038 R14: 00007f1400625fa0 R15: 00007ffedefb3868 [ 1149.998704][ T9710] [ 1150.024394][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8586'. [ 1150.053810][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8586'. [ 1150.639171][ T9730] netlink: 'syz.1.8592': attribute type 1 has an invalid length. [ 1151.025258][ T9747] xt_REDIRECT: bad MAP_IPS. [ 1151.080245][ T9748] net_ratelimit: 23 callbacks suppressed [ 1151.080352][ T9748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1151.247891][ T9755] sctp: [Deprecated]: syz.1.8598 (pid 9755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1151.247891][ T9755] Use struct sctp_sack_info instead [ 1151.558768][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8602'. [ 1152.298114][ T9788] tipc: Enabling of bearer rejected, failed to enable media [ 1152.354610][ T9792] bridge0: port 3(syz_tun) entered disabled state [ 1152.356292][ T9792] bridge0: port 4(ip6gretap0) entered disabled state [ 1152.360219][ T9792] bridge0: port 5(bond0) entered disabled state [ 1152.399121][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.401915][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.496040][ T1226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1152.743418][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1152.967447][ T9798] ip6tnl2: entered allmulticast mode [ 1153.330031][ T1224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1153.350283][ T9822] FAULT_INJECTION: forcing a failure. [ 1153.350283][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.350315][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz.3.8614 Not tainted syzkaller #0 PREEMPT(full) [ 1153.350336][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1153.350355][ T9822] Call Trace: [ 1153.350362][ T9822] [ 1153.350371][ T9822] dump_stack_lvl+0xe8/0x150 [ 1153.350401][ T9822] should_fail_ex+0x410/0x560 [ 1153.350432][ T9822] strncpy_from_user+0x36/0x2c0 [ 1153.350461][ T9822] bpf_prog_load+0xdef/0x1c20 [ 1153.350497][ T9822] ? __pfx_bpf_prog_load+0x10/0x10 [ 1153.350543][ T9822] __sys_bpf+0xd0d/0xd90 [ 1153.350570][ T9822] ? __pfx___sys_bpf+0x10/0x10 [ 1153.350602][ T9822] ? __fget_files+0x2a/0x420 [ 1153.350652][ T9822] ? ksys_write+0x242/0x270 [ 1153.350674][ T9822] ? __pfx_ksys_write+0x10/0x10 [ 1153.350699][ T9822] __x64_sys_bpf+0xba/0xd0 [ 1153.350722][ T9822] do_syscall_64+0x166/0x520 [ 1153.350747][ T9822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.350767][ T9822] ? clear_bhb_loop+0x70/0xc0 [ 1153.350791][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.350809][ T9822] RIP: 0033:0x7f140039e1d9 [ 1153.350827][ T9822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.350842][ T9822] RSP: 002b:00007f14011b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1153.350863][ T9822] RAX: ffffffffffffffda RBX: 00007f1400625fa0 RCX: 00007f140039e1d9 [ 1153.350876][ T9822] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1153.350889][ T9822] RBP: 00007f14011b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.350901][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.350912][ T9822] R13: 00007f1400626038 R14: 00007f1400625fa0 R15: 00007ffedefb3868 [ 1153.350945][ T9822] [ 1153.647499][ T9831] netlink: 'syz.1.8617': attribute type 1 has an invalid length. [ 1153.802349][ T9831] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1153.907677][ T9835] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1153.908066][ T9835] bond16: (slave gre1): The slave device specified does not support setting the MAC address [ 1153.924327][ T9835] bond16: (slave gre1): Error -95 calling set_mac_address [ 1154.070835][ T9839] gretap3: entered promiscuous mode [ 1154.096902][ T9839] bond16: (slave gretap3): making interface the new active one [ 1154.097424][ T9839] bond16: (slave gretap3): Enslaving as an active interface with an up link [ 1154.310992][ T9831] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1154.325374][ T9831] bond16: (slave bond17): Enslaving as an active interface with a down link [ 1154.362378][ T9835] bond16 (unregistering): (slave gretap3): Releasing active interface [ 1154.451547][ T9835] bond16 (unregistering): (slave bond17): Releasing active interface [ 1154.472190][ T9835] bond16 (unregistering): Released all slaves [ 1154.759118][ T9860] ip_tables: iptables: counters copy to user failed while replacing table [ 1154.842061][ T9867] FAULT_INJECTION: forcing a failure. [ 1154.842061][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.842094][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.3.8628 Not tainted syzkaller #0 PREEMPT(full) [ 1154.842116][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1154.842128][ T9867] Call Trace: [ 1154.842136][ T9867] [ 1154.842144][ T9867] dump_stack_lvl+0xe8/0x150 [ 1154.842197][ T9867] should_fail_ex+0x410/0x560 [ 1154.842242][ T9867] should_failslab+0xa8/0x100 [ 1154.842296][ T9867] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1154.842320][ T9867] ? kasan_save_track+0x4f/0x80 [ 1154.842371][ T9867] ? kasan_save_track+0x3e/0x80 [ 1154.842391][ T9867] ? __kasan_kmalloc+0x93/0xb0 [ 1154.842410][ T9867] ? __get_vm_area_node+0x155/0x2f0 [ 1154.842435][ T9867] ? __get_vm_area_node+0x155/0x2f0 [ 1154.842462][ T9867] ? __x64_sys_bpf+0xba/0xd0 [ 1154.842486][ T9867] __get_vm_area_node+0x155/0x2f0 [ 1154.842569][ T9867] __vmalloc_node_range_noprof+0x343/0x1540 [ 1154.842591][ T9867] ? bpf_check+0x115b/0x2ef0 [ 1154.842663][ T9867] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1154.842685][ T9867] ? __kasan_kmalloc+0x93/0xb0 [ 1154.842710][ T9867] ? __kmalloc_cache_noprof+0x321/0x600 [ 1154.842732][ T9867] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1154.842751][ T9867] ? bpf_diag_init+0x87/0x140 [ 1154.842773][ T9867] ? bpf_diag_init+0x87/0x140 [ 1154.842797][ T9867] ? bpf_check+0x115b/0x2ef0 [ 1154.842814][ T9867] __vmalloc_noprof+0xd2/0x120 [ 1154.842833][ T9867] ? bpf_check+0x115b/0x2ef0 [ 1154.842854][ T9867] bpf_check+0x115b/0x2ef0 [ 1154.842890][ T9867] ? __pfx_bpf_check+0x10/0x10 [ 1154.842919][ T9867] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1154.842964][ T9867] bpf_prog_load+0x14d6/0x1c20 [ 1154.842999][ T9867] ? __pfx_bpf_prog_load+0x10/0x10 [ 1154.843046][ T9867] __sys_bpf+0xd0d/0xd90 [ 1154.843076][ T9867] ? __pfx___sys_bpf+0x10/0x10 [ 1154.843110][ T9867] ? __fget_files+0x2a/0x420 [ 1154.843153][ T9867] ? ksys_write+0x242/0x270 [ 1154.843175][ T9867] ? __pfx_ksys_write+0x10/0x10 [ 1154.843200][ T9867] __x64_sys_bpf+0xba/0xd0 [ 1154.843223][ T9867] do_syscall_64+0x166/0x520 [ 1154.843248][ T9867] ? trace_irq_disable+0x3b/0x140 [ 1154.843267][ T9867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.843287][ T9867] ? clear_bhb_loop+0x70/0xc0 [ 1154.843324][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.843344][ T9867] RIP: 0033:0x7f140039e1d9 [ 1154.843363][ T9867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.843379][ T9867] RSP: 002b:00007f14011b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1154.843399][ T9867] RAX: ffffffffffffffda RBX: 00007f1400625fa0 RCX: 00007f140039e1d9 [ 1154.843413][ T9867] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1154.843426][ T9867] RBP: 00007f14011b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.843437][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.843449][ T9867] R13: 00007f1400626038 R14: 00007f1400625fa0 R15: 00007ffedefb3868 [ 1154.843478][ T9867] [ 1154.851646][ T9867] syz.3.8628: vmalloc error: size 2176, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1154.851711][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.3.8628 Not tainted syzkaller #0 PREEMPT(full) [ 1154.851732][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1154.851744][ T9867] Call Trace: [ 1154.851752][ T9867] [ 1154.851759][ T9867] dump_stack_lvl+0xe8/0x150 [ 1154.851790][ T9867] warn_alloc+0x24d/0x270 [ 1154.851813][ T9867] ? __kasan_kmalloc+0x22/0xb0 [ 1154.851839][ T9867] ? __pfx_warn_alloc+0x10/0x10 [ 1154.851857][ T9867] ? __kasan_kmalloc+0x93/0xb0 [ 1154.851878][ T9867] ? __get_vm_area_node+0x155/0x2f0 [ 1154.851907][ T9867] ? __x64_sys_bpf+0xba/0xd0 [ 1154.851930][ T9867] ? __get_vm_area_node+0x2a9/0x2f0 [ 1154.851964][ T9867] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1154.852012][ T9867] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1154.852031][ T9867] ? __kasan_kmalloc+0x93/0xb0 [ 1154.852054][ T9867] ? __kmalloc_cache_noprof+0x321/0x600 [ 1154.852075][ T9867] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1154.852094][ T9867] ? bpf_diag_init+0x87/0x140 [ 1154.852116][ T9867] ? bpf_diag_init+0x87/0x140 [ 1154.852140][ T9867] ? bpf_check+0x115b/0x2ef0 [ 1154.852159][ T9867] __vmalloc_noprof+0xd2/0x120 [ 1154.852178][ T9867] ? bpf_check+0x115b/0x2ef0 [ 1154.852204][ T9867] bpf_check+0x115b/0x2ef0 [ 1154.852242][ T9867] ? __pfx_bpf_check+0x10/0x10 [ 1154.852266][ T9867] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1154.852296][ T9867] bpf_prog_load+0x14d6/0x1c20 [ 1154.852330][ T9867] ? __pfx_bpf_prog_load+0x10/0x10 [ 1154.852375][ T9867] __sys_bpf+0xd0d/0xd90 [ 1154.852404][ T9867] ? __pfx___sys_bpf+0x10/0x10 [ 1154.852437][ T9867] ? __fget_files+0x2a/0x420 [ 1154.852480][ T9867] ? ksys_write+0x242/0x270 [ 1154.852501][ T9867] ? __pfx_ksys_write+0x10/0x10 [ 1154.852525][ T9867] __x64_sys_bpf+0xba/0xd0 [ 1154.852548][ T9867] do_syscall_64+0x166/0x520 [ 1154.852572][ T9867] ? trace_irq_disable+0x3b/0x140 [ 1154.852590][ T9867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.852609][ T9867] ? clear_bhb_loop+0x70/0xc0 [ 1154.852639][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.852657][ T9867] RIP: 0033:0x7f140039e1d9 [ 1154.852674][ T9867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.852689][ T9867] RSP: 002b:00007f14011b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1154.852708][ T9867] RAX: ffffffffffffffda RBX: 00007f1400625fa0 RCX: 00007f140039e1d9 [ 1154.852722][ T9867] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1154.852734][ T9867] RBP: 00007f14011b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.852747][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.852759][ T9867] R13: 00007f1400626038 R14: 00007f1400625fa0 R15: 00007ffedefb3868 [ 1154.852788][ T9867] [ 1154.852843][ T9867] Mem-Info: [ 1154.852854][ T9867] active_anon:5683 inactive_anon:6 isolated_anon:0 [ 1154.852854][ T9867] active_file:34 inactive_file:43606 isolated_file:0 [ 1154.852854][ T9867] unevictable:0 dirty:324 writeback:0 [ 1154.852854][ T9867] slab_reclaimable:12547 slab_unreclaimable:129496 [ 1154.852854][ T9867] mapped:29684 shmem:532 pagetables:5698 [ 1154.852854][ T9867] sec_pagetables:0 bounce:0 [ 1154.852854][ T9867] kernel_misc_reclaimable:0 [ 1154.852854][ T9867] free:1215853 free_pcp:17592 free_cma:0 [ 1154.852901][ T9867] Node 0 active_anon:22732kB inactive_anon:24kB active_file:136kB inactive_file:174216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118736kB dirty:1296kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15368kB pagetables:15168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1154.852952][ T9867] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:7624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1154.852997][ T9867] Node 0 DMA free:11260kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1154.853049][ T9867] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1154.853083][ T9867] Node 0 DMA32 free:970672kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22732kB inactive_anon:24kB active_file:136kB inactive_file:174216kB unevictable:0kB writepending:1296kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:44708kB local_pcp:23860kB free_cma:0kB [ 1154.858484][ T9867] lowmem_reserve[]: 0 0 0 0 0 [ 1154.858519][ T9867] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.858576][ T9867] lowmem_reserve[]: 0 0 0 0 0 [ 1154.858606][ T9867] Node 1 Normal free:3881480kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:25656kB local_pcp:10952kB free_cma:0kB [ 1154.858664][ T9867] lowmem_reserve[]: 0 0 0 0 0 [ 1154.858693][ T9867] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 11260kB [ 1154.858822][ T9867] Node 0 DMA32: 3512*4kB (UME) 1726*8kB (UME) 656*16kB (UME) 727*32kB (UME) 816*64kB (UME) 832*128kB (UME) 855*256kB (UME) 468*512kB (UME) 183*1024kB (UME) 47*2048kB (UME) 2*4096kB (U) = 970672kB [ 1154.858957][ T9867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1154.859056][ T9867] Node 1 Normal: 92*4kB (UM) 63*8kB (UM) 44*16kB (UME) 47*32kB (UM) 54*64kB (UME) 33*128kB (U) 28*256kB (U) 18*512kB (U) 10*1024kB (UE) 3*2048kB (UE) 937*4096kB (UM) = 3881480kB [ 1154.859192][ T9867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1154.859207][ T9867] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1154.859220][ T9867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1154.859233][ T9867] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1154.859246][ T9867] 44168 total pagecache pages [ 1154.859254][ T9867] 0 pages in swap cache [ 1154.859261][ T9867] Free swap = 124996kB [ 1154.859268][ T9867] Total swap = 124996kB [ 1154.859276][ T9867] 2097051 pages RAM [ 1154.859282][ T9867] 0 pages HighMem/MovableOnly [ 1154.859288][ T9867] 433508 pages reserved [ 1154.859294][ T9867] 0 pages cma reserved [ 1155.122655][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8633'. [ 1155.195346][ T9875] syzkaller0: entered promiscuous mode [ 1155.195367][ T9875] syzkaller0: entered allmulticast mode [ 1155.605349][ T9888] netlink: 'syz.1.8635': attribute type 11 has an invalid length. [ 1155.971270][ T9882] bond10: entered promiscuous mode [ 1155.972179][ T9882] bond10: entered allmulticast mode [ 1155.972553][ T9882] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1156.065838][ T9890] batadv0: Caught tx_queue_len zero misconfig [ 1156.086547][ T9894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1156.112863][ T9899] netlink: 'syz.2.8637': attribute type 1 has an invalid length. [ 1156.363060][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8638'. [ 1156.553343][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8639'. [ 1156.560968][ T9919] Bluetooth: hci0: unsupported parameter 5135 [ 1156.560990][ T9919] Bluetooth: hci0: unsupported parameter 8192 [ 1156.561003][ T9919] Bluetooth: hci0: unsupported parameter 5135 [ 1156.561013][ T9919] Bluetooth: hci0: unsupported parameter 8192 [ 1156.641929][ T9925] netlink: 'syz.1.8642': attribute type 11 has an invalid length. [ 1156.684353][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8638'. [ 1156.771006][ T9929] netlink: 'syz.1.8642': attribute type 1 has an invalid length. [ 1157.220959][ T9943] ip_tables: iptables: counters copy to user failed while replacing table [ 1157.318274][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8651'. [ 1157.318315][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8651'. [ 1157.531262][ T83] netdevsim netdevsim4 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 1157.531372][ T83] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1157.531407][ T83] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1157.536379][T28124] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1157.764205][ T9979] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1157.764232][ T9979] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1157.769846][ T9966] Cannot find add_set index 34 as target [ 1157.794131][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8655'. [ 1157.830743][ T9973] bridge3: entered allmulticast mode [ 1157.855906][ T9973] bridge4: entered allmulticast mode [ 1157.960803][ T9973] bridge5: entered allmulticast mode [ 1157.969572][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8655'. [ 1157.995369][ T9973] bridge6: entered allmulticast mode [ 1158.091938][ T9973] bridge7: entered allmulticast mode [ 1158.340497][ T9973] bridge8: entered allmulticast mode [ 1158.384958][ T9993] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1158.480617][ T9973] bridge9: entered allmulticast mode [ 1158.547475][ T9973] bridge10: entered allmulticast mode [ 1158.786015][T10004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8661'. [ 1159.269384][T10029] netlink: Conntrack attr has 8 unknown bytes [ 1159.269418][T10029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1159.280059][T10022] can: request_module (can-proto-0) failed. [ 1159.303900][T10029] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1159.491674][T10032] team0: Port device team_slave_0 removed [ 1159.497631][T10039] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1160.925803][T10092] netlink: 'syz.2.8684': attribute type 1 has an invalid length. [ 1160.985247][T10092] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1162.275215][T10137] __nla_validate_parse: 3 callbacks suppressed [ 1162.275235][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8696'. [ 1162.327207][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8694'. [ 1162.368611][T10137] bond9: option lacp_active: invalid value (5) [ 1162.405081][T10137] bond9 (unregistering): Released all slaves [ 1162.642927][T10147] netlink: Unknown nat attribute (0) [ 1162.642959][T10147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1162.819013][T10158] SET target dimension over the limit! [ 1162.878809][T10159] xt_hashlimit: size too large, truncated to 1048576 [ 1163.027948][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8705'. [ 1163.245451][T10176] openvswitch: netlink: Message has 8 unknown bytes. [ 1163.388806][T10173] lo: left promiscuous mode [ 1163.411846][T10173] tunl0: left promiscuous mode [ 1163.420207][T10173] gre0: left promiscuous mode [ 1163.422669][T10173] 1ªX¹¦Dö»: left promiscuous mode [ 1163.450767][T10173] erspan0: left promiscuous mode [ 1163.461420][T10173] ip_vti0: left promiscuous mode [ 1163.471689][T10173] ip6_vti0: left promiscuous mode [ 1163.481024][T10173] sit0: left promiscuous mode [ 1163.492543][T10173] ip6tnl0: left promiscuous mode [ 1163.502403][T10173] ip6gre0: left promiscuous mode [ 1163.509354][T10173] syz_tun: left promiscuous mode [ 1163.511599][T10173] ip6gretap0: left promiscuous mode [ 1163.526712][T10173] vcan0: left promiscuous mode [ 1163.528155][T10173] bond0: left promiscuous mode [ 1163.529292][T10173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.530896][T10173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.531938][T10173] dummy0: left promiscuous mode [ 1163.567129][T10173] nlmon0: left promiscuous mode [ 1163.568235][T10173] veth0: left promiscuous mode [ 1163.569401][T10173] veth1: left promiscuous mode [ 1163.571196][T10173] wg0: left promiscuous mode [ 1163.598335][T10173] wg2: left promiscuous mode [ 1163.602605][T10173] veth0_to_bridge: left promiscuous mode [ 1163.607002][T10173] bridge_slave_0: left promiscuous mode [ 1163.613171][T10173] veth1_to_bridge: left promiscuous mode [ 1163.618649][T10173] bridge_slave_1: left promiscuous mode [ 1163.634014][T10173] veth0_to_bond: left promiscuous mode [ 1163.646053][T10173] bond_slave_0: left promiscuous mode [ 1163.663353][T10173] veth0_to_batadv: left promiscuous mode [ 1163.664545][T10173] batadv_slave_0: left promiscuous mode [ 1163.665962][T10173] veth1_to_batadv: left promiscuous mode [ 1163.667256][T10173] batadv_slave_1: left promiscuous mode [ 1163.669079][T10173] xfrm0: left promiscuous mode [ 1163.671167][T10173] veth0_to_hsr: left promiscuous mode [ 1163.709427][T10173] veth1_to_hsr: left promiscuous mode [ 1163.719149][T10173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1163.719172][T10173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1163.719225][T10173] hsr0: left promiscuous mode [ 1163.720534][T10173] veth1_virt_wifi: left promiscuous mode [ 1163.721578][T10173] veth0_virt_wifi: left promiscuous mode [ 1163.761441][T10173] virt_wifi0: left promiscuous mode [ 1163.768765][T10173] veth1_vlan: left promiscuous mode [ 1163.771456][T10173] vlan0: left promiscuous mode [ 1163.772656][T10173] vlan1: left promiscuous mode [ 1163.790494][T10173] veth1_vlan: entered promiscuous mode [ 1163.790709][T10173] macvlan0: left promiscuous mode [ 1163.792104][T10173] macvlan1: left promiscuous mode [ 1163.810487][T10173] ipvlan0: left promiscuous mode [ 1163.812282][T10173] ipvlan1: left promiscuous mode [ 1163.827466][T10173] geneve1: left promiscuous mode [ 1163.829402][T10173] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 1163.830505][T10173] geneve2: left promiscuous mode [ 1163.830525][T10173] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1163.936732][T28126] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.937554][ T83] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.052858][T28124] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.133845][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8713'. [ 1164.145203][T28124] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.163929][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8713'. [ 1164.167109][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8713'. [ 1164.462419][T10206] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1165.101522][T10228] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8722'. [ 1165.158152][T10222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8722'. [ 1165.769573][T10240] netlink: 2136 bytes leftover after parsing attributes in process `syz.0.8726'. [ 1165.770435][T10239] netlink: 2136 bytes leftover after parsing attributes in process `syz.0.8726'. [ 1166.191564][T10251] FAULT_INJECTION: forcing a failure. [ 1166.191564][T10251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1166.191598][T10251] CPU: 0 UID: 0 PID: 10251 Comm: syz.4.8730 Not tainted syzkaller #0 PREEMPT(full) [ 1166.191620][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.191632][T10251] Call Trace: [ 1166.191639][T10251] [ 1166.191648][T10251] dump_stack_lvl+0xe8/0x150 [ 1166.191681][T10251] should_fail_ex+0x410/0x560 [ 1166.191715][T10251] prepare_alloc_pages+0x223/0x600 [ 1166.191744][T10251] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1166.191771][T10251] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1166.191794][T10251] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1166.191820][T10251] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1166.191848][T10251] ? __pfx_policy_nodemask+0x10/0x10 [ 1166.191871][T10251] ? __get_vm_area_node+0x155/0x2f0 [ 1166.191898][T10251] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1166.191916][T10251] ? __vmalloc_noprof+0xd2/0x120 [ 1166.191937][T10251] __alloc_pages_noprof+0x10/0x100 [ 1166.191961][T10251] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1166.191991][T10251] ? alloc_pages_noprof+0x140/0x2b0 [ 1166.192020][T10251] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1166.192049][T10251] alloc_vmap_area+0xd1a/0x1420 [ 1166.192090][T10251] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1166.192116][T10251] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1166.192138][T10251] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1166.192159][T10251] ? __get_vm_area_node+0x155/0x2f0 [ 1166.192191][T10251] __get_vm_area_node+0x200/0x2f0 [ 1166.192226][T10251] __vmalloc_node_range_noprof+0x343/0x1540 [ 1166.192252][T10251] ? bpf_check+0x115b/0x2ef0 [ 1166.192300][T10251] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1166.192320][T10251] ? __kasan_kmalloc+0x93/0xb0 [ 1166.192344][T10251] ? __kmalloc_cache_noprof+0x321/0x600 [ 1166.192365][T10251] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1166.192384][T10251] ? bpf_diag_init+0x87/0x140 [ 1166.192406][T10251] ? bpf_diag_init+0x87/0x140 [ 1166.192429][T10251] ? bpf_check+0x115b/0x2ef0 [ 1166.192445][T10251] __vmalloc_noprof+0xd2/0x120 [ 1166.192462][T10251] ? bpf_check+0x115b/0x2ef0 [ 1166.192484][T10251] bpf_check+0x115b/0x2ef0 [ 1166.192521][T10251] ? __pfx_bpf_check+0x10/0x10 [ 1166.192542][T10251] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1166.192569][T10251] bpf_prog_load+0x14d6/0x1c20 [ 1166.192601][T10251] ? __pfx_bpf_prog_load+0x10/0x10 [ 1166.192643][T10251] __sys_bpf+0xd0d/0xd90 [ 1166.192672][T10251] ? __pfx___sys_bpf+0x10/0x10 [ 1166.192704][T10251] ? __fget_files+0x2a/0x420 [ 1166.192744][T10251] ? ksys_write+0x242/0x270 [ 1166.192763][T10251] ? __pfx_ksys_write+0x10/0x10 [ 1166.192784][T10251] __x64_sys_bpf+0xba/0xd0 [ 1166.192807][T10251] do_syscall_64+0x166/0x520 [ 1166.192829][T10251] ? trace_irq_disable+0x3b/0x140 [ 1166.192847][T10251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.192866][T10251] ? clear_bhb_loop+0x70/0xc0 [ 1166.192890][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.192909][T10251] RIP: 0033:0x7f918399e1d9 [ 1166.192928][T10251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.192943][T10251] RSP: 002b:00007f918485c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1166.192963][T10251] RAX: ffffffffffffffda RBX: 00007f9183c25fa0 RCX: 00007f918399e1d9 [ 1166.192977][T10251] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1166.192990][T10251] RBP: 00007f918485c090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.193002][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.193014][T10251] R13: 00007f9183c26038 R14: 00007f9183c25fa0 R15: 00007ffff13d8fb8 [ 1166.193044][T10251] [ 1166.387401][T10251] syz.4.8730: vmalloc error: size 2176, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1166.387464][T10251] CPU: 1 UID: 0 PID: 10251 Comm: syz.4.8730 Not tainted syzkaller #0 PREEMPT(full) [ 1166.387485][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.387496][T10251] Call Trace: [ 1166.387504][T10251] [ 1166.387512][T10251] dump_stack_lvl+0xe8/0x150 [ 1166.387541][T10251] warn_alloc+0x24d/0x270 [ 1166.387572][T10251] ? lockdep_hardirqs_on+0x7b/0x110 [ 1166.387598][T10251] ? __pfx_warn_alloc+0x10/0x10 [ 1166.387617][T10251] ? kfree+0x1c5/0x650 [ 1166.387641][T10251] ? __get_vm_area_node+0x219/0x2f0 [ 1166.387675][T10251] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1166.387724][T10251] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1166.387741][T10251] ? __kasan_kmalloc+0x93/0xb0 [ 1166.387765][T10251] ? __kmalloc_cache_noprof+0x321/0x600 [ 1166.387785][T10251] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1166.387804][T10251] ? bpf_diag_init+0x87/0x140 [ 1166.387825][T10251] ? bpf_diag_init+0x87/0x140 [ 1166.387849][T10251] ? bpf_check+0x115b/0x2ef0 [ 1166.387868][T10251] __vmalloc_noprof+0xd2/0x120 [ 1166.387885][T10251] ? bpf_check+0x115b/0x2ef0 [ 1166.387908][T10251] bpf_check+0x115b/0x2ef0 [ 1166.387945][T10251] ? __pfx_bpf_check+0x10/0x10 [ 1166.387968][T10251] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1166.388001][T10251] bpf_prog_load+0x14d6/0x1c20 [ 1166.388034][T10251] ? __pfx_bpf_prog_load+0x10/0x10 [ 1166.388079][T10251] __sys_bpf+0xd0d/0xd90 [ 1166.388107][T10251] ? __pfx___sys_bpf+0x10/0x10 [ 1166.388139][T10251] ? __fget_files+0x2a/0x420 [ 1166.388182][T10251] ? ksys_write+0x242/0x270 [ 1166.388202][T10251] ? __pfx_ksys_write+0x10/0x10 [ 1166.388225][T10251] __x64_sys_bpf+0xba/0xd0 [ 1166.388247][T10251] do_syscall_64+0x166/0x520 [ 1166.388269][T10251] ? trace_irq_disable+0x3b/0x140 [ 1166.388288][T10251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.388306][T10251] ? clear_bhb_loop+0x70/0xc0 [ 1166.388328][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.388346][T10251] RIP: 0033:0x7f918399e1d9 [ 1166.388364][T10251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.388379][T10251] RSP: 002b:00007f918485c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1166.388396][T10251] RAX: ffffffffffffffda RBX: 00007f9183c25fa0 RCX: 00007f918399e1d9 [ 1166.388410][T10251] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1166.388421][T10251] RBP: 00007f918485c090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.388433][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1166.388444][T10251] R13: 00007f9183c26038 R14: 00007f9183c25fa0 R15: 00007ffff13d8fb8 [ 1166.388474][T10251] [ 1166.404920][T10251] Mem-Info: [ 1166.404936][T10251] active_anon:7803 inactive_anon:6 isolated_anon:0 [ 1166.404936][T10251] active_file:34 inactive_file:43742 isolated_file:0 [ 1166.404936][T10251] unevictable:5 dirty:186 writeback:0 [ 1166.404936][T10251] slab_reclaimable:12767 slab_unreclaimable:128058 [ 1166.404936][T10251] mapped:32996 shmem:2802 pagetables:5686 [ 1166.404936][T10251] sec_pagetables:0 bounce:0 [ 1166.404936][T10251] kernel_misc_reclaimable:0 [ 1166.404936][T10251] free:1214735 free_pcp:17159 free_cma:0 [ 1166.404985][T10251] Node 0 active_anon:31212kB inactive_anon:24kB active_file:136kB inactive_file:174760kB unevictable:20kB isolated(anon):0kB isolated(file):0kB mapped:131984kB dirty:744kB writeback:0kB shmem:11208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15496kB pagetables:15120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1166.405035][T10251] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:7624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1166.405076][T10251] Node 0 DMA free:11260kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1166.405132][T10251] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1166.405162][T10251] Node 0 DMA32 free:966200kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31212kB inactive_anon:24kB active_file:136kB inactive_file:174760kB unevictable:20kB writepending:744kB zspages:0kB present:3129332kB managed:2527708kB mlocked:20kB bounce:0kB free_pcp:42976kB local_pcp:19224kB free_cma:0kB [ 1166.405211][T10251] lowmem_reserve[]: 0 0 0 0 0 [ 1166.405239][T10251] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.405282][T10251] lowmem_reserve[]: 0 0 0 0 0 [ 1166.405399][T10251] Node 1 Normal free:3881480kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:25656kB local_pcp:14704kB free_cma:0kB [ 1166.405450][T10251] lowmem_reserve[]: 0 0 0 0 0 [ 1166.405480][T10251] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 11260kB [ 1166.407862][T10251] Node 0 DMA32: 1501*4kB (UME) 1029*8kB (UME) 791*16kB (UME) 1009*32kB (UME) 830*64kB (UME) 833*128kB (UME) 855*256kB (UME) 468*512kB (UME) 182*1024kB (UME) 46*2048kB (UME) 2*4096kB (U) = 966188kB [ 1166.408006][T10251] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1166.408097][T10251] Node 1 Normal: 92*4kB (UM) 63*8kB (UM) 44*16kB (UME) 47*32kB (UM) 54*64kB (UME) 33*128kB (U) 28*256kB (U) 18*512kB (U) 10*1024kB (UE) 3*2048kB (UE) 937*4096kB (UM) = 3881480kB [ 1166.408233][T10251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1166.408248][T10251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1166.408261][T10251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1166.408275][T10251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1166.408289][T10251] 46574 total pagecache pages [ 1166.408297][T10251] 0 pages in swap cache [ 1166.408303][T10251] Free swap = 124996kB [ 1166.408310][T10251] Total swap = 124996kB [ 1166.408318][T10251] 2097051 pages RAM [ 1166.408325][T10251] 0 pages HighMem/MovableOnly [ 1166.408332][T10251] 433508 pages reserved [ 1166.408338][T10251] 0 pages cma reserved [ 1167.564478][T10261] ip_tables: iptables: counters copy to user failed while replacing table [ 1167.570995][T10261] __nla_validate_parse: 1 callbacks suppressed [ 1167.571015][T10261] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8734'. [ 1168.046439][T10275] xt_CT: No such helper "syz0" [ 1168.397316][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1168.958805][T10284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8740'. [ 1169.329101][T10295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8744'. [ 1169.360721][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8745'. [ 1170.803868][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8755'. [ 1170.863147][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8755'. [ 1170.913824][T10340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8753'. [ 1170.913855][T10340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8753'. [ 1170.994253][T10352] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1171.228827][T10369] netlink: zone id is out of range [ 1171.504734][T10384] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8762'. [ 1171.693323][T10389] tunl0: Caught tx_queue_len zero misconfig [ 1172.452052][T10405] netlink: 'syz.0.8767': attribute type 11 has an invalid length. [ 1172.509234][T10405] netlink: 'syz.0.8767': attribute type 1 has an invalid length. [ 1172.587485][T10405] bond9: entered promiscuous mode [ 1172.587901][T10405] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1172.635230][T10405] __nla_validate_parse: 2 callbacks suppressed [ 1172.635252][T10405] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8767'. [ 1172.652958][T10418] bond0: Error: Cannot enslave bond to itself. [ 1172.729016][T10405] ipvlan2: entered allmulticast mode [ 1172.729039][T10405] bond9: entered allmulticast mode [ 1172.729330][T10405] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1172.729348][T10405] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1172.729366][T10405] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1172.754714][T10405] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1173.025968][T10426] bond11: entered promiscuous mode [ 1173.025990][T10426] bond11: entered allmulticast mode [ 1173.222961][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1174.207486][T10447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1174.622086][T10478] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8787'. [ 1174.658863][T10478] syzkaller1: entered promiscuous mode [ 1174.658997][T10478] syzkaller1: entered allmulticast mode [ 1174.729844][T10478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8787'. [ 1174.898894][T10493] ip_tables: iptables: counters copy to user failed while replacing table [ 1175.160837][T10506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1175.189129][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8796'. [ 1175.189159][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8796'. [ 1175.513790][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8799'. [ 1175.849008][T10525] ip_tables: iptables: counters copy to user failed while replacing table [ 1175.946153][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8804'. [ 1175.974321][T10529] sit0: entered promiscuous mode [ 1175.990402][T10529] netlink: 'syz.0.8802': attribute type 1 has an invalid length. [ 1175.990423][T10529] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8802'. [ 1176.373293][T10546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1176.880856][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1177.052448][T10568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8814'. [ 1177.655011][T10596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.676323][T10596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.698207][T10596] batman_adv: batadv0: Interface activated: veth0 [ 1177.830398][T10596] batadv_slave_1: entered promiscuous mode [ 1177.859558][T10596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1177.859583][T10596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1177.890821][T10596] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1177.909735][T10596] veth1_vlan: left promiscuous mode [ 1177.917842][T10596] veth0_vlan: left promiscuous mode [ 1177.926031][T10596] veth0_vlan: entered promiscuous mode [ 1177.927873][T10596] veth1_vlan: entered promiscuous mode [ 1177.959653][T10596] veth1_macvtap: left promiscuous mode [ 1177.965463][T10596] veth0_macvtap: left promiscuous mode [ 1177.972271][T10596] veth0_macvtap: entered promiscuous mode [ 1177.977014][T10596] veth1_macvtap: entered promiscuous mode [ 1177.999313][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1178.002683][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1178.007766][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.012268][T10596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1178.023267][T10596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1178.030423][T10596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1178.039021][T10596] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1178.041880][T10596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1178.044879][T10596] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1178.052739][T10607] netlink: 'syz.0.8821': attribute type 1 has an invalid length. [ 1178.060934][T10596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1178.109624][T10596] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1178.123640][T10596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1178.153878][T10596] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1178.176717][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.245078][ T13] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1178.289480][ T13] bond6: (slave veth5): making interface the new active one [ 1178.324179][ T13] bond6: active interface up! [ 1178.350147][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.483391][T10591] syzkaller0: entered promiscuous mode [ 1178.483416][T10591] syzkaller0: entered allmulticast mode [ 1178.613978][T10610] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1178.614612][T10610] bridge0: port 1(bond9) entered blocking state [ 1178.614717][T10610] bridge0: port 1(bond9) entered disabled state [ 1178.625226][T10610] bond9: entered allmulticast mode [ 1178.638718][T10610] bond9: entered promiscuous mode [ 1178.972826][ T162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.973801][ T162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.975698][ T162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.464514][ T4934] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1179.468401][T10662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8831'. [ 1179.672724][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8832'. [ 1179.699268][T10669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8832'. [ 1179.868945][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8835'. [ 1179.868972][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8835'. [ 1180.065611][T10672] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1180.097255][T10672] bond10 (unregistering): Released all slaves [ 1180.158972][T10678] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1180.247436][T10685] tipc: Enabled bearer , priority 0 [ 1180.278734][T10685] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1180.295522][T10685] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8838'. [ 1180.445829][T10688] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1180.469410][T10683] tipc: Disabling bearer [ 1180.548084][T10692] netlink: NAT attribute has 8 unknown bytes [ 1180.548122][T10692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1181.690725][T10734] FAULT_INJECTION: forcing a failure. [ 1181.690725][T10734] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.690759][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.4.8851 Not tainted syzkaller #0 PREEMPT(full) [ 1181.690781][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1181.690792][T10734] Call Trace: [ 1181.690800][T10734] [ 1181.690808][T10734] dump_stack_lvl+0xe8/0x150 [ 1181.690841][T10734] should_fail_ex+0x410/0x560 [ 1181.690871][T10734] should_failslab+0xa8/0x100 [ 1181.690896][T10734] __kmalloc_node_noprof+0x100/0x720 [ 1181.690915][T10734] ? __get_vm_area_node+0x200/0x2f0 [ 1181.690941][T10734] ? __get_vm_area_node+0x283/0x2f0 [ 1181.690966][T10734] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1181.690982][T10734] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1181.691007][T10734] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1181.691036][T10734] ? vsnprintf+0xe42/0xef0 [ 1181.691071][T10734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1181.691092][T10734] ? bpf_verifier_vlog+0x3d1/0x900 [ 1181.691119][T10734] ? bpf_prog_calc_tag+0x51/0x370 [ 1181.691139][T10734] __vmalloc_noprof+0xd2/0x120 [ 1181.691158][T10734] ? bpf_prog_calc_tag+0x51/0x370 [ 1181.691179][T10734] bpf_prog_calc_tag+0x51/0x370 [ 1181.691201][T10734] check_and_resolve_insns+0xbb/0x21d0 [ 1181.691224][T10734] ? add_subprog+0x2e2/0x3f0 [ 1181.691243][T10704] syzkaller0: entered promiscuous mode [ 1181.691246][T10734] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1181.691261][T10704] syzkaller0: entered allmulticast mode [ 1181.691286][T10734] bpf_check+0x18f7/0x2ef0 [ 1181.691325][T10734] ? __pfx_bpf_check+0x10/0x10 [ 1181.691346][T10734] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1181.691377][T10734] bpf_prog_load+0x14d6/0x1c20 [ 1181.691416][T10734] ? __pfx_bpf_prog_load+0x10/0x10 [ 1181.691456][T10734] __sys_bpf+0xd0d/0xd90 [ 1181.691485][T10734] ? __pfx___sys_bpf+0x10/0x10 [ 1181.691518][T10734] ? __fget_files+0x2a/0x420 [ 1181.691560][T10734] ? ksys_write+0x242/0x270 [ 1181.691580][T10734] ? __pfx_ksys_write+0x10/0x10 [ 1181.691604][T10734] __x64_sys_bpf+0xba/0xd0 [ 1181.691626][T10734] do_syscall_64+0x166/0x520 [ 1181.691647][T10734] ? trace_irq_disable+0x3b/0x140 [ 1181.691664][T10734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.691684][T10734] ? clear_bhb_loop+0x70/0xc0 [ 1181.691707][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.691726][T10734] RIP: 0033:0x7f918399e1d9 [ 1181.691745][T10734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.691759][T10734] RSP: 002b:00007f918485c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1181.691778][T10734] RAX: ffffffffffffffda RBX: 00007f9183c25fa0 RCX: 00007f918399e1d9 [ 1181.691792][T10734] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1181.691805][T10734] RBP: 00007f918485c090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.691817][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.691829][T10734] R13: 00007f9183c26038 R14: 00007f9183c25fa0 R15: 00007ffff13d8fb8 [ 1181.691860][T10734] [ 1181.842136][T10734] syz.4.8851: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1181.842204][T10734] CPU: 0 UID: 0 PID: 10734 Comm: syz.4.8851 Not tainted syzkaller #0 PREEMPT(full) [ 1181.842224][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1181.842236][T10734] Call Trace: [ 1181.842243][T10734] [ 1181.842251][T10734] dump_stack_lvl+0xe8/0x150 [ 1181.842286][T10734] warn_alloc+0x24d/0x270 [ 1181.842312][T10734] ? __pfx_warn_alloc+0x10/0x10 [ 1181.842337][T10734] ? __kmalloc_node_noprof+0x4d7/0x720 [ 1181.842356][T10734] ? __get_vm_area_node+0x200/0x2f0 [ 1181.842382][T10734] ? __get_vm_area_node+0x283/0x2f0 [ 1181.842406][T10734] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1181.842423][T10734] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1181.842448][T10734] __vmalloc_node_range_noprof+0x969/0x1540 [ 1181.842494][T10734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1181.842512][T10734] ? bpf_verifier_vlog+0x3d1/0x900 [ 1181.842539][T10734] ? bpf_prog_calc_tag+0x51/0x370 [ 1181.842560][T10734] __vmalloc_noprof+0xd2/0x120 [ 1181.842578][T10734] ? bpf_prog_calc_tag+0x51/0x370 [ 1181.842602][T10734] bpf_prog_calc_tag+0x51/0x370 [ 1181.842628][T10734] check_and_resolve_insns+0xbb/0x21d0 [ 1181.842654][T10734] ? add_subprog+0x2e2/0x3f0 [ 1181.842678][T10734] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1181.842709][T10734] bpf_check+0x18f7/0x2ef0 [ 1181.842754][T10734] ? __pfx_bpf_check+0x10/0x10 [ 1181.842777][T10734] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1181.842807][T10734] bpf_prog_load+0x14d6/0x1c20 [ 1181.842840][T10734] ? __pfx_bpf_prog_load+0x10/0x10 [ 1181.842886][T10734] __sys_bpf+0xd0d/0xd90 [ 1181.842914][T10734] ? __pfx___sys_bpf+0x10/0x10 [ 1181.842945][T10734] ? __fget_files+0x2a/0x420 [ 1181.842987][T10734] ? ksys_write+0x242/0x270 [ 1181.843008][T10734] ? __pfx_ksys_write+0x10/0x10 [ 1181.843030][T10734] __x64_sys_bpf+0xba/0xd0 [ 1181.843052][T10734] do_syscall_64+0x166/0x520 [ 1181.843075][T10734] ? trace_irq_disable+0x3b/0x140 [ 1181.843094][T10734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.843113][T10734] ? clear_bhb_loop+0x70/0xc0 [ 1181.843135][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.843153][T10734] RIP: 0033:0x7f918399e1d9 [ 1181.843171][T10734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.843185][T10734] RSP: 002b:00007f918485c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1181.843204][T10734] RAX: ffffffffffffffda RBX: 00007f9183c25fa0 RCX: 00007f918399e1d9 [ 1181.843217][T10734] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 1181.843228][T10734] RBP: 00007f918485c090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.843240][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.843250][T10734] R13: 00007f9183c26038 R14: 00007f9183c25fa0 R15: 00007ffff13d8fb8 [ 1181.843280][T10734] [ 1181.858891][T10734] Mem-Info: [ 1181.858906][T10734] active_anon:5602 inactive_anon:6 isolated_anon:0 [ 1181.858906][T10734] active_file:34 inactive_file:43748 isolated_file:0 [ 1181.858906][T10734] unevictable:0 dirty:212 writeback:0 [ 1181.858906][T10734] slab_reclaimable:13091 slab_unreclaimable:129264 [ 1181.858906][T10734] mapped:29643 shmem:583 pagetables:5691 [ 1181.858906][T10734] sec_pagetables:0 bounce:0 [ 1181.858906][T10734] kernel_misc_reclaimable:0 [ 1181.858906][T10734] free:1217388 free_pcp:15372 free_cma:0 [ 1181.859441][T10734] Node 0 active_anon:22408kB inactive_anon:24kB active_file:136kB inactive_file:174784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118572kB dirty:848kB writeback:0kB shmem:2332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15984kB pagetables:15140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1181.865801][T10734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:7624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1181.865853][T10734] Node 0 DMA free:11260kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1181.865903][T10734] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1181.865935][T10734] Node 0 DMA32 free:976812kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22408kB inactive_anon:24kB active_file:136kB inactive_file:174784kB unevictable:0kB writepending:848kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:35924kB local_pcp:19876kB free_cma:0kB [ 1181.865987][T10734] lowmem_reserve[]: 0 0 0 0 0 [ 1181.866016][T10734] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1181.866063][T10734] lowmem_reserve[]: 0 0 0 0 0 [ 1181.866093][T10734] Node 1 Normal free:3881480kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:25656kB local_pcp:10952kB free_cma:0kB [ 1181.866143][T10734] lowmem_reserve[]: 0 0 0 0 0 [ 1181.866170][T10734] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 11260kB [ 1181.866354][T10734] Node 0 DMA32: 1861*4kB (UME) 1538*8kB (UME) 1110*16kB (UME) 966*32kB (UM) 830*64kB (UME) 831*128kB (UME) 853*256kB (UM) 468*512kB (UME) 182*1024kB (UME) 47*2048kB (UME) 2*4096kB (U) = 976708kB [ 1181.866479][T10734] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1181.866561][T10734] Node 1 Normal: 92*4kB (UM) 63*8kB (UM) 44*16kB (UME) 47*32kB (UM) 54*64kB (UME) 33*128kB (U) 28*256kB (U) 18*512kB (U) 10*1024kB (UE) 3*2048kB (UE) 937*4096kB (UM) = 3881480kB [ 1181.866687][T10734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1181.866702][T10734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1181.866715][T10734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1181.866728][T10734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1181.866750][T10734] 44361 total pagecache pages [ 1181.866756][T10734] 0 pages in swap cache [ 1181.866761][T10734] Free swap = 124996kB [ 1181.866768][T10734] Total swap = 124996kB [ 1181.866775][T10734] 2097051 pages RAM [ 1181.866782][T10734] 0 pages HighMem/MovableOnly [ 1181.866788][T10734] 433508 pages reserved [ 1181.866794][T10734] 0 pages cma reserved [ 1182.810171][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8856'. [ 1183.334712][T10770] netlink: 'syz.3.8859': attribute type 1 has an invalid length. [ 1183.514106][T10759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8855'. [ 1188.586957][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1189.798664][T10770] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1189.909422][T10784] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8862'. [ 1189.909980][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8862'. [ 1189.911079][T10784] netlink: 'syz.4.8862': attribute type 1 has an invalid length. [ 1189.911095][T10784] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8862'. [ 1190.367852][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8867'. [ 1190.372194][T10806] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 1191.189652][T10833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8875'. [ 1191.266115][T10834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8873'. [ 1191.929682][T10830] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1192.392349][T10856] openvswitch: netlink: IP tunnel dst address not specified [ 1192.444736][T10854] tipc: Enabling of bearer rejected, media not registered [ 1192.554077][ T30] audit: type=1804 audit(1791672928.589:28): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8883" name="/newroot/553/cgroup.controllers" dev="tmpfs" ino=2853 res=1 errno=0 [ 1192.554458][ T30] audit: type=1800 audit(1791672928.589:29): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8883" name="cgroup.controllers" dev="tmpfs" ino=2853 res=0 errno=0 [ 1192.633786][T10868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.694429][T10877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.905771][T10887] x_tables: duplicate underflow at hook 2 [ 1193.229914][T10884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.231896][T10884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.320669][T10884] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1193.372726][ T1224] s`z1: Port: 1 Link ACTIVE [ 1193.461882][ T1228] syz0: Port: 1 Link ACTIVE [ 1193.951120][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8897'. [ 1194.014194][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8899'. [ 1194.045202][T10946] veth0_to_team (unregistering): left promiscuous mode [ 1194.078011][T10946] team_slave_0 (unregistering): left promiscuous mode [ 1194.096999][T10946] team0: Port device team_slave_0 removed [ 1194.132234][T10951] veth0_to_bond: entered allmulticast mode [ 1194.144447][T10952] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1194.231049][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8898'. [ 1194.247972][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8898'. [ 1194.288362][T10946] xt_CT: No such helper "netbios-ns" [ 1194.684523][T10971] netlink: 'syz.2.8903': attribute type 12 has an invalid length. [ 1196.748901][T10925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1197.258611][T10989] rdma_rxe: rxe_newlink: failed to add lo [ 1197.280353][T10981] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8906'. [ 1197.280874][T10983] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8906'. [ 1197.280950][T10986] ip6t_srh: unknown srh match flags 4000 [ 1197.405286][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8906'. [ 1197.405501][T10983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8906'. [ 1197.433248][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8908'. [ 1198.755796][T11049] vlan0: entered promiscuous mode [ 1198.755819][T11049] bridge0: entered promiscuous mode [ 1198.784197][T11050] netlink: 388 bytes leftover after parsing attributes in process `syz.0.8921'. [ 1199.001629][T11067] netlink: 'syz.2.8924': attribute type 15 has an invalid length. [ 1199.094979][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8924'. [ 1199.095013][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8924'. [ 1199.134506][T11064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1199.630910][T11073] netlink: 34 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1200.513504][T11116] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 1200.557393][T11118] netlink: 'syz.2.8937': attribute type 1 has an invalid length. [ 1200.873144][T11118] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8937'. [ 1201.599871][T11166] ip_tables: iptables: counters copy to user failed while replacing table [ 1202.254248][T11173] netlink: 'syz.4.8948': attribute type 16 has an invalid length. [ 1202.526306][T11199] __nla_validate_parse: 5 callbacks suppressed [ 1202.526326][T11199] netlink: 964 bytes leftover after parsing attributes in process `syz.2.8951'. [ 1202.530679][T11186] netlink: 964 bytes leftover after parsing attributes in process `syz.2.8951'. [ 1202.776745][T11206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1202.929483][T11213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8954'. [ 1203.009479][T11218] netlink: 'syz.4.8956': attribute type 16 has an invalid length. [ 1203.009500][T11218] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8956'. [ 1203.176747][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8956'. [ 1203.332434][T11226] syzkaller0: entered promiscuous mode [ 1203.629936][T11242] netlink: 'syz.0.8961': attribute type 1 has an invalid length. [ 1204.119326][T11248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8964'. [ 1204.652511][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8970'. [ 1204.652544][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8970'. [ 1204.697834][T11265] netlink: 'syz.3.8969': attribute type 1 has an invalid length. [ 1204.762270][T11265] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1204.781812][T11265] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1204.808803][T11270] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 1204.972153][T11272] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1205.212445][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8974'. [ 1205.212599][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8974'. [ 1205.680501][T11303] netlink: 'syz.0.8983': attribute type 10 has an invalid length. [ 1205.721121][T11303] geneve5: entered promiscuous mode [ 1205.722264][T11303] geneve5: entered allmulticast mode [ 1205.817293][T11308] netlink: 'syz.1.8985': attribute type 18 has an invalid length. [ 1205.854240][ T13] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1205.855180][T17955] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1205.855217][T17955] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1205.855249][T17955] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 1207.643337][T11417] netlink: 'syz.1.8992': attribute type 1 has an invalid length. [ 1208.023101][T11460] bridge0: port 3(syz_tun) entered disabled state [ 1208.090656][T11460] syz_tun: left allmulticast mode [ 1208.090980][T11460] syz_tun: left promiscuous mode [ 1208.104963][T11460] bridge0: port 3(syz_tun) entered disabled state [ 1208.793888][T11480] bond13: option mode: unable to set because the bond device has slaves [ 1208.799317][T11480] __nla_validate_parse: 48 callbacks suppressed [ 1208.799335][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8998'. [ 1208.799348][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8998'. [ 1209.009775][T11480] netlink: 'syz.1.8998': attribute type 2 has an invalid length. [ 1209.009797][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8998'. [ 1209.576239][T11500] bond16: entered promiscuous mode [ 1209.580689][T11500] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1209.586002][T11502] erspan0: entered allmulticast mode [ 1209.792705][T11512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9006'. [ 1209.806159][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9006'. [ 1210.007495][T11517] netlink: 'syz.3.9009': attribute type 4 has an invalid length. [ 1210.045440][T11517] netlink: 'syz.3.9009': attribute type 4 has an invalid length. [ 1210.129066][T11518] syzkaller0: entered promiscuous mode [ 1210.129092][T11518] syzkaller0: entered allmulticast mode [ 1210.144932][T11522] Bluetooth: hci0: unsupported parameter 5134 [ 1210.144955][T11522] Bluetooth: hci0: unsupported parameter 8192 [ 1210.144967][T11522] Bluetooth: hci0: unsupported parameter 5134 [ 1210.144979][T11522] Bluetooth: hci0: unsupported parameter 8192 [ 1210.290669][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9012'. [ 1210.290696][T11525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9012'. [ 1210.290710][T11525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9012'. [ 1210.297855][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9012'. [ 1210.748179][T11542] bridge0: left allmulticast mode [ 1210.886854][T11542] bond18: entered promiscuous mode [ 1210.886954][T11542] bond18: entered allmulticast mode [ 1210.888701][T11542] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1210.970221][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9020'. [ 1211.388638][T11570] syzkaller0: entered promiscuous mode [ 1211.388660][T11570] syzkaller0: entered allmulticast mode [ 1211.740613][T11577] tap0: tun_chr_ioctl cmd 1074025673 [ 1211.744444][T11582] tap0: tun_chr_ioctl cmd 1074025676 [ 1211.744465][T11582] tap0: owner set to 0 [ 1212.827412][T10587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1212.861679][T10587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1212.871691][T10587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1212.892561][T10587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1212.925743][T10587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1213.053954][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1213.056682][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1213.060314][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1213.072961][T11630] bridge0: entered promiscuous mode [ 1213.073018][T11630] bridge0: entered allmulticast mode [ 1213.099348][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1213.101995][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1213.746681][T31568] bond14: (slave syz_tun): Removing an active aggregator [ 1213.747131][T31568] bond14: (slave syz_tun): Releasing backup interface [ 1214.431538][T11658] __nla_validate_parse: 3 callbacks suppressed [ 1214.431561][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9043'. [ 1214.752259][T11664] dvmrp8: entered allmulticast mode [ 1214.876975][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9048'. [ 1214.899969][T11673] vlan4: entered promiscuous mode [ 1214.899992][T11673] veth1: entered promiscuous mode [ 1215.228855][ T4934] Bluetooth: hci4: command tx timeout [ 1215.579742][T11683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9051'. [ 1216.050469][T11686] veth10: entered allmulticast mode [ 1217.304478][ T4934] Bluetooth: hci4: command tx timeout [ 1217.605342][T11707] netlink: 'syz.2.9055': attribute type 10 has an invalid length. [ 1217.605364][T11707] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9055'. [ 1218.268199][T11707] team0: Device wg2 is of different type [ 1219.181414][T11756] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9064'. [ 1219.233715][T11758] netlink: 'syz.3.9065': attribute type 1 has an invalid length. [ 1219.308429][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9065'. [ 1219.308466][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9065'. [ 1219.322046][T11758] bond13: entered promiscuous mode [ 1219.322585][T11758] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1219.422792][ T4934] Bluetooth: hci4: command tx timeout [ 1219.485708][T11758] bond13: (slave bridge7): making interface the new active one [ 1219.485735][T11758] bridge7: entered promiscuous mode [ 1219.487667][T11758] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 1219.787194][T11622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.787306][T11622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.787463][T11622] bridge_slave_0: entered allmulticast mode [ 1219.825861][T11622] bridge_slave_0: entered promiscuous mode [ 1219.893873][T11622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.894057][T11622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.894484][T11622] bridge_slave_1: entered allmulticast mode [ 1219.954411][T11622] bridge_slave_1: entered promiscuous mode [ 1220.109134][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9070'. [ 1220.415260][T11622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.472421][T11622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.686037][T11622] team0: Port device team_slave_0 added [ 1220.695670][T11622] team0: Port device team_slave_1 added [ 1220.882036][T11622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.882055][T11622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.882074][T11622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.922685][T11622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.922702][T11622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.927130][T11622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.290701][T11622] hsr_slave_0: entered promiscuous mode [ 1221.301188][T11622] hsr_slave_1: entered promiscuous mode [ 1221.301978][T11622] debugfs: 'hsr0' already exists in 'hsr' [ 1221.301995][T11622] Cannot create hsr debugfs directory [ 1221.464726][ T4934] Bluetooth: hci4: command tx timeout [ 1221.488316][T11820] netlink: 'syz.0.9076': attribute type 8 has an invalid length. [ 1221.926108][T11838] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9080'. [ 1222.120920][T11844] netlink: 'syz.0.9081': attribute type 1 has an invalid length. [ 1222.651907][T11622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.651942][T11622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1222.651966][T11622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.075039][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9086'. [ 1223.126769][T11622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.135279][T11622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1223.135311][T11622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.390083][T11622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.390119][T11622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1223.390144][T11622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.828914][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9090'. [ 1224.003903][T11622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1224.003938][T11622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1224.003962][T11622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.122075][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9091'. [ 1224.176513][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9091'. [ 1224.933538][T11919] syzkaller1: entered promiscuous mode [ 1224.933717][T11919] syzkaller1: entered allmulticast mode [ 1225.238226][T11622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1225.251148][T11622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1225.252227][T11622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1225.280792][T11622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1225.301090][T11622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1225.335669][T11622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1225.338841][T11622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1225.364390][T11622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.686877][T11960] ip_tables: iptables: counters copy to user failed while replacing table [ 1225.830565][T11964] netlink: 'syz.3.9103': attribute type 16 has an invalid length. [ 1225.830585][T11964] netlink: 'syz.3.9103': attribute type 17 has an invalid length. [ 1225.936411][T11962] tipc: Resetting bearer [ 1225.936629][T11962] tipc: Resetting bearer [ 1226.026712][T11968] netlink: 'syz.0.9105': attribute type 1 has an invalid length. [ 1226.238286][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.259906][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.271444][T11977] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1226.272636][T11977] xt_hashlimit: size too large, truncated to 1048576 [ 1226.341951][T11964] bridge_slave_1: left allmulticast mode [ 1226.366810][T11964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1226.366836][T11964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1226.372618][T11964] veth1_vlan: left promiscuous mode [ 1226.401556][T11964] veth0_vlan: left promiscuous mode [ 1226.409005][T11964] veth0_vlan: entered promiscuous mode [ 1226.420930][T11964] veth1_vlan: entered promiscuous mode [ 1226.434536][T11964] veth1_macvtap: left promiscuous mode [ 1226.435688][T11964] veth0_macvtap: left promiscuous mode [ 1226.436835][T11964] veth0_macvtap: entered promiscuous mode [ 1226.437986][T11964] veth1_macvtap: entered promiscuous mode [ 1226.439431][T11964] geneve0: left promiscuous mode [ 1226.476583][T11964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.477663][T11964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.478704][T11964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.480348][T11964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1226.482166][T11964] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1226.669711][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9108'. [ 1226.800642][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9111'. [ 1226.863771][T14415] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1226.863834][T14415] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1226.863866][T14415] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1226.863897][T14415] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1226.962338][T11622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.047021][T11622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.137825][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.137922][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.209153][T14415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.209250][T14415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.309732][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.309751][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.391576][T11995] openvswitch: netlink: Flow actions attr not present in new flow. [ 1227.405713][T11998] tipc: Resetting bearer [ 1227.419284][ C1] ------------[ cut here ]------------ [ 1227.419301][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1227.419327][ C1] WARNING: net/mac80211/rate.c:411 at __rate_control_send_low+0x652/0x900, CPU#1: kworker/u8:18/14415 [ 1227.459042][ C1] Modules linked in: [ 1227.464944][ C1] CPU: 1 UID: 0 PID: 14415 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1227.474756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1227.484876][ C1] Workqueue: bat_events batadv_tt_purge SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1227.490644][ C1] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 1227.496959][ C1] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1227.516733][ C1] RSP: 0018:ffffc90000a18918 EFLAGS: 00010246 [ 1227.522867][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1227.531119][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918bb5c0 [ 1227.539265][ C1] RBP: ffff88802c5f32c0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.547300][ C1] R10: 0000000000000004 R11: 8000000000000100 R12: ffff88802c5f0fa0 [ 1227.555794][ C1] R13: ffff8880568e7168 R14: ffffffff918bb5c0 R15: dffffc0000000000 [ 1227.564363][ C1] FS: 0000000000000000(0000) GS:ffff888123bd0000(0000) knlGS:0000000000000000 [ 1227.573372][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1227.580083][ C1] CR2: 0000200000000134 CR3: 0000000041f40000 CR4: 00000000003526f0 [ 1227.588713][ C1] Call Trace: [ 1227.592010][ C1] [ 1227.594946][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1227.600362][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1227.605799][ C1] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1227.611756][ C1] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1227.617991][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1227.624773][ C1] ? __ieee80211_beacon_get+0xdcc/0x1920 [ 1227.630615][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1227.636257][ C1] __ieee80211_beacon_get+0xe2b/0x1920 [ 1227.641769][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1227.647338][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1227.653459][ C1] ? __lock_acquire+0x747/0x2de0 [ 1227.658472][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1227.664500][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1227.669910][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1227.676169][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1227.683750][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1227.689848][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1227.696972][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1227.702926][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1227.708178][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1227.714186][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1227.719739][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 1227.725139][ C1] handle_softirqs+0x226/0x860 [ 1227.730062][ C1] ? do_softirq+0x77/0xd0 [ 1227.734678][ C1] ? batadv_tt_local_purge+0x277/0x300 [ 1227.740257][ C1] do_softirq+0x77/0xd0 [ 1227.744519][ C1] [ 1227.748175][ C1] [ 1227.752524][ C1] __local_bh_enable_ip+0x100/0x140 [ 1227.758255][ C1] batadv_tt_local_purge+0x277/0x300 [ 1227.763631][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1227.769388][ C1] batadv_tt_purge+0x35/0xa40 [ 1227.774157][ C1] ? rcu_is_watching+0x16/0xb0 [ 1227.778990][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1227.784811][ C1] process_scheduled_works+0xc3d/0x1630 [ 1227.790418][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1227.797046][ C1] ? assign_work+0x3cf/0x5d0 [ 1227.801778][ C1] worker_thread+0xa47/0xfb0 [ 1227.806662][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1227.811744][ C1] kthread+0x38b/0x480 [ 1227.815884][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1227.821114][ C1] ? __pfx_kthread+0x10/0x10 [ 1227.825783][ C1] ret_from_fork+0x514/0xb70 [ 1227.830462][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1227.835746][ C1] ? __switch_to+0xc89/0x1420 [ 1227.840813][ C1] ? __pfx_kthread+0x10/0x10 [ 1227.845668][ C1] ret_from_fork_asm+0x1a/0x30 [ 1227.850523][ C1] [ 1227.853619][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1227.861434][ C1] CPU: 1 UID: 0 PID: 14415 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1227.871157][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1227.881235][ C1] Workqueue: bat_events batadv_tt_purge [ 1227.886813][ C1] Call Trace: [ 1227.890284][ C1] [ 1227.893144][ C1] vpanic+0x56d/0xa60 [ 1227.897187][ C1] ? __pfx__printk+0x10/0x10 [ 1227.901788][ C1] ? __pfx_vpanic+0x10/0x10 [ 1227.906320][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1227.911676][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1227.916924][ C1] panic+0xc5/0xd0 [ 1227.920704][ C1] ? __pfx_panic+0x10/0x10 [ 1227.925155][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1227.930106][ C1] __warn+0x315/0x4c0 [ 1227.934086][ C1] ? __rate_control_send_low+0x652/0x900 [ 1227.939716][ C1] ? __rate_control_send_low+0x652/0x900 [ 1227.945601][ C1] __report_bug+0x276/0x570 [ 1227.950314][ C1] ? __rate_control_send_low+0x652/0x900 [ 1227.956202][ C1] ? __pfx___report_bug+0x10/0x10 [ 1227.961228][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1227.967365][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1227.973612][ C1] report_bug_entry+0x19b/0x290 [ 1227.978462][ C1] ? __rate_control_send_low+0x67c/0x900 [ 1227.984264][ C1] ? __rate_control_send_low+0x681/0x900 [ 1227.989890][ C1] handle_bug+0xce/0x200 [ 1227.994244][ C1] exc_invalid_op+0x1a/0x50 [ 1227.998751][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1228.003614][ C1] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 1228.009851][ C1] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1228.029582][ C1] RSP: 0018:ffffc90000a18918 EFLAGS: 00010246 [ 1228.035829][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1228.043791][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918bb5c0 [ 1228.051769][ C1] RBP: ffff88802c5f32c0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.059734][ C1] R10: 0000000000000004 R11: 8000000000000100 R12: ffff88802c5f0fa0 [ 1228.067707][ C1] R13: ffff8880568e7168 R14: ffffffff918bb5c0 R15: dffffc0000000000 [ 1228.075718][ C1] ? __rate_control_send_low+0x646/0x900 [ 1228.081390][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1228.086688][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1228.091989][ C1] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1228.097795][ C1] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1228.103864][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1228.110199][ C1] ? __ieee80211_beacon_get+0xdcc/0x1920 [ 1228.115859][ C1] ? __ieee80211_beacon_get+0x36/0x1920 [ 1228.121438][ C1] __ieee80211_beacon_get+0xe2b/0x1920 [ 1228.126937][ C1] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1228.132414][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1228.138479][ C1] ? __lock_acquire+0x747/0x2de0 [ 1228.143432][ C1] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1228.149022][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1228.154248][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1228.160322][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1228.167528][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1228.173646][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1228.180681][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1228.186494][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 1228.191705][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1228.197515][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1228.202730][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 1228.207851][ C1] handle_softirqs+0x226/0x860 [ 1228.212619][ C1] ? do_softirq+0x77/0xd0 [ 1228.216961][ C1] ? batadv_tt_local_purge+0x277/0x300 [ 1228.222428][ C1] do_softirq+0x77/0xd0 [ 1228.226591][ C1] [ 1228.229512][ C1] [ 1228.232434][ C1] __local_bh_enable_ip+0x100/0x140 [ 1228.237636][ C1] batadv_tt_local_purge+0x277/0x300 [ 1228.242933][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1228.248709][ C1] batadv_tt_purge+0x35/0xa40 [ 1228.253586][ C1] ? rcu_is_watching+0x16/0xb0 [ 1228.258367][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1228.264266][ C1] process_scheduled_works+0xc3d/0x1630 [ 1228.269868][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1228.275851][ C1] ? assign_work+0x3cf/0x5d0 [ 1228.280533][ C1] worker_thread+0xa47/0xfb0 [ 1228.285406][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1228.290466][ C1] kthread+0x38b/0x480 [ 1228.294547][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1228.300274][ C1] ? __pfx_kthread+0x10/0x10 [ 1228.304883][ C1] ret_from_fork+0x514/0xb70 [ 1228.309590][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1228.314723][ C1] ? __switch_to+0xc89/0x1420 [ 1228.319598][ C1] ? __pfx_kthread+0x10/0x10 [ 1228.324349][ C1] ret_from_fork_asm+0x1a/0x30 [ 1228.329182][ C1] [ 1228.332372][ C1] Kernel Offset: disabled [ 1228.336703][ C1] Rebooting in 86400 seconds..