last executing test programs: 3.509438144s ago: executing program 3 (id=6871): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4000000000000007910080000000000630a04ff000000009500000000000000545add3f9f4e0e73d6a0871f1789a8eb2ecfe60affa0fd043cd8957e20ba4513e8777a342aee85ab2bf542b293394b6559187d6ac446503e063515bef4d173f114d043c478232b6d95a73cd67fb780739c03a2780905b50ac355e0fc7f192bcc05d26b99c3ffa59ef4d34c6204e0f41aabfed488c7b5126e2b1cc0d889ccc20961bb2b41ca60710871366b518f72e72758177ed4a21d64b56877356fb02109bfc663f378462f49b84d1f4b571164"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000027f00000101000000020000000000000028"], 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x200040cc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r5, 0x20, 0x0, 0x8, 0x3, {{0x19, 0x4, 0x2, 0x8, 0x64, 0x68, 0x0, 0x17, 0x29, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x4f, 0x3, [{0x6, 0x8, "d458d2af2827"}, {0x1, 0x12, "60372ec04f51d8af1850b0e650d4b5b0"}, {0x1, 0x5, "30c7cb"}, {0x2, 0x2}, {0x0, 0xe, "79de8aaaac1fa7af2b16c67f"}, {0x1, 0x2}, {0x7, 0xf, "7f256506fda392156cb760de81"}, {0x5, 0x9, "2f405e0fe249b1"}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) 3.19520883s ago: executing program 3 (id=6874): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) tee(r1, r0, 0xa000000000000000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x10000000}, @alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.035261733s ago: executing program 3 (id=6876): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000000700000000200000"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x101, @dev={0xfe, 0x80, '\x00', 0x1c}}}, 0x7, 0x7}, &(0x7f00000001c0)=0x90) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4f67a6733fac6c5c}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 2.576974864s ago: executing program 3 (id=6882): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0x270, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x54, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20aa14261c0233d2619118b287b194920473017087889d5685590e926dba4953"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e25, @multicast2}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x11c8, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x119c, 0x2, [@TCA_U32_POLICE={0x4e0, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd0}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x10, 0x6, 0x8, 0x7, 0x8, 0x7ff, 0x8, 0x166, 0x3, 0x0, 0xe, 0x9df, 0x5, 0x0, 0x27, 0x9aa, 0x6, 0x7, 0x9, 0x9, 0xbb6, 0x0, 0x9, 0x80, 0x7fff, 0xfff, 0x7, 0x4569, 0xb, 0x3, 0x5, 0x80000001, 0xf7, 0x100, 0x10, 0xa20, 0x6, 0x2, 0x3ff, 0x1, 0x6, 0x9, 0x10000, 0x7, 0x9, 0x4, 0x80000, 0x6, 0x1, 0x1, 0x6, 0x6, 0x3, 0x9, 0x6567, 0x101, 0x0, 0x7, 0x3, 0x1000, 0x40, 0x5, 0x80000000, 0xfe8, 0x6, 0x80000001, 0x200, 0x4, 0xd030, 0x721, 0xae, 0x3ff, 0x8, 0x293aa4c0, 0x35, 0x9, 0x3, 0x9, 0x3, 0x6, 0xdd78, 0x5, 0xc0, 0x5, 0x3, 0x95, 0x6, 0x3, 0xda2a, 0x1, 0x0, 0xfffffff9, 0x2, 0xfe, 0x8000, 0x0, 0x0, 0x9, 0x3ff, 0x9, 0x7f, 0x1, 0x57c1, 0x78db, 0x5, 0x2, 0xf7d, 0x200, 0x3, 0x4, 0x2, 0x2, 0x3, 0x8001, 0x3, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x7, 0x10001, 0x2, 0x1, 0x7, 0x1, 0x8, 0x618, 0x8, 0x2, 0x5, 0x7fff, 0x40, 0x7, 0x0, 0x2, 0xae39, 0x4, 0x2, 0x7f, 0x1ff, 0x3, 0x101, 0xf55, 0x3, 0x9, 0x8, 0x3, 0x3ff, 0xb884, 0x1ff, 0x200, 0x0, 0xffff0001, 0x5733, 0x492955eb, 0x3d3b, 0x2, 0x80000000, 0x4, 0x7, 0x0, 0x915, 0x10, 0x2, 0x0, 0x10, 0x3, 0x0, 0x81, 0x4, 0x7, 0x3, 0x0, 0x100, 0x1ec, 0x6, 0x80, 0x1, 0xf, 0x4, 0xf, 0x1, 0x200, 0x800, 0x80000000, 0x800, 0x7b5341a2, 0x10, 0x8, 0x3, 0x0, 0xb65f, 0xffffffff, 0xe, 0x6, 0x8, 0x6, 0x7f, 0x8, 0x4, 0x7, 0x3050, 0x2, 0x0, 0x6, 0x8, 0xf, 0x2c8, 0x2, 0x6, 0xfffffffe, 0x5, 0x9, 0xd9d, 0x7, 0x400, 0x3, 0x3, 0x200, 0x2, 0x8000, 0x2fd5, 0x5, 0x3, 0x5, 0xc61, 0x8, 0x9, 0x5, 0xfffffff9, 0x3, 0xffff, 0x8a, 0x6, 0x2, 0x2, 0x3, 0x4000, 0x4fe, 0x5, 0x8001, 0x8, 0x81, 0x7, 0x0, 0x7, 0x6, 0xd, 0x5, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb5, 0x10000003, 0xb, 0x400, 0x7f, {0x4, 0x1, 0x5, 0xfffe, 0x903, 0x8}, {0xb3, 0x0, 0xe271, 0x8, 0x0, 0x2}, 0x2e, 0x3, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x6, 0x39e, 0x200, {0x1, 0x2, 0x0, 0x6, 0x1, 0x1}, {0x5, 0x1, 0x2, 0xc, 0x5, 0x2}, 0xf3000000, 0x5, 0x7f}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x3, 0x10000, 0x1a5e, {0x8, 0x2, 0x4, 0x6, 0x2, 0x4}, {0x5, 0x1, 0x4, 0x3, 0x9, 0x6}, 0x0, 0x0, 0x9}}, @TCA_POLICE_RATE64={0xc}]}, @TCA_U32_POLICE={0xc78, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x0, 0x3, 0x7d, {0xe, 0x0, 0x6, 0xce7, 0x4, 0x3}, {0x2, 0x1, 0x6, 0x3, 0x2, 0xff}, 0x5, 0x0, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3ff, 0x4, 0x100, 0x0, 0x2, 0x0, 0x1, 0x5, 0x2, 0x7, 0x30558000, 0xf467, 0x6, 0x10001, 0x7, 0x3c, 0x1, 0x4, 0x1, 0x2, 0x8, 0x80000001, 0x7fff, 0xf1e8183, 0x6, 0xa, 0x3, 0x3, 0x5, 0x0, 0x14000000, 0x37, 0x8, 0xb, 0x4, 0x2, 0x8, 0x7fffffff, 0x1, 0xf, 0x8, 0x101, 0x8, 0x1, 0x742, 0xb6, 0x5, 0x2, 0x8, 0x57, 0x2, 0x939, 0xb, 0x7ff, 0x9, 0x3, 0x9, 0x7, 0xc037, 0x8, 0x400, 0x2, 0xfffffff6, 0x6, 0xc, 0xc594, 0x80000000, 0x8, 0x8000, 0x3, 0x62, 0x4, 0xa750, 0x1, 0x80, 0xfffffc6d, 0xd, 0x9, 0x2, 0x4, 0x6f, 0xfffffff7, 0x8001, 0x7ff, 0x400, 0x6, 0xfffffffc, 0x566, 0x44e8, 0x17, 0x100, 0x6, 0x24, 0x27bd, 0x1000, 0x5, 0x40, 0x0, 0xaf, 0x3ff, 0x7, 0x133abf40, 0x1000, 0x3, 0x9, 0x5, 0x3, 0x800, 0x7, 0x2, 0x560, 0x15430934, 0xa35f, 0x8001, 0x6b, 0xad, 0x4, 0x4, 0x7, 0x10001, 0x4, 0x0, 0xffffc1f7, 0xe, 0x7, 0x7e, 0x1030, 0xfffffbff, 0x3, 0x1, 0x2, 0x5, 0x100, 0x40, 0x7, 0x3000000, 0xf3, 0x7fff, 0x6, 0x7ff, 0x648, 0x2e, 0x3, 0x7a1d, 0x1, 0x7f, 0x3, 0x4, 0x7fffffff, 0x4, 0x8, 0x6, 0x40, 0x8ff2, 0x1, 0x9, 0x68a, 0x5d5, 0x7, 0x81, 0x0, 0xa, 0xfff, 0x6d, 0x20, 0x8, 0x6, 0xb, 0x0, 0x4, 0x7fffffff, 0x4, 0x401, 0x4, 0x97, 0x5, 0x101, 0x0, 0x6, 0x3, 0x9, 0x8, 0x1ff, 0x3, 0xfffffffd, 0x5d7b, 0x10000, 0xffffffff, 0x2, 0x1, 0xa, 0x8, 0x3, 0x4b, 0x9, 0x80, 0xffffffff, 0x4, 0x9, 0x0, 0x0, 0x2, 0x401, 0x2, 0x2, 0x8, 0x2, 0x5994014d, 0xdaf, 0x4, 0xad, 0xf, 0x60, 0x1, 0x8, 0x80, 0x933, 0x81, 0x7, 0x4, 0xfffffffe, 0x2, 0x7, 0x2, 0xffffffff, 0x800, 0x6, 0x5, 0x8, 0x200, 0xfffffff9, 0x87a, 0xa0000, 0x7, 0x4, 0x7, 0x6039f1b0, 0xd, 0x1, 0x6, 0x0, 0x77f, 0xa08, 0x3ff, 0x200, 0x6, 0x2, 0x564680, 0x4, 0x1, 0x8, 0x0, 0x3, 0xb, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7f, 0xe, 0x9, 0x0, 0x5, 0x8, 0x5, 0x10000, 0x1, 0x9, 0x8, 0x9, 0x714, 0x0, 0x66768384, 0x80, 0x1, 0x4, 0x7, 0x3, 0x1000, 0x8a5c, 0x3, 0x3, 0x8, 0x80000001, 0xe4, 0x7, 0xa9, 0xbb3, 0x4, 0x4, 0x2, 0x8, 0x1, 0x8, 0x0, 0x93ec, 0x8, 0x8, 0x1, 0x66, 0x80000001, 0x1000, 0xffff, 0xd48c, 0x7ce, 0x7fffffff, 0xff, 0x7f, 0x58e6, 0x0, 0x1, 0xc93f, 0x8, 0xb970, 0xb31, 0x80000001, 0xd, 0x818075, 0xfffffff8, 0xced, 0x9, 0x6, 0x6, 0x400, 0x3, 0x7000000, 0x8, 0x4, 0xb12, 0x4, 0x400, 0x3, 0xc, 0x7, 0xf11, 0x8, 0x2, 0x5, 0x8bc6, 0x200, 0x9f, 0x400, 0xe, 0x1, 0x7, 0x2, 0x4, 0x7fff, 0x1, 0x6, 0x80, 0x2, 0x4, 0xffffffff, 0x9, 0x4, 0x7, 0x9, 0x40, 0xf, 0xe0f, 0x5, 0xfffffffe, 0x0, 0x8, 0x4a8, 0x6, 0x8, 0x9, 0x100, 0xd, 0x63cd, 0x7, 0x7e, 0x2, 0x10001, 0x3, 0x7fffffff, 0x7ff, 0x7, 0x9, 0xfffffff8, 0x10001, 0x7fffffff, 0x9, 0x4, 0x4, 0x0, 0x2, 0x4, 0x8000, 0x2, 0xbd, 0xffffff1c, 0x2, 0x6, 0x1, 0x2258e582, 0x2, 0x8, 0x3, 0x9, 0x0, 0x1000, 0xfffffb35, 0x9, 0x7738, 0x3, 0x101, 0x8, 0x8, 0x9, 0x53, 0x401, 0x9, 0x70, 0x2, 0x4, 0x8, 0x5, 0x1, 0x3, 0xa2, 0x0, 0x84, 0x6a6b7d26, 0x10, 0x6, 0x7, 0xd, 0x1c00, 0x5, 0x0, 0x9, 0x200, 0x200, 0x0, 0x7f, 0x8, 0x9e6, 0x7, 0x7, 0x8, 0x2, 0x7, 0x6, 0x3d, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x7, 0x2, 0x4, 0x2616ef4c, 0x7fffffff, 0x8, 0x3, 0x1ff, 0x9, 0x10001, 0xfff4, 0x3, 0x6, 0x400, 0xa0fe, 0x2, 0x2, 0xff, 0xb, 0x800, 0x4, 0xd, 0x40, 0x5, 0x0, 0x7, 0x4, 0x0, 0x3ff, 0x0, 0x2, 0x2, 0x1, 0x8, 0x8, 0x7, 0x6, 0xffff, 0x2, 0x1f, 0x400, 0x502, 0x8, 0x4, 0x2, 0x2a, 0x8, 0x6, 0x4, 0xe, 0x3, 0x7, 0x7ff, 0x6, 0x1fd, 0x0, 0x6, 0x4, 0xffff, 0x4, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x0, 0x56, 0x7, 0x400, 0x1, 0x0, 0x100, 0x101, 0x1, 0xfffffffd, 0x4, 0x7, 0x9be, 0x20e, 0xfffffffe, 0x49dd, 0x6, 0x0, 0x8, 0x4f10, 0x3, 0xfffffbff, 0x8, 0x0, 0x1, 0x5, 0x401, 0x7, 0x56, 0x3, 0x9, 0xf4, 0x2226, 0x7f, 0x6, 0x8, 0x3, 0x10000, 0x6, 0x7, 0x5, 0x5, 0x3, 0x100, 0x4, 0x9, 0x4, 0x4, 0x3, 0x996, 0x5, 0x0, 0x7, 0x7ff, 0x7fffffff, 0x9a9, 0x11, 0x7, 0x2, 0xd852, 0x4, 0x800, 0x3ff, 0xbe34a3a, 0x3, 0x400, 0xc, 0x80000000, 0x8001, 0x15, 0x100, 0x0, 0x3, 0x465, 0x255de084, 0x6, 0xfffffff7, 0xcd, 0x8, 0x9, 0x1, 0x2, 0x0, 0x100, 0x2, 0x1414194b, 0x9, 0x0, 0x7, 0x3, 0x6, 0x54bc, 0x6, 0x1, 0xca, 0x3, 0x5, 0x2, 0x5, 0xed6, 0x9, 0x96, 0xfa0, 0x7, 0x9, 0x8, 0xfffffffa, 0x6, 0x3e055a8d, 0x2c1f, 0x176e, 0x7, 0x3, 0x6, 0xa, 0x1, 0x120, 0x3, 0xfc6, 0x6, 0xff, 0x1000, 0x8, 0x8a4, 0x7, 0x7998, 0x3, 0x7, 0x40, 0x9b9, 0x5, 0x7, 0xffff, 0x7f, 0x9e9, 0x4, 0x1, 0x3ff, 0x6, 0x5, 0x7fff, 0x3, 0x80000000, 0x8, 0x7, 0x6d69, 0x5, 0x5, 0xfffffffc, 0x10000, 0x3, 0x5, 0x1, 0x2, 0x3, 0xff, 0x401, 0x4, 0x401, 0xff, 0x5, 0xaadd, 0x18, 0x7fffffff, 0x5, 0x9, 0x3, 0x2d9, 0x9, 0x40, 0x0, 0xffffffff, 0x6, 0xc6b8, 0x1, 0x2, 0x1, 0x4, 0xfffffff3, 0x9, 0xe, 0x7, 0x9, 0x8f87, 0x2, 0x9, 0x6, 0x1, 0x2, 0x567237fd, 0x6, 0x62, 0x6, 0x5, 0x5, 0x0, 0x80000001, 0x102a, 0x4, 0xfffffffc, 0x7, 0xf74298d, 0x5, 0x1, 0x9, 0x3, 0x2, 0x6, 0x101, 0xb, 0xffffffff, 0xfffffffe, 0x3, 0x8, 0x62, 0xc2ac, 0xb, 0x5, 0x8, 0x1, 0x88, 0x80, 0x3, 0x7, 0x4, 0x0, 0xd3, 0x6, 0x5, 0x80000001, 0x3e, 0x4, 0xfff, 0x1, 0x5, 0x1, 0x2, 0x7, 0x3ff, 0x5, 0x3, 0x7, 0x100, 0x9, 0xff, 0x69, 0x2, 0xff, 0x1, 0x3, 0x3, 0x3, 0xe3, 0xb]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_U32_MARK={0x10, 0xa, {0x608d, 0x2}}, @TCA_U32_INDEV={0x14, 0x8, 'ip_vti0\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'wlan0\x00'}, @TCA_U32_LINK={0x8}]}}]}, 0x11c8}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000009000000000000009e07000018120000", @ANYRES32=r12, @ANYBLOB="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"], &(0x7f0000000640)='GPL\x00', 0x2, 0x1b, &(0x7f0000000680)=""/27, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendto$packet(r3, &(0x7f00000006c0)="f579dd106ed5ac337b02cb777bef564463c800007f30a0866b96b9b50364cf795463955bc07c4a59a743f21c773972448c6e2c25a810d91425325dc15ac119ca64c2572daa2fd1da81ab2cca1f45e608ef7824e1f8f979c7f345835b624979db0384247967db652575724457539fff9ce992d4304b48074bda46fda2445e3d87ecc206dee11b43c62cfe12b8a27af9cb0775dffdc90dcc333fdcd26ac724bf6bc60b1daa04c35fa749442ff53a4328a72f7c11cb3733822bcab95caa861e9ff7181ed9f24760789a74e432373489d4dbd790708d83b7e9f79ce7", 0xda, 0x4000, &(0x7f00000007c0)={0x11, 0xf5, r10, 0x1, 0x0, 0x6, @random="f61b9705284f"}, 0x14) 2.515457294s ago: executing program 1 (id=6883): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)="5fa60dead7a39fb60fcc211c3efd5dcd724a45f5f8400f61dde6402ac93917c2d52337ed27d8d516330aafa60fadb0b5a46fb0c942977256fab3fa0f6e68057c89fda8e2256765b16975e5797537198cc5a174ebf7a4e5001defa7ec90d1a2788004dd4212d98dc3d7a664040e9bc828b6f8e73d4b") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000000000d4c00000000004c000100000d"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa, 0x32e}, 0x28) 2.437219525s ago: executing program 1 (id=6886): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000100)="060000000300010000", 0x9) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x1}, &(0x7f0000000080)=0x28) write(r0, &(0x7f0000000300)="060000000300000000", 0x9) 2.336765407s ago: executing program 1 (id=6888): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="18470000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x33, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x1, 0xb, 0x9}], 0x10, 0x3ff}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_newaddrlabel={0x70, 0x48, 0x4, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, r3, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xfffffdcf, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) 2.114166011s ago: executing program 3 (id=6890): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0x9) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0xa, 0xd2, &(0x7f0000000340)=""/210, 0x0, 0x8}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r4, 0x952de000) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x7}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000005500e50223bd5002feffffff07000000", @ANYRES32=r9, @ANYBLOB="6eb69b77b852b2c0b171", @ANYRES32=r9, @ANYBLOB="00000000ac1414bb00"/24], 0x38}, 0x1, 0x2000000, 0x0, 0x2400c0d4}, 0x20000114) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000021c0)={'tunl0\x00', &(0x7f00000020c0)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x0, 0x80000001, {{0x2c, 0x4, 0x1, 0x36, 0xb0, 0x68, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @empty, {[@timestamp_addr={0x44, 0x44, 0xd5, 0x1, 0x9, [{@empty, 0x6}, {@loopback, 0xfffffff9}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7}, {@rand_addr=0x64010100, 0x4}, {@remote, 0xfffffd17}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfffffffc}]}, @lsrr={0x83, 0x1f, 0xa5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @local, @private=0xa010102, @empty]}, @timestamp={0x44, 0x8, 0x7c, 0x0, 0x1, [0x1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x77, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @ssrr={0x89, 0x1f, 0xc9, [@loopback, @broadcast, @multicast2, @multicast1, @multicast1, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002280)={'ip6tnl0\x00', &(0x7f0000002200)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0xe, 0x4fa, 0x34, @private1, @mcast2, 0x80, 0x20, 0x2, 0xb}}) r12 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r12, &(0x7f00000000c0), 0x8) sendmmsg$inet(r5, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000008c0)}, {&(0x7f0000000900)="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", 0x1000}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x48}}, {{&(0x7f00000019c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001a00)="dd831255ea310431bdd8408e3da13059d59ed152b93384d249b11dea054b63c13b800114d6fc01fda931c321ed5dc9e19758089e894048af1852ea17bd8117bace7d5c7ea77518c95b3743de978d7d464c3260b966c859a6186d26a41b840c6a1f44cfd0200506af82749397edb47a0d8a8b149c940caab319b44e973604434fbc0c0bd94d8020655f3eb33eb9a5399552d910535e8cc0acfc00dead3a8bc098a5aa6b101cebbb7864aaf40ea55e46f688bce2caf29046c028005008331bf993e5b91c1605b40f04224d4ef69ad46b562b9ab50b1683a69fcf600987a15a48dc016bbe73", 0xe4}, {&(0x7f0000001b00)="44bb10977972c0b266e1ae45a5918685aa61169c5136e6bbc0c01c173211bcdff65bab677fa4ff8b0ff572d9e34974e96dcbe6709e6153e2ee3b24115df8a16704acb1ea21c7b7c5963f6e55881ddc817534e7217fc4fca7d2037d0a3a2a85fe05f19653", 0x64}], 0x2}}, {{&(0x7f0000001bc0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001c00)="1d32b3bb1dbd82647db5b26a968ef04c19fda4e507830aac8589c07cbbd3e57147d09a3c7376b742e14812d602eaa3df86c8e57c7f7c270812b9fec6ea635e42f6b334a43fc98d03411792a61489c6e6bcb84536a8ac4c36f52944d173f587f115b9c2955fb7fac8ae6b107299200ea9b20b312bc6057c2689", 0x79}, {&(0x7f0000001c80)="5aeed0fcbd518d41e1fd2c53b10e9a30daa1e94a9f3c55eb944bbdeccbfbc47b716f382d6ac04945d6ab15e91e62f4a4b6d87e4a34e97c52c2ffacab1e170424bec25e80b07ba8413469c244e266ca16f1def621a8d8a40b78d6b863dac45814bdcb05f9c9fe0f15732d6dc3432a95a82ae1312b63becc22b1acaa1921e34c441993c730e2b7850c1f9d07b8a3187d6926f4f59c1a4d8b885aee0f3b970188fb1cb479f5977cbfe0650898e1a986876aae7ff5", 0xb3}], 0x2, &(0x7f0000001d80)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x1e, 0x1, [{0x2, 0xb, "9e83b4f9dbfacf7e2a"}, {0x6, 0x9, "74fa80d7a082f3"}, {0x0, 0x4, "e16a"}]}, @timestamp={0x44, 0x8, 0x93, 0x0, 0xd, [0x22]}, @timestamp_prespec={0x44, 0x14, 0x8b, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x1000}, {@private=0xa010100}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x7b, 0x0, 0x0, [0x8000]}, @generic={0x94, 0x7, "1f7f8d3fc8"}, @lsrr={0x83, 0x7, 0x87, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x1c, 0x1e, 0x0, 0x4, [0x1, 0x2, 0x80, 0x5, 0xa76a, 0x4]}, @lsrr={0x83, 0x7, 0x69, [@broadcast]}]}}}], 0xa0}}, {{&(0x7f0000001e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001ec0)="0400a97d055439048747df0fae2ae9852402f6fd7994992c78d44540cb3ac3d8b636d7e82f2113cac73e0d9372d96960daf183a57135e05150223dd69b26a8a8f592a27118cf20f69e0bdc1b967da7e23651041c58e61eac5893", 0x5a}, {&(0x7f0000001f40)="158afc81247489d8bc3db4b193bd9859436789049f977de176144209764ae15db2d1083e26e861b8df3b604605d4d1dc49f1352315e605ba7b835d81ae3704c03b9cd9a2f261", 0x46}, {&(0x7f0000001fc0)="cf3e1267518e71418cec73fcd3d92598694e02c3e7d8affbe4413c63b8f7a4772846b83b2f9408b49d66cf26cc3514c300b2009f3fbc72862dbb7ed5e053d4269d82fc62789c99946159b8d72312c6497c89ac3f24879c59ab6d7ff12699929e2bb5f8c2acb30b8a064d959c0231792209b2fa1fc39fef14338167cd887d6728138fff47e5f77260b6d818", 0x8b}], 0x3, &(0x7f00000022c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010100, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @broadcast, @remote}}}], 0x40}}, {{&(0x7f0000002300)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000003540)=[{&(0x7f0000002340)="9891383c6c7d9324800266a49dcd7bb994b305092d2db50efd37151f51cc9699f361bfdadf4a0fe2f21b060b4119d100383d9bf339b6c4d13ce867fd952305cc53ddb55de6e65c8e9177a323240c28edfa3c7cc89c171fc67922a8afcc66d82a7e3364ee5dccf94e9a177acdacd63bf574c16c565e0e7ab8433bf182d8345e81aaa7b656704b1bb3f499e515326975c4cd2c21ad5056e162672e77b854be082cb05a5708965decfee7afc2d7f086", 0xae}, {&(0x7f0000002400)="655eb14f5137587974335105c1dbf79510983a67a654224954dd502a7bfd6bf4fa41d77a1f95be5ce195acdf7c67b73f6a61b90c1c99a4f2ecf1fb932ef8ae38b833f70e8d3f4accb3e85930e58dc1a3ccc59681279d5acf8c184ce0e955a55905c3f9b5119f264219a55e8d365800d5fa5dd37c777ac40a999043ff33cdd2a7534f969dd35cf1ff4aa0611ed4c9c179cd0b8b71585963a466d767953a464c23339761e8cc4076937d35343e97", 0xad}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="cc6fbdc8f4d041ed7f89b3ebd1f7c528527c96adbb05691da9e511b314cd9dfa8110f8919f800ebe14515924e4de25cf1f3f25f556257593b238d01e04b945eb61755eb595", 0x45}], 0x4, &(0x7f0000003580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xd0, 0x0, 0x5, [0x9]}, @lsrr={0x83, 0x2b, 0x7c, [@private=0xa010100, @initdev={0xac, 0x1e, 0x3, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @private=0xa010100, @empty, @multicast2, @rand_addr=0x64010100, @private=0xa010100]}, @generic={0x44, 0x9, "56f27ec12ee25c"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x62}}], 0x100}}, {{0x0, 0x0, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003840), 0x0, &(0x7f0000003700)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x68}}], 0x7, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x98, 0x168, 0x98, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'ipvlan1\x00', {}, {0xff}, 0x84, 0x3, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x3, 0x2, 0x1, 0x6, 0x2], 0x3, 0x6}, {0x3, [0x7, 0x0, 0x5, 0x1, 0x6, 0x7], 0x4, 0x2}}}}, {{@ip={@broadcast, @multicast1, 0xff, 0xff, 'dvmrp0\x00', 'xfrm0\x00', {}, {0xff}, 0x1, 0x0, 0x20}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffc00, 0xfffffffd], 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000300001007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$tipc(r2, &(0x7f0000000880)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x3}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000580)="69450b99a5f495d42cd8d6b0caafb352a2faa23409b346543ea45887046974f52d731e4a85adf781b9a990f2f900b1074c2689a4", 0x34}, {&(0x7f00000005c0)="cef6695d049995471effe5dc8604eca508280cada6d52fbac9c9e8bd8d3a9fb068b045c8c239256d5510309df626f70426183946ed6dd876fe5f35de935ea75dc00683ccfa9c686130e6e973ce", 0x4d}, {&(0x7f0000000640)="be1f271d7736bf5400b9e8ea7450f9c9df128dc7fffcabbb8672cdd93bccf0d78281f945b80da9977349f081f23fe102d53d42d87e45bb1ed6e2fe8d94f408b829525f7661a3b3bd71c3208395fa477b64bcb70b7f67d301e55fb742a1ba2cf919a371fb51cfb7862eb10aede3972751540c95f79000867dea34f74103f9b870ffc42770c68409f2950ea80120ea2e3b54b29565be16929a3565aebc6eb0ce3cd5e3d0a08a96a37b750f415adab37bb28ad83d78bd7ad07b9f7952f4507668b6", 0xc0}, {&(0x7f0000000700)="08adb1b1c159c37f44a8b0051dc8b43ae4b37882756c87eeb1eb1c0e08af0901e0231ab58f9382d39f18bca7d0c5acea2653b75ff5858963082113f97c77775ff1917a892a1e9ceff4c62d358d005624b3c80186b8fe624f739d5cdeea3ba5a8278f6ab065060a9080ad961c9b40bb5c6074204baef4a341ba357776bf385a", 0x7f}], 0x4, &(0x7f00000007c0)="295247ef608f4be21d078e15676affc20b912698e2b69aa0f929764ed6a0d430ec904d0591fbbf2265489046857cbe4c4e95e76605aa6c5e268fff62587002d7ca031bba32e5d88722c557f0fb092f35bfa7024b905ffb878149a617925d89cb03083c73cc47938e218229b7b9b0d97f46082892fcb270ead0e9d1174b4127fa8c7ad5284d0f032cd4eea356559a982c10e52b9ece18e99c46da", 0x9a}, 0x4004814) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c39203100400fcffffff8900000008000300", @ANYRES32=r13, @ANYBLOB="04071d80f39429478088ec5ae6242a7a6d7f6be0c8b82f58ef7e0ae3b4eb29139ec346f52677dc9674d990c7080384ad50512065e019d5810be2067deb6f54ac26c8d5245f3b39f16bdd1d348f5b56d61c064b2194548fef"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4050) 2.113455397s ago: executing program 4 (id=6891): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400548008000c8004000b800800020001000000980008801c000780080005000000000028000600000000000800050000000000240007800800050004000000080005000000000008000500000000000800050000000000040007801400078008"], 0xc8}}, 0x0) 2.10097122s ago: executing program 1 (id=6892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x37, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @multicast2, 0x0}, &(0x7f0000000200)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x8d, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x9, 0x401, 0x1a, @mcast2, @private1, 0x10, 0x7, 0x1, 0x10}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x8, 0x4, 0x7, {{0x1d, 0x4, 0x2, 0x2c, 0x74, 0x67, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010102, {[@end, @timestamp_addr={0x44, 0x24, 0x65, 0x1, 0xb, [{@multicast2, 0xf}, {@loopback, 0x4}, {@local, 0x98}, {@multicast1, 0x6}]}, @ssrr={0x89, 0x23, 0x4, [@multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @lsrr={0x83, 0x13, 0x31, [@remote, @private=0xa010101, @rand_addr=0x64010100, @multicast1]}, @generic={0x82, 0x3, "80"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x1ff, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x68, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@rr={0x7, 0x1f, 0xce, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @multicast1, @multicast2, @local]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000940)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000980)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000009c0)={@mcast2, 0x0}, &(0x7f0000000a00)=0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000d40)={r1, &(0x7f0000000280)='syztnl2\x00', 0x0, &(0x7f0000000c80)={@align=0x10000, {0x3, 0x5, 0x3, 0x5}}, 0x1, &(0x7f0000000cc0)={@_ha_fsid}, &(0x7f0000000d00)=0x8}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000a40)={@mcast1, 0x0}, &(0x7f0000000a80)=0x14) sendmsg$nl_route(r0, &(0x7f0000000c40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)=@RTM_DELMDB={0x118, 0x55, 0x200, 0x70bd29, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x3, 0x0, {@ip4=@rand_addr=0x64010102, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0x25}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @empty}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x0, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x4, {@ip4=@private=0xa010100}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x1, 0x3, {@in6_addr=@mcast2, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x2, 0x3, {@ip4=@multicast1}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20004884}, 0x8000) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001004900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r13) sendmsg$IEEE802154_LLSEC_ADD_DEV(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x44, r14, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r12, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 2.07181738s ago: executing program 2 (id=6893): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) 2.034845097s ago: executing program 4 (id=6894): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0", 0x2e}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x5, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x2, 0x4, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r6, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x800003) bind$bt_sco(r1, &(0x7f00000001c0), 0x37) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) unshare(0x4020600) socket$inet_smc(0x2b, 0x1, 0x0) 1.854728511s ago: executing program 2 (id=6896): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)="5fa60dead7a39fb60fcc211c3efd5dcd724a45f5f8400f61dde6402ac93917c2d52337ed27d8d516330aafa60fadb0b5a46fb0c942977256fab3fa0f6e68057c89fda8e2256765b16975e5797537198cc5a174ebf7a4e5001defa7ec90d1a2788004dd4212d98dc3d7a664040e9bc828b6f8e73d4b") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000000000d4c0000000000004c0100000d"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa, 0x32e}, 0x28) 1.839600376s ago: executing program 0 (id=6897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x24004000) 1.709259261s ago: executing program 1 (id=6898): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x40, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYRES64=r0]}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'veth0_to_hsr\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0xc, 0xd6, "11cb2abe416f13ea546954725a2d02600131693849d2e91f4402c70dfe7fe6833ce61b3296301dc3f83ae6532efb573ba118161305a159b3cc8fdd32e46f2bd47d2873f86631c62e228495a497c28ef35e790b6c6834aa114dfa21961cc574fc83d235dc07624f9589b8961af66cb851fb022ef409783e8063d7f415252adf0d39d2472dec30685461b38b22fb1763708ee3685190ac23bda664522a338ca6c98c9f48fca84c31c513cb74dd4783e63d3bd52620fa9e30f6e126938c9c00917d8d30525d47cfe8164706c3f628aa4fe37baa89b79fa2"}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfb}, 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x40440cc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="11980400419804001c001280da0c01007866726d000000000c0002800800020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000180), 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, [@sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e23, 0xb4e9, @private1={0xfc, 0x1, '\x00', 0x5}, 0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4044050) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x64, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x973aec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x615c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa416}]}]}]}, 0x64}}, 0x0) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB='\x00\b\x00'/12], 0x48}}, 0x400400c) 1.647477295s ago: executing program 2 (id=6899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000001010100000000000000000a000003080003400000100008000c400000200108001a400000ab47100005800900010070ff03000000000008001a40000000000c001880080002400000000e140019800800020000000000080002004808000024001080080002400000000908000140fffffd6608000340000000010800024000000f3b"], 0x88}, 0x1, 0x0, 0x0, 0x44911}, 0xc010) 1.569923833s ago: executing program 0 (id=6900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x29, 0x4, 0xfffffffb, 0x0, 0x0, 0x6, 0x2, 0xfe, 0xd, 0xfd, 0x0, 0x201, 0x9, 0x0, 0x0, 0x45, [0x240, 0x100089ff]}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="0b827a7630fb656d06e422deb960e0576d2a001a32ecab34502b9658e48c2d20072d9d", @ANYRES16=r6, @ANYBLOB="0001fdffffff0040000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x2404c880}, 0x0) 1.511269699s ago: executing program 2 (id=6901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket(0x2, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x14, 0x6, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) (async) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0xfffffffd}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0xd, &(0x7f0000001640)=ANY=[@ANYBLOB="180000006500000000000000070000006d0640000000000018110000ab283d99a0cf60427bda3f83417ce2d41fdf368f6ef01d01196605b4d0e18e8dbd13dd13e4f63b7fa68636b499b36500982567d10700ef79351f60386768da9f921ff9c30c92227af2ec44c6b407a92092119e1473b95b6404352a32ab84772ff13cc7528099dfbe92465ee40a", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfff0, 0x39, &(0x7f0000000200)=""/57, 0x41100, 0x8, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000011c0)={0x0, 0x7, 0x2, 0xe}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001200)=[0x1, 0xffffffffffffffff, r12, 0x1], 0x0, 0x10, 0xc6c6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r13, 0x0, 0x15, 0x34, &(0x7f00000013c0)="c883721c168e00a7b9d8af5b3187f05eef85d91ac9", &(0x7f0000001400)=""/52, 0x401, 0x0, 0x8a, 0xb2, &(0x7f0000001440)="2cbcea541e3e322d828707b3fbed49d1de211c269ec59d4d36fccf7c810c690edb267abaeda894a0888346393b49784999abdf0a1fe0383fbfbfe8fe1cc0dc4f4c8648d8c53e3770f37814cf02154a7c840d77005ec274f1328ae5056541121703ed8dd507aebcb28d8434311c8d11f059437420ebdaf043c13efe53ccece62f072548ee1f42bbb2469d", &(0x7f0000001500)="57045b25512d93ad784d037cfec5e671d983a6b4f66a99fc235eb4974a1a6f5f19070a5d1b6efc6d08bd9d6cf01b7a357d2cc3fdaf4574c4ddefc8f5c0863a11fb1aae0cfc0a4da50c59a7eff8b5c58d91ceb05976a255b375f0e192135ef74a65de7ca8c7666cfa14474774b26fd4eb55366d97331e29da7cdff82d2e2f09fcd205903cf40ac542b6072acc9e6ac81c7ad315a32ed391b45102f03d5b9ef9aa3264c192f2662634de083a2355eb1466005a", 0x1, 0x0, 0x4}, 0x50) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 1.306683037s ago: executing program 3 (id=6902): unshare(0x6a040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000200)={r1, &(0x7f0000000100)='802.15.4 MAC\x00', 0x200000, &(0x7f0000000140)={@_ha_fsid={[0x8]}, {0x6, 0x3, 0x0, 0x9}}, 0x8000, &(0x7f0000000180), &(0x7f00000001c0)}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={r3}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x3b07854f3dd44f2a, 0xdbc0, 0x1}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x83, 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) writev(r5, 0x0, 0x0) close(0x3) 1.235625455s ago: executing program 0 (id=6903): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="ff2c2c231587b8d10f4d46ed1b17e642826896fe4f684650bde95371c11548b64952927254f9709c5f4dd291642fe2a404ca1abaf569145a17109a93014f0c569aa69e3f18c1b009c21f3450c6081b8a5f7c9f5e78beb6b7f6e46b27067a46dbbcedbf31df0270c947267e07df2bb16e0bf5510a09fee13d1417ce9f07cc0b71c07939a1891ff504c0b140820fcc151496f6cf782e75fa030dcefd88d70f5449561e30aa0964c9247a58cd3f66616b93d8ad942ccadb02976742adb82ad92e593c64ebc90dba7b87333102817abae1b6489a831cb14b385d8e5dfe286ec918e2526a23602757c61e950c84ac06552a57b503a752ed730000006413a9acb4d10e2989e2fb3dda0a7ea84d0991b636d01176e64c8029f27cd7df537d05232ae099ad1c262d7432569a1bcf8281bd"], &(0x7f0000001f80)=""/214, 0xfffffffffffffd58, 0xd6, 0x4, 0x0, 0x10000, @value=r0}, 0x28) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000003f0007012bbd700000000000017c00000400fd8008006500", @ANYRES32=r1, @ANYBLOB="0c000280050024000000000008000500", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x4040) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x142, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x208c1}, 0x4840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r11 = accept4$alg(r10, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x48, 0xc}], 0x1, 0x800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000009ac0)=0x9, 0x4) recvmmsg(r2, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x8, 0x8, 0xe, @remote, @remote, 0x86b00442f61b14c7, 0x40, 0x8, 0x3}}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r2], 0x48}}, 0x2404c054) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x40000000000008f, 0x12300, 0x0) 939.688208ms ago: executing program 4 (id=6904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048018000c8004000b800800020001000000980008801c000780080005000000000028000600000000000800050000000000240007800800050004000000080005000000000008000500000000000800050000000000040007801400078008"], 0xc8}}, 0x0) 887.29836ms ago: executing program 1 (id=6905): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x4000814) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0xfea9, 0xa) 796.445643ms ago: executing program 0 (id=6906): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64) unshare(0x24020400) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x88022, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0xfffffffffffffe3a}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00001400"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 764.340069ms ago: executing program 2 (id=6907): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg(0xffffffffffffffff, 0x0, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) (fail_nth: 2) 601.878853ms ago: executing program 4 (id=6908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000006680)={r0, 0x0, 0x0, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) close(0x3) (async) close(0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d73060000006d0000080002"], 0x30}}, 0x4000) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x2}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r3, &(0x7f0000000300)=[{&(0x7f0000001240)='{', 0x1}], 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 576.039689ms ago: executing program 0 (id=6909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000340)="63ec33e9e586d4f0d1460a0d5cc3", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) unshare(0x22020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000004a0000030000000002000000020000800000000000000d10be4c60bb99fbf34f2a66204ec5283b3980f72333f91a64312d79676fc97e2838664a63fc8c1028d498e8de5b4d"], 0x0, 0x32, 0x0, 0x3}, 0x28) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @window={0x3, 0xee58, 0x8963}, @timestamp, @sack_perm], 0x8) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="e4", 0x1}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000f8000000bca300000000000024030000b0feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0bf8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x32, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7718}, 0x10}, 0x94) 234.350233ms ago: executing program 0 (id=6910): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000004000480080002000100088018000c8014000b80080009000000000008000a006000"/63], 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r9, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000600), &(0x7f0000000640)=0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f00000002c0)="6a05848e44b57035b8051a1d05cc6ca5dd7f2f57685e8f5a18e446fe07601a54e200a06aa402495206a603a515f8b35e631709baaaf48abc0382948b9bae7d4c0939e90695f589ba497e9258bcf0c23695bd4f543e5f7dec99c956d379ba8b58cc5925c988d70254b3456e6ebc5b9ec792c62f8d4a0bf02d3bfc6157a6305cf05dc5f4409b64b0daa7e55ad8ab3ba03d496276651818b310b07b743892a404c25004eceb3ce119d117ace6ecdd0b507b6a", &(0x7f00000003c0)=""/138, &(0x7f0000000480)="34e8f9a2a8564c1b58d638bd304155c12674575cca3b75f34f562d3ed9f15cad3a5ef255885720be5687cd8d72f0ac52793cea319972ae3afc766b", &(0x7f00000004c0)="db22baac04568bcb2337d57e", 0x6, r10}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r10}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r10, 0x0, 0xd88d02a0}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000380), 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000002004400000008000300", @ANYRES32=r11, @ANYBLOB="0a001800030303030303000040007000050001"], 0x7c}}, 0x44050) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000180)={{r1, &(0x7f0000000000)='nl80211\x00', 0x8100, &(0x7f0000000080)={@_ha_fsid={[0x4]}, {0x7, 0x1, 0x7, 0x488b}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}, {[0x8, 0x800, 0x38000000, 0x1000]}, 0xffff, 0x2c, &(0x7f00000005c0)=""/44}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f00000002c0)={r13, @local, @multicast2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000ffffffe04e000000000000005fa000000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb3, &(0x7f000000cf3d)=""/179, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, r0}, 0x94) 146.49095ms ago: executing program 4 (id=6911): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000040)={0x0, 0x8, 0x3, 0x2, 0x8d, 0x3, 0x4, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001700050001"], 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, 0x0, 0x0, 0x12}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f00000001c0), 0x0}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 137.531744ms ago: executing program 2 (id=6912): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x400, 0x0, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x609}]}, 0x28}}, 0x4044890) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a006da800000000000000001c1400ad"], 0x24}}, 0x0) r4 = socket(0x6, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000140)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, 0x687}, @in={0x2, 0x4f20, @private=0xa010100}, @in6={0xa, 0x4e21, 0xffff, @loopback, 0x6}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x3826, @local, 0xc}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x8}, 0x8) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x400, 0x0, 0x3}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x609}]}, 0x28}}, 0x4044890) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a006da800000000000000001c1400ad"], 0x24}}, 0x0) (async) socket(0x6, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000140)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, 0x687}, @in={0x2, 0x4f20, @private=0xa010100}, @in6={0xa, 0x4e21, 0xffff, @loopback, 0x6}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x3826, @local, 0xc}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x8}, 0x8) (async) 0s ago: executing program 4 (id=6913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="b2754c3e", @ANYRES16=r1, @ANYBLOB="170900000000ffdbdf250100000008001800ac1414aa060002000100000008000a0001000000050007000000000008000900fffffffe08001900e0000002"], 0x44}}, 0x4) listen(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0x8, 0x22, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000600)=""/34, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) epoll_create1(0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r3 = socket(0x2, 0x3, 0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7030000ffffff1f850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802021100000000000000000000000000640001000006020202020202010882848b960c12182400"/54], 0x36) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000180)=0x1f5, 0x22) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000000)=0x40, 0x49) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x15}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e21, 0x1, 0xcd, 0x4}}, 0x44) kernel console output (not intermixed with test programs): tdevsim3 netdevsim0: renamed from eth0 [ 771.080705][T31212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.097384][T31212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 771.117561][T31212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.118444][T31212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 771.145338][T31212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.155379][T31212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 771.184380][T31212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.604660][T31212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.605446][T31448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5951'. [ 771.759847][T31212] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.778683][T31458] netlink: 'syz.0.5952': attribute type 1 has an invalid length. [ 771.947799][T31466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5954'. [ 771.947872][T31466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5954'. [ 772.030341][T31458] 8021q: adding VLAN 0 to HW filter on device bond23 [ 772.062055][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.062164][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.089324][T31461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5953'. [ 772.206086][T31464] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5953'. [ 772.252548][T28014] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.252658][T28014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.395053][T31474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5955'. [ 772.928199][T31488] tipc: Enabled bearer , priority 20 [ 773.024367][ T52] Bluetooth: hci4: command tx timeout [ 774.175260][T31530] netlink: 'syz.0.5967': attribute type 1 has an invalid length. [ 774.259023][T31530] 8021q: adding VLAN 0 to HW filter on device bond24 [ 774.561721][T31541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5969'. [ 774.593496][T31212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.783026][T31212] veth0_vlan: entered promiscuous mode [ 774.821008][T31212] veth1_vlan: entered promiscuous mode [ 774.999343][T31212] veth0_macvtap: entered promiscuous mode [ 775.022250][T31212] veth1_macvtap: entered promiscuous mode [ 775.064836][T31212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.128095][T31212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.253248][T28026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.253370][T28026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.253412][T28026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.265800][T28028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.414105][T28016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.414143][T28016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.496414][T28016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.496436][T28016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.590395][T31566] ip_tables: iptables: counters copy to user failed while replacing table [ 775.878267][T31577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5978'. [ 775.924317][T31571] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 775.934014][T31571] syzkaller0: entered promiscuous mode [ 775.934051][T31571] syzkaller0: entered allmulticast mode [ 776.017167][T31582] netlink: 'syz.3.5981': attribute type 23 has an invalid length. [ 776.434406][T31589] hsr0: entered promiscuous mode [ 776.549585][T31594] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5984'. [ 776.573517][T31596] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5984'. [ 776.588354][T31594] netlink: 'syz.1.5984': attribute type 16 has an invalid length. [ 776.588376][T31594] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5984'. [ 776.589087][T31593] netlink: 'syz.1.5984': attribute type 16 has an invalid length. [ 776.589103][T31593] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5984'. [ 776.717737][T31599] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5986'. [ 776.743121][T31214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 776.759593][T31214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 776.763541][T31214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 776.766180][T31214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 776.788792][T31214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 777.108716][T31604] netlink: 404 bytes leftover after parsing attributes in process `syz.4.5985'. [ 777.108760][T31604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5985'. [ 777.108794][T31604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5985'. [ 777.496662][T28028] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.496698][T28028] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.545862][T31589] hsr0: left promiscuous mode [ 778.019438][T28028] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.019505][T28028] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.214061][T31635] bridge_slave_0: left allmulticast mode [ 778.214120][T31635] bridge_slave_0: left promiscuous mode [ 778.214547][T31635] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.268836][T31635] bridge_slave_1: left allmulticast mode [ 778.268878][T31635] bridge_slave_1: left promiscuous mode [ 778.269272][T31635] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.320484][T31635] bond0: (slave bond_slave_0): Releasing backup interface [ 778.344415][T31635] bond0: (slave bond_slave_1): Releasing backup interface [ 778.385311][T31635] team0: Port device team_slave_0 removed [ 778.407646][T31635] team0: Port device team_slave_1 removed [ 778.409229][T31635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.409269][T31635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.449179][T31635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.449234][T31635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.453490][T31635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 778.487209][T31637] team0: Mode changed to "loadbalance" [ 778.493351][T31648] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 778.493376][T31648] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 778.500481][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 778.630570][T28028] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.630604][T28028] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.818114][ T52] Bluetooth: hci3: command tx timeout [ 779.015840][T31668] veth1_vlan: left promiscuous mode [ 779.032136][T31668] veth0_vlan: left promiscuous mode [ 779.043108][T31668] veth0_vlan: entered promiscuous mode [ 779.056519][T31668] veth1_vlan: entered promiscuous mode [ 779.064766][T31668] veth1_macvtap: left promiscuous mode [ 779.082299][T31668] veth0_macvtap: left promiscuous mode [ 779.091018][T31668] veth0_macvtap: entered promiscuous mode [ 779.141187][T31668] veth1_macvtap: entered promiscuous mode [ 779.258605][T31668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 779.273610][T31668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 779.278759][T31668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 779.322628][T31668] gretap0: entered promiscuous mode [ 779.377645][T31668] tipc: Resetting bearer [ 779.379905][T31668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.415130][T31668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 779.452292][T31668] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check. [ 779.454433][T31669] bond0: Error: Cannot enslave bond to itself. [ 779.459112][T31676] bond0: Error: Cannot enslave bond to itself. [ 779.650785][T28013] tipc: Resetting bearer [ 779.699135][T28015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.699250][T28015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.699336][T28015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.742033][T28015] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.355140][T31698] __nla_validate_parse: 8 callbacks suppressed [ 780.355161][T31698] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6006'. [ 780.460238][T31690] tipc: Resetting bearer [ 780.490593][T31690] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check. [ 780.492261][T31694] macsec0: entered promiscuous mode [ 780.561335][T31699] macsec0: left promiscuous mode [ 780.862617][T31697] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:19999 [ 780.898124][ T52] Bluetooth: hci3: command tx timeout [ 781.134187][T31721] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6008'. [ 781.600400][T28028] pimreg: left allmulticast mode [ 781.600512][T28028] dvmrp8: left allmulticast mode [ 782.314806][T28028] bond7 (unregistering): (slave gretap1): Releasing active interface [ 782.583793][T28028] bond0 (unregistering): Released all slaves [ 782.590836][T28028] bond1 (unregistering): Released all slaves [ 782.603545][T28028] bond2 (unregistering): Released all slaves [ 782.617053][T28028] bond3 (unregistering): Released all slaves [ 782.634333][T28028] bond4 (unregistering): Released all slaves [ 782.670696][T28028] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 782.670726][T28028] veth0_to_bond: left promiscuous mode [ 782.670915][T28028] veth0_to_bond: left allmulticast mode [ 782.673651][T28028] bond5 (unregistering): Released all slaves [ 782.690501][T28028] bond6 (unregistering): Released all slaves [ 782.703672][T28028] bond7 (unregistering): Released all slaves [ 782.720328][T28028] bond8 (unregistering): Released all slaves [ 782.734265][T28028] bond9 (unregistering): Released all slaves [ 782.753744][T28028] bond10 (unregistering): Released all slaves [ 782.768666][T28028] bond11 (unregistering): Released all slaves [ 782.786883][T28028] bond12 (unregistering): Released all slaves [ 782.807051][T28028] bond13 (unregistering): Released all slaves [ 782.821171][T28028] bond14 (unregistering): Released all slaves [ 782.851111][T28028] bond15 (unregistering): Released all slaves [ 782.864481][T28028] bond16 (unregistering): Released all slaves [ 782.885149][T28028] bond17 (unregistering): Released all slaves [ 782.916108][T28028] bond18 (unregistering): Released all slaves [ 782.945060][T28028] bond19 (unregistering): (slave veth11): Releasing active interface [ 782.959974][T28028] bond19 (unregistering): (slave veth13): Releasing active interface [ 782.962442][T28028] bond19 (unregistering): Released all slaves [ 782.978172][ T52] Bluetooth: hci3: command tx timeout [ 783.001624][T28028] bond20 (unregistering): Released all slaves [ 783.022316][T28028] bond21 (unregistering): Released all slaves [ 783.051158][T28028] bond22 (unregistering): Released all slaves [ 783.077196][T28028] bond23 (unregistering): Released all slaves [ 783.110372][T28028] bond24 (unregistering): Released all slaves [ 783.193052][T31734] macsec2: entered promiscuous mode [ 783.338897][T31737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6016'. [ 783.410822][T28013] smbdirect: ib_dev[syz1] removed [ 783.738814][T28028] tipc: Left network mode [ 783.752298][T31753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6015'. [ 784.159070][T28028] IPVS: stopping master sync thread 25618 ... [ 784.504746][T31597] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.504852][T31597] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.505005][T31597] bridge_slave_0: entered allmulticast mode [ 784.531288][T31597] bridge_slave_0: entered promiscuous mode [ 784.545339][T31597] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.549285][T31597] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.549464][T31597] bridge_slave_1: entered allmulticast mode [ 784.552880][T31597] bridge_slave_1: entered promiscuous mode [ 784.877587][T31597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.913022][T31597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.009418][T31597] team0: Port device team_slave_0 added [ 785.012354][T31597] team0: Port device team_slave_1 added [ 785.057898][ T52] Bluetooth: hci3: command tx timeout [ 785.175001][T31800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6022'. [ 785.254016][T31597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.254034][T31597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.254058][T31597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.291927][T31597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.291944][T31597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.291967][T31597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.490766][T31818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6026'. [ 785.754691][T31597] hsr_slave_0: entered promiscuous mode [ 785.763436][T31597] hsr_slave_1: entered promiscuous mode [ 785.770422][T31597] debugfs: 'hsr0' already exists in 'hsr' [ 785.770461][T31597] Cannot create hsr debugfs directory [ 785.810427][T31825] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6028'. [ 785.852607][T31823] netlink: 'syz.4.6029': attribute type 11 has an invalid length. [ 786.201367][T31828] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 786.201554][T31828] syzkaller0: linktype set to 8 [ 786.224513][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 786.224528][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6029'. [ 786.224562][T31840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6029'. [ 786.224827][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6029'. [ 786.224853][T31840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6029'. [ 786.811144][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6036'. [ 787.171690][T31865] syzkaller0: Caught tx_queue_len zero misconfig [ 787.323842][T31871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6039'. [ 787.780601][T31865] syzkaller1: entered promiscuous mode [ 787.780626][T31865] syzkaller1: entered allmulticast mode [ 787.989011][T31889] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6041'. [ 788.364416][T28028] hsr_slave_0: left promiscuous mode [ 788.459428][T28028] veth1_macvtap: left promiscuous mode [ 788.459498][T28028] veth0_macvtap: left promiscuous mode [ 788.459643][T28028] veth1_vlan: left promiscuous mode [ 788.459709][T28028] veth0_vlan: left promiscuous mode [ 788.906057][T28017] IPVS: starting estimator thread 0... [ 788.906264][T31905] IPVS: ip_vs_edit_dest(): server weight less than zero [ 788.996728][T31915] IPVS: using max 30 ests per chain, 72000 per kthread [ 789.674842][T31930] netlink: 'syz.4.6048': attribute type 1 has an invalid length. [ 789.730194][T31931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6048'. [ 789.793850][T31912] bridge0: port 4(syzkaller0) entered blocking state [ 789.794116][T31912] bridge0: port 4(syzkaller0) entered disabled state [ 789.794302][T31912] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 789.818990][T31912] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 790.038574][T31930] 8021q: adding VLAN 0 to HW filter on device bond26 [ 790.304332][T31946] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 790.306165][T31947] gre1: entered promiscuous mode [ 790.385708][T31946] syzkaller0: entered promiscuous mode [ 790.385737][T31946] syzkaller0: entered allmulticast mode [ 790.570157][T28028] IPVS: stop unused estimator thread 0... [ 790.659991][T31953] tipc: Resetting bearer [ 790.660224][T31952] tipc: Enabling of bearer rejected, already enabled [ 790.780141][T31953] tipc: Resetting bearer [ 790.860337][T31960] __nla_validate_parse: 2 callbacks suppressed [ 790.860388][T31960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6055'. [ 791.204912][T31980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6060'. [ 791.315190][T31597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 791.329272][T31597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.343884][T31597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 791.363192][T31597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.364162][T31597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 791.449806][T31597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.462622][T31597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 791.515751][T31597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 791.632015][T31987] syzkaller0: entered promiscuous mode [ 791.632047][T31987] syzkaller0: entered allmulticast mode [ 791.693686][T32000] sctp: [Deprecated]: syz.2.6063 (pid 32000) Use of int in max_burst socket option. [ 791.693686][T32000] Use struct sctp_assoc_value instead [ 791.979832][T31597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.050028][T31597] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.086093][T28017] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.086288][T28017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.155462][T28017] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.155646][T28017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.369277][T32009] ip6gretap1: entered allmulticast mode [ 792.372785][T32009] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 792.400626][T32009] batman_adv: batadv0: Adding interface: ip6gretap1 [ 792.400643][T32009] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.457184][T32009] batman_adv: batadv0: Interface activated: ip6gretap1 [ 792.923593][T32033] syzkaller0: entered promiscuous mode [ 792.923633][T32033] syzkaller0: entered allmulticast mode [ 793.130143][T32038] syzkaller0: entered promiscuous mode [ 793.130177][T32038] syzkaller0: entered allmulticast mode [ 793.459050][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6072'. [ 793.465575][T32059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6072'. [ 793.513304][T32059] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6072'. [ 793.668337][T32064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6073'. [ 794.007637][T32077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6075'. [ 794.032469][T32079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6076'. [ 794.111747][T32084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6077'. [ 794.243973][T32089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6080'. [ 794.275635][T31597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.400091][T32093] netlink: 'syz.4.6081': attribute type 1 has an invalid length. [ 794.425643][T31597] veth0_vlan: entered promiscuous mode [ 794.520600][T31597] veth1_vlan: entered promiscuous mode [ 794.630517][T31597] veth0_macvtap: entered promiscuous mode [ 794.652796][T31597] veth1_macvtap: entered promiscuous mode [ 794.704183][T31597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.775124][T31597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.818140][T14131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.820269][T28017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.820360][T28017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.820427][T28017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.002556][T14131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.002592][T14131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.083817][T32105] tipc: Enabling of bearer rejected, already enabled [ 795.101846][T28017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.101884][T28017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.226099][T32109] syzkaller0: left promiscuous mode [ 795.226120][T32109] syzkaller0: left allmulticast mode [ 795.292068][T32115] netlink: 'syz.2.6084': attribute type 362 has an invalid length. [ 795.904565][T32133] __nla_validate_parse: 3 callbacks suppressed [ 795.904586][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6089'. [ 796.109559][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.125347][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.142245][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.144837][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.146081][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 797.208957][T28017] IPVS: starting estimator thread 0... [ 797.212244][T32161] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 797.296668][T32165] IPVS: using max 27 ests per chain, 64800 per kthread [ 798.256943][ T52] Bluetooth: hci1: command tx timeout [ 798.747945][T32217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6102'. [ 799.638697][T32246] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6107'. [ 800.075882][T32256] tc_dump_action: action bad kind [ 800.086225][T32135] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.090107][T32135] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.090300][T32135] bridge_slave_0: entered allmulticast mode [ 800.132585][T32256] netlink: 'syz.2.6108': attribute type 7 has an invalid length. [ 800.158983][T32135] bridge_slave_0: entered promiscuous mode [ 800.179845][T32135] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.182820][T32135] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.182997][T32135] bridge_slave_1: entered allmulticast mode [ 800.195766][T32256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6108'. [ 800.198903][T32135] bridge_slave_1: entered promiscuous mode [ 800.337289][ T52] Bluetooth: hci1: command tx timeout [ 800.416794][T32269] : renamed from dummy0 [ 800.434116][T32274] ip_tables: iptables: counters copy to user failed while replacing table [ 800.594722][T32135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.625463][T32135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.803405][T32135] team0: Port device team_slave_0 added [ 800.843206][T32135] team0: Port device team_slave_1 added [ 801.652593][T32135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.652611][T32135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.652634][T32135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.719490][T32135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.719508][T32135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.719533][T32135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.775841][T32300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6115'. [ 801.924127][T32135] hsr_slave_0: entered promiscuous mode [ 801.933595][T32135] hsr_slave_1: entered promiscuous mode [ 801.935938][T32135] debugfs: 'hsr0' already exists in 'hsr' [ 801.935959][T32135] Cannot create hsr debugfs directory [ 802.006929][T32300] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 802.408390][T32317] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 802.408450][T32317] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 802.408516][T32317] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 802.419635][ T52] Bluetooth: hci1: command tx timeout [ 802.624094][T32326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6118'. [ 802.731749][T32317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 802.934336][T32339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6121'. [ 803.275494][T32351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6125'. [ 803.275539][T32351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6125'. [ 803.275553][T32351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6125'. [ 803.583133][T32360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6127'. [ 803.730803][T32364] netlink: 4412 bytes leftover after parsing attributes in process `syz.0.6128'. [ 803.815965][T32371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6130'. [ 804.100788][T32368] syzkaller0: entered promiscuous mode [ 804.100821][T32368] syzkaller0: entered allmulticast mode [ 804.243382][T32381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'. [ 804.443302][T32135] bond0: (slave netdevsim1): Releasing backup interface [ 804.498165][ T52] Bluetooth: hci1: command tx timeout [ 804.979911][T32401] netlink: 'syz.2.6139': attribute type 12 has an invalid length. [ 805.683647][T32426] netlink: 'syz.0.6143': attribute type 39 has an invalid length. [ 806.349969][T32432] 8021q: adding VLAN 0 to HW filter on device bond16 [ 806.855067][T32452] __nla_validate_parse: 4 callbacks suppressed [ 806.855086][T32452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6149'. [ 806.882379][T32452] netlink: 9160 bytes leftover after parsing attributes in process `syz.2.6149'. [ 806.997505][T32135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 807.018204][T32135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 807.019069][T32135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 807.050811][T32135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 807.053327][T32135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 807.083024][T32135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 807.085486][T32135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 807.121644][T32135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 807.425972][T32135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.835324][T32467] syzkaller1: entered promiscuous mode [ 807.835360][T32467] syzkaller1: entered allmulticast mode [ 808.193471][T32135] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.238085][T28028] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.238194][T28028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.296294][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.296439][T14131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.618412][T32503] openvswitch: netlink: IP tunnel dst address not specified [ 808.782834][T32509] netlink: 'syz.1.6159': attribute type 10 has an invalid length. [ 808.819094][T32509] bond_slave_0: entered allmulticast mode [ 808.825809][T32509] team0: Port device bond_slave_0 added [ 809.055810][T32512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6160'. [ 809.163004][T32518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6160'. [ 809.565960][T32530] netlink: 'syz.2.6163': attribute type 1 has an invalid length. [ 809.606764][T32532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6164'. [ 809.721519][T32537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6163'. [ 809.850422][T32535] bond17: (slave geneve4): making interface the new active one [ 809.854312][T32535] bond17: (slave geneve4): Enslaving as an active interface with an up link [ 809.889451][T32537] 8021q: adding VLAN 0 to HW filter on device bond17 [ 809.890864][T14131] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 809.891882][T14131] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 809.891972][T14131] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 809.892069][T14131] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 810.287988][T32551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6168'. [ 810.288771][T32552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6168'. [ 810.343298][T32553] nft_compat: unsupported protocol 1 [ 812.005932][T32135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.014977][T32556] ªªªªªª: renamed from vlan0 (while UP) [ 812.318062][T32572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6173'. [ 812.388705][T32577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6172'. [ 812.414699][T32578] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6170'. [ 812.816210][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6176'. [ 812.859098][T32587] macvtap1: entered allmulticast mode [ 812.859123][T32587] dummy0: entered allmulticast mode [ 812.892204][T32589] netlink: 47 bytes leftover after parsing attributes in process `syz.2.6176'. [ 812.892245][T32589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6176'. [ 812.893256][T32587] dummy0: left allmulticast mode [ 812.975893][T32592] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6177'. [ 813.157887][T32589] macvtap1: entered allmulticast mode [ 813.157919][T32589] dummy0: entered allmulticast mode [ 813.162362][T32589] dummy0: left allmulticast mode [ 813.422170][T32596] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6178'. [ 813.609291][T32135] veth0_vlan: entered promiscuous mode [ 813.669597][T32135] veth1_vlan: entered promiscuous mode [ 813.731164][T32615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6181'. [ 813.733008][T32616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6181'. [ 813.986043][T32135] veth0_macvtap: entered promiscuous mode [ 814.039706][T32135] veth1_macvtap: entered promiscuous mode [ 814.054524][T32623] FAULT_INJECTION: forcing a failure. [ 814.054524][T32623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.054587][T32623] CPU: 1 UID: 0 PID: 32623 Comm: syz.2.6183 Not tainted syzkaller #0 PREEMPT(full) [ 814.054609][T32623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 814.054620][T32623] Call Trace: [ 814.054628][T32623] [ 814.054636][T32623] dump_stack_lvl+0xe8/0x150 [ 814.054671][T32623] should_fail_ex+0x410/0x560 [ 814.054700][T32623] _copy_to_user+0x31/0xb0 [ 814.054728][T32623] simple_read_from_buffer+0xe1/0x170 [ 814.054761][T32623] proc_fail_nth_read+0x1bb/0x230 [ 814.054781][T32623] ? common_file_perm+0x20e/0x2b0 [ 814.054818][T32623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.054841][T32623] ? rw_verify_area+0x24a/0x4c0 [ 814.054870][T32623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.054889][T32623] vfs_read+0x213/0xa80 [ 814.054920][T32623] ? __pfx___mutex_lock+0x10/0x10 [ 814.054949][T32623] ? __pfx_vfs_read+0x10/0x10 [ 814.054978][T32623] ? __fget_files+0x2a/0x420 [ 814.055008][T32623] ? __fget_files+0x3a2/0x420 [ 814.055033][T32623] ? __fget_files+0x2a/0x420 [ 814.055067][T32623] ksys_read+0x150/0x270 [ 814.055097][T32623] ? __pfx_ksys_read+0x10/0x10 [ 814.055136][T32623] do_syscall_64+0x166/0x520 [ 814.055160][T32623] ? trace_irq_disable+0x3b/0x140 [ 814.055181][T32623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.055201][T32623] ? clear_bhb_loop+0x70/0xc0 [ 814.055225][T32623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.055244][T32623] RIP: 0033:0x7f927995e98e [ 814.055263][T32623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 814.055278][T32623] RSP: 002b:00007f927a869fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 814.055298][T32623] RAX: ffffffffffffffda RBX: 00007f927a86a6c0 RCX: 00007f927995e98e [ 814.055313][T32623] RDX: 000000000000000f RSI: 00007f927a86a0a0 RDI: 0000000000000004 [ 814.055325][T32623] RBP: 00007f927a86a090 R08: 0000000000000000 R09: 0000000000000000 [ 814.055337][T32623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.055349][T32623] R13: 00007f9279c26038 R14: 00007f9279c25fa0 R15: 00007ffd08f6e4b8 [ 814.055381][T32623] [ 814.615619][T32135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.681364][T32135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.786653][T28024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.786746][T28024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.786814][T28024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.786880][T28024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.235356][T28017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.235378][T28017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.351050][T32644] macsec3: entered promiscuous mode [ 815.365840][T28024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.365877][T28024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.993160][T32679] hsr0: entered promiscuous mode [ 816.029068][T32681] netlink: 'syz.0.6199': attribute type 1 has an invalid length. [ 816.069387][T32681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.188743][T32677] hsr0: left promiscuous mode [ 816.623559][T32661] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 816.638107][T32665] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 816.754357][T32712] netlink: 'syz.4.6208': attribute type 3 has an invalid length. [ 816.912181][T32716] netlink: 'syz.0.6206': attribute type 1 has an invalid length. [ 817.025858][T32716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 817.100095][T32733] netlink: 'syz.3.6210': attribute type 1 has an invalid length. [ 817.128540][T32731] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 817.185380][T32733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.352790][T32728] bond1: (slave dummy0): making interface the new active one [ 817.368011][T32728] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 817.379607][T32733] : renamed from dummy0 (while UP) [ 817.523500][T32749] __nla_validate_parse: 6 callbacks suppressed [ 817.523520][T32749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6215'. [ 817.864106][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 817.874830][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 817.885657][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 817.896095][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 817.896882][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 818.102433][T32745] syzkaller1: entered promiscuous mode [ 818.102456][T32745] syzkaller1: entered allmulticast mode [ 818.377994][ T300] syzkaller0: entered promiscuous mode [ 818.378017][ T300] syzkaller0: entered allmulticast mode [ 818.384591][ T300] tipc: Started in network mode [ 818.384622][ T300] tipc: Node identity 5af11fe48532, cluster identity 4711 [ 818.385009][ T300] tipc: Enabled bearer , priority 0 [ 818.444936][T32767] tipc: Resetting bearer [ 818.489572][T32767] tipc: Disabling bearer [ 818.779894][ T326] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 819.328065][ T344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6230'. [ 819.412315][ T344] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 819.449721][ T344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6230'. [ 819.481745][ T347] netlink: 'syz.3.6231': attribute type 8 has an invalid length. [ 819.481767][ T347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6231'. [ 819.768838][ T365] netlink: 'syz.0.6233': attribute type 6 has an invalid length. [ 819.768861][ T365] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6233'. [ 820.018930][ T5618] Bluetooth: hci5: command tx timeout [ 820.155489][ T385] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6241'. [ 820.213531][T32758] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.213716][T32758] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.213927][T32758] bridge_slave_0: entered allmulticast mode [ 820.215905][T32758] bridge_slave_0: entered promiscuous mode [ 820.219053][T32758] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.219212][T32758] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.219351][T32758] bridge_slave_1: entered allmulticast mode [ 820.221296][T32758] bridge_slave_1: entered promiscuous mode [ 820.270954][T32758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.274981][T32758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.344729][T32758] team0: Port device team_slave_0 added [ 820.358253][T32758] team0: Port device team_slave_1 added [ 820.401700][T32758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.401728][T32758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.401747][T32758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.403581][T32758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.403595][T32758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.403619][T32758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.567705][T32758] hsr_slave_0: entered promiscuous mode [ 820.569511][T32758] hsr_slave_1: entered promiscuous mode [ 820.570218][T32758] debugfs: 'hsr0' already exists in 'hsr' [ 820.570236][T32758] Cannot create hsr debugfs directory [ 821.006147][ T415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6249'. [ 821.021801][ T416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6249'. [ 821.037323][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6248'. [ 821.043695][ T412] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6248'. [ 821.064088][T32758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.284699][T32758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.546294][ T438] tipc: Enabling of bearer rejected, failed to enable media [ 821.554980][ T434] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 821.681447][T32758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.097756][ T5618] Bluetooth: hci5: command tx timeout [ 822.720432][ T488] netlink: 'syz.0.6262': attribute type 11 has an invalid length. [ 822.720454][ T488] __nla_validate_parse: 1 callbacks suppressed [ 822.720465][ T488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6262'. [ 823.455333][ T507] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 823.456825][ T507] batman_adv: batadv0: Adding interface: gretap1 [ 823.456837][ T507] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.456860][ T507] batman_adv: batadv0: Interface activated: gretap1 [ 823.551551][T32758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 823.567386][T32758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.575646][T32758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 823.593227][T32758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.594381][T32758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 823.619306][T32758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.621072][T32758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 823.648559][T32758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 824.132351][T32758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.187446][ T5618] Bluetooth: hci5: command tx timeout [ 824.211529][T32758] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.254038][T28017] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.254146][T28017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.298689][ T555] IPVS: set_ctl: invalid protocol: 32 172.30.0.5:20002 [ 824.315124][T28017] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.315230][T28017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.319285][ T557] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6270'. [ 824.324952][ T557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6270'. [ 824.384015][ T562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6270'. [ 824.445016][ T557] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6270'. [ 824.445040][ T557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6270'. [ 824.445053][ T557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6270'. [ 824.822757][ T571] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 824.825451][ T572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6273'. [ 825.154838][ T5618] Bluetooth: hci3: connection err: -111 [ 825.194757][ T587] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 825.195294][ T587] team0: Device ipvlan2 is already an upper device of the team interface [ 825.352416][ T595] netlink: 'syz.4.6278': attribute type 1 has an invalid length. [ 825.380124][ T595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 825.395574][ T595] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 825.420636][T28026] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 825.500867][ T604] netlink: 'syz.0.6279': attribute type 1 has an invalid length. [ 825.533238][ T604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 825.576529][T28015] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 825.629819][T32758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.718758][T32758] veth0_vlan: entered promiscuous mode [ 825.725839][T32758] veth1_vlan: entered promiscuous mode [ 825.774784][T32758] veth0_macvtap: entered promiscuous mode [ 825.792760][T32758] veth1_macvtap: entered promiscuous mode [ 825.823373][T32758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.841692][T32758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.860088][ T612] xt_CT: No such helper "snmp_trap" [ 825.970607][T28015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.971424][T28015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.971458][T28015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.971483][T28015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.117729][ T621] syzkaller1: entered promiscuous mode [ 826.117752][ T621] syzkaller1: entered allmulticast mode [ 826.259269][ T5618] Bluetooth: hci5: command tx timeout [ 826.271272][ T598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.514273][ T626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6285'. [ 826.514372][ T626] xt_cgroup: path and classid specified [ 827.175997][T28026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.176019][T28026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.259568][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6287'. [ 827.271646][T28015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.271688][T28015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.371407][ T638] netlink: 'syz.4.6290': attribute type 1 has an invalid length. [ 827.462366][ T638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 827.522732][ T643] bond1: (slave dummy0): Removing an active aggregator [ 827.538499][ T643] bond1: (slave dummy0): Releasing backup interface [ 827.544693][ T643] bond2: (slave dummy0): making interface the new active one [ 827.545495][ T643] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 827.545663][ T638] : renamed from dummy0 (while UP) [ 827.723128][ T660] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 827.991650][ T676] __nla_validate_parse: 3 callbacks suppressed [ 827.991668][ T676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6301'. [ 828.196236][ T684] netlink: 'syz.4.6304': attribute type 1 has an invalid length. [ 828.225556][ T689] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6307'. [ 828.237407][ T689] netlink: 'syz.3.6307': attribute type 11 has an invalid length. [ 828.259105][ T691] netlink: NAT attribute has 1 unknown bytes [ 828.259138][ T691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.328404][ T695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6308'. [ 828.361791][ T684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 828.469257][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6309'. [ 828.469448][ T701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6309'. [ 828.517886][ T687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.601290][ T698] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6308'. [ 828.624040][ T700] veth0: entered promiscuous mode [ 828.628339][ T700] netlink: 'syz.2.6309': attribute type 1 has an invalid length. [ 828.765400][ T700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 828.765419][ T701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6309'. [ 828.810427][ T699] veth0: left promiscuous mode [ 828.939801][ T714] syzkaller0: entered promiscuous mode [ 828.939900][ T714] syzkaller0: entered allmulticast mode [ 828.981461][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6313'. [ 829.195284][ T728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6316'. [ 829.294479][ T730] No such timeout policy "syz1" [ 829.711616][ T738] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.712255][ T738] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.793352][ T760] netlink: 'syz.0.6322': attribute type 1 has an invalid length. [ 829.917102][ T738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.943261][ T738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.309134][ T760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 830.462448][ T786] openvswitch: netlink: Flow actions attr not present in new flow. [ 830.622733][ T795] netlink: 'syz.1.6326': attribute type 1 has an invalid length. [ 830.938111][ T799] ip_tables: iptables: counters copy to user failed while replacing table [ 833.870989][ T808] __nla_validate_parse: 149 callbacks suppressed [ 833.871011][ T808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6329'. [ 833.874946][ T810] netlink: 'syz.2.6330': attribute type 30 has an invalid length. [ 833.874966][ T810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6330'. [ 833.911821][T28028] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.911867][T28028] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.911899][T28028] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.911938][T28028] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.996205][ T812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6330'. [ 833.996229][ T812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6330'. [ 834.105577][ T821] ipvlan2: entered promiscuous mode [ 834.105600][ T821] ipvlan2: entered allmulticast mode [ 834.105618][ T821] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 834.106010][ T821] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 834.178281][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.240779][ T835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6335'. [ 834.266063][ T830] netlink: 'syz.4.6333': attribute type 1 has an invalid length. [ 834.310758][ T841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6334'. [ 834.331402][ T830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 834.404452][ T841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6334'. [ 834.433012][ T830] bond4: (slave geneve2): making interface the new active one [ 834.444051][ T830] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 835.275559][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.289173][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.290134][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.291125][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.291739][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.903276][ T851] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.903385][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.903609][ T851] bridge_slave_0: entered allmulticast mode [ 835.904537][ T851] bridge_slave_0: entered promiscuous mode [ 835.907218][ T851] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.907388][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.907530][ T851] bridge_slave_1: entered allmulticast mode [ 835.909365][ T851] bridge_slave_1: entered promiscuous mode [ 835.943443][ T851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.952796][ T851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.990295][ T851] team0: Port device team_slave_0 added [ 835.992210][ T851] team0: Port device team_slave_1 added [ 836.014521][ T851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.014538][ T851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.014560][ T851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.015685][ T851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.015698][ T851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.015720][ T851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.073613][ T851] hsr_slave_0: entered promiscuous mode [ 836.075388][ T851] hsr_slave_1: entered promiscuous mode [ 836.076169][ T851] debugfs: 'hsr0' already exists in 'hsr' [ 836.076209][ T851] Cannot create hsr debugfs directory [ 836.250010][ T851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.250032][ T851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.250046][ T851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 836.342202][ T851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.342224][ T851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.342238][ T851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 836.425843][ T851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.425872][ T851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.425885][ T851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 836.546011][ T851] vlan2 (unregistering): left promiscuous mode [ 836.546030][ T851] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 836.550865][ T851] bridge0: port 1(vlan2) entered disabled state [ 836.582474][ T851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.582495][ T851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.582509][ T851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 836.834859][ T808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.904561][ T851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 837.000870][ T851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 837.001691][ T851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 837.054251][ T851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 837.073717][ T851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 837.099490][ T851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 837.106230][ T851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 837.132249][ T851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 837.228737][ T880] pimreg9: entered allmulticast mode [ 837.378128][ T52] Bluetooth: hci0: command tx timeout [ 837.379351][ T851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.413956][ T895] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 837.430925][ T851] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.439929][T28013] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.440035][T28013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.460319][ T897] netlink: 452 bytes leftover after parsing attributes in process `syz.0.6346'. [ 837.479528][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.479635][T14131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.730049][ T912] syzkaller0: left promiscuous mode [ 837.730072][ T912] syzkaller0: left allmulticast mode [ 837.930061][ T919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6352'. [ 838.006255][ T919] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6352'. [ 838.364955][ T947] Bluetooth: MGMT ver 1.23 [ 838.435603][ T952] ip_tables: iptables: counters copy to user failed while replacing table [ 838.675324][ T969] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 838.730587][ T851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.922121][ T851] veth0_vlan: entered promiscuous mode [ 838.946145][ T851] veth1_vlan: entered promiscuous mode [ 839.026140][ T968] syzkaller0: entered promiscuous mode [ 839.026157][ T968] syzkaller0: entered allmulticast mode [ 839.100223][ T976] syzkaller1: entered promiscuous mode [ 839.100246][ T976] syzkaller1: entered allmulticast mode [ 839.169612][ T953] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 840.686728][ T996] netlink: 'syz.4.6366': attribute type 1 has an invalid length. [ 840.686749][ T996] __nla_validate_parse: 3 callbacks suppressed [ 840.686759][ T996] netlink: 756 bytes leftover after parsing attributes in process `syz.4.6366'. [ 842.687362][ T1002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6367'. [ 842.775488][ T1002] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 842.825046][ T851] veth0_macvtap: entered promiscuous mode [ 842.954871][ T851] veth1_macvtap: entered promiscuous mode [ 842.995063][ T851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.009117][ T851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.089813][T28024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.090135][T28028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.090170][T28028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.090201][T28028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.255025][ T1020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6372'. [ 843.255051][ T1020] openvswitch: netlink: Flow key attr not present in new flow. [ 843.466859][T28015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.466881][T28015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.549715][ T1020] can: request_module (can-proto-0) failed. [ 843.841612][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.841637][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.215388][ T1060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6379'. [ 844.329827][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.333541][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.701929][ T1085] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6387'. [ 844.702060][ T1085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6387'. [ 844.789694][ T1087] netlink: 'syz.3.6388': attribute type 61 has an invalid length. [ 844.789718][ T1087] netlink: 'syz.3.6388': attribute type 105 has an invalid length. [ 844.845691][ T1094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6386'. [ 844.884405][ T1094] netlink: 'syz.0.6386': attribute type 1 has an invalid length. [ 844.942552][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6387'. [ 845.191759][ T1103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6389'. [ 845.191795][ T1103] netlink: 'syz.0.6389': attribute type 7 has an invalid length. [ 845.191809][ T1103] netlink: 'syz.0.6389': attribute type 8 has an invalid length. [ 845.191821][ T1103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6389'. [ 845.440355][ T1112] xt_nfacct: accounting object `' does not exist [ 845.466073][ T1112] netlink: 'syz.3.6391': attribute type 2 has an invalid length. [ 845.570440][ T1115] bond1: (slave bond_slave_1): Device is not our slave [ 845.570462][ T1115] bond1: option active_slave: invalid value (bond_slave_1) [ 845.599466][ T1115] bond1 (unregistering): Released all slaves [ 845.725944][ T1129] netlink: 'syz.2.6392': attribute type 14 has an invalid length. [ 845.755150][ T1130] gretap2: entered promiscuous mode [ 845.869125][ T1130] netlink: 'syz.0.6395': attribute type 1 has an invalid length. [ 845.872840][ T1130] __nla_validate_parse: 1 callbacks suppressed [ 845.872857][ T1130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6395'. [ 845.932852][ T1137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6397'. [ 846.121765][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6398'. [ 846.369483][ T1159] ipt_ah: unknown flags FF [ 846.369624][ T1160] ipt_ah: unknown flags FF [ 846.373012][ T1158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6404'. [ 846.374205][ T1158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6404'. [ 846.428849][ T1163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6405'. [ 846.428884][ T1163] netlink: 'syz.3.6405': attribute type 10 has an invalid length. [ 846.428899][ T1163] netlink: 'syz.3.6405': attribute type 5 has an invalid length. [ 846.428910][ T1163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6405'. [ 846.475027][ T1163] geneve2: entered promiscuous mode [ 846.475049][ T1163] geneve2: entered allmulticast mode [ 846.497348][T28028] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 46398 - 0 [ 846.497454][T28028] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 46398 - 0 [ 846.498089][T28028] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 46398 - 0 [ 846.600356][ T1168] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6408'. [ 846.605299][ T1168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6408'. [ 846.605318][ T1168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6408'. [ 847.330001][ T9372] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 847.397203][ T1218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.935340][ T1283] xt_socket: unknown flags 0x8 [ 848.935728][ T1283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.935741][ T1283] IPv6: NLM_F_CREATE should be set when creating new route [ 848.935783][ T1283] IPv6: NLM_F_CREATE should be set when creating new route [ 848.935805][ T1283] IPv6: NLM_F_CREATE should be set when creating new route [ 848.975057][ T1283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 849.833844][ T1333] netlink: 'syz.3.6446': attribute type 1 has an invalid length. [ 849.978375][ T1333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 850.000609][ T1353] netlink: 'syz.3.6446': attribute type 1 has an invalid length. [ 850.050287][ T1335] bond2: (slave gretap1): making interface the new active one [ 850.051025][ T1335] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 851.060903][ T1418] __nla_validate_parse: 16 callbacks suppressed [ 851.060904][ T1417] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6463'. [ 851.060922][ T1418] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6461'. [ 851.067416][ T1417] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004 [ 851.200918][ T1428] netlink: 'syz.3.6468': attribute type 1 has an invalid length. [ 851.208406][ T1424] netlink: 'syz.1.6466': attribute type 1 has an invalid length. [ 851.269027][ T1428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 851.305228][ T1433] syzkaller1: entered promiscuous mode [ 851.305251][ T1433] syzkaller1: entered allmulticast mode [ 851.342516][ T1424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6466'. [ 851.375062][ T1435] bond3: (slave veth3): Enslaving as an active interface with a down link [ 851.413500][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6470'. [ 851.426191][ T1436] bond2: (slave geneve2): making interface the new active one [ 851.435666][ T1436] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 851.606287][ T1428] mac80211_hwsim hwsim95 wlan0: entered promiscuous mode [ 851.630878][ T1428] gre1: left promiscuous mode [ 851.727553][ T1428] ip6gretap1: left allmulticast mode [ 851.747815][ T1428] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 851.761826][ T1424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 851.833262][ T1435] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 851.835133][ T1435] bond3: (slave batadv1): making interface the new active one [ 851.836156][ T1435] batadv1: entered promiscuous mode [ 851.843787][ T1435] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 851.871726][ T9372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.872618][ T9372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.872667][ T9372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.872702][ T9372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.921516][ T1458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6474'. [ 852.080488][ T1462] netlink: 'syz.0.6476': attribute type 1 has an invalid length. [ 852.189843][ T1468] bond8: (slave geneve2): making interface the new active one [ 852.192539][ T1468] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 852.251343][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6475'. [ 852.258035][ T9365] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 852.258100][ T9365] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 852.258128][ T9365] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 852.258152][ T9365] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 852.323345][ T1476] xt_nfacct: accounting object `syz0' does not exist [ 852.425346][ T1478] netlink: 'syz.0.6479': attribute type 4 has an invalid length. [ 852.463601][ T1478] netlink: 'syz.0.6479': attribute type 4 has an invalid length. [ 852.654994][ T1488] tc action pedit 'at' offset -2147483645 out of bounds [ 852.725139][ T1490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6482'. [ 852.890010][ T1491] netlink: 404 bytes leftover after parsing attributes in process `syz.4.6482'. [ 852.890034][ T1491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6482'. [ 852.890051][ T1491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6482'. [ 853.154628][ T1517] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 853.411037][ T1525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.411061][ T1525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.416217][ T1525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.416239][ T1525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.792735][ T1535] netlink: 'syz.4.6493': attribute type 1 has an invalid length. [ 853.885704][ T1534] ipvlan2: left allmulticast mode [ 853.885734][ T1534] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 853.953547][T14119] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 853.953978][T14119] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 853.954019][T14119] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 853.954054][T14119] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 854.062723][ T1533] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 854.078896][ T1533] bond5 (unregistering): Released all slaves [ 854.126939][ T1539] ip6gre1: entered promiscuous mode [ 854.387903][ T1544] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 854.703775][ T1581] netlink: 'syz.3.6504': attribute type 3 has an invalid length. [ 854.703796][ T1581] netlink: 'syz.3.6504': attribute type 1 has an invalid length. [ 854.703811][ T1581] NCSI netlink: No device for ifindex 4294967295 [ 854.934798][ T1597] netlink: 'syz.4.6509': attribute type 1 has an invalid length. [ 854.983975][ T1597] 8021q: adding VLAN 0 to HW filter on device bond5 [ 855.003132][ T1604] openvswitch: netlink: Flow key attr not present in new flow. [ 855.075532][ T1597] bond5: (slave gretap1): making interface the new active one [ 855.085664][ T1597] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 855.827746][ T1635] erspan0: entered promiscuous mode [ 855.846152][ T1635] erspan0: left promiscuous mode [ 855.861782][ T1641] netlink: 'syz.4.6522': attribute type 1 has an invalid length. [ 855.904456][ T1641] bond6: option mode: invalid value (7) [ 856.050137][ T1641] bond6 (unregistering): Released all slaves [ 856.066385][ T1640] __nla_validate_parse: 14 callbacks suppressed [ 856.066404][ T1640] netlink: 9160 bytes leftover after parsing attributes in process `syz.2.6524'. [ 856.194439][ T1641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6522'. [ 856.269558][ T1650] bond9: entered allmulticast mode [ 856.304909][ T1652] macvlan2: entered promiscuous mode [ 856.304933][ T1652] macvlan2: entered allmulticast mode [ 856.319402][ T1652] bond9: entered promiscuous mode [ 856.322155][ T1652] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 856.348023][ T1652] bond9: left promiscuous mode [ 856.512810][ T1641] : entered promiscuous mode [ 856.531885][ T1641] bond2: (slave ): Releasing active interface [ 856.608395][ T1664] tipc: Started in network mode [ 856.608426][ T1664] tipc: Node identity 56104dce6ef5, cluster identity 4711 [ 856.608601][ T1664] tipc: Enabled bearer , priority 0 [ 856.618480][ T1663] syzkaller0: entered promiscuous mode [ 856.618500][ T1663] syzkaller0: entered allmulticast mode [ 856.732613][ T1668] tipc: Resetting bearer [ 856.746978][ T1682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6529'. [ 856.749756][ T1682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6529'. [ 856.779217][ T1653] tipc: Resetting bearer [ 856.805553][ T1683] x_tables: unsorted entry at hook 3 [ 856.815775][ T1653] tipc: Disabling bearer [ 856.833975][ T1680] lo: entered promiscuous mode [ 856.844072][ T1680] tunl0: entered promiscuous mode [ 856.860880][ T1680] gre0: entered promiscuous mode [ 856.924680][ T1680] gretap0: entered promiscuous mode [ 856.960123][ T1680] erspan0: entered promiscuous mode [ 856.990826][ T1680] ip_vti0: entered promiscuous mode [ 857.022515][ T1680] ip6_vti0: entered promiscuous mode [ 857.048128][ T1680] sit0: entered promiscuous mode [ 857.051777][ T1694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6532'. [ 857.087364][ T1680] ip6tnl0: entered promiscuous mode [ 857.130981][ T1680] ip6gre0: entered promiscuous mode [ 857.151320][ T1680] syz_tun: entered promiscuous mode [ 857.170947][ T1680] ip6gretap0: entered promiscuous mode [ 857.184683][ T1680] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.185030][ T1680] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.186684][ T1680] bridge0: entered promiscuous mode [ 857.210392][T14119] bond2: (slave syz_tun): link status definitely down, disabling slave [ 857.233571][ T1698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 857.241346][ T1684] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6529'. [ 857.542819][ T1707] validate_nla: 2 callbacks suppressed [ 857.542839][ T1707] netlink: 'syz.4.6536': attribute type 9 has an invalid length. [ 857.594098][ T1710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6537'. [ 858.653106][ T1752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6546'. [ 858.654542][ T1752] netlink: 'syz.0.6546': attribute type 1 has an invalid length. [ 858.945701][ T1764] syzkaller0: entered promiscuous mode [ 858.945725][ T1764] syzkaller0: entered allmulticast mode [ 859.503645][ T1792] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6558'. [ 859.750964][ T1807] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6565'. [ 859.795961][ T1804] syzkaller1: entered promiscuous mode [ 859.795984][ T1804] syzkaller1: entered allmulticast mode [ 860.233970][ T1828] erspan0: entered promiscuous mode [ 860.234271][ T1828] macvtap1: entered promiscuous mode [ 860.234440][ T1828] macvtap1: entered allmulticast mode [ 860.235820][ T1828] erspan0: entered allmulticast mode [ 860.396944][ T1026] udevd[1026]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 860.429149][ T999] udevd[999]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 860.868884][ T1854] batman_adv: batadv0: Adding interface: veth0 [ 860.868900][ T1854] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.868922][ T1854] batman_adv: batadv0: Interface activated: veth0 [ 860.939209][ T1854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.939244][ T1854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.962070][ T1854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.962092][ T1854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.981767][ T1854] batman_adv: batadv0: Interface deactivated: gretap1 [ 860.981789][ T1854] batman_adv: batadv0: Removing interface: gretap1 [ 860.994808][ T1854] batman_adv: batadv0: Interface deactivated: veth0 [ 860.994829][ T1854] batman_adv: batadv0: Removing interface: veth0 [ 861.090591][ T1861] netlink: 'syz.2.6582': attribute type 1 has an invalid length. [ 861.187689][ T1861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.188314][ T1865] : renamed from dummy0 (while UP) [ 861.312278][ T1871] netlink: 'syz.1.6585': attribute type 12 has an invalid length. [ 861.414820][ T1882] tipc: Started in network mode [ 861.414848][ T1882] tipc: Node identity ac1414aa, cluster identity 4711 [ 861.415083][ T1882] tipc: New replicast peer: 172.20.20.187 [ 861.435099][ T1882] tipc: Enabled bearer , priority 5 [ 861.440323][ T1880] Cannot find del_set index 0 as target [ 861.452795][ T1888] tipc: Enabling of bearer rejected, already enabled [ 861.632187][ T1899] __nla_validate_parse: 6 callbacks suppressed [ 861.632208][ T1899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6591'. [ 862.172602][ T1913] netlink: 'syz.0.6596': attribute type 1 has an invalid length. [ 862.239109][ T1902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6592'. [ 862.494579][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6600'. [ 862.494604][ T1930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6600'. [ 862.530559][T23788] tipc: Node number set to 2886997162 [ 862.655157][ T1941] nbd5: detected capacity change from 0 to 32 [ 862.657561][ T52] block nbd5: Receive control failed (result -22) [ 862.662436][ T1935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6601'. [ 862.675046][ T1982] block nbd5: Dead connection, failed to find a fallback [ 862.675069][ T1982] block nbd5: shutting down sockets [ 862.675198][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.675300][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.684331][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.684362][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.684942][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.684967][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.685095][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.685116][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.685227][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.685248][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.685718][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.685742][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.687278][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.687303][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.687423][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.687445][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.687923][ T999] ldm_validate_partition_table(): Disk read failed. [ 862.688023][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.688055][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.688667][ T1982] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 862.688692][ T1982] Buffer I/O error on dev nbd5, logical block 0, async page read [ 862.689887][ T1944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6604'. [ 862.690631][ T999] Dev nbd5: unable to read RDB block 0 [ 862.691178][ T1937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6602'. [ 862.697102][ T999] nbd5: unable to read partition table [ 862.700822][ T1944] netlink: 'syz.0.6604': attribute type 1 has an invalid length. [ 862.701947][ T1944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6604'. [ 862.719261][ T1944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6604'. [ 862.790984][ T999] ldm_validate_partition_table(): Disk read failed. [ 862.791387][ T999] Dev nbd5: unable to read RDB block 0 [ 862.794152][ T999] nbd5: unable to read partition table [ 863.042354][ T1955] IPVS: length: 15 != 8 [ 863.277392][ T1955] vlan2: entered promiscuous mode [ 863.277415][ T1955] macvlan0: entered promiscuous mode [ 863.415943][ T1941] tipc: Resetting bearer [ 863.461397][ T1941] bridge0: port 4(syzkaller0) entered disabled state [ 863.552919][ T1941] bridge0: port 2(wlan1) entered disabled state [ 863.597447][ T1974] Cannot find add_set index 0 as target [ 863.657791][ T1985] netlink: 'syz.0.6610': attribute type 1 has an invalid length. [ 863.735162][ T1974] Set syz1 is full, maxelem 2076 reached [ 863.746116][ T1941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 863.746136][ T1941] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 863.747555][ T9361] batadv1: left promiscuous mode [ 863.882000][ T1992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6614'. [ 863.882031][ T1992] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 863.911978][ T1992] netlink: 'syz.1.6614': attribute type 96 has an invalid length. [ 864.158684][ T1941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 864.158707][ T1941] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 864.305983][ T1941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 864.306006][ T1941] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 864.735861][ T1941] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 864.735884][ T1941] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 865.056013][ T2024] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 865.452438][ T2049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.504859][ T2049] bridge_slave_0: left allmulticast mode [ 865.504897][ T2049] bridge_slave_0: left promiscuous mode [ 865.505189][ T2049] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.563528][ T2049] bridge_slave_1: left allmulticast mode [ 865.563555][ T2049] bridge_slave_1: left promiscuous mode [ 865.563791][ T2049] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.780230][ T2105] netlink: 'syz.2.6642': attribute type 4 has an invalid length. [ 866.835823][ T2105] netlink: 'syz.2.6642': attribute type 4 has an invalid length. [ 867.032350][ T2115] __nla_validate_parse: 5 callbacks suppressed [ 867.032370][ T2115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6644'. [ 867.083467][ T2118] syzkaller0: entered promiscuous mode [ 867.083490][ T2118] syzkaller0: entered allmulticast mode [ 867.142967][ T2118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6645'. [ 867.429685][ T2143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'. [ 867.429712][ T2143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6648'. [ 867.435971][ T2138] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6648'. [ 867.500515][ T2146] netlink: 'syz.1.6648': attribute type 10 has an invalid length. [ 867.568901][ T2146] team0 (unregistering): Port device team_slave_0 removed [ 867.585316][ T2146] team0 (unregistering): Port device team_slave_1 removed [ 867.660911][ T2162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6650'. [ 867.733426][ T2144] netlink: 'syz.0.6650': attribute type 1 has an invalid length. [ 867.733449][ T2144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6650'. [ 868.059665][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6654'. [ 868.093683][ T2177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6654'. [ 868.115069][ T2168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.205937][ T2177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6654'. [ 868.735038][ T2211] netlink: 'syz.4.6661': attribute type 1 has an invalid length. [ 868.749668][ T2211] netlink: 'syz.4.6661': attribute type 1 has an invalid length. [ 868.807062][ T2214] ip6tnl0: Caught tx_queue_len zero misconfig [ 869.096149][ T2237] ip_tables: iptables: counters copy to user failed while replacing table [ 869.411456][ T2243] syzkaller0: entered promiscuous mode [ 869.411480][ T2243] syzkaller0: entered allmulticast mode [ 869.472944][ T2243] tipc: Enabled bearer , priority 0 [ 869.756229][ T2242] tipc: Resetting bearer [ 869.790741][ T2278] netlink: 'syz.1.6672': attribute type 1 has an invalid length. [ 869.878873][ T2280] netlink: 'syz.4.6675': attribute type 1 has an invalid length. [ 869.883185][ T2242] tipc: Disabling bearer [ 870.304414][ T2280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 870.308170][ T2271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 870.341688][ T2292] batadv1: entered promiscuous mode [ 870.341712][ T2292] batadv1: entered allmulticast mode [ 870.595879][ T2308] netlink: 'syz.3.6678': attribute type 21 has an invalid length. [ 870.732947][ T2311] ip6gretap0: entered allmulticast mode [ 871.118285][ T2336] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 871.249392][ T2343] netlink: 'syz.2.6687': attribute type 12 has an invalid length. [ 871.249414][ T2343] netlink: 'syz.2.6687': attribute type 29 has an invalid length. [ 871.249451][ T2343] netlink: 'syz.2.6687': attribute type 3 has an invalid length. [ 871.249464][ T2343] netlink: 'syz.2.6687': attribute type 2 has an invalid length. [ 871.250772][ T2342] syzkaller0: left promiscuous mode [ 871.250792][ T2342] syzkaller0: left allmulticast mode [ 871.414045][ T2343] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 871.441437][ T2360] ip_tables: iptables: counters copy to user failed while replacing table [ 872.279074][ T2384] 0: reclassify loop, rule prio 0, protocol 800 [ 872.545630][ T2404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 872.926438][ T50] IPVS: starting estimator thread 0... [ 873.020614][ T2425] IPVS: using max 29 ests per chain, 69600 per kthread [ 873.482421][ T2460] __nla_validate_parse: 9 callbacks suppressed [ 873.482440][ T2460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6707'. [ 873.545441][ T2471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6710'. [ 873.578663][ T2471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6710'. [ 873.774967][ T2472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6710'. [ 874.278533][ T2500] validate_nla: 2 callbacks suppressed [ 874.278552][ T2500] netlink: 'syz.2.6712': attribute type 1 has an invalid length. [ 874.342263][ T2501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6712'. [ 874.442929][ T2500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 874.553218][ T2516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6713'. [ 874.602893][ T2516] vlan3: entered promiscuous mode [ 875.049382][ T2540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6716'. [ 875.134343][ T2548] tc_dump_action: action bad kind [ 875.300391][ T2548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6718'. [ 875.395373][ T9361] IPVS: starting estimator thread 0... [ 875.431865][ T2580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6721'. [ 875.477707][ T2581] IPVS: using max 31 ests per chain, 74400 per kthread [ 875.655450][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6724'. [ 875.931467][ T2598] ±ÿ: renamed from lo [ 876.691700][ T2633] netlink: 'syz.1.6729': attribute type 1 has an invalid length. [ 876.736253][ T2633] 8021q: adding VLAN 0 to HW filter on device bond5 [ 876.748796][ T2636] x_tables: duplicate underflow at hook 4 [ 876.771297][ T2633] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 877.428289][ T2674] 8021q: adding VLAN 0 to HW filter on device bond4 [ 877.474410][ T2678] syzkaller1: entered promiscuous mode [ 877.474432][ T2678] syzkaller1: entered allmulticast mode [ 878.080054][ T2691] bond0: Caught tx_queue_len zero misconfig [ 878.112429][ T2692] macvtap1: entered allmulticast mode [ 878.134649][ T2694] bond4: (slave sit1): refused to change device type [ 878.244102][ T2699] gre1: entered allmulticast mode [ 878.463773][ T2722] FAULT_INJECTION: forcing a failure. [ 878.463773][ T2722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.463806][ T2722] CPU: 0 UID: 0 PID: 2722 Comm: syz.4.6749 Not tainted syzkaller #0 PREEMPT(full) [ 878.463827][ T2722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 878.463838][ T2722] Call Trace: [ 878.463846][ T2722] [ 878.463855][ T2722] dump_stack_lvl+0xe8/0x150 [ 878.463886][ T2722] should_fail_ex+0x410/0x560 [ 878.463915][ T2722] _copy_from_user+0x2d/0xb0 [ 878.463951][ T2722] __sys_bpf+0x2e7/0xd90 [ 878.463984][ T2722] ? __pfx___sys_bpf+0x10/0x10 [ 878.464018][ T2722] ? __fget_files+0x2a/0x420 [ 878.464064][ T2722] ? ksys_write+0x242/0x270 [ 878.464096][ T2722] ? __pfx_ksys_write+0x10/0x10 [ 878.464129][ T2722] __x64_sys_bpf+0xba/0xd0 [ 878.464153][ T2722] do_syscall_64+0x166/0x520 [ 878.464178][ T2722] ? trace_irq_disable+0x3b/0x140 [ 878.464198][ T2722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.464218][ T2722] ? clear_bhb_loop+0x70/0xc0 [ 878.464242][ T2722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.464261][ T2722] RIP: 0033:0x7ff02759e159 [ 878.464280][ T2722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.464297][ T2722] RSP: 002b:00007ff02847a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.464318][ T2722] RAX: ffffffffffffffda RBX: 00007ff027825fa0 RCX: 00007ff02759e159 [ 878.464333][ T2722] RDX: 0000000000000094 RSI: 000020000000e000 RDI: 0000000000000005 [ 878.464345][ T2722] RBP: 00007ff02847a090 R08: 0000000000000000 R09: 0000000000000000 [ 878.464358][ T2722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.464370][ T2722] R13: 00007ff027826038 R14: 00007ff027825fa0 R15: 00007fff91b27588 [ 878.464403][ T2722] [ 878.713690][ T2732] __nla_validate_parse: 5 callbacks suppressed [ 878.713710][ T2732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6752'. [ 878.912409][ T2745] openvswitch: netlink: Message has 8 unknown bytes. [ 879.195041][ T2709] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 879.195688][ T2709] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 879.364213][ T2770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6759'. [ 879.479890][ T2782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6761'. [ 879.613422][ T2795] FAULT_INJECTION: forcing a failure. [ 879.613422][ T2795] name failslab, interval 1, probability 0, space 0, times 0 [ 879.613454][ T2795] CPU: 0 UID: 0 PID: 2795 Comm: syz.2.6763 Not tainted syzkaller #0 PREEMPT(full) [ 879.613475][ T2795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 879.613486][ T2795] Call Trace: [ 879.613494][ T2795] [ 879.613503][ T2795] dump_stack_lvl+0xe8/0x150 [ 879.613533][ T2795] should_fail_ex+0x410/0x560 [ 879.613560][ T2795] should_failslab+0xa8/0x100 [ 879.613586][ T2795] __kmalloc_cache_node_noprof+0xaa/0x620 [ 879.613608][ T2795] ? __get_vm_area_node+0x155/0x2f0 [ 879.613669][ T2795] ? __get_vm_area_node+0x155/0x2f0 [ 879.613701][ T2795] __get_vm_area_node+0x155/0x2f0 [ 879.613733][ T2795] __vmalloc_node_range_noprof+0x343/0x1540 [ 879.613759][ T2795] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 879.613790][ T2795] ? __lock_acquire+0x747/0x2de0 [ 879.613836][ T2795] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 879.613881][ T2795] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 879.613901][ T2795] __vmalloc_noprof+0xd2/0x120 [ 879.613929][ T2795] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 879.613953][ T2795] bpf_prog_alloc_no_stats+0x47/0x560 [ 879.613975][ T2795] ? bpf_prog_alloc+0x2a/0x1a0 [ 879.613998][ T2795] bpf_prog_alloc+0x3c/0x1a0 [ 879.614022][ T2795] bpf_prog_load+0x7f8/0x1c20 [ 879.614056][ T2795] ? __pfx_bpf_prog_load+0x10/0x10 [ 879.614103][ T2795] __sys_bpf+0xd0d/0xd90 [ 879.614131][ T2795] ? __pfx___sys_bpf+0x10/0x10 [ 879.614162][ T2795] ? __fget_files+0x2a/0x420 [ 879.614206][ T2795] ? ksys_write+0x242/0x270 [ 879.614236][ T2795] ? __pfx_ksys_write+0x10/0x10 [ 879.614269][ T2795] __x64_sys_bpf+0xba/0xd0 [ 879.614292][ T2795] do_syscall_64+0x166/0x520 [ 879.614317][ T2795] ? trace_irq_disable+0x3b/0x140 [ 879.614337][ T2795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.614356][ T2795] ? clear_bhb_loop+0x70/0xc0 [ 879.614379][ T2795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.614399][ T2795] RIP: 0033:0x7f8e5199e159 [ 879.614420][ T2795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.614436][ T2795] RSP: 002b:00007f8e52922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.614456][ T2795] RAX: ffffffffffffffda RBX: 00007f8e51c25fa0 RCX: 00007f8e5199e159 [ 879.614470][ T2795] RDX: 0000000000000094 RSI: 000020000000e000 RDI: 0000000000000005 [ 879.614483][ T2795] RBP: 00007f8e52922090 R08: 0000000000000000 R09: 0000000000000000 [ 879.614495][ T2795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.614507][ T2795] R13: 00007f8e51c26038 R14: 00007f8e51c25fa0 R15: 00007ffcb2b5a238 [ 879.614539][ T2795] [ 879.649478][ T2795] syz.2.6763: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 879.649579][ T2795] CPU: 0 UID: 0 PID: 2795 Comm: syz.2.6763 Not tainted syzkaller #0 PREEMPT(full) [ 879.649600][ T2795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 879.649611][ T2795] Call Trace: [ 879.649619][ T2795] [ 879.649627][ T2795] dump_stack_lvl+0xe8/0x150 [ 879.649659][ T2795] warn_alloc+0x24d/0x270 [ 879.649678][ T2795] ? __kasan_kmalloc+0x22/0xb0 [ 879.649703][ T2795] ? __pfx_warn_alloc+0x10/0x10 [ 879.649720][ T2795] ? __get_vm_area_node+0x155/0x2f0 [ 879.649752][ T2795] ? __get_vm_area_node+0x2a9/0x2f0 [ 879.649785][ T2795] __vmalloc_node_range_noprof+0x36b/0x1540 [ 879.649813][ T2795] ? __lock_acquire+0x747/0x2de0 [ 879.649864][ T2795] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 879.649900][ T2795] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 879.649923][ T2795] __vmalloc_noprof+0xd2/0x120 [ 879.649949][ T2795] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 879.649974][ T2795] bpf_prog_alloc_no_stats+0x47/0x560 [ 879.649994][ T2795] ? bpf_prog_alloc+0x2a/0x1a0 [ 879.650016][ T2795] bpf_prog_alloc+0x3c/0x1a0 [ 879.650040][ T2795] bpf_prog_load+0x7f8/0x1c20 [ 879.650072][ T2795] ? __pfx_bpf_prog_load+0x10/0x10 [ 879.650119][ T2795] __sys_bpf+0xd0d/0xd90 [ 879.650147][ T2795] ? __pfx___sys_bpf+0x10/0x10 [ 879.650178][ T2795] ? __fget_files+0x2a/0x420 [ 879.650220][ T2795] ? ksys_write+0x242/0x270 [ 879.650250][ T2795] ? __pfx_ksys_write+0x10/0x10 [ 879.650281][ T2795] __x64_sys_bpf+0xba/0xd0 [ 879.650303][ T2795] do_syscall_64+0x166/0x520 [ 879.650327][ T2795] ? trace_irq_disable+0x3b/0x140 [ 879.650346][ T2795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.650365][ T2795] ? clear_bhb_loop+0x70/0xc0 [ 879.650386][ T2795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.650405][ T2795] RIP: 0033:0x7f8e5199e159 [ 879.650422][ T2795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.650438][ T2795] RSP: 002b:00007f8e52922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.650456][ T2795] RAX: ffffffffffffffda RBX: 00007f8e51c25fa0 RCX: 00007f8e5199e159 [ 879.650470][ T2795] RDX: 0000000000000094 RSI: 000020000000e000 RDI: 0000000000000005 [ 879.650482][ T2795] RBP: 00007f8e52922090 R08: 0000000000000000 R09: 0000000000000000 [ 879.650493][ T2795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.650507][ T2795] R13: 00007f8e51c26038 R14: 00007f8e51c25fa0 R15: 00007ffcb2b5a238 [ 879.650537][ T2795] [ 879.650574][ T2795] Mem-Info: [ 879.650584][ T2795] active_anon:8473 inactive_anon:0 isolated_anon:0 [ 879.650584][ T2795] active_file:121 inactive_file:43652 isolated_file:0 [ 879.650584][ T2795] unevictable:0 dirty:229 writeback:0 [ 879.650584][ T2795] slab_reclaimable:13265 slab_unreclaimable:137445 [ 879.650584][ T2795] mapped:32251 shmem:3109 pagetables:1656 [ 879.650584][ T2795] sec_pagetables:0 bounce:0 [ 879.650584][ T2795] kernel_misc_reclaimable:0 [ 879.650584][ T2795] free:1237043 free_pcp:12355 free_cma:0 [ 879.650634][ T2795] Node 0 active_anon:33892kB inactive_anon:0kB active_file:484kB inactive_file:174408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129004kB dirty:916kB writeback:0kB shmem:12436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20672kB pagetables:6476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 879.650683][ T2795] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 879.650732][ T2795] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 879.650783][ T2795] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 879.650816][ T2795] Node 0 DMA32 free:979528kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33892kB inactive_anon:0kB active_file:484kB inactive_file:174408kB unevictable:0kB writepending:916kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:49420kB local_pcp:21472kB free_cma:0kB [ 879.650873][ T2795] lowmem_reserve[]: 0 0 0 0 0 [ 879.650904][ T2795] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 879.650951][ T2795] lowmem_reserve[]: 0 0 0 0 0 [ 879.650981][ T2795] Node 1 Normal free:3953284kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 879.652807][ T2795] lowmem_reserve[]: 0 0 0 0 0 [ 879.652842][ T2795] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 879.652951][ T2795] Node 0 DMA32: 1869*4kB (UME) 1108*8kB (UME) 323*16kB (UME) 708*32kB (UM) 1327*64kB (UME) 845*128kB (UM) 443*256kB (UME) 244*512kB (UME) 94*1024kB (UME) 5*2048kB (UM) 97*4096kB (UM) = 979396kB [ 879.653090][ T2795] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 879.653177][ T2795] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 10*16kB (UM) 5*32kB (UM) 10*64kB (UM) 7*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 962*4096kB (M) = 3953284kB [ 879.653314][ T2795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.653330][ T2795] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 879.653351][ T2795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.653365][ T2795] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 879.653379][ T2795] 46903 total pagecache pages [ 879.653391][ T2795] 0 pages in swap cache [ 879.653398][ T2795] Free swap = 124996kB [ 879.653405][ T2795] Total swap = 124996kB [ 879.653412][ T2795] 2097051 pages RAM [ 879.653419][ T2795] 0 pages HighMem/MovableOnly [ 879.653426][ T2795] 428722 pages reserved [ 879.653433][ T2795] 0 pages cma reserved [ 880.748319][ T2812] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 880.773407][ T2819] netlink: 'syz.2.6768': attribute type 20 has an invalid length. [ 880.773426][ T2819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6768'. [ 880.801833][ T2812] bond10 (unregistering): Released all slaves [ 880.929844][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6769'. [ 881.040346][ T2819] netlink: 'syz.2.6768': attribute type 20 has an invalid length. [ 881.040368][ T2819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6768'. [ 881.157902][ T9372] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.157949][ T9372] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.157978][ T9372] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.158006][ T9372] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.241178][ T2847] xt_ecn: cannot match TCP bits for non-tcp packets [ 881.397726][ T2856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6773'. [ 881.761316][ T2874] FAULT_INJECTION: forcing a failure. [ 881.761316][ T2874] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 881.761348][ T2874] CPU: 1 UID: 0 PID: 2874 Comm: syz.0.6775 Not tainted syzkaller #0 PREEMPT(full) [ 881.761367][ T2874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 881.761378][ T2874] Call Trace: [ 881.761386][ T2874] [ 881.761394][ T2874] dump_stack_lvl+0xe8/0x150 [ 881.761426][ T2874] should_fail_ex+0x410/0x560 [ 881.761450][ T2874] prepare_alloc_pages+0x223/0x600 [ 881.761473][ T2874] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 881.761493][ T2874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 881.761513][ T2874] ? __pfx_policy_nodemask+0x10/0x10 [ 881.761530][ T2874] ? __get_vm_area_node+0x155/0x2f0 [ 881.761550][ T2874] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 881.761571][ T2874] ? __vmalloc_noprof+0xd2/0x120 [ 881.761590][ T2874] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 881.761608][ T2874] ? bpf_prog_alloc+0x3c/0x1a0 [ 881.761623][ T2874] ? __sys_bpf+0xd0d/0xd90 [ 881.761638][ T2874] ? __x64_sys_bpf+0xba/0xd0 [ 881.761650][ T2874] ? do_syscall_64+0x166/0x520 [ 881.761672][ T2874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.761691][ T2874] alloc_pages_mpol+0x21e/0x390 [ 881.761714][ T2874] alloc_pages_noprof+0xb1/0x2b0 [ 881.761734][ T2874] get_free_pages_noprof+0xf/0x80 [ 881.761751][ T2874] __kasan_populate_vmalloc+0x38/0x1c0 [ 881.761766][ T2874] ? do_raw_spin_unlock+0xf5/0x200 [ 881.761791][ T2874] alloc_vmap_area+0xd1a/0x1420 [ 881.761830][ T2874] ? __pfx_alloc_vmap_area+0x10/0x10 [ 881.761848][ T2874] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 881.761864][ T2874] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 881.761879][ T2874] ? __get_vm_area_node+0x155/0x2f0 [ 881.761903][ T2874] __get_vm_area_node+0x200/0x2f0 [ 881.761928][ T2874] __vmalloc_node_range_noprof+0x343/0x1540 [ 881.761950][ T2874] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 881.761968][ T2874] ? __lock_acquire+0x747/0x2de0 [ 881.762001][ T2874] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 881.762030][ T2874] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 881.762045][ T2874] __vmalloc_noprof+0xd2/0x120 [ 881.762071][ T2874] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 881.762090][ T2874] bpf_prog_alloc_no_stats+0x47/0x560 [ 881.762106][ T2874] ? bpf_prog_alloc+0x2a/0x1a0 [ 881.762124][ T2874] bpf_prog_alloc+0x3c/0x1a0 [ 881.762146][ T2874] bpf_prog_load+0x7f8/0x1c20 [ 881.762172][ T2874] ? __pfx_bpf_prog_load+0x10/0x10 [ 881.762209][ T2874] __sys_bpf+0xd0d/0xd90 [ 881.762232][ T2874] ? __pfx___sys_bpf+0x10/0x10 [ 881.762256][ T2874] ? __fget_files+0x2a/0x420 [ 881.762290][ T2874] ? ksys_write+0x242/0x270 [ 881.762315][ T2874] ? __pfx_ksys_write+0x10/0x10 [ 881.762343][ T2874] __x64_sys_bpf+0xba/0xd0 [ 881.762364][ T2874] do_syscall_64+0x166/0x520 [ 881.762386][ T2874] ? trace_irq_disable+0x3b/0x140 [ 881.762408][ T2874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.762427][ T2874] ? clear_bhb_loop+0x70/0xc0 [ 881.762450][ T2874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.762469][ T2874] RIP: 0033:0x7f67d8d9e159 [ 881.762487][ T2874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.762503][ T2874] RSP: 002b:00007f67d9ce5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 881.762523][ T2874] RAX: ffffffffffffffda RBX: 00007f67d9025fa0 RCX: 00007f67d8d9e159 [ 881.762537][ T2874] RDX: 0000000000000094 RSI: 000020000000e000 RDI: 0000000000000005 [ 881.762549][ T2874] RBP: 00007f67d9ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 881.762561][ T2874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.762572][ T2874] R13: 00007f67d9026038 R14: 00007f67d9025fa0 R15: 00007fff1896cdd8 [ 881.762604][ T2874] [ 882.119886][ T2890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6777'. [ 882.190665][ T2895] netlink: 'syz.2.6778': attribute type 1 has an invalid length. [ 882.215952][ T2896] netlink: 'syz.1.6777': attribute type 7 has an invalid length. [ 882.237204][ T2890] 8021q: adding VLAN 0 to HW filter on device bond6 [ 882.237227][ T2901] netlink: 'syz.0.6779': attribute type 4 has an invalid length. [ 882.240459][ T2901] netlink: 'syz.0.6779': attribute type 4 has an invalid length. [ 882.268837][ T2897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6778'. [ 882.269013][ T2897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6778'. [ 882.353769][ T2895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 882.369313][ T2896] bond6: (slave batadv1): Opening slave failed [ 882.413996][ T2895] netlink: 'syz.2.6778': attribute type 10 has an invalid length. [ 882.414108][ T2895] : entered promiscuous mode [ 882.901333][ T2922] netlink: 'syz.1.6786': attribute type 34 has an invalid length. [ 882.918727][ T2917] x_tables: duplicate underflow at hook 1 [ 883.039642][ T2931] FAULT_INJECTION: forcing a failure. [ 883.039642][ T2931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 883.039673][ T2931] CPU: 1 UID: 0 PID: 2931 Comm: syz.2.6789 Not tainted syzkaller #0 PREEMPT(full) [ 883.039694][ T2931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 883.039706][ T2931] Call Trace: [ 883.039714][ T2931] [ 883.039723][ T2931] dump_stack_lvl+0xe8/0x150 [ 883.039754][ T2931] should_fail_ex+0x410/0x560 [ 883.039783][ T2931] prepare_alloc_pages+0x223/0x600 [ 883.039811][ T2931] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 883.039834][ T2931] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 883.039853][ T2931] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 883.039876][ T2931] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 883.039899][ T2931] ? __pfx_policy_nodemask+0x10/0x10 [ 883.039921][ T2931] ? __get_vm_area_node+0x155/0x2f0 [ 883.039946][ T2931] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 883.039973][ T2931] ? __vmalloc_noprof+0xd2/0x120 [ 883.040002][ T2931] __alloc_pages_noprof+0x10/0x100 [ 883.040025][ T2931] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 883.040055][ T2931] ? alloc_pages_noprof+0x140/0x2b0 [ 883.040083][ T2931] __kasan_populate_vmalloc+0xb7/0x1c0 [ 883.040110][ T2931] alloc_vmap_area+0xd1a/0x1420 [ 883.040149][ T2931] ? __pfx_alloc_vmap_area+0x10/0x10 [ 883.040171][ T2931] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 883.040191][ T2931] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 883.040209][ T2931] ? __get_vm_area_node+0x155/0x2f0 [ 883.040240][ T2931] __get_vm_area_node+0x200/0x2f0 [ 883.040273][ T2931] __vmalloc_node_range_noprof+0x343/0x1540 [ 883.040299][ T2931] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 883.040321][ T2931] ? __lock_acquire+0x747/0x2de0 [ 883.040364][ T2931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 883.040400][ T2931] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 883.040419][ T2931] __vmalloc_noprof+0xd2/0x120 [ 883.040446][ T2931] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 883.040470][ T2931] bpf_prog_alloc_no_stats+0x47/0x560 [ 883.040491][ T2931] ? bpf_prog_alloc+0x2a/0x1a0 [ 883.040515][ T2931] bpf_prog_alloc+0x3c/0x1a0 [ 883.040543][ T2931] bpf_prog_load+0x7f8/0x1c20 [ 883.040584][ T2931] ? __pfx_bpf_prog_load+0x10/0x10 [ 883.040632][ T2931] __sys_bpf+0xd0d/0xd90 [ 883.040662][ T2931] ? __pfx___sys_bpf+0x10/0x10 [ 883.040693][ T2931] ? __fget_files+0x2a/0x420 [ 883.040738][ T2931] ? ksys_write+0x242/0x270 [ 883.040768][ T2931] ? __pfx_ksys_write+0x10/0x10 [ 883.040801][ T2931] __x64_sys_bpf+0xba/0xd0 [ 883.040824][ T2931] do_syscall_64+0x166/0x520 [ 883.040848][ T2931] ? trace_irq_disable+0x3b/0x140 [ 883.040867][ T2931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.040887][ T2931] ? clear_bhb_loop+0x70/0xc0 [ 883.040910][ T2931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.040927][ T2931] RIP: 0033:0x7f8e5199e159 [ 883.040945][ T2931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.040965][ T2931] RSP: 002b:00007f8e52922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 883.040985][ T2931] RAX: ffffffffffffffda RBX: 00007f8e51c25fa0 RCX: 00007f8e5199e159 [ 883.040999][ T2931] RDX: 0000000000000094 RSI: 000020000000e000 RDI: 0000000000000005 [ 883.041010][ T2931] RBP: 00007f8e52922090 R08: 0000000000000000 R09: 0000000000000000 [ 883.041022][ T2931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.041033][ T2931] R13: 00007f8e51c26038 R14: 00007f8e51c25fa0 R15: 00007ffcb2b5a238 [ 883.041064][ T2931] [ 883.175846][ T2927] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 883.232841][ T2930] batadv_slave_1: entered promiscuous mode [ 883.233074][ T2936] batadv_slave_1: left promiscuous mode [ 883.434969][ T2955] syz_tun: entered allmulticast mode [ 883.575546][ T2951] dvmrp6: entered allmulticast mode [ 883.941885][ T2976] syzkaller0: entered promiscuous mode [ 883.941909][ T2976] syzkaller0: entered allmulticast mode [ 883.947525][ T2975] netlink: 'syz.3.6797': attribute type 4 has an invalid length. [ 884.023613][ T2975] netlink: 'syz.3.6797': attribute type 4 has an invalid length. [ 884.110812][ T2984] 8021q: adding VLAN 0 to HW filter on device bond8 [ 884.141709][ T2949] syz_tun: left allmulticast mode [ 884.467425][ T3003] __nla_validate_parse: 52 callbacks suppressed [ 884.467446][ T3003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6804'. [ 884.467513][ T3003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6804'. [ 884.546179][ T3008] Bluetooth: hci0: invalid len left 17, exp >= 93 [ 884.586588][ T3012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6803'. [ 884.883323][ T3020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6807'. [ 887.311584][ T3020] macsec1: entered promiscuous mode [ 887.671582][ T3037] syzkaller0: entered promiscuous mode [ 887.671606][ T3037] syzkaller0: entered allmulticast mode [ 887.965225][ T3056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6817'. [ 887.998668][ T3052] validate_nla: 3 callbacks suppressed [ 887.998688][ T3052] netlink: 'syz.1.6815': attribute type 1 has an invalid length. [ 888.171461][ T3052] 8021q: adding VLAN 0 to HW filter on device bond7 [ 888.225805][ T3057] bond7: (slave dummy0): making interface the new active one [ 888.235406][ T3057] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 888.243395][ T3066] : renamed from dummy0 (while UP) [ 888.868073][ T3098] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 888.868106][ T3098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.895815][ T3084] bond10: option updelay: invalid value (18446744073709518847) [ 888.895839][ T3084] bond10: option updelay: allowed values 0 - 2147483647 [ 888.913695][ T3084] bond10 (unregistering): Released all slaves [ 888.992535][ T3038] syzkaller1: entered promiscuous mode [ 888.992558][ T3038] syzkaller1: entered allmulticast mode [ 889.247789][ T3121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6830'. [ 889.247810][ T3121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6830'. [ 889.290274][ T3125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6830'. [ 889.290296][ T3125] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6830'. [ 889.914717][ T3142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6833'. [ 890.279727][ T3153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6835'. [ 890.878824][ T3189] lo: entered promiscuous mode [ 891.162078][ T3189] tunl0: entered promiscuous mode [ 891.178624][ T3189] gre0: entered promiscuous mode [ 891.213264][ T3203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6847'. [ 891.214801][ T3204] netlink: 'syz.4.6848': attribute type 4 has an invalid length. [ 891.230789][ T3189] gretap0: entered promiscuous mode [ 891.260145][ T3205] netlink: 'syz.4.6848': attribute type 4 has an invalid length. [ 891.302255][ T3189] erspan0: entered promiscuous mode [ 891.350437][ T3189] ip_vti0: entered promiscuous mode [ 891.435649][ T3189] ip6_vti0: entered promiscuous mode [ 891.459070][ T3189] sit0: entered promiscuous mode [ 891.489744][ T3220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6850'. [ 891.490635][ T3220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.511452][ T3189] ip6tnl0: entered promiscuous mode [ 891.567604][ T3225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6851'. [ 891.567632][ T3225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6851'. [ 891.575411][ T3189] ip6gre0: entered promiscuous mode [ 891.617345][ T3189] syz_tun: entered promiscuous mode [ 891.665604][ T3189] ip6gretap0: entered promiscuous mode [ 891.700945][ T3189] bridge0: entered promiscuous mode [ 891.712711][ T3236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6853'. [ 891.719080][ T3189] vcan0: entered promiscuous mode [ 891.747946][ T3189] bond0: entered promiscuous mode [ 891.775455][ T3189] team0: entered promiscuous mode [ 891.787029][ T3189] : entered promiscuous mode [ 891.789317][ T3189] nlmon0: entered promiscuous mode [ 891.792311][ T3189] batadv0: entered promiscuous mode [ 891.817382][ T3189] vxcan0: entered promiscuous mode [ 891.895541][ T3189] vxcan1: entered promiscuous mode [ 891.904423][ T3189] veth0: entered promiscuous mode [ 891.919023][ T3189] veth1: entered promiscuous mode [ 891.925531][ T3189] wg0: entered promiscuous mode [ 891.941871][ T3189] wg1: entered promiscuous mode [ 891.959408][ T3189] wg2: entered promiscuous mode [ 891.962971][ T3189] veth0_to_bridge: entered promiscuous mode [ 891.979398][ T3189] bridge_slave_0: entered promiscuous mode [ 891.983825][ T3189] veth1_to_bridge: entered promiscuous mode [ 892.001406][ T3189] bridge_slave_1: entered promiscuous mode [ 892.015413][ T3189] veth0_to_bond: entered promiscuous mode [ 892.062618][ T3189] bond_slave_0: entered promiscuous mode [ 892.079046][ T3189] veth1_to_bond: entered promiscuous mode [ 892.095287][ T3189] bond_slave_1: entered promiscuous mode [ 892.111887][ T3189] veth0_to_team: entered promiscuous mode [ 892.129246][ T3189] team_slave_0: entered promiscuous mode [ 892.154402][ T3189] veth1_to_team: entered promiscuous mode [ 892.157616][ T3189] team_slave_1: entered promiscuous mode [ 892.182654][ T3189] veth0_to_batadv: entered promiscuous mode [ 892.199896][ T3189] batadv_slave_0: entered promiscuous mode [ 892.226773][ T3189] veth1_to_batadv: entered promiscuous mode [ 892.229748][ T3189] batadv_slave_1: entered promiscuous mode [ 892.258507][ T3189] xfrm0: entered promiscuous mode [ 892.279509][ T3189] veth0_to_hsr: entered promiscuous mode [ 892.314726][ T3189] veth1_to_hsr: entered promiscuous mode [ 892.345723][ T3189] hsr0: entered promiscuous mode [ 892.360656][ T3189] veth1_virt_wifi: entered promiscuous mode [ 892.379253][ T3189] veth0_virt_wifi: entered promiscuous mode [ 892.398992][ T3189] virt_wifi0: entered promiscuous mode [ 892.416026][ T3189] vlan0: entered promiscuous mode [ 892.423425][ T3189] vlan1: entered promiscuous mode [ 892.425557][ T3189] macvlan0: entered promiscuous mode [ 892.453747][ T3189] macvlan1: entered promiscuous mode [ 892.474025][ T3189] ipvlan0: entered promiscuous mode [ 892.487268][ T3189] ipvlan1: entered promiscuous mode [ 892.532515][ T3189] macvtap0: entered promiscuous mode [ 892.544603][ T3189] macsec0: entered promiscuous mode [ 892.559281][ T3189] geneve0: entered promiscuous mode [ 892.575573][ T3189] geneve1: entered promiscuous mode [ 892.598488][ T3189] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 892.606105][ T3189] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 892.621319][ T3189] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 892.635667][ T3189] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 892.665938][ T3189] mac80211_hwsim hwsim96 wlan1: entered promiscuous mode [ 892.666026][ T3189] vlan1.0: entered promiscuous mode [ 892.680347][ T3189] macvlan2: entered promiscuous mode [ 892.684788][ T3189] gre1: entered promiscuous mode [ 892.741763][ T3189] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 892.744885][ T3189] ip6gretap1: entered promiscuous mode [ 892.759262][ T3189] bridge1: entered promiscuous mode [ 892.764332][ T3189] bridge2: entered promiscuous mode [ 892.772857][ T3189] bond1: entered promiscuous mode [ 892.778279][ T3189] bridge3: entered promiscuous mode [ 892.781769][ T3189] vlan2: entered promiscuous mode [ 892.783381][ T3189] mac80211_hwsim hwsim95 syzkallerB: entered promiscuous mode [ 892.788015][ T3189] bridge4: entered promiscuous mode [ 892.792461][ T3189] bond2: entered promiscuous mode [ 892.792477][ T3189] gretap1: entered promiscuous mode [ 892.805524][ T3189] bond3: entered promiscuous mode [ 892.805544][ T3189] batadv1: entered promiscuous mode [ 892.825907][ T3189] veth2: entered promiscuous mode [ 892.832626][ T3189] veth3: entered promiscuous mode [ 892.843756][ T3189] mac80211_hwsim hwsim110 wlan2: entered promiscuous mode [ 892.845309][ T3189] ipvlan2: entered promiscuous mode [ 892.848249][ T3189] vxcan2: entered promiscuous mode [ 892.848404][ T3189] vxcan3: entered promiscuous mode [ 892.853815][ T3189] bond4: entered promiscuous mode [ 892.855296][ T3189] macvtap1: entered promiscuous mode [ 892.855449][ T3189] bridge5: entered promiscuous mode [ 892.910948][T28028] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.910983][T28028] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 46398 - 0 [ 892.912328][T28028] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.912356][T28028] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 46398 - 0 [ 892.912393][T28028] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.912416][T28028] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 46398 - 0 [ 892.916195][ T3225] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 893.053393][ T3247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6854'. [ 893.053418][ T3247] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6854'. [ 893.053540][ T3247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6854'. [ 893.272651][ T3256] openvswitch: netlink: Flow key attr not present in new flow. [ 893.359023][ T3263] veth0: entered promiscuous mode [ 893.513865][ T3264] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 893.513895][ T3264] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 893.518574][ T3264] bond5 (unregistering): Released all slaves [ 893.594010][ T3268] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 893.637013][ T3262] veth0: left promiscuous mode [ 893.812793][ T3282] netlink: 'syz.2.6867': attribute type 1 has an invalid length. [ 893.922737][ T3297] netlink: 'syz.3.6868': attribute type 58 has an invalid length. [ 893.999432][ T3315] netlink: 'syz.3.6868': attribute type 58 has an invalid length. [ 894.533086][ T3322] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 894.562243][ T3322] bond5: (slave lo): Enslaving as an active interface with an up link [ 894.587690][ T3322] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 895.279854][ T3356] Bluetooth: MGMT ver 1.23 [ 895.395781][ T3362] netlink: 'syz.2.6884': attribute type 3 has an invalid length. [ 895.395802][ T3362] __nla_validate_parse: 27 callbacks suppressed [ 895.395826][ T3362] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6884'. [ 895.545049][ T3373] ovs-s: entered promiscuous mode [ 895.593168][ T3373] openvswitch: ovs-s: Dropping previously announced user features [ 895.876294][ T3390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6893'. [ 896.008996][ T3399] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6895'. [ 896.155888][ T3402] netlink: 'syz.0.6897': attribute type 21 has an invalid length. [ 896.278868][ T3397] dvmrp0: entered allmulticast mode [ 896.279736][ T3402] netlink: 'syz.0.6897': attribute type 3 has an invalid length. [ 896.279755][ T3402] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6897'. [ 896.332182][ T3400] dvmrp1: entered allmulticast mode [ 896.333476][ T3410] dvmrp0: left allmulticast mode [ 896.333578][ T3410] dvmrp1: left allmulticast mode [ 896.381025][ T3414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6898'. [ 896.620796][ T3423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6898'. [ 896.620976][ T3423] block nbd7: server does not support multiple connections per device. [ 896.621296][ T3423] block nbd7: shutting down sockets [ 896.859341][ T3436] netlink: 'syz.0.6903': attribute type 2 has an invalid length. [ 896.896171][ T3436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6903'. [ 897.188330][ T3447] netlink: 'syz.4.6904': attribute type 6 has an invalid length. [ 897.188352][ T3447] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6904'. [ 897.264295][ T3450] netlink: 'syz.2.6907': attribute type 1 has an invalid length. [ 897.353950][ T3450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 897.369403][ T3450] FAULT_INJECTION: forcing a failure. [ 897.369403][ T3450] name failslab, interval 1, probability 0, space 0, times 0 [ 897.369434][ T3450] CPU: 1 UID: 0 PID: 3450 Comm: syz.2.6907 Not tainted syzkaller #0 PREEMPT(full) [ 897.369455][ T3450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 897.369467][ T3450] Call Trace: [ 897.369475][ T3450] [ 897.369484][ T3450] dump_stack_lvl+0xe8/0x150 [ 897.369517][ T3450] should_fail_ex+0x410/0x560 [ 897.369546][ T3450] should_failslab+0xa8/0x100 [ 897.369572][ T3450] __kmalloc_noprof+0xfe/0x720 [ 897.369592][ T3450] ? tomoyo_encode+0x2ad/0x570 [ 897.369617][ T3450] ? tomoyo_encode+0x2ad/0x570 [ 897.369650][ T3450] tomoyo_encode+0x2ad/0x570 [ 897.369680][ T3450] tomoyo_realpath_from_path+0x5fa/0x640 [ 897.369716][ T3450] ? tomoyo_path_number_perm+0x219/0x5f0 [ 897.369738][ T3450] tomoyo_path_number_perm+0x246/0x5f0 [ 897.369764][ T3450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 897.369787][ T3450] ? __lock_acquire+0x747/0x2de0 [ 897.369824][ T3450] ? hook_file_ioctl+0x1f2/0x600 [ 897.369869][ T3450] ? __fget_files+0x2a/0x420 [ 897.369898][ T3450] ? __fget_files+0x2a/0x420 [ 897.369922][ T3450] ? __fget_files+0x3a2/0x420 [ 897.369946][ T3450] ? __fget_files+0x2a/0x420 [ 897.369976][ T3450] security_file_ioctl+0xc3/0x2a0 [ 897.370000][ T3450] __se_sys_ioctl+0x47/0x170 [ 897.370025][ T3450] do_syscall_64+0x166/0x520 [ 897.370049][ T3450] ? trace_irq_disable+0x3b/0x140 [ 897.370069][ T3450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.370089][ T3450] ? clear_bhb_loop+0x70/0xc0 [ 897.370113][ T3450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.370132][ T3450] RIP: 0033:0x7f8e5199e159 [ 897.370150][ T3450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.370166][ T3450] RSP: 002b:00007f8e52922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.370193][ T3450] RAX: ffffffffffffffda RBX: 00007f8e51c25fa0 RCX: 00007f8e5199e159 [ 897.370207][ T3450] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000004 [ 897.370220][ T3450] RBP: 00007f8e52922090 R08: 0000000000000000 R09: 0000000000000000 [ 897.370232][ T3450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.370243][ T3450] R13: 00007f8e51c26038 R14: 00007f8e51c25fa0 R15: 00007ffcb2b5a238 [ 897.370277][ T3450] [ 897.370324][ T3450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 897.599720][ T3452] ovs-s: entered promiscuous mode [ 897.796723][ T3467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6911'. [ 897.796830][ T3467] openvswitch: netlink: Missing valid actions attribute. [ 897.804522][ T3464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6910'. [ 897.959960][ T3464] [ 897.962327][ T3464] ====================================================== [ 897.969349][ T3464] WARNING: possible circular locking dependency detected [ 897.976392][ T3464] syzkaller #0 Not tainted [ 897.980803][ T3464] ------------------------------------------------------ [ 897.987806][ T3464] syz.0.6910/3464 is trying to acquire lock: [ 897.993775][ T3464] ffff888025db8588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 898.003271][ T3464] [ 898.003271][ T3464] but task is already holding lock: [ 898.010625][ T3464] ffff888025db8060 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 898.020818][ T3464] [ 898.020818][ T3464] which lock already depends on the new lock. [ 898.020818][ T3464] [ 898.031210][ T3464] [ 898.031210][ T3464] the existing dependency chain (in reverse order) is: [ 898.040210][ T3464] [ 898.040210][ T3464] -> #6 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 898.048804][ T3464] blk_alloc_queue+0x544/0x690 [ 898.054162][ T3464] __blk_mq_alloc_disk+0x194/0x390 [ 898.059846][ T3464] nbd_dev_add+0x494/0xb60 [ 898.064819][ T3464] nbd_init+0x168/0x1f0 [ 898.069576][ T3464] do_one_initcall+0x250/0x870 [ 898.074861][ T3464] do_initcall_level+0x10a/0x1a0 [ 898.080345][ T3464] do_initcalls+0x59/0xa0 [ 898.085182][ T3464] kernel_init_freeable+0x29d/0x3e0 [ 898.090885][ T3464] kernel_init+0x22/0x1d0 [ 898.095725][ T3464] ret_from_fork+0x514/0xb70 [ 898.100852][ T3464] ret_from_fork_asm+0x1a/0x30 [ 898.106132][ T3464] [ 898.106132][ T3464] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 898.113327][ T3464] fs_reclaim_acquire+0x71/0x100 [ 898.118777][ T3464] __kmalloc_cache_node_noprof+0x66/0x620 [ 898.125014][ T3464] create_worker+0x112/0x7c0 [ 898.130143][ T3464] workqueue_prepare_cpu+0xe4/0x170 [ 898.135851][ T3464] cpuhp_invoke_callback+0x434/0x810 [ 898.141667][ T3464] _cpu_up+0x2ce/0x5b0 [ 898.146248][ T3464] cpu_up+0x1d2/0x220 [ 898.150743][ T3464] cpuhp_bringup_mask+0xb2/0x1a0 [ 898.156291][ T3464] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 898.162615][ T3464] bringup_nonboot_cpus+0x17/0x30 [ 898.168151][ T3464] smp_init+0x32/0x110 [ 898.172804][ T3464] kernel_init_freeable+0x27f/0x3e0 [ 898.178524][ T3464] kernel_init+0x22/0x1d0 [ 898.183368][ T3464] ret_from_fork+0x514/0xb70 [ 898.188475][ T3464] ret_from_fork_asm+0x1a/0x30 [ 898.193766][ T3464] [ 898.193766][ T3464] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 898.201491][ T3464] cpus_read_lock+0x42/0x160 [ 898.206596][ T3464] static_key_slow_inc+0x12/0x30 [ 898.212079][ T3464] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 898.218312][ T3464] nbd_genl_foreach_sock+0x265/0x450 [ 898.224112][ T3464] nbd_genl_reconfigure+0xbbb/0x1040 [ 898.229903][ T3464] genl_family_rcv_msg_doit+0x233/0x340 [ 898.235965][ T3464] genl_rcv_msg+0x614/0x7a0 [ 898.240980][ T3464] netlink_rcv_skb+0x226/0x4a0 [ 898.246260][ T3464] genl_rcv+0x28/0x40 [ 898.250753][ T3464] netlink_unicast+0x7bd/0x940 [ 898.256029][ T3464] netlink_sendmsg+0x813/0xb40 [ 898.261301][ T3464] sock_sendmsg_nosec+0x13a/0x180 [ 898.266838][ T3464] ____sys_sendmsg+0x54e/0x850 [ 898.272130][ T3464] ___sys_sendmsg+0x2a5/0x360 [ 898.277326][ T3464] __x64_sys_sendmsg+0x1b1/0x290 [ 898.282776][ T3464] do_syscall_64+0x166/0x520 [ 898.287881][ T3464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.294284][ T3464] [ 898.294284][ T3464] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 898.301919][ T3464] __mutex_lock+0x19d/0x1550 [ 898.307024][ T3464] nbd_queue_rq+0x373/0xff0 [ 898.312040][ T3464] blk_mq_dispatch_rq_list+0x499/0x1990 [ 898.318099][ T3464] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 898.324939][ T3464] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 898.331427][ T3464] blk_mq_run_work_fn+0x16c/0x300 [ 898.336965][ T3464] process_scheduled_works+0xc3d/0x1630 [ 898.343023][ T3464] worker_thread+0xa47/0xfb0 [ 898.348126][ T3464] kthread+0x38b/0x480 [ 898.352700][ T3464] ret_from_fork+0x514/0xb70 [ 898.357797][ T3464] ret_from_fork_asm+0x1a/0x30 [ 898.363074][ T3464] [ 898.363074][ T3464] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 898.370271][ T3464] __mutex_lock+0x19d/0x1550 [ 898.375377][ T3464] nbd_queue_rq+0xc1/0xff0 [ 898.380301][ T3464] blk_mq_dispatch_rq_list+0x499/0x1990 [ 898.386354][ T3464] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 898.393193][ T3464] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 898.399685][ T3464] blk_mq_run_work_fn+0x16c/0x300 [ 898.405222][ T3464] process_scheduled_works+0xc3d/0x1630 [ 898.411278][ T3464] worker_thread+0xa47/0xfb0 [ 898.416382][ T3464] kthread+0x38b/0x480 [ 898.420971][ T3464] ret_from_fork+0x514/0xb70 [ 898.426075][ T3464] ret_from_fork_asm+0x1a/0x30 [ 898.431354][ T3464] [ 898.431354][ T3464] -> #1 (set->srcu){.+.+}-{0:0}: [ 898.438464][ T3464] __synchronize_srcu+0xc9/0x2f0 [ 898.443909][ T3464] elevator_switch+0x1e8/0x7b0 [ 898.449181][ T3464] elevator_change+0x2fa/0x480 [ 898.454453][ T3464] elevator_set_default+0x375/0x440 [ 898.460161][ T3464] blk_register_queue+0x3f3/0x4e0 [ 898.465777][ T3464] __add_disk+0x6b8/0xdb0 [ 898.470668][ T3464] add_disk_fwnode+0x100/0x3a0 [ 898.475948][ T3464] nbd_dev_add+0x733/0xb60 [ 898.480873][ T3464] nbd_init+0x168/0x1f0 [ 898.485541][ T3464] do_one_initcall+0x250/0x870 [ 898.490823][ T3464] do_initcall_level+0x10a/0x1a0 [ 898.496271][ T3464] do_initcalls+0x59/0xa0 [ 898.501106][ T3464] kernel_init_freeable+0x29d/0x3e0 [ 898.506811][ T3464] kernel_init+0x22/0x1d0 [ 898.511650][ T3464] ret_from_fork+0x514/0xb70 [ 898.516748][ T3464] ret_from_fork_asm+0x1a/0x30 [ 898.522042][ T3464] [ 898.522042][ T3464] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 898.529849][ T3464] __lock_acquire+0x164c/0x2de0 [ 898.535209][ T3464] lock_acquire+0x115/0x350 [ 898.540237][ T3464] __mutex_lock+0x19d/0x1550 [ 898.545343][ T3464] elevator_change+0x1af/0x480 [ 898.550616][ T3464] elevator_set_none+0xb5/0x140 [ 898.555975][ T3464] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 898.562291][ T3464] nbd_start_device+0x189/0xb30 [ 898.567654][ T3464] nbd_genl_connect+0x167d/0x1cd0 [ 898.573189][ T3464] genl_family_rcv_msg_doit+0x233/0x340 [ 898.579243][ T3464] genl_rcv_msg+0x614/0x7a0 [ 898.584259][ T3464] netlink_rcv_skb+0x226/0x4a0 [ 898.589544][ T3464] genl_rcv+0x28/0x40 [ 898.594035][ T3464] netlink_unicast+0x7bd/0x940 [ 898.599311][ T3464] netlink_sendmsg+0x813/0xb40 [ 898.604580][ T3464] sock_sendmsg_nosec+0x13a/0x180 [ 898.610111][ T3464] ____sys_sendmsg+0x54e/0x850 [ 898.615389][ T3464] ___sys_sendmsg+0x2a5/0x360 [ 898.620577][ T3464] __x64_sys_sendmsg+0x1b1/0x290 [ 898.626030][ T3464] do_syscall_64+0x166/0x520 [ 898.631130][ T3464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.637535][ T3464] [ 898.637535][ T3464] other info that might help us debug this: [ 898.637535][ T3464] [ 898.647744][ T3464] Chain exists of: [ 898.647744][ T3464] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#56 [ 898.647744][ T3464] [ 898.661465][ T3464] Possible unsafe locking scenario: [ 898.661465][ T3464] [ 898.668901][ T3464] CPU0 CPU1 [ 898.674249][ T3464] ---- ---- [ 898.679598][ T3464] lock(&q->q_usage_counter(io)#56); [ 898.684965][ T3464] lock(fs_reclaim); [ 898.691451][ T3464] lock(&q->q_usage_counter(io)#56); [ 898.699332][ T3464] lock(&q->elevator_lock); [ 898.703907][ T3464] [ 898.703907][ T3464] *** DEADLOCK *** [ 898.703907][ T3464] [ 898.712033][ T3464] locks held by syz.0.6910/3464: 6, last CPU#1: [ 898.718255][ T3464] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 898.726430][ T3464] #1: ffffffff902c5fc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 898.735379][ T3464] #2: ffff888025ef11c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 898.746765][ T3464] #3: ffff888025ef10d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 898.757718][ T3464] #4: ffff888025db8060 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 898.768329][ T3464] #5: ffff888025db8098 (&q->q_usage_counter(queue)#40){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 898.779205][ T3464] [ 898.779205][ T3464] stack backtrace: [ 898.785083][ T3464] CPU: 1 UID: 0 PID: 3464 Comm: syz.0.6910 Not tainted syzkaller #0 PREEMPT(full) [ 898.794347][ T3464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 898.804388][ T3464] Call Trace: [ 898.807654][ T3464] [ 898.810574][ T3464] dump_stack_lvl+0xe8/0x150 [ 898.815165][ T3464] print_circular_bug+0x2e2/0x300 [ 898.820196][ T3464] check_noncircular+0x12f/0x150 [ 898.825134][ T3464] __lock_acquire+0x164c/0x2de0 [ 898.829986][ T3464] lock_acquire+0x115/0x350 [ 898.834482][ T3464] ? elevator_change+0x1af/0x480 [ 898.839416][ T3464] __mutex_lock+0x19d/0x1550 [ 898.843997][ T3464] ? elevator_change+0x1af/0x480 [ 898.848926][ T3464] ? rcu_is_watching+0x16/0xb0 [ 898.853683][ T3464] ? elevator_change+0x1af/0x480 [ 898.858606][ T3464] ? __pfx___mutex_lock+0x10/0x10 [ 898.863622][ T3464] ? enable_work+0x17f/0x230 [ 898.868205][ T3464] ? lockdep_hardirqs_on+0x7b/0x110 [ 898.873397][ T3464] ? __cancel_work_sync+0xf8/0x110 [ 898.878501][ T3464] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 898.883956][ T3464] elevator_change+0x1af/0x480 [ 898.888712][ T3464] elevator_set_none+0xb5/0x140 [ 898.893551][ T3464] ? __pfx_elevator_set_none+0x10/0x10 [ 898.899000][ T3464] ? xa_load+0x1db/0x210 [ 898.903242][ T3464] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 898.909040][ T3464] ? kernfs_add_one+0xfc/0x6f0 [ 898.913796][ T3464] ? nbd_start_device+0x17d/0xb30 [ 898.918813][ T3464] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 898.925055][ T3464] ? sysfs_add_file_mode_ns+0x258/0x300 [ 898.930601][ T3464] nbd_start_device+0x189/0xb30 [ 898.935442][ T3464] ? device_create_file+0xf4/0x1b0 [ 898.940539][ T3464] nbd_genl_connect+0x167d/0x1cd0 [ 898.945556][ T3464] ? __pfx_nbd_genl_connect+0x10/0x10 [ 898.950916][ T3464] ? rcu_is_watching+0x16/0xb0 [ 898.955675][ T3464] ? __nla_parse+0x40/0x60 [ 898.960084][ T3464] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 898.966407][ T3464] genl_family_rcv_msg_doit+0x233/0x340 [ 898.971956][ T3464] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 898.978019][ T3464] ? __lock_acquire+0x747/0x2de0 [ 898.982951][ T3464] genl_rcv_msg+0x614/0x7a0 [ 898.987448][ T3464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 898.992460][ T3464] ? __pfx_nbd_genl_connect+0x10/0x10 [ 898.997827][ T3464] netlink_rcv_skb+0x226/0x4a0 [ 899.002584][ T3464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.007597][ T3464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.012881][ T3464] ? down_read+0x2be/0x330 [ 899.017295][ T3464] genl_rcv+0x28/0x40 [ 899.021277][ T3464] netlink_unicast+0x7bd/0x940 [ 899.026036][ T3464] netlink_sendmsg+0x813/0xb40 [ 899.030790][ T3464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.036064][ T3464] ? apparmor_socket_sendmsg+0x98/0x360 [ 899.041601][ T3464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.046869][ T3464] sock_sendmsg_nosec+0x13a/0x180 [ 899.051884][ T3464] ____sys_sendmsg+0x54e/0x850 [ 899.056646][ T3464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 899.061925][ T3464] ? import_iovec+0x73/0xa0 [ 899.066427][ T3464] ___sys_sendmsg+0x2a5/0x360 [ 899.071109][ T3464] ? __lock_acquire+0x747/0x2de0 [ 899.076042][ T3464] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.081235][ T3464] ? futex_wait+0x2a2/0x390 [ 899.085742][ T3464] ? __fget_files+0x2a/0x420 [ 899.090329][ T3464] ? __fget_files+0x3a2/0x420 [ 899.095001][ T3464] __x64_sys_sendmsg+0x1b1/0x290 [ 899.099931][ T3464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 899.105387][ T3464] do_syscall_64+0x166/0x520 [ 899.109969][ T3464] ? trace_irq_disable+0x3b/0x140 [ 899.114983][ T3464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.121038][ T3464] ? clear_bhb_loop+0x70/0xc0 [ 899.125705][ T3464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.131597][ T3464] RIP: 0033:0x7f67d8d9e159 [ 899.136018][ T3464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.155624][ T3464] RSP: 002b:00007f67d9ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.164036][ T3464] RAX: ffffffffffffffda RBX: 00007f67d9025fa0 RCX: 00007f67d8d9e159 [ 899.172000][ T3464] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000008 [ 899.179963][ T3464] RBP: 00007f67d8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 899.187924][ T3464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.195883][ T3464] R13: 00007f67d9026038 R14: 00007f67d9025fa0 R15: 00007fff1896cdd8 [ 899.203850][ T3464] [ 899.389447][ T52] block nbd7: Receive control failed (result -32) [ 899.389462][ T5618] block nbd7: Receive control failed (result -32) [ 899.395700][ T3482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium