last executing test programs: 9.544667277s ago: executing program 2 (id=11592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x11, 0x0, &(0x7f00000002c0)) 5.798260318s ago: executing program 0 (id=11627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe(0x0) (async) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x4}) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r7, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x20004, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf252000000008000300", @ANYRES32=r9, @ANYBLOB="24002d800500010000000000080003000700000005000100050000000800030002000000"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 3.709921059s ago: executing program 0 (id=11643): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) read$alg(r1, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_xfrm(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="8000000012ffff0000bd7000fbdbdf25e0000001000000000000000000000000000004d50a00320008001e000500000008001e00000200002400090002000000000000000100000000000000010000000100000009000000000000001c000400feff4e234e230000fe80000200000000000000cca8e700000d08001d0000000000"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x361881e5fe258260) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @multicast2}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x68}}, 0x800) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000015c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xa0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5869}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x20008080) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cc, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r8, 0x5000940f, &(0x7f00000002c0)={{r3}, "4511ef7650ae681922269f558908d1b4445a41287e066b49a111bb6dfab0ad11fcbd2e4f7880b5c94068577f423dd6cf9462a3428cc83622570f437f7950abe4196a869fb5fc60c3a96f5ef386816520e443e68cb2f1a2a57ce6828ecce10c34bd5c9d262513013459d6e8d658e8f8107ffc48f1e91b38fa2544634b0976425e737a99bf477c0efb08768c96aa1a4bee02b57f18979d91b676cd949ad0698242ea6b5aec0f4389277c7a72f2f1d76177fd9d64e34e9fecdc92e1b94b9d42abbb68a9ab3026dac16909b6625716f9803c9c49b52825dd6979ceba76aa27bc5b5b529c0b73f2e0fb883529a61f9858a6f112cb2f606a6adac6fbd6ad2f710ae65779c980eab5745ddb4df257012273e5d2804a7a1b8b66e4eaf400341e0c881ba0f8203f2d04205eac196b12ded4a7a8f6f3af9b9de2a0faaafc0de962ab128bebcc16d60f13ae6a337ca81b82133995b31bd79a097540196f6e3bcf98d4d9f6314f6819134143c0b7c87244c06a54be7e44f3ead8f74553f7215b17b27e23f9df90ed3174a2bd28c112c4eeb4e4f18112f7c42b202eba6c5099e23871503d22dad1d5a19e4d75c93f98b2e2fbd7a4bf0b0c0852ff2407ff4d1f5fb8df97e008087f22e0d743e3c4cb313dcf8d91e1f31d7258f8318844f215500dd1f2ef9f6af2c52e1953584d9301465db156ea3ec18c2787cd1b21db0a0f736479a8afb2bba0567d6ffdd11b03adf80ac37545010703f31804b9f051ba7d4546d9fba990a02a0d1536c31f3e5ad363a78db9a6452656e3149d1f87a3798f03bf01f2669436450c3d4584cbce1a45fbd639f2a1c869872166997929d3aa6d72534129812613dac40a4eebb7de593b950d9159a0a58d3b8b90919819ac8d61c884e03e711766ba3b73426359ad0f945f79da5aef55f28e42332fbe3dd9e080d15643680490d59b7d7d64e01c8e7e15c0f7d5bff2b55d061db861538fef1b46261b40aedde4d97c68a92e7812253b5924073611c790f18805c814caf27cdee90f9588d903d44067980b183fad973ffa8bdda37b0c3a8d6da84446b1f1ea030acedaf882bf6c81abf78174dd5fab03878ae6576a80102ab93dbb61be9cbef7968fb25560b8f0bd6fac9e482b94b1bbc434a89df0f429cd3d74c23d5ca088b8298dda52b47601a079f2ef8790ff832cafb9aadf994a0c8648103c9eb0eea695161ba805abfd871fe351a1504eee86aef75fca55639d66f994253f26d9529cc84e3cca2c9ee1bc45865bcbbd96b87859a6ccdb62b4e61a0d5969d711250354580ba148db866c7b41bfa51843436ca80c5c28ecd857a29943f1721787d92135feed518f90a999e9e6ac6e36cba2974fa6e4b86adbaa039b621d6f528226bd661d5db43cbab535c1708175363db6881a3ef0aefe496ccb85e6372bc42b46fa1ae8d9dcc44ff3b82e145f4249e39426ba299bbcb0d6cf267e788eb44a8099e45ff822e643c5ef4b8819aadc1e92a4a2618929d35e3fe742ab0e2fc7a4d0d16f86c70cd1059a8c8f5f1c926b8e1696a93489fe863f303cf3378ec801c00aa86b0a929f1432528e4c06addcc680396fcbf2538d20de1e4bac048b12fb555b41a0a903f43d39c5fff43d9106a95b024618ac702cf6c984d3e30812299af9ea453932085c66cecdc9491d5f1996ae5cdcf31e9953e1db3b7c4ed60262253e926c1616157eb06a165a7eb57408fcc0033fb77b7193fbe2e8314e2624723d00cee54e24b06f6899a94dc269559e91b2b5dcd4ccfa7cd68f96aa0a274fb2b4a5f47a8f689a0f46f2674efca02163b58fa547d57830a8d0b18342a916353117a39d738442014fb6fd5fb3b3fffbe038e3c293be20b81c2a1c548d7f3c111f72f0e88421814a99be5b3843bc8212a63adfe47d68af8052e97581a6c61dcdc4d7b23f0881ac3f57d97fc1f0a974e38649769d69536f911d856c9cd39f77bfea97273ed52dc388e240763fd63b697337b14381eff35b6d379cdb2aba29c17b06c9e7b7a3ced0d6fe06487dfad484810518228ae9c866e1c106456818d6cf667056355e4a828835b4fbe78638046eb95304758d81f2c50e754806ceb3c0774a9a47229a55db80c9ad5d2780caed94ad803dfb96865da8cb7d4acb4d9067d0c2be75a2d7b9312cd89cc5b11502254be7f5cbf8e861229cc4c2fc1f490ae74091947b3c69c67dd3658137615b1c2b90c2a368e34634c32b26b9ba92a8624f151d6b32bb0980f9dc7d6c58e4d18a4ef0bd8755b0a6709f5f71f99707c803c9a3ba3e6b6526df9850885d1739693ad5db7c0f0ebb4666c2aa48fc08b04ee86e210297d0ca0f82c94c9178604b5be75bb9219c092acce036b6ec5b41805e81814a983bdc8114f176ba673f3d3767ba194554e694e07d61d758cf5d3d37847032634c82c523cbf5f45b05f6f359d4b51f83ab2cf08fa42a3dd51656931933333c8f81b4a95fb62d2af5b94caf0e05c2f1527ef3f54a68b2024bacbf76e2fa64d2ffbd487a2740cfb96504314c189597adc6ea596dd17ecad8cb7fba77002e64d827ae0c335e64ff78381b752c1279c8c05c488e557f7b2142ee6661642092a943500300a436c89559749a8f5264e06bcca4b3ae1de897de4cf45853fbee8edcb29ea2722c4a2a36d8396eb8ebff55c5a4ea076fcd10adfb57c8f8590f9a7b13500a0d93b3ab2ecba8c3fafff9676301e86a023a7b935ecea28168bc94b5d8db236dd8948cf1aeed61814faab77ac41a0493f1d31bc1ff7ca0f60c51b4bedd2ed7e6092c99d3e8fe0d16b0a9dcff272ee515ea96f9638d1e6586788b628f2c742cdf6e43542e65d1edc5b856ccd2ef6f9db0c733f82a4fa989972d5627d9c82e846c5848daaded3782d849b208f4dccfe95404d56a041108369b260b77b4316b661337408fcc1c00530d807ba1fe3833d3917bb281c1df56c486ad637bfac63a3f0af68fb0efd456a10c9cc488e4ea7f3ef1d041fb3abd253d24f1e55aa0f4473c8e632951f5a1c90b25901d0511f1b42799936d6a15ac4dd29dfc6ad835093d05367e82ab37d72bcebd4a30ba6ab7a7a313ae7577f9e0f1f6cf7db591a2cab31706d535f6841358aa1fedc1a0663f27cbe1f42e4432624e4cd37ae7b2807d8dbdbed15c3941a098cd2953248a1df8b30a53f617e7e03aaba95512b8592ae8964fe8adba6108e5566bf6fed8d6bd76882d4d7b786e210f9c88da21fad62a5471b936eba4b50c1cc564f0d66a8d8f93e273d853ed28580ec590523587ea8c650f3336d7caf835f906633b9119654c6951ef114027cf33f659d669631395d53175c35446251238ee094c7ed25d7280bdb78dbefdecda19a1d6a24dcc12a68349bd7efb394a693b0a768b42563dfeef37a10e26e8d0facfc079948bdf071e3475cadbd6a5c7cbce142486ed12287c51fdc9994dc4d3012658191a351fae504c14fbf7a71352ac3f8e3965915ed019720e9657cab5f31d8d63604c0273e9b02f42f1c56e5320786f693a87bb8c65e708452278c42d9f6ce73cf861c58263be053049be17e6a9c215abe26fa4540c20bd2cd1005222284dbfd688d7d4b3938daf999af606e107691d0e711dd885d9749a455805aa090765b589bcbc71418b286bbe6ac97d04edc010561cdc40fb128712ba4a251dcdd02e85545f8cdcc7f4a892c095305e5594553405e41f8fbf30e58544cf258a873e5061e278a179d4fa363aaf4124e506d899c75124aeec00d4078353321183d0a44e7a444011b14ecef2305b9eb54567779c17d01387140681065667485c57882788ab25d8ab34518e23428c3dd390dd75c3d67df926b6f9a7933acc52edc8e80e8d6a65cb5e5777b9710eb94a25baf306e8bf576e85dc2079faa1e36a8a59dcbe3625bd3bd88325649bf1454b58f647d9d744120ab6acf53dcd76acd45c6d8c5ea3a207a2b2ec59e6afea7043d7d68718ad611780a7c59553faccd6647bea34263acc6b5b4598c03859f2280216d7074348064d56e51095cba8211ec8bdbf94eccdfabb0072eff9543d6fa80a33d2d82ed813dbbf558ab49eb21f1beee3abd6c3b565d18ebe4189965b3af6fd05112e3d4b6c27466877e36189ca1c221a78d22f30a88de176e474ea616c928669e84ec9da4881a77ca3cbb31a5b814baff56c37ab9371a67ceb279b5637cb2a9da27c9a6077b471577e91c30ee0fa19fbd17cb88f64ac2046f2c9a02bddf84a4d2713514a97e0f10eb49575a8a9afc8700d8beed6a939ebf964e43fad706bbf402f21a88c4a494329eaaca2b598bbdf991dca49002f5d2d40d55a468ae272a47b6fc0389d31dc6c3310bd7358bd80c70e8dc9a4a611c163831bae45833cbe9cd3cf0bad95a306f216d1fda7409f14a0c64476742a84feae1c687353d1d96adddfa469570179dd2aa4c7fb19116941a95c55fb26eeaf9cb393081e424d4bba11f4c5b240e0c4d7ee66441afe31a092fba80f1894f2d528e3b8aa030ccc4734e69f1f65933f87c5692272f6fbfc1cb7b8a336b97c4f2ea70d8343977445dbf1b1a90589c26cb17790353c1c0d219a06f1b525e0ccfc42ef55eb2b78c7febd211fff02aa1680e0895a0d47c6d0247e1009ce1ecb62cc8ed7f2a25c8387a50447640dd8852805a6bcc00000e5ea9615b8c816c957aa53b223f5777b78cfe541d58f6f77928d1f7e2883e33a7dee8056345f6c647e4da203fd3ac4aac92e811207a5820194b163fe7f4640a494a8e766a748f6af8d41d253dfdf763c35999985ea6d970e1d4db83d8fb45b12a541ca7daec74b6c020cfa081b9017feadab0482ac197fe36ea98706304378295c180f23b036fb28ebed0c4b201c86277c74f15aa3a8d3af52609a402c0ef44d76ab2eeb0ff2a5340b328efb8837581bc7336ba527ea8a7b6491902beefd9838e24a9460c9d45c80c93f283d3f36d1bfd3774717970c02e4622c38238958cdcf8d01911be03c97d232dabe0dc1003f8131283db70479f21ce8a5ab4d3654966e0f9ee3264ff75a7a0f31bb764c39ac289c3b22623f556a9364b72207247a73083e87afdf5ad160eb2f21f2cb9e6f76acdaa8cc79a182867fb5c8e583f40bef592072d831da78b30ef06a5b9cea79aa24e341185326e87817571a8b1c9608c922deeb315465848a62571e7d166ad089b6582f233c2129370ba5a03ed7754fa0d4710668844abba6498815ba486ab35f266fdf55cdc0830506d68190133e37ed84cebd1306fa69ed4a237ce598ef487667a1478598c9ef970e8c0dab6c262cfe5435d99dac4e834086a153412cde8106b67b2f954e71be9a0fc1aa04ff2ba67aecbe0518da133f1b1a78540161074102d0dc5a48c601805bfc6572628376e372357c2e44f56fa8afab9938d4535bb9972ee25579d4d8f9fde43d7be233078276c836bdd52953f57a4b6061fa125d0fa6ebd03d45d1fe5ad40b01af017b26abb63d7cff26dc826fa152e28256bd76976772e0c5771f96e8513937f610175dea79900f7956d11b3db2cfc2aaccaf110d8442f2c32c07e3d4fb1cf0769ca69a4d0a06a4d985589c8e8eb55947a43b1139fa6a03f2197029ccbc3afbeb133a8eaa58f3cf5646fd15b6329248a9d470f2b473221d6842fe7392780a97dcb9754d4a5a1ba96bc53360145b991b8715c7fc3d2bacff395b49c5ce67af302859717057ab63cf8a5345846de785fccdf6241bb2cdf760af5fbb82e7ef6d7b12942d6ffb8f797c0a4658b8a7b4662ff46deabacfff3969e8d36bdffa23143d2a63c250f3f2797876"}) 3.580882113s ago: executing program 2 (id=11644): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) readv(r2, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4118, 0x1016}, {&(0x7f00000001c0)=""/33, 0x21}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r5, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @local}}, 0x2e, 0x1}, &(0x7f0000000380)=0x90) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.396480629s ago: executing program 1 (id=11646): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x8172) (async) r6 = socket$inet6(0xa, 0x2, 0x8172) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 3.241913584s ago: executing program 1 (id=11647): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000018140100020000000300000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000000000907020000000000008007050000", @ANYRES32=0x0, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x4c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xdc}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0x76, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x18cb}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800dd8d00000000fbdbdf25020000100000000500000000060015000200000014001680100008800c00018005"], 0x38}}, 0x0) bind$inet(r6, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r5, &(0x7f0000000340)=""/129, 0x81, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r11 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r11, 0x29, 0x1e, 0x0, 0x15) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r10, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 3.042690765s ago: executing program 0 (id=11649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xfc, 0xfe, 0xfe, 0xff, "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", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) recvfrom(r0, &(0x7f0000000040)=""/32, 0x20, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095", @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x23, 0x5, 0x1, &(0x7f0000000140)) 2.553882484s ago: executing program 2 (id=11652): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c00000002000000060000000000000e03000000020000000000"], 0x0, 0x34, 0x0, 0x1}, 0x28) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) 2.462936289s ago: executing program 3 (id=11653): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') (async) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000080)={"6d2ca9bc09e033aab59f6b157d94ac65", 0x0, 0x0, {0x6, 0x7}, {0x3}, 0x3, [0x9, 0x47cf, 0x2, 0x100, 0xf1, 0x3, 0x80000001, 0xb, 0x48, 0xfff, 0x9, 0x6, 0x5, 0xffffffffffff7fff, 0x5, 0x8]}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000180)={0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000180)={0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000580)={{r1}, r3, 0x4, @unused=[0x7, 0xfffffffffffffffe, 0x100000001, 0x80000001], @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001580)={r4, 0x800, 0x5, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001580)={r4, 0x800, 0x5, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r5) accept4$inet(0xffffffffffffffff, &(0x7f00000019c0)={0x2, 0x0, @dev}, &(0x7f0000001a00)=0x10, 0x80000) (async) r6 = accept4$inet(0xffffffffffffffff, &(0x7f00000019c0)={0x2, 0x0, @dev}, &(0x7f0000001a00)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000001a40)=""/191, &(0x7f0000001b00)=0xbf) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000001a40)=""/191, &(0x7f0000001b00)=0xbf) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000001b80)={'ipvlan1\x00', 0x48}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001bc0)) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000001cc0)={0x0, 0x2}, &(0x7f0000001d00)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000001cc0)={0x0, 0x2}, &(0x7f0000001d00)=0x8) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001d40), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r6) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r6) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, r9, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x80}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x61}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x34}}, 0x20000004) (async) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, r9, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x80}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x61}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x34}}, 0x20000004) connect$netlink(r8, &(0x7f0000001ec0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000001f00)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002140)={'sit0\x00', &(0x7f00000020c0)={'sit0\x00', 0x0, 0x80, 0x700, 0x0, 0x651, {{0x9, 0x4, 0x2, 0x2, 0x24, 0x66, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0xc, 0xdc, 0x0, 0x8, [0x6, 0x4]}, @end]}}}}}) r12 = openat$cgroup_ro(r8, &(0x7f0000002180)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002300)={r8, 0x20, &(0x7f00000022c0)={&(0x7f0000002240)=""/1, 0x1, 0x0, &(0x7f0000002280)=""/18, 0x12}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000002440)={r8, &(0x7f0000002340)='/\\)%(,/}${\'%\x00', 0x280, &(0x7f0000002380)={@align=0xc05, {0x2, 0x2, 0x8, 0x80000000}}, 0x3, &(0x7f00000023c0)={@_ha_fsid}, &(0x7f0000002400)=0x2}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000002440)={r8, &(0x7f0000002340)='/\\)%(,/}${\'%\x00', 0x280, &(0x7f0000002380)={@align=0xc05, {0x2, 0x2, 0x8, 0x80000000}}, 0x3, &(0x7f00000023c0)={@_ha_fsid}, &(0x7f0000002400)=0x2}) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002480)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x8, 0x1a, &(0x7f0000001f80)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @ldst={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000002080)='syzkaller\x00', 0x42, 0x0, 0x0, 0x41100, 0x47, '\x00', r11, @cgroup_skb=0x1, r12, 0x8, &(0x7f00000021c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000002200)={0x3, 0x5, 0x6, 0x5}, 0x10, r13, r8, 0x6, &(0x7f0000002500)=[r14, r15, r8, r8], &(0x7f0000002540)=[{0x4, 0x4, 0x4, 0x1}, {0x0, 0x4, 0x2, 0x4}, {0x4, 0x1, 0xc, 0x3}, {0x2, 0x2, 0x4, 0x8}, {0x3, 0x4, 0x2, 0x4}, {0x2, 0x1, 0x3, 0x6}], 0x10, 0xd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002680)) getpeername$netlink(r12, &(0x7f00000026c0), &(0x7f0000002700)=0xc) (async) getpeername$netlink(r12, &(0x7f00000026c0), &(0x7f0000002700)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f0000002740)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x46}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 2.270711885s ago: executing program 3 (id=11656): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) (async) 2.059151428s ago: executing program 1 (id=11657): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbe}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0x4a}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 2.048294454s ago: executing program 3 (id=11659): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0xfffffffffffffe1a}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x6, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r8) write(r6, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r9, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1.83507082s ago: executing program 0 (id=11660): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1806000000006ecb000000000007000000001800f3f87638b79334d39ad6f25abbc4a958638ac864", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3032ec34", @ANYRES16=r7, @ANYBLOB="370626bd7000fcdbdf252000000008000300", @ANYRES32=r6, @ANYBLOB="14002d8005000100070000000800020003000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @empty}, &(0x7f00000003c0)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="660a0000e4ffff6348f2260000000000940000004080000064788ba6b40010481f8dbc930d7b63645285d643a565caf866ebaac5a6512e362260be281253e15ce8d2bcffab9c4e5c9ba70f73e6d50bef32c20313424c499528e66f115b04eca18eec7c1b76644f8ecea30d611cd136b39aaecd757ef44d64ed6d5f4d55abd8953d70da5057ccfe5a7bcc90c836ac6c6c85aa04760cfd70614accee5415b6eaa47800e3f2ef34a769e77a64c5250272bfa6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x48) socket$kcm(0x11, 0x3, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x891c, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000ec00000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket(0x2a, 0x2, 0x0) 1.834624039s ago: executing program 4 (id=11661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x48}}, 0x40004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x844}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf2564010101000000000000000000000000ac141426000000000000000000000000000400004e210002000000a021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5], 0x15c}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448f0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='b\t'], 0x9) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x7846eb83, @empty, 0x52}}, 0x2, 0x5, 0x0, 0xad}, &(0x7f0000000300)=0x98) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000003c0)={r12, @in={{0x2, 0x4e22, @multicast1}}, 0x9, 0x2f, 0x2, 0xffffffff, 0x80, 0x2, 0x40}, 0x9c) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r14, 0x1c2e5c8432338a2d, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6(0xa, 0x2, 0x0) 1.727520961s ago: executing program 4 (id=11662): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c20000", 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x001\'\x00'/28], 0x50) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async) close(0x3) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000295e36e222434a63a11e45d2d6fb561c0ea4d72c7397697d83e1d0c8530a5d5e8a"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r11, 0x0, 0x0}, 0x10) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.590200726s ago: executing program 2 (id=11663): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400000019000109000000000000000002180000000000010000000008000100ac1414"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000080)=0x7f) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1.447284298s ago: executing program 4 (id=11664): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x60, 0x0, 0x501, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c00028008000440000000000800024000000000080005400000000008000340000000000800064000000002140000001102000000000000000000000000000a"], 0x94}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4085, 0xff5}], 0x1}, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x174c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1710, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x136c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '\xff\xff\xff\xff\xff\xff'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}]}, {0x85, 0x6, "b32b309d71da48d53bd49a61b4a812dca287b2c9a7bd36433d22f6d747136b7c2c444f35986d135d9784d5281bfd38da7634c8e9fa450cbf5666890d1d18f36644449c6414551c11e4fbf666fc3271bbbe78d91c6d7061b8ba48e05e4571aefedbcbd077b051f26e8e7e1c8ae6db52d7f4a19f9ef0e8dd0b9159e0d95675afc8db"}, {0xc, 0x7, {0x1, 0xcf86031b5c41f5a5}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x1084, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x2, 0x4, 0x2, 0x99a}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x33b}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe60}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x834}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd22}]}, {0x1004, 0x6, "fa6274e479428802c20cd9bb50b48ad895d469a1748ae84cb0fd9f47d7f00dc40b284db5bc5da8266ca860da176d7eaea7d58c830b2e956868222c255d0094f61532dd209dde7ea51947c826308ea72f06f548e34790c297f2fcf09c88f5628d29c7b66641f4bb50c686077214cd5fabee7e9840d79b98c6e5cbc4126896b8de385ec2adb1290139974ada141313118f2b342d71b9b198b427fecf94b2bcd27721ee32fad24d543fc62e61b049e93419a1490b12e5af8bfd030cc64f1120e80f8076eb036de157f187a34c4a7b9a3e1c2ab553663cd7af930a4a59dfa0531b8f24e934cc09cae3700e2bbf066b400ed701ec84a1d46f2d534067618384c8f8505b7a95f7ae1c29704bbe4b3a05e45a958bfc00f1f3665e99b8e0f7587e5030626a2cdcc07dc15fc5176311b8a8c5a294c9e5580a2b11152658237b7a2b58e524d9a11d61690daf489499c09effa6d6cfcbb09392c8afba202dcc106fe467d1e451fccc90f6b30ceedb413288099c53f911fff0d2637ace32848f7001b8218cb512778bb559cb01dd0a8130d86884a89dd92ec5bee023e5c0b27166478574cbcbd80b9372e268af7480f77580e5a42a61f63d7818d5242548e066cd529927f5c67381226287947867cec742d228cf7d033188a542c716f7453c6ab5f33fbb8704604260a2a51668fb61032f321fdf18e4175c5a2ff8b730e267fe4640a98d3364189461a9fd7fb97ef3cb8ea17310921f50514844415be001240b5d5ca24535be0b3aae88196f62a1d7ea7eec10038ba000ba07c3724aaf38b63f0171abf784feeded24d17ca1564701ef9fc0b1bfab9dc9af4b4d9ef8561eda0df9cc9a3ad2d03240940cd450b27c2d068761246f3f67b9bb9e401bdf00bdeb7a880a7917605e225fb4ad2f0ca03bdae469876f36d0348b9efb96e3ef336a0036a78dd8fc7abdcfb74e629d5ec8ff077a9897d52ca3d1c120eeda02a5ffa1707093fe7648325428aca3ba0d9175ebcee7d9e21ff8d2e4440bc2fafd205a5d3392daaa69e1aeb561f435576bc8508e8f177fc806514ab2398db41a533ecb8ff93197e1eef25739d24a572d7d4cf6f710c9af902adda7d4ae24a64759897cbd8aba1aa0c25b1f13963b55b526994c67a47156d9f7e1615f735fa0ea5fc8036deb30ca1e3f2b92b0893586108e56bbbd6475466cb2bacf86eb718ff941a9f497af63722488aa0f07175fa7fa6ac768a1dd2648feb0f5d05ecd3331887333e96a5d245f05b154d1aa93967b1c027aa41721fd3331cf1cab29437a6ae0be4433f95f555e94e0545ba9d5a80065a49338c804c0d5a633afcc466e63491612577ef6cb18ea7cfea711f5ce8eb1e58e0f93dbe2a3f99d9ac9424454197e0735dbc3f97a3fe99103acaee45cd0c01cc5fefd64df636b422f117e87e426b3157a518802fff65e043cd21d23bdccff978202b24b866fb17d8519534d764b622d52a295d75dde1b48b720a41a56d0862edbd2f14b84cd8d4370405f519c3c7d1dcc1dde89d25a6595947ee5c2a2d4014600c7c465701b62eafe570faa0ce4657fc8be3822bcabb6eff9e51fe81a4c1b8c78fb28e8623d05e6341bca605960a3e8554ac98dad3a82eb43e6b3dc987bbb4bf7d6d4c055db106f083df5d2649b59ee66b1b35b57226fdf29541a9916684ce681158c35e8ff1610548cf2255821f69f5dfab112d6fd8d70e1067fff8603701e67c5d4acfd52790eeb3d0ecab06dcfccc48ecc7f566bad72b4fb2764a308c6ae14d5179edee4c758c8d4e03a835767a30cf969fd9b86f1443faacf4e3f328950744350907d978d3330e0a3de44aca7023c82a422bc1a6e28c6b86e7cfa1a0670bfc78e64be36c03a418a04e82519cb834f352f24de5e78f6241ef6c145d194e9e51cab6ea051236ce7df301f4f56ee5584cb56be9608fc51dc5591e2f56411e2cbbeb549eb6b3be1cda1bacd0cc1937516f5b8b2a37ddec842542e619baf16c982a1b26eff03147acca546273b39661b13fb43bff120fa509a9bed7e08ebace745226e17d09e8f2199f8da050aa6618d9076ad3b995a239eba63930a84ff1b6167c69b8e381efc3d65b1644c32b88be351502f31d05c582b63bde8a2602c89d14769a5ee7c899d7d8e60246bdf0ee985f247cf77f43d78a7ad237db5e384bd0b3744c16dbe712d24f30cf03db189499ca7f23a1ba867148cdb41d6726df5923511d05d87c6b5b708f108fcc29578213b4c83c008a3a8c7c3e6f06f61b9e63691824c9a0f8749a1a708a2a6dae7f8e70f3a6e1eab64fe55603e0402eeeb4fee70583617dd2d4885826a30a3082d589163846096132707b4f30171bb119e93f06f4707413d8030c14e08a1a6ca9d19cce2e7602a85c86499a9f8b168e8fb3d7f66e3d860b4db530af8a8aa46fa636d6a74a67e442bc2878e8806b8e0f5522633da88b85f10799e4058b984c4ed6a28e870ab305448c9bb094024198dfdc8ee0383ba2511850de1cb6168588f4c3dba1bf082fac5fd10eb68c6d1a9f93bd32cf46a9b7f7cb7760a4dcc33a048d6d7da231b05e856976b4ce10f2b720b764122a7b0617c9f376e227600caea0c86df3cc257c3de4fb3f273276c04196da0cb5c26361163219fed6b019097c62af2b8208a428aeb4a3596788ee051d7f0e60c71495b528bfe9c43f2328640e2e3469b93522af2fc59d3f79b704b3bd8ad9d2233c8502a13c45549e741f57e065ae12b69173fa4772c209cf827e56dff62eb9c3202b1ff92cecbd6ecd1808829d1b73fe99304323a96f6bcd8a4e74e398c3b5e745036335cc73097fe685b2ac086edb6e69b49d0416b028d586782ade8e55f9c80f26a125e9e544cdd35d6e66a41c9362e09177efde502a5073266fd55d79738eaa26012f111959b9f0d02bfacae04e135ba85e148ba16119aa90730c7aacdd6f23b8ae2a1778fb6688a47c08fbf3d2ecc06f90191ad7093c74ed9bdb28c6db3690d09c169cccc3c90f0b5cd29854caeb4e2197de0da15dc6512aeb3157c0d76762bc1864b5909a6c39d81ec4215a26f560df14e8da7a703577e0ec81754503c2ec863fa4f831f89afa46153379b4216446f14d3eb1c68fd11ab28e5ed6714c861fa998c3e86b36a3d9f2f8813d94ae484413d201d3e32ca2c4c0f848b18bd072d5aeb3b4a17c43e415b0f17f141b993efd7d597c96fef384bf26acde5d22480a655e351117feb334ea6702453b383796863d9cb3de367b8e5862e884e523d06b694edefdeb2c056af00da10444f3a05a25e48de571cd41d292813bb9fa1012b140f433d405934b552f3628bf5b415f6be63e7ba36e9414bc0a8ae614e8d872b314fc01e1316bb515f29b6324dffca27ce5990048667ddb8a556c25ec7655979a21f7d98fa9751202932464ffbeb54e89a9131aadde3c45588d2c8f4f7b856c517076f6dedc416c97a5748f8d59d348cff868c424a037693b01ca97bc1d7669f3d7a8077f58a09d3fea143ef10e0203452a48585d6741c2cf81ef10779f9e6bb2edf94c81eba8124fcb38df167d2b35059584ce8941e0f60ae8d96e8c48f64ed5c4002e85c1fb9d77941707028c7fd8e97e6fa5a7d311be35a34146f863f50b57b1a626c9908ba538a650f575906922699bbc72786d46e98fa964e139c7faeae55d892a5a688b3d3868552d4418d57e8c65edf84a943e78c1cd4a04b70545096e8297545588a361e80968f18a218c4b53548cdbe0415bcc384c6260c09e537b4ca2e6b81161c037cc5a7166e0dcb468e332800c65310a8ebc930630ef9c9c146232473d2216d992cdfcf9358b335e722cb1008001b5d58dd175315fb8542519d9a0947f60e163f068466e9d2000e851a8157f860520a666ee6ad55586c1e579660142ad1dee01be0c9790a331d1b693cc91f2e216fc5bed9a30b7ca446b80ee219bd539c6cb4a7bf0510e1cd8307a6a85c7014ed04c41cca82a2275ed83c8f5e89317239e0309c58838abc2748d123d4f6b93a80abccd2e79f99ea9b6f160ec08185f6113f4b13b0f409ae3f5556139d862b705b1496c0ffc5f05338a6660dfe3ea9aff103957636328cf9f3fef3ceb9f9c2f4b229c0431ba5af1ede6bdf1f7b4a2238ac70c56b6cc35ed66a5c43ead913130dc39dea3a2ca5d963b50f0ff75b9d7666401f87c6fbde2bbb58c20fbf80aa0adfaabc62b85ad58d30e2e63a6119728c2f1b17d7afb806ce8662fa4f6a1ff62a0dce5debcee55d46c4b03759872839fef0f3f8a42a8fa12dfc5044c006f12892be08b4a335a4b2926d02ec74e18043388d1be6858f3831ec0351427b450d68a6ff9d9fe34857dbae8ba2a4e9a6e323dde809770d981a6cc592383ef971e2020eb649aefd5d9477749235212f8c52b38a82593a2df1cf9a2c8b516d23666818cd6e8a2f4facc23d8af173cfb94470de8813cc7ace6d3a4035617bffa4f4a5e438042d231f79d16a47fb7f324ea84ad45c2f8dbae413cd81b50777e5fd06b936124abe80df5e6602117273ea0af240b2a5b8b44b51bec0b2f7ada44367f7beba7cfb0f830713e2cf7f772cad13a5a8a91f503834f28138f065a6d3faaaf096613f4a3331d39a337e2ddb8f473104344e62ab23eb6068948d73b4d27c7ee7ba503ac54304a18ff4bf053bf61a060729169c65df754ecf157346ea2138d396ac914c39a8783e63a78c46e789939318df17af9c0eb4dfeaccbdc5808cb02904283b1c3e3a14de7c7ec8c11efe569690d1f62ddf9529c9de260e82a8af518a6c5671e1acf11ff80694da16d1d2097c057f256b6ada3fd60fb1d21e57757a7562a0e0f37617919798efdc689339b78e027dd75771e55ebf78fc5c276e445156239f030fdcda5a8dcbb2676b50778ef3bd873e2c238a0a948f5270b151c7cafea8786b2201cd4a0c5083b00530540b506635686a6effa5fa3d466ec873751f7bcd9f6b9dd279f8780e27e80f4311b319253bb99aebbbf99d3f5d92559737d3320b18475c25490e258d0d6df029c4e274da8531b67ae5cbca9c6e1f7b5dfd05d986b134f54622422da8a5a3a428d05b99ec0939c068508028f6697612a9e2d8feb30f0a247efafa83c447128276b8e537513e272b0f36de3f6d1dabc41262be5d87b863b43593385f6e90b87b859423320ab08efffd9277ae313780de68134d4e8a6d26250909bd872eea605ec1fc5e2159867ec8fdee2529b205b56fa0d2332870058c8da020e2bb53ef71ee5c8f73dea8d62a856817074b5d66dff2bdbd9af45bd655acb753dab656cddc612521800e6e87017fef7c9bb84690b911802ff8fff64b6e6c97911e1ecba78d6a48a5c4c8c5a1fb9a2b8d5e0b458fdcef86280fb9d25b4d04586c9a5703426f04c98241c672bebd0010719acce53f051a956c2cd93294022cc5feecdeac6ced97a70b11ab8130d1842d7b14c466980a4978237b4c304e4983f499241a5c759651a2f013dd330272b648695b631752bbc755f236cdf2a278ec6f13d76e332d22e7ba2c68c6869e55c894abe10874e2d7a39dbd67badf9cfdc8a876d1db56bd7e6867fca7662ea11dc233bee9a754ecafe1ea7125634995a2bc0312cca1a87ac6d36df668c3fa66336b23c9eac0e16171199eae19e0341ab8d67787100edf387db0c4c639a0748042bf87f62ae96729ec33d69f96e3af4e7a7797801334a823f94c4b38befb7dcda2e051f550961b28cefcae9afce767c9b0d875851a2abdacfa2c66151bcd411188718e620129a973f4c0cb9380e93fdee1bfcd5b7dea509545356fa0bd920f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x184, 0x1d, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="98ff578ee971"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x1, 0x0, 0x2}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0xf6, 0x6, "e2523abf533ed9352c53f07c5e1b69ff5c2858519addf6adc2e02490c319b669ef3641456017e5c31215c30e9aa64bc8447e59d3c787ad2f35c1f0692d177865bca9c5395d92991f7f612f010a5b420034b0a3868d172b8b2278a5be924e19ef7dd178909d9fb7ea010a77a396bd3fc5691957f786d519e24ca2ee71405dd03b6813c47b09a7c56568a0b4dd7e0695014a89c4d1b2857d06d18f4c804687f9305c3038b2c73e2e766ae40ffcd4ee41a1d9453aa6e8f294b0ca3b95deb37b6f0999247329769fd851b81199a454501ef2be198ae0cbea4f8bf66b8720483fc016ff9b3f22b861ff23ef4586a20d9c51ff3d43"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x370, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x84, 0x4, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x70, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x174c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.403035486s ago: executing program 2 (id=11665): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x340a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000600900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x8004) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) 1.378377214s ago: executing program 0 (id=11666): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = getpid() getgid() r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f75ffffff0e000000000000000300000007000000030000ca75ffffff"], 0x0, 0x46}, 0x28) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c000280040001009307000014000180080001"], 0x88}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="580100002f00010400000000fcdbdf250822c27182778b4c14be0a3001f2800c00180008ac0f000010000014000104fc0000000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x158}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r8}}}], 0x20}, 0x845) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac141428060003002e50000008001f000900000008000a00", @ANYRES32=r2, @ANYBLOB="284a279ad191c37e7a8049b70c3b94994b3adf2227883cafea0e81c5bcc00a5e143a85fd74bd8cd16fc5ba7dc19299c2a81d76a67c8af1a841b65f308efb904b8fe68197b26587bfba69a8ec7ca08afc3c4006cc05a36b2af8b0c263d16b3d2c8b2f170e3cad9cf755f97535b36116fe1baf6133611d3c6fdf2dadc04c8e30"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.215262909s ago: executing program 2 (id=11667): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x4d}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) close(0x4) r2 = syz_open_procfs$namespace(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01002cbd700003dcdf25040000001400060000000000000000000000000000000001140005000000000000000000000000000000000008000400030000000800020003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX], 0xfffffdef}, 0x1, 0x0, 0x0, 0x1}, 0x10) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) unshare(0x48010000) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, 0xffffffffffffffff, 0x0) 974.06686ms ago: executing program 3 (id=11668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r3, &(0x7f0000000600)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="59c6f0ffafd7241d5d2d989e6a6c6e92e2e9a3c42c27e38cbdd81405e2a41589d99d722211f61e92b0ba8bb514e3e47e45e727729149ece96d754c8e46ee64748cf9b6dacdd8941a5bed7fb876881ec2cddea4f6a18bf424d3358ee6ed541360b58bec8492c270d47509ad", 0x6b}], 0x1, 0x0, 0x0, 0x4000}, 0x810) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000ffffaaaaaaaaaabb86dd"], 0x0) 950.996994ms ago: executing program 1 (id=11669): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) epoll_create(0x8000) r2 = socket(0x2000000015, 0x80005, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000240)={r3, &(0x7f0000000040)='GPL\x00', 0x240000, &(0x7f0000000180)={@_ha_fsid={[0x5, 0x9]}, {0x101, 0x9, 0xb, 0xf635}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000300), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r10) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd609200000000000000000100000000000000000000ffff000000002421880b0000000000000021000086dd080088be00000000108000000100000000000000080022eb00000004200000000200000000000000000000000800495800000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 855.144725ms ago: executing program 0 (id=11670): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x10, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000d00000000000000000003000000000000000800010002"], 0x20}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0xfffe) sendto$inet(r2, &(0x7f0000000000)='<', 0xfffffffffffffe8a, 0x805, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 854.511189ms ago: executing program 4 (id=11671): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) unshare(0x22020600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00008d6000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) (async, rerun: 64) syz_emit_ethernet(0x4d, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@remote]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) (rerun: 64) 684.032668ms ago: executing program 1 (id=11672): r0 = socket(0xa, 0x3, 0xff) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x12) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, 0x0, 0x300, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 599.977486ms ago: executing program 1 (id=11673): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x1e, 0x5, {{0x6, 0x4, 0x2, 0x2c, 0x18, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @local, {[@noop]}}}}}) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delchain={0x3c, 0x65, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0xffff, 0x1}, {0x1, 0xffff}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40048a2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES8=0x0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f0000001500)=""/4098, 0x41100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000012000000000000000000030018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000090000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000e3ff0000850000001500000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="9da7e0000000000000800000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000003abac0ff04000000b4480800ffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000580)='GPL\x00', 0x6, 0xdd, &(0x7f00000005c0)=""/221, 0x41100, 0x12, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x0, 0x1, 0xe}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r1, r8, r0, r0, r9, r0], &(0x7f0000000800)=[{0x1, 0x1, 0xa, 0x6}, {0x3, 0x1, 0xb}, {0x5, 0x2, 0x9, 0x7}, {0x6, 0x4, 0x5, 0x5}], 0x10, 0x1}, 0x94) 359.802448ms ago: executing program 4 (id=11674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000280)}, 0x20) (async) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000440)={0xa, 0x4e21, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00C'], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000002400)=@ethtool_coalesce={0xe, 0x0, 0x2000000, 0x0, 0x3, 0x1, 0x9, 0x7, 0x4, 0x9, 0x400009, 0xf9, 0xfffffffe, 0x7fffffff, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001a00010024bd70000000000002201400ff0000070002000008000300", @ANYRES32=r7, @ANYBLOB="00800000429a"], 0x34}}, 0xea5bc50b619997fe) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000540)={{&(0x7f00000001c0)=[{0x1, 0x9, 0x3, {0x2, 0x3}, 0x3, 0xffffffffffffffff, 0x1fd}, {0x0, 0x12d, 0x80000000, {0x1000, 0x6cde}, 0x1000, 0xca6, 0x3}, {0x913, 0xf, 0x80000000, {0x83e, 0x6ba}, 0x1, 0x6, 0x4}, {0xf, 0x6, 0xad5, {0x4, 0x4}, 0x1, 0x1, 0x3}, {0x8, 0x7d08, 0x7fff, {0x6, 0x6}, 0x7fff, 0x5, 0x4}, {0x6, 0x4, 0x5abc9ffe, {0x2, 0x7fff7fffffffffff}, 0x1, 0x6, 0x10000}, {0x1, 0x6c, 0xfdb5, {0x4, 0x1}, 0x95b, 0x690f, 0x6}], 0x7, 0x40, 0x757, 0x80000001}, {&(0x7f0000000380)=[{0x8, 0xfffffffffffffffc}, {0x36e, 0x80000001}, {0x5, 0x5}, {0xfffffffffffffff5, 0x8000000000000000}, {0xe, 0xffff}], 0x5, 0x10, 0x7, 0x2}, {&(0x7f0000000400)=[0x3, 0x6, 0x5, 0x1, 0x4, 0x4], 0x6, 0x8, 0xfffe}, {&(0x7f0000000480)=[{0x2, 0x5, 0x3ff, 0x1ffe0, 0x4}], 0x1, 0x28, 0x0, 0x8000000000000001}, {&(0x7f00000004c0)=[0x2, 0x8, 0x81], 0x3, 0x8, 0x6, 0x396}}) 305.531721ms ago: executing program 3 (id=11675): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x14, 0x2f, 0x4, 0x0, 0x25dfdbff, "", [@generic="abd54afb367ecd7e0285348ff8d8f27f47ea93232eeaae8d8b09259e71e06c4853cc4cddb10a077eab088eb6518aedb060f5153b11920e0d2364dc9f868cf4b86b86b68a1fcdc22f372273430772124e5364bb3eab7d55e0b46b7c32bc0aff49fa663daeed4a7860581c3dfb92"]}, 0x14}], 0x1, 0x0, 0x2f, 0x84}, 0x300) read(r0, &(0x7f0000000080)=""/38, 0x26) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x7, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @generic={0x7, 0x6, 0x9, 0x79f, 0x5}, @call={0x85, 0x0, 0x0, 0x82}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x80000000}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x68000}, 0x4040010) 150.299407ms ago: executing program 3 (id=11676): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', 0x0}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b4f7672071979d161b44fbc55fe6513b163c9d9d34fb13bb1581f5ebbb90857d987d6de32304f03d449dc2d5024e38eb5ea1ad87aeb03d1c083b5c2dfa43549c8d951279", 0x44}], 0x1}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}, @FRA_FLOW={0x8, 0xb, 0xffffffff}]}, 0x34}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) unshare(0x20000400) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x20000000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8003, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xba, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="1900b327a77f3985c6992cb2d7b3c900000000000000004000", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=11677): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) (async) kernel console output (not intermixed with test programs): c:0KB active_anon:24048kB inactive_anon:0kB active_file:11580kB inactive_file:163896kB unevictable:1536kB writepending:696kB zspages:0kB present:3129332kB managed:2552632kB mlocked:0kB bounce:0kB free_pcp:41816kB local_pcp:21220kB free_cma:0kB [ 1458.938255][T15861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10415'. [ 1458.947788][T15882] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 1458.948916][T15882] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1458.999728][T15864] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 1459.028492][T15860] lowmem_reserve[]: 0 0 0 0 0 [ 1459.117283][T15860] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1459.153980][T15860] lowmem_reserve[]: 0 0 0 0 0 [ 1459.158825][T15860] Node 1 Normal free:3697368kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:45828kB local_pcp:21976kB free_cma:0kB [ 1459.196205][T15860] lowmem_reserve[]: 0 0 0 0 0 [ 1459.202335][T15860] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 3*128kB (U) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11116kB [ 1459.218616][T15860] Node 0 DMA32: 9612*4kB (UME) 9797*8kB (UME) 5111*16kB (UME) 1551*32kB (UME) 701*64kB (UME) 1194*128kB (UME) 1065*256kB (UM) 560*512kB (UME) 157*1024kB (UME) 39*2048kB (UM) 0*4096kB = 1245928kB [ 1459.238734][T15861] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1459.253792][T15860] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1459.266184][T15886] netlink: 'syz.3.10420': attribute type 12 has an invalid length. [ 1459.286788][T15886] netlink: 'syz.3.10420': attribute type 29 has an invalid length. [ 1459.308899][T15860] Node 1 Normal: 4*4kB (U) 3*8kB (UM) 13*16kB (UM) 3*32kB (UM) 14*64kB (UM) 10*128kB (UM) 9*256kB (UM) 8*512kB (UM) 6*1024kB (UM) 4*2048kB (U) 897*4096kB (UM) = 3697368kB [ 1459.331599][T15886] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10420'. [ 1459.344960][T15860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1459.367275][T15860] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1459.378929][T15889] netlink: 'syz.3.10420': attribute type 12 has an invalid length. [ 1459.387673][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10422'. [ 1459.402070][T15860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1459.421062][T15889] netlink: 'syz.3.10420': attribute type 29 has an invalid length. [ 1459.429132][T15860] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1459.478756][T15860] 45365 total pagecache pages [ 1459.509044][T15860] 0 pages in swap cache [ 1459.527607][T15860] Free swap = 124996kB [ 1459.540885][T15860] Total swap = 124996kB [ 1459.545139][T15860] 2097051 pages RAM [ 1459.555250][T15860] 0 pages HighMem/MovableOnly [ 1459.565352][T15860] 427110 pages reserved [ 1459.575665][T15860] 0 pages cma reserved [ 1459.811472][T15914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1459.889423][T15917] netlink: 'syz.0.10430': attribute type 1 has an invalid length. [ 1459.928299][T15917] bond6: entered promiscuous mode [ 1459.934990][T15917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1459.951874][T15917] bond6: entered allmulticast mode [ 1459.981235][T15917] bond6: (slave bridge6): making interface the new active one [ 1459.988964][T15917] bridge6: entered promiscuous mode [ 1459.998681][T15917] bridge6: entered allmulticast mode [ 1460.007304][T15917] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1460.295987][T15936] netlink: 'syz.4.10437': attribute type 10 has an invalid length. [ 1460.304920][T15936] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 1460.327412][T15936] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 1460.795633][T15957] netlink: 'syz.2.10444': attribute type 1 has an invalid length. [ 1460.859563][T15957] bond6: entered promiscuous mode [ 1460.866382][T15957] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1460.927472][T15957] bond6: entered allmulticast mode [ 1461.016313][T15957] bond6: (slave bridge3): making interface the new active one [ 1461.052535][T15957] bridge3: entered promiscuous mode [ 1461.085890][T15957] bridge3: entered allmulticast mode [ 1461.113888][T15957] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1461.169463][T15982] FAULT_INJECTION: forcing a failure. [ 1461.169463][T15982] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.184736][T15982] CPU: 1 UID: 0 PID: 15982 Comm: syz.4.10450 Not tainted syzkaller #0 PREEMPT(full) [ 1461.184764][T15982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1461.184778][T15982] Call Trace: [ 1461.184786][T15982] [ 1461.184796][T15982] dump_stack_lvl+0xe8/0x150 [ 1461.184826][T15982] should_fail_ex+0x412/0x560 [ 1461.184856][T15982] should_failslab+0xa8/0x100 [ 1461.184878][T15982] ? inet_bind2_bucket_create+0x34/0x510 [ 1461.185009][T15982] kmem_cache_alloc_noprof+0x87/0x650 [ 1461.185041][T15982] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1461.185077][T15982] inet_bind2_bucket_create+0x34/0x510 [ 1461.185107][T15982] inet_csk_get_port+0xf33/0x16d0 [ 1461.185141][T15982] ? do_raw_spin_lock+0x12b/0x2f0 [ 1461.185180][T15982] ? __inet6_bind+0x30c/0xf60 [ 1461.185238][T15982] ? __inet6_bind+0x455/0xf60 [ 1461.185275][T15982] __inet6_bind+0x6e5/0xf60 [ 1461.185327][T15982] __sys_bind+0x2e3/0x410 [ 1461.185361][T15982] ? __pfx___sys_bind+0x10/0x10 [ 1461.185404][T15982] ? __pfx_ksys_write+0x10/0x10 [ 1461.185440][T15982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.185463][T15982] __x64_sys_bind+0x7a/0x90 [ 1461.185494][T15982] do_syscall_64+0x174/0xf80 [ 1461.185514][T15982] ? trace_irq_disable+0x3b/0x140 [ 1461.185545][T15982] ? clear_bhb_loop+0x40/0x90 [ 1461.185571][T15982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.185592][T15982] RIP: 0033:0x7fe5ced9ce59 [ 1461.185611][T15982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.185630][T15982] RSP: 002b:00007fe5cfc0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1461.185651][T15982] RAX: ffffffffffffffda RBX: 00007fe5cf015fa0 RCX: 00007fe5ced9ce59 [ 1461.185666][T15982] RDX: 000000000000001c RSI: 0000200000000200 RDI: 0000000000000003 [ 1461.185680][T15982] RBP: 00007fe5cfc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.185692][T15982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.185704][T15982] R13: 00007fe5cf016038 R14: 00007fe5cf015fa0 R15: 00007ffcbad918f8 [ 1461.185738][T15982] [ 1461.934919][T16025] netlink: 'syz.2.10464': attribute type 1 has an invalid length. [ 1462.112091][T16033] FAULT_INJECTION: forcing a failure. [ 1462.112091][T16033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.144841][T16033] CPU: 0 UID: 0 PID: 16033 Comm: syz.1.10465 Not tainted syzkaller #0 PREEMPT(full) [ 1462.144870][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1462.144884][T16033] Call Trace: [ 1462.144893][T16033] [ 1462.144902][T16033] dump_stack_lvl+0xe8/0x150 [ 1462.144933][T16033] should_fail_ex+0x412/0x560 [ 1462.144963][T16033] _copy_to_user+0x31/0xb0 [ 1462.144992][T16033] simple_read_from_buffer+0xe1/0x170 [ 1462.145069][T16033] proc_fail_nth_read+0x1bb/0x230 [ 1462.145138][T16033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1462.145169][T16033] ? rw_verify_area+0x2a6/0x4d0 [ 1462.145198][T16033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1462.145224][T16033] vfs_read+0x20c/0xa70 [ 1462.145260][T16033] ? __pfx___mutex_lock+0x10/0x10 [ 1462.145284][T16033] ? __pfx_vfs_read+0x10/0x10 [ 1462.145325][T16033] ? __fget_files+0x2a/0x420 [ 1462.145369][T16033] ? __fget_files+0x3a0/0x420 [ 1462.145403][T16033] ? __fget_files+0x2a/0x420 [ 1462.145446][T16033] ksys_read+0x150/0x270 [ 1462.145485][T16033] ? __pfx_ksys_read+0x10/0x10 [ 1462.145539][T16033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.145570][T16033] do_syscall_64+0x174/0xf80 [ 1462.145596][T16033] ? trace_irq_disable+0x3b/0x140 [ 1462.145627][T16033] ? clear_bhb_loop+0x40/0x90 [ 1462.145652][T16033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.145673][T16033] RIP: 0033:0x7f9d5e95d68e [ 1462.145709][T16033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1462.145728][T16033] RSP: 002b:00007f9d5f818fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1462.145757][T16033] RAX: ffffffffffffffda RBX: 00007f9d5f8196c0 RCX: 00007f9d5e95d68e [ 1462.145779][T16033] RDX: 000000000000000f RSI: 00007f9d5f8190a0 RDI: 0000000000000005 [ 1462.145799][T16033] RBP: 00007f9d5f819090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.145812][T16033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.145831][T16033] R13: 00007f9d5ec16038 R14: 00007f9d5ec15fa0 R15: 00007ffd2ca06118 [ 1462.145873][T16033] [ 1462.577260][T16027] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1462.595423][T16027] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1462.617468][T16027] bond7: (slave vxcan3): making interface the new active one [ 1462.629034][T16027] bond7: (slave vxcan3): Enslaving as an active interface with an up link [ 1462.659411][T16042] PKCS7: Unknown OID: [4] (bad) [ 1462.693571][T16042] PKCS7: Only support pkcs7_signedData type [ 1462.781641][T16042] Cannot find del_set index 8192 as target [ 1463.073058][T16057] __nla_validate_parse: 14 callbacks suppressed [ 1463.073080][T16057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10473'. [ 1463.113209][T16057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10473'. [ 1463.116556][T16049] bond8 (unregistering): Released all slaves [ 1463.132091][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10473'. [ 1463.142418][T16061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10473'. [ 1463.294389][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10475'. [ 1463.347323][T16068] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1463.397612][T16068] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1463.411376][T16068] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1463.419552][T16068] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1463.429590][T16068] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1463.484760][T16067] bond0: entered promiscuous mode [ 1463.504918][T16076] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10476'. [ 1463.518259][T16067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.858113][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10479'. [ 1463.975526][T16090] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10482'. [ 1464.305136][T16097] tipc: Enabled bearer , priority 5 [ 1464.328824][T16099] netlink: 'syz.0.10485': attribute type 3 has an invalid length. [ 1464.342832][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10484'. [ 1464.377540][T16097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10484'. [ 1464.715374][T16107] x_tables: duplicate underflow at hook 1 [ 1465.193298][T16129] syzkaller0: entered promiscuous mode [ 1465.212222][T16129] syzkaller0: entered allmulticast mode [ 1465.647289][T16146] bridge4: entered promiscuous mode [ 1465.662017][T16146] bridge4: entered allmulticast mode [ 1465.704546][T16146] team0: Port device bridge4 added [ 1465.734860][T16153] bridge0: port 1(team0) entered blocking state [ 1465.745228][T16153] bridge0: port 1(team0) entered disabled state [ 1465.753892][T16153] team0: entered allmulticast mode [ 1465.763583][T16153] team0: entered promiscuous mode [ 1465.783403][T16143] lo speed is unknown, defaulting to 1000 [ 1465.833498][T16160] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1465.963470][T16162] openvswitch: netlink: ufid size 5756 bytes exceeds the range (1, 16) [ 1466.005298][T16162] ip6tnl2: entered allmulticast mode [ 1466.019078][T16166] netlink: 'syz.4.10509': attribute type 3 has an invalid length. [ 1466.025752][ T73] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1466.046094][ T73] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1466.054156][T17754] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1466.313997][T16172] netlink: 'syz.4.10511': attribute type 1 has an invalid length. [ 1466.420730][T17754] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1466.467650][T16173] gretap2: entered allmulticast mode [ 1466.489114][T16173] bond8: (slave gretap2): making interface the new active one [ 1466.498213][T16173] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1466.722533][T17754] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1466.813111][T16191] FAULT_INJECTION: forcing a failure. [ 1466.813111][T16191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.907796][T16191] CPU: 1 UID: 0 PID: 16191 Comm: syz.1.10517 Not tainted syzkaller #0 PREEMPT(full) [ 1466.907826][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1466.907840][T16191] Call Trace: [ 1466.907849][T16191] [ 1466.907859][T16191] dump_stack_lvl+0xe8/0x150 [ 1466.907889][T16191] should_fail_ex+0x412/0x560 [ 1466.907918][T16191] _copy_to_user+0x31/0xb0 [ 1466.907948][T16191] bpf_verifier_vlog+0x3ba/0x8f0 [ 1466.907982][T16191] __btf_verifier_log+0xe2/0x140 [ 1466.908019][T16191] ? __pfx___btf_verifier_log+0x10/0x10 [ 1466.908054][T16191] ? btf_func_proto_log+0x64e/0x850 [ 1466.908086][T16191] __btf_verifier_log_type+0x4fb/0x690 [ 1466.908131][T16191] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1466.908170][T16191] ? __pfx_sort+0x10/0x10 [ 1466.908256][T16191] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1466.908286][T16191] btf_func_proto_check_meta+0xed/0x160 [ 1466.908325][T16191] btf_parse_type_sec+0x446/0x24f0 [ 1466.908358][T16191] ? __pfx_btf_check_sec_info+0x10/0x10 [ 1466.908391][T16191] ? btf_parse_str_sec+0x265/0x310 [ 1466.908414][T16191] ? btf_parse_layout_sec+0x67/0x270 [ 1466.908442][T16191] btf_new_fd+0x444/0xd40 [ 1466.908478][T16191] ? __pfx_btf_new_fd+0x10/0x10 [ 1466.908505][T16191] ? bpf_token_put+0x143/0x160 [ 1466.908527][T16191] ? bpf_btf_load+0x126/0x190 [ 1466.908551][T16191] __sys_bpf+0x4e5/0x950 [ 1466.908585][T16191] ? __pfx___sys_bpf+0x10/0x10 [ 1466.908633][T16191] ? ksys_write+0x242/0x270 [ 1466.908666][T16191] ? __pfx_ksys_write+0x10/0x10 [ 1466.908700][T16191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.908724][T16191] __x64_sys_bpf+0x7c/0x90 [ 1466.908753][T16191] do_syscall_64+0x174/0xf80 [ 1466.908774][T16191] ? trace_irq_disable+0x3b/0x140 [ 1466.908806][T16191] ? clear_bhb_loop+0x40/0x90 [ 1466.908832][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.908853][T16191] RIP: 0033:0x7f9d5e99ce59 [ 1466.908872][T16191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1466.908891][T16191] RSP: 002b:00007f9d5f819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1466.908914][T16191] RAX: ffffffffffffffda RBX: 00007f9d5ec15fa0 RCX: 00007f9d5e99ce59 [ 1466.908929][T16191] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 1466.908943][T16191] RBP: 00007f9d5f819090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.908957][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1466.908969][T16191] R13: 00007f9d5ec16038 R14: 00007f9d5ec15fa0 R15: 00007ffd2ca06118 [ 1466.909003][T16191] [ 1467.456103][T16202] netlink: 'syz.2.10522': attribute type 5 has an invalid length. [ 1467.498019][T16202] geneve3: entered promiscuous mode [ 1467.504090][T16202] geneve3: entered allmulticast mode [ 1467.525384][T29369] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1467.534344][T29369] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1467.553775][T29369] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1467.570561][T16205] netlink: 'syz.4.10523': attribute type 1 has an invalid length. [ 1467.578503][T29369] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1467.655000][T16211] bond9: (slave dummy0): making interface the new active one [ 1467.666858][T16211] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1467.911145][T16227] erspan1: entered promiscuous mode [ 1467.928240][T16227] erspan1: entered allmulticast mode [ 1467.965390][T16227] xt_l2tp: v2 sid > 0xffff: 8388608 [ 1467.998795][T16227] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1468.008098][T16228] syzkaller0: entered promiscuous mode [ 1468.015335][T16228] syzkaller0: entered allmulticast mode [ 1468.200082][T16235] netlink: 'syz.2.10531': attribute type 3 has an invalid length. [ 1468.313168][T16244] __nla_validate_parse: 8 callbacks suppressed [ 1468.313191][T16244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10534'. [ 1468.354087][T16244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10534'. [ 1468.402358][T17760] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 1330 sec [ 1468.662683][T16263] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10540'. [ 1469.131515][T16284] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10545'. [ 1469.165891][T16284] netlink: 'syz.0.10545': attribute type 9 has an invalid length. [ 1469.174788][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10546'. [ 1469.202803][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10546'. [ 1469.236412][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10546'. [ 1469.505464][T16313] netlink: 'syz.4.10553': attribute type 3 has an invalid length. [ 1470.245923][T16346] lo speed is unknown, defaulting to 1000 [ 1470.320421][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1470.456497][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10568'. [ 1470.834214][ T30] audit: type=1804 audit(1779959279.379:38): pid=16380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.10575" name="/newroot/263/cgroup.controllers" dev="tmpfs" ino=1360 res=1 errno=0 [ 1470.904174][ T30] audit: type=1800 audit(1779959279.379:39): pid=16380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10575" name="cgroup.controllers" dev="tmpfs" ino=1360 res=0 errno=0 [ 1471.065045][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10577'. [ 1471.279844][T16403] geneve2: entered promiscuous mode [ 1471.343212][ T3287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.367207][ T3287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.382984][ T3287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.398466][ T3287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.059974][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10583'. [ 1472.209670][T16432] sctp: [Deprecated]: syz.0.10586 (pid 16432) Use of int in maxseg socket option. [ 1472.209670][T16432] Use struct sctp_assoc_value instead [ 1472.890480][T16461] FAULT_INJECTION: forcing a failure. [ 1472.890480][T16461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.922885][T16461] CPU: 1 UID: 0 PID: 16461 Comm: syz.0.10593 Not tainted syzkaller #0 PREEMPT(full) [ 1472.922915][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1472.922928][T16461] Call Trace: [ 1472.922937][T16461] [ 1472.922947][T16461] dump_stack_lvl+0xe8/0x150 [ 1472.922978][T16461] should_fail_ex+0x412/0x560 [ 1472.923006][T16461] _copy_to_user+0x31/0xb0 [ 1472.923035][T16461] bpf_verifier_vlog+0x3ba/0x8f0 [ 1472.923057][T16461] ? do_syscall_64+0x174/0xf80 [ 1472.923088][T16461] __btf_verifier_log+0xe2/0x140 [ 1472.923123][T16461] ? __pfx___btf_verifier_log+0x10/0x10 [ 1472.923167][T16461] __btf_verifier_log_type+0x3c6/0x690 [ 1472.923204][T16461] ? rcu_is_watching+0x15/0xb0 [ 1472.923233][T16461] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1472.923266][T16461] ? btf_parse_type_sec+0xa13/0x24f0 [ 1472.923292][T16461] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1472.923329][T16461] btf_parse_type_sec+0x22c9/0x24f0 [ 1472.923360][T16461] ? __pfx_btf_check_sec_info+0x10/0x10 [ 1472.923399][T16461] btf_new_fd+0x444/0xd40 [ 1472.923433][T16461] ? __pfx_btf_new_fd+0x10/0x10 [ 1472.923459][T16461] ? bpf_token_put+0x143/0x160 [ 1472.923482][T16461] ? bpf_btf_load+0x126/0x190 [ 1472.923506][T16461] __sys_bpf+0x4e5/0x950 [ 1472.923539][T16461] ? __pfx___sys_bpf+0x10/0x10 [ 1472.923585][T16461] ? ksys_write+0x242/0x270 [ 1472.923615][T16461] ? __pfx_ksys_write+0x10/0x10 [ 1472.923653][T16461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.923676][T16461] __x64_sys_bpf+0x7c/0x90 [ 1472.923704][T16461] do_syscall_64+0x174/0xf80 [ 1472.923723][T16461] ? trace_irq_disable+0x3b/0x140 [ 1472.923752][T16461] ? clear_bhb_loop+0x40/0x90 [ 1472.923778][T16461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.923806][T16461] RIP: 0033:0x7fc97839ce59 [ 1472.923825][T16461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.923843][T16461] RSP: 002b:00007fc97928a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1472.923865][T16461] RAX: ffffffffffffffda RBX: 00007fc978615fa0 RCX: 00007fc97839ce59 [ 1472.923880][T16461] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 1472.923894][T16461] RBP: 00007fc97928a090 R08: 0000000000000000 R09: 0000000000000000 [ 1472.923907][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.923919][T16461] R13: 00007fc978616038 R14: 00007fc978615fa0 R15: 00007ffead9594e8 [ 1472.923951][T16461] [ 1473.245407][T16469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1473.329947][T16474] __nla_validate_parse: 1 callbacks suppressed [ 1473.329968][T16474] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10598'. [ 1473.451321][T16483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10598'. [ 1473.491719][T16472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.662522][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10598'. [ 1473.824058][T16472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.904838][T16502] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10605'. [ 1474.032837][T16472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.049594][T16510] FAULT_INJECTION: forcing a failure. [ 1474.049594][T16510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1474.078701][T16510] CPU: 1 UID: 0 PID: 16510 Comm: syz.2.10608 Not tainted syzkaller #0 PREEMPT(full) [ 1474.078731][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1474.078744][T16510] Call Trace: [ 1474.078754][T16510] [ 1474.078764][T16510] dump_stack_lvl+0xe8/0x150 [ 1474.078795][T16510] should_fail_ex+0x412/0x560 [ 1474.078825][T16510] _copy_to_user+0x31/0xb0 [ 1474.078854][T16510] bpf_verifier_vlog+0x3ba/0x8f0 [ 1474.078889][T16510] btf_verifier_log+0x11d/0x1a0 [ 1474.078927][T16510] ? __pfx_btf_verifier_log+0x10/0x10 [ 1474.078962][T16510] ? kasan_save_track+0x4f/0x80 [ 1474.078989][T16510] ? kasan_save_track+0x3e/0x80 [ 1474.079016][T16510] ? __kasan_kmalloc+0x93/0xb0 [ 1474.079052][T16510] __btf_verifier_log_type+0x45b/0x690 [ 1474.079098][T16510] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1474.079146][T16510] btf_array_resolve+0x1e3/0xff0 [ 1474.079183][T16510] btf_resolve+0x42c/0x1490 [ 1474.079221][T16510] btf_parse_type_sec+0xe33/0x24f0 [ 1474.079254][T16510] ? __pfx_btf_check_sec_info+0x10/0x10 [ 1474.079292][T16510] ? btf_parse_layout_sec+0x67/0x270 [ 1474.079321][T16510] btf_new_fd+0x444/0xd40 [ 1474.079358][T16510] ? __pfx_btf_new_fd+0x10/0x10 [ 1474.079385][T16510] ? bpf_token_put+0x143/0x160 [ 1474.079408][T16510] ? bpf_btf_load+0x126/0x190 [ 1474.079431][T16510] __sys_bpf+0x4e5/0x950 [ 1474.079463][T16510] ? __pfx___sys_bpf+0x10/0x10 [ 1474.079511][T16510] ? ksys_write+0x242/0x270 [ 1474.079543][T16510] ? __pfx_ksys_write+0x10/0x10 [ 1474.079578][T16510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.079601][T16510] __x64_sys_bpf+0x7c/0x90 [ 1474.079630][T16510] do_syscall_64+0x174/0xf80 [ 1474.079650][T16510] ? trace_irq_disable+0x3b/0x140 [ 1474.079680][T16510] ? clear_bhb_loop+0x40/0x90 [ 1474.079715][T16510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.079736][T16510] RIP: 0033:0x7fe00ff9ce59 [ 1474.079756][T16510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.079774][T16510] RSP: 002b:00007fe010f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1474.079797][T16510] RAX: ffffffffffffffda RBX: 00007fe010215fa0 RCX: 00007fe00ff9ce59 [ 1474.079813][T16510] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 1474.079826][T16510] RBP: 00007fe010f08090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.079839][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.079852][T16510] R13: 00007fe010216038 R14: 00007fe010215fa0 R15: 00007ffd18a6bb48 [ 1474.079886][T16510] [ 1474.491230][T16472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.633934][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10612'. [ 1474.655713][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10612'. [ 1474.693906][T16520] xt_HMARK: proto mask must be zero with L3 mode [ 1474.896420][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10615'. [ 1474.932774][T29369] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.951613][T16540] netlink: 'syz.2.10615': attribute type 22 has an invalid length. [ 1475.003148][T16536] netlink: 'syz.2.10615': attribute type 1 has an invalid length. [ 1475.005800][T16540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10615'. [ 1475.069229][T16536] netlink: 'syz.2.10615': attribute type 2 has an invalid length. [ 1475.085140][T16541] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10615'. [ 1475.105255][T16536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10615'. [ 1475.165573][T29369] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.246519][T29367] smbdirect: ib_dev[syz1] removed [ 1475.258259][T16541] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1475.305171][T16541] bond0 (unregistering): Released all slaves [ 1475.431626][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.507241][ T1007] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.816723][T16561] FAULT_INJECTION: forcing a failure. [ 1475.816723][T16561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.835096][T16561] CPU: 1 UID: 0 PID: 16561 Comm: syz.1.10622 Not tainted syzkaller #0 PREEMPT(full) [ 1475.835126][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1475.835138][T16561] Call Trace: [ 1475.835146][T16561] [ 1475.835155][T16561] dump_stack_lvl+0xe8/0x150 [ 1475.835203][T16561] should_fail_ex+0x412/0x560 [ 1475.835230][T16561] _copy_to_user+0x31/0xb0 [ 1475.835259][T16561] btf_new_fd+0x5b4/0xd40 [ 1475.835296][T16561] ? __pfx_btf_new_fd+0x10/0x10 [ 1475.835323][T16561] ? bpf_token_put+0x143/0x160 [ 1475.835346][T16561] ? bpf_btf_load+0x126/0x190 [ 1475.835368][T16561] __sys_bpf+0x4e5/0x950 [ 1475.835401][T16561] ? __pfx___sys_bpf+0x10/0x10 [ 1475.835450][T16561] ? ksys_write+0x242/0x270 [ 1475.835482][T16561] ? __pfx_ksys_write+0x10/0x10 [ 1475.835516][T16561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.835574][T16561] __x64_sys_bpf+0x7c/0x90 [ 1475.835603][T16561] do_syscall_64+0x174/0xf80 [ 1475.835624][T16561] ? trace_irq_disable+0x3b/0x140 [ 1475.835653][T16561] ? clear_bhb_loop+0x40/0x90 [ 1475.835678][T16561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.835697][T16561] RIP: 0033:0x7f9d5e99ce59 [ 1475.835715][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1475.835730][T16561] RSP: 002b:00007f9d5f819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1475.835750][T16561] RAX: ffffffffffffffda RBX: 00007f9d5ec15fa0 RCX: 00007f9d5e99ce59 [ 1475.835762][T16561] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 1475.835773][T16561] RBP: 00007f9d5f819090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.835788][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1475.835797][T16561] R13: 00007f9d5ec16038 R14: 00007f9d5ec15fa0 R15: 00007ffd2ca06118 [ 1475.835824][T16561] [ 1476.116366][T16573] syzkaller0: entered promiscuous mode [ 1476.135535][T16573] syzkaller0: entered allmulticast mode [ 1476.291879][T16566] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1476.306905][T16566] bond10 (unregistering): Released all slaves [ 1476.673340][T16601] tipc: Enabled bearer , priority 2 [ 1478.006102][T16680] netlink: 'syz.1.10657': attribute type 1 has an invalid length. [ 1478.069034][T16680] bond12: entered promiscuous mode [ 1478.075511][T16680] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1478.105901][T16687] : (slave syz_tun): Releasing backup interface [ 1478.125296][T16687] team0: Port device syz_tun added [ 1478.135318][T16680] bond12: entered allmulticast mode [ 1478.205778][T16680] bond12: (slave bridge10): making interface the new active one [ 1478.216455][T16680] bridge10: entered promiscuous mode [ 1478.226804][T16680] bridge10: entered allmulticast mode [ 1478.248002][T16680] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 1478.294312][T16687] team0: Port device syz_tun removed [ 1478.312391][T16687] bridge_slave_0: left allmulticast mode [ 1478.325621][T16687] bridge_slave_0: left promiscuous mode [ 1478.357194][T16687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.395006][T16687] bridge_slave_1: left allmulticast mode [ 1478.410876][T16687] bridge_slave_1: left promiscuous mode [ 1478.421924][T16687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.457136][T16687] : (slave bond_slave_0): Releasing backup interface [ 1478.492554][T16687] : (slave bond_slave_1): Releasing backup interface [ 1478.531641][T16687] team0: Port device team_slave_0 removed [ 1478.563288][T16687] bond8: (slave team_slave_1): Releasing backup interface [ 1478.586919][T16687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1478.720414][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1478.792032][T16701] __nla_validate_parse: 10 callbacks suppressed [ 1478.792054][T16701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10662'. [ 1479.178156][T16728] FAULT_INJECTION: forcing a failure. [ 1479.178156][T16728] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.193156][T16728] CPU: 1 UID: 0 PID: 16728 Comm: syz.0.10664 Not tainted syzkaller #0 PREEMPT(full) [ 1479.193185][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1479.193199][T16728] Call Trace: [ 1479.193208][T16728] [ 1479.193218][T16728] dump_stack_lvl+0xe8/0x150 [ 1479.193258][T16728] should_fail_ex+0x412/0x560 [ 1479.193288][T16728] should_failslab+0xa8/0x100 [ 1479.193311][T16728] __kmalloc_node_noprof+0xf0/0x7c0 [ 1479.193340][T16728] ? lock_acquire+0x106/0x350 [ 1479.193364][T16728] ? qdisc_alloc+0x92/0x9e0 [ 1479.193456][T16728] qdisc_alloc+0x92/0x9e0 [ 1479.193488][T16728] qdisc_create+0x12c/0xf20 [ 1479.193521][T16728] ? lockdep_rtnl_is_held+0x26/0x40 [ 1479.193547][T16728] ? qdisc_lookup+0x36d/0x6d0 [ 1479.193575][T16728] tc_modify_qdisc+0x16f0/0x2290 [ 1479.193604][T16728] ? rcu_is_watching+0x15/0xb0 [ 1479.193644][T16728] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1479.193706][T16728] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1479.193734][T16728] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1479.193764][T16728] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1479.193793][T16728] ? netlink_sendmsg+0x5d4/0xb40 [ 1479.193839][T16728] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1479.193873][T16728] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1479.193907][T16728] ? __lock_acquire+0x6b5/0x2cf0 [ 1479.193945][T16728] netlink_rcv_skb+0x232/0x4b0 [ 1479.193969][T16728] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1479.194003][T16728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1479.194042][T16728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1479.194065][T16728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1479.194095][T16728] netlink_unicast+0x75c/0x8e0 [ 1479.194129][T16728] netlink_sendmsg+0x813/0xb40 [ 1479.194163][T16728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1479.194192][T16728] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1479.194235][T16728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1479.194269][T16728] ____sys_sendmsg+0x972/0x9f0 [ 1479.194292][T16728] ? __might_fault+0xaf/0x130 [ 1479.194328][T16728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1479.194362][T16728] ? import_iovec+0x73/0xa0 [ 1479.194391][T16728] ___sys_sendmsg+0x2a5/0x360 [ 1479.194413][T16728] ? __lock_acquire+0x6b5/0x2cf0 [ 1479.194440][T16728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1479.194504][T16728] ? __fget_files+0x2a/0x420 [ 1479.194528][T16728] ? __fget_files+0x3a0/0x420 [ 1479.194567][T16728] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1479.194594][T16728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1479.194629][T16728] ? __pfx_ksys_write+0x10/0x10 [ 1479.194670][T16728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.194694][T16728] do_syscall_64+0x174/0xf80 [ 1479.194714][T16728] ? trace_irq_disable+0x3b/0x140 [ 1479.194746][T16728] ? clear_bhb_loop+0x40/0x90 [ 1479.194772][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.194794][T16728] RIP: 0033:0x7fc97839ce59 [ 1479.194815][T16728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1479.194833][T16728] RSP: 002b:00007fc97928a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1479.194855][T16728] RAX: ffffffffffffffda RBX: 00007fc978615fa0 RCX: 00007fc97839ce59 [ 1479.194871][T16728] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1479.194885][T16728] RBP: 00007fc97928a090 R08: 0000000000000000 R09: 0000000000000000 [ 1479.194898][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1479.194911][T16728] R13: 00007fc978616038 R14: 00007fc978615fa0 R15: 00007ffead9594e8 [ 1479.194947][T16728] [ 1479.569358][T16730] netlink: 'syz.4.10669': attribute type 1 has an invalid length. [ 1479.629374][T16730] bond11: entered promiscuous mode [ 1479.635186][T16730] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1479.652870][T16730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10669'. [ 1479.662718][T16730] bond11: entered allmulticast mode [ 1479.685070][T16730] bond11: (slave bridge6): making interface the new active one [ 1479.692786][T16730] bridge6: entered promiscuous mode [ 1479.698221][T16730] bridge6: entered allmulticast mode [ 1479.705738][T16730] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 1479.737659][T16739] netlink: 'syz.3.10671': attribute type 5 has an invalid length. [ 1479.772395][T16739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10671'. [ 1479.808524][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10672'. [ 1479.831872][T16739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10671'. [ 1479.852206][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10672'. [ 1479.964525][T16739] bond10 (unregistering): Released all slaves [ 1479.997654][T16756] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10671'. [ 1480.632679][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10677'. [ 1480.698503][T16766] netlink: 'syz.3.10677': attribute type 3 has an invalid length. [ 1481.173726][T16772] netlink: 'syz.4.10679': attribute type 1 has an invalid length. [ 1481.229550][T16772] bond12: entered promiscuous mode [ 1481.239399][T16772] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1481.247483][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10679'. [ 1481.301499][T16772] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1481.337466][T16772] bond12: (slave ipip0): The slave device specified does not support setting the MAC address [ 1481.381464][T16772] bond12: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 1481.397912][T16784] x_tables: duplicate underflow at hook 1 [ 1481.403914][T16772] bond12: (slave ipip0): making interface the new active one [ 1481.403941][T16772] ipip0: entered promiscuous mode [ 1481.417321][T16772] bond12: (slave ipip0): Enslaving as an active interface with an up link [ 1481.563406][T16783] lo speed is unknown, defaulting to 1000 [ 1481.867823][T16802] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1481.966271][T16805] netlink: 'syz.4.10685': attribute type 13 has an invalid length. [ 1482.037977][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10685'. [ 1482.259635][T16805] tipc: Resetting bearer [ 1484.383800][T16842] netlink: 'syz.1.10692': attribute type 10 has an invalid length. [ 1484.483268][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.817405][T16840] bond0: (slave bond_slave_0): Releasing backup interface [ 1484.892087][T16840] bond0: (slave bond_slave_1): Releasing backup interface [ 1484.950021][T16840] batman_adv: 60X: Removing interface: batadv_slave_0 [ 1484.966050][T16840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1485.068838][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10693'. [ 1485.136783][T16849] bridge5: entered promiscuous mode [ 1485.144365][T16849] bridge5: entered allmulticast mode [ 1485.288322][T16854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10695'. [ 1485.394096][T16860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10697'. [ 1485.404524][T16860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10697'. [ 1485.524147][T16861] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1485.553630][T16861] bond8 (unregistering): Released all slaves [ 1485.727900][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10700'. [ 1485.935322][T16884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10701'. [ 1486.010097][T16764] Set syz1 is full, maxelem 65536 reached [ 1486.159494][T16903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10705'. [ 1486.234583][T16909] netlink: 'syz.0.10703': attribute type 11 has an invalid length. [ 1486.237306][T16907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10707'. [ 1486.315292][T16907] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10707'. [ 1486.405075][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10709'. [ 1486.726561][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.753465][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.229114][T16945] sctp: [Deprecated]: syz.4.10716 (pid 16945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1487.229114][T16945] Use struct sctp_sack_info instead [ 1487.434675][T16948] lo speed is unknown, defaulting to 1000 [ 1487.557856][T16959] netlink: 'syz.2.10718': attribute type 21 has an invalid length. [ 1487.600945][T16959] netlink: 'syz.2.10718': attribute type 22 has an invalid length. [ 1487.613439][T16959] netlink: 'syz.2.10718': attribute type 23 has an invalid length. [ 1487.767527][T16966] syzkaller0: entered promiscuous mode [ 1487.782130][T16966] syzkaller0: entered allmulticast mode [ 1487.954196][T16977] netlink: 'syz.2.10723': attribute type 13 has an invalid length. [ 1489.569084][T17034] syzkaller1: entered promiscuous mode [ 1489.583276][T17034] syzkaller1: entered allmulticast mode [ 1490.151144][T17061] __nla_validate_parse: 13 callbacks suppressed [ 1490.151167][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10744'. [ 1490.248101][T17070] netlink: 'syz.2.10746': attribute type 2 has an invalid length. [ 1490.297948][T17072] netlink: 'syz.1.10747': attribute type 4 has an invalid length. [ 1490.307988][T17072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10747'. [ 1490.372536][T17068] 8021q: adding VLAN 0 to HW filter on device  [ 1490.384073][T17068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.476629][T17068] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1490.573642][T17083] mac80211_hwsim hwsim116 ;: renamed from wlan0 [ 1490.595893][T17089] : renamed from bond_slave_0 (while UP) [ 1490.597383][T17070] syz.2.10746: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1490.624263][T17070] CPU: 1 UID: 0 PID: 17070 Comm: syz.2.10746 Not tainted syzkaller #0 PREEMPT(full) [ 1490.624290][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1490.624304][T17070] Call Trace: [ 1490.624313][T17070] [ 1490.624323][T17070] dump_stack_lvl+0xe8/0x150 [ 1490.624357][T17070] warn_alloc+0x249/0x340 [ 1490.624391][T17070] ? stack_trace_save+0xa9/0x100 [ 1490.624429][T17070] ? __pfx_warn_alloc+0x10/0x10 [ 1490.624468][T17070] ? kasan_save_track+0x4f/0x80 [ 1490.624496][T17070] ? kasan_save_track+0x3e/0x80 [ 1490.624522][T17070] ? __kasan_kmalloc+0x93/0xb0 [ 1490.624551][T17070] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1490.624578][T17070] ? xskq_create+0x56/0x170 [ 1490.624607][T17070] ? xsk_setsockopt+0x54c/0x990 [ 1490.624632][T17070] ? do_sock_setsockopt+0x17c/0x1b0 [ 1490.624653][T17070] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1490.624673][T17070] ? do_syscall_64+0x174/0xf80 [ 1490.624702][T17070] __vmalloc_node_range_noprof+0x132/0x1750 [ 1490.624769][T17070] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1490.624807][T17070] ? __kasan_kmalloc+0x93/0xb0 [ 1490.624843][T17070] vmalloc_user_noprof+0xad/0xe0 [ 1490.624873][T17070] ? xskq_create+0xbf/0x170 [ 1490.624902][T17070] xskq_create+0xbf/0x170 [ 1490.624934][T17070] xsk_init_queue+0x8a/0xe0 [ 1490.624966][T17070] xsk_setsockopt+0x54c/0x990 [ 1490.624996][T17070] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1490.625024][T17070] ? __pfx_aa_sk_perm+0x10/0x10 [ 1490.625058][T17070] ? aa_sock_opt_perm+0xff/0x1a0 [ 1490.625092][T17070] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1490.625120][T17070] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1490.625149][T17070] do_sock_setsockopt+0x17c/0x1b0 [ 1490.625177][T17070] __x64_sys_setsockopt+0x13d/0x1b0 [ 1490.625202][T17070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.625235][T17070] do_syscall_64+0x174/0xf80 [ 1490.625254][T17070] ? trace_irq_disable+0x3b/0x140 [ 1490.625286][T17070] ? clear_bhb_loop+0x40/0x90 [ 1490.625314][T17070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.625336][T17070] RIP: 0033:0x7fe00ff9ce59 [ 1490.625357][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.625376][T17070] RSP: 002b:00007fe010f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1490.625398][T17070] RAX: ffffffffffffffda RBX: 00007fe010215fa0 RCX: 00007fe00ff9ce59 [ 1490.625414][T17070] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 1490.625427][T17070] RBP: 00007fe010032d6f R08: 0000000000000004 R09: 0000000000000000 [ 1490.625441][T17070] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.625454][T17070] R13: 00007fe010216038 R14: 00007fe010215fa0 R15: 00007ffd18a6bb48 [ 1490.625489][T17070] [ 1490.625512][T17070] Mem-Info: [ 1490.905813][T17070] active_anon:6038 inactive_anon:0 isolated_anon:0 [ 1490.905813][T17070] active_file:2895 inactive_file:41039 isolated_file:0 [ 1490.905813][T17070] unevictable:768 dirty:200 writeback:0 [ 1490.905813][T17070] slab_reclaimable:14314 slab_unreclaimable:210488 [ 1490.905813][T17070] mapped:31779 shmem:1441 pagetables:1372 [ 1490.905813][T17070] sec_pagetables:0 bounce:0 [ 1490.905813][T17070] kernel_misc_reclaimable:0 [ 1490.905813][T17070] free:1170192 free_pcp:42495 free_cma:0 [ 1490.952186][T17082] tipc: Enabled bearer , priority 0 [ 1490.953049][T17070] Node 0 active_anon:24152kB inactive_anon:0kB active_file:11580kB inactive_file:163948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20620kB dirty:796kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18984kB pagetables:5356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1490.994171][T17070] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106496kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1491.039951][T17070] Node 0 DMA free:11116kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:148kB local_pcp:52kB free_cma:0kB [ 1491.109938][T17070] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1491.116315][T17070] Node 0 DMA32 free:1170608kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24152kB inactive_anon:0kB active_file:11580kB inactive_file:163948kB unevictable:1536kB writepending:796kB zspages:0kB present:3129332kB managed:2552632kB mlocked:0kB bounce:0kB free_pcp:109012kB local_pcp:39084kB free_cma:0kB [ 1491.182253][T17070] lowmem_reserve[]: 0 0 0 0 0 [ 1491.219455][T17070] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1491.328403][T17070] lowmem_reserve[]: 0 0 0 0 0 [ 1491.344186][T17085] syzkaller0: entered promiscuous mode [ 1491.357999][T17070] Node 1 Normal free:3499036kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59836kB local_pcp:32404kB free_cma:0kB [ 1491.391221][T17085] syzkaller0: entered allmulticast mode [ 1491.392647][T17085] tipc: Resetting bearer [ 1491.439898][T17070] lowmem_reserve[]: 0 0 0 0 0 [ 1491.457166][T17070] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 3*128kB (U) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11116kB [ 1491.491426][T17070] Node 0 DMA32: 7759*4kB (UME) 9679*8kB (UE) 5587*16kB (UME) 542*32kB (UME) 65*64kB (UME) 1108*128kB (UME) 1074*256kB (UM) 561*512kB (UM) 167*1024kB (UM) 35*2048kB (UM) 0*4096kB = 1166052kB [ 1491.530264][T17070] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1491.553219][T17070] Node 1 Normal: 9*4kB (U) 9*8kB (UM) 15*16kB (UM) 8*32kB (UM) 17*64kB (UM) 13*128kB (UM) 11*256kB (UM) 12*512kB (UM) 9*1024kB (UM) 6*2048kB (U) 846*4096kB (UM) = 3499036kB [ 1491.587288][T17070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.611582][T17070] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1491.624197][T17070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.646251][T17070] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1491.670987][T17070] 47547 total pagecache pages [ 1491.681892][T17070] 0 pages in swap cache [ 1491.692191][T17070] Free swap = 124996kB [ 1491.695818][ T1007] tipc: Resetting bearer [ 1491.701597][T17070] Total swap = 124996kB [ 1491.717112][T17070] 2097051 pages RAM [ 1491.721525][T17081] tipc: Resetting bearer [ 1491.723337][T17070] 0 pages HighMem/MovableOnly [ 1491.742727][T17070] 427110 pages reserved [ 1491.750239][T17070] 0 pages cma reserved [ 1494.551066][T17081] tipc: Disabling bearer [ 1494.744151][T17117] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10756'. [ 1494.815734][T17119] Bluetooth: MGMT ver 1.23 [ 1494.863905][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10758'. [ 1495.250908][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10767'. [ 1495.311812][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10767'. [ 1495.359453][T17156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10768'. [ 1495.361668][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1495.406610][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10768'. [ 1495.448025][T17156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10768'. [ 1495.592145][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10771'. [ 1495.644976][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10771'. [ 1495.674098][T17168] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10771'. [ 1495.701500][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10772'. [ 1495.879483][T17173] lo speed is unknown, defaulting to 1000 [ 1495.891911][ T30] audit: type=1800 audit(1779959304.429:40): pid=17124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10757" name="memory.events" dev="tmpfs" ino=1240 res=0 errno=0 [ 1496.031538][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10776'. [ 1496.145039][T17191] netlink: 'syz.3.10779': attribute type 1 has an invalid length. [ 1496.277575][T17199] netlink: zone id is out of range [ 1496.293382][T17199] netlink: zone id is out of range [ 1496.318938][T17199] netlink: zone id is out of range [ 1496.335951][T17199] netlink: zone id is out of range [ 1496.354723][T17199] netlink: zone id is out of range [ 1496.372431][T17199] netlink: zone id is out of range [ 1496.387074][T17199] netlink: zone id is out of range [ 1496.422573][T17199] netlink: zone id is out of range [ 1496.443026][T17199] netlink: zone id is out of range [ 1496.470423][T17199] netlink: zone id is out of range [ 1496.905925][T17211] veth0_macvtap: entered allmulticast mode [ 1497.146944][T17226] netlink: 'syz.4.10787': attribute type 1 has an invalid length. [ 1497.353733][T17235] IPVS: persistence engine module ip_vs_pe_ not found [ 1497.457782][T17226] bond13: entered promiscuous mode [ 1497.463821][T17226] bond13: entered allmulticast mode [ 1497.469697][T17226] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1497.489004][T17232] erspan1: entered allmulticast mode [ 1497.504129][T17232] bond13: (slave erspan1): making interface the new active one [ 1497.528466][T17232] erspan1: entered promiscuous mode [ 1497.544834][T17232] bond13: (slave erspan1): Enslaving as an active interface with an up link [ 1497.577551][T17256] netlink: 'syz.0.10793': attribute type 1 has an invalid length. [ 1497.592694][T17248] syz.4.10787 (17248) used obsolete PPPIOCDETACH ioctl [ 1497.953284][T17277] debugfs: '1^!Y [ 1497.953284][T17277] 3UH5rBn\' already exists in 'ieee80211' [ 1498.380194][T17307] netlink: 'syz.1.10806': attribute type 1 has an invalid length. [ 1498.440325][T17312] IPVS: set_ctl: invalid protocol: 124 127.0.0.1:20003 [ 1498.462383][T17317] sctp: [Deprecated]: syz.0.10808 (pid 17317) Use of int in maxseg socket option. [ 1498.462383][T17317] Use struct sctp_assoc_value instead [ 1500.190606][T17362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1501.387790][T17309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1501.399113][T17322] netlink: 'syz.3.10814': attribute type 11 has an invalid length. [ 1501.427517][T17322] netlink: 'syz.3.10814': attribute type 11 has an invalid length. [ 1501.436937][T17322] __nla_validate_parse: 8 callbacks suppressed [ 1501.436954][T17322] netlink: 204 bytes leftover after parsing attributes in process `syz.3.10814'. [ 1501.647077][T17369] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10823'. [ 1501.661489][T17372] netlink: 'syz.0.10822': attribute type 1 has an invalid length. [ 1501.699107][T17372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10822'. [ 1501.827139][T17381] netlink: 'syz.1.10826': attribute type 1 has an invalid length. [ 1501.944354][T17381] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1501.984106][T17386] bond13: (slave syz_tun): Enslaving as a backup interface with an up link [ 1501.989854][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10829'. [ 1502.074227][T17395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10832'. [ 1502.152253][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10831'. [ 1502.325303][T17409] netlink: 'syz.0.10834': attribute type 13 has an invalid length. [ 1502.361916][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10830'. [ 1502.617878][T17420] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1502.653566][T17398] hmac(sha224: left promiscuous mode [ 1502.763215][T29369] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.799029][T29369] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.835906][T29369] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.853130][T29369] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.023194][T17437] netlink: 'syz.3.10839': attribute type 1 has an invalid length. [ 1503.077066][T17440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10839'. [ 1503.171484][T17438] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10836'. [ 1503.183773][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10836'. [ 1503.396607][ T30] audit: type=1800 audit(1779959311.939:41): pid=17449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10837" name="memory.events" dev="tmpfs" ino=1690 res=0 errno=0 [ 1503.586806][T17466] tun0: tun_chr_ioctl cmd 1074025681 [ 1503.646343][T17466] net_ratelimit: 349 callbacks suppressed [ 1503.646365][T17466] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 1504.037370][T17470] lo speed is unknown, defaulting to 1000 [ 1504.162581][T17476] openvswitch: netlink: Actions may not be safe on all matching packets [ 1504.413600][T17470] dvmrp0: entered allmulticast mode [ 1504.674522][T17480] netlink: 'syz.1.10848': attribute type 9 has an invalid length. [ 1504.862315][T17483] bond14: entered promiscuous mode [ 1504.867596][T17483] bond14: entered allmulticast mode [ 1505.837996][T17435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1505.874027][T17456] netlink: 'syz.4.10842': attribute type 1 has an invalid length. [ 1506.047993][T17493] syzkaller0: entered promiscuous mode [ 1506.055594][T17493] syzkaller0: entered allmulticast mode [ 1506.249907][T17498] syzkaller0: entered promiscuous mode [ 1506.266806][T17498] syzkaller0: entered allmulticast mode [ 1506.417441][T17508] tipc: Resetting bearer [ 1506.521494][T17528] netlink: 'syz.4.10857': attribute type 13 has an invalid length. [ 1506.726845][T17528] tipc: Resetting bearer [ 1507.048493][T17519] lo speed is unknown, defaulting to 1000 [ 1507.224086][T17545] __nla_validate_parse: 7 callbacks suppressed [ 1507.224108][T17545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10862'. [ 1507.249175][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10862'. [ 1507.458690][T17557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10866'. [ 1507.674951][T17571] netlink: 'syz.3.10868': attribute type 25 has an invalid length. [ 1507.700974][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10868'. [ 1507.781196][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.915178][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.938019][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.961326][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1508.005212][T17584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10873'. [ 1508.263174][T17589] bond10: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1508.289209][T17589] bond10 (unregistering): Released all slaves [ 1508.370962][T17598] can: request_module (can-proto-3) failed. [ 1515.201929][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1527.360425][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1528.720745][T17750] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 1390 sec [ 1545.921987][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.538140][T17616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10878'. [ 1546.866103][T17644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10887'. [ 1546.922897][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10886'. [ 1546.966974][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10886'. [ 1547.085547][T17658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10890'. [ 1547.185695][T17660] syzkaller0: entered promiscuous mode [ 1547.191922][T17660] syzkaller0: entered allmulticast mode [ 1547.211055][T17660] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10891'. [ 1547.309697][T17614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1547.319881][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10884'. [ 1547.566984][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10895'. [ 1547.624923][T17677] netlink: 'syz.1.10895': attribute type 11 has an invalid length. [ 1547.700061][T17686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10899'. [ 1547.722849][ T9430] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.722993][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10895'. [ 1547.742871][ T9430] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.781205][T17677] netlink: 'syz.1.10895': attribute type 11 has an invalid length. [ 1547.867727][ T9430] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.885623][ T9430] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1548.054979][T17704] : renamed from bond0 [ 1548.154719][T17708] lo speed is unknown, defaulting to 1000 [ 1548.825315][T17723] lo speed is unknown, defaulting to 1000 [ 1549.646896][T17771] netlink: 'syz.0.10920': attribute type 1 has an invalid length. [ 1549.918599][T17771] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1550.027170][T17773] bond7: option lp_interval: invalid value (18446744073709551607) [ 1550.062321][T17773] bond7: option lp_interval: allowed values 1 - 2147483647 [ 1550.324174][T17784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1551.930126][T17816] __nla_validate_parse: 3 callbacks suppressed [ 1551.950342][T17816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10932'. [ 1552.052926][T17822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10933'. [ 1552.064424][T17824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10934'. [ 1552.246546][T17824] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10934'. [ 1552.289503][T17833] nbd: must specify at least one socket [ 1552.325301][T17842] nbd: must specify at least one socket [ 1552.428779][T17836] bond10 (unregistering): Released all slaves [ 1552.487160][T17847] netlink: 'syz.1.10935': attribute type 7 has an invalid length. [ 1552.550491][T17847] netlink: 'syz.1.10935': attribute type 8 has an invalid length. [ 1553.821817][T17892] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1553.874426][T17898] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10946'. [ 1553.932535][T17902] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10947'. [ 1554.172899][T17911] lo speed is unknown, defaulting to 1000 [ 1554.420498][T17928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10955'. [ 1554.567394][T17932] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10957'. [ 1554.600995][T17932] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10957'. [ 1554.627116][T17932] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10957'. [ 1555.374239][T17947] sctp: [Deprecated]: syz.1.10955 (pid 17947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1555.374239][T17947] Use struct sctp_sack_info instead [ 1555.439595][T17954] Bluetooth: MGMT ver 1.23 [ 1555.944815][T17963] netlink: 'syz.4.10963': attribute type 11 has an invalid length. [ 1556.078067][T17966] tipc: Resetting bearer [ 1556.123472][T17966] bridge0: left promiscuous mode [ 1556.142600][T17966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.156139][T17966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1556.173072][T17966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.267717][T17966] veth1_macvtap: left promiscuous mode [ 1556.276311][T17966] veth0_macvtap: left promiscuous mode [ 1556.286094][T17966] veth0_macvtap: entered promiscuous mode [ 1556.297673][T17966] veth1_macvtap: entered promiscuous mode [ 1556.313500][T17966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1556.332811][T17966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1556.345959][T17966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1556.356510][T17966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1556.384629][T17966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1556.423007][T17966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1556.436421][T17966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1556.447180][T17966] tipc: Resetting bearer [ 1556.457861][T17966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1556.469202][T17966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1556.489440][T17966] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1556.505196][T17966] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1556.525322][T17966] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1556.614258][T17966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1556.626139][T17966] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1556.640083][T17966] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1556.655575][T17966] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1556.667607][T17966] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1556.678521][T17966] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1556.691938][T17966] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1556.760921][T12344] bridge0: entered promiscuous mode [ 1556.793358][T17975] mac80211_hwsim hwsim114 wlan0: entered promiscuous mode [ 1556.809433][T17975] mac80211_hwsim hwsim114 wlan0: entered allmulticast mode [ 1556.915513][T29367] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1556.930945][T29367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.939764][T29367] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1556.951197][T29367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.002268][T17995] netlink: 'syz.2.10971': attribute type 2 has an invalid length. [ 1557.012927][T17977] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1557.023485][T17977] CPU: 0 UID: 0 PID: 17977 Comm: syz.1.10967 Not tainted syzkaller #0 PREEMPT(full) [ 1557.023513][T17977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1557.023527][T17977] Call Trace: [ 1557.023535][T17977] [ 1557.023544][T17977] dump_stack_lvl+0xe8/0x150 [ 1557.023583][T17977] sysfs_warn_dup+0x8e/0xa0 [ 1557.023652][T17977] sysfs_do_create_link_sd+0xc0/0x110 [ 1557.023674][T17977] device_add_class_symlinks+0x1cf/0x240 [ 1557.023743][T17977] device_add+0x475/0xbb0 [ 1557.023771][T17977] wiphy_register+0x1fb1/0x2fe0 [ 1557.023811][T17977] ? __pfx_wiphy_register+0x10/0x10 [ 1557.023834][T17977] ? __pfx_netdev_run_todo+0x10/0x10 [ 1557.023856][T17977] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1557.023909][T17977] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1557.023948][T17977] ieee80211_register_hw+0x3c53/0x4910 [ 1557.023981][T17977] ? ieee80211_register_hw+0x1981/0x4910 [ 1557.024019][T17977] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1557.024038][T17977] ? __asan_memset+0x22/0x50 [ 1557.024059][T17977] ? __hrtimer_setup+0x1b7/0x260 [ 1557.024081][T17977] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1557.024163][T17977] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 1557.024218][T17977] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1557.024238][T17977] ? __asan_memcpy+0x40/0x70 [ 1557.024262][T17977] hwsim_new_radio_nl+0xd96/0xfa0 [ 1557.024291][T17977] genl_family_rcv_msg_doit+0x22a/0x330 [ 1557.024321][T17977] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1557.024353][T17977] ? bpf_lsm_capable+0x9/0x20 [ 1557.024369][T17977] ? security_capable+0x7e/0x2c0 [ 1557.024412][T17977] genl_rcv_msg+0x61c/0x7a0 [ 1557.024439][T17977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.024462][T17977] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1557.024490][T17977] netlink_rcv_skb+0x232/0x4b0 [ 1557.024508][T17977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.024530][T17977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1557.024560][T17977] ? down_read+0x270/0x2e0 [ 1557.024577][T17977] ? genl_rcv+0xd/0x40 [ 1557.024599][T17977] genl_rcv+0x28/0x40 [ 1557.024618][T17977] netlink_unicast+0x75c/0x8e0 [ 1557.024642][T17977] netlink_sendmsg+0x813/0xb40 [ 1557.024667][T17977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.024688][T17977] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1557.024713][T17977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1557.024736][T17977] ____sys_sendmsg+0x972/0x9f0 [ 1557.024753][T17977] ? __might_fault+0xaf/0x130 [ 1557.024779][T17977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1557.024803][T17977] ? import_iovec+0x73/0xa0 [ 1557.024827][T17977] ___sys_sendmsg+0x2a5/0x360 [ 1557.024842][T17977] ? __lock_acquire+0x6b5/0x2cf0 [ 1557.024863][T17977] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.024886][T17977] ? futex_wait+0x2a2/0x390 [ 1557.024949][T17977] ? __fget_files+0x2a/0x420 [ 1557.024974][T17977] ? __fget_files+0x3a0/0x420 [ 1557.025002][T17977] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1557.025021][T17977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1557.025046][T17977] ? rcu_is_watching+0x15/0xb0 [ 1557.025073][T17977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.025091][T17977] do_syscall_64+0x174/0xf80 [ 1557.025105][T17977] ? trace_irq_disable+0x3b/0x140 [ 1557.025129][T17977] ? clear_bhb_loop+0x40/0x90 [ 1557.025148][T17977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.025163][T17977] RIP: 0033:0x7f9d5e99ce59 [ 1557.025179][T17977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.025193][T17977] RSP: 002b:00007f9d5f7d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.025209][T17977] RAX: ffffffffffffffda RBX: 00007f9d5ec16180 RCX: 00007f9d5e99ce59 [ 1557.025220][T17977] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d [ 1557.025230][T17977] RBP: 00007f9d5ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1557.025240][T17977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1557.025249][T17977] R13: 00007f9d5ec16218 R14: 00007f9d5ec16180 R15: 00007ffd2ca06118 [ 1557.025275][T17977] [ 1557.429288][T29367] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.461576][T29367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.471310][T29367] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1557.480067][T29367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.806421][T18003] lo speed is unknown, defaulting to 1000 [ 1558.349164][T18031] __nla_validate_parse: 2 callbacks suppressed [ 1558.349185][T18031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10980'. [ 1558.407678][T18031] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.10980'. [ 1558.430021][T18022] lo speed is unknown, defaulting to 1000 [ 1559.289291][T18039] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10982'. [ 1559.305933][T18040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10983'. [ 1559.893541][T18053] netlink: 'syz.4.10984': attribute type 1 has an invalid length. [ 1559.951003][T18053] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10984'. [ 1561.298773][T18097] netlink: 'syz.1.10996': attribute type 1 has an invalid length. [ 1561.492813][T18097] bond15: entered promiscuous mode [ 1561.533574][T18097] bond15: entered allmulticast mode [ 1561.556427][T18097] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1561.631761][T18098] erspan1: entered allmulticast mode [ 1561.666195][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10999'. [ 1561.879442][T18114] hsr0: entered promiscuous mode [ 1561.955504][T18110] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11001'. [ 1562.014636][T18110] hsr_slave_0: left promiscuous mode [ 1562.026974][T18110] hsr_slave_1: left promiscuous mode [ 1562.038283][T18110] hsr0 (unregistering): left promiscuous mode [ 1562.124777][T18120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11004'. [ 1562.540081][T18134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11007'. [ 1562.595116][T18135] netlink: 'syz.1.11007': attribute type 10 has an invalid length. [ 1563.288393][T18148] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.11010'. [ 1563.544218][T18127] ip6gre1: left promiscuous mode [ 1563.549240][T18127] ip6gre1: left allmulticast mode [ 1563.597676][T18127] bond0: left promiscuous mode [ 1563.718624][T18140] veth0_macvtap: entered allmulticast mode [ 1563.730515][T18140] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1563.768962][T18147] veth1_to_bond: entered allmulticast mode [ 1563.777281][T18151] __nla_validate_parse: 1 callbacks suppressed [ 1563.777296][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11011'. [ 1563.829271][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11011'. [ 1563.845699][T18149] veth1_to_bond (unregistering): left allmulticast mode [ 1563.896311][T18153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11012'. [ 1563.906879][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11012'. [ 1563.924969][T29367] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.938842][T29367] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.966008][T29367] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.991285][T29367] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.084097][T18167] : entered promiscuous mode [ 1564.216905][T18173] syzkaller1: entered promiscuous mode [ 1564.222999][T18173] syzkaller1: entered allmulticast mode [ 1564.253316][T18177] SET target dimension over the limit! [ 1564.322138][T13779] Bluetooth: hci3: command 0x0406 tx timeout [ 1564.354212][T18156] lo speed is unknown, defaulting to 1000 [ 1564.462559][T18182] vlan2: entered promiscuous mode [ 1564.492567][T18182] ip6gretap0: entered promiscuous mode [ 1564.566362][T18193] netlink: 'syz.1.11019': attribute type 1 has an invalid length. [ 1564.631637][T18185] 8021q: adding VLAN 0 to HW filter on device  [ 1564.641555][T18185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.731711][T18185] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1564.875433][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11025'. [ 1565.174837][T18199] veth0_macvtap: entered allmulticast mode [ 1565.181669][T18199] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1565.808359][T18247] netlink: 'syz.0.11030': attribute type 1 has an invalid length. [ 1565.839831][T18245] tipc: Enabled bearer , priority 0 [ 1565.920347][T18245] tipc: Disabling bearer [ 1566.354127][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11034'. [ 1566.386433][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11034'. [ 1566.417079][T18258] netlink: 'syz.2.11034': attribute type 18 has an invalid length. [ 1566.815274][T18271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1567.081845][T18302] netlink: 'syz.1.11043': attribute type 2 has an invalid length. [ 1567.115612][T18307] dvmrp0: left allmulticast mode [ 1567.137351][T18307] dvmrp8: left allmulticast mode [ 1568.335273][T18350] netlink: 'syz.4.11052': attribute type 1 has an invalid length. [ 1568.345950][T18350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1569.009651][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11057'. [ 1569.019491][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11057'. [ 1569.138878][T18366] Bluetooth: MGMT ver 1.23 [ 1570.553707][T18320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.770339][T18373] pimreg: entered allmulticast mode [ 1570.835437][T18373] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11061'. [ 1570.852171][T18382] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1570.860688][T18373] tc_dump_action: action bad kind [ 1570.888368][T18382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1570.902292][T18373] netlink: 'syz.1.11061': attribute type 25 has an invalid length. [ 1570.920370][T18373] netlink: 'syz.1.11061': attribute type 3 has an invalid length. [ 1570.928468][T18387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11062'. [ 1570.946835][T18373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11061'. [ 1570.949608][T18380] netlink: 180 bytes leftover after parsing attributes in process `syz.0.11065'. [ 1571.021027][T18381] xt_hashlimit: size too large, truncated to 1048576 [ 1571.503217][T18413] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1571.657798][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11075'. [ 1571.806419][T18427] lo speed is unknown, defaulting to 1000 [ 1572.421967][T18450] tipc: Resetting bearer [ 1572.785401][T18445] lo speed is unknown, defaulting to 1000 [ 1572.810007][T18463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1572.860810][T29369] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.884258][T29369] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1572.910311][T29369] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.928957][T29369] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1572.955270][T29369] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.982941][T29369] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1573.009370][T29369] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.018577][T18468] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.11091'. [ 1573.027527][T29369] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1573.207134][T18474] netlink: 'syz.4.11094': attribute type 1 has an invalid length. [ 1573.320819][T18474] bond14: entered promiscuous mode [ 1573.331188][T18474] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1573.477903][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11096'. [ 1573.498573][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11095'. [ 1573.614057][T18483] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1573.816802][T18486] macvtap0: entered promiscuous mode [ 1573.926719][T18487] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1573.984175][T18503] tipc: Invalid UDP bearer configuration [ 1573.984231][T18503] tipc: Enabling of bearer rejected, failed to enable media [ 1574.199642][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11102'. [ 1574.408898][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11105'. [ 1574.477469][T18525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11105'. [ 1574.855125][T18540] geneve3: entered promiscuous mode [ 1574.882802][T29369] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.905004][T29369] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.942598][T18546] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1574.947951][T29369] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.022557][T18554] netlink: 'syz.2.11114': attribute type 1 has an invalid length. [ 1575.056416][T29369] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.069275][T21533] tipc: Subscription rejected, illegal request [ 1575.175064][T18550] lo speed is unknown, defaulting to 1000 [ 1575.328759][T18564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11117'. [ 1575.498641][T18570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11120'. [ 1575.578886][T18576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11120'. [ 1575.990871][T18580] netlink: 'syz.1.11123': attribute type 1 has an invalid length. [ 1576.025855][T18580] netlink: 'syz.1.11123': attribute type 1 has an invalid length. [ 1576.095750][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1576.285940][T18595] veth1_vlan: left promiscuous mode [ 1576.309909][T18595] veth0_vlan: left promiscuous mode [ 1576.316963][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11125'. [ 1576.327093][T18609] netlink: 'syz.1.11129': attribute type 2 has an invalid length. [ 1576.329573][T18595] veth0_vlan: entered promiscuous mode [ 1576.367613][T18595] veth1_vlan: entered promiscuous mode [ 1576.458745][T18595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1576.479295][T18595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1576.503643][T18595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1576.514372][T18595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1576.528628][T18595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1576.543434][T18595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1576.562592][T18595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1576.572688][T18595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1576.583106][T18595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1576.597471][T18595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1576.610856][T18595] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1576.623042][T18595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1576.639149][T18595] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1576.664216][T18595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.789224][T18605] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 1576.994654][ T4464] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.019996][ T4464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.056208][T17565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1577.089160][ T4464] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.123625][ T4464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.139853][T18625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11134'. [ 1577.224901][T18624] bond15: entered promiscuous mode [ 1577.238380][T18624] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1577.256208][ T4464] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.279397][ T4464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.319713][ T4464] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.362508][ T4464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.374777][ T6753] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1577.397573][T18625] bond15: entered allmulticast mode [ 1577.469914][T18635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1577.476320][T18641] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11138'. [ 1577.618485][T18636] bridge8: entered promiscuous mode [ 1577.629517][T18636] bridge8: entered allmulticast mode [ 1577.659420][T18636] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 1577.745849][T18640] bridge9: entered promiscuous mode [ 1577.757911][T18640] bridge9: entered allmulticast mode [ 1577.795531][T18640] team0: Port device bridge9 added [ 1577.849675][ T9430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1577.974650][T18657] lo: entered allmulticast mode [ 1578.073595][T18657] lo: left allmulticast mode [ 1578.391878][T18685] tipc: Enabled bearer , priority 0 [ 1578.436125][T18685] syzkaller0: entered promiscuous mode [ 1578.443159][T18685] syzkaller0: entered allmulticast mode [ 1578.471143][T18685] tipc: Resetting bearer [ 1578.494352][T18683] tipc: Resetting bearer [ 1578.553555][T18683] tipc: Disabling bearer [ 1578.846464][T18706] netlink: 'syz.2.11157': attribute type 21 has an invalid length. [ 1578.870530][T18706] netlink: 'syz.2.11157': attribute type 6 has an invalid length. [ 1578.896573][ T9430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1578.919502][ T9430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1579.023522][T18715] bond9: (slave dummy0): Releasing active interface [ 1579.046822][T18720] netlink: 'syz.4.11160': attribute type 10 has an invalid length. [ 1579.073113][T18715] bridge9: port 1(dummy0) entered blocking state [ 1579.088119][T18715] bridge9: port 1(dummy0) entered disabled state [ 1579.108179][T18715] dummy0: entered allmulticast mode [ 1579.121075][T18715] dummy0: entered promiscuous mode [ 1579.145899][T18720] dummy0: left allmulticast mode [ 1579.155400][T18720] bridge9: port 1(dummy0) entered disabled state [ 1579.241733][T18719] syzkaller0: entered promiscuous mode [ 1579.247310][T18719] syzkaller0: entered allmulticast mode [ 1579.312349][T18723] veth3: entered allmulticast mode [ 1579.324824][T18723] bond0: (slave veth3): Enslaving as an active interface with an up link [ 1579.362723][T18726] bond0 (unregistering): (slave veth3): Releasing backup interface [ 1579.387652][T18726] bond0 (unregistering): Released all slaves [ 1579.491479][T18727] lo speed is unknown, defaulting to 1000 [ 1579.570025][T18737] __nla_validate_parse: 15 callbacks suppressed [ 1579.570046][T18737] netlink: 240 bytes leftover after parsing attributes in process `syz.4.11166'. [ 1579.615122][T18737] netlink: 'syz.4.11166': attribute type 9 has an invalid length. [ 1579.681478][T29026] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1579.925442][T18752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11171'. [ 1579.942847][T18739] lo speed is unknown, defaulting to 1000 [ 1580.089198][T18752] syzkaller0: entered promiscuous mode [ 1580.105799][T18752] syzkaller0: entered allmulticast mode [ 1580.320623][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11174'. [ 1580.349997][T18769] netlink: 'syz.2.11174': attribute type 29 has an invalid length. [ 1580.380265][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11174'. [ 1580.772909][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11180'. [ 1582.727862][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1583.697554][T18801] netlink: 'syz.3.11182': attribute type 9 has an invalid length. [ 1583.749888][T18798] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1583.780793][T18798] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.058492][T18798] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.072450][T18798] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.164284][T18817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11186'. [ 1584.179880][T18817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11186'. [ 1584.198802][T18798] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.229622][T18798] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.318092][T18798] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.342171][T18798] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.550090][T29369] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.576813][T29369] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.627440][T18827] vlan0: entered promiscuous mode [ 1584.636959][T18827] bridge0: entered promiscuous mode [ 1584.682558][ T4464] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.702733][ T4464] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.819126][T29369] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.840586][T29369] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.857713][T29369] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1584.871519][T29369] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.894557][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11194'. [ 1584.913361][T18799] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1584.925025][T18799] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.946425][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11194'. [ 1584.946425][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11194'. [ 1584.971362][ T4464] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3 [ 1584.992054][T18849] netlink: 'syz.3.11192': attribute type 2 has an invalid length. [ 1585.017179][T18849] netlink: 'syz.3.11192': attribute type 1 has an invalid length. [ 1585.040049][T18799] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1585.054288][T18849] netlink: 'syz.3.11192': attribute type 1 has an invalid length. [ 1585.068943][T18799] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.084594][T18849] netlink: 'syz.3.11192': attribute type 2 has an invalid length. [ 1585.113714][T18845] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1585.347838][T18870] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11201'. [ 1585.765740][T18799] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1585.781253][T18799] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.893093][T18882] netlink: 'syz.0.11204': attribute type 5 has an invalid length. [ 1585.984781][T18799] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1586.010358][T18799] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.178144][T18896] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1586.255282][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11210'. [ 1586.284039][T29369] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1586.294264][T29369] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.313381][T18901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11210'. [ 1586.392435][T18904] netlink: 'syz.4.11210': attribute type 32 has an invalid length. [ 1586.415883][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11210'. [ 1586.426524][T29369] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1586.436230][T29369] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.468206][T29369] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1586.488249][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11210'. [ 1586.501018][T29369] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.577544][T18904] bond16: option coupled_control: invalid value (8) [ 1586.616986][T18904] bond16 (unregistering): Released all slaves [ 1586.641229][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11216'. [ 1586.726830][T29367] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1586.766857][T29367] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.988386][T18927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11218'. [ 1587.138711][T18936] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1587.268842][T18944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1587.587427][T18963] sctp: [Deprecated]: syz.0.11228 (pid 18963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1587.587427][T18963] Use struct sctp_sack_info instead [ 1588.216798][T19001] pim6reg: entered allmulticast mode [ 1588.305185][T19005] veth0: entered promiscuous mode [ 1588.363906][T19010] xt_hashlimit: size too large, truncated to 1048576 [ 1588.795099][T19033] erspan1: entered promiscuous mode [ 1588.826798][T19033] erspan1: entered allmulticast mode [ 1588.882937][T19024] lo speed is unknown, defaulting to 1000 [ 1589.120480][T17747] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 1451 sec [ 1589.624385][T19060] netlink: 'syz.1.11249': attribute type 21 has an invalid length. [ 1590.069432][T19078] __nla_validate_parse: 10 callbacks suppressed [ 1590.069456][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11254'. [ 1590.603920][T19104] netlink: 'syz.0.11262': attribute type 1 has an invalid length. [ 1590.639803][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11262'. [ 1590.685597][T19107] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1590.722581][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1590.856932][T19116] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1590.874040][T19116] pim6reg0: linktype set to 780 [ 1591.037949][T19129] netlink: 'syz.0.11267': attribute type 1 has an invalid length. [ 1591.055302][T19129] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11267'. [ 1591.080069][T19129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11267'. [ 1591.186573][T19134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1591.567717][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11274'. [ 1591.667422][T19152] bond8: (slave dummy0): Releasing backup interface [ 1591.708997][T19156] netlink: 'syz.0.11274': attribute type 10 has an invalid length. [ 1591.736808][T19156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11274'. [ 1591.755536][T19156] dummy0: entered promiscuous mode [ 1591.913331][T19168] lo speed is unknown, defaulting to 1000 [ 1592.096740][T19179] netlink: zone id is out of range [ 1592.115303][T19179] netlink: zone id is out of range [ 1592.139702][T19179] netlink: zone id is out of range [ 1592.151418][T19181] netlink: 'syz.3.11283': attribute type 1 has an invalid length. [ 1592.166784][T19179] netlink: zone id is out of range [ 1592.219819][T19179] netlink: zone id is out of range [ 1592.235542][T19186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11283'. [ 1592.276427][T19179] netlink: zone id is out of range [ 1592.316822][T19179] netlink: zone id is out of range [ 1592.342519][T19179] netlink: zone id is out of range [ 1592.383244][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11283'. [ 1592.405996][T19179] netlink: zone id is out of range [ 1592.430313][T19179] netlink: zone id is out of range [ 1592.587172][T19187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.642378][T19187] dummy0: left promiscuous mode [ 1592.674056][T19187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.021086][T19187] veth1_to_hsr: left promiscuous mode [ 1593.034183][T19187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1593.054014][T19187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1593.072555][T19187] veth1_vlan: left promiscuous mode [ 1593.078963][T19187] veth0_vlan: left promiscuous mode [ 1593.086206][T19187] veth0_vlan: entered promiscuous mode [ 1593.094195][T19187] veth1_vlan: entered promiscuous mode [ 1593.104524][T19187] veth1_macvtap: left promiscuous mode [ 1593.111189][T19187] veth0_macvtap: left promiscuous mode [ 1593.118301][T19187] veth0_macvtap: entered promiscuous mode [ 1593.128118][T19187] veth1_macvtap: entered promiscuous mode [ 1593.138150][T19187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1593.146933][T19187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1593.156263][T19187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1593.164503][T19187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1593.179787][T19187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1593.191542][T19187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1593.201309][T19187] bond3: left promiscuous mode [ 1593.206422][T19187] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1593.214913][T19187] bond4: left promiscuous mode [ 1593.219717][T19187] bridge1: left promiscuous mode [ 1593.226437][T19187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1593.243242][T19187] virt_wifi0: entered promiscuous mode [ 1593.249929][T19187] virt_wifi0: entered allmulticast mode [ 1593.256629][T19187] macsec1: left promiscuous mode [ 1593.264063][T19187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1593.272948][T19187] bond6: left promiscuous mode [ 1593.277730][T19187] bridge3: left promiscuous mode [ 1593.287836][T19187] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1593.298568][T19187] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1593.311433][T19187] geneve3: left promiscuous mode [ 1593.341838][T19187] bridge5: left promiscuous mode [ 1593.349278][T19187] 8021q: adding VLAN 0 to HW filter on device  [ 1593.376743][T19187] erspan1: left promiscuous mode [ 1593.387373][T19186] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1593.447718][T19173] lo speed is unknown, defaulting to 1000 [ 1593.586896][ T1007] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.609791][ T1007] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 1593.632937][ T1007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.652409][ T1007] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1593.762307][ T1007] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.789801][ T1007] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1593.810910][ T1007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.819837][ T1007] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1593.889504][ T1007] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.932171][ T1007] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1593.967834][ T1007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.989126][ T1007] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1594.040147][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1594.049126][T19221] set match dimension is over the limit! [ 1594.063323][T17750] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1594.063334][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1594.109671][ T1007] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1594.125539][ T1007] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1594.148325][ T1007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.167422][ T1007] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1594.253171][T17747] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1594.286715][T19221] veth3: entered promiscuous mode [ 1594.302391][T19223] tipc: Enabled bearer , priority 0 [ 1594.391992][ T6758] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1594.479993][T19223] tipc: Disabling bearer [ 1594.568638][T19231] netlink: 'syz.0.11296': attribute type 1 has an invalid length. [ 1594.700810][T19233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11295'. [ 1594.745952][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11295'. [ 1595.357328][T19262] bond11: option updelay: invalid value (18446744073709518847) [ 1595.366181][T19262] bond11: option updelay: allowed values 0 - 2147483647 [ 1595.380040][T19262] bond11 (unregistering): Released all slaves [ 1595.761814][T19275] debugfs: '1^!Y [ 1595.761814][T19275] 3UH5rBn\' already exists in 'ieee80211' [ 1595.762020][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11304'. [ 1596.142533][T19285] hsr0: entered promiscuous mode [ 1596.160902][T19285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11309'. [ 1596.193379][T19285] hsr_slave_0: left promiscuous mode [ 1596.217595][T19285] hsr_slave_1: left promiscuous mode [ 1596.239797][T19285] hsr0 (unregistering): left promiscuous mode [ 1596.825883][T19306] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1597.063727][T19316] netlink: 'syz.1.11319': attribute type 2 has an invalid length. [ 1597.073503][T19316] syzkaller1: entered promiscuous mode [ 1597.079048][T19316] syzkaller1: entered allmulticast mode [ 1597.101377][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11322'. [ 1597.156535][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11322'. [ 1597.171387][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11322'. [ 1597.355563][T19332] sctp: [Deprecated]: syz.3.11326 (pid 19332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1597.355563][T19332] Use struct sctp_sack_info instead [ 1597.475654][T19329] tc_dump_action: action bad kind [ 1598.170681][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1598.355790][T19399] net_ratelimit: 168 callbacks suppressed [ 1598.355810][T19399] netlink: zone id is out of range [ 1598.382365][T19399] netlink: zone id is out of range [ 1598.392495][T19399] netlink: zone id is out of range [ 1598.404259][T19399] netlink: zone id is out of range [ 1598.415195][T19399] netlink: zone id is out of range [ 1598.426291][T19399] netlink: zone id is out of range [ 1598.440839][T19399] netlink: zone id is out of range [ 1598.453063][T19399] netlink: zone id is out of range [ 1598.470385][T19399] netlink: zone id is out of range [ 1598.486223][T19399] netlink: zone id is out of range [ 1598.590343][T19414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11344'. [ 1598.642112][T19399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11343'. [ 1599.792901][T19429] bridge0: port 1(vlan2) entered blocking state [ 1599.799969][T19429] bridge0: port 1(vlan2) entered disabled state [ 1599.807990][T19429] vlan2: entered allmulticast mode [ 1599.814379][T19429] geneve0: entered allmulticast mode [ 1599.846749][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11347'. [ 1599.884925][T19432] syzkaller0: entered promiscuous mode [ 1599.891278][T19432] syzkaller0: entered allmulticast mode [ 1599.931836][T19440] netlink: 'syz.2.11350': attribute type 12 has an invalid length. [ 1599.954592][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11350'. [ 1599.964918][T19432] netlink: 'syz.3.11348': attribute type 1 has an invalid length. [ 1599.999609][T19432] netlink: 124 bytes leftover after parsing attributes in process `syz.3.11348'. [ 1600.366751][T19453] : entered promiscuous mode [ 1600.420086][T19440] macsec0: entered promiscuous mode [ 1600.753515][T19439] macsec0: left promiscuous mode [ 1600.795137][T19472] __nla_validate_parse: 3 callbacks suppressed [ 1600.795156][T19472] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11359'. [ 1600.818546][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11359'. [ 1600.934839][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11361'. [ 1600.967504][T19472] netlink: 'syz.4.11359': attribute type 1 has an invalid length. [ 1600.981186][T19472] netlink: 'syz.4.11359': attribute type 2 has an invalid length. [ 1601.031129][T19477] erspan0: entered promiscuous mode [ 1601.136575][T19480] bond0: Removing last ns target with arp_interval on [ 1601.354176][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11363'. [ 1601.430874][T19489] netlink: 'syz.4.11363': attribute type 21 has an invalid length. [ 1601.438948][T19489] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11363'. [ 1601.506745][T19491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11364'. [ 1601.520497][T19491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11364'. [ 1601.585428][T19497] netlink: 136 bytes leftover after parsing attributes in process `syz.3.11364'. [ 1601.603923][T19497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11364'. [ 1601.651809][T19497] netlink: 'syz.3.11364': attribute type 3 has an invalid length. [ 1601.679795][T19497] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11364'. [ 1601.704432][T19489] netlink: 'syz.4.11363': attribute type 4 has an invalid length. [ 1601.805502][T19512] vlan0: left promiscuous mode [ 1601.843848][T19512] ip6gretap1: left promiscuous mode [ 1601.880246][T19512] ip6gretap1: left allmulticast mode [ 1601.903562][T19512] team0: left promiscuous mode [ 1601.931833][T19512] team0: left allmulticast mode [ 1601.961639][T19512] team1: left promiscuous mode [ 1601.980919][T19512] team1: left allmulticast mode [ 1601.997428][T19512] geneve2: left promiscuous mode [ 1602.010285][T19512] geneve2: left allmulticast mode [ 1602.024725][T19512] bond4: left promiscuous mode [ 1602.038053][T19512] bridge3: left promiscuous mode [ 1602.060959][T19512] bond4: left allmulticast mode [ 1602.081504][T19512] bridge3: left allmulticast mode [ 1602.090987][T19512] bond5: left promiscuous mode [ 1602.110471][T19512] ipvlan2: left allmulticast mode [ 1602.130298][T19512] bond5: left allmulticast mode [ 1602.139447][T19512] bridge4: left promiscuous mode [ 1602.160225][T19512] bridge4: left allmulticast mode [ 1602.167062][T19512] bond8: left promiscuous mode [ 1602.180203][T19512] bridge5: left promiscuous mode [ 1602.190290][T19512] bond8: left allmulticast mode [ 1602.195441][T19512] bridge5: left allmulticast mode [ 1602.201411][T19512] bond9: left promiscuous mode [ 1602.206657][T19512] bridge6: left promiscuous mode [ 1602.211984][T19512] bond9: left allmulticast mode [ 1602.217076][T19512] bridge6: left allmulticast mode [ 1602.225555][T19512] bond10: left promiscuous mode [ 1602.230720][T19512] bridge7: left promiscuous mode [ 1602.236521][T19512] bond10: left allmulticast mode [ 1602.244458][T19512] bridge7: left allmulticast mode [ 1602.249709][T19512] bond11: left promiscuous mode [ 1602.256623][T19512] bridge8: left promiscuous mode [ 1602.262199][T19512] bond11: left allmulticast mode [ 1602.267212][T19512] bridge8: left allmulticast mode [ 1602.286131][T19512] bond12: left promiscuous mode [ 1602.293627][T19512] bridge10: left promiscuous mode [ 1602.299093][T19512] bond12: left allmulticast mode [ 1602.305185][T19512] bridge10: left allmulticast mode [ 1602.383477][T19512] bond14: left promiscuous mode [ 1602.395275][T19512] bond14: left allmulticast mode [ 1602.426373][T19512] bond15: left promiscuous mode [ 1602.441428][T19512] bond15: left allmulticast mode [ 1602.453708][T19512] erspan1: left allmulticast mode [ 1602.475180][T19512] geneve3: left promiscuous mode [ 1602.537012][T19533] sctp: [Deprecated]: syz.4.11374 (pid 19533) Use of int in max_burst socket option. [ 1602.537012][T19533] Use struct sctp_assoc_value instead [ 1602.573946][T19523] bond8: option all_slaves_active: invalid value (127) [ 1602.586054][T19523] bond8 (unregistering): Released all slaves [ 1602.620044][T29369] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1602.635903][T29369] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.648674][T29369] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1602.657187][T29369] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.667373][T29369] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1602.676560][T29369] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.685682][T29369] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1602.707196][T29369] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.326883][T19499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1604.587115][T19551] syzkaller1: entered promiscuous mode [ 1604.603552][T19551] syzkaller1: entered allmulticast mode [ 1604.768624][T19565] tcf_pedit_act: 22 callbacks suppressed [ 1604.768644][T19565] tc action pedit 'at' offset 15763 out of bounds [ 1604.935919][T19569] syzkaller0: entered promiscuous mode [ 1604.941721][T19569] syzkaller0: entered allmulticast mode [ 1605.275131][T19582] netlink: 'syz.3.11391': attribute type 1 has an invalid length. [ 1605.397262][T19580] xt_CT: No such helper "snmp" [ 1605.595273][T19600] bond17: entered allmulticast mode [ 1605.607582][T19604] "syz.3.11394" (19604) uses obsolete ecb(arc4) skcipher [ 1605.991224][T19632] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1606.080874][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1606.191721][T19645] netlink: 'syz.2.11408': attribute type 1 has an invalid length. [ 1606.238285][T19645] bond8: entered promiscuous mode [ 1606.254443][T19645] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1606.513772][T19655] lo speed is unknown, defaulting to 1000 [ 1606.536412][T19665] netlink: 'syz.2.11413': attribute type 1 has an invalid length. [ 1606.683088][T19665] SET target dimension over the limit! [ 1606.697984][T19671] bond9: (slave bridge10): making interface the new active one [ 1606.710935][T19671] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 1606.730326][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1607.146584][T19689] bond13: (slave syz_tun): Removing an active aggregator [ 1607.187567][T19689] bond13: (slave syz_tun): Releasing backup interface [ 1607.227328][T19689] bond3: (slave ip6gretap1): Releasing active interface [ 1607.258700][T19689] bond4: (slave bridge3): Releasing backup interface [ 1607.291595][T19689] bond8: (slave bridge5): Releasing backup interface [ 1607.317449][T19689] bond9: (slave bridge6): Releasing backup interface [ 1607.333924][T19689] bond10: (slave bridge7): Releasing backup interface [ 1607.358930][T19689] bond11: (slave bridge8): Releasing backup interface [ 1607.376030][ T1317] net_ratelimit: 390 callbacks suppressed [ 1607.376049][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.415864][T19689] bond12: (slave bridge10): Releasing backup interface [ 1607.433525][T19689] vlan2: left allmulticast mode [ 1607.442913][T19689] geneve0: left allmulticast mode [ 1607.450771][T19689] bridge0: port 1(vlan2) entered disabled state [ 1608.398827][T19730] __nla_validate_parse: 10 callbacks suppressed [ 1608.398861][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1608.521003][T19732] netlink: 'syz.0.11430': attribute type 6 has an invalid length. [ 1608.539961][T19732] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11430'. [ 1608.693110][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11432'. [ 1608.715610][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11432'. [ 1608.753816][T19746] netlink: 'syz.3.11431': attribute type 1 has an invalid length. [ 1608.965004][T19746] bond11: entered promiscuous mode [ 1609.013769][T19746] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1609.068305][T19754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11433'. [ 1609.297487][T19748] veth7: entered promiscuous mode [ 1609.313045][T19748] veth7: entered allmulticast mode [ 1609.345796][T19748] bond11: (slave veth7): Enslaving as a backup interface with a down link [ 1609.537871][T19746] syzkaller0: entered promiscuous mode [ 1609.552148][T19746] syzkaller0: entered allmulticast mode [ 1611.357830][T19730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1614.504657][T19823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11445'. [ 1614.657448][T19831] netlink: 'syz.0.11449': attribute type 1 has an invalid length. [ 1614.764555][T19831] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1614.983949][T19845] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11454'. [ 1615.173310][T19800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1615.366228][T19864] tipc: Enabling of bearer rejected, failed to enable media [ 1615.429612][T19867] netlink: 13 bytes leftover after parsing attributes in process `syz.1.11459'. [ 1615.760079][T19887] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1616.022324][T19905] IPVS: stopping backup sync thread 19107 ... [ 1616.303712][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11470'. [ 1616.731450][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11473'. [ 1616.801861][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11473'. [ 1617.087784][T19960] veth0_virt_wifi: entered promiscuous mode [ 1617.178843][T19961] veth0_virt_wifi: left promiscuous mode [ 1617.282387][T19961] netlink: 192 bytes leftover after parsing attributes in process `syz.2.11477'. [ 1617.361849][T19960] lo speed is unknown, defaulting to 1000 [ 1617.587249][T19986] netlink: 'syz.1.11485': attribute type 1 has an invalid length. [ 1617.658843][T19986] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1617.678136][T19988] vlan3: entered promiscuous mode [ 1617.683908][T19988] bond18: entered promiscuous mode [ 1617.689243][T19988] vlan3: entered allmulticast mode [ 1617.695889][T19988] bond18: entered allmulticast mode [ 1617.746940][T19986] bond18: (slave bridge12): making interface the new active one [ 1617.755127][T19986] bridge12: entered promiscuous mode [ 1617.762072][T19986] bridge12: entered allmulticast mode [ 1617.771981][T19986] bond18: (slave bridge12): Enslaving as an active interface with an up link [ 1618.193286][T20000] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11487'. [ 1618.608189][T20022] bond19: entered allmulticast mode [ 1618.907905][T20043] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11497'. [ 1618.998335][T20045] syzkaller0: entered promiscuous mode [ 1619.005642][T20045] syzkaller0: entered allmulticast mode [ 1619.216800][T20053] bond20 (unregistering): Released all slaves [ 1619.327066][T20058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11501'. [ 1619.794688][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11502'. [ 1622.378746][T20058] smc: net device veth1_to_team applied user defined pnetid S [ 1622.391869][T20066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11503'. [ 1622.403157][T20066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11503'. [ 1622.412982][T20066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11503'. [ 1622.422800][T20066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11503'. [ 1622.597571][T20078] netlink: set zone limit has 8 unknown bytes [ 1622.709861][T20087] netlink: 'syz.0.11508': attribute type 1 has an invalid length. [ 1622.719170][T20087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11508'. [ 1622.729546][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1622.744574][T20087] netlink: 'syz.0.11508': attribute type 10 has an invalid length. [ 1622.754680][T20087] netlink: 'syz.0.11508': attribute type 10 has an invalid length. [ 1622.958829][T20093] netlink: 'syz.0.11512': attribute type 13 has an invalid length. [ 1623.008301][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.028232][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.063913][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.095007][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.122626][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.217928][T20102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.568163][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11518'. [ 1623.614671][T20119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11519'. [ 1623.698810][T20119] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1623.708127][T20123] aD: renamed from lo [ 1623.745790][T20123] netlink: 'syz.0.11520': attribute type 6 has an invalid length. [ 1623.754234][T20123] netlink: 'syz.0.11520': attribute type 7 has an invalid length. [ 1623.763867][T20123] netlink: 'syz.0.11520': attribute type 8 has an invalid length. [ 1623.772032][T20123] netlink: 'syz.0.11520': attribute type 15 has an invalid length. [ 1624.012793][T20133] netlink: 'syz.2.11521': attribute type 15 has an invalid length. [ 1624.028466][T20133] netlink: 666 bytes leftover after parsing attributes in process `syz.2.11521'. [ 1626.207933][T20162] netlink: 'syz.4.11532': attribute type 3 has an invalid length. [ 1626.274034][T20162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11532'. [ 1626.854421][T20182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11537'. [ 1626.884341][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11532'. [ 1628.398773][T20198] netlink: 100 bytes leftover after parsing attributes in process `syz.4.11540'. [ 1628.446719][ T9430] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.461594][ T9430] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.471813][ T9430] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.482559][ T9430] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.564935][T20210] sctp: [Deprecated]: syz.3.11542 (pid 20210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1628.564935][T20210] Use struct sctp_sack_info instead [ 1628.607516][T20191] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1628.653719][T20191] bond1 (unregistering): Released all slaves [ 1628.716156][ T9430] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.764138][ T9430] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.805527][ T9430] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.861656][ T9430] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.970418][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11545'. [ 1628.999175][T20234] bridge13: entered promiscuous mode [ 1629.018532][T20194] lo speed is unknown, defaulting to 1000 [ 1629.042563][T13779] Bluetooth: hci3: command 0x0406 tx timeout [ 1629.124967][T20241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1629.160016][T20241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1629.444922][T20252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11550'. [ 1629.467894][T20252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11550'. [ 1629.767621][T20268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11554'. [ 1630.445541][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11562'. [ 1630.487347][T20259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1630.654442][T20303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11565'. [ 1630.790621][T20313] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1630.945723][T20320] syzkaller1: entered promiscuous mode [ 1630.962335][T20320] syzkaller1: entered allmulticast mode [ 1631.287178][T20346] validate_nla: 1 callbacks suppressed [ 1631.287197][T20346] netlink: 'syz.0.11575': attribute type 1 has an invalid length. [ 1632.301565][T20370] netlink: 'syz.4.11585': attribute type 1 has an invalid length. [ 1632.335883][T20370] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1634.164079][T20333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1634.360027][T20390] __nla_validate_parse: 1 callbacks suppressed [ 1634.360049][T20390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11593'. [ 1634.767273][T20420] netlink: 'syz.4.11596': attribute type 7 has an invalid length. [ 1635.115561][T20445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11601'. [ 1635.506240][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11606'. [ 1635.607386][T20466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11607'. [ 1635.775783][T20473] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11610'. [ 1635.836634][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11610'. [ 1636.249516][T20479] geneve3: entered promiscuous mode [ 1636.295971][T20479] geneve3: entered allmulticast mode [ 1636.432420][T20486] netlink: 'syz.3.11615': attribute type 2 has an invalid length. [ 1636.440746][T20486] netlink: 'syz.3.11615': attribute type 9 has an invalid length. [ 1636.448621][T20486] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11615'. [ 1636.535734][T20490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11616'. [ 1637.002041][T20500] netlink: 'syz.4.11618': attribute type 1 has an invalid length. [ 1637.024308][T20500] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11618'. [ 1637.050440][T20500] netlink: 'syz.4.11618': attribute type 1 has an invalid length. [ 1637.071417][T20500] netlink: 638 bytes leftover after parsing attributes in process `syz.4.11618'. [ 1637.085155][T20498] lo speed is unknown, defaulting to 1000 [ 1637.539956][T20517] syzkaller1: entered promiscuous mode [ 1637.553344][T20517] syzkaller1: entered allmulticast mode [ 1638.959657][T20560] netlink: 'syz.4.11633': attribute type 1 has an invalid length. [ 1638.962619][T20558] netlink: 'syz.3.11632': attribute type 1 has an invalid length. [ 1639.183442][T20558] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1639.236949][T20558] bond14: (slave bond15): making interface the new active one [ 1639.265116][T20558] bond14: (slave bond15): Enslaving as an active interface with an up link [ 1639.329901][T20565] bond14: (slave gretap2): Enslaving as a backup interface with an up link [ 1639.853627][T20584] __nla_validate_parse: 1 callbacks suppressed [ 1639.853648][T20584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1640.013647][T20586] bond17: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1640.269035][T20586] bond17 (unregistering): Released all slaves [ 1640.642039][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11647'. [ 1640.725399][T20616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11647'. [ 1640.754595][T20616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11647'. [ 1641.238549][T20629] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1641.264781][T20629] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1642.015551][T20653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11659'. [ 1642.051910][T20660] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 1642.146659][T20662] tipc: Resetting bearer [ 1642.198266][T20662] tipc: Resetting bearer [ 1642.318347][T20671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11663'. [ 1642.508274][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11666'. [ 1642.521202][T20679] netlink: 324 bytes leftover after parsing attributes in process `syz.0.11666'. [ 1642.531234][T20679] netlink: 'syz.0.11666': attribute type 1 has an invalid length. [ 1642.585272][T20674] netlink: 'syz.4.11664': attribute type 5 has an invalid length. [ 1642.614707][T20679] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1642.732879][T20681] bond10: (slave gretap2): making interface the new active one [ 1642.797117][T20681] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 1642.844216][T20674] geneve3: entered promiscuous mode [ 1642.849527][T20674] geneve3: entered allmulticast mode [ 1642.964580][T21533] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1643.001864][T21533] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1643.031941][T21533] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1643.062933][T21533] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1643.134568][T20698] bridge0: port 1(syz_tun) entered blocking state [ 1643.151120][T20698] bridge0: port 1(syz_tun) entered disabled state [ 1643.169171][T20698] syz_tun: entered allmulticast mode [ 1643.188625][T20698] syz_tun: entered promiscuous mode [ 1643.209087][T20686] lo speed is unknown, defaulting to 1000 [ 1644.003421][T29367] [ 1644.005905][T29367] ============================================ [ 1644.012134][T29367] WARNING: possible recursive locking detected [ 1644.018328][T29367] syzkaller #0 Not tainted [ 1644.022763][T29367] -------------------------------------------- [ 1644.028928][T29367] kworker/u8:32/29367 is trying to acquire lock: [ 1644.035275][T29367] ffff888055e98558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1644.045240][T29367] [ 1644.045240][T29367] but task is already holding lock: [ 1644.052627][T29367] ffff888059558958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1644.062513][T29367] [ 1644.062513][T29367] other info that might help us debug this: [ 1644.070591][T29367] Possible unsafe locking scenario: [ 1644.070591][T29367] [ 1644.078124][T29367] CPU0 [ 1644.081444][T29367] ---- [ 1644.084744][T29367] lock(&qdisc_xmit_lock_key#4); [ 1644.089815][T29367] lock(&qdisc_xmit_lock_key#4); [ 1644.094889][T29367] [ 1644.094889][T29367] *** DEADLOCK *** [ 1644.094889][T29367] [ 1644.103053][T29367] May be due to missing lock nesting notation [ 1644.103053][T29367] [ 1644.111405][T29367] 11 locks held by kworker/u8:32/29367: [ 1644.116992][T29367] #0: ffff888058f59140 ((wq_completion)bond13#4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1644.128217][T29367] #1: ffffc90006687c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1644.141231][T29367] #2: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 1644.151009][T29367] #3: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1644.160995][T29367] #4: ffff8880439d8228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1644.173673][T29367] #5: ffff888059558958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1644.184016][T29367] #6: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1644.192932][T29367] #7: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1644.202710][T29367] #8: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1644.211587][T29367] #9: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1644.221527][T29367] #10: ffff8880333b3228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1644.234252][T29367] [ 1644.234252][T29367] stack backtrace: [ 1644.240160][T29367] CPU: 0 UID: 0 PID: 29367 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) [ 1644.240182][T29367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1644.240195][T29367] Workqueue: bond13 bond_alb_monitor [ 1644.240214][T29367] Call Trace: [ 1644.240222][T29367] [ 1644.240231][T29367] dump_stack_lvl+0xe8/0x150 [ 1644.240252][T29367] print_deadlock_bug+0x279/0x290 [ 1644.240274][T29367] __lock_acquire+0x253f/0x2cf0 [ 1644.240296][T29367] ? unwind_next_frame+0xa6/0x2550 [ 1644.240373][T29367] ? sch_direct_xmit+0x15f/0x4c0 [ 1644.240398][T29367] lock_acquire+0x106/0x350 [ 1644.240414][T29367] ? sch_direct_xmit+0x15f/0x4c0 [ 1644.240443][T29367] _raw_spin_lock+0x2e/0x40 [ 1644.240468][T29367] ? sch_direct_xmit+0x15f/0x4c0 [ 1644.240490][T29367] sch_direct_xmit+0x15f/0x4c0 [ 1644.240517][T29367] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1644.240540][T29367] ? arp_create+0x100/0x980 [ 1644.240565][T29367] __dev_queue_xmit+0x180f/0x3950 [ 1644.240588][T29367] ? __dev_queue_xmit+0x2b6/0x3950 [ 1644.240610][T29367] ? arpt_do_table+0x256/0x1e30 [ 1644.240673][T29367] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1644.240696][T29367] ? __pfx_arpt_do_table+0x10/0x10 [ 1644.240715][T29367] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1644.240746][T29367] ? NF_HOOK+0xa2/0x3c0 [ 1644.240769][T29367] NF_HOOK+0x33a/0x3c0 [ 1644.240791][T29367] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1644.240814][T29367] ? NF_HOOK+0xa2/0x3c0 [ 1644.240834][T29367] ? __pfx_NF_HOOK+0x10/0x10 [ 1644.240855][T29367] ? lock_acquire+0x106/0x350 [ 1644.240872][T29367] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1644.240894][T29367] ? inet_addr_type_dev_table+0x25/0x190 [ 1644.240944][T29367] arp_xmit+0x16c/0x270 [ 1644.240964][T29367] ? arp_xmit+0x23/0x270 [ 1644.240987][T29367] arp_solicit+0xbe0/0xe40 [ 1644.241012][T29367] ? arp_solicit+0x119/0xe40 [ 1644.241035][T29367] ? __pfx_arp_solicit+0x10/0x10 [ 1644.241062][T29367] ? __pfx_arp_solicit+0x10/0x10 [ 1644.241084][T29367] __neigh_event_send+0xf05/0x14d0 [ 1644.241114][T29367] neigh_resolve_output+0x198/0x750 [ 1644.241147][T29367] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1644.241176][T29367] ? ip_finish_output2+0x3c2/0x1070 [ 1644.241199][T29367] ip_finish_output2+0xca9/0x1070 [ 1644.241223][T29367] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1644.241247][T29367] ? ip_finish_output+0x40e/0x530 [ 1644.241271][T29367] ip_output+0x29f/0x450 [ 1644.241293][T29367] ? ip_output+0x5b/0x450 [ 1644.241316][T29367] iptunnel_xmit+0x621/0xd10 [ 1644.241360][T29367] ip_tunnel_xmit+0x193a/0x1f20 [ 1644.241392][T29367] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1644.241417][T29367] ? __pfx_gre_build_header+0x10/0x10 [ 1644.241478][T29367] ? kfree+0x1c5/0x640 [ 1644.241497][T29367] ? pskb_expand_head+0x458/0x1390 [ 1644.241518][T29367] __gre_xmit+0x19e/0x240 [ 1644.241539][T29367] ? __pfx___gre_xmit+0x10/0x10 [ 1644.241562][T29367] erspan_xmit+0xa41/0x14d0 [ 1644.241588][T29367] ? ret_from_fork_asm+0x1a/0x30 [ 1644.241607][T29367] ? __pfx_erspan_xmit+0x10/0x10 [ 1644.241634][T29367] dev_hard_start_xmit+0x2cd/0x830 [ 1644.241660][T29367] sch_direct_xmit+0x251/0x4c0 [ 1644.241685][T29367] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1644.241709][T29367] ? kthread+0x300/0x470 [ 1644.241733][T29367] __dev_queue_xmit+0x180f/0x3950 [ 1644.241755][T29367] ? __dev_queue_xmit+0x2b6/0x3950 [ 1644.241780][T29367] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1644.241799][T29367] ? rcu_is_watching+0x15/0xb0 [ 1644.241819][T29367] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1644.241841][T29367] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1644.241871][T29367] ? alb_send_lp_vid+0x14e/0x550 [ 1644.241890][T29367] alb_send_lp_vid+0x348/0x550 [ 1644.241909][T29367] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1644.241933][T29367] alb_send_learning_packets+0x12c/0x300 [ 1644.241951][T29367] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1644.241968][T29367] ? bond_alb_monitor+0xf8/0x17e0 [ 1644.241987][T29367] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1644.242013][T29367] bond_alb_monitor+0x3d5/0x17e0 [ 1644.242031][T29367] ? bond_alb_monitor+0xf8/0x17e0 [ 1644.242048][T29367] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1644.242065][T29367] ? process_scheduled_works+0xa70/0x1860 [ 1644.242081][T29367] ? process_scheduled_works+0xa70/0x1860 [ 1644.242098][T29367] process_scheduled_works+0xb5d/0x1860 [ 1644.242134][T29367] ? __pfx_process_scheduled_works+0x10/0x10 [ 1644.242153][T29367] ? assign_work+0x3d5/0x5e0 [ 1644.242171][T29367] worker_thread+0xa53/0xfc0 [ 1644.242200][T29367] kthread+0x389/0x470 [ 1644.242220][T29367] ? __pfx_worker_thread+0x10/0x10 [ 1644.242236][T29367] ? __pfx_kthread+0x10/0x10 [ 1644.242256][T29367] ret_from_fork+0x514/0xb70 [ 1644.242304][T29367] ? __pfx_ret_from_fork+0x10/0x10 [ 1644.242321][T29367] ? __switch_to+0xc79/0x1410 [ 1644.242362][T29367] ? __pfx_kthread+0x10/0x10 [ 1644.242383][T29367] ret_from_fork_asm+0x1a/0x30 [ 1644.242421][T29367] [ 1644.770929][T20725] tipc: Resetting bearer [ 1645.041725][T20725] tipc: Resetting bearer [ 1645.179314][ T48] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.189703][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.199064][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1645.208376][ T48] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.218086][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.231887][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1645.266690][ T48] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.275985][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.285348][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1645.294731][ T48] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.303918][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.316018][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1649.520451][T17754] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 1511 sec