last executing test programs: 19m11.154712203s ago: executing program 0 (id=1406): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x200}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r10 = accept4(r9, 0x0, 0x0, 0x80800) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, &(0x7f0000000280)=0xbc) 19m10.935508835s ago: executing program 0 (id=1410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xaebc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x71, "437ea9a962b32be037b214e7f4015e425ee8b72db0a02c1e6086bd756c911bf898c97e291797812baabe01a8a88764a78b3a1c8a0e2285d96fb4e6b3aa940c4fa280ba92b0a75fba5bec6460d46b433a6ef56b21993be12197c9183f43933c4cdb7f5ff48febf9562184df6cf76c6af9bb"}, &(0x7f0000000280)=0x79) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x2, 0x2, 0x0, 0x809}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000002c0)={r6, 0x8e, "5675b4dcf7ab6cc77f7a25cfe83e1042fc626409f045ff55ba264f334309d51e299388e8110929218f1737c682f0ba20061573730c79335823d34470d32aedc4cbf568c20f946ade0799582e0fab02035b77b1f53f63a1edd0bf6dcfce5322194c6f7b7e25189ae06fbc00e5d56b4d3031e756cc10127f2cca8a363ad7501aac5511ddc70471494c37d9605b687d"}, &(0x7f00000004c0)=0x96) r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000500)={{0x3, @null}, [@bcast, @default, @bcast, @bcast, @remote, @rose, @rose, @rose]}, &(0x7f0000000040)=0x48) listen(r8, 0xfffffffe) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) writev(r9, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) r10 = socket$igmp(0x2, 0x3, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000ac000880a8000080800009801c00008006000100020000000e000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000300000028000080060001000a00000014000200fc010000000000000000000000000000050003000300000024000100000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r16 = accept4(r15, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r16, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="991f2abd7000fedbdfacf7000000"], 0x14}}, 0x20008010) splice(r13, 0x0, r16, 0x0, 0x2, 0xe) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f00000005c0)={r6, 0x7}, 0x8) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000480), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES16=r15, @ANYRES32=0x41424344, @ANYRESHEX=r13], 0x0) 19m10.54257326s ago: executing program 0 (id=1414): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1700}, 0x94) 19m10.440220246s ago: executing program 0 (id=1417): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}}, 0x24}}, 0x44884) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000000214010029bd7000fcdbdf250800010000000000080001000100000008004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40100) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xe0, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x45}, 0x1000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0xc8, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x8, 0x10}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x98, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_ENC_OPTS={0x78, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xac}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x22}]}]}]}}]}, 0xc8}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19m10.267598545s ago: executing program 0 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r2, 0x331, 0x1, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'veth1_to_bridge\x00', @remote}) 19m10.221937725s ago: executing program 0 (id=1421): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2094) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xe}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000180)="27030200590214000600", 0xa}, {&(0x7f0000000f80)="d4c9019f0f5d49d1a32cb0cb3466e142464d03e239e4273ef5ca6adc", 0x1c}], 0x2}, 0x4) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newtclass={0x60, 0x28, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xc}, {0x6, 0xffe5}, {0x4, 0x2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x69}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x480c0}, 0x44010) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x1, 0x3, 0x6}) r7 = gettid() write$cgroup_pid(r6, &(0x7f00000000c0)=r7, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) 18m55.192820186s ago: executing program 32 (id=1421): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2094) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xe}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000180)="27030200590214000600", 0xa}, {&(0x7f0000000f80)="d4c9019f0f5d49d1a32cb0cb3466e142464d03e239e4273ef5ca6adc", 0x1c}], 0x2}, 0x4) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newtclass={0x60, 0x28, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xc}, {0x6, 0xffe5}, {0x4, 0x2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x69}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x480c0}, 0x44010) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x1, 0x3, 0x6}) r7 = gettid() write$cgroup_pid(r6, &(0x7f00000000c0)=r7, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) 6.645487653s ago: executing program 4 (id=10236): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)) sendmmsg$sock(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="d42d921e2450f4f57ee0c0afde90b94ba486fcd50c36eb2d6ff54b520914ac6b049813054fe16ed49b1c555750c05df9127744fbe286644d69027aa8d804de16f6b9dfabe63ec75a1e783cd7eb973f185b8b4fd89a9122b597b534be516f66119da6640137b34a7cc9499eb0b8c2bdd5edc97fd3c6e272b93d1f44a2dfb6ce89af085575a728bb5bf4f582a0f1ccd3c74ada9ddb6ae7617e65c1c73e3cafdb91ac3b38de618af9442344fb76e84d7168e07da14129cadd7643b589931ab0dee2472e89dd54e627b2764762", 0xcb}, {&(0x7f0000000900)="4ee462ea19ea807e24cd3f750e490d095ccfaf8b53d9043255bc221b31949ed438e9d7ac9ae2abf1b286ae3ccfa1c5dc8c9265ffe054818cf290d15dcc106a8299146186625660fd10f2d59a6dafc484e86afd1b3bc1e07053903d3f1152a9a4e26e5b442d5800b35a22710cb9e0952413139234396207e5779d8c8c570a093d77bd3787413556d389fa45126953d0eb97787489ced5fc08881ec1da3d45fa437aacdb8d109b152a6f7e9e4e02029836f9f929d9a59ccf06150b60aafb2da01bcc200e87bb7e2ba0391734525d0afbe471ccd33e4911bde06fb4f930488570bad12db901c28285c6cf3851d64048b91ed70549c818fe5930896e6b47f8a563", 0xff}], 0x2, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x6083cca50000}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b00)="08841fe88c1ce1991ba8cf", 0xb}, {&(0x7f0000000b40)="10c445cb5a0d238abecc48e61df78fd8859b68b449b5a7d6c3ee69ef6963cac4963a67ad02427fd8952302d48fd049e2daeedd61f24f09118152fb74c8b581c052f703805da9a2e4f83b426ac523bf7367c9f6e7da255b3f0e084beacaa566864ac808da05c247e489373cff705fdb0be736f7130d2c465aa6af7f45ee92607c83ff0a9af4a653c3f6300b716dd4882233547f0eda53d3327f31c3d9ee32a1bdf3fa588f712949a13afdcd572316e3a3e09506692def99f5d7cb6fd31e03fa36cf429981f086f80a76f4c5cec89bdfe1cbeac68eb0e9d75b32893114fcb08d67d1d15760c6d701740b96338ae1cc4acc2a513770060048", 0xf7}, {&(0x7f0000000c40)="996be345f432376b2e4c7f95d1da8e4a7a9949116d74d48607fb55ee27d468a1137770fb4b75003711af17f7a1a625a750530853e449e96379dcbb4b4f893464d28d2869d57c379710f89286eddd496b2aa80eab607273d9a6404fff6e7e708ba0424b1aa54c65f79b54b4eb90ded8226ad24d210564973d9ea248b486cccdf435573a323f4c5e787337255fd6eb3c150bc372469213d7a6711754d53b78d609c33faad0dc6d99", 0xa7}, {&(0x7f0000000d00)="65e55c10a93c694b1a248975", 0xc}, {&(0x7f0000000d40)="6bf9c5fa3538b3715626f813ec2bfe56e1a773eadd6f84a6fce4b91824a64ee1e784f21f2f03701d9e73646ae5f6d74a7189dd8af3285298b8cf7adc2ea0e906", 0x40}], 0x5}}, {{&(0x7f0000000e00)=@can, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="de4a68b88c71029c2d619b2e66cbba026fbc048cc74ff0b1949342b1486b9dfd43f24ef3fa52265674474e5daf11c1d96b7b48bfbf2f718fd4eb41", 0x3b}], 0x1, &(0x7f0000000f00)=[@mark={{0x14, 0x1, 0x24, 0x65}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x78}}], 0x3, 0x24040888) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @tipc={{0x12, 0x4, 0x0, 0x1f, 0x74, 0x67, 0x0, 0x8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, {[@end, @noop, @noop, @lsrr={0x83, 0x17, 0x80, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @local, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x52, 0x0, 0xe, [0xda6, 0x8, 0x0, 0x3324, 0x9]}, @end]}}, @payload_named={{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x60d5, 0x0, 0x1, 0x7, 0x3, 0x2, 0x6, 0x7fff, 0x0, 0x4e23, 0x4e20}, 0x2, 0x3}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) 6.553402649s ago: executing program 5 (id=10237): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r2, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7ac9828098539a00000000000500000000070000000000b3a41f454853995312333f1b078386d42c729081d9090004000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) pselect6(0x40, &(0x7f0000000100)={0xc, 0x0, 0x0, 0x5, 0xfffffffffffffff9, 0xd, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x80000001f, 0xfffffffffffffffe, 0x0, 0xd472, 0x8, 0x4, 0x1, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) close(0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000001480)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x194, r7, 0x4, 0x80709d2b, 0x25dfdc00, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x24004054}, 0x30004880) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r4, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r5) sendmsg$tipc(r3, &(0x7f00000015c0)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x100001}}, 0x10, &(0x7f00000014c0), 0x0, &(0x7f0000001540)="b0a1b80622a898d20724c4bc8d061fbf0fc246e98d6145160649b51aaf5aa389aaa8ecb5cb1adea3a0829597c466e7149d3406c68fc456daf18c3b415850436a4ecad7d1b03527f26a3debe85500062f4f13f7904ece00867ccf61b4", 0x5c, 0x8804}, 0x4001) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000001b40)={0x0, 'veth0_vlan\x00', {0x1}, 0xb}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000080028005bdb020008002900f8ff"], 0x38}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'ip6_vti0\x00', 0x0, 0x4, 0xe0, 0x0, 0x9, 0x29, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x10, 0x7, 0x9db, 0xf}}) setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f0000001a40)={0x1, 0x1, 0x25, 0xc, @vifc_lcl_ifindex=r12, @local}, 0x10) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000003e4", @ANYRES32=0x0, @ANYBLOB="00080000c31006002800128008000100736974001c00028006000d0041000000080003000a01010206000e0009000000"], 0x48}}, 0x0) sendmsg$sock(r13, &(0x7f0000001940)={&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x4, 0x3, 0x4, {0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ff}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001700)="809d885891a1dea05c2fdbf8ceb64b414d09a5f621be821577394191dec244a40a57900bf127972552f0de0ff89c16b4fbb3f509004a14545ca3b0f3de63563349911dfe1b3f7083cfef52e2d2a1755c4aa2b7bc9cb37af9b627b258eeadcc24398da29b0f12f1bf90383ed68d9008442373379a227e281c8500fbcb15c57b96443b35a3274c8001946b4664b52bec3f25015f475d5fe1d85127bd2abcafbd1cc394d8ce00f817cd6c2d710855642a061cec4b936e44f86428be809672e4a45d9a359def60551efd91484e0151af72c43da22663cdca83eea1e06d26e0a5a7611c6229933219d201f7", 0xe9}, {&(0x7f0000001800)="d0719445b04adc495dc481625821d1c63487814474faddeee2b4593b786193d74f22358324f8a2f54977bf26e663bbdf7afb80177bfa2a859013540eaf1e94884c5a4df593f7ae1ff91f4f6872371f6cc1896df767e93087a8d6f54b2e6362c35fc96720aa016fcbc0c6bdd2b3fe936b7ad239b36e94f5d19b13811e864b68d7e2532f2097f5f897d9d87bf84d04f8b9d46e93305f195e8e16fd55bee8345e42b7e524100e3322c5f9575dc995e0eb4d1d0610757cb0a3716ee81d2f231acca7f4c7f5012bbdc21728027724c9e02af50fba", 0xd2}], 0x2}, 0x0) 6.367178229s ago: executing program 1 (id=10239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC], 0x1c}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7fff840b467e25b4, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3fe, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c8016}, 0x24000000) 6.28257776s ago: executing program 5 (id=10240): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x1, 0x7809, 0x5, 0x8, {{0x19, 0x4, 0x0, 0x3d, 0x64, 0x68, 0x0, 0x3, 0x2f, 0x0, @empty, @local, {[@end, @end, @ssrr={0x89, 0x1b, 0xfc, [@empty, @multicast2, @remote, @broadcast, @rand_addr=0x64010101, @private=0xa010100]}, @noop, @rr={0x7, 0x1f, 0x5a, [@multicast1, @loopback, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @empty]}, @timestamp={0x44, 0x8, 0xea, 0x0, 0x0, [0x1]}, @rr={0x7, 0x7, 0x55, [@empty]}, @end, @end, @noop]}}}}}) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xca, &(0x7f0000000340)=""/202, 0x40f00, 0xe, '\x00', r4, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x1, 0xd, 0x9, 0x83}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000600)=[{0x5, 0x3, 0x9, 0xc}, {0x2, 0x5, 0x9, 0x3}, {0x3, 0x2, 0xe, 0x4}], 0x10, 0xc6}, 0x94) (async) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async, rerun: 64) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (rerun: 64) listen(r5, 0x2) (async, rerun: 64) accept4(r5, 0x0, 0x0, 0x80800) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fddbdf250b0000fd"], 0x14}}, 0x20000000) (rerun: 64) 6.150573177s ago: executing program 1 (id=10241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000240)={0x77359400}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000085}, 0x4) 6.097642863s ago: executing program 5 (id=10242): socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0xfffffffc) (async) r3 = socket(0x400000000010, 0x3, 0xfffffffc) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8014}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x101}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x101}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="370000002820000004000000", @ANYRES32=0x0, @ANYBLOB="51c4c69ecd95deb53d5941c6ba610fea9a29d8c65f9d9a838d14ded918bea3d57864c68dbdb9ac45df0b7b8a54437327ebb9dc8b85c0386d2988062d27b73b8d840819573794f392ce227495e9e78c14ea73bf72a29e778e333b6c61828f30db2c791f7f002a8986bcfebbd1f18af7afae4b730bc1909daec34a03beeb0aa65ad07f723a03eba78656c78d26ffd5c3a19d5f7def3d160236cad1", @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="370000002820000004000000", @ANYRES32=0x0, @ANYBLOB="51c4c69ecd95deb53d5941c6ba610fea9a29d8c65f9d9a838d14ded918bea3d57864c68dbdb9ac45df0b7b8a54437327ebb9dc8b85c0386d2988062d27b73b8d840819573794f392ce227495e9e78c14ea73bf72a29e778e333b6c61828f30db2c791f7f002a8986bcfebbd1f18af7afae4b730bc1909daec34a03beeb0aa65ad07f723a03eba78656c78d26ffd5c3a19d5f7def3d160236cad1", @ANYRES64=0x0], 0x20) socket(0x10, 0x2, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000010500010007000000180007800c00018008000140fffffffe0500030008000000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000010500010007000000180007800c00018008000140fffffffe0500030008000000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r10, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000c2ab2d923dbc80d79a67db929d2c2b7fd558de2b9e7b0b5a64e727068dfcfec5a56f81f56e03d80d5c9fa4442892dffe4176c5ef758cb23ce4d939056a28e8270823d2ee69e5e745ca91f3e4faa300e3f5f22c8e9222404c19a847ffe9c121066e7c3a47725aaa438708f565fbccfac4162bc65a6f59acaca4ad826020bf6a4147e2cabcfb54339662f2be7905b19cd3ddc9e7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 6.094165564s ago: executing program 4 (id=10243): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) sendmsg$netlink(r0, &(0x7f0000000140)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc, &(0x7f0000000100)=[{&(0x7f00000000c0)={0x18, 0x39, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x6, 0xe8, 0x0, 0x0, @str='.\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x8040}, 0x48840) r2 = socket$unix(0x1, 0x6ca6a4541a4fc7e5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000005c0)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000600)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r6 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) sendmsg$unix(r2, &(0x7f00000008c0)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="9df441bb76ac0a8ad50f1ac2b21b2ce5e97470b4981e733a63621bd933c6596b158ca0fcff510238d3a7690f1776b101ca10923df68455155288273423e9216b279e81080e3e702c77492f35104206e417489d3ca671cad35ed2d5973dbc7c54b4ed8a2e503c13594a4d8f2ecdf88b98d37868bb58fc68e15e1e26a16ea76efeaeef330e56c547d3e3697c8a2c2b63807717f94818e8959683cdc83fced0161285bcc91f20de2cee34209a96497d79551354bdb2f5c050043cba6c3d1fb93308b63dae9ba88093decfe1aaad95c4bc3891b3406ceb216a", 0xd7}, {&(0x7f0000000300)="23b407454222905038ca2b8521ebd4fb66d01b5d81797a57", 0x18}, {&(0x7f0000000340)="eeff69486de5d35a73b03ebaf044fdc599415c83d741a6e4264f658045", 0x1d}, {&(0x7f0000000380)}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="bbd386d918f25c0cd12a15f15300bd089b2f3a5b4aa8c991410159f1a5d897057cfd0d23d0e6153b10d925e2b2c578076a5f76c9a09b6a97a6684c3745e4613694e6b4ed4376d93a6873e7d3d6ddb383b11978d86b01f4cb760d9759d43a81388fdf2567d406587eceee3a5f78aa34e1ea54e2784cdb5445a1724455edb42fabf7aa7b6f018375a7ddfd1d5a32d749cdab7f3073147ebecafad152d8a43170f0ba0b69bfbed20cec10fae212c1c61bf5f0f6fa4906bcda13a25281d423f3addd5f5bb0dfd8f5515fb62ca82b15c07375ea920b0e605dcf03c65d804f5ab0f7f6f2139dd57436", 0xe6}, {&(0x7f0000000500)="ab9674917b4ad805ace0d30a568c8275947db3f37e0a75acb224c08ac7368d406dd05e2ef8c8", 0x26}, {0xfffffffffffffffc}], 0x8, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}], 0x40}, 0x1) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x5, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x8854) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000a80)={'wg0\x00'}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000ac0)={0x4, 0x27b4, 0xdb, 0xd793, 0xe}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000b00)={0xffff3973}, 0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r11, &(0x7f0000001cc0)={&(0x7f0000000b40)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="f5baac99a31a005b012ffe16d24f81b0ed1ff1b2ffd2ad7230a12fd85155d94435ffa95b6981ddefc9cc898430e5a49c16201fa7976385a7c1519258e98789f437d4be4cac4768a415c22c5476692021782d8fcb5dbfee006423e3b23107dd45df", 0x61}, {&(0x7f0000001c00)="db5d2597c31048f168a35ff51d7480acfb974490e7a651a9cab1fc597dfb6b7e0e2df8529be5a133e9d924917c7e311a17a3b30a58ecd640834d1967b9063aee3a825cc7b7329dd61a098678f65c945fcc0a", 0x52}], 0x3, 0x0, 0x0, 0x8000}, 0x2000c002) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001d00)={0xffffffffffffffff}, 0x4) read(r12, &(0x7f0000001d40)=""/37, 0x25) getsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000001d80)=@assoc_value={0x0}, &(0x7f0000001dc0)=0x8) r14 = socket$isdn(0x22, 0x3, 0x10) ioctl$XFS_IOC_GET_RESBLKS(r14, 0x80105873, &(0x7f0000001e00)) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r10) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000001e80)={@remote, @private1, @private1, 0x172, 0x9a6, 0x9, 0x500, 0x1000, 0xa, r7}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000001f00)={r13, 0x8}, &(0x7f0000001f40)=0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000001f80)={0x1, {{0xa, 0x4e22, 0x4, @loopback, 0x101}}}, 0x88) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000002080)={0x9, 0x20, '\x00', 0x1, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0]}) getsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f00000020c0), &(0x7f0000002100)=0x4) setsockopt$WPAN_WANTLQI(r10, 0x0, 0x3, &(0x7f0000002140)=0x1, 0x4) 5.119343528s ago: executing program 4 (id=10244): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x8081}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0xffffffff, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x5, 0x59, 0x0, &(0x7f0000000740)="48b4ee7e61f450b9aedf06f574605e5002c9861359dc9e4d24249ff99380e7a4d2f6c50c6052e1a62e5bdd1d6ecd3aa5101aa76c26ef6b0c7a800f7f786522994c7fe1737c313260f918dedaf90a3a91a8b05e3785127f3e57", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="07ef28bd70051508000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="10000000cbde195c", @ANYRES16=r7, @ANYBLOB="100028bd7000fbdbdf250300000014000200fe880000000000000000000000000101140002000000000000000000000000000000000005000100000000001400060067726530000000000000000000000000080005007f000001080005007f00000105000100000000002700070073797374656d5f753a6f626a6563745f723a6d7472725f6465766963655f743a73300000"], 0x98}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x96}, 0x1c) listen(r8, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='NLBL_UNLBL\x00', 0x24000, &(0x7f0000000040)={@align, {0x81, 0x51d6, 0x4, 0xffffffffffff7c7f}}, 0x4, 0x0, &(0x7f00000000c0)=0x1}, {[0x3, 0x2, 0xffffffff, 0x6]}, 0x2, 0x17, &(0x7f0000000100)=""/23}) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000400)='wlan0\x00', &(0x7f0000000540)=@random="663c456f2e79f78bd7", 0x9, 0x1) 4.948118969s ago: executing program 4 (id=10245): r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r2 = socket(0x10, 0x803, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c2000000080047f800240000e00002119078000000000000000089035544041a93000000000000009078"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6}, 0x10) sendto$packet(r0, &(0x7f0000000000)="ea92d2c62f06af98e71261176511dcf7709bbb3a5a39d941a80a2a591af8233a90d53fd2179462db29467833ae0bb191be3e67ba1efa029d159e67a72536154d1efd482ead06ba4e3e881e43bd1274f831a670d6870d37034a097fcc2a7f20a8c1a9a1addcc623d86dfd4fee46a72afde3b0e0e2d635102c91ad6ef04735eee5f19ccda69bd54cd108bf7a020dc87f02c4851cd2ee6308ff97882e82d192be7d21c3ef9f553c33247f9e204eb66812fc4644346154476744", 0xb8, 0x20008080, &(0x7f00000001c0)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0xdf4df0067e5f017e}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@deltaction={0x100, 0x31, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3504}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'geneve0\x00', 0x2}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000280)={0x5e, @empty, 0x4e22, 0x2, 'wlc\x00', 0x28, 0x2, 0x36}, 0x2c) 4.492202312s ago: executing program 1 (id=10246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000600)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xa000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x84, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7d71}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000306050084f010000000000000000a00000505000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x14) syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) 4.32808934s ago: executing program 4 (id=10247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf0302000300"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6) ioctl$FIONCLEX(r6, 0x5450) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffff0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20002031}, 0x20084014) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) unshare(0x2020600) ppoll(&(0x7f0000000640)=[{r9, 0x8009}], 0x1, &(0x7f0000000700)={0x0, 0x989680}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r10 = socket(0x8, 0xa, 0x6) ioctl$sock_netrom_SIOCADDRT(r10, 0x6180, 0x0) recvmmsg$unix(r10, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) 3.166295139s ago: executing program 2 (id=10249): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x24000841) (async) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x24000841) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$l2tp(r1, &(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x80, 0x0}, 0x1}, 0x10) (async) bind$l2tp(r1, &(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x80, 0x0}, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf251f00000008000200", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8042) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff26bd7060b4bb3600000000007da5b445de873354e914ea2569d8d3ad9902f453cfb83dcce42f43b2d5b42f34ec66a203b740517203d38f48c2763c9cbe7b3b478304ff7b8f27fccb3593688f9b863a29fcb09a4054", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128015000100697036746e6c00002c00028006000f000200000014000200fe8000000000000000000000000000aa04001300000009008900000008000a00", @ANYRES32=r3, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.727728586s ago: executing program 2 (id=10250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2b, &(0x7f0000000480)=""/65, &(0x7f0000000540)=0x41) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 2.533460534s ago: executing program 2 (id=10251): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048090}, 0x4001) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r7}, 0x38) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003800010327bd7000fcff7fff04000000"], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003800010327bd7000fcff7fff04000000"], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000040000000000000000000020085000000ad00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x2a}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000040000000000000000000020085000000ad00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x2a}, 0x94) syz_emit_ethernet(0x20, &(0x7f0000000540)={@broadcast, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, 'Q', "e4d278", 0x5, "4c49e982063c09000000"}}}}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) (async) r10 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) recvmsg(r10, &(0x7f0000000380)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000140)=""/118, 0x76}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000280)=""/67, 0x43}], 0x4, &(0x7f0000000340)=""/4, 0x4}, 0x2002) 2.295483777s ago: executing program 3 (id=10253): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)) sendmmsg$sock(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="d42d921e2450f4f57ee0c0afde90b94ba486fcd50c36eb2d6ff54b520914ac6b049813054fe16ed49b1c555750c05df9127744fbe286644d69027aa8d804de16f6b9dfabe63ec75a1e783cd7eb973f185b8b4fd89a9122b597b534be516f66119da6640137b34a7cc9499eb0b8c2bdd5edc97fd3c6e272b93d1f44a2dfb6ce89af085575a728bb5bf4f582a0f1ccd3c74ada9ddb6ae7617e65c1c73e3cafdb91ac3b38de618af9442344fb76e84d7168e07da14129cadd7643b589931ab0dee2472e89dd54e627b2764762", 0xcb}, {&(0x7f0000000900)="4ee462ea19ea807e24cd3f750e490d095ccfaf8b53d9043255bc221b31949ed438e9d7ac9ae2abf1b286ae3ccfa1c5dc8c9265ffe054818cf290d15dcc106a8299146186625660fd10f2d59a6dafc484e86afd1b3bc1e07053903d3f1152a9a4e26e5b442d5800b35a22710cb9e0952413139234396207e5779d8c8c570a093d77bd3787413556d389fa45126953d0eb97787489ced5fc08881ec1da3d45fa437aacdb8d109b152a6f7e9e4e02029836f9f929d9a59ccf06150b60aafb2da01bcc200e87bb7e2ba0391734525d0afbe471ccd33e4911bde06fb4f930488570bad12db901c28285c6cf3851d64048b91ed70549c818fe5930896e6b47f8a563", 0xff}], 0x2, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x6083cca50000}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b00)="08841fe88c1ce1991ba8cf", 0xb}, {&(0x7f0000000b40)="10c445cb5a0d238abecc48e61df78fd8859b68b449b5a7d6c3ee69ef6963cac4963a67ad02427fd8952302d48fd049e2daeedd61f24f09118152fb74c8b581c052f703805da9a2e4f83b426ac523bf7367c9f6e7da255b3f0e084beacaa566864ac808da05c247e489373cff705fdb0be736f7130d2c465aa6af7f45ee92607c83ff0a9af4a653c3f6300b716dd4882233547f0eda53d3327f31c3d9ee32a1bdf3fa588f712949a13afdcd572316e3a3e09506692def99f5d7cb6fd31e03fa36cf429981f086f80a76f4c5cec89bdfe1cbeac68eb0e9d75b32893114fcb08d67d1d15760c6d701740b96338ae1cc4acc2a513770060048", 0xf7}, {&(0x7f0000000c40)="996be345f432376b2e4c7f95d1da8e4a7a9949116d74d48607fb55ee27d468a1137770fb4b75003711af17f7a1a625a750530853e449e96379dcbb4b4f893464d28d2869d57c379710f89286eddd496b2aa80eab607273d9a6404fff6e7e708ba0424b1aa54c65f79b54b4eb90ded8226ad24d210564973d9ea248b486cccdf435573a323f4c5e787337255fd6eb3c150bc372469213d7a6711754d53b78d609c33faad0dc6d99", 0xa7}, {&(0x7f0000000d00)="65e55c10a93c694b1a248975", 0xc}, {&(0x7f0000000d40)="6bf9c5fa3538b3715626f813ec2bfe56e1a773eadd6f84a6fce4b91824a64ee1e784f21f2f03701d9e73646ae5f6d74a7189dd8af3285298b8cf7adc2ea0e906", 0x40}], 0x5}}, {{&(0x7f0000000e00)=@can, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="de4a68b88c71029c2d619b2e66cbba026fbc048cc74ff0b1949342b1486b9dfd43f24ef3fa52265674474e5daf11c1d96b7b48bfbf2f718fd4eb41", 0x3b}], 0x1, &(0x7f0000000f00)=[@mark={{0x14, 0x1, 0x24, 0x65}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x78}}], 0x3, 0x24040888) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @tipc={{0x12, 0x4, 0x0, 0x1f, 0x74, 0x67, 0x0, 0x8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, {[@end, @noop, @noop, @lsrr={0x83, 0x17, 0x80, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @local, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x52, 0x0, 0xe, [0xda6, 0x8, 0x0, 0x3324, 0x9]}, @end]}}, @payload_named={{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x60d5, 0x0, 0x1, 0x7, 0x3, 0x2, 0x6, 0x7fff, 0x0, 0x4e23, 0x4e20}, 0x2, 0x3}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) 2.240222822s ago: executing program 1 (id=10254): socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000180c2000000080045f8001c0000e0000211907800000000000000007691379fce4f548cae6cd76e545b710000000000089078"], 0x0) 1.670840696s ago: executing program 2 (id=10255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x5a}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2020600) r4 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x8004}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x28, 0x6, 0x1) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x80, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) setsockopt(r2, 0x7ff, 0x7, &(0x7f00000009c0)="ccfc5aa743b4b0f8d94c1a36452b5d4cbef86f9fce9f792c4d0df37c89c14355e97dd514be089dc042cc1f5956267fefa406ca7abcfbe89a3c2a1cfeb82462411704f6afda3d8bd5da8208de7c02e902d46fe13b5d57edf1891159622028c0268cda75537adc525e96ebf58e53c4c61108cdb31c74c574431abfe552122490b1ee6dfa1e426ae8cf83d60acd07ad305a41ba259ee07fba056aa786bf679ff0584e5450dba7cd57603b0d14922ccc695eb6636d0f716e6f333a53b0325f27f3e57a01c9da4d4c349f5823cb4c9d3c5a2a9aca58e7af7a1a21cdc5c43c9e97d0de392a12920685ce5193ce", 0xea) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r8, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x2a, '\x00', r10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xb7}, &(0x7f0000000200)=0x8) syz_emit_ethernet(0x71, &(0x7f00000004c0)={@random="bf5772e68bd4", @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@generic={0x0, "6e7c9a8173f79f564b61790f1fcd87d3bf503719a9789c2386ce4793a9c35d131f3e0c606f612f2ba854e59732d312c1e31046423fbda5dacb927bb155e35ec44fe26e28afc6d81df4be5fbc5428bcf51533e45323a1f4c831196d97208a51"}}}, &(0x7f0000000540)={0x0, 0x3, [0x3e5, 0x2d5, 0xf04, 0x89c]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000340)={r12, 0x3e, "53b0f40c8decc6afcf55eb6264ec8c732d68bb9ce231db6e9f535e1d78fe4dc9e0f5970402e4ac8669dc478b107fa9bab1139250e520e357b39a6e46eeff"}, &(0x7f00000003c0)=0x46) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="552ca9e34146d3f32cbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0380000010e3040008000500", @ANYRES32=r10, @ANYBLOB="240012800b0001006970766c616e00001400028006000200020000000600010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40) syz_emit_ethernet(0x51, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES16=r0], 0x0) 1.639835853s ago: executing program 3 (id=10256): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6b6, 0x44}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x10) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @null, @remote, @rose, @remote, @netrom, @bcast]}, &(0x7f0000000200)=0x48, 0x800) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @default]}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000580)={{r1, &(0x7f0000000340)='nr', 0xaa500, &(0x7f0000000380)={@align=0x9, {0x1, 0x2, 0x8d9c, 0x7f}}, 0x92b, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x7}, 0x1, &(0x7f0000000540)=[{0x2, 0xfffffffe, &(0x7f0000000440)='^!\x00', &(0x7f0000000480)="5acfa1b2c63f338dc287af3170b94fe8ef1303c5ccb7c2957b712f680f2425abd45980ef88cfb60f48b74665ed3e4e59e00146d04563f4942659cf0959813acaaddd7e74e1491eb7131b5917714e7d06b2757fb60eed4767a07ca52de1fa938976acb04f14a8e1058aa82a9b800396f4997151c10576b5e5f7a4bd0314d23d4d", 0x80, 0x8}]}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x5, 0xb, 0x80000001, 0x10000, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x4, 0x4, 0x1, 0x5, @void, @value, @value=r2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0xc1, 0xb5, &(0x7f00000009c0)="50cfedacd16e0bbf6a1f36cb19b0ea48cebafb6f06d4a2cc949d8f13b02b70039ebec1d0f9ecaaad39b529e362509a6bfa7ad0b7ceb8eafc05f4deb5cc6e4ff6615b1e9847c04ed08d06523c487d5af8d814b93ba73cc5a9e25e0550414a4395d9db89871bc64ad5cd8e9fb2129be17e767a17078a7ebf8d24b94498a6292a221789ee81c4ae509f8c03374015c1f90ca31727befaf17ddd27c0fb655db1cadffd5d2676090a626490ada4e40df1beeb4674949e01e91171e8adb6ef5c56d00d23", &(0x7f0000000ac0)=""/181, 0x200, 0x0, 0x0, 0xb1, 0x0, &(0x7f0000000bc0)="acd9cb335c88cd810c17af18fc6043f245c3ea99e94ea173ad543bac158daa15b56f2569b51c72f1cfed4b9217ebd1470aa59df30e9e8d75971cd6a0633b155d5f911678ece195a25366febd4747b26e645d59c04b1b3c11b742eceb559bbba44e01a0e9fee2f86744a8e30773600e250a3ed15d095faef9631f27fa3ca77f74207ae9a64a8529d746abb47771f070736d7ce01f546e991d39511c63b89e42e453dd2b5b5f6d8cebac07fb759efa114a24", 0x0, 0x0, 0x7}, 0x50) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_80211_inject_frame(&(0x7f0000000d40)=@broadcast, &(0x7f0000000d80)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_b, @device_a, @from_mac, {0xb, 0xdc}}, 0x1, 0xc, @random=0x2, @val={0x1, 0x2, [{0x6, 0x1}, {0x3, 0x1}]}, @val={0x2d, 0x1a, {0x400, 0x0, 0x0, 0x0, {0x84d, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x407, 0xe, 0x7}}, [{0xdd, 0x7e, "fa3a182c835358e18de20c9bfd483495286ef038481572c8cd464a6b88b1fc37804730ece9a906ac0c671929b32b13533e3ec31444329e7c5e434b3dfcb167074f4c027eead0246364b170c1b9a2494397b8629468ad4fdfc9471602f8ddbd0a9b3456a6fa04bf7695d22316f810c6b36feecca748cb5c98829fa3267173"}, {0xdd, 0x44, "40a0de886958401ef19d00523c3c03ba44d87d2776a36e1e61b9dc9bf636c9bd67a98c4c2488813f75cc7bdbd07ada52c4ba34ae298b954a4a5b6470eeec79a35f0307be"}, {0xdd, 0x1d, "35ae6e4bb34afa6c5b2008774655553e3a9644cce27dc73f4b4ad47f26"}, {0xdd, 0xbc, "8cbd55cf40a6599193efce948aa7dee54cc82da7490e999dd4a5fdfa89c4edec8ade52f4cf33bbb16a2d4726a4bb9b9b242141c71d50b2a50c7f759ff625ee7f14b44b556742284c1dc223bc11a3e8a41c92670399cd0a91a624da546ca810c4007b4f4334981d4d6302d10d18134945f2dd8dd2b8e943e439232b8652505f56fd35882090acf2b598a0ad341ded19adc1d049336cc0265131e99799d74b40db8b6f8c674932b6f84d9a72c8542aebab1fe45b267fa63d4031335444"}, {0xdd, 0x8f, "fe719a10968780d4292a99656c45fa0497543e4bbf901e4d6af2bb9f12ccb69e5a8378c866b1e3a6d92e4c7f602b8dbff8add383ccb512f64a77e56cc3f2a3d8c952e384ecbd9199017e3a5d8e815d967ea03e9e8ba9f6c7c18e379735a5365c184a553cce2b7e602127813fd13eeff305ae23d4b84dfbdaa2a7e38f2f6d04f2dd8191a0d3cbd94955436becfd8d92"}, {0xdd, 0xa0, "8136a5f963191881ec42637dd9928e7295ceb56a521e0f96fe1a6956413e4279a3e52e7cbae4e8e6b80ca5ddffd03692a5d073a33ce18ac4e81e6c38651c5683b93717e45886667e940c3823f22b0b70a42a7564d7b36832b255035f034dc380f8797c34ee991d228e384fc7b81b34a80bd488fef615ebf968ae52cb3de7678c7257faae7cef539a1a6e8599e19e9ab02f7e0ac70d51bea7d189519d9854e389"}, {0xdd, 0xf3, "c9f126dd2aeeaf1a7c63daefe5cba3ccd3b25a13cc52624b5c9afe5c0be0dd6f3f611a46b407f3f91d50db8caa2ba4e607266352ca84dbe4ca64fea0373b869f69986ed7940f798638d191a19bf89845ae22ce3579cffac147adc238fa655ec817e9ce12cbe3da5bd770e9ddb65f55dba2f4edde066d7720b572a9c5492300fcfc91f7d9ab32223cab1d5f8ef51eaf65a31cb10ad766cdc0f13267125fdfc292965f4d85736905b1d33cfee961145f5cf239c52f76439587876726c428bd072c4772f0c6b177a5339032bb370764329da8bb40e97c788c6ed8e848c7275ea4743533140205a72a7e9cfeaaa88edda340924753"}]}, 0x409) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001200)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000001380)={0x1, 'veth1_vlan\x00', {}, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan0\x00'}) syz_80211_inject_frame(&(0x7f0000001400)=@device_b, &(0x7f0000001440)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @random="2527ebcff118", @device_a, @random="87abe078db58", {0x7, 0x4}}, @random="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"}, 0x7e0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001c40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001cc0)=@assoc_value, &(0x7f0000001d00)=0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d80), r4) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x20, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001e80)=0x4, 0x4) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000001ec0)=0x9, &(0x7f0000001f00)=0x4) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000001f40)=0x80000001) 1.592266951s ago: executing program 1 (id=10257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0xa4, 0xb, 0xa, 0xd04, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000100)={0x0, 0xc, 0x6c74, 0x7, 0x0, 0x8, 0x5, 0x5}, &(0x7f0000000140)={0x8, 0x80000000, 0xd, 0x8000, 0x5e7, 0x2f, 0x7f, 0x100}, &(0x7f0000000180)={0x92d9, 0x6, 0x8000, 0x9, 0x7fffffff, 0x100000001, 0x1, 0x45c364a8}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x8]}, 0x8}) 1.590927732s ago: executing program 5 (id=10258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83", 0x6a}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b", 0xb}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r7, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000040)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044011}, 0x40050) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x44084) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.51942146s ago: executing program 1 (id=10259): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x891b, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) r2 = socket(0x8, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$IMGETCOUNT(r2, 0x400261f2, &(0x7f0000000000)) 1.483564599s ago: executing program 4 (id=10260): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@gettaction={0x24, 0x32, 0x1, 0x70bd28, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IMGETCOUNT(r0, 0x61e1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x400}], 0x3, 0x60010000, 0x0) unshare(0x40800) close(0x4) 1.33168412s ago: executing program 2 (id=10261): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r5, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f01640000000500530001"], 0x54}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="000000000085000000950000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f00000000c0)=r14, 0x4) sendmsg$inet(r16, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x2328}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 996.291252ms ago: executing program 3 (id=10262): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (async) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing={0x16, 0x2, 0x0, 0xd, 0x0, [@empty]}, 0x18) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="01980400419a04002800128008000100736974001c00028008000300ac"], 0x48}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x70}}, 0x4000004) (async) socket$netlink(0x10, 0x3, 0x10) 990.002492ms ago: executing program 2 (id=10263): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) 567.782416ms ago: executing program 3 (id=10264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000600)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xa000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x84, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7d71}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000306050084f010000000000000000a00000505000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x14) syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) 539.117692ms ago: executing program 5 (id=10265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [0x0, 0xffffffff], 'team_slave_1\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x32}, [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x8, 0x8, 0x8, 0x101, 0x4c, 0x480}}, @common=@icmp6={{0x28}, {0x13, "601a"}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x4000001, 0x9, 0x9, 0x80000000, 0x4, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x340) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 323.973483ms ago: executing program 3 (id=10266): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000740)={0x4000000, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x22, @local}, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltclass={0x70, 0x29, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {0xf, 0x2}, {0x9, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xa}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3a6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x401}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xac44, 0x14020}, [@IFLA_MTU={0xc, 0x4, 0x600}, @IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) 100.442304ms ago: executing program 5 (id=10267): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@alg={0xe8, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x3000}, [{0x8, 0x1, 0x80000001}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r4, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r4, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b3000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 0s ago: executing program 3 (id=10268): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x358e11699b3df3be}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x56}, @TCA_U32_ACT={0x31, 0x7, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_U32_SEL={0x14, 0x5, {0x8, 0x15, 0x3, 0x4b0, 0x8, 0xb, 0x40, 0x4}}]}}]}, 0x84}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000680)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r5, 0x800448f0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6e86092059b1c6fc30ca1500003d46495311cc28a5c53ed78d2409637a5ea3a28043ebf4913051362660999fbccced11c76af1c88f407a6ff8d0b1f48a54833888dd4e6fe68f494f56b8e90a30b8e8476947878134011de6c700162d31bc7d8cf8e1644e2e94052544e7292325cea6d46326da7c6f9e59b83ac4a90fecb0a8fb00f7bfa019923b288ec76acafb92c987775675b3b344159beca470264e422690de52", @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r7, r6}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) kernel console output (not intermixed with test programs): 719] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.500443][ T7719] ? kstrtouint+0x6e/0xe0 [ 1252.500535][ T7719] ? __fget_files+0x2a/0x420 [ 1252.500557][ T7719] ? __fget_files+0x3a0/0x420 [ 1252.500587][ T7719] __sys_sendmmsg+0x27c/0x4e0 [ 1252.500619][ T7719] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1252.500793][ T7719] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1252.500854][ T7719] ? ksys_write+0x242/0x270 [ 1252.500883][ T7719] ? __pfx_ksys_write+0x10/0x10 [ 1252.500914][ T7719] __x64_sys_sendmmsg+0xa0/0xc0 [ 1252.500942][ T7719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.500962][ T7719] do_syscall_64+0x15f/0xf80 [ 1252.501019][ T7719] ? trace_irq_disable+0x3b/0x140 [ 1252.501040][ T7719] ? clear_bhb_loop+0x40/0x90 [ 1252.501062][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.501081][ T7719] RIP: 0033:0x7f616ed9c819 [ 1252.501101][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.501117][ T7719] RSP: 002b:00007f616fc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1252.501138][ T7719] RAX: ffffffffffffffda RBX: 00007f616f015fa0 RCX: 00007f616ed9c819 [ 1252.501151][ T7719] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000006 [ 1252.501163][ T7719] RBP: 00007f616fc41090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.501175][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.501193][ T7719] R13: 00007f616f016038 R14: 00007f616f015fa0 R15: 00007ffefb9fe458 [ 1252.501222][ T7719] [ 1252.752135][ T7721] tipc: Started in network mode [ 1252.768389][ T7721] tipc: Node identity ac14140f, cluster identity 4711 [ 1252.795994][ T7721] tipc: New replicast peer: 255.255.255.255 [ 1252.802805][ T7721] tipc: Enabled bearer , priority 10 [ 1252.849538][ T7722] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9025'. [ 1252.875487][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9026'. [ 1253.046127][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9031'. [ 1253.106019][ T7739] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9031'. [ 1253.137861][ T7744] xt_hashlimit: size too large, truncated to 1048576 [ 1253.187737][ T7738] lo speed is unknown, defaulting to 1000 [ 1253.248813][ T7745] atomic_op ffff8880260f5998 conn xmit_atomic 0000000000000000 [ 1253.295448][ T7738] lo speed is unknown, defaulting to 1000 [ 1253.316432][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1253.342384][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1253.356778][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1253.365795][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1253.377573][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1253.497650][ T7748] lo speed is unknown, defaulting to 1000 [ 1253.630481][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9037'. [ 1253.678453][ T7758] netlink: 'syz.1.9037': attribute type 1 has an invalid length. [ 1253.692043][ T7761] sctp: [Deprecated]: syz.3.9038 (pid 7761) Use of int in max_burst socket option deprecated. [ 1253.692043][ T7761] Use struct sctp_assoc_value instead [ 1253.859156][ T7769] FAULT_INJECTION: forcing a failure. [ 1253.859156][ T7769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.884218][ T7769] CPU: 0 UID: 0 PID: 7769 Comm: syz.1.9040 Not tainted syzkaller #0 PREEMPT(full) [ 1253.884244][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1253.884256][ T7769] Call Trace: [ 1253.884264][ T7769] [ 1253.884272][ T7769] dump_stack_lvl+0xe8/0x150 [ 1253.884304][ T7769] should_fail_ex+0x412/0x560 [ 1253.884334][ T7769] _copy_from_iter+0x3b0/0x1670 [ 1253.884377][ T7769] ? __pfx__copy_from_iter+0x10/0x10 [ 1253.884418][ T7769] bcm_sendmsg+0x172/0x6c0 [ 1253.884447][ T7769] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1253.884475][ T7769] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1253.884500][ T7769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1253.884529][ T7769] ____sys_sendmsg+0x972/0x9f0 [ 1253.884583][ T7769] ? __might_fault+0xaf/0x130 [ 1253.884613][ T7769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1253.884647][ T7769] ? import_iovec+0x73/0xa0 [ 1253.884669][ T7769] ___sys_sendmsg+0x2a5/0x360 [ 1253.884693][ T7769] ? __lock_acquire+0x6b5/0x2cf0 [ 1253.884720][ T7769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.884751][ T7769] ? kstrtouint+0x6e/0xe0 [ 1253.884795][ T7769] ? __fget_files+0x2a/0x420 [ 1253.884814][ T7769] ? __fget_files+0x3a0/0x420 [ 1253.884841][ T7769] __sys_sendmmsg+0x27c/0x4e0 [ 1253.884870][ T7769] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1253.884893][ T7769] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1253.884939][ T7769] ? ksys_write+0x242/0x270 [ 1253.884965][ T7769] ? __pfx_ksys_write+0x10/0x10 [ 1253.884996][ T7769] __x64_sys_sendmmsg+0xa0/0xc0 [ 1253.885022][ T7769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.885040][ T7769] do_syscall_64+0x15f/0xf80 [ 1253.885061][ T7769] ? trace_irq_disable+0x3b/0x140 [ 1253.885080][ T7769] ? clear_bhb_loop+0x40/0x90 [ 1253.885109][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.885130][ T7769] RIP: 0033:0x7f600fd9c819 [ 1253.885148][ T7769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.885163][ T7769] RSP: 002b:00007f6010b83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1253.885182][ T7769] RAX: ffffffffffffffda RBX: 00007f6010015fa0 RCX: 00007f600fd9c819 [ 1253.885196][ T7769] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000006 [ 1253.885208][ T7769] RBP: 00007f6010b83090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.885220][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.885231][ T7769] R13: 00007f6010016038 R14: 00007f6010015fa0 R15: 00007ffc57bab488 [ 1253.885257][ T7769] [ 1253.913486][T29117] tipc: Node number set to 2886997007 [ 1254.205494][ T7778] netlink: 'syz.5.9043': attribute type 11 has an invalid length. [ 1254.343703][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9043'. [ 1254.370936][ T7748] lo speed is unknown, defaulting to 1000 [ 1254.378094][ T7778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9043'. [ 1254.521494][ T7790] netlink: 'syz.3.9049': attribute type 21 has an invalid length. [ 1254.535831][ T7790] IPv6: NLM_F_CREATE should be specified when creating new route [ 1254.544780][ T7790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1254.552829][ T7790] IPv6: NLM_F_CREATE should be set when creating new route [ 1254.561793][ T7790] IPv6: NLM_F_CREATE should be set when creating new route [ 1254.572631][ T7790] IPv6: NLM_F_CREATE should be set when creating new route [ 1254.585546][ T7792] netlink: 'syz.3.9049': attribute type 21 has an invalid length. [ 1254.597792][ T7792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1254.806318][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9049'. [ 1254.975184][ T7803] FAULT_INJECTION: forcing a failure. [ 1254.975184][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.022727][ T7803] CPU: 0 UID: 0 PID: 7803 Comm: syz.1.9053 Not tainted syzkaller #0 PREEMPT(full) [ 1255.022753][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1255.022763][ T7803] Call Trace: [ 1255.022770][ T7803] [ 1255.022777][ T7803] dump_stack_lvl+0xe8/0x150 [ 1255.022913][ T7803] should_fail_ex+0x412/0x560 [ 1255.022931][ T7803] _copy_from_iter+0x4ff/0x1670 [ 1255.022961][ T7803] ? __pfx__copy_from_iter+0x10/0x10 [ 1255.023020][ T7803] bcm_sendmsg+0x172/0x6c0 [ 1255.023046][ T7803] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1255.023070][ T7803] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1255.023092][ T7803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1255.023118][ T7803] ____sys_sendmsg+0x972/0x9f0 [ 1255.023143][ T7803] ? __might_fault+0xaf/0x130 [ 1255.023171][ T7803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1255.023191][ T7803] ? import_iovec+0x73/0xa0 [ 1255.023202][ T7803] ___sys_sendmsg+0x2a5/0x360 [ 1255.023216][ T7803] ? __lock_acquire+0x6b5/0x2cf0 [ 1255.023230][ T7803] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.023247][ T7803] ? kstrtouint+0x6e/0xe0 [ 1255.023272][ T7803] ? __fget_files+0x2a/0x420 [ 1255.023284][ T7803] ? __fget_files+0x3a0/0x420 [ 1255.023300][ T7803] __sys_sendmmsg+0x27c/0x4e0 [ 1255.023317][ T7803] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1255.023330][ T7803] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1255.023355][ T7803] ? ksys_write+0x242/0x270 [ 1255.023370][ T7803] ? __pfx_ksys_write+0x10/0x10 [ 1255.023386][ T7803] __x64_sys_sendmmsg+0xa0/0xc0 [ 1255.023401][ T7803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.023412][ T7803] do_syscall_64+0x15f/0xf80 [ 1255.023426][ T7803] ? trace_irq_disable+0x3b/0x140 [ 1255.023437][ T7803] ? clear_bhb_loop+0x40/0x90 [ 1255.023449][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.023459][ T7803] RIP: 0033:0x7f600fd9c819 [ 1255.023471][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.023480][ T7803] RSP: 002b:00007f6010b83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1255.023492][ T7803] RAX: ffffffffffffffda RBX: 00007f6010015fa0 RCX: 00007f600fd9c819 [ 1255.023499][ T7803] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000006 [ 1255.023506][ T7803] RBP: 00007f6010b83090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.023512][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.023518][ T7803] R13: 00007f6010016038 R14: 00007f6010015fa0 R15: 00007ffc57bab488 [ 1255.023533][ T7803] [ 1255.074381][ T30] audit: type=1800 audit(1776866764.907:20): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9052" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2903 res=0 errno=0 [ 1255.464961][ T50] Bluetooth: hci4: command tx timeout [ 1255.504852][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9055'. [ 1255.892620][ T7748] chnl_net:caif_netlink_parms(): no params data found [ 1256.050604][ T7836] netlink: 'syz.5.9059': attribute type 21 has an invalid length. [ 1256.081261][ T7748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.089638][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.100376][ T7748] bridge_slave_0: entered allmulticast mode [ 1256.112313][ T7748] bridge_slave_0: entered promiscuous mode [ 1256.126373][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.134254][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.142146][ T7748] bridge_slave_1: entered allmulticast mode [ 1256.151617][ T7748] bridge_slave_1: entered promiscuous mode [ 1256.246102][ T7841] FAULT_INJECTION: forcing a failure. [ 1256.246102][ T7841] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.259058][ T7748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.279747][ T7748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.289505][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.5.9064 Not tainted syzkaller #0 PREEMPT(full) [ 1256.289533][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1256.289545][ T7841] Call Trace: [ 1256.289552][ T7841] [ 1256.289560][ T7841] dump_stack_lvl+0xe8/0x150 [ 1256.289590][ T7841] should_fail_ex+0x412/0x560 [ 1256.289620][ T7841] should_failslab+0xa8/0x100 [ 1256.289640][ T7841] __kmalloc_cache_noprof+0x88/0x660 [ 1256.289664][ T7841] ? bcm_rx_setup+0x51e/0x1f20 [ 1256.289691][ T7841] bcm_rx_setup+0x51e/0x1f20 [ 1256.289729][ T7841] ? do_raw_spin_lock+0x12b/0x2f0 [ 1256.289746][ T7841] ? lock_sock_nested+0x6a/0x100 [ 1256.289768][ T7841] ? __pfx_bcm_rx_setup+0x10/0x10 [ 1256.289792][ T7841] ? bcm_sendmsg+0x210/0x6c0 [ 1256.289815][ T7841] ? __local_bh_enable_ip+0xd0/0x130 [ 1256.289842][ T7841] bcm_sendmsg+0x267/0x6c0 [ 1256.289868][ T7841] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1256.289894][ T7841] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1256.289917][ T7841] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1256.289945][ T7841] ____sys_sendmsg+0x972/0x9f0 [ 1256.289972][ T7841] ? __might_fault+0xaf/0x130 [ 1256.289999][ T7841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1256.290032][ T7841] ? import_iovec+0x73/0xa0 [ 1256.290053][ T7841] ___sys_sendmsg+0x2a5/0x360 [ 1256.290076][ T7841] ? __lock_acquire+0x6b5/0x2cf0 [ 1256.290101][ T7841] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.290130][ T7841] ? kstrtouint+0x6e/0xe0 [ 1256.290176][ T7841] ? __fget_files+0x2a/0x420 [ 1256.290195][ T7841] ? __fget_files+0x3a0/0x420 [ 1256.290225][ T7841] __sys_sendmmsg+0x27c/0x4e0 [ 1256.290255][ T7841] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1256.290277][ T7841] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1256.290321][ T7841] ? ksys_write+0x242/0x270 [ 1256.290347][ T7841] ? __pfx_ksys_write+0x10/0x10 [ 1256.290377][ T7841] __x64_sys_sendmmsg+0xa0/0xc0 [ 1256.290399][ T7841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.290425][ T7841] do_syscall_64+0x15f/0xf80 [ 1256.290445][ T7841] ? trace_irq_disable+0x3b/0x140 [ 1256.290463][ T7841] ? clear_bhb_loop+0x40/0x90 [ 1256.290485][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.290510][ T7841] RIP: 0033:0x7f9171f9c819 [ 1256.290527][ T7841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.290541][ T7841] RSP: 002b:00007f9172e4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1256.290562][ T7841] RAX: ffffffffffffffda RBX: 00007f9172215fa0 RCX: 00007f9171f9c819 [ 1256.290575][ T7841] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000006 [ 1256.290587][ T7841] RBP: 00007f9172e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.290597][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.290607][ T7841] R13: 00007f9172216038 R14: 00007f9172215fa0 R15: 00007ffcc36ab4c8 [ 1256.290635][ T7841] [ 1256.667256][ T7748] team0: Port device team_slave_0 added [ 1256.692077][ T7748] team0: Port device team_slave_1 added [ 1256.796753][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.804273][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.882935][ T7748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.909174][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.917099][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.945276][ T7748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.221228][ T7748] hsr_slave_0: entered promiscuous mode [ 1257.229615][ T7748] hsr_slave_1: entered promiscuous mode [ 1257.237007][ T7748] debugfs: 'hsr0' already exists in 'hsr' [ 1257.254895][ T7748] Cannot create hsr debugfs directory [ 1257.262543][ T7880] FAULT_INJECTION: forcing a failure. [ 1257.262543][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.296416][ T7880] CPU: 1 UID: 0 PID: 7880 Comm: syz.2.9076 Not tainted syzkaller #0 PREEMPT(full) [ 1257.296442][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1257.296454][ T7880] Call Trace: [ 1257.296462][ T7880] [ 1257.296470][ T7880] dump_stack_lvl+0xe8/0x150 [ 1257.296500][ T7880] should_fail_ex+0x412/0x560 [ 1257.296529][ T7880] should_failslab+0xa8/0x100 [ 1257.296552][ T7880] ? can_rx_register+0x16d/0x7a0 [ 1257.296578][ T7880] kmem_cache_alloc_noprof+0x87/0x650 [ 1257.296611][ T7880] can_rx_register+0x16d/0x7a0 [ 1257.296630][ T7880] ? __asan_memset+0x22/0x50 [ 1257.296650][ T7880] ? __pfx_bcm_rx_handler+0x10/0x10 [ 1257.296674][ T7880] bcm_rx_setup+0x156f/0x1f20 [ 1257.296706][ T7880] ? do_raw_spin_lock+0x12b/0x2f0 [ 1257.296722][ T7880] ? lock_sock_nested+0x6a/0x100 [ 1257.296744][ T7880] ? __pfx_bcm_rx_setup+0x10/0x10 [ 1257.296769][ T7880] ? bcm_sendmsg+0x210/0x6c0 [ 1257.296792][ T7880] ? __local_bh_enable_ip+0xd0/0x130 [ 1257.296818][ T7880] bcm_sendmsg+0x267/0x6c0 [ 1257.296844][ T7880] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1257.296870][ T7880] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1257.296894][ T7880] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1257.296922][ T7880] ____sys_sendmsg+0x972/0x9f0 [ 1257.296946][ T7880] ? __might_fault+0xaf/0x130 [ 1257.296974][ T7880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1257.297008][ T7880] ? import_iovec+0x73/0xa0 [ 1257.297031][ T7880] ___sys_sendmsg+0x2a5/0x360 [ 1257.297054][ T7880] ? __lock_acquire+0x6b5/0x2cf0 [ 1257.297080][ T7880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1257.297111][ T7880] ? kstrtouint+0x6e/0xe0 [ 1257.297158][ T7880] ? __fget_files+0x2a/0x420 [ 1257.297179][ T7880] ? __fget_files+0x3a0/0x420 [ 1257.297210][ T7880] __sys_sendmmsg+0x27c/0x4e0 [ 1257.297240][ T7880] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1257.297263][ T7880] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1257.297311][ T7880] ? ksys_write+0x242/0x270 [ 1257.297336][ T7880] ? __pfx_ksys_write+0x10/0x10 [ 1257.297367][ T7880] __x64_sys_sendmmsg+0xa0/0xc0 [ 1257.297390][ T7880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.297408][ T7880] do_syscall_64+0x15f/0xf80 [ 1257.297428][ T7880] ? trace_irq_disable+0x3b/0x140 [ 1257.297446][ T7880] ? clear_bhb_loop+0x40/0x90 [ 1257.297468][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.297485][ T7880] RIP: 0033:0x7fa8cb39c819 [ 1257.297503][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.297518][ T7880] RSP: 002b:00007fa8cc250028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1257.297537][ T7880] RAX: ffffffffffffffda RBX: 00007fa8cb615fa0 RCX: 00007fa8cb39c819 [ 1257.297551][ T7880] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000006 [ 1257.297563][ T7880] RBP: 00007fa8cc250090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.297581][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.297591][ T7880] R13: 00007fa8cb616038 R14: 00007fa8cb615fa0 R15: 00007fff31ef47d8 [ 1257.297618][ T7880] [ 1257.685963][ T50] Bluetooth: hci4: command tx timeout [ 1257.831387][ T7885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1258.151304][ T7904] lo speed is unknown, defaulting to 1000 [ 1258.160276][ T7904] lo speed is unknown, defaulting to 1000 [ 1258.581743][ T7922] netlink: 'syz.2.9087': attribute type 1 has an invalid length. [ 1258.621962][ T7922] netlink: 'syz.2.9087': attribute type 4 has an invalid length. [ 1258.648857][ T7922] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9087'. [ 1258.858029][ T7926] syzkaller0: entered promiscuous mode [ 1258.866850][ T7926] syzkaller0: entered allmulticast mode [ 1258.906737][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9094'. [ 1259.060153][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9095'. [ 1259.120521][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9095'. [ 1259.134794][ T7748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1259.151181][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1259.165562][ T7748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1259.175488][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9097'. [ 1259.221725][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1259.252901][ T7748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1259.289591][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1259.326154][ T7748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1259.371623][ T7748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1259.459030][ T7947] netlink: 'syz.5.9099': attribute type 21 has an invalid length. [ 1259.503374][ T7947] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9099'. [ 1259.537665][ T7947] netlink: 'syz.5.9099': attribute type 4 has an invalid length. [ 1259.565618][ T7947] netlink: 'syz.5.9099': attribute type 5 has an invalid length. [ 1259.575362][ T7947] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9099'. [ 1259.615416][ T7958] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9102'. [ 1259.648024][ T7958] syzkaller0: entered promiscuous mode [ 1259.657653][ T7958] syzkaller0: entered allmulticast mode [ 1259.703686][ T50] Bluetooth: hci4: command tx timeout [ 1259.771340][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.834327][ T7748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.887563][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.895082][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.909657][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9105'. [ 1259.929378][T13029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.934110][ T7978] FAULT_INJECTION: forcing a failure. [ 1259.934110][ T7978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.937282][T13029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.974524][ T7978] CPU: 1 UID: 0 PID: 7978 Comm: syz.3.9108 Not tainted syzkaller #0 PREEMPT(full) [ 1259.974550][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1259.974561][ T7978] Call Trace: [ 1259.974568][ T7978] [ 1259.974576][ T7978] dump_stack_lvl+0xe8/0x150 [ 1259.974606][ T7978] should_fail_ex+0x412/0x560 [ 1259.974633][ T7978] _copy_from_iter+0x3b0/0x1670 [ 1259.974664][ T7978] ? release_sock+0x2f/0x260 [ 1259.974687][ T7978] ? __pfx__copy_from_iter+0x10/0x10 [ 1259.974717][ T7978] ? bcm_sendmsg+0x53b/0x6c0 [ 1259.974743][ T7978] bcm_sendmsg+0x172/0x6c0 [ 1259.974769][ T7978] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1259.974795][ T7978] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1259.974818][ T7978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1259.974847][ T7978] ____sys_sendmsg+0x972/0x9f0 [ 1259.974871][ T7978] ? __might_fault+0xaf/0x130 [ 1259.974899][ T7978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1259.974941][ T7978] ? import_iovec+0x73/0xa0 [ 1259.974963][ T7978] ___sys_sendmsg+0x2a5/0x360 [ 1259.974987][ T7978] ? __lock_acquire+0x6b5/0x2cf0 [ 1259.975013][ T7978] ? __pfx____sys_sendmsg+0x10/0x10 [ 1259.975036][ T7978] ? __lock_acquire+0x6b5/0x2cf0 [ 1259.975061][ T7978] ? kstrtouint+0x6e/0xe0 [ 1259.975122][ T7978] __sys_sendmmsg+0x27c/0x4e0 [ 1259.975152][ T7978] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1259.975174][ T7978] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1259.975220][ T7978] ? ksys_write+0x242/0x270 [ 1259.975247][ T7978] ? __pfx_ksys_write+0x10/0x10 [ 1259.975277][ T7978] __x64_sys_sendmmsg+0xa0/0xc0 [ 1259.975303][ T7978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.975322][ T7978] do_syscall_64+0x15f/0xf80 [ 1259.975342][ T7978] ? trace_irq_disable+0x3b/0x140 [ 1259.975362][ T7978] ? clear_bhb_loop+0x40/0x90 [ 1259.975383][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.975400][ T7978] RIP: 0033:0x7f25bbd9c819 [ 1259.975428][ T7978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.975444][ T7978] RSP: 002b:00007f25bcb85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1259.975469][ T7978] RAX: ffffffffffffffda RBX: 00007f25bc015fa0 RCX: 00007f25bbd9c819 [ 1259.975483][ T7978] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000006 [ 1259.975495][ T7978] RBP: 00007f25bcb85090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.975507][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.975518][ T7978] R13: 00007f25bc016038 R14: 00007f25bc015fa0 R15: 00007ffe2c2c9b18 [ 1259.975547][ T7978] [ 1260.371996][ T7980] lo speed is unknown, defaulting to 1000 [ 1260.392412][ T7980] lo speed is unknown, defaulting to 1000 [ 1260.640912][ T7998] netlink: 'syz.5.9110': attribute type 6 has an invalid length. [ 1260.787110][ T7748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.857233][ T8012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9114'. [ 1260.890219][ T8012] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1260.906690][ T8007] lo speed is unknown, defaulting to 1000 [ 1260.914456][ T8012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.951894][ T8015] netlink: 'syz.5.9110': attribute type 29 has an invalid length. [ 1261.007649][ T8007] lo speed is unknown, defaulting to 1000 [ 1261.060764][ T8015] netlink: 'syz.5.9110': attribute type 29 has an invalid length. [ 1261.148848][ T8026] netlink: 'syz.2.9117': attribute type 1 has an invalid length. [ 1261.322580][ T8033] FAULT_INJECTION: forcing a failure. [ 1261.322580][ T8033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.322823][ T8026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1261.337936][ T8033] CPU: 0 UID: 0 PID: 8033 Comm: syz.3.9118 Not tainted syzkaller #0 PREEMPT(full) [ 1261.337960][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1261.337971][ T8033] Call Trace: [ 1261.337979][ T8033] [ 1261.337987][ T8033] dump_stack_lvl+0xe8/0x150 [ 1261.338018][ T8033] should_fail_ex+0x412/0x560 [ 1261.338045][ T8033] _copy_to_user+0x31/0xb0 [ 1261.338065][ T8033] simple_read_from_buffer+0xe1/0x170 [ 1261.338092][ T8033] proc_fail_nth_read+0x1bb/0x230 [ 1261.338117][ T8033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1261.338141][ T8033] ? rw_verify_area+0x2a6/0x4d0 [ 1261.338164][ T8033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1261.338187][ T8033] vfs_read+0x20c/0xa70 [ 1261.338215][ T8033] ? __pfx___mutex_lock+0x10/0x10 [ 1261.338236][ T8033] ? __pfx_vfs_read+0x10/0x10 [ 1261.338261][ T8033] ? __fget_files+0x2a/0x420 [ 1261.338286][ T8033] ? __fget_files+0x3a0/0x420 [ 1261.338306][ T8033] ? __fget_files+0x2a/0x420 [ 1261.338334][ T8033] ksys_read+0x150/0x270 [ 1261.338359][ T8033] ? __pfx_ksys_read+0x10/0x10 [ 1261.338391][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.338419][ T8033] do_syscall_64+0x15f/0xf80 [ 1261.338438][ T8033] ? trace_irq_disable+0x3b/0x140 [ 1261.338457][ T8033] ? clear_bhb_loop+0x40/0x90 [ 1261.338479][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.338495][ T8033] RIP: 0033:0x7f25bbd5d04e [ 1261.338513][ T8033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1261.338528][ T8033] RSP: 002b:00007f25bcb84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1261.338547][ T8033] RAX: ffffffffffffffda RBX: 00007f25bcb856c0 RCX: 00007f25bbd5d04e [ 1261.338560][ T8033] RDX: 000000000000000f RSI: 00007f25bcb850a0 RDI: 0000000000000007 [ 1261.338571][ T8033] RBP: 00007f25bcb85090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.338582][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.338593][ T8033] R13: 00007f25bc016038 R14: 00007f25bc015fa0 R15: 00007ffe2c2c9b18 [ 1261.338622][ T8033] [ 1261.574611][ T8026] netlink: 'syz.2.9117': attribute type 1 has an invalid length. [ 1261.656292][ T8026] netlink: 'syz.2.9117': attribute type 1 has an invalid length. [ 1261.665184][ T8035] IPVS: Unknown mcast interface: ipvlan0 [ 1261.677159][ T8026] netlink: 'syz.2.9117': attribute type 1 has an invalid length. [ 1261.787830][ T50] Bluetooth: hci4: command tx timeout [ 1261.857457][ T8038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1261.931650][ T7748] veth0_vlan: entered promiscuous mode [ 1262.079286][ T7748] veth1_vlan: entered promiscuous mode [ 1262.180786][ T7748] veth0_macvtap: entered promiscuous mode [ 1262.216350][ T7748] veth1_macvtap: entered promiscuous mode [ 1262.302328][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.379040][ T8047] macsec2: entered promiscuous mode [ 1262.412852][ T7748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.541736][ T86] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.579904][ T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.614342][ T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.646954][ T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.877941][T16261] lec:lec_start_xmit: lec0:No lecd attached [ 1262.949217][T13028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.960610][T13028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.106748][T13018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.127863][T13018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.605043][ T8095] lo speed is unknown, defaulting to 1000 [ 1263.673770][ T8095] lo speed is unknown, defaulting to 1000 [ 1263.849301][ T8114] __nla_validate_parse: 5 callbacks suppressed [ 1263.849323][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9144'. [ 1264.873439][ T8151] netlink: 277 bytes leftover after parsing attributes in process `syz.5.9157'. [ 1265.236457][ T8165] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9157'. [ 1265.245948][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9160'. [ 1265.259347][ T8132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1265.273225][ T8132] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1265.319627][ T8132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1265.333787][ T8132] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1265.432682][ T8132] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1265.446543][ T8132] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1265.525930][ T8132] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1265.539364][ T8132] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1265.765192][ T8181] validate_nla: 50 callbacks suppressed [ 1265.765227][ T8181] netlink: 'syz.1.9162': attribute type 1 has an invalid length. [ 1265.798858][ T8181] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9162'. [ 1265.915235][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9167'. [ 1266.038107][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9169'. [ 1266.051917][ T8202] syz_tun: entered allmulticast mode [ 1266.091412][T31854] IPVS: starting estimator thread 0... [ 1266.193353][ T8209] IPVS: using max 30 ests per chain, 72000 per kthread [ 1266.287418][ T8214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1266.325150][ T8220] delete_channel: no stack [ 1266.387308][ T8225] netlink: 'syz.4.9177': attribute type 1 has an invalid length. [ 1266.425825][ T8225] ipvlan2: entered allmulticast mode [ 1266.442931][ T8225] veth0: entered allmulticast mode [ 1266.523959][ T8225] ipvlan3: entered allmulticast mode [ 1266.707151][ T8188] syz_tun: left allmulticast mode [ 1266.777193][ T8232] lo speed is unknown, defaulting to 1000 [ 1266.787383][ T8232] lo speed is unknown, defaulting to 1000 [ 1266.852571][ T8240] netlink: 'syz.5.9183': attribute type 1 has an invalid length. [ 1266.997251][ T8244] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1267.064894][ T8244] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1267.179270][ T8252] netlink: 'syz.1.9187': attribute type 11 has an invalid length. [ 1267.199889][ T8252] netlink: 'syz.1.9187': attribute type 4 has an invalid length. [ 1267.251318][ T8252] netlink: 'syz.1.9187': attribute type 4 has an invalid length. [ 1267.575378][ T8262] : renamed from veth0_to_bond [ 1268.103336][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5220 ms [ 1268.111926][ C1] lec:lec_tx_timeout: lec0 [ 1268.299010][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1268.320056][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1268.336524][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1268.348793][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1268.362418][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1268.408235][T17757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1268.418365][T17757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1268.428495][T17757] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1268.451409][T17757] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1268.464227][T17757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1268.674993][ T8284] lo speed is unknown, defaulting to 1000 [ 1268.696958][ T8284] lo speed is unknown, defaulting to 1000 [ 1269.249124][ T8322] FAULT_INJECTION: forcing a failure. [ 1269.249124][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.282926][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.5.9206 Not tainted syzkaller #0 PREEMPT(full) [ 1269.282956][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1269.282966][ T8322] Call Trace: [ 1269.282975][ T8322] [ 1269.282983][ T8322] dump_stack_lvl+0xe8/0x150 [ 1269.283014][ T8322] should_fail_ex+0x412/0x560 [ 1269.283051][ T8322] should_failslab+0xa8/0x100 [ 1269.283075][ T8322] __kmalloc_noprof+0xe8/0x760 [ 1269.283099][ T8322] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1269.283125][ T8322] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1269.283158][ T8322] genl_family_rcv_msg_doit+0xd9/0x330 [ 1269.283183][ T8322] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1269.283206][ T8322] ? apparmor_capable+0x126/0x170 [ 1269.283225][ T8322] ? bpf_lsm_capable+0x9/0x20 [ 1269.283243][ T8322] ? security_capable+0x7e/0x2c0 [ 1269.283270][ T8322] genl_rcv_msg+0x61c/0x7a0 [ 1269.283293][ T8322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1269.283309][ T8322] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1269.283328][ T8322] ? __pfx_ref_tracker_free+0x10/0x10 [ 1269.283361][ T8322] netlink_rcv_skb+0x232/0x4b0 [ 1269.283386][ T8322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1269.283405][ T8322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1269.283444][ T8322] ? down_read+0x270/0x2e0 [ 1269.283466][ T8322] ? genl_rcv+0xd/0x40 [ 1269.283486][ T8322] genl_rcv+0x28/0x40 [ 1269.283504][ T8322] netlink_unicast+0x75c/0x8e0 [ 1269.283535][ T8322] netlink_sendmsg+0x813/0xb40 [ 1269.283775][ T8322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.283814][ T8322] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1269.283854][ T8322] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1269.283882][ T8322] ____sys_sendmsg+0x972/0x9f0 [ 1269.283905][ T8322] ? __might_fault+0xaf/0x130 [ 1269.283929][ T8322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.283958][ T8322] ? import_iovec+0x73/0xa0 [ 1269.283980][ T8322] ___sys_sendmsg+0x2a5/0x360 [ 1269.284002][ T8322] ? __lock_acquire+0x6b5/0x2cf0 [ 1269.284028][ T8322] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.284092][ T8322] ? __fget_files+0x2a/0x420 [ 1269.284110][ T8322] ? __fget_files+0x3a0/0x420 [ 1269.284135][ T8322] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1269.284157][ T8322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1269.284186][ T8322] ? __pfx_ksys_write+0x10/0x10 [ 1269.284213][ T8322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.284228][ T8322] do_syscall_64+0x15f/0xf80 [ 1269.284245][ T8322] ? trace_irq_disable+0x3b/0x140 [ 1269.284261][ T8322] ? clear_bhb_loop+0x40/0x90 [ 1269.284278][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.284292][ T8322] RIP: 0033:0x7f9171f9c819 [ 1269.284307][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.284319][ T8322] RSP: 002b:00007f9172e4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.284337][ T8322] RAX: ffffffffffffffda RBX: 00007f9172215fa0 RCX: 00007f9171f9c819 [ 1269.284348][ T8322] RDX: 0000000008000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1269.284358][ T8322] RBP: 00007f9172e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.284367][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.284375][ T8322] R13: 00007f9172216038 R14: 00007f9172215fa0 R15: 00007ffcc36ab4c8 [ 1269.284398][ T8322] [ 1269.721632][ T8320] lo speed is unknown, defaulting to 1000 [ 1269.730920][ T8320] lo speed is unknown, defaulting to 1000 [ 1269.931486][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9209'. [ 1269.995432][ T8328] netlink: 'syz.4.9209': attribute type 2 has an invalid length. [ 1270.051781][ T8328] netlink: 'syz.4.9209': attribute type 8 has an invalid length. [ 1270.062626][ T8328] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9209'. [ 1270.277182][ T8284] chnl_net:caif_netlink_parms(): no params data found [ 1270.503162][ T50] Bluetooth: hci6: command tx timeout [ 1270.766042][ T8361] FAULT_INJECTION: forcing a failure. [ 1270.766042][ T8361] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.780760][ T8361] CPU: 0 UID: 0 PID: 8361 Comm: syz.2.9217 Not tainted syzkaller #0 PREEMPT(full) [ 1270.780785][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1270.780797][ T8361] Call Trace: [ 1270.780804][ T8361] [ 1270.780812][ T8361] dump_stack_lvl+0xe8/0x150 [ 1270.780842][ T8361] should_fail_ex+0x412/0x560 [ 1270.780871][ T8361] should_failslab+0xa8/0x100 [ 1270.780889][ T8361] ? security_inode_alloc+0x39/0x310 [ 1270.780914][ T8361] kmem_cache_alloc_noprof+0x87/0x650 [ 1270.780954][ T8361] security_inode_alloc+0x39/0x310 [ 1270.780979][ T8361] inode_init_always_gfp+0x9c8/0xda0 [ 1270.781007][ T8361] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1270.781028][ T8361] alloc_inode+0x82/0x1b0 [ 1270.781049][ T8361] __sock_create+0x12d/0x9d0 [ 1270.781079][ T8361] udp_sock_create4+0xca/0x480 [ 1270.781109][ T8361] ? __pfx_udp_sock_create4+0x10/0x10 [ 1270.781134][ T8361] ? __pfx___nla_validate_parse+0x10/0x10 [ 1270.781159][ T8361] fou_nl_add_doit+0x199/0xa60 [ 1270.781184][ T8361] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1270.781204][ T8361] ? rcu_is_watching+0x15/0xb0 [ 1270.781243][ T8361] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1270.781264][ T8361] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1270.781291][ T8361] genl_family_rcv_msg_doit+0x22a/0x330 [ 1270.781318][ T8361] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1270.781350][ T8361] ? bpf_lsm_capable+0x9/0x20 [ 1270.781369][ T8361] ? security_capable+0x7e/0x2c0 [ 1270.781397][ T8361] genl_rcv_msg+0x61c/0x7a0 [ 1270.781422][ T8361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.781439][ T8361] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1270.781462][ T8361] ? __pfx_ref_tracker_free+0x10/0x10 [ 1270.781497][ T8361] netlink_rcv_skb+0x232/0x4b0 [ 1270.781522][ T8361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.781542][ T8361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1270.781583][ T8361] ? down_read+0x270/0x2e0 [ 1270.781604][ T8361] ? genl_rcv+0xd/0x40 [ 1270.781624][ T8361] genl_rcv+0x28/0x40 [ 1270.781639][ T8361] netlink_unicast+0x75c/0x8e0 [ 1270.781672][ T8361] netlink_sendmsg+0x813/0xb40 [ 1270.781713][ T8361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.781741][ T8361] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1270.781766][ T8361] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1270.781793][ T8361] ____sys_sendmsg+0x972/0x9f0 [ 1270.781814][ T8361] ? __might_fault+0xaf/0x130 [ 1270.781840][ T8361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.781869][ T8361] ? import_iovec+0x73/0xa0 [ 1270.781887][ T8361] ___sys_sendmsg+0x2a5/0x360 [ 1270.781908][ T8361] ? __lock_acquire+0x6b5/0x2cf0 [ 1270.781930][ T8361] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.781981][ T8361] ? __fget_files+0x2a/0x420 [ 1270.781999][ T8361] ? __fget_files+0x3a0/0x420 [ 1270.782025][ T8361] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1270.782049][ T8361] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1270.782078][ T8361] ? __pfx_ksys_write+0x10/0x10 [ 1270.782106][ T8361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.782122][ T8361] do_syscall_64+0x15f/0xf80 [ 1270.782139][ T8361] ? trace_irq_disable+0x3b/0x140 [ 1270.782155][ T8361] ? clear_bhb_loop+0x40/0x90 [ 1270.782173][ T8361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.782188][ T8361] RIP: 0033:0x7fa8cb39c819 [ 1270.782204][ T8361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.782217][ T8361] RSP: 002b:00007fa8cc250028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.782236][ T8361] RAX: ffffffffffffffda RBX: 00007fa8cb615fa0 RCX: 00007fa8cb39c819 [ 1270.782247][ T8361] RDX: 0000000008000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1270.782258][ T8361] RBP: 00007fa8cc250090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.782268][ T8361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.782277][ T8361] R13: 00007fa8cb616038 R14: 00007fa8cb615fa0 R15: 00007fff31ef47d8 [ 1270.782303][ T8361] [ 1270.782366][ T8361] socket: no more sockets [ 1270.858564][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.208434][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.216331][ T8284] bridge_slave_0: entered allmulticast mode [ 1271.225101][ T8284] bridge_slave_0: entered promiscuous mode [ 1271.261067][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9223'. [ 1271.294131][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.299016][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9224'. [ 1271.304114][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.319643][ T8284] bridge_slave_1: entered allmulticast mode [ 1271.328734][ T8284] bridge_slave_1: entered promiscuous mode [ 1271.338295][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9224'. [ 1271.347912][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9225'. [ 1271.508280][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.557942][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.576444][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9223'. [ 1271.600312][ T8395] FAULT_INJECTION: forcing a failure. [ 1271.600312][ T8395] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.615721][ T8397] vxcan1: tx drop: invalid sa for name 0x0001000000000000 [ 1271.640555][ T8395] CPU: 0 UID: 0 PID: 8395 Comm: syz.5.9229 Not tainted syzkaller #0 PREEMPT(full) [ 1271.640580][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1271.640590][ T8395] Call Trace: [ 1271.640597][ T8395] [ 1271.640605][ T8395] dump_stack_lvl+0xe8/0x150 [ 1271.640636][ T8395] should_fail_ex+0x412/0x560 [ 1271.640665][ T8395] should_failslab+0xa8/0x100 [ 1271.640682][ T8395] ? security_inode_alloc+0x39/0x310 [ 1271.640705][ T8395] kmem_cache_alloc_noprof+0x87/0x650 [ 1271.640737][ T8395] security_inode_alloc+0x39/0x310 [ 1271.640760][ T8395] inode_init_always_gfp+0x9c8/0xda0 [ 1271.640786][ T8395] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1271.640804][ T8395] alloc_inode+0x82/0x1b0 [ 1271.640824][ T8395] __sock_create+0x12d/0x9d0 [ 1271.640852][ T8395] udp_sock_create4+0xca/0x480 [ 1271.640882][ T8395] ? __pfx_udp_sock_create4+0x10/0x10 [ 1271.640911][ T8395] ? __pfx___nla_validate_parse+0x10/0x10 [ 1271.640938][ T8395] fou_nl_add_doit+0x199/0xa60 [ 1271.640963][ T8395] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1271.640983][ T8395] ? rcu_is_watching+0x15/0xb0 [ 1271.641024][ T8395] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1271.641045][ T8395] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1271.641074][ T8395] genl_family_rcv_msg_doit+0x22a/0x330 [ 1271.641101][ T8395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1271.641134][ T8395] ? bpf_lsm_capable+0x9/0x20 [ 1271.641154][ T8395] ? security_capable+0x7e/0x2c0 [ 1271.641182][ T8395] genl_rcv_msg+0x61c/0x7a0 [ 1271.641212][ T8395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1271.641232][ T8395] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1271.641252][ T8395] ? __pfx_ref_tracker_free+0x10/0x10 [ 1271.641288][ T8395] netlink_rcv_skb+0x232/0x4b0 [ 1271.641313][ T8395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1271.641335][ T8395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1271.641375][ T8395] ? down_read+0x270/0x2e0 [ 1271.641397][ T8395] ? genl_rcv+0xd/0x40 [ 1271.641426][ T8395] genl_rcv+0x28/0x40 [ 1271.641444][ T8395] netlink_unicast+0x75c/0x8e0 [ 1271.641482][ T8395] netlink_sendmsg+0x813/0xb40 [ 1271.641516][ T8395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1271.641543][ T8395] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1271.641568][ T8395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1271.641595][ T8395] ____sys_sendmsg+0x972/0x9f0 [ 1271.641620][ T8395] ? __might_fault+0xaf/0x130 [ 1271.641649][ T8395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1271.641687][ T8395] ? import_iovec+0x73/0xa0 [ 1271.641709][ T8395] ___sys_sendmsg+0x2a5/0x360 [ 1271.641732][ T8395] ? __lock_acquire+0x6b5/0x2cf0 [ 1271.641757][ T8395] ? __pfx____sys_sendmsg+0x10/0x10 [ 1271.641817][ T8395] ? __fget_files+0x2a/0x420 [ 1271.641837][ T8395] ? __fget_files+0x3a0/0x420 [ 1271.641869][ T8395] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1271.641898][ T8395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1271.641934][ T8395] ? __pfx_ksys_write+0x10/0x10 [ 1271.641968][ T8395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.641988][ T8395] do_syscall_64+0x15f/0xf80 [ 1271.642009][ T8395] ? trace_irq_disable+0x3b/0x140 [ 1271.642029][ T8395] ? clear_bhb_loop+0x40/0x90 [ 1271.642051][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.642070][ T8395] RIP: 0033:0x7f9171f9c819 [ 1271.642088][ T8395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.642104][ T8395] RSP: 002b:00007f9172e4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1271.642124][ T8395] RAX: ffffffffffffffda RBX: 00007f9172215fa0 RCX: 00007f9171f9c819 [ 1271.642138][ T8395] RDX: 0000000008000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1271.642150][ T8395] RBP: 00007f9172e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.642162][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.642173][ T8395] R13: 00007f9172216038 R14: 00007f9172215fa0 R15: 00007ffcc36ab4c8 [ 1271.642204][ T8395] [ 1271.642263][ T8395] socket: no more sockets [ 1272.149741][ T8403] xt_HMARK: spi-set and port-set can't be combined [ 1272.167165][ T8284] team0: Port device team_slave_0 added [ 1272.200919][ T8284] team0: Port device team_slave_1 added [ 1272.330062][ T8415] netlink: 'syz.2.9236': attribute type 1 has an invalid length. [ 1272.451763][ T8415] bond3: entered promiscuous mode [ 1272.458050][ T8415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1272.480980][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.524159][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.561994][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9238'. [ 1272.566007][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.585975][ T50] Bluetooth: hci6: command tx timeout [ 1272.637690][ T8415] bond3: (slave veth5): making interface the new active one [ 1272.658168][ T8415] veth5: entered promiscuous mode [ 1272.667199][ T8415] bond3: (slave veth5): Enslaving as an active interface with an up link [ 1272.678234][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.686560][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.720158][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.765916][ T8433] FAULT_INJECTION: forcing a failure. [ 1272.765916][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.795959][ T8433] CPU: 0 UID: 0 PID: 8433 Comm: syz.1.9242 Not tainted syzkaller #0 PREEMPT(full) [ 1272.795984][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1272.795995][ T8433] Call Trace: [ 1272.796003][ T8433] [ 1272.796011][ T8433] dump_stack_lvl+0xe8/0x150 [ 1272.796041][ T8433] should_fail_ex+0x412/0x560 [ 1272.796070][ T8433] should_failslab+0xa8/0x100 [ 1272.796089][ T8433] ? sk_prot_alloc+0x57/0x210 [ 1272.796113][ T8433] kmem_cache_alloc_noprof+0x87/0x650 [ 1272.796144][ T8433] sk_prot_alloc+0x57/0x210 [ 1272.796165][ T8433] ? sk_alloc+0x27/0x390 [ 1272.796189][ T8433] sk_alloc+0x3a/0x390 [ 1272.796217][ T8433] inet_create+0x7a0/0x1000 [ 1272.796238][ T8433] ? inet_create+0x9c/0x1000 [ 1272.796261][ T8433] __sock_create+0x4b2/0x9d0 [ 1272.796292][ T8433] udp_sock_create4+0xca/0x480 [ 1272.796322][ T8433] ? __pfx_udp_sock_create4+0x10/0x10 [ 1272.796352][ T8433] ? __pfx___nla_validate_parse+0x10/0x10 [ 1272.796378][ T8433] fou_nl_add_doit+0x199/0xa60 [ 1272.796412][ T8433] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1272.796432][ T8433] ? rcu_is_watching+0x15/0xb0 [ 1272.796474][ T8433] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1272.796495][ T8433] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1272.796523][ T8433] genl_family_rcv_msg_doit+0x22a/0x330 [ 1272.796550][ T8433] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1272.796583][ T8433] ? bpf_lsm_capable+0x9/0x20 [ 1272.796603][ T8433] ? security_capable+0x7e/0x2c0 [ 1272.796632][ T8433] genl_rcv_msg+0x61c/0x7a0 [ 1272.796655][ T8433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1272.796673][ T8433] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 1272.796689][ T8433] ? __pfx_ref_tracker_free+0x10/0x10 [ 1272.796723][ T8433] netlink_rcv_skb+0x232/0x4b0 [ 1272.796748][ T8433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1272.796770][ T8433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1272.796809][ T8433] ? down_read+0x270/0x2e0 [ 1272.796831][ T8433] ? genl_rcv+0xd/0x40 [ 1272.796852][ T8433] genl_rcv+0x28/0x40 [ 1272.796869][ T8433] netlink_unicast+0x75c/0x8e0 [ 1272.796903][ T8433] netlink_sendmsg+0x813/0xb40 [ 1272.796936][ T8433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.796964][ T8433] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1272.796990][ T8433] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1272.797020][ T8433] ____sys_sendmsg+0x972/0x9f0 [ 1272.797044][ T8433] ? __might_fault+0xaf/0x130 [ 1272.797074][ T8433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1272.797109][ T8433] ? import_iovec+0x73/0xa0 [ 1272.797134][ T8433] ___sys_sendmsg+0x2a5/0x360 [ 1272.797157][ T8433] ? __lock_acquire+0x6b5/0x2cf0 [ 1272.797184][ T8433] ? __pfx____sys_sendmsg+0x10/0x10 [ 1272.797245][ T8433] ? __fget_files+0x2a/0x420 [ 1272.797265][ T8433] ? __fget_files+0x3a0/0x420 [ 1272.797297][ T8433] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1272.797325][ T8433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1272.797360][ T8433] ? __pfx_ksys_write+0x10/0x10 [ 1272.797400][ T8433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.797420][ T8433] do_syscall_64+0x15f/0xf80 [ 1272.797440][ T8433] ? trace_irq_disable+0x3b/0x140 [ 1272.797460][ T8433] ? clear_bhb_loop+0x40/0x90 [ 1272.797482][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.797500][ T8433] RIP: 0033:0x7f600fd9c819 [ 1272.797518][ T8433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.797534][ T8433] RSP: 002b:00007f6010b83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.797554][ T8433] RAX: ffffffffffffffda RBX: 00007f6010015fa0 RCX: 00007f600fd9c819 [ 1272.797567][ T8433] RDX: 0000000008000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1272.797579][ T8433] RBP: 00007f6010b83090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.797591][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.797601][ T8433] R13: 00007f6010016038 R14: 00007f6010015fa0 R15: 00007ffc57bab488 [ 1272.797629][ T8433] [ 1273.362374][ T8431] lo speed is unknown, defaulting to 1000 [ 1273.370554][ T8431] lo speed is unknown, defaulting to 1000 [ 1273.409525][ T8284] hsr_slave_0: entered promiscuous mode [ 1273.429713][ T8284] hsr_slave_1: entered promiscuous mode [ 1273.452241][ T8284] debugfs: 'hsr0' already exists in 'hsr' [ 1273.471345][ T8284] Cannot create hsr debugfs directory [ 1273.482881][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9241'. [ 1273.513218][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9247'. [ 1273.638101][ T8429] aoe: error packet from 32773.0@lo; ecode=101 'no such error' [ 1273.646210][ T8429] aoe: error packet from 32773.0@lo; ecode=101 'no such error' [ 1273.654246][ T8429] aoe: error packet from 32773.0@lo; ecode=101 'no such error' [ 1273.662309][ T8429] aoe: error packet from 32773.0@lo; ecode=101 'no such error' [ 1273.670296][ T8429] aoe: error packet from 32773.0@lo; ecode=101 'no such error' [ 1273.678181][ T8429] aoe: error packet from 32773.0@lo; ecode=101 'no such error' [ 1273.686211][ T8429] aoe: error packet from 32773.0@lo; ecode=101 'no such error' [ 1273.694495][ T8429] aoe: error packet from 32773.0@lo; ecode=101 'no such error' [ 1273.860725][ T8457] veth1_to_hsr: entered promiscuous mode [ 1273.867401][ T8457] macvtap1: entered promiscuous mode [ 1273.873906][ T8457] macvtap1: entered allmulticast mode [ 1273.879683][ T8457] veth1_to_hsr: entered allmulticast mode [ 1274.423414][ T30] audit: type=1800 audit(1776866784.267:21): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9253" name="memory.events" dev="tmpfs" ino=519 res=0 errno=0 [ 1274.621078][ T8469] syzkaller0: entered promiscuous mode [ 1274.633677][ T8469] syzkaller0: entered allmulticast mode [ 1274.663407][ T50] Bluetooth: hci6: command tx timeout [ 1276.744056][ T50] Bluetooth: hci6: command tx timeout [ 1279.824750][ T8514] __nla_validate_parse: 2 callbacks suppressed [ 1279.824769][ T8514] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9261'. [ 1279.917314][ T8519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9266'. [ 1280.053918][ T8284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1280.066278][ T8284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1280.076097][ T8284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1280.087349][ T8284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1280.097975][ T8284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1280.113642][ T8284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1280.122751][ T8284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1280.134468][ T8284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1280.177975][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9268'. [ 1280.245166][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.275056][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.479517][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.487892][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.699223][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1280.930893][ T8533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.981084][ T8533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.126291][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9271'. [ 1281.230499][ T8550] netlink: 'syz.4.9271': attribute type 10 has an invalid length. [ 1281.289439][ T8550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9271'. [ 1281.649277][ T8550] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1281.683268][ T8550] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.717412][ T8550] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1281.731756][T17310] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.752160][T17310] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.778249][T17310] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.779174][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9274'. [ 1281.794288][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.806072][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.837946][T17310] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.873857][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.881892][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.947265][ T8567] netlink: 'syz.1.9274': attribute type 14 has an invalid length. [ 1281.973670][ T8567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9274'. [ 1282.071527][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1282.080694][ T8573] IPVS: set_ctl: invalid protocol: 137 172.30.1.3:20004 [ 1282.564771][ T8595] net_ratelimit: 3257 callbacks suppressed [ 1282.564790][ T8595] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1282.577736][ T8595] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1282.612389][ T8595] syzkaller1: entered promiscuous mode [ 1282.620428][ T8595] syzkaller1: entered allmulticast mode [ 1282.681379][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9287'. [ 1282.690926][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.841180][ T8284] veth0_vlan: entered promiscuous mode [ 1282.859890][ T8284] veth1_vlan: entered promiscuous mode [ 1282.936592][ T8284] veth0_macvtap: entered promiscuous mode [ 1282.952360][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9291'. [ 1282.966699][ T8284] veth1_macvtap: entered promiscuous mode [ 1283.001211][ T8617] netlink: 'syz.5.9292': attribute type 5 has an invalid length. [ 1283.001623][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.039338][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.069580][T17310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.087950][T17310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.101917][T17310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.118735][T17310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.354695][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.366069][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.556028][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.588545][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.767806][ T8646] lo speed is unknown, defaulting to 1000 [ 1283.797035][ T8646] lo speed is unknown, defaulting to 1000 [ 1284.117011][ T8667] lo speed is unknown, defaulting to 1000 [ 1284.272637][ T8667] lo speed is unknown, defaulting to 1000 [ 1285.103365][ T8711] netlink: 'syz.3.9316': attribute type 12 has an invalid length. [ 1285.418933][ T8730] lo speed is unknown, defaulting to 1000 [ 1285.457461][ T8730] lo speed is unknown, defaulting to 1000 [ 1285.570163][ T8736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1285.571376][ T8734] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1287.552027][ T8825] netlink: 'syz.3.9346': attribute type 32 has an invalid length. [ 1287.561854][ T8822] __nla_validate_parse: 1 callbacks suppressed [ 1287.561871][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9348'. [ 1287.579728][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1287.589424][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9348'. [ 1287.626508][ T8825] bond1: Setting coupled_control to off (0) [ 1287.686927][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9350'. [ 1287.744220][ T8833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9350'. [ 1287.756876][ T8831] netlink: 'syz.5.9350': attribute type 2 has an invalid length. [ 1287.766327][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9350'. [ 1287.767926][ T8831] netlink: 'syz.5.9350': attribute type 2 has an invalid length. [ 1288.048349][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9357'. [ 1288.067841][ T8855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9357'. [ 1288.360007][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9365'. [ 1288.408929][ T8873] IPv6: Can't replace route, no match found [ 1288.429498][ T8873] IPv6: Can't replace route, no match found [ 1288.572123][ T8885] vlan2: entered allmulticast mode [ 1288.581853][ T8885] bond0: entered allmulticast mode [ 1288.600049][ T8885] bond_slave_0: entered allmulticast mode [ 1288.610164][ T8885] bond_slave_1: entered allmulticast mode [ 1288.622577][ T8888] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9370'. [ 1288.712205][ T8888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.732583][ T8888] bond_slave_0: left allmulticast mode [ 1288.756431][ T8888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.776958][ T8888] bond_slave_1: left allmulticast mode [ 1288.800236][ T8888] bond0 (unregistering): Released all slaves [ 1288.945840][ T8899] openvswitch: netlink: Message has 8 unknown bytes. [ 1288.954888][ T8893] lo speed is unknown, defaulting to 1000 [ 1288.989999][ T8893] lo speed is unknown, defaulting to 1000 [ 1289.156289][ T8903] Cannot find del_set index 1 as target [ 1289.469582][ T8920] netlink: 'syz.3.9377': attribute type 21 has an invalid length. [ 1289.568260][ T8926] IPv6: Can't replace route, no match found [ 1289.575895][ T8926] IPv6: Can't replace route, no match found [ 1290.039111][ T8930] netlink: 'syz.2.9383': attribute type 2 has an invalid length. [ 1290.556727][ T8948] macvtap0: entered promiscuous mode [ 1290.762329][ T8959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1290.991120][ T8963] hsr0: entered promiscuous mode [ 1291.230080][ T8975] openvswitch: netlink: Flow key attr not present in new flow. [ 1291.697898][ T9001] netlink: 'syz.3.9408': attribute type 9 has an invalid length. [ 1292.128730][ T9026] tipc: Started in network mode [ 1292.144629][ T9026] tipc: Node identity c64f12da822c, cluster identity 4711 [ 1292.169766][ T9026] tipc: Enabled bearer , priority 0 [ 1292.190118][ T9030] syzkaller0: entered promiscuous mode [ 1292.209946][ T9030] syzkaller0: entered allmulticast mode [ 1292.749712][ T9039] tipc: Resetting bearer [ 1292.901743][ T9025] tipc: Resetting bearer [ 1293.002786][ T9025] tipc: Disabling bearer [ 1293.214474][ T9067] sock: sock_set_timeout: `syz.5.9426' (pid 9067) tries to set negative timeout [ 1293.233935][ T9064] sctp: [Deprecated]: syz.3.9425 (pid 9064) Use of int in maxseg socket option. [ 1293.233935][ T9064] Use struct sctp_assoc_value instead [ 1293.412569][T31842] IPVS: starting estimator thread 0... [ 1293.420814][ T9076] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1293.436244][ T9079] __nla_validate_parse: 10 callbacks suppressed [ 1293.436273][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9424'. [ 1293.505794][ T9069] lo speed is unknown, defaulting to 1000 [ 1293.544232][ T9069] lo speed is unknown, defaulting to 1000 [ 1293.628909][ T9078] IPVS: using max 38 ests per chain, 91200 per kthread [ 1294.070753][ T9109] netlink: 'syz.5.9436': attribute type 9 has an invalid length. [ 1294.827844][ T9136] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1294.861755][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9446'. [ 1295.017437][ T9147] openvswitch: netlink: Unknown key attributes 2 [ 1295.032165][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9450'. [ 1295.651502][ T9176] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1295.762336][ T9173] bridge0: entered promiscuous mode [ 1295.815398][ T9173] macsec1: entered promiscuous mode [ 1296.445615][ T9228] syzkaller0: entered promiscuous mode [ 1296.474419][ T9228] syzkaller0: entered allmulticast mode [ 1297.581594][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1297.614078][ T9284] netlink: 'syz.3.9489': attribute type 1 has an invalid length. [ 1297.628434][ T9282] lo speed is unknown, defaulting to 1000 [ 1297.682136][ T9284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.690937][ T9282] lo speed is unknown, defaulting to 1000 [ 1297.728238][ T9291] bond0: (slave dummy0): making interface the new active one [ 1297.762682][ T9291] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1297.919800][ T9284] bond0 (unregistering): (slave dummy0): Releasing active interface [ 1297.938277][ T9284] bond0 (unregistering): Released all slaves [ 1297.964164][ T9305] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9493'. [ 1298.194710][ T9308] syzkaller0: entered promiscuous mode [ 1298.201067][ T9308] syzkaller0: entered allmulticast mode [ 1298.203777][ T9313] x_tables: duplicate underflow at hook 1 [ 1298.250361][ T9310] netlink: 'syz.1.9496': attribute type 10 has an invalid length. [ 1298.336333][ T9310] macsec1: entered promiscuous mode [ 1298.342228][ T9310] vlan2: entered promiscuous mode [ 1298.375591][ T9310] team0: entered promiscuous mode [ 1298.404883][ T9310] team_slave_0: entered promiscuous mode [ 1298.415355][ T9310] team_slave_1: entered promiscuous mode [ 1298.439881][ T9310] vlan2: left promiscuous mode [ 1298.448590][ T9310] team0: left promiscuous mode [ 1298.505409][ T9310] team_slave_0: left promiscuous mode [ 1298.511159][ T9310] team_slave_1: left promiscuous mode [ 1298.552227][ T9311] macsec1: entered promiscuous mode [ 1298.557803][ T9311] vlan2: entered promiscuous mode [ 1298.568072][ T9311] team0: entered promiscuous mode [ 1298.574110][ T9311] team_slave_0: entered promiscuous mode [ 1298.580386][ T9311] team_slave_1: entered promiscuous mode [ 1298.592575][ T9311] vlan2: left promiscuous mode [ 1298.598410][ T9311] team0: left promiscuous mode [ 1298.604235][ T9311] team_slave_0: left promiscuous mode [ 1298.610223][ T9311] team_slave_1: left promiscuous mode [ 1299.069314][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9505'. [ 1299.260576][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9508'. [ 1299.364431][ T9351] openvswitch: netlink: IP tunnel dst address not specified [ 1299.377855][ T9346] geneve2: entered promiscuous mode [ 1299.451318][ T9355] batadv0: entered promiscuous mode [ 1299.485537][ T9355] macsec2: entered promiscuous mode [ 1299.502289][ T9355] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1299.757018][ T9368] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9513'. [ 1299.866286][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9515'. [ 1299.879935][ T9376] Bluetooth: MGMT ver 1.23 [ 1299.936566][ T9380] netlink: 'syz.4.9518': attribute type 1 has an invalid length. [ 1299.946574][ T9381] netlink: 'syz.4.9518': attribute type 1 has an invalid length. [ 1299.960024][ T9380] netlink: 'syz.4.9518': attribute type 2 has an invalid length. [ 1299.964552][ T9381] netlink: 'syz.4.9518': attribute type 2 has an invalid length. [ 1299.969204][ T9380] netlink: 'syz.4.9518': attribute type 3 has an invalid length. [ 1299.978028][ T9381] netlink: 'syz.4.9518': attribute type 3 has an invalid length. [ 1300.429777][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1302.450240][ T9357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1302.759733][ T9415] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9527'. [ 1302.809704][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9528'. [ 1302.843980][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9528'. [ 1302.865674][ T9424] netlink: 'syz.3.9528': attribute type 1 has an invalid length. [ 1302.910971][ T9424] bond0: entered promiscuous mode [ 1302.921636][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.957589][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.966736][ T9417] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1302.981462][ T9417] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1303.015015][ T9417] bond0: (slave wireguard0): making interface the new active one [ 1303.023669][ T9417] wireguard0: entered promiscuous mode [ 1303.034953][ T9417] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 1303.165110][ T9440] netlink: 'syz.4.9537': attribute type 1 has an invalid length. [ 1303.282547][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9534'. [ 1303.341102][ T9440] bond2: entered promiscuous mode [ 1303.373355][ T9440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1303.381447][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9537'. [ 1303.419744][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9534'. [ 1303.709008][ T9468] syzkaller0: entered promiscuous mode [ 1303.718331][ T9468] syzkaller0: entered allmulticast mode [ 1303.890536][ T9475] netlink: 'syz.2.9544': attribute type 1 has an invalid length. [ 1303.964101][ T9476] IPv6: Can't replace route, no match found [ 1303.974215][ T9475] bond4: entered promiscuous mode [ 1303.980203][ T9475] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1303.999866][ T9476] IPv6: Can't replace route, no match found [ 1304.551520][ T9498] netlink: 'syz.2.9551': attribute type 2 has an invalid length. [ 1304.606233][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9554'. [ 1304.762637][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9556'. [ 1304.914245][ T9522] bond5: entered promiscuous mode [ 1304.926756][ T9527] IPv6: Can't replace route, no match found [ 1304.937343][ T9522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1304.976486][ T9527] IPv6: Can't replace route, no match found [ 1305.183677][ T9528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1305.278902][ T9533] bond2: (slave geneve3): making interface the new active one [ 1305.296348][ T9533] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1305.407961][ T9521] lo speed is unknown, defaulting to 1000 [ 1305.435613][ T9521] lo speed is unknown, defaulting to 1000 [ 1305.800310][ T9562] lo speed is unknown, defaulting to 1000 [ 1305.833932][ T9562] lo speed is unknown, defaulting to 1000 [ 1306.045207][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9571'. [ 1306.104556][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1306.113061][ C1] lec:lec_tx_timeout: lec0 [ 1306.305678][ T9578] syz_tun: entered allmulticast mode [ 1306.664706][ T9590] validate_nla: 4 callbacks suppressed [ 1306.664725][ T9590] netlink: 'syz.1.9575': attribute type 1 has an invalid length. [ 1306.768796][ T9595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1306.792482][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1306.807062][ T9590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1306.838932][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1306.892911][ T9601] netlink: 'syz.5.9578': attribute type 1 has an invalid length. [ 1307.068516][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9576'. [ 1307.219240][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.270784][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9582'. [ 1307.274228][ T9615] bridge_slave_0 (unregistering): left allmulticast mode [ 1307.315004][ T9615] bridge_slave_0 (unregistering): left promiscuous mode [ 1307.323797][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.498443][T13029] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1307.655818][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9587'. [ 1307.725632][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9589'. [ 1307.742454][ T9649] netlink: 'syz.4.9589': attribute type 3 has an invalid length. [ 1307.776103][ T9651] netlink: 'syz.2.9590': attribute type 13 has an invalid length. [ 1308.127355][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.168343][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9594'. [ 1308.388949][ T9651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.750808][ T9651] veth1_macvtap: left allmulticast mode [ 1308.971888][ T9651] macsec0: left allmulticast mode [ 1309.026134][ T9651] veth1_to_hsr: left allmulticast mode [ 1309.074532][T17310] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.086223][T17310] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.106723][T17310] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.133404][T17310] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.202481][ T9685] vlan2 (unregistering): left promiscuous mode [ 1309.214136][ T9685] team0 (unregistering): left promiscuous mode [ 1309.221816][ T9685] team_slave_0: left promiscuous mode [ 1309.231396][ T9685] team_slave_1: left promiscuous mode [ 1309.240554][ T9685] bridge1: port 3(vlan2) entered disabled state [ 1309.254959][ T9685] team_slave_0: left allmulticast mode [ 1309.262373][ T9685] team0 (unregistering): Port device team_slave_0 removed [ 1309.272070][ T9685] team_slave_1: left allmulticast mode [ 1309.279340][ T9685] team0 (unregistering): Port device team_slave_1 removed [ 1310.366308][ T9626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1310.796138][ T9739] netlink: 'syz.3.9617': attribute type 4 has an invalid length. [ 1310.805765][ T9737] __nla_validate_parse: 1 callbacks suppressed [ 1310.805784][ T9737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9616'. [ 1310.825586][ T9739] netlink: 'syz.3.9617': attribute type 4 has an invalid length. [ 1310.857242][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9616'. [ 1311.041542][ T9751] bond_slave_1: left allmulticast mode [ 1311.064596][ T9751] macsec1: left allmulticast mode [ 1311.106746][ T9751] hsr1: left promiscuous mode [ 1311.122629][ T9751] bond3: left promiscuous mode [ 1311.132268][ T9751] veth5: left promiscuous mode [ 1311.145808][ T9751] macvtap1: left promiscuous mode [ 1311.159921][ T9751] macvtap1: left allmulticast mode [ 1311.166845][ T9751] bond4: left promiscuous mode [ 1311.172453][ T9751] bond5: left promiscuous mode [ 1311.588550][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9630'. [ 1311.626324][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9630'. [ 1311.629153][ T9795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9630'. [ 1311.751380][ T9799] netlink: 'syz.2.9632': attribute type 13 has an invalid length. [ 1311.948990][ T9811] netlink: 'syz.4.9634': attribute type 10 has an invalid length. [ 1312.163781][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9639'. [ 1312.207944][ T9811] veth0_vlan: left promiscuous mode [ 1312.229756][ T9811] veth0_vlan: entered promiscuous mode [ 1312.254947][ T9811] team0: Device veth0_vlan failed to register rx_handler [ 1312.361061][ T9825] macvlan2: entered allmulticast mode [ 1312.368315][ T9825] hsr0: entered allmulticast mode [ 1312.383690][ T9825] hsr_slave_0: entered allmulticast mode [ 1312.400137][ T9825] hsr_slave_1: entered allmulticast mode [ 1312.610970][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9642'. [ 1312.658274][ T9837] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1312.666935][ T9837] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1312.732395][ T9838] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1312.751887][ T9838] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1313.167923][ T9859] netlink: 'syz.4.9648': attribute type 1 has an invalid length. [ 1313.204317][ T9859] bond3: entered promiscuous mode [ 1313.211500][ T9859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1313.233849][ T9859] IPv6: Can't replace route, no match found [ 1313.262714][ T9859] IPv6: Can't replace route, no match found [ 1313.409033][ T9868] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1313.581882][ T9877] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 1313.717478][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9654'. [ 1313.743953][ T9889] syzkaller1: entered promiscuous mode [ 1313.749687][ T9889] syzkaller1: entered allmulticast mode [ 1314.341830][ T9911] netlink: 'syz.1.9662': attribute type 1 has an invalid length. [ 1314.417249][ T9911] bond2: entered promiscuous mode [ 1314.424680][ T9911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1314.450210][ T9911] IPv6: Can't replace route, no match found [ 1314.457654][ T9911] IPv6: Can't replace route, no match found [ 1315.038410][ T9949] netlink: 'syz.1.9673': attribute type 21 has an invalid length. [ 1315.068711][ T9949] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9673'. [ 1315.096590][ T9949] netlink: 'syz.1.9673': attribute type 1 has an invalid length. [ 1315.314307][ T9958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.580749][ T9970] netlink: 'syz.3.9681': attribute type 4 has an invalid length. [ 1315.777937][ T9969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.815462][ T9969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1315.975773][ T9982] syzkaller0: entered promiscuous mode [ 1315.982097][ T9982] syzkaller0: entered allmulticast mode [ 1316.237012][ T9993] tipc: Started in network mode [ 1316.242233][ T9993] tipc: Node identity , cluster identity 4711 [ 1316.385169][T10004] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1316.992608][T10017] netlink: 'syz.2.9695': attribute type 3 has an invalid length. [ 1317.905197][T10070] netlink: 'syz.2.9713': attribute type 22 has an invalid length. [ 1317.925073][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1317.939028][T10071] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9712'. [ 1317.984323][T10070] netlink: 'syz.2.9713': attribute type 22 has an invalid length. [ 1317.996084][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9713'. [ 1318.015089][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9712'. [ 1318.093793][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.138377][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.172143][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.219000][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.263253][T10085] Cannot find del_set index 1 as target [ 1318.999928][T10133] netlink: 'syz.4.9723': attribute type 83 has an invalid length. [ 1319.521300][T10156] lo speed is unknown, defaulting to 1000 [ 1319.600926][T10156] lo speed is unknown, defaulting to 1000 [ 1319.867999][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9738'. [ 1320.020725][T10184] veth3: entered promiscuous mode [ 1320.041900][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9741'. [ 1320.074132][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9741'. [ 1320.095033][T10186] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9741'. [ 1320.149308][T10186] netlink: 'syz.4.9741': attribute type 12 has an invalid length. [ 1320.300912][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9743'. [ 1320.532841][T10189] lo speed is unknown, defaulting to 1000 [ 1320.618085][T10189] lo speed is unknown, defaulting to 1000 [ 1320.645739][T10203] netlink: 120 bytes leftover after parsing attributes in process `syz.5.9746'. [ 1320.956047][T10214] gretap0: entered promiscuous mode [ 1320.996461][T10214] gretap0: left promiscuous mode [ 1321.915779][T10289] netlink: 'syz.3.9761': attribute type 1 has an invalid length. [ 1322.218675][T10290] bond3 (unregistering): Released all slaves [ 1322.449555][T10315] netlink: 'syz.5.9771': attribute type 4 has an invalid length. [ 1322.720711][T10332] netlink: 'syz.2.9777': attribute type 1 has an invalid length. [ 1322.739969][T10332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.846605][T10339] x_tables: duplicate underflow at hook 1 [ 1322.846605][T10337] x_tables: duplicate underflow at hook 1 [ 1322.998441][T10349] __nla_validate_parse: 5 callbacks suppressed [ 1322.998462][T10349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9784'. [ 1323.086885][T10353] netlink: 'syz.3.9785': attribute type 4 has an invalid length. [ 1323.095134][T10353] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9785'. [ 1323.301289][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9786'. [ 1323.335539][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9786'. [ 1323.404806][T10365] macsec1: entered promiscuous mode [ 1323.411107][T10365] vlan3: entered promiscuous mode [ 1323.418357][T10365] ip6gretap0: entered promiscuous mode [ 1323.428595][T10365] vlan3: left promiscuous mode [ 1323.435381][T10365] ip6gretap0: left promiscuous mode [ 1323.989272][T10395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9794'. [ 1324.074293][T10401] FAULT_INJECTION: forcing a failure. [ 1324.074293][T10401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.116755][T10401] CPU: 1 UID: 0 PID: 10401 Comm: syz.2.9795 Not tainted syzkaller #0 PREEMPT(full) [ 1324.116781][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1324.116792][T10401] Call Trace: [ 1324.116800][T10401] [ 1324.116807][T10401] dump_stack_lvl+0xe8/0x150 [ 1324.116837][T10401] should_fail_ex+0x412/0x560 [ 1324.116864][T10401] _copy_from_user+0x2d/0xb0 [ 1324.116882][T10401] ___sys_sendmsg+0x1c6/0x360 [ 1324.116906][T10401] ? __lock_acquire+0x6b5/0x2cf0 [ 1324.116932][T10401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1324.116986][T10401] ? __fget_files+0x2a/0x420 [ 1324.117008][T10401] ? __fget_files+0x3a0/0x420 [ 1324.117037][T10401] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1324.117072][T10401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1324.117105][T10401] ? __pfx_ksys_write+0x10/0x10 [ 1324.117137][T10401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.117156][T10401] do_syscall_64+0x15f/0xf80 [ 1324.117177][T10401] ? trace_irq_disable+0x3b/0x140 [ 1324.117195][T10401] ? clear_bhb_loop+0x40/0x90 [ 1324.117216][T10401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.117234][T10401] RIP: 0033:0x7fa8cb39c819 [ 1324.117251][T10401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.117273][T10401] RSP: 002b:00007fa8cc250028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1324.117293][T10401] RAX: ffffffffffffffda RBX: 00007fa8cb615fa0 RCX: 00007fa8cb39c819 [ 1324.117305][T10401] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1324.117316][T10401] RBP: 00007fa8cc250090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.117326][T10401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.117337][T10401] R13: 00007fa8cb616038 R14: 00007fa8cb615fa0 R15: 00007fff31ef47d8 [ 1324.117365][T10401] [ 1324.528718][T10407] lo speed is unknown, defaulting to 1000 [ 1324.537692][T10407] lo speed is unknown, defaulting to 1000 [ 1324.838648][T10420] nbd: must specify a size in bytes for the device [ 1325.064880][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9803'. [ 1325.082406][T10432] netlink: 'syz.3.9804': attribute type 12 has an invalid length. [ 1325.168458][T10427] lo speed is unknown, defaulting to 1000 [ 1325.168717][T10437] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1325.207605][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9803'. [ 1325.226278][T10427] lo speed is unknown, defaulting to 1000 [ 1325.318451][T10445] FAULT_INJECTION: forcing a failure. [ 1325.318451][T10445] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.330373][T10444] xt_bpf: check failed: parse error [ 1325.334478][T10445] CPU: 1 UID: 0 PID: 10445 Comm: syz.3.9807 Not tainted syzkaller #0 PREEMPT(full) [ 1325.334504][T10445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1325.334514][T10445] Call Trace: [ 1325.334522][T10445] [ 1325.334529][T10445] dump_stack_lvl+0xe8/0x150 [ 1325.334559][T10445] should_fail_ex+0x412/0x560 [ 1325.334599][T10445] should_failslab+0xa8/0x100 [ 1325.334619][T10445] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1325.334642][T10445] ? __alloc_skb+0x186/0x7d0 [ 1325.334664][T10445] ? __alloc_skb+0x1d0/0x7d0 [ 1325.334684][T10445] ? __local_bh_enable_ip+0xd0/0x130 [ 1325.334710][T10445] __alloc_skb+0x1d0/0x7d0 [ 1325.334736][T10445] netlink_sendmsg+0x5d4/0xb40 [ 1325.334767][T10445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.334793][T10445] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1325.334818][T10445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1325.334845][T10445] ____sys_sendmsg+0x972/0x9f0 [ 1325.334880][T10445] ? __might_fault+0xaf/0x130 [ 1325.334907][T10445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.334943][T10445] ? import_iovec+0x73/0xa0 [ 1325.334964][T10445] ___sys_sendmsg+0x2a5/0x360 [ 1325.334988][T10445] ? __lock_acquire+0x6b5/0x2cf0 [ 1325.335021][T10445] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.335074][T10445] ? __fget_files+0x2a/0x420 [ 1325.335094][T10445] ? __fget_files+0x3a0/0x420 [ 1325.335123][T10445] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1325.335149][T10445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1325.335181][T10445] ? __pfx_ksys_write+0x10/0x10 [ 1325.335212][T10445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.335230][T10445] do_syscall_64+0x15f/0xf80 [ 1325.335250][T10445] ? trace_irq_disable+0x3b/0x140 [ 1325.335268][T10445] ? clear_bhb_loop+0x40/0x90 [ 1325.335290][T10445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.335307][T10445] RIP: 0033:0x7f5a01d9c819 [ 1325.335324][T10445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.335338][T10445] RSP: 002b:00007f5a02cac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.335358][T10445] RAX: ffffffffffffffda RBX: 00007f5a02015fa0 RCX: 00007f5a01d9c819 [ 1325.335371][T10445] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1325.335382][T10445] RBP: 00007f5a02cac090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.335392][T10445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.335402][T10445] R13: 00007f5a02016038 R14: 00007f5a02015fa0 R15: 00007fff51eb3418 [ 1325.335430][T10445] [ 1325.457709][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9809'. [ 1325.640575][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9809'. [ 1326.074474][T10460] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1326.088449][T10460] bond4 (unregistering): Released all slaves [ 1326.799575][T16261] lec:lec_start_xmit: lec0:No lecd attached [ 1326.850210][T10497] netlink: 'syz.3.9822': attribute type 1 has an invalid length. [ 1327.006310][T10507] netlink: 'syz.1.9826': attribute type 18 has an invalid length. [ 1327.057135][T10497] bond4: entered promiscuous mode [ 1327.084069][T10497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1327.214660][T10508] bond4: (slave bridge1): making interface the new active one [ 1327.239030][T10508] bridge1: entered promiscuous mode [ 1327.259275][T10508] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1327.776111][T10545] FAULT_INJECTION: forcing a failure. [ 1327.776111][T10545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.800682][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.4.9836 Not tainted syzkaller #0 PREEMPT(full) [ 1327.800708][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1327.800720][T10545] Call Trace: [ 1327.800727][T10545] [ 1327.800735][T10545] dump_stack_lvl+0xe8/0x150 [ 1327.800767][T10545] should_fail_ex+0x412/0x560 [ 1327.800802][T10545] _copy_from_iter+0x1d3/0x1670 [ 1327.800832][T10545] ? rcu_is_watching+0x15/0xb0 [ 1327.800862][T10545] ? __pfx__copy_from_iter+0x10/0x10 [ 1327.800894][T10545] ? netlink_sendmsg+0x650/0xb40 [ 1327.800916][T10545] ? skb_put+0x11b/0x210 [ 1327.800941][T10545] netlink_sendmsg+0x6c0/0xb40 [ 1327.800968][T10545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1327.800992][T10545] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1327.801015][T10545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1327.801041][T10545] ____sys_sendmsg+0x972/0x9f0 [ 1327.801069][T10545] ? __might_fault+0xaf/0x130 [ 1327.801097][T10545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1327.801130][T10545] ? import_iovec+0x73/0xa0 [ 1327.801151][T10545] ___sys_sendmsg+0x2a5/0x360 [ 1327.801174][T10545] ? __lock_acquire+0x6b5/0x2cf0 [ 1327.801201][T10545] ? __pfx____sys_sendmsg+0x10/0x10 [ 1327.801259][T10545] ? __fget_files+0x2a/0x420 [ 1327.801280][T10545] ? __fget_files+0x3a0/0x420 [ 1327.801309][T10545] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1327.801336][T10545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1327.801369][T10545] ? __pfx_ksys_write+0x10/0x10 [ 1327.801400][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.801418][T10545] do_syscall_64+0x15f/0xf80 [ 1327.801438][T10545] ? trace_irq_disable+0x3b/0x140 [ 1327.801456][T10545] ? clear_bhb_loop+0x40/0x90 [ 1327.801478][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.801495][T10545] RIP: 0033:0x7f197779c819 [ 1327.801512][T10545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.801527][T10545] RSP: 002b:00007f1978714028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.801547][T10545] RAX: ffffffffffffffda RBX: 00007f1977a15fa0 RCX: 00007f197779c819 [ 1327.801561][T10545] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1327.801571][T10545] RBP: 00007f1978714090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.801581][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.801592][T10545] R13: 00007f1977a16038 R14: 00007f1977a15fa0 R15: 00007ffe27347208 [ 1327.801618][T10545] [ 1328.130348][T10556] xt_CONNSECMARK: invalid mode: 254 [ 1328.277856][T10565] __nla_validate_parse: 11 callbacks suppressed [ 1328.277869][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9842'. [ 1328.355205][T10565] vlan0: entered promiscuous mode [ 1328.365163][T10565] bridge0: entered promiscuous mode [ 1328.371999][T10569] netlink: 'syz.4.9845': attribute type 1 has an invalid length. [ 1328.419506][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9846'. [ 1328.653251][T10584] netlink: 'syz.3.9846': attribute type 1 has an invalid length. [ 1328.698387][T10581] syzkaller0: entered promiscuous mode [ 1328.718601][T10581] syzkaller0: entered allmulticast mode [ 1328.830111][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9846'. [ 1328.906786][T10602] batman_adv: batadv0: Adding interface: dummy0 [ 1328.914448][T10602] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.950876][T10602] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1329.287962][T10636] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1329.378589][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9863'. [ 1329.411427][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9863'. [ 1329.497144][T10645] netlink: 'syz.1.9865': attribute type 10 has an invalid length. [ 1329.513383][T10645] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9865'. [ 1329.539379][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9865'. [ 1329.556814][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9865'. [ 1329.579522][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9865'. [ 1329.918318][T10667] syzkaller0: entered promiscuous mode [ 1329.927664][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9877'. [ 1329.943510][T10667] syzkaller0: entered allmulticast mode [ 1330.140634][T10687] team0: entered promiscuous mode [ 1330.171911][T10687] team_slave_0: entered promiscuous mode [ 1330.209582][T10687] team_slave_1: entered promiscuous mode [ 1330.258314][T10687] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1330.714131][T10719] netlink: 'syz.5.9892': attribute type 3 has an invalid length. [ 1330.959271][T10712] bridge0: entered promiscuous mode [ 1330.975148][T10712] macvtap1: entered promiscuous mode [ 1331.526199][T10756] netlink: 'syz.1.9902': attribute type 13 has an invalid length. [ 1331.552801][T10756] netlink: 'syz.1.9902': attribute type 17 has an invalid length. [ 1331.708832][T10769] xt_hashlimit: size too large, truncated to 1048576 [ 1331.753055][T10756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.779263][T10756] team0: left promiscuous mode [ 1331.793914][T10756] team_slave_0: left promiscuous mode [ 1331.808445][T10756] team_slave_1: left promiscuous mode [ 1331.830220][T10756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.853909][T10756] batman_adv: batadv0: Interface activated: dummy0 [ 1331.873803][T10756] batadv0: mtu less than device minimum [ 1331.896058][T10756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1331.908174][T10756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1331.920571][T10756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1331.933227][T10756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1331.945129][T10756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1331.957462][T10756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1331.969637][T10756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1331.982090][T10756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1332.103005][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 1332.111398][ C1] lec:lec_tx_timeout: lec0 [ 1333.608795][T10816] netlink: 'syz.3.9921': attribute type 1 has an invalid length. [ 1333.945043][T10824] netlink: 'syz.2.9925': attribute type 4 has an invalid length. [ 1333.997734][T10826] netlink: 'syz.2.9925': attribute type 4 has an invalid length. [ 1334.049299][T10827] wg2: entered allmulticast mode [ 1334.388790][T10840] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 1334.432483][T10840] __nla_validate_parse: 3 callbacks suppressed [ 1334.432505][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9930'. [ 1334.494276][T10840] netlink: 'syz.4.9930': attribute type 3 has an invalid length. [ 1334.622450][T10851] RDS: rds_bind could not find a transport for 0:9:0:95::, load rds_tcp or rds_rdma? [ 1334.688728][T10840] lo speed is unknown, defaulting to 1000 [ 1334.724445][T10840] lo speed is unknown, defaulting to 1000 [ 1335.351863][T10761] net_ratelimit: 12 callbacks suppressed [ 1335.351883][T10761] Set syz1 is full, maxelem 65536 reached [ 1335.357966][T10869] syzkaller1: entered promiscuous mode [ 1335.387958][T10869] syzkaller1: entered allmulticast mode [ 1335.496642][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9940'. [ 1335.529961][T10874] netlink: 'syz.1.9940': attribute type 9 has an invalid length. [ 1335.555822][T10281] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.569540][T10281] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.607065][T10281] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.649305][T10281] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.849711][T10886] pim6reg99999991: entered allmulticast mode [ 1338.490274][T10875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1338.905633][T10945] netlink: 'syz.3.9960': attribute type 4 has an invalid length. [ 1338.945416][T10945] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9960'. [ 1339.556968][T10994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1339.660328][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9976'. [ 1339.696421][T11000] TCP: tcp_parse_options: Illegal window scaling value 240 > 14 received [ 1339.780996][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9976'. [ 1339.902774][T11007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9978'. [ 1340.547153][T11032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9986'. [ 1340.782072][T11045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9988'. [ 1340.974457][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9988'. [ 1341.034442][T11036] nbd: device at index 64 is going down [ 1341.181475][T10848] udevd[10848]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1341.206128][T11054] udevd[11054]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1341.253998][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9992'. [ 1341.388201][T11063] netlink: 'syz.5.9993': attribute type 1 has an invalid length. [ 1341.417075][T11064] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1341.480049][T11070] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:0 [ 1341.493391][T11063] bond8: entered promiscuous mode [ 1341.500023][T11072] netlink: 'syz.2.9996': attribute type 1 has an invalid length. [ 1341.509494][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9994'. [ 1341.520040][T11063] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1341.566900][T11068] bond8: (slave veth15): making interface the new active one [ 1341.576358][T11068] veth15: entered promiscuous mode [ 1341.585924][T11068] bond8: (slave veth15): Enslaving as an active interface with an up link [ 1341.597117][T11072] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1341.946054][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10003'. [ 1341.966850][T11099] netlink: 'syz.1.10004': attribute type 1 has an invalid length. [ 1342.065254][T11105] IPv6: Can't replace route, no match found [ 1342.076427][T11099] bond3: entered promiscuous mode [ 1342.083988][T11099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1342.111906][T11105] IPv6: Can't replace route, no match found [ 1342.128981][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10003'. [ 1342.548511][T11122] netlink: 'syz.1.10009': attribute type 1 has an invalid length. [ 1342.548511][T11123] netlink: 'syz.1.10009': attribute type 1 has an invalid length. [ 1342.659179][T11127] lo speed is unknown, defaulting to 1000 [ 1342.672618][T11127] lo speed is unknown, defaulting to 1000 [ 1343.090276][T11158] netlink: 'syz.2.10019': attribute type 1 has an invalid length. [ 1343.167891][T11158] bond6: entered promiscuous mode [ 1343.176588][T11164] IPv6: Can't replace route, no match found [ 1343.185156][T11158] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1343.192302][T11164] IPv6: Can't replace route, no match found [ 1343.908995][T11196] netlink: 'syz.3.10028': attribute type 4 has an invalid length. [ 1344.191193][T11204] bond5: entered promiscuous mode [ 1344.198255][T11204] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1344.266411][T11209] bond9: option primary_reselect: invalid value (133) [ 1344.280354][T11209] bond9 (unregistering): Released all slaves [ 1344.381126][T11196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1344.402837][T11196] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 1344.416665][T11196] bond5: (slave sit1): Error -95 calling set_mac_address [ 1344.484106][T11224] netlink: 'syz.5.10034': attribute type 1 has an invalid length. [ 1344.590745][T11224] bond9: entered promiscuous mode [ 1344.616784][T11226] IPv6: Can't replace route, no match found [ 1344.633347][T11226] IPv6: Can't replace route, no match found [ 1344.649451][T11224] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1344.737463][T11175] lo speed is unknown, defaulting to 1000 [ 1344.771120][T11175] lo speed is unknown, defaulting to 1000 [ 1345.160619][T11256] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1345.238885][T11235] __nla_validate_parse: 9 callbacks suppressed [ 1345.238898][T11235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10038'. [ 1345.479152][T11254] syz_tun: left allmulticast mode [ 1345.838435][T10277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.860178][T10277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.017738][T11275] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1346.055922][T11280] netlink: 'syz.5.10051': attribute type 1 has an invalid length. [ 1346.144175][T11285] IPv6: Can't replace route, no match found [ 1346.170718][T11285] IPv6: Can't replace route, no match found [ 1346.291185][T11280] bond10: entered promiscuous mode [ 1346.319315][T11280] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1346.407233][T11298] netlink: 'syz.5.10056': attribute type 1 has an invalid length. [ 1346.439405][T11298] bond11: entered promiscuous mode [ 1346.445713][T11298] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1346.463729][T11300] batman_adv: batadv0: Interface deactivated: dummy0 [ 1346.470715][T11300] batman_adv: batadv0: Removing interface: dummy0 [ 1346.479568][T11300] bridge_slave_0: left allmulticast mode [ 1346.486290][T11300] bridge_slave_0: left promiscuous mode [ 1346.492382][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.502508][T11300] bridge_slave_1: left allmulticast mode [ 1346.518616][T11300] bridge_slave_1: left promiscuous mode [ 1346.526838][T11303] netlink: 'syz.1.10057': attribute type 2 has an invalid length. [ 1346.537633][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.549707][T11303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10057'. [ 1346.568373][T11300] bond0: (slave bond_slave_0): Releasing backup interface [ 1346.578470][T11300] bond0: (slave bond_slave_1): Releasing backup interface [ 1346.592788][T11300] team0: Port device team_slave_0 removed [ 1346.607305][T11300] team0: Port device team_slave_1 removed [ 1346.616314][T11300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.625967][T11300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.638983][T11300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1346.711718][T11303] bond4: option primary_reselect: invalid value (133) [ 1346.721510][T11303] bond4 (unregistering): Released all slaves [ 1346.740069][T11312] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1346.781192][T11304] bond11: (slave bridge6): making interface the new active one [ 1346.794967][T11304] bridge6: entered promiscuous mode [ 1346.818680][T11304] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 1346.846645][T11312] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10057'. [ 1347.086843][T11323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10061'. [ 1347.476256][T11343] netlink: 'syz.1.10066': attribute type 1 has an invalid length. [ 1347.501448][T11333] bond4: option resend_igmp: invalid value (2878) [ 1347.529581][T11333] bond4: option resend_igmp: allowed values 0 - 255 [ 1347.558039][T11346] IPv6: Can't replace route, no match found [ 1347.570513][T11333] bond4 (unregistering): Released all slaves [ 1347.584556][T11348] netlink: 'syz.5.10062': attribute type 16 has an invalid length. [ 1347.597831][T11346] IPv6: Can't replace route, no match found [ 1347.615661][T11348] netlink: 'syz.5.10062': attribute type 17 has an invalid length. [ 1347.625941][T11330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10063'. [ 1347.800498][T11343] bond4: entered promiscuous mode [ 1347.806675][T11343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1347.853271][T11348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1347.944000][T11360] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.10068'. [ 1347.973526][T11360] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1348.000514][T11357] 8021q: VLANs not supported on ip6_vti0 [ 1348.046250][T11362] netlink: 'syz.1.10071': attribute type 2 has an invalid length. [ 1348.084414][T11362] netlink: 'syz.1.10071': attribute type 2 has an invalid length. [ 1348.346056][T11375] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1348.404594][T11371] xt_CT: No such helper "snmp_trap" [ 1348.516761][T11385] lo speed is unknown, defaulting to 1000 [ 1348.552415][T11385] lo speed is unknown, defaulting to 1000 [ 1349.038455][T11413] tipc: Started in network mode [ 1349.044461][T11413] tipc: Node identity ac14140f, cluster identity 4711 [ 1349.052879][T11413] tipc: New replicast peer: 255.255.255.255 [ 1349.060427][T11413] tipc: Enabled bearer , priority 10 [ 1349.168711][T11418] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1349.209915][T11418] syzkaller1: entered promiscuous mode [ 1349.219012][T11418] syzkaller1: entered allmulticast mode [ 1349.471050][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10092'. [ 1349.961903][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a6004000: rx timeout, send abort [ 1349.973776][T11453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1350.004309][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1350.148315][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1350.184043][ T9152] tipc: Node number set to 2886997007 [ 1350.280688][T11465] netlink: 'syz.5.10100': attribute type 5 has an invalid length. [ 1350.432564][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.444100][T11473] openvswitch: netlink: Flow actions attr not present in new flow. [ 1350.454275][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.461990][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a6006400: rx timeout, send abort [ 1350.467706][T11473] openvswitch: netlink: Flow actions attr not present in new flow. [ 1350.477154][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a6004000: abort rx timeout. Force session deactivation [ 1350.487338][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.506924][T11473] openvswitch: netlink: Flow actions attr not present in new flow. [ 1350.520058][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.533046][T11473] openvswitch: netlink: Flow actions attr not present in new flow. [ 1350.545144][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.559011][T11473] openvswitch: netlink: Flow actions attr not present in new flow. [ 1350.571739][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.584138][T11473] openvswitch: netlink: Flow actions attr not present in new flow. [ 1350.599846][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.612389][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.625851][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.640912][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1350.656692][T11475] tipc: Enabling of bearer rejected, failed to enable media [ 1350.974322][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a6006400: abort rx timeout. Force session deactivation [ 1351.117175][T29117] IPVS: starting estimator thread 0... [ 1351.154640][T11494] netlink: 'syz.1.10112': attribute type 1 has an invalid length. [ 1351.175408][T11496] xt_hashlimit: size too large, truncated to 1048576 [ 1351.185071][T11497] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1351.200825][T11496] xt_hashlimit: max too large, truncated to 1048576 [ 1351.223543][T11498] IPv6: Can't replace route, no match found [ 1351.224644][T11497] net_ratelimit: 59 callbacks suppressed [ 1351.224661][T11497] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1351.230184][T11491] IPVS: using max 36 ests per chain, 86400 per kthread [ 1351.261069][T11498] IPv6: Can't replace route, no match found [ 1351.313812][T11494] bond5: entered promiscuous mode [ 1351.320086][T11494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1351.339557][T11504] bond0: Caught tx_queue_len zero misconfig [ 1351.847933][T11523] lo: Caught tx_queue_len zero misconfig [ 1352.615574][T11553] netlink: 'syz.1.10126': attribute type 1 has an invalid length. [ 1352.779641][T11553] bond6: entered promiscuous mode [ 1352.801332][T11557] IPv6: Can't replace route, no match found [ 1352.825150][T11553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1352.829022][T11557] IPv6: Can't replace route, no match found [ 1352.987832][T11567] bridge_slave_1: left allmulticast mode [ 1353.000977][T11567] bridge_slave_1: left promiscuous mode [ 1353.021352][T11567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.254157][T11574] netlink: 'syz.1.10131': attribute type 64 has an invalid length. [ 1353.307067][T11572] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1353.521705][T11583] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1353.536996][T11583] CPU: 0 UID: 0 PID: 11583 Comm: syz.1.10132 Not tainted syzkaller #0 PREEMPT(full) [ 1353.537023][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1353.537034][T11583] Call Trace: [ 1353.537042][T11583] [ 1353.537050][T11583] dump_stack_lvl+0xe8/0x150 [ 1353.537082][T11583] sysfs_warn_dup+0x8e/0xa0 [ 1353.537108][T11583] sysfs_do_create_link_sd+0xc0/0x110 [ 1353.537133][T11583] device_add_class_symlinks+0x1cf/0x240 [ 1353.537157][T11583] device_add+0x475/0xb70 [ 1353.537179][T11583] wiphy_register+0x1dc5/0x2dc0 [ 1353.537212][T11583] ? __pfx_wiphy_register+0x10/0x10 [ 1353.537231][T11583] ? __pfx_netdev_run_todo+0x10/0x10 [ 1353.537249][T11583] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1353.537273][T11583] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1353.537294][T11583] ieee80211_register_hw+0x3d82/0x4a70 [ 1353.537323][T11583] ? ieee80211_register_hw+0x1981/0x4a70 [ 1353.537357][T11583] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1353.537380][T11583] ? __asan_memset+0x22/0x50 [ 1353.537399][T11583] ? __hrtimer_setup+0x1b7/0x260 [ 1353.537419][T11583] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1353.537443][T11583] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 1353.537490][T11583] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1353.537507][T11583] ? kstrndup+0xbf/0x160 [ 1353.537530][T11583] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1353.537566][T11583] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1353.537592][T11583] ? rcu_is_watching+0x15/0xb0 [ 1353.537611][T11583] ? trace_kmalloc+0x2a/0xf0 [ 1353.537636][T11583] ? __nla_parse+0x40/0x60 [ 1353.537652][T11583] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1353.537668][T11583] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1353.537690][T11583] genl_family_rcv_msg_doit+0x22a/0x330 [ 1353.537710][T11583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1353.537735][T11583] ? bpf_lsm_capable+0x9/0x20 [ 1353.537750][T11583] ? security_capable+0x7e/0x2c0 [ 1353.537772][T11583] genl_rcv_msg+0x61c/0x7a0 [ 1353.537792][T11583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1353.537806][T11583] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1353.537836][T11583] netlink_rcv_skb+0x232/0x4b0 [ 1353.537855][T11583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1353.537871][T11583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1353.537902][T11583] ? down_read+0x270/0x2e0 [ 1353.537919][T11583] ? genl_rcv+0xd/0x40 [ 1353.537934][T11583] genl_rcv+0x28/0x40 [ 1353.537947][T11583] netlink_unicast+0x75c/0x8e0 [ 1353.537973][T11583] netlink_sendmsg+0x813/0xb40 [ 1353.537999][T11583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1353.538021][T11583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1353.538040][T11583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1353.538063][T11583] ____sys_sendmsg+0x972/0x9f0 [ 1353.538083][T11583] ? __might_fault+0xaf/0x130 [ 1353.538106][T11583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1353.538152][T11583] ? import_iovec+0x73/0xa0 [ 1353.538169][T11583] ___sys_sendmsg+0x2a5/0x360 [ 1353.538187][T11583] ? __lock_acquire+0x6b5/0x2cf0 [ 1353.538208][T11583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1353.538234][T11583] ? futex_wait+0x2a2/0x390 [ 1353.538270][T11583] ? __fget_files+0x2a/0x420 [ 1353.538286][T11583] ? __fget_files+0x3a0/0x420 [ 1353.538311][T11583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1353.538333][T11583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1353.538360][T11583] ? rcu_is_watching+0x15/0xb0 [ 1353.538386][T11583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.538401][T11583] do_syscall_64+0x15f/0xf80 [ 1353.538417][T11583] ? trace_irq_disable+0x3b/0x140 [ 1353.538432][T11583] ? clear_bhb_loop+0x40/0x90 [ 1353.538449][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.538468][T11583] RIP: 0033:0x7f600fd9c819 [ 1353.538482][T11583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.538495][T11583] RSP: 002b:00007f6010b83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1353.538512][T11583] RAX: ffffffffffffffda RBX: 00007f6010015fa0 RCX: 00007f600fd9c819 [ 1353.538521][T11583] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 1353.538530][T11583] RBP: 00007f600fe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1353.538539][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.538547][T11583] R13: 00007f6010016038 R14: 00007f6010015fa0 R15: 00007ffc57bab488 [ 1353.538570][T11583] [ 1354.384205][T11608] netlink: 'syz.2.10141': attribute type 1 has an invalid length. [ 1354.444723][T11608] bond7: entered promiscuous mode [ 1354.451527][T11608] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1354.491245][T11608] IPv6: Can't replace route, no match found [ 1354.498461][T11608] IPv6: Can't replace route, no match found [ 1354.690761][T11624] netlink: 'syz.5.10144': attribute type 12 has an invalid length. [ 1354.704252][T11624] netlink: 'syz.5.10144': attribute type 12 has an invalid length. [ 1354.739950][T11622] ip6erspan0: entered allmulticast mode [ 1354.864516][T11630] bond6 (unregistering): Released all slaves [ 1355.715920][T11669] netlink: 'syz.2.10158': attribute type 4 has an invalid length. [ 1355.728686][T11669] __nla_validate_parse: 72 callbacks suppressed [ 1355.728706][T11669] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10158'. [ 1355.807053][T11671] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1355.842135][T11671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1356.052634][T11694] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10166'. [ 1356.075034][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10166'. [ 1356.159808][T11698] netlink: 'syz.5.10167': attribute type 1 has an invalid length. [ 1356.170662][T11698] netlink: 'syz.5.10167': attribute type 1 has an invalid length. [ 1356.180546][T11698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1356.202042][T11700] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10169'. [ 1356.230944][T11700] netlink: Unknown conntrack attr (0) [ 1356.271831][T11702] tipc: Enabling of bearer rejected, failed to enable media [ 1356.476512][T11714] netlink: 296 bytes leftover after parsing attributes in process `syz.4.10176'. [ 1356.504131][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10177'. [ 1356.619621][T11725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10179'. [ 1356.637459][T10282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.670899][T10282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.881248][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10184'. [ 1356.924112][T11735] lo speed is unknown, defaulting to 1000 [ 1356.947419][T11735] lo speed is unknown, defaulting to 1000 [ 1357.543394][T17757] Bluetooth: hci6: command 0x0405 tx timeout [ 1357.999456][T13029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.015982][T13029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.100976][T11777] netlink: 'syz.4.10195': attribute type 30 has an invalid length. [ 1358.378838][T11793] netlink: 'syz.2.10200': attribute type 39 has an invalid length. [ 1358.755537][T11801] gre0 speed is unknown, defaulting to 1000 [ 1358.798485][T11801] gre0 speed is unknown, defaulting to 1000 [ 1358.815614][T11801] gre0 speed is unknown, defaulting to 1000 [ 1358.917848][T11808] netlink: 'syz.3.10205': attribute type 89 has an invalid length. [ 1359.043716][T11801] infiniband syz1: set active [ 1359.048526][ T9152] gre0 speed is unknown, defaulting to 1000 [ 1359.068937][T11801] infiniband syz1: added gre0 [ 1359.075809][T11801] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1359.091335][T11801] infiniband syz1: Couldn't open port 1 [ 1359.139038][T11801] RDS/IB: syz1: added [ 1359.148627][T11801] smc: adding ib device syz1 with port count 1 [ 1359.156356][T11801] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1359.165964][ T9152] gre0 speed is unknown, defaulting to 1000 [ 1359.176977][T11801] gre0 speed is unknown, defaulting to 1000 [ 1359.382467][T11819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1359.448618][T11801] gre0 speed is unknown, defaulting to 1000 [ 1359.502819][T11821] netlink: 'syz.1.10211': attribute type 1 has an invalid length. [ 1359.609765][T11821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1359.673092][T11829] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1359.767506][T11825] bond7: (slave geneve3): making interface the new active one [ 1359.784674][T11825] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1359.814919][T11801] gre0 speed is unknown, defaulting to 1000 [ 1360.549118][T11801] gre0 speed is unknown, defaulting to 1000 [ 1360.804954][T11801] gre0 speed is unknown, defaulting to 1000 [ 1360.974977][T11857] netlink: 'syz.4.10224': attribute type 1 has an invalid length. [ 1360.977187][T11859] netlink: 'syz.4.10224': attribute type 9 has an invalid length. [ 1360.999970][T11860] __nla_validate_parse: 21 callbacks suppressed [ 1360.999992][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10223'. [ 1361.032381][T11857] netlink: 'syz.4.10224': attribute type 1 has an invalid length. [ 1361.160694][T11858] lo speed is unknown, defaulting to 1000 [ 1361.169570][T11858] lo speed is unknown, defaulting to 1000 [ 1361.202804][T11801] gre0 speed is unknown, defaulting to 1000 [ 1361.444162][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10227'. [ 1361.575795][T11858] gre0 speed is unknown, defaulting to 1000 [ 1361.668745][T11879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10229'. [ 1361.736843][T11881] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1361.754816][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.762866][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.857890][T11881] batadv_slave_1: entered promiscuous mode [ 1361.867516][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.882127][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1361.884687][T11880] batadv_slave_1: left promiscuous mode [ 1361.904322][T11801] gre0 speed is unknown, defaulting to 1000 [ 1362.104541][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10233'. [ 1362.144297][T11894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10232'. [ 1362.431453][T10277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.463635][T10277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.495484][T11899] team_slave_0: mtu greater than device maximum [ 1362.651463][T11801] gre0 speed is unknown, defaulting to 1000 [ 1363.129225][T11801] gre0 speed is unknown, defaulting to 1000 [ 1363.529348][T11801] gre0 speed is unknown, defaulting to 1000 [ 1363.946444][T11801] gre0 speed is unknown, defaulting to 1000 [ 1364.274434][T11933] netlink: 'syz.4.10245': attribute type 10 has an invalid length. [ 1364.315947][T11933] team0: Port device dummy0 added [ 1364.340361][T11933] veth0: entered promiscuous mode [ 1364.358754][T11933] bond0: entered promiscuous mode [ 1364.369668][T11933] bond_slave_0: entered promiscuous mode [ 1364.392482][T11933] bond_slave_1: entered promiscuous mode [ 1364.505553][T11801] gre0 speed is unknown, defaulting to 1000 [ 1364.579411][T11932] bond0: left promiscuous mode [ 1364.589775][T11932] bond_slave_0: left promiscuous mode [ 1364.598764][T11932] bond_slave_1: left promiscuous mode [ 1364.641271][T11932] veth0: left promiscuous mode [ 1364.927943][T11944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10246'. [ 1365.008403][T11801] gre0 speed is unknown, defaulting to 1000 [ 1365.260507][T11943] lo speed is unknown, defaulting to 1000 [ 1365.319311][T11943] lo speed is unknown, defaulting to 1000 [ 1366.262286][T11957] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1366.681754][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10251'. [ 1366.785957][T11967] IPv6: addrconf: prefix option has invalid lifetime [ 1367.040076][T11965] veth7: entered promiscuous mode [ 1367.063041][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1367.072189][ C1] lec:lec_tx_timeout: lec0 [ 1367.322331][T11922] Set syz1 is full, maxelem 65536 reached [ 1367.887719][T11994] lo speed is unknown, defaulting to 1000 [ 1367.915751][T11998] netlink: 'syz.2.10261': attribute type 11 has an invalid length. [ 1367.918846][T11995] lo speed is unknown, defaulting to 1000 [ 1367.933900][T11994] lo speed is unknown, defaulting to 1000 [ 1367.948178][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10261'. [ 1368.254204][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10262'. [ 1368.258430][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1368.358887][T17757] block nbd5: Receive control failed (result -1) [ 1368.431028][T11995] lo speed is unknown, defaulting to 1000 [ 1368.432799][T11994] gre0 speed is unknown, defaulting to 1000 [ 1368.501430][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1368.735794][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10264'. [ 1368.956703][T12020] netlink: 'syz.3.10266': attribute type 4 has an invalid length. [ 1368.982860][T12022] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1368.994435][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10266'. [ 1369.270376][T11995] gre0 speed is unknown, defaulting to 1000 [ 1369.297117][T10278] [ 1369.299751][T10278] ====================================================== [ 1369.307642][T10278] WARNING: possible circular locking dependency detected [ 1369.315318][T10278] syzkaller #0 Not tainted [ 1369.320092][T10278] ------------------------------------------------------ [ 1369.327816][T10278] kworker/u8:31/10278 is trying to acquire lock: [ 1369.335094][T10278] ffffffff8ea84780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1369.347550][T10278] [ 1369.347550][T10278] but task is already holding lock: [ 1369.355646][T10278] ffff888078eeee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1369.365745][T10278] [ 1369.365745][T10278] which lock already depends on the new lock. [ 1369.365745][T10278] [ 1369.379024][T10278] [ 1369.379024][T10278] the existing dependency chain (in reverse order) is: [ 1369.388656][T10278] [ 1369.388656][T10278] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1369.397276][T10278] lock_sock_nested+0x41/0x100 [ 1369.403042][T10278] mptcp_listen+0x230/0x610 [ 1369.409372][T10278] __x64_sys_listen+0x1c7/0x240 [ 1369.415327][T10278] do_syscall_64+0x15f/0xf80 [ 1369.420802][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.428053][T10278] [ 1369.428053][T10278] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1369.436956][T10278] lock_sock_nested+0x41/0x100 [ 1369.442530][T10278] inet_shutdown+0x6a/0x390 [ 1369.447567][T10278] nbd_mark_nsock_dead+0x2e9/0x560 [ 1369.453199][T10278] recv_work+0x1c2e/0x1d40 [ 1369.458144][T10278] process_scheduled_works+0xb5d/0x1860 [ 1369.464392][T10278] worker_thread+0xa53/0xfc0 [ 1369.470027][T10278] kthread+0x388/0x470 [ 1369.475124][T10278] ret_from_fork+0x514/0xb70 [ 1369.480317][T10278] ret_from_fork_asm+0x1a/0x30 [ 1369.486434][T10278] [ 1369.486434][T10278] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1369.494511][T10278] __mutex_lock+0x1a3/0x1550 [ 1369.500496][T10278] nbd_queue_rq+0x37b/0x1100 [ 1369.505781][T10278] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1369.512108][T10278] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1369.519136][T10278] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1369.525826][T10278] blk_mq_run_hw_queue+0x348/0x4f0 [ 1369.532175][T10278] blk_mq_dispatch_list+0xd16/0xe10 [ 1369.538167][T10278] blk_mq_flush_plug_list+0x48d/0x570 [ 1369.544243][T10278] __blk_flush_plug+0x3ed/0x4d0 [ 1369.549794][T10278] __submit_bio+0x28d/0x580 [ 1369.555341][T10278] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1369.562017][T10278] block_read_full_folio+0x599/0x830 [ 1369.567920][T10278] filemap_read_folio+0x137/0x3b0 [ 1369.573646][T10278] do_read_cache_folio+0x358/0x590 [ 1369.579726][T10278] read_part_sector+0xb6/0x2b0 [ 1369.585552][T10278] adfspart_check_ICS+0xb1/0x960 [ 1369.591463][T10278] bdev_disk_changed+0x817/0x1770 [ 1369.597397][T10278] blkdev_get_whole+0x380/0x510 [ 1369.603131][T10278] bdev_open+0x31e/0xd30 [ 1369.608198][T10278] blkdev_open+0x470/0x610 [ 1369.613408][T10278] do_dentry_open+0x785/0x14e0 [ 1369.619328][T10278] vfs_open+0x3b/0x340 [ 1369.624283][T10278] path_openat+0x2e08/0x3860 [ 1369.629857][T10278] do_file_open+0x23e/0x4a0 [ 1369.635598][T10278] do_sys_openat2+0x113/0x200 [ 1369.641545][T10278] __x64_sys_openat+0x138/0x170 [ 1369.646931][T10278] do_syscall_64+0x15f/0xf80 [ 1369.652508][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.659380][T10278] [ 1369.659380][T10278] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1369.667733][T10278] __mutex_lock+0x1a3/0x1550 [ 1369.673668][T10278] nbd_queue_rq+0xc6/0x1100 [ 1369.679054][T10278] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1369.685126][T10278] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1369.692589][T10278] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1369.699482][T10278] blk_mq_run_hw_queue+0x348/0x4f0 [ 1369.705939][T10278] blk_mq_dispatch_list+0xd16/0xe10 [ 1369.711933][T10278] blk_mq_flush_plug_list+0x48d/0x570 [ 1369.718079][T10278] __blk_flush_plug+0x3ed/0x4d0 [ 1369.723535][T10278] __submit_bio+0x28d/0x580 [ 1369.729603][T10278] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1369.736314][T10278] block_read_full_folio+0x599/0x830 [ 1369.742552][T10278] filemap_read_folio+0x137/0x3b0 [ 1369.748931][T10278] do_read_cache_folio+0x358/0x590 [ 1369.754922][T10278] read_part_sector+0xb6/0x2b0 [ 1369.760469][T10278] adfspart_check_ICS+0xb1/0x960 [ 1369.766807][T10278] bdev_disk_changed+0x817/0x1770 [ 1369.772702][T10278] blkdev_get_whole+0x380/0x510 [ 1369.778073][T10278] bdev_open+0x31e/0xd30 [ 1369.783478][T10278] blkdev_open+0x470/0x610 [ 1369.789061][T10278] do_dentry_open+0x785/0x14e0 [ 1369.794873][T10278] vfs_open+0x3b/0x340 [ 1369.799928][T10278] path_openat+0x2e08/0x3860 [ 1369.805558][T10278] do_file_open+0x23e/0x4a0 [ 1369.811889][T10278] do_sys_openat2+0x113/0x200 [ 1369.817572][T10278] __x64_sys_openat+0x138/0x170 [ 1369.823432][T10278] do_syscall_64+0x15f/0xf80 [ 1369.828988][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.836114][T10278] [ 1369.836114][T10278] -> #3 (set->srcu){.+.+}-{0:0}: [ 1369.844709][T10278] __synchronize_srcu+0xca/0x300 [ 1369.850195][T10278] elevator_switch+0x1e8/0x7a0 [ 1369.856080][T10278] elevator_change+0x2cc/0x450 [ 1369.861650][T10278] elevator_set_default+0x36c/0x430 [ 1369.867792][T10278] blk_register_queue+0x3e9/0x4e0 [ 1369.873872][T10278] __add_disk+0x677/0xd50 [ 1369.879260][T10278] add_disk_fwnode+0xfb/0x480 [ 1369.884834][T10278] nbd_dev_add+0x72c/0xb50 [ 1369.891376][T10278] nbd_init+0x168/0x1f0 [ 1369.896435][T10278] do_one_initcall+0x250/0x870 [ 1369.902245][T10278] do_initcall_level+0x104/0x190 [ 1369.908161][T10278] do_initcalls+0x59/0xa0 [ 1369.913204][T10278] kernel_init_freeable+0x2a6/0x3e0 [ 1369.919112][T10278] kernel_init+0x1d/0x1d0 [ 1369.924676][T10278] ret_from_fork+0x514/0xb70 [ 1369.930507][T10278] ret_from_fork_asm+0x1a/0x30 [ 1369.936936][T10278] [ 1369.936936][T10278] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1369.946018][T10278] __mutex_lock+0x1a3/0x1550 [ 1369.951402][T10278] elevator_change+0x1b3/0x450 [ 1369.956952][T10278] elevator_set_none+0xb5/0x140 [ 1369.962754][T10278] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1369.969438][T10278] nbd_start_device+0x17f/0xb10 [ 1369.975396][T10278] nbd_genl_connect+0x165b/0x1cf0 [ 1369.981376][T10278] genl_family_rcv_msg_doit+0x22a/0x330 [ 1369.987974][T10278] genl_rcv_msg+0x61c/0x7a0 [ 1369.993367][T10278] netlink_rcv_skb+0x232/0x4b0 [ 1369.999035][T10278] genl_rcv+0x28/0x40 [ 1370.003913][T10278] netlink_unicast+0x75c/0x8e0 [ 1370.010572][T10278] netlink_sendmsg+0x813/0xb40 [ 1370.017023][T10278] ____sys_sendmsg+0x972/0x9f0 [ 1370.023809][T10278] ___sys_sendmsg+0x2a5/0x360 [ 1370.029385][T10278] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1370.035454][T10278] do_syscall_64+0x15f/0xf80 [ 1370.040909][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.047864][T10278] [ 1370.047864][T10278] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1370.057388][T10278] blk_alloc_queue+0x546/0x680 [ 1370.063226][T10278] __blk_mq_alloc_disk+0x197/0x390 [ 1370.069643][T10278] nbd_dev_add+0x499/0xb50 [ 1370.074926][T10278] nbd_init+0x168/0x1f0 [ 1370.079874][T10278] do_one_initcall+0x250/0x870 [ 1370.085767][T10278] do_initcall_level+0x104/0x190 [ 1370.091670][T10278] do_initcalls+0x59/0xa0 [ 1370.096708][T10278] kernel_init_freeable+0x2a6/0x3e0 [ 1370.103352][T10278] kernel_init+0x1d/0x1d0 [ 1370.109342][T10278] ret_from_fork+0x514/0xb70 [ 1370.114808][T10278] ret_from_fork_asm+0x1a/0x30 [ 1370.121400][T10278] [ 1370.121400][T10278] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1370.129752][T10278] __lock_acquire+0x15a5/0x2cf0 [ 1370.135482][T10278] lock_acquire+0x106/0x350 [ 1370.141314][T10278] fs_reclaim_acquire+0x71/0x100 [ 1370.147033][T10278] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1370.153624][T10278] __alloc_skb+0x27d/0x7d0 [ 1370.158823][T10278] tcp_send_active_reset+0x8a/0x5a0 [ 1370.165073][T10278] __tcp_close+0x4c5/0xfe0 [ 1370.170651][T10278] tcp_close+0x28/0x110 [ 1370.176129][T10278] inet_release+0x143/0x190 [ 1370.181623][T10278] sock_release+0x85/0x150 [ 1370.187020][T10278] rds_tcp_accept_one+0x641/0xd70 [ 1370.192755][T10278] rds_tcp_accept_worker+0x1d/0x70 [ 1370.198836][T10278] process_scheduled_works+0xb5d/0x1860 [ 1370.204915][T10278] worker_thread+0xa53/0xfc0 [ 1370.210660][T10278] kthread+0x388/0x470 [ 1370.215716][T10278] ret_from_fork+0x514/0xb70 [ 1370.221218][T10278] ret_from_fork_asm+0x1a/0x30 [ 1370.226999][T10278] [ 1370.226999][T10278] other info that might help us debug this: [ 1370.226999][T10278] [ 1370.239082][T10278] Chain exists of: [ 1370.239082][T10278] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1370.239082][T10278] [ 1370.253495][T10278] Possible unsafe locking scenario: [ 1370.253495][T10278] [ 1370.261738][T10278] CPU0 CPU1 [ 1370.267460][T10278] ---- ---- [ 1370.273299][T10278] lock(k-sk_lock-AF_INET6); [ 1370.278691][T10278] lock(sk_lock-AF_INET6); [ 1370.286321][T10278] lock(k-sk_lock-AF_INET6); [ 1370.293864][T10278] lock(fs_reclaim); [ 1370.298280][T10278] [ 1370.298280][T10278] *** DEADLOCK *** [ 1370.298280][T10278] [ 1370.307066][T10278] 4 locks held by kworker/u8:31/10278: [ 1370.313299][T10278] #0: ffff88803232e140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1370.325000][T10278] #1: ffffc900058dfc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1370.338918][T10278] #2: ffff888057e5ae60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xa9/0xd70 [ 1370.350601][T10278] #3: ffff888078eeee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1370.360449][T10278] [ 1370.360449][T10278] stack backtrace: [ 1370.367034][T10278] CPU: 0 UID: 0 PID: 10278 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 1370.367058][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1370.367069][T10278] Workqueue: krdsd rds_tcp_accept_worker [ 1370.367103][T10278] Call Trace: [ 1370.367112][T10278] [ 1370.367125][T10278] dump_stack_lvl+0xe8/0x150 [ 1370.367146][T10278] print_circular_bug+0x2e1/0x300 [ 1370.367168][T10278] check_noncircular+0x12e/0x150 [ 1370.367189][T10278] __lock_acquire+0x15a5/0x2cf0 [ 1370.367206][T10278] ? kthread+0x388/0x470 [ 1370.367218][T10278] ? ret_from_fork+0x514/0xb70 [ 1370.367235][T10278] ? ret_from_fork_asm+0x1a/0x30 [ 1370.367259][T10278] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1370.367277][T10278] lock_acquire+0x106/0x350 [ 1370.367292][T10278] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1370.367315][T10278] fs_reclaim_acquire+0x71/0x100 [ 1370.367327][T10278] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1370.367345][T10278] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1370.367363][T10278] ? __alloc_skb+0x27d/0x7d0 [ 1370.367380][T10278] ? __alloc_skb+0x186/0x7d0 [ 1370.367398][T10278] __alloc_skb+0x27d/0x7d0 [ 1370.367416][T10278] tcp_send_active_reset+0x8a/0x5a0 [ 1370.367436][T10278] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 1370.367451][T10278] __tcp_close+0x4c5/0xfe0 [ 1370.367469][T10278] tcp_close+0x28/0x110 [ 1370.367484][T10278] inet_release+0x143/0x190 [ 1370.367504][T10278] sock_release+0x85/0x150 [ 1370.367519][T10278] rds_tcp_accept_one+0x641/0xd70 [ 1370.367532][T10278] ? process_scheduled_works+0xa70/0x1860 [ 1370.367550][T10278] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 1370.367565][T10278] rds_tcp_accept_worker+0x1d/0x70 [ 1370.367584][T10278] ? process_scheduled_works+0xa70/0x1860 [ 1370.367600][T10278] process_scheduled_works+0xb5d/0x1860 [ 1370.367626][T10278] ? __pfx_process_scheduled_works+0x10/0x10 [ 1370.367646][T10278] ? assign_work+0x3d5/0x5e0 [ 1370.367663][T10278] worker_thread+0xa53/0xfc0 [ 1370.367689][T10278] kthread+0x388/0x470 [ 1370.367701][T10278] ? __pfx_worker_thread+0x10/0x10 [ 1370.367717][T10278] ? __pfx_kthread+0x10/0x10 [ 1370.367730][T10278] ret_from_fork+0x514/0xb70 [ 1370.367747][T10278] ? __pfx_ret_from_fork+0x10/0x10 [ 1370.367764][T10278] ? __switch_to+0xc79/0x1410 [ 1370.367780][T10278] ? __pfx_kthread+0x10/0x10 [ 1370.367793][T10278] ret_from_fork_asm+0x1a/0x30 [ 1370.367816][T10278]