last executing test programs: 6.774426689s ago: executing program 4 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000280)=0x6e, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="44200803", 0x1f) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYBLOB="0000fd"], 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) syz_emit_ethernet(0x2e7, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="7f0a00030011", @void, {@ipv4={0x800, @esp={{0xf, 0x4, 0x1, 0x9, 0x2d9, 0x67, 0x0, 0x1, 0x32, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1}, {[@ssrr={0x89, 0x7, 0xa0, [@remote]}, @generic={0x83, 0xb, "c533cc1fcdd07ce72c"}, @timestamp={0x44, 0x10, 0x27, 0x0, 0xd, [0xc295, 0x2, 0xf]}, @ssrr={0x89, 0x3, 0x5a}]}}, {0x4d2, 0x8, @cc={0x1, 0x0, 0x0, 0x46, 0x1, 0xfff, 0x17a45198, [@ipv6=@udp={0x4, 0x6, '3^l', 0x24c, 0x11, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x2c, 0x0, 0x9d, 0x1, 0x0, 0x6, 0x68}, @hopopts={0x3b, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x4, [0xa4d, 0x40000000000]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @generic={0x9, 0x6b, "bec228781b4e9d8a9147f1276c1cf2d58c191974996dda6a0a2c4f6b3cdcc845630b2066351151352eea8e6812f344d94d4b811c32d57e472d8ea1b8d9c562d472ab63d3375769b27ffe89eaa09091ef4a9fd40b0301f2fdecd827d0cffb3211122abf37648fbd0fd1e21e"}]}, @hopopts={0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}, @routing={0x2f, 0x10, 0x3, 0x6, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x1d, 0xa, 0x4, 0x5, 0x1, 0x40, 0x80, [@loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, @empty]}], {0x4e20, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "17a1fdbf5ae749b096bc39af97d5a455b3573e5ee17d8df517418f5d7ee2b551", "c023849ea6fcdd1ce4019215e04b8c75d6f6ad4b1013d863faa1670877b72be03c53937db8403e8572d1ef354b1ae8d2", "ae8684a132bb72fde0f0618590a329d68b6bb8f9a9d404af3e70b208", {"a5eb70462685b8c8bb46da93e74c89f0", "38ffa283eeff3c8f906503f78317a4de"}}}}}]}, "65e21a9c1b3316", 0x7}}}}}, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x9}}]}, 0x60}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x1, 0x5, {{0x5, 0x4, 0x2, 0x3c, 0x14, 0x67, 0x0, 0xe, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101}}}}) 6.39178948s ago: executing program 4 (id=1426): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0xfff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x29, 0x5, "80"}], 0x18}}], 0x1, 0x4000000) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x190) close(0x3) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3cfe24e01808f3a48e00"/20, @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c0002800800090003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) read(r8, &(0x7f00000002c0)=""/152, 0x98) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x3261e) 6.0558715s ago: executing program 0 (id=1428): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48050000003f000008000a00", @ANYRES32=r6, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000500050002000000050004000000000014000780080011400000000005001500040000000d000300686173683a6e6574"], 0x5c}}, 0x0) 5.463299574s ago: executing program 2 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffdfffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000690000027b8af8ff00000000bca2000000000000a6020000f8ffffffb703000002000000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffff8110a10000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xfffffee3, 0x10, &(0x7f0000000000), 0xfffffffffffffe4c}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001540)="f2", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) syz_emit_ethernet(0x152, &(0x7f0000000780)={@local, @link_local, @val, {@ipv6={0x86dd, @generic={0x6, 0x6, "cefec2", 0x114, 0x21, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x11, 0x0, 0x3, 0x1, 0x0, 0x1b, 0x66}, @dstopts={0xc382415e888d0a8, 0x0, '\x00', [@enc_lim, @pad1]}, @fragment={0x1d, 0x0, 0x4b, 0x0, 0x0, 0x7, 0x68}], "65cf6b5d3b3c8670c8338d4b28ee237eb6b4681b4ead1694ed2dd79d444a96970708e068a278d466781d96623cf9aba910c0ade5a576d85144f34523f13d86a7c89bcf48115672c6295fbd79371fdfce73007435ab706fdc9d89b9513bf1ea011a95b85a02a89d711d9d8656489ca6367c944bd1e9394ffdfd9140af6d8e0122915067d30559e655a9e93a7ff29228ba24c2d551974e19c525020ffe35b55df3b69823de9e98fc3af5c2b01de11c8bb5b362a9155049cd3babbf41e8f980318ccf9ce4f8313366c1084b27cc6045a20e00a688947bff39bc9dfc422c35e8a3b3806bef6acbe5ad65dfbd9da42b7d383cc8b2e848"}}}}}, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) getsockname$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x0, 0x1, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.04232726s ago: executing program 4 (id=1433): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x7, 0x1, 0x0, 0x2, 0x2, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xb2, "5c3ea1ce5e56f545ce0fbee42200486aff887fa9353e08cdb6d6e6436021b7f9ee507392ab02ec9e4c9cf6fb6b5bb16e32cf88c259823a01d3d327f668e64908cb5b043f5515cd45ba0e762539fc5bac9a3b5da973c8999b779938423fd3031be0f4b4861c4339f2bfd25b831fe41d7fa3a77bfe9a6fbb91b48ec8cc4b192f52268c27239cfc268c7d8bb9d62e7cdb14319e9d8b57e525c2b6f52309ffcb6abc39a4c17f0c4651a9f0d951da8d206084c1d5"}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r5, 0x29, 0x45, 0x0, &(0x7f00000002c0)=0x1e) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) r7 = socket$inet(0x2, 0x1, 0x100) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) socket$alg(0x26, 0x5, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r9}, &(0x7f0000000380)=0x8) socket(0x10, 0x3, 0x0) 2.895679669s ago: executing program 3 (id=1434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="110001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare(0x2a060400) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x24, r4, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffca0, 0x0, 0x3}, 0x20000000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r9, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x2) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0xf9d3, 0x3, 0xff, 0x3ff, 0x1]}, &(0x7f0000000180)=0x54) 2.888553428s ago: executing program 0 (id=1435): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000440)=0x1e) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb0000000000"], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x100, 0x70bd27, 0x80, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff2, 0x9}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20004854) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r5, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f4", 0x13, 0x40, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d10", 0x3}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x880) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010000d042abd70000000000000000000b4899ca598aa0f23c21508f762963ed396e89a06f9dc9541b5d5fb46747a2f587aad35865897ea69cce460bf4421980b791c1c3ba4ae95313c278db1dcd2add4fce0cc2d1770947832e5ab85658884f8e4546f1a7a43fb239ce2a10639ac3129e4e62f6ba0686a16919ca82f8f93b1b09ecbbe13877000cbd7fdc3a1bcc9a940fdfa2ef891a7bff95ded54585542d0b1546f243660de2015a449b618e1634c2cc3e07ba187568b6ea1f5122e447ed8d585000000000000000079dea26acab37600"/223, @ANYRES32=0x0, @ANYBLOB="0000000010000000240012800c0001006d6163766c616e001400028008000900ffffffff0800030002000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x8000) r8 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) poll(&(0x7f0000000280)=[{r5, 0x8020}, {r2, 0x4000}, {r8, 0x1}, {r2, 0x500}, {r8, 0x67}, {r6, 0x2}, {r8, 0x8}], 0x7, 0x9) recvmsg(r3, &(0x7f0000000600)={&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000040), 0x1}, 0x1) 2.833434291s ago: executing program 2 (id=1436): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000040) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x5}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x6}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x6}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB="2544ab20", @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a0000000500360000000000050037000000000008002f007c0000000c0005000203aaaaaaaaaaaa0a0001007770616e31000000"], 0x44}, 0x4, 0x700000000000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r12) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000600)={0x50, r13, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r11, 0x8008662c, &(0x7f0000000080)) (async) ioctl$EXT4_IOC_GETFSUUID(r11, 0x8008662c, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000000680)='syzkaller\x00', 0x7, 0xc5, &(0x7f0000000700)=""/197, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 2.606819611s ago: executing program 1 (id=1437): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'wg1\x00', {0x3ff}, 0x2}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r2, 0x0, 0x492003, 0x0, 0x4, &(0x7f00000004c0), 0x0}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r2, 0x0, 0x492003, 0x0, 0x4, &(0x7f00000004c0), 0x0}) openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000840)="e9ac609a829456daf97b1ab32a3831ed3d93c6d6d2f66996399e9642f026893e71bb8a8363e6b09d24bec04428dc2c466f8fb5b06c82de4e426ef80213c1bfaba428c58c1ca234083171d78bfc30c9e606fe6d073be47d0a788410fcf5d9e419272a8f9cdcc0cb605bdcc30a5a33199e77435f1364173b67a8e85bc499383a1f6f17c1a956d7293e25c56b1c1f51c92d35bd23b3afae446f16b3e3e0fcf93ae3b737f0bf1859af29cced7bfa7d371933fe43db4251fde01b4e86997a5ad740048cb8062f88af8f741ecb483fea99d5dc9f6777963d71fccbdfd6f12b049ddc05d3c7863491c9c7aba749480025d874f7581f9f820d6ddd2cf2e48ce698800796b530fe5625fba6c7028125bcdd3f4cd5dd315917a2237bdb8a86022def75387a80c2a87e1ee32b97ae83c9465a33f7da1e869a94381145d4dd7e6d5aca3ee23f2808c7dd964f3378101ec4e50acc745e48e5ce57fb4d09b93b5995c7d61d6d2090b92d85b7f3e038b29081c0be6757b4ee43825a94a0854d561f17de70574ff868593aa8469d31b3e0407d85c9fabb2bc18b9f42dbd267d9da54a4f7b8acfbab83247c71e03f61cb6b960547ddf485759711e042f6e032f4c570ba167f7cc3e9a555f0cf76e8594e4f5e0f32d7f6ed793ef2af4d8ec6420761a7334044385a6dc0446f314825b44393d926144a03078f3560e43d03423e121768db8facf9baf39c933fd4045c60b79854edda8d302747559f1fdec92490b961fbf8e757b3c097dab6c954c6eb0e267ee24532d79a305cadebccad6565a0e95f3b49ac071efc580fc2d1d62a1155e0a736c492d37e8f6dfee18f28cf2a5ef6685d49ec24a7875d0aa98051eb52280335550cbf00080baab4578f007c208919d749d271e748a6c86f79c6e541443ea90c166440bb9d9ebf871d0aa72b25eb7422d843914688a560548717bce410da984bb2dfa127829301aaf12cb7555d49da507c92fa20c20dac9f26adbd02c1408dd0887b1549981b3b2c046954e7b1500236ab23a86b11155c91009b0625b70468cdccc452920e66902be4f81fdf8c95caf777ba230e84e7bec7261ffc96b26c0b00926259c7c52db83778d691d2e477af3e32ce47b2ce35b3005ccea78d5998ae84a93ae3802d905ffe514c06c6c3b6eefd700d4ad0b3a0042333205e772d114733a83b6f847b165477ae44df44073d48c4331c5d12da15449efd37b42375f160788e1a262b707d658e64c02274672db28a3782fc3538828b6d5cd6aee3a7b7379da08f2da4de22c44f090dfef686191b2779712f7f9edcc7c74efaa0f65e9dfc92e7be4d5dbae7ee4623de120aeeca15f2e079b6be94a324bbd776e3ab3696fc6ad13d51617776fcf02281415e870e97ade867eb6c9990839566adaff119653043b430eca3273dd7e7314277d88d90debc72c37dff8dbaeab4a756d85f40580060fcbe981793fa7fcfa76816ddc9a6317cbba9e1d58baed20e27474d792b32c70d4e65a53d9f4874a5b0aa5d6dd060fa56b7ea7f1cdb9b50a36e82942c7a064ac72385584ed743d664087023a0b63f29b00e38e7683e6fb3e8b682483ba5bfd69cb20eaa8d3a226be4bddb01d9b42f535b717672daeb08581b58b9870d838eac94cf6a5a9665952f763a0a3c1483911773e64c974ca136318621e0380f4c66c052eb0c44ae0f0bdba85677c9cb55550659dbd3e2f5e517f198c674ca6432f1ff6bfea07abec93f577c4bd8f20435506d453d4224990740e675b607c2869c311aad112923880a5818a09f0dd8d5dd8d8809864677754887925efeed2687b225dc909c13ea00928f64dbe15fac36a91aa87df3f6df5a25409aa67d656bd71d5677baf7d0f27af0c7dbd6777c2fffc92e697231f6d1b753fbd97441b6d01572382ec71a097c8d826bc6359b8e6221c145fdc1824793dd36960afc840507d60dc240bb1267ffad96f7a62bbe48552cb354fe086bfac079c2ee22c7b364695a7263b3fd9655f6a06a4b07a9685e7f4ac4718b1ca2193a0e3769b9639698816925cbc4c0ae55d11262f6aedfca00253f4c942bf46f481f1ec454aad8e00b9a3fbdb5ce957402fe53724ba65658e9e93192e47b37eefbd5b24154acb452fabb9abc6ded0ed56ae703bbcb8ff083b5fe499fb858941f41a9c165d21f679a40043772d9206fc7d3a3315c37cdb53c11f81451c818bc0a52d17fa3b74a3c52c50ae2cca5857aba445856d12130bc27bfc3f3e5b5036022e33d8b0b735c4183276e4964fa711ea31e99f8f52be20ab6b98e5da650f5a08b98080a476c206e8c74eea379c2a5fa801a5e27d8b566b2659ae2d07d3f3ffb64f43d8a5c6805ce730bc1815f7b614c6e11385fc23794d37111d239bb6cb96be71571d23bbbee762cfd8bfa510f39afa2fb6712510dcec1d4ba3938a94e7cd3f896be108215de6462133ccaff2231dd031ad659402f3967b4e2e54e6e10103f0be7ddea5bca67fe0fe0f76cc03e794aa148923b4771cbe7be8f0e3f2bd4e0d45a6cb68839ed52b0d1bcc54bb0600a44a163efb8cd407a76de640b598c7933fc43a9c888494ecf942907762b065033175c84109bbefa33961445ca3f333aebc2bddfdd5f96b897e7c4ea4660250062158a456c48e42314fc4f5cfc4bd6ec03f7641a93e27f8789e1f8dd40418382e191b475989b9aac4802cd38aa97be213f99f15f748367725be417d1710027f5fa37cc576f2e52373e7d4aa30a8bafc9ed93433fc88b5b9babd58941264472ea33d47564a3f33e02f18a058f1e4c3f4fd1bbf635d99ea85c0a52c7dc9146fae90a8f3bf743540829419cadb840ef1efd2b9cd7c393994763f7eccc1d3d57b1220da794028748356374cf5d8f2abcde4b5b1c64db56c9a500d4627f40f8330bf0948e2a2c7f197ee7cd1db0f6fc11dfdb557a8dc082b30d77195b8278a4c90f5b0ea8fe42fc3bd4f0a4287d1239081081882112323751ef6bae8690d0e086ad2148c02da4e2992b25a91b9cc234e6187d9582563307d11a048aaf3d54936e25f75ccacb084cf0194d3cc6f2f1f292099b3eece385f53b52e5e89bc7d81b763c439cfadd49b646a5982e83a3dbc557b52b551c1a09e37aa2af78c2a4b8ec6f8520e791b1dc37bdb63ea6628e189fcd95678abe6c7e6fea605f707dfef333970ee54951d5545db1530f0e70edaaac0e8639e56f837982a0bd0ef7b4a86e399f6a804a99ad0f2355d0db3668fe9f56f9c46b8df4bc06d4c30424d9a0cce8897ccb17fafd18cceda7d774c2a91db978a18287c48c25e93c012f5c4c3030ecc1fb3411b958946419c2e246dfcd3d67c713d9209b198fdc2c58053befb408757ff9478acc2969a46e7fc2bb526c159e0f0b5a8df6a32de42c1c867ed67ad7610de44623c236e546ecd412947a681349ae20e858f39f739491963fe9e166cd691cf8e23db29b71f320b435867bfce092184eb0280659dabba94cff3d7ff26ee93bea581840e0628751c79eb6acc81ea003c35c89184bab45bfb64440209f3fcf59225077f83f3405190996a9613eb6a98af1b94e7e3bb14ad8c423aff326415eaad4038070b1c6f3a7d4d7fc8b4157b3fae86958138dd9759b7ff17cb1bfaa25e3c9e3f840035960fa13c5f5afde30ea35c9cc9cd2f033f16a9604e1c68985aeff738b8d16ff84693e442a70f9f9e870dcdff960ad901b27fd6126d932acea7bbf7935e6c7301b172462bb7a0a4c4333315d44a2a63105c06e1380971dd2ad0dd21afcef1c21cfacfdab03539b8771d473edbf9b9d4ff767f9f94c2bf0fde1b712bd7bf600f1e170cf6586e3125f7907712c7a6b5ec4cda845101fe40c0bccc018c570f9e933fdbd54d572a8591bb5a2d05468ed9a971369586bcb2965e91db20f28bab853e354f836d80481061290326163bd8e63dcc42a406cee7f442917d120c73555495c8467917d5c5232970206b660ff599c8bbbaa6e498450be2ff94422800950e9c56a103352bd98de40d849f279306eb7ac81c84a5a723673add2638243ae16eea84490a3bea61351b43331bc86ad71fc9a780709fb522125a2682110476043f95aa03f7dce3c5d42314b417483e5c3db8436f0da2886951bd635ccb0fc753e9fbefef368458842403b8b25af54a2c07b410a0bad2c084f83cb7433cfa7ff79f431b3102adc3f2cf82e65a9caecde16108fcd0ec8d5a075981ad5f800b9b64794c8693b2708cc725021a9dccc7352669c16172ad9da534923317cc38616782a2480dd003e6b0046927933cbd2f781ad58c778e58e75c2e5e7d47cad2b44a0702ad4d0e5de76f3697b24bb2f20d1ef3caf23172eb490bbdb44a1813ef10e794039fe120c710c003018ddcffd077f09219c950b29c77892dd371e0f316c42f029adecb29bd2e104d37529575c553b922d519ff21c55c76d99399312de06c0061d22c38d1fdce0f7dd627d556209799f74d1d2d03cbe6f4bed1ded562f0a577b25c635e43003a01e35744bc16a967c99472fd2b0688a6c264eccc5e98b993be1b8bf00aa4850d79d02496b3c5012c907ac091059b17150b672d8e3a9242200d2a5462ba6f271844faac2db4e0656455b5d789a89d74fa89fea44fe2f7bf7c8626f876bc215d6dc2eeed09405f0b146b2157a1be7d7f98a96f044733146894eee819f3a38484a1459d44561dbeedaa5afff35f77d15f6fd5aff7448e5d3f590cad970ace16c03273814f7fa43519259fc13d84d686b783d35661a358fde26c2375d05f08d4202cbf999f0c75170942ad154057216f207c06048fd8cfa77238b91db8ad606839ab119a0303c9ac93f0619a3a9de6dfb696030b60d5cc278e312ca893a3be3048f7c07292ef53749a83bc533d247fe2f8b75d791e346af43ae449287f074625326307f780200f7a51146acde533808b444a3f9c3a4b18c4c97730d0107aa4fd780aeaef9a324241da808c4ae297d1c811bf7196a81f7a8fe03cb84fa1c768ef11dd7eae025d023dfd09988deb092776f42de2cb2b944c7d597b0bfa7472e2c12b438b78f1ea91dfc326765fe116d49011dea8af1ef1a5adba791ed44c89e33a51dc270ab211e25b14648f766ef88d7ba4756705c4574bdca680b842093b54da6d67884c7e04d0162d6a76f90257dd51cb8c4b1e16d6c757cb4359afc28d558f469fb29dc6db8bc1b4813c740ffa204bb14558d5e41b17a8bd7b84653a2bbeadf086a914993dc59c9f7ec33661f4565aa7c21593e483d26a38c9964721f84e2d0108f494cbb3aa2047f4072e326e290b71a94c9b90b15dffe651864cfa1e058e4943c815c41fa1496c637e7ded4d8e70e46cb9ccbe6f9532f74232d8ae30ead1f21392d8db643623e7b9c13b3cdccdf185e4426b7a60e5bbd1ab25248de5bdbc847e0e1761df695da9e9f5cc9b7a1e09d636aab8f72c7cd40fd050cac2ab85fba856d954ccd3e21b02102ee65de5176824dbdacb5a950991c7aa9b77fd2b19dad97754440f04a646e111a20ff3b7b8d47316d69c83b11948ab0c4290ecb5ec51f311199f742485a4f226434cff3a6eb4ef2c4fa9e25528cb2ab12ec38ede10e07e24d69855885020de5d4cb1fa10a27631d3dd0ab7f23bb7f8b2f4a3857ad88677675bb4a0699aebbcd5eee6ae53576ea9071d746d9b6b1c690101cfdb92d662b693434faf6a5df1e047fbb0dad0fdcc145c5f28eb80373f7a890c1211ab7dc768a4df5cac01e43fc6a3a57ffd2e13d3894f9cb11d4658610830d230327301f0648debc29b89db46d03c790", 0xff6}, {&(0x7f0000001840)="4eaba164740678614c1164", 0xb}], 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x20000010) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0xa, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0xa, 0x4) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r9 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="140000000000000029000000080000000514000000000000380000000000000029000000390000003b04007000000000200100000000000000005754398d000200000000000000000000000000000000980000000000000029000000390000003a10020188000000000000000000000000000100000000000000000000000000000001fc0200000000000000000000000000010000000000000a000000000000000001fc020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffffac1414bb0000000000000000000000000000000000008000000000002900000008"], 0x1d8}, 0x90) sendmsg$NLBL_CALIPSO_C_ADD(r8, 0x0, 0x90) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x8040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}, 0x80) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000140)="9745edff0000000001008cc5ffffffff", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101}}}], 0x20}, 0x4044040) (async) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000140)="9745edff0000000001008cc5ffffffff", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101}}}], 0x20}, 0x4044040) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0xff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x333}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x101, 0xfffffeff, 0x7, 0x5, 0xc]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x51}, 0x6040801) (async) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0xff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x333}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x101, 0xfffffeff, 0x7, 0x5, 0xc]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x51}, 0x6040801) socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) (async) unshare(0x26020480) 2.434902616s ago: executing program 3 (id=1438): r0 = socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x8, 0x4) socket(0x40000000015, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x8, 0x4) (async) 2.212341385s ago: executing program 0 (id=1439): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000800850000005000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.181838285s ago: executing program 2 (id=1440): syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa0100000035f200182c00fe8000000000000000000000000000bbfe800000bf35ce68e77462de68eb210000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010ffff907800006ae0228d"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008b100000000000000000000000000000d810cc71debeeb84d5b494a04606c60fde9430a3b8093ce7ffd3a98f8c5d6ad1481cad0f633f2c741a04d7b6bd8d9bcb760a1f760bcf8ff32ef8eced96588ba17ff1d87ec007248455e6464cd8ead6eb8169352661cf8f338fa60e9d6f1f3526fba179d1e579a7393723e0ef6b09d813dca2065624b54aa10636c78a54b79e580c13cc958b52f5145712", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000", @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x50) listen(r0, 0x3) write$tun(r3, &(0x7f0000000780)={@val={0x0, 0x8847}, @void, @ipv4=@igmp={{0x8, 0x4, 0x3, 0x9, 0xa4, 0x67, 0x0, 0x0, 0x2, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x0, 0x8, "8fa697b9ab1f"}, @ra={0x94, 0x4, 0x1}]}}, {0x15, 0xf7, 0x0, @multicast1, "592697f95b4ec56a90c09bcc4636f84c8b5ba10b8bb0e4bf9d8098cafb158d18fbd8a8ad59b13a8b727860fd1e6cae81740b34b0f41764ddafd810532adb79eb12e88e1a42a15cbb60ea58fe1218030ae85d13add168c0a8f80129a205738ff49656570bebbadbb591f9fdf1038633c960d9c57ddbc587db25122d5c"}}}, 0xa8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070000000500000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00ee7b0800e900", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x108) 2.107767088s ago: executing program 3 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r3, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, &(0x7f0000000dc0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x63, 0x8, 0xfffe, 0x0}}, 0x10) 2.099249389s ago: executing program 1 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000080)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000a80)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x4, 0x6, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0xc, 0x66, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}, @lsrr={0x83, 0xb, 0xd2, [@empty, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @end, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x7, 0xd9, [@broadcast]}]}}}}}) r7 = socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x802, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb1a000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a000006"], 0xbc}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r9}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0x5fc, 0x30, 0x871a15abc695fa3d, 0x2, 0x1, {}, [{0xe0, 0x1, [@m_ctinfo={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4c}]}, {0xa6, 0x6, "2c3667ae6f336cc4c0c199eb3fbc523af41b86d1d798c54fb781e50bf2d373d1d05516988808551bcb913014d465bce487a3d381fbc0d8c3f8525e9048e3d5ea743342b6b31ab4216639f299f76808ee221f51f8e642f63c82f73663f3fc35e0aac1367a4a9d930ab6582641f38e71a87fe1231b6599c3f3487459fd1a53060a86985a2b40fdf3b27cd60f253236d4135c568a0741a6a73030d2975a3678e10bcfdd"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, {0x508, 0x1, [@m_mirred={0x1bc, 0x1c, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x10000, 0x2, 0x0, 0x1000}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x4, 0x8, 0x4}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x623, 0x7, 0x6, 0x5}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x1, 0xf600, 0x3ff}, 0x0, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8001, 0x4, 0x10000, 0xfffffff6}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xfffffffb, 0x6, 0x9, 0x19f3}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ad, 0x2, 0x1, 0x6, 0xffffffff}, 0x3}}]}, {0xb0, 0x6, "aa8b78fad7b144ce3d95500125b1362ac814fda5bd527ef5f1c77b4be14eda503d72a5993ccb3a2341484b9a8d4296aad0f9d9c47d436d738c5dee440db61db5f192d928c895428d4bd1982e2e69796e26a35ad7d08c38f1ff88d6dd6d3db238d9121eba2108ecceec6b2bda6554f538a419d7bd3f293c9cba30373e3ff33809860f1bc0325115b58c0303ce07a58f4e37d75f0c86960df0f15820af54d632c77a883abe93b29263149915af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xb8, 0x6, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x6eba, 0x7, 0x2, 0x8}}]}, {0x45, 0x6, "6158c900e1ab6a13730f264bc01a8746c603c2d432605491727959fa39d592665ae316054c677f5b9ac4ab00aec4ff3e24154bd8457c938ea233e954bd6f10baf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x198, 0x1, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xfffffffa, 0x20000004, 0x7, 0x6}, 0x3c73}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x2, 0x3, 0x1ff, 0x7fff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10000, 0x4, 0x9f9, 0x61fb}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4c, 0x6, 0x7, 0x3, 0x800}, 0x8bec}}]}, {0xf6, 0x6, "9cb3813ddd65d7d8852b9fdbbeb2953898e69cd6391b0f39e7fb079fcac7d4bb385d0cb2f6f2f7567275efcfec59503f49c681030e9190335f86674aaf368c05d48db72bc3438bfe08fb659abd924254ce2529888cd7c958bfcad89b1069deafae999a995eac144a520812a6a5ad414ff05c3c4e471a0a1995351ac8e56a47c5c99967529afd892154e6894cbc0e32b6035b235fabe1c99766803b5a20a512210bc30bdec0b05028d175ace2d4c3c8883375ac05039806603cfed29c1e2cf1f56b375c1801e81bd167905b63f118160baf552237a533bc96dfb397e1e577b447936064199fda62ac467bff663a0c0f5d45ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0xf8, 0x11, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'ctinfo\x00'}, @TCA_DEF_DATA={0x9, 0x3, '!+@-\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'ctinfo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x14000, 0x6, 0xff, 0x1}}, @TCA_DEF_DATA={0x6, 0x3, '[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9, 0x20000000, 0x4, 0x4}}, @TCA_DEF_DATA={0xb, 0x3, 'ctinfo\x00'}]}, {0x61, 0x6, "86a3a4203838ffc9b94ccb62d442764f144ae117014f3f2450028d05484b8b46f59eef302519e23ac3f8eacf878bf584bb4b129623b5465dae4213e5b40d07884ea986f84783671bf96ee561fe6acdb61d39d65deb2a7f5a14959d1a0b"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 1.88046468s ago: executing program 0 (id=1443): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000001040100000000000000000002000000050001000100000032c19deab076fef59cc491203ab5d63acba39785153154d10754"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={0x22c, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) close(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xc00000, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000100480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) r7 = epoll_create1(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3ee}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x44001) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x25dfdbfd, {0x60, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x800081, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x8, 0xb, 0x1e, 0x6, 0xca11, 0x10000}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8814}, 0x10040090) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.761400017s ago: executing program 4 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2e, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80040003, 0x0, 0x8, 0x0, 0x480}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x890}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc4) close(r2) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="e6", 0x1}], 0x1, 0x0, 0x0, 0x20020090}, 0x10044001) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) 1.613507567s ago: executing program 3 (id=1445): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x0, 0x0, 0x0, 0x0, "bac6734d333dbaf9eeb943ca05f5b02c57a1e6a78fe77ab965f89a84fb7a4a824ef2a166703f1a4b7efde3690af12b82f528c2bab28c2e5a8e607988197c4fb5c65609b0c614ba24c5eb5b95c8ae2f29"}, 0xd8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x4000002, 0x20, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020800}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r3, 0x7fff, 0x30, 0x1, 0x5}, &(0x7f00000000c0)=0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c70800034000000081080002"], 0x168}}, 0x0) 1.550393172s ago: executing program 1 (id=1446): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x24c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x220, 0x2, [@TCA_BPF_ACT={0x21c, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x44, 0x8, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}]}, {0x18, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x78, 0x9, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x101, 0x3, 0x200, {0xf, 0x1, 0x1, 0x0, 0x5, 0xdb0}, {0x70, 0x1, 0x9, 0xda, 0x7, 0x9342}, 0x8, 0x2, 0xf}}]]}, {0xd, 0x6, "94cedea66d85e9b70c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.486127769s ago: executing program 2 (id=1447): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x100000000003f}}], 0x48}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x50) 1.476349444s ago: executing program 0 (id=1448): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="180001000064000000000000000000000000000000000000000000000000cd7590839c5bbe504f5400001cc581ed7b81a6f9e1b8027e1f8aa240264cdd535b0daf531c18114a03cc6d983f9386fb694c451a8280000000f4df7583e9157323953d8810650d7820acb72ad1c8098d4da51ae787315129e79d0da215dee1f93288f25458e4759d631d11c00f60502de88462f4e2e79547416761a510c0fccbb6b70201a8440bec34948df8c9f9689f2b3d38425191d04a918e2321af12824145572546c3f0459f66e20b94fb59f812e827cf55f621f62b9304e7e4cae7695e2fdc7e99ec39952e1d9c05a2e6bd11f9516f"], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='hello', 0x5}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000), 0x100}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004199eb4a9e11de5c5"], 0x50) nanosleep(&(0x7f0000001100)={0x0, 0x5f5e100}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000880)=@ethtool_gstrings={0x1b, 0x1}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) close(r0) nanosleep(&(0x7f0000001200)={0xb}, 0x0) 1.263618582s ago: executing program 4 (id=1449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x20, 0xc}, 0x20) sendmsg$nl_generic(r1, 0x0, 0x40000d4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x30040, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) connect$inet(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f0000002540)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4f42}, @device_b, @device_b, @random="a2b5eee72bf5", {0x0, 0x9}, @value=@ver_80211n={0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x7a6, @random=0x400, 0x81da, @val={0x0, 0x4, @random="d30d98c3"}, @val={0x1, 0x1, [{0x1b}]}, @void, @val={0x4, 0x6, {0x8, 0x7f, 0x9, 0x5cf7}}, @val={0x6, 0x2, 0xf000}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x39, 0x2c, 0x2}}, @void, @void, @void, @void, [{0xdd, 0xe, "1bffab7e7b4ac93000b3a989c3b2"}, {0xdd, 0x19, "10612fe9b238d4e57fee8cfa387b1ed057a57c8caf1e91199a"}, {0xdd, 0x6, "1e842326607e"}, {0xdd, 0x31, "a09ec53d6f3b5819901a7fda1b1e6ae238735e1339a39157b47918edf00decf57e14f9310bd28e9b74c51bd959621c7710"}]}, 0xac) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000"], 0x4c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abbb9b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.223514501s ago: executing program 1 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000003d40), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000cc0)={0x404, r4, 0xecd9ce166114fb7a, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf6, 0x3, "8dc64518b0fac97fcca1ffce2ba1e3a4ac2e6cc24eab359fac1e5aaa59b1c649971f9dc32c39e4d3ad9e7e3f71160955dfc820a84bb11a738b4610c6dd02a369a762b38381b26a119326bb574b9900bd09dafa2b15adccaf2296c3111ed8a37cae2f866813caa20e2d18a78f84fb53780c0d31efba87e77d078c87ef1233991e6e5df20b95f011bca663f8bc4f7b89acf146a53b4c66418dff3a30f7d36cb2efaf7baa1c2f57249a3b9e81a479179786cee995e2035e8dc25c54fa15542cb3bfe43c640c7cb77f775ba8f3b9260a8f9609c3e0bfad2a18271d43d7c916ff5c629d12511f618b69d8eb70f8d47c044719cef8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "fc0548553f0d529bc124a87303fbb6247f8acd4637"}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x413}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x476}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5fd}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe371}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x44050}, 0x810) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003d80)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind(r2, &(0x7f0000000100)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xe, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x2c, 0x6, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r7, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/123, 0x7b}, {&(0x7f0000000a40)=""/4107, 0x100b}, {&(0x7f00000007c0)=""/65, 0x41}, {&(0x7f0000000480)=""/30, 0x1e}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010004000000010000000900000030ef5ac1871d968409e4000014000200765a616e3000000000000000000000000800010002000000060007004e240000"], 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x20048000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) 938.089691ms ago: executing program 0 (id=1451): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3ff, 0x5, {{0x36, 0x4, 0x1, 0x3f, 0xd8, 0x67, 0x0, 0xf, 0x868c1ab12eb57982, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xa5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffdea}, {@multicast2, 0x5}, {@broadcast}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x6, 0x11, "f5540d3a988ebe9b1a59231f338299"}, {0x1, 0xd, "ac43165e12a6559883a10d"}, {0x2, 0xd, "7b4660f043711deb33880d"}, {0x6, 0x3, "e2"}]}, @timestamp_prespec={0x44, 0x24, 0xee, 0x3, 0x8, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1ff}, {@multicast1, 0x4}, {@private=0xa010102, 0xee0}]}, @timestamp_prespec={0x44, 0x3c, 0x84, 0x3, 0x5, [{@multicast2, 0x800}, {@multicast1, 0x3}, {@broadcast, 0x4}, {@broadcast, 0x5}, {@multicast1, 0x81}, {@local, 0x55cd65ab}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}]}, @ssrr={0x89, 0xb, 0x21, [@multicast2, @dev={0xac, 0x14, 0x14, 0x14}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3ff, 0x5, {{0x36, 0x4, 0x1, 0x3f, 0xd8, 0x67, 0x0, 0xf, 0x868c1ab12eb57982, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xa5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffdea}, {@multicast2, 0x5}, {@broadcast}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x6, 0x11, "f5540d3a988ebe9b1a59231f338299"}, {0x1, 0xd, "ac43165e12a6559883a10d"}, {0x2, 0xd, "7b4660f043711deb33880d"}, {0x6, 0x3, "e2"}]}, @timestamp_prespec={0x44, 0x24, 0xee, 0x3, 0x8, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1ff}, {@multicast1, 0x4}, {@private=0xa010102, 0xee0}]}, @timestamp_prespec={0x44, 0x3c, 0x84, 0x3, 0x5, [{@multicast2, 0x800}, {@multicast1, 0x3}, {@broadcast, 0x4}, {@broadcast, 0x5}, {@multicast1, 0x81}, {@local, 0x55cd65ab}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}]}, @ssrr={0x89, 0xb, 0x21, [@multicast2, @dev={0xac, 0x14, 0x14, 0x14}]}]}}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r3, &(0x7f0000000080), 0x10) (async) bind$can_raw(r3, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r2, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r2, 0x215eb000) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa86dd607f000000002b01fe80000000000000000000000000001200000000000000000000120000000001"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0xe4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000380)="6876d01f349eb06fd9cb7c01b4fa913f4647", 0x12}], 0x1) 695.699042ms ago: executing program 1 (id=1452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffe7d, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x500}}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6000}, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000240)="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") close(0x3) 662.298082ms ago: executing program 2 (id=1453): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b114b00000000008510000002000000850000006c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg(r0, &(0x7f0000000500)={&(0x7f00000000c0)=@can={0x1d, r1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="2d73dc4a4b5ca4121c1db1ff0858fb69264a27d960c1ba29791ee103d3c83ea5d4537e0a25c5aac42fb3f3cb9cb0e59e643a7f816de888322e9b5b531d9d510f3788b6ef2d95f05049d539a4dbe6f003e8ff3f3f82bf7658553bdf49e0dcd690db1f72ba374a026a7fbaa5cf7d04352e6d5088d5018e241bd9de9647d39f5b1ca690aaf80b18ad67dd758c6c29e9c8ee61b52e19cac315444bbe10018162659f842d6c078de93056d6c3a6d485d9f76918bc0530db0023a5", 0xb8}, {&(0x7f0000000200)="bbd2b8c115a1649efdc597518fbc5430bbf4771dbb0dac16f9a4a1b2443ce75a5c755a12ccbf0fcbbc917098a3f035460808212a2f9215c274b533f01c27a55ba71f1e97513a8091eb9ed40383baaff70b6521bce446fb0fd6bb9766570a65f65871e4b93b16e1a30ac1a2a0264b479eafac2ab50ce625cbfe8cea6679fc37ef8c501485af88dbd60ce4fca3774c35663ee6f239d2f87e52a9ee408ee39c67fc5930f768c3ae228b936d016c0ffa7bb3338afa76fa7b16c074a22841da5d9c8a6bb6d0734ad03b7c7eee50999e833446377b02798f703646bdec55c4f7720c7b07ce168cd96735836d23eac12e795a06f12f7e40df", 0xf5}, {&(0x7f0000000300)="9f5ee305c1f5f00d4773b101fba8be805e466a879c43438ca98f8a767855c405899dda194cca6a576d6a7cba517354c715a8542726f08f666b092ed1aad553f865e12842680cbcd5829f6c8ac18e67e39f2a8291d28d4cf24343cc506f6674093e006bd659ff2f4197da62d22c67b7820942f9cb5dceee680618b98433723afbeb315430ed33618a2f46139e38c75b48a33eb46726b7861869e7c44b6365c19d134a1fb7b5b088d6d2fe75aa6645d4c89d059253ab014d6705b12c618e0dd5fbec55272ae62ddc7e86fcc9a0", 0xcc}], 0x3}, 0x44080) 532.782438ms ago: executing program 3 (id=1454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x174990ee68771fbc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="0020000000000000000000005ba6b1dce86ddf16", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 371.73577ms ago: executing program 4 (id=1455): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1410, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040006}, 0x40) 258.946788ms ago: executing program 2 (id=1456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x20000, 0xfffffffd}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@getlink={0x20, 0x12, 0x18efde40b3708357, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x20}}, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300), 0x8) socket$inet(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x1, 0x6) r5 = socket(0xa, 0x1, 0x0) unshare(0x28040680) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) ioctl(r5, 0x8901, 0x0) connect(r4, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x75, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0x0, 0xab, "b0", "c670e8", 0x800, "91cfb537e9e9029b0c4141f5fdd4c2a852047c8a64965dbff9ee7adb64ab12d50300af14974f1e0b88665a3fbb6a46245d429bb4f0d6a5d5413b5efe0f4740504ef028b9e776440b413c6bb29395b9ef5e86e71c618d31"}}}}}, &(0x7f00000004c0)={0x0, 0x4, [0xdfd, 0xd16, 0xbda, 0x467]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r7, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 210.06107ms ago: executing program 3 (id=1457): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0xab}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001000010800000d00ca3a422bcc240000000000000000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r3, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x307, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000001040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="14", @ANYRES16=r9, @ANYBLOB="08000200", @ANYRES64, @ANYBLOB="952257de4f57", @ANYRES16=r8, @ANYRES32=r5, @ANYRES64=r6, @ANYBLOB="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", @ANYRES64=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 0s ago: executing program 1 (id=1458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004003}, 0x4894) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x40010) kernel console output (not intermixed with test programs): Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.315011][ T6923] macvlan0: entered promiscuous mode [ 125.341120][ T6948] hsr0 speed is unknown, defaulting to 1000 [ 126.181279][ T2249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.225143][ T6963] FAULT_INJECTION: forcing a failure. [ 126.225143][ T6963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.241255][ T6963] CPU: 0 UID: 0 PID: 6963 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(full) [ 126.241286][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.241309][ T6963] Call Trace: [ 126.241318][ T6963] [ 126.241328][ T6963] dump_stack_lvl+0xe8/0x150 [ 126.241364][ T6963] should_fail_ex+0x410/0x560 [ 126.241404][ T6963] _copy_from_user+0x2d/0xb0 [ 126.241428][ T6963] ___sys_recvmsg+0x173/0x5a0 [ 126.241465][ T6963] ? __pfx____sys_recvmsg+0x10/0x10 [ 126.241495][ T6963] ? lock_acquire+0x115/0x350 [ 126.241548][ T6963] do_recvmmsg+0x31a/0x7f0 [ 126.241582][ T6963] ? __pfx_do_recvmmsg+0x10/0x10 [ 126.241620][ T6963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.241654][ T6963] ? __fget_files+0x3a2/0x420 [ 126.241694][ T6963] __x64_sys_recvmmsg+0x198/0x250 [ 126.241722][ T6963] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 126.241760][ T6963] do_syscall_64+0x166/0x520 [ 126.241791][ T6963] ? trace_irq_disable+0x3b/0x140 [ 126.241812][ T6963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.241834][ T6963] ? clear_bhb_loop+0x70/0xc0 [ 126.241861][ T6963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.241887][ T6963] RIP: 0033:0x7f880779e159 [ 126.241907][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.241925][ T6963] RSP: 002b:00007f88059d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 126.241950][ T6963] RAX: ffffffffffffffda RBX: 00007f8807a26180 RCX: 00007f880779e159 [ 126.241966][ T6963] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000005 [ 126.241980][ T6963] RBP: 00007f88059d5090 R08: 0000000000000000 R09: 0000000000000000 [ 126.241993][ T6963] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 126.242007][ T6963] R13: 00007f8807a26218 R14: 00007f8807a26180 R15: 00007fffb5ae89b8 [ 126.242041][ T6963] [ 126.343348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.346727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.650401][ T6975] netlink: 'syz.1.282': attribute type 11 has an invalid length. [ 126.820972][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.868874][ T6982] __nla_validate_parse: 3 callbacks suppressed [ 126.868939][ T6982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.285'. [ 127.098461][ T6993] syzkaller0: entered promiscuous mode [ 127.104739][ T6993] syzkaller0: entered allmulticast mode [ 127.239339][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.478982][ T7007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.293'. [ 127.505915][ T7005] netlink: 96 bytes leftover after parsing attributes in process `syz.0.291'. [ 127.594156][ T7013] Cannot find set identified by id 65534 to match [ 127.839146][ T7022] vxcan2: entered allmulticast mode [ 127.946870][ T5625] Bluetooth: hci1: connection err: -111 [ 128.005885][ T7031] FAULT_INJECTION: forcing a failure. [ 128.005885][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.005946][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) [ 128.005971][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.006030][ T7031] Call Trace: [ 128.006057][ T7031] [ 128.006088][ T7031] dump_stack_lvl+0xe8/0x150 [ 128.006175][ T7031] should_fail_ex+0x410/0x560 [ 128.006289][ T7031] _copy_from_user+0x2d/0xb0 [ 128.006352][ T7031] ___sys_recvmsg+0x173/0x5a0 [ 128.006435][ T7031] ? __pfx____sys_recvmsg+0x10/0x10 [ 128.006519][ T7031] ? lock_acquire+0x115/0x350 [ 128.006657][ T7031] do_recvmmsg+0x31a/0x7f0 [ 128.006745][ T7031] ? __pfx_do_recvmmsg+0x10/0x10 [ 128.006846][ T7031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.006934][ T7031] ? __fget_files+0x3a2/0x420 [ 128.007040][ T7031] __x64_sys_recvmmsg+0x198/0x250 [ 128.007115][ T7031] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 128.007199][ T7031] do_syscall_64+0x166/0x520 [ 128.007281][ T7031] ? trace_irq_disable+0x3b/0x140 [ 128.007335][ T7031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.007391][ T7031] ? clear_bhb_loop+0x70/0xc0 [ 128.007464][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.007531][ T7031] RIP: 0033:0x7feee2d9e159 [ 128.007591][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.007651][ T7031] RSP: 002b:00007feee3ce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 128.007714][ T7031] RAX: ffffffffffffffda RBX: 00007feee3025fa0 RCX: 00007feee2d9e159 [ 128.007756][ T7031] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000005 [ 128.007789][ T7031] RBP: 00007feee3ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 128.007828][ T7031] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 128.007861][ T7031] R13: 00007feee3026038 R14: 00007feee3025fa0 R15: 00007fff62a014d8 [ 128.007949][ T7031] [ 128.261042][ T2249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.602694][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.305'. [ 128.614663][ T7050] syzkaller0: entered promiscuous mode [ 128.618032][ T7050] syzkaller0: entered allmulticast mode [ 128.628420][ T7039] netlink: zone id is out of range [ 128.628568][ T7039] netlink: zone id is out of range [ 128.628634][ T7039] netlink: zone id is out of range [ 128.833665][ T7055] bridge0: port 3(erspan0) entered blocking state [ 128.841062][ T7055] bridge0: port 3(erspan0) entered disabled state [ 128.848070][ T7055] erspan0: entered allmulticast mode [ 128.857133][ T7055] erspan0: entered promiscuous mode [ 128.871383][ T7055] bridge0: port 3(erspan0) entered blocking state [ 128.871511][ T7055] bridge0: port 3(erspan0) entered forwarding state [ 128.933932][ T7055] xt_ecn: cannot match TCP bits for non-tcp packets [ 128.941863][ T7055] netlink: 3 bytes leftover after parsing attributes in process `syz.2.306'. [ 129.349124][ T7064] netlink: 'syz.0.309': attribute type 16 has an invalid length. [ 129.349182][ T7064] netlink: 'syz.0.309': attribute type 17 has an invalid length. [ 129.674495][ T6014] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.674579][ T6014] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.674662][ T6014] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.674772][ T6014] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.905066][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905192][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 151.541497][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 151.649728][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 151.662684][ T7070] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 151.688218][ T7070] bond1 (unregistering): Released all slaves [ 151.770803][ T7096] FAULT_INJECTION: forcing a failure. [ 151.770803][ T7096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.785380][ T7096] CPU: 0 UID: 0 PID: 7096 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(full) [ 151.785410][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.785424][ T7096] Call Trace: [ 151.785433][ T7096] [ 151.785441][ T7096] dump_stack_lvl+0xe8/0x150 [ 151.785478][ T7096] should_fail_ex+0x410/0x560 [ 151.785523][ T7096] _copy_from_user+0x2d/0xb0 [ 151.785548][ T7096] ___sys_recvmsg+0x173/0x5a0 [ 151.785574][ T7096] ? lockdep_hardirqs_on+0x7b/0x110 [ 151.785610][ T7096] ? __pfx____sys_recvmsg+0x10/0x10 [ 151.785675][ T7096] do_recvmmsg+0x31a/0x7f0 [ 151.785710][ T7096] ? __pfx_do_recvmmsg+0x10/0x10 [ 151.785748][ T7096] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.785785][ T7096] ? __f_unlock_pos+0xd/0x20 [ 151.785822][ T7096] __x64_sys_recvmmsg+0x198/0x250 [ 151.785851][ T7096] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 151.785890][ T7096] do_syscall_64+0x166/0x520 [ 151.785921][ T7096] ? trace_irq_disable+0x3b/0x140 [ 151.785942][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.785965][ T7096] ? clear_bhb_loop+0x70/0xc0 [ 151.785992][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.786014][ T7096] RIP: 0033:0x7feb64d9e159 [ 151.786035][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.786053][ T7096] RSP: 002b:00007feb62fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.786077][ T7096] RAX: ffffffffffffffda RBX: 00007feb65026180 RCX: 00007feb64d9e159 [ 151.786093][ T7096] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000005 [ 151.786107][ T7096] RBP: 00007feb62fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 151.786121][ T7096] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 151.786142][ T7096] R13: 00007feb65026218 R14: 00007feb65026180 R15: 00007fff9e0f4648 [ 151.786177][ T7096] [ 152.138863][ T7087] net_ratelimit: 51 callbacks suppressed [ 152.145199][ T7087] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 152.149355][ T7095] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 152.435979][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 152.719628][ T7123] x_tables: duplicate underflow at hook 3 [ 152.994541][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 153.259350][ T7151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.327'. [ 153.449186][ T7163] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 153.462201][ T7163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.328'. [ 154.155214][ T7175] tipc: Started in network mode [ 154.155275][ T7175] tipc: Node identity ac1414aa, cluster identity 4711 [ 154.177121][ T7175] tipc: New replicast peer: 172.20.20.187 [ 154.178078][ T7175] tipc: Enabled bearer , priority 10 [ 154.204190][ T7178] FAULT_INJECTION: forcing a failure. [ 154.204190][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.204258][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.0.331 Not tainted syzkaller #0 PREEMPT(full) [ 154.204283][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.204296][ T7178] Call Trace: [ 154.204304][ T7178] [ 154.204353][ T7178] dump_stack_lvl+0xe8/0x150 [ 154.204500][ T7178] should_fail_ex+0x410/0x560 [ 154.204612][ T7178] _copy_from_user+0x2d/0xb0 [ 154.204677][ T7178] ___sys_recvmsg+0x173/0x5a0 [ 154.204765][ T7178] ? __pfx____sys_recvmsg+0x10/0x10 [ 154.204841][ T7178] ? lock_acquire+0x115/0x350 [ 154.204984][ T7178] do_recvmmsg+0x31a/0x7f0 [ 154.205072][ T7178] ? __pfx_do_recvmmsg+0x10/0x10 [ 154.205166][ T7178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.205261][ T7178] ? __fget_files+0x3a2/0x420 [ 154.205358][ T7178] __x64_sys_recvmmsg+0x198/0x250 [ 154.205441][ T7178] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 154.205536][ T7178] do_syscall_64+0x166/0x520 [ 154.205613][ T7178] ? trace_irq_disable+0x3b/0x140 [ 154.205667][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.205724][ T7178] ? clear_bhb_loop+0x70/0xc0 [ 154.205804][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.205872][ T7178] RIP: 0033:0x7feee2d9e159 [ 154.205935][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.205987][ T7178] RSP: 002b:00007feee3ce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 154.206050][ T7178] RAX: ffffffffffffffda RBX: 00007feee3025fa0 RCX: 00007feee2d9e159 [ 154.206092][ T7178] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000005 [ 154.206127][ T7178] RBP: 00007feee3ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 154.206159][ T7178] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 154.206191][ T7178] R13: 00007feee3026038 R14: 00007feee3025fa0 R15: 00007fff62a014d8 [ 154.206277][ T7178] [ 154.776869][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 154.791080][ T7192] netlink: 59 bytes leftover after parsing attributes in process `syz.1.335'. [ 154.868763][ T7197] netlink: 148 bytes leftover after parsing attributes in process `syz.4.337'. [ 154.880280][ T7197] netlink: 1 bytes leftover after parsing attributes in process `syz.4.337'. [ 154.880364][ T7197] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 155.304173][ T189] tipc: Node number set to 2886997162 [ 155.332321][ T7207] hsr0 speed is unknown, defaulting to 1000 [ 155.337516][ T7223] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.499066][ T7218] hsr0 speed is unknown, defaulting to 1000 [ 155.704182][ T7239] netlink: 'syz.2.345': attribute type 2 has an invalid length. [ 155.714948][ T7207] netlink: 'syz.1.340': attribute type 3 has an invalid length. [ 155.715460][ T7207] netlink: 'syz.1.340': attribute type 3 has an invalid length. [ 156.416814][ T7238] hsr0 speed is unknown, defaulting to 1000 [ 156.526340][ T7252] wg2 speed is unknown, defaulting to 1000 [ 156.526436][ T7252] wg2 speed is unknown, defaulting to 1000 [ 156.541358][ T7252] wg2 speed is unknown, defaulting to 1000 [ 156.561186][ T7252] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 156.576551][ T7252] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 156.595846][ T7252] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 156.614302][ T7259] SET target dimension over the limit! [ 156.625430][ T7263] FAULT_INJECTION: forcing a failure. [ 156.625430][ T7263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.625495][ T7263] CPU: 1 UID: 0 PID: 7263 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT(full) [ 156.625519][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.625533][ T7263] Call Trace: [ 156.625581][ T7263] [ 156.625608][ T7263] dump_stack_lvl+0xe8/0x150 [ 156.625729][ T7263] should_fail_ex+0x410/0x560 [ 156.625849][ T7263] _copy_from_user+0x2d/0xb0 [ 156.625913][ T7263] ___sys_recvmsg+0x173/0x5a0 [ 156.625991][ T7263] ? __pfx____sys_recvmsg+0x10/0x10 [ 156.626075][ T7263] ? lock_acquire+0x115/0x350 [ 156.626206][ T7263] do_recvmmsg+0x31a/0x7f0 [ 156.626305][ T7263] ? __pfx_do_recvmmsg+0x10/0x10 [ 156.626402][ T7263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.626489][ T7263] ? __fget_files+0x3a2/0x420 [ 156.626598][ T7263] __x64_sys_recvmmsg+0x198/0x250 [ 156.626666][ T7263] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 156.626774][ T7263] do_syscall_64+0x166/0x520 [ 156.626859][ T7263] ? trace_irq_disable+0x3b/0x140 [ 156.626912][ T7263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.626967][ T7263] ? clear_bhb_loop+0x70/0xc0 [ 156.627047][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.627117][ T7263] RIP: 0033:0x7f880779e159 [ 156.627177][ T7263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.627229][ T7263] RSP: 002b:00007f88059d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 156.627280][ T7263] RAX: ffffffffffffffda RBX: 00007f8807a26180 RCX: 00007f880779e159 [ 156.627323][ T7263] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000005 [ 156.627365][ T7263] RBP: 00007f88059d5090 R08: 0000000000000000 R09: 0000000000000000 [ 156.627398][ T7263] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 156.627431][ T7263] R13: 00007f8807a26218 R14: 00007f8807a26180 R15: 00007fffb5ae89b8 [ 156.627519][ T7263] [ 156.842336][ T7252] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.429764][ T7252] wg2 speed is unknown, defaulting to 1000 [ 157.578046][ T7288] __nla_validate_parse: 4 callbacks suppressed [ 157.578093][ T7288] netlink: 252 bytes leftover after parsing attributes in process `syz.3.350'. [ 157.670061][ T7252] wg2 speed is unknown, defaulting to 1000 [ 157.715479][ T7252] wg2 speed is unknown, defaulting to 1000 [ 157.735626][ T7252] wg2 speed is unknown, defaulting to 1000 [ 158.176666][ T7252] wg2 speed is unknown, defaulting to 1000 [ 158.245748][ T7314] netlink: 'syz.3.355': attribute type 3 has an invalid length. [ 158.253750][ T7252] wg2 speed is unknown, defaulting to 1000 [ 158.262364][ T7252] wg2 speed is unknown, defaulting to 1000 [ 158.580226][ T7328] dummy0: entered allmulticast mode [ 158.981121][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 159.370348][ T7337] ip6gre1: entered promiscuous mode [ 159.370393][ T7337] ip6gre1: entered allmulticast mode [ 159.500264][ T7348] syzkaller0: entered promiscuous mode [ 159.505953][ T7348] syzkaller0: entered allmulticast mode [ 161.301536][ T7342] hsr0 speed is unknown, defaulting to 1000 [ 161.324854][ T7364] batman_adv: batadv0: Adding interface: macvtap1 [ 161.324901][ T7364] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.324930][ T7364] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 161.361264][ T7342] wg2 speed is unknown, defaulting to 1000 [ 161.948375][ T7393] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 162.367479][ T7394] syzkaller0: entered promiscuous mode [ 162.367526][ T7394] syzkaller0: entered allmulticast mode [ 162.470338][ T7391] hsr0 speed is unknown, defaulting to 1000 [ 162.482605][ T7391] wg2 speed is unknown, defaulting to 1000 [ 162.600241][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 162.909031][ T7415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.010148][ T7434] xt_MASQUERADE: bad MAP_IPS. [ 163.197821][ T7443] openvswitch: netlink: IP tunnel dst address not specified [ 163.848060][ T7466] xt_socket: unknown flags 0x4c [ 164.599264][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 164.608441][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.608471][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.631625][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.639287][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.648569][ T7493] batman_adv: batadv0: Removing interface: macvtap1 [ 164.892692][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.401'. [ 165.183338][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 165.209764][ T52] block nbd0: Receive control failed (result -32) [ 165.210104][ T5625] block nbd0: Receive control failed (result -32) [ 165.755643][ T7533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.409'. [ 166.007502][ T7546] netlink: 'syz.0.415': attribute type 32 has an invalid length. [ 166.042953][ T7543] macvlan0: entered promiscuous mode [ 166.067708][ T7544] netlink: 64 bytes leftover after parsing attributes in process `syz.2.413'. [ 166.205659][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 166.300112][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.311287][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.334474][ T7561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.420'. [ 166.344748][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.344774][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.613283][ T7567] syzkaller1: entered allmulticast mode [ 166.716046][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 166.778360][ T7575] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.859796][ T7580] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 167.349643][ T7601] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 167.522807][ T7611] bond1: (slave bond_slave_1): Device is not our slave [ 167.522856][ T7611] bond1: option active_slave: invalid value (bond_slave_1) [ 167.539742][ T7611] bond1 (unregistering): Released all slaves [ 167.700335][ T7622] openvswitch: netlink: IP tunnel dst address not specified [ 167.777545][ T7625] netlink: 'syz.4.438': attribute type 10 has an invalid length. [ 167.804505][ T7627] netlink: 64 bytes leftover after parsing attributes in process `syz.2.435'. [ 167.816062][ T7630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.435'. [ 167.855010][ T7625] team0: Port device dummy0 added [ 167.871700][ T7631] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 168.143966][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.441'. [ 168.200258][ T7653] tipc: Enabled bearer , priority 10 [ 168.218372][ T7654] tipc: Disabling bearer [ 168.248392][ T7654] netlink: 'syz.2.443': attribute type 16 has an invalid length. [ 168.257178][ T7654] netlink: 'syz.2.443': attribute type 4 has an invalid length. [ 168.257226][ T7654] netlink: 63974 bytes leftover after parsing attributes in process `syz.2.443'. [ 168.294025][ T7658] netlink: 'syz.3.441': attribute type 8 has an invalid length. [ 168.604906][ T7668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.446'. [ 168.633706][ T6012] IPVS: starting estimator thread 0... [ 168.640653][ T7666] nbd4: detected capacity change from 0 to 63 [ 168.644397][ T7668] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 168.681855][ T7666] block nbd4: NBD_DISCONNECT [ 168.699156][ T7666] block nbd4: Disconnected due to user request. [ 168.699201][ T7666] block nbd4: shutting down sockets [ 168.719790][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 168.720565][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 168.720886][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 168.721108][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 168.721335][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 168.734779][ T7670] IPVS: using max 34 ests per chain, 81600 per kthread [ 168.782323][ T1717] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 168.782404][ T1717] Buffer I/O error on dev nbd4, logical block 0, async page read [ 168.793515][ T1717] Buffer I/O error on dev nbd4, logical block 1, async page read [ 168.793580][ T1717] Buffer I/O error on dev nbd4, logical block 2, async page read [ 168.793632][ T1717] Buffer I/O error on dev nbd4, logical block 3, async page read [ 168.807698][ T1717] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 168.807749][ T1717] Buffer I/O error on dev nbd4, logical block 0, async page read [ 168.807768][ T1717] Buffer I/O error on dev nbd4, logical block 1, async page read [ 168.839033][ T1717] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 168.842501][ T1717] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 168.843379][ T1717] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 168.843940][ T1717] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 168.846329][ T1717] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 168.854981][ T1717] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 168.856484][ T7145] ldm_validate_partition_table(): Disk read failed. [ 168.856907][ T1717] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 168.870126][ T7145] Dev nbd4: unable to read RDB block 0 [ 168.932541][ T7145] nbd4: unable to read partition table [ 169.004495][ T7145] ldm_validate_partition_table(): Disk read failed. [ 169.008166][ T7145] Dev nbd4: unable to read RDB block 0 [ 169.013904][ T7145] nbd4: unable to read partition table [ 169.219577][ T7680] netlink: 176 bytes leftover after parsing attributes in process `syz.2.450'. [ 169.392176][ T7688] 8021q: VLANs not supported on ip6_vti0 [ 169.636591][ T7696] tipc: Started in network mode [ 169.651305][ T7696] tipc: Node identity 16778abaadab, cluster identity 4711 [ 169.654855][ T7696] tipc: Enabled bearer , priority 0 [ 169.688608][ T7696] syzkaller0: entered promiscuous mode [ 169.688662][ T7696] syzkaller0: entered allmulticast mode [ 169.730921][ T7700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.455'. [ 169.757711][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.456'. [ 169.785534][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 169.794909][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 169.807924][ T7696] tipc: Resetting bearer [ 169.869484][ T7695] tipc: Resetting bearer [ 169.913624][ T7695] tipc: Disabling bearer [ 171.022789][ T7756] vlan2: entered promiscuous mode [ 171.022845][ T7756] gretap0: entered promiscuous mode [ 171.566273][ T7775] pim6reg: entered allmulticast mode [ 171.602730][ T7775] pim6reg: left allmulticast mode [ 171.748848][ T7783] netlink: 'syz.4.473': attribute type 4 has an invalid length. [ 171.878975][ T7781] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 172.038196][ T7796] hsr0 speed is unknown, defaulting to 1000 [ 172.052256][ T7796] wg2 speed is unknown, defaulting to 1000 [ 172.143233][ T7802] openvswitch: netlink: Missing key (keys=40, expected=100) [ 172.784001][ T7816] netlink: 'syz.0.480': attribute type 15 has an invalid length. [ 173.065975][ T7834] sctp: Trying to GSO but underlying device doesn't support it. [ 173.277161][ T7851] macsec1: entered promiscuous mode [ 173.277213][ T7851] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 173.314274][ T7851] macsec1: entered allmulticast mode [ 173.314340][ T7851] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 173.344139][ T7851] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 173.393277][ T7864] __nla_validate_parse: 1 callbacks suppressed [ 173.393339][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 173.510044][ T7851] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 173.571125][ T31] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 173.589187][ T7862] veth0: entered promiscuous mode [ 173.675207][ T7873] netlink: 566 bytes leftover after parsing attributes in process `syz.3.491'. [ 173.689736][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 173.869445][ T7855] veth0: left promiscuous mode [ 173.986728][ T7884] netlink: 'syz.4.492': attribute type 21 has an invalid length. [ 173.986839][ T7884] netlink: 132 bytes leftover after parsing attributes in process `syz.4.492'. [ 174.149036][ T7889] syzkaller0: entered promiscuous mode [ 174.155054][ T7889] syzkaller0: entered allmulticast mode [ 174.475670][ T7894] syzkaller0: entered promiscuous mode [ 174.475716][ T7894] syzkaller0: entered allmulticast mode [ 174.505173][ T7912] Bluetooth: ISO socket layer initialized [ 174.689816][ T7917] bond0: (slave gretap0): Opening slave failed [ 174.896638][ T7924] syzkaller0: entered promiscuous mode [ 174.896687][ T7924] syzkaller0: entered allmulticast mode [ 175.229943][ T7940] syzkaller0: entered promiscuous mode [ 175.229987][ T7940] syzkaller0: entered allmulticast mode [ 175.413384][ T7959] tipc: Started in network mode [ 175.413442][ T7959] tipc: Node identity ac1414aa, cluster identity 4711 [ 175.415870][ T7959] tipc: New replicast peer: 172.20.20.187 [ 175.417284][ T7959] tipc: Enabled bearer , priority 10 [ 175.810665][ T7963] Cannot find del_set index 2 as target [ 175.933131][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 175.947605][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.515'. [ 175.948392][ T5625] block nbd1: Receive control failed (result -1) [ 176.532632][ T189] tipc: Node number set to 2886997162 [ 176.678953][ T7995] vlan2: entered promiscuous mode [ 176.684308][ T7995] hsr0: entered promiscuous mode [ 176.689796][ T7995] vlan2: entered allmulticast mode [ 176.695360][ T7995] hsr0: entered allmulticast mode [ 176.695393][ T7995] hsr_slave_0: entered allmulticast mode [ 176.695415][ T7995] hsr_slave_1: entered allmulticast mode [ 177.160343][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'. [ 177.173439][ T8015] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.206924][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.218090][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.231793][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.242314][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.255496][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.269035][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.269125][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.269160][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.269193][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.269225][ T8021] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 177.434442][ T8013] netlink: 'syz.1.523': attribute type 5 has an invalid length. [ 177.446670][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 178.034675][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'. [ 178.260246][ T8065] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 178.307521][ T8060] syzkaller0: entered promiscuous mode [ 178.307590][ T8060] syzkaller0: entered allmulticast mode [ 178.598465][ T8068] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 178.615586][ T8068] bond5 (unregistering): Released all slaves [ 179.464976][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.541'. [ 180.404824][ T8092] siw: device registration error -23 [ 180.584355][ T8100] netlink: 'syz.2.545': attribute type 2 has an invalid length. [ 180.637227][ T8102] xt_bpf: check failed: parse error [ 180.655831][ T8102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.707237][ T8102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.168577][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 181.302930][ T8127] netlink: 'syz.4.552': attribute type 2 has an invalid length. [ 181.302973][ T8127] netlink: 'syz.4.552': attribute type 11 has an invalid length. [ 181.302989][ T8127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.552'. [ 181.464359][ T8134] pim6reg1: entered promiscuous mode [ 181.464411][ T8134] pim6reg1: entered allmulticast mode [ 182.390374][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 183.331750][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 183.491390][ T8181] netlink: 'syz.2.565': attribute type 2 has an invalid length. [ 183.491434][ T8181] netlink: 'syz.2.565': attribute type 11 has an invalid length. [ 183.491468][ T8181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.565'. [ 183.579155][ T8184] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 183.633243][ T8184] bond2: (slave geneve2): making interface the new active one [ 183.642141][ T8184] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 183.660837][ T6020] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.676083][ T8106] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.676162][ T8106] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.745500][ T8189] nftables ruleset with unbound set [ 183.886948][ T8197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.570'. [ 183.887558][ T8197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.570'. [ 183.897196][ T8197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.570'. [ 183.907761][ T8197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.570'. [ 184.189080][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805927fc00: rx timeout, send abort [ 184.194873][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805927c000: rx timeout, send abort [ 184.196380][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805927fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.197732][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805927c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.268185][ T8210] vlan3: entered promiscuous mode [ 184.268241][ T8210] dummy0: entered promiscuous mode [ 184.434782][ T8215] netlink: 'syz.4.573': attribute type 2 has an invalid length. [ 184.443290][ T8215] netlink: 'syz.4.573': attribute type 11 has an invalid length. [ 184.642424][ T8221] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 184.668686][ T8221] bond1 (unregistering): Released all slaves [ 184.683468][ T8229] __nla_validate_parse: 62 callbacks suppressed [ 184.692173][ T8229] netlink: 48 bytes leftover after parsing attributes in process `syz.2.576'. [ 184.792864][ T8230] tipc: Started in network mode [ 184.798056][ T8230] tipc: Node identity 1e3a9312408, cluster identity 4711 [ 184.809040][ T8230] tipc: Enabled bearer , priority 0 [ 184.881157][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.117301][ T8246] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 185.132917][ T6020] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 185.144159][ T8226] tipc: Resetting bearer [ 185.179878][ T8235] syzkaller0: entered promiscuous mode [ 185.179942][ T8235] syzkaller0: entered allmulticast mode [ 185.228400][ T8220] tipc: Resetting bearer [ 185.293454][ T8220] tipc: Disabling bearer [ 185.394372][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 185.451987][ T8246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.469741][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 185.752227][ T8275] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.830234][ T8276] hsr0 speed is unknown, defaulting to 1000 [ 185.858181][ T8276] wg2 speed is unknown, defaulting to 1000 [ 185.956990][ T32] audit: type=1804 audit(1789018505.486:2): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.588" name="/newroot/103/cgroup.controllers" dev="tmpfs" ino=547 res=1 errno=0 [ 185.981364][ T32] audit: type=1800 audit(1789018505.496:3): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.588" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0 [ 186.102448][ T8285] netlink: 'syz.2.589': attribute type 2 has an invalid length. [ 186.102490][ T8285] netlink: 'syz.2.589': attribute type 11 has an invalid length. [ 186.102521][ T8285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.589'. [ 186.807832][ T27] IPVS: starting estimator thread 0... [ 186.821584][ T8301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.822741][ T8301] bridge0: port 4(bond2) entered blocking state [ 186.822879][ T8301] bridge0: port 4(bond2) entered disabled state [ 186.823607][ T8301] bond2: entered allmulticast mode [ 186.833337][ T8301] bond2: entered promiscuous mode [ 186.836617][ T8301] bridge0: port 4(bond2) entered blocking state [ 186.836789][ T8301] bridge0: port 4(bond2) entered forwarding state [ 186.890203][ T8306] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 186.910704][ T8313] IPVS: using max 25 ests per chain, 60000 per kthread [ 187.099137][ T8316] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 187.279335][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 187.333702][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 187.521523][ T8342] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 187.521566][ T8342] netlink: 224 bytes leftover after parsing attributes in process `syz.0.600'. [ 187.848698][ T6016] bridge0: port 4(bond2) entered disabled state [ 187.889760][ T8355] netlink: 'syz.1.603': attribute type 2 has an invalid length. [ 187.889807][ T8355] netlink: 132 bytes leftover after parsing attributes in process `syz.1.603'. [ 187.970533][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 188.232573][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 188.258731][ T8365] syzkaller1: entered promiscuous mode [ 188.258795][ T8365] syzkaller1: entered allmulticast mode [ 188.656910][ T8389] tipc: Enabling of bearer rejected, failed to enable media [ 188.675335][ T8389] validate_nla: 1 callbacks suppressed [ 188.683682][ T8389] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 188.882790][ T8399] netlink: 'syz.2.610': attribute type 6 has an invalid length. [ 189.060744][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 189.289231][ T8398] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 189.354907][ T8398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.692973][ T8438] veth0_to_bond: entered allmulticast mode [ 189.713813][ T8435] netlink: 'syz.3.616': attribute type 2 has an invalid length. [ 189.722420][ T8435] netlink: 'syz.3.616': attribute type 11 has an invalid length. [ 189.722473][ T8435] __nla_validate_parse: 4 callbacks suppressed [ 189.722490][ T8435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.616'. [ 189.772837][ T8440] FAULT_INJECTION: forcing a failure. [ 189.772837][ T8440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.772895][ T8440] CPU: 1 UID: 0 PID: 8440 Comm: syz.1.619 Not tainted syzkaller #0 PREEMPT(full) [ 189.772922][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.772934][ T8440] Call Trace: [ 189.772942][ T8440] [ 189.772952][ T8440] dump_stack_lvl+0xe8/0x150 [ 189.773080][ T8440] should_fail_ex+0x410/0x560 [ 189.773183][ T8440] _copy_from_iter+0x1d3/0x1660 [ 189.773266][ T8440] ? __alloc_skb+0x27a/0x7a0 [ 189.773364][ T8440] ? __alloc_skb+0x27a/0x7a0 [ 189.773457][ T8440] ? __alloc_skb+0x27a/0x7a0 [ 189.773541][ T8440] ? __pfx__copy_from_iter+0x10/0x10 [ 189.773620][ T8440] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 189.773706][ T8440] ? __alloc_skb+0x27a/0x7a0 [ 189.773787][ T8440] ? __alloc_skb+0x27a/0x7a0 [ 189.773887][ T8440] ? netlink_sendmsg+0x650/0xb40 [ 189.773954][ T8440] ? skb_put+0x112/0x210 [ 189.774019][ T8440] netlink_sendmsg+0x6c0/0xb40 [ 189.774116][ T8440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.774212][ T8440] ? apparmor_socket_sendmsg+0x98/0x360 [ 189.774307][ T8440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.774380][ T8440] sock_sendmsg_nosec+0x13a/0x180 [ 189.774466][ T8440] ____sys_sendmsg+0x54e/0x850 [ 189.774564][ T8440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.774659][ T8440] ? import_iovec+0x73/0xa0 [ 189.774727][ T8440] ___sys_sendmsg+0x2a5/0x360 [ 189.774790][ T8440] ? __lock_acquire+0x6df/0x2e50 [ 189.774855][ T8440] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.775019][ T8440] ? __fget_files+0x2a/0x420 [ 189.775085][ T8440] ? __fget_files+0x3a2/0x420 [ 189.775191][ T8440] __x64_sys_sendmsg+0x1b1/0x290 [ 189.775261][ T8440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.775384][ T8440] do_syscall_64+0x166/0x520 [ 189.775470][ T8440] ? trace_irq_disable+0x3b/0x140 [ 189.775525][ T8440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.775581][ T8440] ? clear_bhb_loop+0x70/0xc0 [ 189.775647][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.775703][ T8440] RIP: 0033:0x7f9c4579e159 [ 189.775765][ T8440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.775813][ T8440] RSP: 002b:00007f9c46607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.775878][ T8440] RAX: ffffffffffffffda RBX: 00007f9c45a25fa0 RCX: 00007f9c4579e159 [ 189.775931][ T8440] RDX: 0000000004040010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 189.775974][ T8440] RBP: 00007f9c46607090 R08: 0000000000000000 R09: 0000000000000000 [ 189.776017][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.776051][ T8440] R13: 00007f9c45a26038 R14: 00007f9c45a25fa0 R15: 00007ffcda990ca8 [ 189.776182][ T8440] [ 190.325856][ T8449] netlink: 68 bytes leftover after parsing attributes in process `syz.1.624'. [ 190.325901][ T8449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.624'. [ 190.325937][ T8449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.624'. [ 190.379924][ T8449] syzkaller0: entered promiscuous mode [ 190.386074][ T8449] syzkaller0: entered allmulticast mode [ 190.528998][ T8451] syzkaller0: entered promiscuous mode [ 190.529047][ T8451] syzkaller0: entered allmulticast mode [ 191.437324][ T8498] team0: entered promiscuous mode [ 191.437367][ T8498] team_slave_0: entered promiscuous mode [ 191.437594][ T8498] team_slave_1: entered promiscuous mode [ 191.437766][ T8498] team0: entered allmulticast mode [ 191.437785][ T8498] team_slave_0: entered allmulticast mode [ 191.437804][ T8498] team_slave_1: entered allmulticast mode [ 191.449304][ T8493] hsr0 speed is unknown, defaulting to 1000 [ 191.491901][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 191.513022][ T8500] veth0_to_bond: left allmulticast mode [ 191.524957][ T8493] wg2 speed is unknown, defaulting to 1000 [ 191.565238][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 191.752354][ T8494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 191.909022][ T8507] openvswitch: netlink: IP tunnel dst address not specified [ 191.909080][ T8507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.456557][ T8527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 192.468605][ T8528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 192.498880][ T8526] netlink: 'syz.3.633': attribute type 2 has an invalid length. [ 192.498932][ T8526] netlink: 'syz.3.633': attribute type 11 has an invalid length. [ 192.500211][ T8526] netlink: 132 bytes leftover after parsing attributes in process `syz.3.633'. [ 192.585135][ T8526] veth1_macvtap: left promiscuous mode [ 193.197131][ T1014] IPVS: starting estimator thread 0... [ 193.198904][ T8558] pim6reg: entered allmulticast mode [ 193.224249][ T8556] pim6reg: left allmulticast mode [ 193.300897][ T8560] IPVS: using max 27 ests per chain, 64800 per kthread [ 193.848055][ T8572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.885761][ T8572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.924306][ T8572] bond0 (unregistering): Released all slaves [ 194.338433][ T8588] netlink: 'syz.1.651': attribute type 2 has an invalid length. [ 194.338482][ T8588] netlink: 'syz.1.651': attribute type 11 has an invalid length. [ 194.348155][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348214][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.917904][ T8614] veth0: entered promiscuous mode [ 194.943210][ T8614] bond0: entered promiscuous mode [ 194.943249][ T8614] bond_slave_0: entered promiscuous mode [ 194.943419][ T8614] bond_slave_1: entered promiscuous mode [ 194.966816][ T8611] bond0: left promiscuous mode [ 194.966857][ T8611] bond_slave_0: left promiscuous mode [ 194.967042][ T8611] bond_slave_1: left promiscuous mode [ 194.988209][ T8611] veth0: left promiscuous mode [ 195.257675][ T8630] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 195.344204][ T8635] xt_IDLETIMER: timeout value is too big [ 195.714619][ T8652] netlink: 'syz.4.668': attribute type 2 has an invalid length. [ 195.724241][ T8652] netlink: 'syz.4.668': attribute type 11 has an invalid length. [ 195.732342][ T8652] __nla_validate_parse: 6 callbacks suppressed [ 195.732361][ T8652] netlink: 132 bytes leftover after parsing attributes in process `syz.4.668'. [ 195.773682][ T8652] FAULT_INJECTION: forcing a failure. [ 195.773682][ T8652] name failslab, interval 1, probability 0, space 0, times 1 [ 195.773735][ T8652] CPU: 1 UID: 0 PID: 8652 Comm: syz.4.668 Not tainted syzkaller #0 PREEMPT(full) [ 195.773761][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.773775][ T8652] Call Trace: [ 195.773784][ T8652] [ 195.773793][ T8652] dump_stack_lvl+0xe8/0x150 [ 195.773830][ T8652] should_fail_ex+0x410/0x560 [ 195.773868][ T8652] ? __alloc_skb+0x1db/0x7a0 [ 195.773900][ T8652] should_failslab+0xa8/0x100 [ 195.773928][ T8652] ? __alloc_skb+0x1db/0x7a0 [ 195.773961][ T8652] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 195.773995][ T8652] ? __alloc_skb+0x18d/0x7a0 [ 195.774028][ T8652] ? __alloc_skb+0x1db/0x7a0 [ 195.774068][ T8652] __alloc_skb+0x1db/0x7a0 [ 195.774106][ T8652] pfkey_sendmsg+0xddc/0x11d0 [ 195.774145][ T8652] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 195.774194][ T8652] ? aa_sock_msg_perm+0x144/0x210 [ 195.774223][ T8652] ? apparmor_socket_sendmsg+0x98/0x360 [ 195.774259][ T8652] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 195.774282][ T8652] sock_sendmsg_nosec+0x13a/0x180 [ 195.774315][ T8652] ____sys_sendmsg+0x54e/0x850 [ 195.774345][ T8652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.774378][ T8652] ? import_iovec+0x73/0xa0 [ 195.774404][ T8652] ___sys_sendmsg+0x2a5/0x360 [ 195.774426][ T8652] ? __lock_acquire+0x6df/0x2e50 [ 195.774454][ T8652] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.774484][ T8652] ? kstrtouint+0x6e/0xe0 [ 195.774544][ T8652] ? __fget_files+0x2a/0x420 [ 195.774572][ T8652] ? __fget_files+0x3a2/0x420 [ 195.774613][ T8652] __sys_sendmmsg+0x273/0x4d0 [ 195.774643][ T8652] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.774687][ T8652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.774761][ T8652] ? ksys_write+0x242/0x270 [ 195.774879][ T8652] ? __pfx_ksys_write+0x10/0x10 [ 195.774997][ T8652] __x64_sys_sendmmsg+0xa0/0xc0 [ 195.775065][ T8652] do_syscall_64+0x166/0x520 [ 195.775154][ T8652] ? trace_irq_disable+0x3b/0x140 [ 195.775210][ T8652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.775272][ T8652] ? clear_bhb_loop+0x70/0xc0 [ 195.775347][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.775403][ T8652] RIP: 0033:0x7feb64d9e159 [ 195.775463][ T8652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.775506][ T8652] RSP: 002b:00007feb62ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 195.775568][ T8652] RAX: ffffffffffffffda RBX: 00007feb65025fa0 RCX: 00007feb64d9e159 [ 195.775611][ T8652] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 000000000000000a [ 195.775644][ T8652] RBP: 00007feb62ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.775685][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.775718][ T8652] R13: 00007feb65026038 R14: 00007feb65025fa0 R15: 00007fff9e0f4648 [ 195.775811][ T8652] [ 196.164282][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 196.357462][ T8676] netlink: 'syz.3.675': attribute type 2 has an invalid length. [ 196.603868][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 196.887811][ T8685] hsr0 speed is unknown, defaulting to 1000 [ 196.895449][ T8685] wg2 speed is unknown, defaulting to 1000 [ 197.113130][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 197.255630][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 197.264933][ T8716] netlink: 'syz.3.686': attribute type 12 has an invalid length. [ 197.307535][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.681'. [ 197.388341][ T27] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.393519][ T27] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.393721][ T27] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.408618][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 197.408707][ T8716] netlink: 'syz.3.686': attribute type 12 has an invalid length. [ 197.710153][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 197.885458][ T8729] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 197.885505][ T8729] netlink: 2 bytes leftover after parsing attributes in process `syz.0.689'. [ 197.996017][ T8729] team0: Device wg2 is of different type [ 198.286711][ T8750] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 198.315605][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 198.333438][ T8750] gtp0: entered promiscuous mode [ 198.333478][ T8750] gtp0: entered allmulticast mode [ 198.358748][ T8750] team0: Device gtp0 is of different type [ 198.467806][ T8747] bond_slave_0: entered promiscuous mode [ 198.931586][ T8775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.203744][ T8785] rds_bind: 23 callbacks suppressed [ 199.214936][ T8785] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 199.577459][ T8786] can: request_module (can-proto-0) failed. [ 199.993738][ T8814] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 200.033631][ T8814] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.044185][ T8814] bond6: entered allmulticast mode [ 200.068532][ T8814] bond6: (slave ip6gretap2): making interface the new active one [ 200.068578][ T8814] ip6gretap2: entered allmulticast mode [ 200.082359][ T8814] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 200.192379][ T8811] infiniband syz0: set down [ 200.197488][ T8811] infiniband syz0: added ipvlan1 [ 200.256134][ T8811] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 200.256212][ T8811] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 200.256301][ T8811] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 200.349444][ T8811] RDS/IB: syz0: added [ 200.359747][ T8811] smc: adding ib device syz0 with port count 1 [ 200.381539][ T8811] smc: ib device syz0 port 1 has no pnetid [ 200.623768][ T8825] xt_TCPMSS: Only works on TCP SYN packets [ 200.625176][ T8825] xt_TCPMSS: Only works on TCP SYN packets [ 200.840653][ T8834] __nla_validate_parse: 3 callbacks suppressed [ 200.840702][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 201.102509][ T8836] vlan0: left promiscuous mode [ 201.141863][ T8836] bond1: left promiscuous mode [ 201.146801][ T8836] ip6gre1: left promiscuous mode [ 201.388592][ T8855] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 203.138197][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.723'. [ 203.844403][ T8902] sctp: [Deprecated]: syz.0.728 (pid 8902) Use of int in max_burst socket option. [ 203.844403][ T8902] Use struct sctp_assoc_value instead [ 203.906653][ T8902] syzkaller0: entered promiscuous mode [ 203.917665][ T8902] syzkaller0: entered allmulticast mode [ 203.948797][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.729'. [ 204.166518][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 204.231878][ T8912] tap0: tun_chr_ioctl cmd 1074025672 [ 204.231927][ T8912] tap0: ignored: set checksum disabled [ 204.249201][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 204.995305][ T8936] netlink: 284 bytes leftover after parsing attributes in process `syz.2.738'. [ 205.123113][ T8931] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 205.208545][ T8931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.239483][ T8966] bond3: entered promiscuous mode [ 205.239528][ T8966] bond3: entered allmulticast mode [ 205.291710][ T8931] macvlan3: entered promiscuous mode [ 205.291767][ T8931] macvlan3: entered allmulticast mode [ 205.339390][ T8961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.739'. [ 205.407905][ T8961] netlink: 'syz.4.739': attribute type 2 has an invalid length. [ 205.407952][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 205.961700][ T9046] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 205.977598][ T9043] netlink: 'syz.4.743': attribute type 2 has an invalid length. [ 205.977649][ T9043] netlink: 'syz.4.743': attribute type 11 has an invalid length. [ 205.977684][ T9043] netlink: 132 bytes leftover after parsing attributes in process `syz.4.743'. [ 206.126079][ T8938] smbdirect: ib_dev[syz1] removed [ 206.427228][ T5623] block nbd2: Receive control failed (result -32) [ 206.429602][ T52] block nbd2: Receive control failed (result -32) [ 206.676401][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 206.676424][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 206.676490][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 206.676580][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 206.734088][ T9063] macsec2: entered promiscuous mode [ 206.750877][ T9063] hsr0: entered promiscuous mode [ 206.813887][ T9067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.748'. [ 207.055986][ T9067] tipc: New replicast peer: 172.20.20.187 [ 207.082053][ T9067] tipc: Enabled bearer , priority 10 [ 208.052917][ T5741] tipc: Node number set to 1589285650 [ 208.629091][ T9112] tipc: Enabled bearer , priority 0 [ 208.842857][ T9101] syzkaller0: entered promiscuous mode [ 208.848643][ T9101] syzkaller0: entered allmulticast mode [ 208.855527][ T9101] tipc: Resetting bearer [ 208.928784][ T9099] tipc: Resetting bearer [ 209.118037][ T9134] netlink: 52 bytes leftover after parsing attributes in process `syz.4.764'. [ 209.135935][ T9134] netlink: 'syz.4.764': attribute type 11 has an invalid length. [ 209.135987][ T9134] netlink: 228 bytes leftover after parsing attributes in process `syz.4.764'. [ 209.146812][ T9134] netlink: 48 bytes leftover after parsing attributes in process `syz.4.764'. [ 209.557054][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'. [ 209.585743][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'. [ 209.977700][ T7672] udevd[7672]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 212.124644][ T9099] tipc: Disabling bearer [ 212.209735][ T9137] gre0: entered promiscuous mode [ 212.209779][ T9137] gre0: entered allmulticast mode [ 212.493344][ T9130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.537210][ T9166] syz_tun: entered allmulticast mode [ 212.569244][ T9167] dvmrp6: entered allmulticast mode [ 212.590656][ T9165] wg2 speed is unknown, defaulting to 1000 [ 212.738671][ T9130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.792292][ T9160] syz_tun: left allmulticast mode [ 212.979138][ T9130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.195511][ T9130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.251380][ T9179] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 213.262108][ T9179] openvswitch: netlink: Missing valid actions attribute. [ 213.269493][ T9179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.516242][ T1014] tipc: Subscription rejected, illegal request [ 213.573326][ T9185] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 213.584909][ T9185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.775'. [ 213.591388][ T6014] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.610045][ T9185] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 213.642936][ T5970] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.658753][ T9185] team0: Device vxcan0 is of different type [ 213.931146][ T1014] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.160505][ T1014] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.207534][ T5625] block nbd3: Receive control failed (result -32) [ 214.214702][ T5626] block nbd3: Receive control failed (result -32) [ 214.813271][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 214.873155][ T9233] netlink: zone id is out of range [ 214.873200][ T9233] netlink: zone id is out of range [ 214.873225][ T9233] netlink: zone id is out of range [ 214.873237][ T9233] netlink: zone id is out of range [ 214.873249][ T9233] netlink: zone id is out of range [ 214.873260][ T9233] netlink: zone id is out of range [ 214.876556][ T9233] netlink: zone id is out of range [ 214.876605][ T9233] netlink: zone id is out of range [ 215.277879][ T9228] bridge0: port 3(erspan0) entered disabled state [ 215.471500][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.478669][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.900220][ T9228] tipc: Resetting bearer [ 215.966049][ T9228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.021381][ T9228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.573500][ T9228] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 216.581963][ T9228] ip6gretap1: left allmulticast mode [ 216.827472][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 216.975943][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.793'. [ 217.003697][ T1014] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.005678][ T5970] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.005802][ T5970] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.005913][ T5970] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.018443][ T9268] netlink: 'syz.2.792': attribute type 1 has an invalid length. [ 217.129321][ T9274] xt_IDLETIMER: label is empty or not nul-terminated [ 217.179043][ T9276] netlink: 'syz.0.795': attribute type 15 has an invalid length. [ 217.187038][ T9276] netlink: 666 bytes leftover after parsing attributes in process `syz.0.795'. [ 217.359209][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 217.526156][ T9285] netlink: 'syz.4.798': attribute type 2 has an invalid length. [ 217.526200][ T9285] netlink: 'syz.4.798': attribute type 11 has an invalid length. [ 217.526229][ T9285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.798'. [ 217.587870][ T9290] FAULT_INJECTION: forcing a failure. [ 217.587870][ T9290] name failslab, interval 1, probability 0, space 0, times 0 [ 217.587931][ T9290] CPU: 0 UID: 0 PID: 9290 Comm: syz.4.798 Not tainted syzkaller #0 PREEMPT(full) [ 217.587955][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.587968][ T9290] Call Trace: [ 217.588008][ T9290] [ 217.588049][ T9290] dump_stack_lvl+0xe8/0x150 [ 217.588180][ T9290] should_fail_ex+0x410/0x560 [ 217.588273][ T9290] should_failslab+0xa8/0x100 [ 217.588339][ T9290] ? skb_clone+0x212/0x3a0 [ 217.588404][ T9290] kmem_cache_alloc_noprof+0xa1/0x600 [ 217.588499][ T9290] ? skb_clone+0x212/0x3a0 [ 217.588576][ T9290] skb_clone+0x212/0x3a0 [ 217.588631][ T9290] ? pfkey_broadcast_one+0x7d/0x360 [ 217.588704][ T9290] pfkey_broadcast_one+0x9b/0x360 [ 217.588758][ T9290] ? pfkey_broadcast+0x39b/0x3e0 [ 217.588808][ T9290] pfkey_broadcast+0x3a8/0x3e0 [ 217.588869][ T9290] ? pfkey_broadcast+0x48/0x3e0 [ 217.588933][ T9290] pfkey_sendmsg+0xf02/0x11d0 [ 217.589022][ T9290] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 217.589143][ T9290] ? aa_sock_msg_perm+0x144/0x210 [ 217.589217][ T9290] ? apparmor_socket_sendmsg+0x98/0x360 [ 217.589310][ T9290] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 217.589365][ T9290] sock_sendmsg_nosec+0x13a/0x180 [ 217.589449][ T9290] ____sys_sendmsg+0x54e/0x850 [ 217.589545][ T9290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.589642][ T9290] ? import_iovec+0x73/0xa0 [ 217.589708][ T9290] ___sys_sendmsg+0x2a5/0x360 [ 217.589762][ T9290] ? __lock_acquire+0x6df/0x2e50 [ 217.589827][ T9290] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.589888][ T9290] ? __lock_acquire+0x6df/0x2e50 [ 217.589959][ T9290] ? kstrtouint+0x6e/0xe0 [ 217.590135][ T9290] __sys_sendmmsg+0x273/0x4d0 [ 217.590209][ T9290] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.590294][ T9290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.590423][ T9290] ? ksys_write+0x242/0x270 [ 217.590524][ T9290] ? __pfx_ksys_write+0x10/0x10 [ 217.590621][ T9290] __x64_sys_sendmmsg+0xa0/0xc0 [ 217.590687][ T9290] do_syscall_64+0x166/0x520 [ 217.590769][ T9290] ? trace_irq_disable+0x3b/0x140 [ 217.590823][ T9290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.590893][ T9290] ? clear_bhb_loop+0x70/0xc0 [ 217.590980][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.591030][ T9290] RIP: 0033:0x7feb64d9e159 [ 217.591089][ T9290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.591133][ T9290] RSP: 002b:00007feb62fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.591188][ T9290] RAX: ffffffffffffffda RBX: 00007feb65026180 RCX: 00007feb64d9e159 [ 217.591236][ T9290] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 000000000000000a [ 217.591270][ T9290] RBP: 00007feb62fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 217.591302][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.591333][ T9290] R13: 00007feb65026218 R14: 00007feb65026180 R15: 00007fff9e0f4648 [ 217.591424][ T9290] [ 217.918953][ T7672] udevd[7672]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 218.504238][ T9311] netlink: 48 bytes leftover after parsing attributes in process `syz.3.805'. [ 218.544179][ T9322] IPVS: set_ctl: invalid protocol: 47 172.20.20.34:20002 [ 218.917727][ T9350] netlink: 'syz.0.814': attribute type 2 has an invalid length. [ 218.917790][ T9350] netlink: 'syz.0.814': attribute type 11 has an invalid length. [ 218.917804][ T9350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.814'. [ 218.933961][ T9350] FAULT_INJECTION: forcing a failure. [ 218.933961][ T9350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.934062][ T9350] CPU: 0 UID: 0 PID: 9350 Comm: syz.0.814 Not tainted syzkaller #0 PREEMPT(full) [ 218.934125][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.934159][ T9350] Call Trace: [ 218.934188][ T9350] [ 218.934210][ T9350] dump_stack_lvl+0xe8/0x150 [ 218.934304][ T9350] should_fail_ex+0x410/0x560 [ 218.934402][ T9350] _copy_from_user+0x2d/0xb0 [ 218.934474][ T9350] ___sys_sendmsg+0x1c6/0x360 [ 218.934531][ T9350] ? __lock_acquire+0x6df/0x2e50 [ 218.934613][ T9350] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.934667][ T9350] ? __lock_acquire+0x6df/0x2e50 [ 218.934732][ T9350] ? kstrtouint+0x6e/0xe0 [ 218.934911][ T9350] __sys_sendmmsg+0x273/0x4d0 [ 218.934979][ T9350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 218.935063][ T9350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.935215][ T9350] ? ksys_write+0x242/0x270 [ 218.935294][ T9350] ? __pfx_ksys_write+0x10/0x10 [ 218.935411][ T9350] __x64_sys_sendmmsg+0xa0/0xc0 [ 218.935494][ T9350] do_syscall_64+0x166/0x520 [ 218.935572][ T9350] ? trace_irq_disable+0x3b/0x140 [ 218.935633][ T9350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.935687][ T9350] ? clear_bhb_loop+0x70/0xc0 [ 218.935759][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.935812][ T9350] RIP: 0033:0x7feee2d9e159 [ 218.935865][ T9350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.935933][ T9350] RSP: 002b:00007feee3ce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.935996][ T9350] RAX: ffffffffffffffda RBX: 00007feee3025fa0 RCX: 00007feee2d9e159 [ 218.936037][ T9350] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 000000000000000a [ 218.936071][ T9350] RBP: 00007feee3ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 218.936103][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.936142][ T9350] R13: 00007feee3026038 R14: 00007feee3025fa0 R15: 00007fff62a014d8 [ 218.936227][ T9350] [ 219.426357][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 221.433856][ T9318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.794493][ T9375] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 221.983848][ T9366] netlink: 100 bytes leftover after parsing attributes in process `syz.4.821'. [ 222.080009][ T9385] xt_CT: No such helper "netbios-ns" [ 222.264448][ T9403] net_ratelimit: 499 callbacks suppressed [ 222.264504][ T9403] openvswitch: netlink: Message has 8 unknown bytes. [ 222.264546][ T9403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.026121][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 223.055042][ T9426] geneve0: entered promiscuous mode [ 223.071684][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.833'. [ 223.079640][ T9426] batman_adv: batadv0: Adding interface: macvlan2 [ 223.079701][ T9426] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.079909][ T9426] batman_adv: batadv0: Interface activated: macvlan2 [ 223.178566][ T9435] smc: net device lo applied user defined pnetid SYZ0 [ 223.606986][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 223.635609][ T9453] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 223.836774][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 223.836832][ T9460] bond0: Unable to set down delay as MII monitoring is disabled [ 223.926749][ T9468] netlink: 'syz.0.845': attribute type 7 has an invalid length. [ 223.926791][ T9468] netlink: 'syz.0.845': attribute type 3 has an invalid length. [ 223.926823][ T9468] netlink: 224 bytes leftover after parsing attributes in process `syz.0.845'. [ 224.155634][ T9488] netlink: 400 bytes leftover after parsing attributes in process `syz.0.848'. [ 224.919235][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.857'. [ 225.188440][ T9512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.188909][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 225.310338][ T9514] macvlan2: entered allmulticast mode [ 225.310920][ T9514] bond3: entered allmulticast mode [ 225.320135][ T9514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.334252][ T9514] team0: Port device macvlan2 added [ 225.459663][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 225.585682][ T5626] block nbd4: Receive control failed (result -32) [ 225.592714][ T5625] block nbd4: Receive control failed (result -32) [ 225.889766][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 226.287620][ T9556] veth1_macvtap: entered promiscuous mode [ 226.306090][ T9556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.316338][ T9556] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 226.495313][ T9540] hid-generic 0005:0C45:0008.0001: item fetching failed at offset 2/3 [ 226.498189][ T9540] hid-generic 0005:0C45:0008.0001: probe with driver hid-generic failed with error -22 [ 226.529688][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.868'. [ 226.619017][ T9578] tipc: Started in network mode [ 226.619077][ T9578] tipc: Node identity b2f53ad7f0fd, cluster identity 4711 [ 226.619602][ T9578] tipc: Enabled bearer , priority 0 [ 226.698433][ T9578] syzkaller0: entered promiscuous mode [ 226.698497][ T9578] syzkaller0: entered allmulticast mode [ 226.769480][ T9578] tipc: Resetting bearer [ 226.796293][ T9576] tipc: Resetting bearer [ 226.830132][ T9576] tipc: Disabling bearer [ 226.855581][ T9589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.873'. [ 226.871070][ T9589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.873'. [ 226.880964][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 227.068380][ T9588] wg2 speed is unknown, defaulting to 1000 [ 227.266649][ T9600] syzkaller0: entered promiscuous mode [ 227.266697][ T9600] syzkaller0: entered allmulticast mode [ 227.314835][ T9600] tipc: Enabled bearer , priority 0 [ 227.434028][ T9600] tipc: Resetting bearer [ 227.453413][ T9599] tipc: Resetting bearer [ 227.527087][ T9599] tipc: Disabling bearer [ 227.722102][ T9615] netlink: 'syz.1.881': attribute type 3 has an invalid length. [ 227.803570][ T9618] netlink: 'syz.0.882': attribute type 3 has an invalid length. [ 228.131451][ T9622] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 228.144863][ T9622] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 228.547491][ T9631] bond4 (unregistering): Released all slaves [ 229.061895][ T9656] __nla_validate_parse: 3 callbacks suppressed [ 229.061954][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 229.100323][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 229.180667][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 229.680194][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.899'. [ 229.916997][ T9692] pimreg: entered allmulticast mode [ 229.998963][ T9692] pimreg: left allmulticast mode [ 230.112690][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 230.175561][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 230.436016][ T9718] netlink: 52 bytes leftover after parsing attributes in process `syz.4.906'. [ 230.486770][ T9716] netlink: 52 bytes leftover after parsing attributes in process `syz.4.906'. [ 230.583143][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 230.824834][ T9710] ovs-s!: entered promiscuous mode [ 230.877194][ T9735] syzkaller0: entered promiscuous mode [ 230.884256][ T9735] syzkaller0: entered allmulticast mode [ 230.923646][ T9735] tipc: Enabled bearer , priority 0 [ 230.942294][ T9735] tipc: Resetting bearer [ 230.978300][ T9733] tipc: Resetting bearer [ 231.086291][ T9733] tipc: Disabling bearer [ 231.128860][ T9746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.913'. [ 231.423293][ T9757] netlink: 'syz.3.919': attribute type 1 has an invalid length. [ 231.730871][ T9773] syzkaller1: entered promiscuous mode [ 231.739661][ T9773] syzkaller1: entered allmulticast mode [ 232.241093][ T9796] netlink: 'syz.4.930': attribute type 13 has an invalid length. [ 232.249199][ T9796] netlink: 'syz.4.930': attribute type 17 has an invalid length. [ 232.284361][ T9796] gre0: left promiscuous mode [ 232.289847][ T9796] gre0: left allmulticast mode [ 232.644563][ T9796] macvlan0: left promiscuous mode [ 232.714496][ T9816] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 232.737293][ T9796] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 232.749813][ T9809] netlink: 'syz.1.933': attribute type 2 has an invalid length. [ 232.758298][ T9809] netlink: 'syz.1.933': attribute type 2 has an invalid length. [ 232.783258][ T9796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.793914][ T9796] ip6gre1: left promiscuous mode [ 232.799569][ T9796] ip6gre1: left allmulticast mode [ 232.812443][ T9796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.825599][ T9796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.865877][ T9796] bond6: left allmulticast mode [ 232.865923][ T9796] ip6gretap2: left allmulticast mode [ 232.878360][ T9796] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.916980][ T9796] 8021q: adding VLAN 0 to HW filter on device eth0 [ 232.938001][ T9796] 8021q: adding VLAN 0 to HW filter on device eth1 [ 232.959782][ T9796] 8021q: adding VLAN 0 to HW filter on device eth2 [ 232.986487][ T9796] 8021q: adding VLAN 0 to HW filter on device eth3 [ 233.019000][ T9812] smbdirect: ib_dev[syz2] removed [ 233.027286][ T9251] wg2 speed is unknown, defaulting to 1000 [ 233.053358][ T9826] netlink: NAT attribute type 1 has unexpected length (2 != 0) [ 233.053430][ T9826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.175114][ T9816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.411322][ T9818] bond5: (slave veth5): Enslaving as an active interface with a down link [ 233.740958][ T9854] openvswitch: netlink: Multiple metadata blocks provided [ 233.907924][ T9866] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 234.037153][ T9866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.087875][ T9866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.113674][ T9866] bond0 (unregistering): Released all slaves [ 234.163184][ T9875] __nla_validate_parse: 9 callbacks suppressed [ 234.163240][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 234.280177][ T9876] vti0: entered promiscuous mode [ 234.280230][ T9876] vti0: entered allmulticast mode [ 234.312910][ T9887] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.313310][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 234.411570][ T9875] veth5: entered allmulticast mode [ 234.495356][ T9884] gtp0: entered promiscuous mode [ 234.501909][ T9884] gtp0: entered allmulticast mode [ 234.785984][ T9911] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 234.786039][ T9911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.108865][ T9919] netlink: 'syz.1.959': attribute type 5 has an invalid length. [ 235.217763][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 235.485219][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 235.891518][ T9955] netlink: 'syz.0.970': attribute type 30 has an invalid length. [ 235.917925][ T9954] syzkaller0: entered promiscuous mode [ 235.917981][ T9954] syzkaller0: entered allmulticast mode [ 235.976490][ T9954] tipc: Enabled bearer , priority 0 [ 236.006222][ T9954] tipc: Resetting bearer [ 236.037410][ T9953] tipc: Resetting bearer [ 236.123790][ T9953] tipc: Disabling bearer [ 236.130889][ T9964] netlink: 'syz.1.972': attribute type 2 has an invalid length. [ 236.163625][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 236.534725][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 236.538134][ T9983] FAULT_INJECTION: forcing a failure. [ 236.538134][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.538294][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.4.979 Not tainted syzkaller #0 PREEMPT(full) [ 236.538353][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.538395][ T9983] Call Trace: [ 236.538417][ T9983] [ 236.538433][ T9983] dump_stack_lvl+0xe8/0x150 [ 236.538524][ T9983] should_fail_ex+0x410/0x560 [ 236.538625][ T9983] _copy_from_user+0x2d/0xb0 [ 236.538693][ T9983] ___sys_sendmsg+0x1c6/0x360 [ 236.538757][ T9983] ? __lock_acquire+0x6df/0x2e50 [ 236.538824][ T9983] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.538986][ T9983] ? __fget_files+0x2a/0x420 [ 236.539054][ T9983] ? __fget_files+0x3a2/0x420 [ 236.539179][ T9983] __x64_sys_sendmsg+0x1b1/0x290 [ 236.539252][ T9983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.539371][ T9983] do_syscall_64+0x166/0x520 [ 236.539459][ T9983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.539521][ T9983] ? clear_bhb_loop+0x70/0xc0 [ 236.539601][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.539657][ T9983] RIP: 0033:0x7feb64d9e159 [ 236.539713][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.539766][ T9983] RSP: 002b:00007feb62ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.539824][ T9983] RAX: ffffffffffffffda RBX: 00007feb65025fa0 RCX: 00007feb64d9e159 [ 236.539868][ T9983] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 236.539907][ T9983] RBP: 00007feb62ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.539981][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.540015][ T9983] R13: 00007feb65026038 R14: 00007feb65025fa0 R15: 00007fff9e0f4648 [ 236.540101][ T9983] [ 236.760453][ T9969] syzkaller0: entered promiscuous mode [ 236.760497][ T9969] syzkaller0: entered allmulticast mode [ 236.803315][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.803385][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.803413][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.803525][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.803587][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.803673][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.803750][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.803858][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.803975][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804048][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804113][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804179][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804255][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804334][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804407][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804475][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804550][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804617][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804684][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.804754][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.807680][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.807790][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.807876][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.807944][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808019][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808086][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808154][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808230][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808298][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808368][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808436][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808513][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 236.808581][ T9988] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 237.362371][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 237.371757][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 237.395783][ T9997] x_tables: duplicate underflow at hook 3 [ 237.397072][ T9999] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 237.451733][T10002] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 239.453663][ T9974] veth7: entered allmulticast mode [ 239.708116][T10032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.987'. [ 239.799472][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 239.811043][T10037] FAULT_INJECTION: forcing a failure. [ 239.811043][T10037] name failslab, interval 1, probability 0, space 0, times 0 [ 239.824059][T10037] CPU: 1 UID: 0 PID: 10037 Comm: syz.4.991 Not tainted syzkaller #0 PREEMPT(full) [ 239.824089][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.824111][T10037] Call Trace: [ 239.824121][T10037] [ 239.824131][T10037] dump_stack_lvl+0xe8/0x150 [ 239.824170][T10037] should_fail_ex+0x410/0x560 [ 239.824208][T10037] ? __alloc_skb+0x1db/0x7a0 [ 239.824240][T10037] should_failslab+0xa8/0x100 [ 239.824267][T10037] ? __alloc_skb+0x1db/0x7a0 [ 239.824299][T10037] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 239.824332][T10037] ? __alloc_skb+0x18d/0x7a0 [ 239.824366][T10037] ? __alloc_skb+0x1db/0x7a0 [ 239.824405][T10037] __alloc_skb+0x1db/0x7a0 [ 239.824444][T10037] netlink_sendmsg+0x5d4/0xb40 [ 239.824480][T10037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.824520][T10037] ? apparmor_socket_sendmsg+0x98/0x360 [ 239.824557][T10037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.824584][T10037] sock_sendmsg_nosec+0x13a/0x180 [ 239.824627][T10037] ____sys_sendmsg+0x54e/0x850 [ 239.824656][T10037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.824690][T10037] ? import_iovec+0x73/0xa0 [ 239.824718][T10037] ___sys_sendmsg+0x2a5/0x360 [ 239.824740][T10037] ? __lock_acquire+0x6df/0x2e50 [ 239.824768][T10037] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.824829][T10037] ? __fget_files+0x2a/0x420 [ 239.824858][T10037] ? __fget_files+0x3a2/0x420 [ 239.824899][T10037] __x64_sys_sendmsg+0x1b1/0x290 [ 239.824927][T10037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.824974][T10037] do_syscall_64+0x166/0x520 [ 239.825007][T10037] ? trace_irq_disable+0x3b/0x140 [ 239.825028][T10037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.825051][T10037] ? clear_bhb_loop+0x70/0xc0 [ 239.825080][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.825103][T10037] RIP: 0033:0x7feb64d9e159 [ 239.825124][T10037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.825144][T10037] RSP: 002b:00007feb62ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.825168][T10037] RAX: ffffffffffffffda RBX: 00007feb65025fa0 RCX: 00007feb64d9e159 [ 239.825185][T10037] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 239.825199][T10037] RBP: 00007feb62ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.825213][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.825230][T10037] R13: 00007feb65026038 R14: 00007feb65025fa0 R15: 00007fff9e0f4648 [ 239.825265][T10037] [ 240.113949][T10033] ip6gretap2: entered allmulticast mode [ 240.121818][T10033] batman_adv: batadv0: Adding interface: ip6gretap2 [ 240.128546][T10033] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.154644][T10033] batman_adv: batadv0: Interface activated: ip6gretap2 [ 240.355323][T10050] tipc: Enabled bearer , priority 0 [ 240.410698][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 240.411207][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 240.558045][T10062] netlink: 92 bytes leftover after parsing attributes in process `syz.3.995'. [ 240.721846][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 240.926537][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'. [ 240.946316][T10082] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 241.041835][T10089] validate_nla: 1 callbacks suppressed [ 241.066220][T10089] netlink: 'syz.2.1001': attribute type 1 has an invalid length. [ 241.244068][T10096] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 241.390254][T10096] bond0: entered promiscuous mode [ 241.398973][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.649439][T10104] sctp: [Deprecated]: syz.0.1005 (pid 10104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.649439][T10104] Use struct sctp_sack_info instead [ 241.760560][T10106] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1005'. [ 241.852893][T10098] veth7: entered allmulticast mode [ 241.893124][T10098] bond0: (slave veth7): making interface the new active one [ 241.893173][T10098] veth7: entered promiscuous mode [ 241.958888][T10098] bond0: (slave veth7): Enslaving as an active interface with an up link [ 242.025938][T10110] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1006'. [ 242.159704][T10112] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 242.175918][T10112] bond0 (unregistering): Released all slaves [ 242.205097][T10121] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.205614][T10121] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.206012][T10121] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.211305][T10120] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.211696][T10120] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.212183][T10120] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.223845][T10120] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.224291][T10120] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.228282][T10120] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.253976][T10121] Dead loop on virtual device lo (net 40), fix it urgently! [ 242.376305][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 243.736758][T10174] bridge0: port 3(vlan0) entered blocking state [ 243.744293][T10174] bridge0: port 3(vlan0) entered disabled state [ 243.752717][T10174] vlan0: entered allmulticast mode [ 243.759215][T10174] geneve0: entered allmulticast mode [ 243.771015][T10174] vlan0: entered promiscuous mode [ 243.778471][T10174] geneve0: entered promiscuous mode [ 244.326657][T10196] FAULT_INJECTION: forcing a failure. [ 244.326657][T10196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.326724][T10196] CPU: 1 UID: 0 PID: 10196 Comm: syz.2.1027 Not tainted syzkaller #0 PREEMPT(full) [ 244.326754][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.326814][T10196] Call Trace: [ 244.326823][T10196] [ 244.326850][T10196] dump_stack_lvl+0xe8/0x150 [ 244.326950][T10196] should_fail_ex+0x410/0x560 [ 244.327107][T10196] _copy_from_iter+0x1d3/0x1660 [ 244.327188][T10196] ? __alloc_skb+0x27a/0x7a0 [ 244.327284][T10196] ? __alloc_skb+0x27a/0x7a0 [ 244.327378][T10196] ? __alloc_skb+0x27a/0x7a0 [ 244.327461][T10196] ? __pfx__copy_from_iter+0x10/0x10 [ 244.327538][T10196] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 244.327608][T10196] ? __alloc_skb+0x27a/0x7a0 [ 244.327701][T10196] ? __alloc_skb+0x27a/0x7a0 [ 244.327796][T10196] ? netlink_sendmsg+0x650/0xb40 [ 244.327869][T10196] ? skb_put+0x112/0x210 [ 244.327931][T10196] netlink_sendmsg+0x6c0/0xb40 [ 244.328024][T10196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.328117][T10196] ? apparmor_socket_sendmsg+0x98/0x360 [ 244.328210][T10196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.328273][T10196] sock_sendmsg_nosec+0x13a/0x180 [ 244.328382][T10196] ____sys_sendmsg+0x54e/0x850 [ 244.328472][T10196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.328559][T10196] ? import_iovec+0x73/0xa0 [ 244.328633][T10196] ___sys_sendmsg+0x2a5/0x360 [ 244.328694][T10196] ? __lock_acquire+0x6df/0x2e50 [ 244.328764][T10196] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.328913][T10196] ? __fget_files+0x2a/0x420 [ 244.329012][T10196] ? __fget_files+0x3a2/0x420 [ 244.329133][T10196] __x64_sys_sendmsg+0x1b1/0x290 [ 244.329199][T10196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.329323][T10196] do_syscall_64+0x166/0x520 [ 244.329406][T10196] ? trace_irq_disable+0x3b/0x140 [ 244.329459][T10196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.329522][T10196] ? clear_bhb_loop+0x70/0xc0 [ 244.329595][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.329659][T10196] RIP: 0033:0x7f880779e159 [ 244.329727][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.329784][T10196] RSP: 002b:00007f8808584028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.329854][T10196] RAX: ffffffffffffffda RBX: 00007f8807a25fa0 RCX: 00007f880779e159 [ 244.329898][T10196] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 244.329937][T10196] RBP: 00007f8808584090 R08: 0000000000000000 R09: 0000000000000000 [ 244.329971][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.330011][T10196] R13: 00007f8807a26038 R14: 00007f8807a25fa0 R15: 00007fffb5ae89b8 [ 244.330097][T10196] [ 244.623451][T10199] netlink: 'syz.3.1028': attribute type 3 has an invalid length. [ 245.237913][T10213] __nla_validate_parse: 1 callbacks suppressed [ 245.237966][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 245.907333][T10230] pim6reg1: entered promiscuous mode [ 245.907374][T10230] pim6reg1: entered allmulticast mode [ 245.944901][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1035'. [ 245.982862][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 246.208391][T10234] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 246.209398][T10234] batadv1: entered promiscuous mode [ 246.242041][T10234] batadv1: entered allmulticast mode [ 246.255425][T10234] team0: Port device batadv1 added [ 246.468246][T10252] pim6reg: entered allmulticast mode [ 246.482436][T10252] pim6reg: left allmulticast mode [ 247.129699][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1039'. [ 247.328337][T10270] net_ratelimit: 92 callbacks suppressed [ 247.328398][T10270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.419855][T10273] macsec1: entered promiscuous mode [ 247.419909][T10273] bridge0: entered promiscuous mode [ 247.531856][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 247.570772][T10278] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.011479][T10318] netlink: 'syz.2.1057': attribute type 21 has an invalid length. [ 249.011531][T10318] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.358375][ T9254] hid-generic 0005:4C4A:0058.0002: item fetching failed at offset 0/1 [ 249.392702][ T9254] hid-generic 0005:4C4A:0058.0002: probe with driver hid-generic failed with error -22 [ 249.428675][T10320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1057'. [ 249.523588][T10326] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 249.535447][T10326] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1058'. [ 249.558720][T10326] netlink: 'syz.3.1058': attribute type 3 has an invalid length. [ 249.626788][T10339] Bluetooth: hci0: unsupported parameter 5135 [ 249.626842][T10339] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 250.053699][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'. [ 250.614222][T10375] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 250.654069][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 251.504256][T10421] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 251.512723][T10421] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.674390][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 251.686655][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 251.980984][T10425] ovs-system: entered promiscuous mode [ 252.328092][T10438] netlink: 'syz.1.1085': attribute type 2 has an invalid length. [ 252.328163][T10438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1085'. [ 252.591614][ T5970] nci: nci_rx_work: unknown MT 0x6 [ 252.612539][T10451] netlink: 'syz.3.1089': attribute type 4 has an invalid length. [ 252.612595][T10451] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1089'. [ 252.612646][T10451] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 252.750676][T10427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.034287][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1093'. [ 253.572063][T10491] netlink: Conntrack attr has 8 unknown bytes [ 253.572127][T10491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.782226][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 254.145158][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'. [ 254.145247][T10511] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1099'. [ 254.168353][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'. [ 254.168434][T10511] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1099'. [ 255.326639][T10444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.764097][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 255.782555][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.789106][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.810858][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 256.127859][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 256.128021][T10537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.182823][T10537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.209262][T10533] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 256.209306][T10533] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1108'. [ 256.231479][T10531] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1108'. [ 256.703838][T10553] netlink: 'syz.4.1112': attribute type 9 has an invalid length. [ 257.158574][T10572] xt_connbytes: Forcing CT accounting to be enabled [ 257.325293][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 258.397762][T10624] bond6: entered promiscuous mode [ 258.397809][T10624] bond6: entered allmulticast mode [ 258.573048][T10641] syzkaller0: entered promiscuous mode [ 258.578748][T10641] syzkaller0: entered allmulticast mode [ 258.873218][T10615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.174920][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1137'. [ 259.981588][T10680] bond5: option arp_all_targets: invalid value (3) [ 260.029639][T10680] bond5 (unregistering): Released all slaves [ 260.155693][T10683] raw_sendmsg: syz.2.1145 forgot to set AF_INET. Fix it! [ 260.423022][T10701] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1152'. [ 260.423164][T10701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1152'. [ 261.365613][T10728] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1160'. [ 262.634771][T10770] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1171'. [ 262.648712][T10769] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1171'. [ 262.787030][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 262.796416][T10785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'. [ 263.370432][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1179'. [ 263.411046][T10810] ì: renamed from bond_slave_0 [ 263.436196][T10812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 263.912594][T10820] ip_tables: iptables: counters copy to user failed while replacing table [ 264.204595][T10811] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 264.686278][T10859] batman_adv: batadv0: Adding interface: macvtap1 [ 264.686312][T10859] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.686343][T10859] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 265.918014][T10893] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1198'. [ 266.026662][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 266.127917][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 266.590217][T10919] Bluetooth: MGMT ver 1.23 [ 266.590285][T10919] Bluetooth: hci1: too big key_count value 29096 [ 266.709040][T10924] geneve2: entered promiscuous mode [ 266.718022][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1210'. [ 266.749817][T10924] netlink: 'syz.4.1208': attribute type 11 has an invalid length. [ 266.762032][T10930] Bluetooth: hci0: unsupported parameter 5135 [ 266.762074][T10930] Bluetooth: hci0: unsupported parameter 8192 [ 266.762114][T10930] Bluetooth: hci0: unsupported parameter 5135 [ 266.762133][T10930] Bluetooth: hci0: unsupported parameter 8192 [ 266.937359][T10932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1213'. [ 266.947789][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1213'. [ 266.957739][T10932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1213'. [ 267.019816][T10937] netlink: 8183 bytes leftover after parsing attributes in process `syz.2.1214'. [ 267.110100][T10933] xt_hashlimit: size too large, truncated to 1048576 [ 267.180084][T10945] ip_tables: iptables: counters copy to user failed while replacing table [ 267.287497][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 267.816288][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 267.842985][T10970] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1221'. [ 267.901101][T10973] FAULT_INJECTION: forcing a failure. [ 267.901101][T10973] name failslab, interval 1, probability 0, space 0, times 0 [ 267.901158][T10973] CPU: 1 UID: 0 PID: 10973 Comm: syz.4.1222 Not tainted syzkaller #0 PREEMPT(full) [ 267.901196][T10973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.901215][T10973] Call Trace: [ 267.901228][T10973] [ 267.901241][T10973] dump_stack_lvl+0xe8/0x150 [ 267.901280][T10973] should_fail_ex+0x410/0x560 [ 267.901319][T10973] should_failslab+0xa8/0x100 [ 267.901434][T10973] __kmalloc_noprof+0xfe/0x720 [ 267.901577][T10973] ? bpf_test_init+0x9f/0x150 [ 267.901648][T10973] ? bpf_test_init+0x9f/0x150 [ 267.901733][T10973] bpf_test_init+0x9f/0x150 [ 267.901808][T10973] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 267.901911][T10973] ? lock_acquire+0x115/0x350 [ 267.901979][T10973] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 267.902064][T10973] ? __fget_files+0x2a/0x420 [ 267.902148][T10973] ? __fget_files+0x2a/0x420 [ 267.902224][T10973] ? __fget_files+0x3a2/0x420 [ 267.902299][T10973] ? __fget_files+0x2a/0x420 [ 267.902373][T10973] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 267.902457][T10973] bpf_prog_test_run+0x2c5/0x340 [ 267.902540][T10973] __sys_bpf+0xa22/0xd90 [ 267.902618][T10973] ? __pfx___sys_bpf+0x10/0x10 [ 267.902713][T10973] ? __fget_files+0x2a/0x420 [ 267.902846][T10973] ? ksys_write+0x242/0x270 [ 267.902958][T10973] ? __pfx_ksys_write+0x10/0x10 [ 267.903054][T10973] __x64_sys_bpf+0xba/0xd0 [ 267.903117][T10973] do_syscall_64+0x166/0x520 [ 267.903201][T10973] ? trace_irq_disable+0x3b/0x140 [ 267.903261][T10973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.903317][T10973] ? clear_bhb_loop+0x70/0xc0 [ 267.903388][T10973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.903442][T10973] RIP: 0033:0x7feb64d9e159 [ 267.903496][T10973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.903548][T10973] RSP: 002b:00007feb62ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.903624][T10973] RAX: ffffffffffffffda RBX: 00007feb65025fa0 RCX: 00007feb64d9e159 [ 267.903660][T10973] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 267.903688][T10973] RBP: 00007feb62ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.903729][T10973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.903762][T10973] R13: 00007feb65026038 R14: 00007feb65025fa0 R15: 00007fff9e0f4648 [ 267.903856][T10973] [ 268.205471][T10935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.223690][T10935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.238147][T10935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 268.465389][T10935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.465453][T10935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.465504][T10935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 268.535214][T10986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 268.606436][T10985] tipc: Enabled bearer , priority 10 [ 268.727061][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 268.748972][T10935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.749046][T10935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.749078][T10935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 269.113708][T11010] netlink: 'syz.1.1231': attribute type 4 has an invalid length. [ 269.560605][ T6019] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.560666][ T6019] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 269.560694][ T6019] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.677589][T11020] bridge_slave_0: left allmulticast mode [ 269.677639][T11020] bridge_slave_0: left promiscuous mode [ 269.677921][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.759396][T11020] bridge_slave_1: left allmulticast mode [ 269.759449][T11020] bridge_slave_1: left promiscuous mode [ 269.760197][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.844683][T11020] team_slave_0: left promiscuous mode [ 269.846886][T11020] team_slave_0: left allmulticast mode [ 269.888281][T11020] team0: Port device team_slave_0 removed [ 269.904603][T11020] team_slave_1: left promiscuous mode [ 269.916568][T11020] team_slave_1: left allmulticast mode [ 269.939627][T11020] team0: Port device team_slave_1 removed [ 269.946949][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.954583][T11020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.968157][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.975670][T11020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.994086][T11020] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 270.155266][ T6019] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.155327][ T6019] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.155355][ T6019] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.160970][ T8104] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.161081][ T8104] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.161168][ T8104] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.232005][ T8104] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.235470][ T8104] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.235501][ T8104] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.999109][T11080] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 271.158578][T11093] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 272.067916][T11124] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 272.149232][T11113] syzkaller0: entered promiscuous mode [ 272.155422][T11113] syzkaller0: entered allmulticast mode [ 272.181321][T11127] __nla_validate_parse: 9 callbacks suppressed [ 272.181377][T11127] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1252'. [ 272.497108][T11126] syzkaller0: left promiscuous mode [ 272.497154][T11126] syzkaller0: left allmulticast mode [ 272.740812][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 273.444771][T11164] tc_dump_action: action bad kind [ 273.967931][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1264'. [ 274.368538][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 274.377821][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 274.604107][T11195] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 274.671289][T11195] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 274.709137][T11198] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1271'. [ 274.847828][T11203] netlink: 'syz.0.1272': attribute type 9 has an invalid length. [ 275.283626][T11211] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1276'. [ 275.283674][T11211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1276'. [ 275.283714][T11211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1276'. [ 275.341814][T11214] netlink: 'syz.0.1277': attribute type 16 has an invalid length. [ 275.350079][T11214] netlink: 'syz.0.1277': attribute type 17 has an invalid length. [ 275.464882][T11214] hsr0: left promiscuous mode [ 275.547229][T11214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.596026][T11214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.623623][T11214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.640040][T11214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.654883][T11214] bridge0: port 3(vlan0) entered blocking state [ 275.655061][T11214] bridge0: port 3(vlan0) entered forwarding state [ 275.677268][T11214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.683110][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'. [ 275.788886][ T6017] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 275.789130][ T6017] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 275.811877][ T9251] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 275.915365][ T9254] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 276.331085][ T9254] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 276.427100][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1285'. [ 276.427141][T11262] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.103160][ T32] audit: type=1804 audit(1789018596.636:4): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1291" name="/newroot/249/cgroup.controllers" dev="tmpfs" ino=1298 res=1 errno=0 [ 277.125825][ T32] audit: type=1800 audit(1789018596.636:5): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1291" name="cgroup.controllers" dev="tmpfs" ino=1298 res=0 errno=0 [ 277.610206][T11287] __nla_validate_parse: 5 callbacks suppressed [ 277.616951][T11287] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1296'. [ 277.728703][T11282] syzkaller0: entered promiscuous mode [ 277.728761][T11282] syzkaller0: entered allmulticast mode [ 278.155671][T11305] netlink: 'syz.2.1299': attribute type 30 has an invalid length. [ 278.321647][T11310] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 278.351220][T11311] sctp: [Deprecated]: syz.4.1301 (pid 11311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.351220][T11311] Use struct sctp_sack_info instead [ 278.650053][T11317] af_packet: tpacket_rcv: packet too big, clamped from 25964 to 3952. macoff=96 [ 279.544253][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 280.252327][T11305] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 280.257273][T11310] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 280.471775][T11328] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1303'. [ 280.507706][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 280.587968][T11332] syzkaller0: entered promiscuous mode [ 280.593829][T11332] syzkaller0: entered allmulticast mode [ 280.681296][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 280.749273][T11343] Bluetooth: hci0: unsupported parameter 5134 [ 280.755827][T11343] Bluetooth: hci0: unsupported parameter 8192 [ 280.762134][T11343] Bluetooth: hci0: unsupported parameter 5134 [ 280.768453][T11343] Bluetooth: hci0: unsupported parameter 8192 [ 280.896427][T11334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.130094][T11362] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 281.138276][T11362] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1315'. [ 281.509737][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 281.523918][T11383] bond1: (slave dummy0): Releasing active interface [ 281.581822][T11383] bridge_slave_0: left allmulticast mode [ 281.587681][T11383] bridge_slave_0: left promiscuous mode [ 281.593800][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.650113][T11383] bridge_slave_1: left promiscuous mode [ 281.659677][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.691790][T11383] bond0: (slave bond_slave_0): Releasing backup interface [ 281.717344][T11383] bond0: (slave bond_slave_1): Releasing backup interface [ 281.755627][T11383] team0: Port device team_slave_0 removed [ 281.782761][T11383] team0: Port device team_slave_1 removed [ 281.791530][T11383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.809240][T11383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.821495][T11383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 281.895546][T11389] team0: No ports can be present during mode change [ 281.912242][T11399] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 281.920178][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 282.250677][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 282.600799][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 282.600847][T11427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1334'. [ 282.641147][T11427] __nla_validate_parse: 2 callbacks suppressed [ 282.641820][T11427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1334'. [ 283.004798][T11437] syzkaller1: entered promiscuous mode [ 283.004857][T11437] syzkaller1: entered allmulticast mode [ 283.022846][T11437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 283.239539][T11448] ip6gre2: entered allmulticast mode [ 283.248523][ T8104] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 283.481545][T11464] netlink: 'syz.3.1346': attribute type 10 has an invalid length. [ 283.828673][T11474] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 284.162687][T11493] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1354'. [ 284.214956][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.626084][T11508] tipc: Enabling of bearer rejected, failed to enable media [ 284.804890][T11512] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 285.324588][T11519] team0: No ports can be present during mode change [ 285.616495][T11527] netlink: 'syz.1.1364': attribute type 11 has an invalid length. [ 285.740708][T11532] 8021q: VLANs not supported on ip6tnl0 [ 286.061115][T11541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.087670][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 286.137117][T11545] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1369'. [ 286.152872][T11544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1367'. [ 286.451393][T11558] netlink: 'syz.0.1370': attribute type 1 has an invalid length. [ 286.537147][T11558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.887636][T11570] netlink: Unknown nat attribute (0) [ 286.887698][T11570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.997255][T11570] bond6 (unregistering): Released all slaves [ 287.077673][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 287.077761][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 287.265442][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 287.268674][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 287.520790][T11588] xt_bpf: check failed: parse error [ 287.570278][ T9261] team_slave_0: entered promiscuous mode [ 287.574052][ T9261] team_slave_1: entered promiscuous mode [ 287.620810][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 287.684935][T11595] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1380'. [ 287.736386][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 287.736503][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 287.780779][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 288.340900][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 288.691267][T11624] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 289.005152][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 289.015973][T11640] bond0: Unable to set up delay as MII monitoring is disabled [ 289.025667][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1397'. [ 289.602764][T11659] syzkaller0: entered promiscuous mode [ 289.602808][T11659] syzkaller0: entered allmulticast mode [ 289.627289][T11659] netlink: 'syz.2.1403': attribute type 13 has an invalid length. [ 289.627983][T11659] netlink: 'syz.2.1403': attribute type 17 has an invalid length. [ 289.896001][T11659] bridge0: port 3(erspan0) entered blocking state [ 289.898714][T11659] bridge0: port 3(erspan0) entered forwarding state [ 290.005368][T11659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.017088][T11659] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.042192][T11659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.076082][T11672] netlink: 'syz.4.1407': attribute type 34 has an invalid length. [ 290.088863][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 290.207558][T11659] tipc: Resetting bearer [ 290.215070][T11659] tipc: Resetting bearer [ 290.228442][T11659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.242744][T11659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.287156][T11659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.287256][T11659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.336859][T11659] veth1_vlan: left promiscuous mode [ 290.361397][T11659] veth0_vlan: left promiscuous mode [ 290.378415][T11659] veth0_vlan: entered promiscuous mode [ 290.395379][T11659] veth1_vlan: entered promiscuous mode [ 290.449230][T11659] veth1_macvtap: left promiscuous mode [ 290.466660][T11659] veth0_macvtap: left promiscuous mode [ 290.476069][T11659] veth0_macvtap: entered promiscuous mode [ 290.507265][T11659] veth1_macvtap: entered promiscuous mode [ 290.527191][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.542713][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.557033][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.573285][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.593429][T11659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.602015][T11659] batman_adv: batadv0: Interface activated: ip6gretap1 [ 290.622888][T11659] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 290.629261][T11659] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 290.682203][T11659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.706597][T11659] macvlan2: left allmulticast mode [ 290.706633][T11659] bond3: left allmulticast mode [ 290.725377][T11659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.747224][T11659] ip6gretap2: left allmulticast mode [ 290.760058][T11659] macsec1: left promiscuous mode [ 290.772057][T11659] bond6: left promiscuous mode [ 290.772101][T11659] bond6: left allmulticast mode [ 290.773388][T11659] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.793673][T11659] ip6gre2: left allmulticast mode [ 290.796275][T11659] syzkaller0: left promiscuous mode [ 290.796329][T11659] syzkaller0: left allmulticast mode [ 290.840006][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.840207][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.863387][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.863694][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.930827][T11672] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 291.026544][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 291.223919][ T1014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.302215][ T6015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.307845][ T6015] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 291.358526][ T6015] bond5: (slave veth5): making interface the new active one [ 291.386053][ T6015] bond5: active interface up! [ 291.400313][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 291.409354][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 291.409458][T11695] netlink: 'syz.3.1414': attribute type 14 has an invalid length. [ 291.523361][ T5971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.523435][ T5971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.582028][T11700] sctp: [Deprecated]: syz.1.1415 (pid 11700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.582028][T11700] Use struct sctp_sack_info instead [ 291.799047][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 292.100600][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 292.667595][T11736] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.739290][T11733] syzkaller0: entered promiscuous mode [ 292.746167][T11733] syzkaller0: entered allmulticast mode [ 292.792286][T11733] __nla_validate_parse: 3 callbacks suppressed [ 292.799545][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1426'. [ 292.899897][T11740] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 293.082624][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 295.637833][T11740] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 295.640950][T11743] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 295.655523][T11747] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 295.688267][T11750] bridge4: entered promiscuous mode [ 295.734395][T11752] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 295.734451][T11752] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 295.840870][T11757] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.101117][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 296.344557][T11778] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1436'. [ 296.428021][T11772] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1435'. [ 296.876850][T11795] C: renamed from veth1_to_team (while UP) [ 296.893573][T11795] tipc: Disabling bearer [ 296.912293][T11795] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1440'. [ 297.116020][T11795] block nbd0: reconnected socket [ 297.116194][T11795] block nbd0: reconnected socket [ 297.153051][T11795] nbd: socks must be embedded in a SOCK_ITEM attr [ 297.181377][ T5625] block nbd0: Receive control failed (result -32) [ 297.190648][ T5626] block nbd0: Receive control failed (result -32) [ 297.463986][T11812] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1445'. [ 297.464308][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 297.687849][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.712207][T11821] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1449'. [ 297.731792][T11821] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.896908][T11826] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1450'. [ 298.619019][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.741502][T11854] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 298.786965][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1457'. [ 299.025833][T11851] veth0_macvtap: left promiscuous mode [ 299.139479][T11851] [ 299.141885][T11851] ====================================================== [ 299.148936][T11851] WARNING: possible circular locking dependency detected [ 299.156009][T11851] syzkaller #0 Not tainted [ 299.160462][T11851] ------------------------------------------------------ [ 299.167502][T11851] syz.4.1455/11851 is trying to acquire lock: [ 299.173594][T11851] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 299.183482][T11851] [ 299.183482][T11851] but task is already holding lock: [ 299.190875][T11851] ffffffff8f7fffe0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 299.199648][T11851] [ 299.199648][T11851] which lock already depends on the new lock. [ 299.199648][T11851] [ 299.210082][T11851] [ 299.210082][T11851] the existing dependency chain (in reverse order) is: [ 299.219127][T11851] [ 299.219127][T11851] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 299.226400][T11851] __mutex_lock+0x19d/0x1550 [ 299.231599][T11851] get_device_parent+0x16f/0x3a0 [ 299.237102][T11851] device_add+0x2d4/0xb80 [ 299.242040][T11851] device_create+0x269/0x300 [ 299.247283][T11851] msr_device_create+0x33/0x50 [ 299.252613][T11851] cpuhp_invoke_callback+0x434/0x810 [ 299.258468][T11851] cpuhp_thread_fun+0x362/0x780 [ 299.263885][T11851] smpboot_thread_fn+0x565/0xa70 [ 299.269390][T11851] kthread+0x38b/0x480 [ 299.274017][T11851] ret_from_fork+0x514/0xb70 [ 299.279156][T11851] ret_from_fork_asm+0x1a/0x30 [ 299.284479][T11851] [ 299.284479][T11851] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 299.292077][T11851] cpuhp_thread_fun+0x127/0x780 [ 299.297494][T11851] smpboot_thread_fn+0x565/0xa70 [ 299.302991][T11851] kthread+0x38b/0x480 [ 299.307613][T11851] ret_from_fork+0x514/0xb70 [ 299.312771][T11851] ret_from_fork_asm+0x1a/0x30 [ 299.318091][T11851] [ 299.318091][T11851] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 299.325857][T11851] cpus_read_lock+0x42/0x160 [ 299.331011][T11851] static_key_slow_inc+0x12/0x30 [ 299.336510][T11851] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 299.342777][T11851] nbd_genl_foreach_sock+0x265/0x450 [ 299.348644][T11851] nbd_genl_reconfigure+0xbbb/0x1040 [ 299.354508][T11851] genl_family_rcv_msg_doit+0x233/0x340 [ 299.360613][T11851] genl_rcv_msg+0x614/0x7a0 [ 299.365672][T11851] netlink_rcv_skb+0x226/0x4a0 [ 299.370987][T11851] genl_rcv+0x28/0x40 [ 299.375557][T11851] netlink_unicast+0x7bd/0x940 [ 299.380874][T11851] netlink_sendmsg+0x813/0xb40 [ 299.386186][T11851] sock_sendmsg_nosec+0x13a/0x180 [ 299.391771][T11851] ____sys_sendmsg+0x54e/0x850 [ 299.397080][T11851] ___sys_sendmsg+0x2a5/0x360 [ 299.402303][T11851] __x64_sys_sendmsg+0x1b1/0x290 [ 299.407792][T11851] do_syscall_64+0x166/0x520 [ 299.412946][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.419417][T11851] [ 299.419417][T11851] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 299.427097][T11851] __mutex_lock+0x19d/0x1550 [ 299.432243][T11851] nbd_queue_rq+0x373/0xff0 [ 299.437305][T11851] blk_mq_dispatch_rq_list+0x499/0x1990 [ 299.443419][T11851] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 299.450298][T11851] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 299.456830][T11851] blk_mq_run_work_fn+0x16c/0x300 [ 299.462406][T11851] process_scheduled_works+0xc3d/0x1630 [ 299.468508][T11851] worker_thread+0xa47/0xfb0 [ 299.473657][T11851] kthread+0x38b/0x480 [ 299.478276][T11851] ret_from_fork+0x514/0xb70 [ 299.483410][T11851] ret_from_fork_asm+0x1a/0x30 [ 299.488732][T11851] [ 299.488732][T11851] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 299.496057][T11851] __mutex_lock+0x19d/0x1550 [ 299.501208][T11851] nbd_queue_rq+0xc1/0xff0 [ 299.506182][T11851] blk_mq_dispatch_rq_list+0x499/0x1990 [ 299.512292][T11851] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 299.519176][T11851] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 299.525704][T11851] blk_mq_run_work_fn+0x16c/0x300 [ 299.531280][T11851] process_scheduled_works+0xc3d/0x1630 [ 299.537382][T11851] worker_thread+0xa47/0xfb0 [ 299.542521][T11851] kthread+0x38b/0x480 [ 299.547134][T11851] ret_from_fork+0x514/0xb70 [ 299.552274][T11851] ret_from_fork_asm+0x1a/0x30 [ 299.557599][T11851] [ 299.557599][T11851] -> #5 (set->srcu){.+.+}-{0:0}: [ 299.564753][T11851] __synchronize_srcu+0xc9/0x2f0 [ 299.570235][T11851] elevator_switch+0x1e8/0x7b0 [ 299.575553][T11851] elevator_change+0x2fa/0x480 [ 299.580869][T11851] elevator_set_default+0x375/0x440 [ 299.586624][T11851] blk_register_queue+0x3f3/0x4e0 [ 299.592197][T11851] __add_disk+0x6cb/0xe30 [ 299.597114][T11851] add_disk_fwnode+0x100/0x3a0 [ 299.602430][T11851] nbd_dev_add+0x733/0xb60 [ 299.607498][T11851] nbd_init+0x168/0x1f0 [ 299.612208][T11851] do_one_initcall+0x250/0x870 [ 299.617532][T11851] do_initcall_level+0x10a/0x1a0 [ 299.623020][T11851] do_initcalls+0x59/0xa0 [ 299.627911][T11851] kernel_init_freeable+0x29d/0x3e0 [ 299.633686][T11851] kernel_init+0x22/0x1d0 [ 299.638557][T11851] ret_from_fork+0x514/0xb70 [ 299.643782][T11851] ret_from_fork_asm+0x1a/0x30 [ 299.649103][T11851] [ 299.649103][T11851] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 299.656996][T11851] __mutex_lock+0x19d/0x1550 [ 299.662150][T11851] elevator_change+0x1af/0x480 [ 299.667468][T11851] elevator_set_none+0xb5/0x140 [ 299.672901][T11851] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 299.679287][T11851] nbd_start_device+0x189/0xb30 [ 299.684704][T11851] nbd_genl_connect+0x167d/0x1cd0 [ 299.690286][T11851] genl_family_rcv_msg_doit+0x233/0x340 [ 299.696399][T11851] genl_rcv_msg+0x614/0x7a0 [ 299.701469][T11851] netlink_rcv_skb+0x226/0x4a0 [ 299.706784][T11851] genl_rcv+0x28/0x40 [ 299.711321][T11851] netlink_unicast+0x7bd/0x940 [ 299.716633][T11851] netlink_sendmsg+0x813/0xb40 [ 299.721971][T11851] sock_sendmsg_nosec+0x13a/0x180 [ 299.727546][T11851] ____sys_sendmsg+0x54e/0x850 [ 299.732862][T11851] ___sys_sendmsg+0x2a5/0x360 [ 299.738098][T11851] __x64_sys_sendmsg+0x1b1/0x290 [ 299.743594][T11851] do_syscall_64+0x166/0x520 [ 299.748757][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.755222][T11851] [ 299.755222][T11851] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 299.763867][T11851] blk_alloc_queue+0x544/0x690 [ 299.769191][T11851] __blk_mq_alloc_disk+0x194/0x390 [ 299.774854][T11851] nbd_dev_add+0x494/0xb60 [ 299.779826][T11851] nbd_init+0x168/0x1f0 [ 299.784539][T11851] do_one_initcall+0x250/0x870 [ 299.789872][T11851] do_initcall_level+0x10a/0x1a0 [ 299.795363][T11851] do_initcalls+0x59/0xa0 [ 299.800267][T11851] kernel_init_freeable+0x29d/0x3e0 [ 299.806020][T11851] kernel_init+0x22/0x1d0 [ 299.810898][T11851] ret_from_fork+0x514/0xb70 [ 299.816040][T11851] ret_from_fork_asm+0x1a/0x30 [ 299.821358][T11851] [ 299.821358][T11851] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 299.828591][T11851] fs_reclaim_acquire+0x71/0x100 [ 299.834093][T11851] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 299.840405][T11851] alloc_inode+0xb8/0x1b0 [ 299.845306][T11851] iget_locked+0x131/0x6a0 [ 299.850278][T11851] kernfs_get_inode+0x4f/0x770 [ 299.855600][T11851] kernfs_get_tree+0x5cd/0x980 [ 299.860922][T11851] vfs_get_tree+0x92/0x2a0 [ 299.865957][T11851] do_new_mount+0x319/0xdc0 [ 299.871033][T11851] __se_sys_mount+0x31d/0x420 [ 299.876282][T11851] do_syscall_64+0x166/0x520 [ 299.881439][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.887904][T11851] [ 299.887904][T11851] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 299.895927][T11851] down_write+0x96/0x200 [ 299.900723][T11851] kernfs_remove_by_name_ns+0x4e/0x140 [ 299.906838][T11851] device_links_driver_bound+0x4ab/0x1440 [ 299.913126][T11851] driver_bound+0xd8/0x2e0 [ 299.918099][T11851] really_probe+0x774/0xae0 [ 299.923148][T11851] __driver_probe_device+0x1e8/0x360 [ 299.928991][T11851] driver_probe_device+0x4f/0x240 [ 299.934562][T11851] __device_attach_driver+0x270/0x410 [ 299.940482][T11851] bus_for_each_drv+0x258/0x2f0 [ 299.945882][T11851] __device_attach+0x2c4/0x450 [ 299.951191][T11851] device_initial_probe+0xa1/0xd0 [ 299.956761][T11851] bus_probe_device+0x12a/0x220 [ 299.962167][T11851] device_add+0x7d7/0xb80 [ 299.967051][T11851] faux_device_create_with_groups+0x1a5/0x2b0 [ 299.973679][T11851] regulator_dummy_init+0x19/0x40 [ 299.979258][T11851] regulator_init+0xca/0x110 [ 299.984432][T11851] do_one_initcall+0x250/0x870 [ 299.989770][T11851] do_initcall_level+0x10a/0x1a0 [ 299.995258][T11851] do_initcalls+0x59/0xa0 [ 300.000137][T11851] kernel_init_freeable+0x29d/0x3e0 [ 300.005885][T11851] kernel_init+0x22/0x1d0 [ 300.010759][T11851] ret_from_fork+0x514/0xb70 [ 300.015890][T11851] ret_from_fork_asm+0x1a/0x30 [ 300.021211][T11851] [ 300.021211][T11851] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 300.029854][T11851] __lock_acquire+0x15ff/0x2e50 [ 300.035244][T11851] lock_acquire+0x115/0x350 [ 300.040290][T11851] down_read+0x4a/0x330 [ 300.044994][T11851] kernfs_remove+0x35/0x80 [ 300.049958][T11851] __kobject_del+0xe0/0x310 [ 300.055043][T11851] kobject_del+0x45/0x60 [ 300.059838][T11851] cleanup_glue_dir+0x1a3/0x220 [ 300.065267][T11851] device_del+0x77d/0x8f0 [ 300.070156][T11851] device_destroy+0xb2/0x1a0 [ 300.075289][T11851] macvtap_device_event+0x226/0x400 [ 300.081045][T11851] notifier_call_chain+0x1a5/0x3d0 [ 300.086713][T11851] __dev_change_net_namespace+0xeb3/0x2060 [ 300.093074][T11851] do_setlink+0x2d1/0x4670 [ 300.098039][T11851] rtnl_newlink+0x15a3/0x1c30 [ 300.103273][T11851] rtnetlink_rcv_msg+0x802/0xc00 [ 300.108773][T11851] netlink_rcv_skb+0x226/0x4a0 [ 300.114093][T11851] netlink_unicast+0x7bd/0x940 [ 300.119412][T11851] netlink_sendmsg+0x813/0xb40 [ 300.124733][T11851] sock_sendmsg_nosec+0x13a/0x180 [ 300.130336][T11851] ____sys_sendmsg+0x54e/0x850 [ 300.135733][T11851] ___sys_sendmsg+0x2a5/0x360 [ 300.140960][T11851] __x64_sys_sendmsg+0x1b1/0x290 [ 300.146538][T11851] do_syscall_64+0x166/0x520 [ 300.151695][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.158138][T11851] [ 300.158138][T11851] other info that might help us debug this: [ 300.158138][T11851] [ 300.168395][T11851] Chain exists of: [ 300.168395][T11851] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 300.168395][T11851] [ 300.181835][T11851] Possible unsafe locking scenario: [ 300.181835][T11851] [ 300.189321][T11851] CPU0 CPU1 [ 300.194718][T11851] ---- ---- [ 300.200118][T11851] lock(gdp_mutex); [ 300.204054][T11851] lock(cpuhp_state-up); [ 300.210936][T11851] lock(gdp_mutex); [ 300.217389][T11851] rlock(&root->kernfs_supers_rwsem); [ 300.222884][T11851] [ 300.222884][T11851] *** DEADLOCK *** [ 300.222884][T11851] [ 300.231077][T11851] locks held by syz.4.1455/11851: 2, last CPU#0: [ 300.237428][T11851] #0: ffffffff902508e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 300.246531][T11851] #1: ffffffff8f7fffe0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 300.255744][T11851] [ 300.255744][T11851] stack backtrace: [ 300.261668][T11851] CPU: 0 UID: 0 PID: 11851 Comm: syz.4.1455 Not tainted syzkaller #0 PREEMPT(full) [ 300.271071][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.281152][T11851] Call Trace: [ 300.284462][T11851] [ 300.287433][T11851] dump_stack_lvl+0xe8/0x150 [ 300.292060][T11851] print_circular_bug+0x2e2/0x300 [ 300.297125][T11851] check_noncircular+0x12f/0x150 [ 300.302100][T11851] __lock_acquire+0x15ff/0x2e50 [ 300.306991][T11851] ? __pfx___mutex_trylock_common+0x10/0x10 [ 300.312928][T11851] lock_acquire+0x115/0x350 [ 300.317468][T11851] ? kernfs_remove+0x35/0x80 [ 300.322095][T11851] down_read+0x4a/0x330 [ 300.326276][T11851] ? kernfs_remove+0x35/0x80 [ 300.330910][T11851] kernfs_remove+0x35/0x80 [ 300.335356][T11851] __kobject_del+0xe0/0x310 [ 300.339893][T11851] kobject_del+0x45/0x60 [ 300.344160][T11851] cleanup_glue_dir+0x1a3/0x220 [ 300.349063][T11851] device_del+0x77d/0x8f0 [ 300.353463][T11851] ? __pfx_device_del+0x10/0x10 [ 300.358445][T11851] ? kobject_put+0x50f/0x550 [ 300.363064][T11851] device_destroy+0xb2/0x1a0 [ 300.367680][T11851] ? __pfx_device_destroy+0x10/0x10 [ 300.372920][T11851] ? kernfs_remove_by_name_ns+0x101/0x140 [ 300.378691][T11851] macvtap_device_event+0x226/0x400 [ 300.383946][T11851] ? __pfx_ipvlan_device_event+0x10/0x10 [ 300.389621][T11851] ? __pfx_macvtap_device_event+0x10/0x10 [ 300.395408][T11851] notifier_call_chain+0x1a5/0x3d0 [ 300.400591][T11851] __dev_change_net_namespace+0xeb3/0x2060 [ 300.406452][T11851] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 300.412743][T11851] ? __lock_acquire+0x6df/0x2e50 [ 300.417719][T11851] ? __lock_acquire+0x6df/0x2e50 [ 300.422693][T11851] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.427760][T11851] ? rcu_is_watching+0x16/0xb0 [ 300.432555][T11851] ? trace_hrtimer_start+0x82/0x200 [ 300.437822][T11851] ? validate_linkmsg+0x765/0x950 [ 300.442907][T11851] do_setlink+0x2d1/0x4670 [ 300.447359][T11851] ? lockdep_hardirqs_on+0x7b/0x110 [ 300.452611][T11851] ? __lock_acquire+0x6df/0x2e50 [ 300.457585][T11851] ? __pfx_do_setlink+0x10/0x10 [ 300.462498][T11851] ? __lock_acquire+0x6df/0x2e50 [ 300.467474][T11851] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.472543][T11851] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 300.478391][T11851] ? __mutex_lock+0x1096/0x1550 [ 300.483305][T11851] ? __mutex_lock+0x5d4/0x1550 [ 300.488122][T11851] ? rtnl_newlink+0xc10/0x1c30 [ 300.492943][T11851] ? __pfx___mutex_lock+0x10/0x10 [ 300.498015][T11851] ? ns_capable+0x89/0xe0 [ 300.502388][T11851] ? rtnl_nets_add+0x16c/0x300 [ 300.507191][T11851] ? refcount_inc+0x46/0x70 [ 300.511741][T11851] rtnl_newlink+0x15a3/0x1c30 [ 300.516508][T11851] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.521603][T11851] ? do_syscall_64+0x166/0x520 [ 300.526434][T11851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.532555][T11851] ? kasan_quarantine_put+0xbb/0x1f0 [ 300.537885][T11851] ? lockdep_hardirqs_on+0x7b/0x110 [ 300.543127][T11851] ? nlmon_xmit+0xb0/0x100 [ 300.547581][T11851] ? kmem_cache_free+0x182/0x650 [ 300.552555][T11851] ? __lock_acquire+0x6df/0x2e50 [ 300.557528][T11851] ? __dev_queue_xmit+0x29b/0x3820 [ 300.562680][T11851] ? __local_bh_enable_ip+0xd6/0x140 [ 300.568005][T11851] ? lockdep_hardirqs_on+0x7b/0x110 [ 300.573243][T11851] ? __dev_queue_xmit+0x29b/0x3820 [ 300.578415][T11851] ? __local_bh_enable_ip+0xd6/0x140 [ 300.583734][T11851] ? __dev_queue_xmit+0x29b/0x3820 [ 300.588974][T11851] ? lock_acquire+0x115/0x350 [ 300.593681][T11851] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.598748][T11851] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.603813][T11851] rtnetlink_rcv_msg+0x802/0xc00 [ 300.608803][T11851] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 300.613962][T11851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.619461][T11851] ? ref_tracker_free+0x689/0x830 [ 300.624532][T11851] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.629941][T11851] netlink_rcv_skb+0x226/0x4a0 [ 300.634741][T11851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.640264][T11851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.645591][T11851] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.650832][T11851] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.656079][T11851] netlink_unicast+0x7bd/0x940 [ 300.660882][T11851] netlink_sendmsg+0x813/0xb40 [ 300.665708][T11851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.671034][T11851] ? apparmor_socket_sendmsg+0x98/0x360 [ 300.676626][T11851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.681970][T11851] sock_sendmsg_nosec+0x13a/0x180 [ 300.687034][T11851] ____sys_sendmsg+0x54e/0x850 [ 300.691836][T11851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.697159][T11851] ? import_iovec+0x73/0xa0 [ 300.701687][T11851] ___sys_sendmsg+0x2a5/0x360 [ 300.706392][T11851] ? __lock_acquire+0x6df/0x2e50 [ 300.711354][T11851] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.716584][T11851] ? futex_wait+0x2a2/0x390 [ 300.721138][T11851] ? __fget_files+0x2a/0x420 [ 300.725762][T11851] ? __fget_files+0x3a2/0x420 [ 300.730480][T11851] __x64_sys_sendmsg+0x1b1/0x290 [ 300.735453][T11851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.740981][T11851] do_syscall_64+0x166/0x520 [ 300.745612][T11851] ? trace_irq_disable+0x3b/0x140 [ 300.750666][T11851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.756762][T11851] ? clear_bhb_loop+0x70/0xc0 [ 300.761472][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.767392][T11851] RIP: 0033:0x7feb64d9e159 [ 300.771841][T11851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.791492][T11851] RSP: 002b:00007feb62ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.799933][T11851] RAX: ffffffffffffffda RBX: 00007feb65025fa0 RCX: 00007feb64d9e159 [ 300.807937][T11851] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 300.815933][T11851] RBP: 00007feb64e3503b R08: 0000000000000000 R09: 0000000000000000 [ 300.823933][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.831926][T11851] R13: 00007feb65026038 R14: 00007feb65025fa0 R15: 00007fff9e0f4648 [ 300.839943][T11851] [ 301.573600][ T5278] veth0_macvtap: entered promiscuous mode [ 303.780599][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!