last executing test programs: 2m33.741813738s ago: executing program 4 (id=2311): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x7, 0x0, 0x0, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r4, &(0x7f0000000080)={@void, @void, @eth={@empty, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x4) getpeername$packet(r1, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000018c0)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000001940)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001980)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x40}}, 0xc0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) r8 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = gettid() r10 = getuid() r11 = getgid() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0x4) sendmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00'], 0x40, 0x4010}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m33.372230193s ago: executing program 4 (id=2317): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) r1 = socket$inet6_sctp(0xa, 0x2, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000400), &(0x7f0000000640)='%pS \x00'}, 0x20) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004340)=@newtaction={0x1960, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x18e8, 0x1, [@m_ipt={0x18e4, 0x17, 0x0, 0x0, {{0x8}, {0x1064, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x0, 'raw\x00', 0xe, 0xff00, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x859, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1960}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) (async, rerun: 64) recvmmsg$unix(r5, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) (rerun: 32) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f00000001c0)=0x4) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x40008000) (async, rerun: 32) write$bt_hci(r3, &(0x7f0000000640)=ANY=[], 0xc) (rerun: 32) 2m33.006844142s ago: executing program 4 (id=2323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000d80)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x84, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x800, @mcast2, 0x2448}, @in6={0xa, 0x4e23, 0x7a, @mcast1, 0x9}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x12, @private0, 0x6}, @in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0xa01, 0x20, 0x2, 0xc91b, 0x400, {r3, @in6={{0xa, 0x4e20, 0xfffffffe, @private1, 0x400}}, 0x9, 0x7a9, 0x80, 0x8, 0x4}}, &(0x7f0000000180)=0xb0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="00042abd7000ffdbdf254100000008002201480100000800270001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8401}, 0x10) 2m32.838307926s ago: executing program 4 (id=2324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003980), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003a40)={&(0x7f00000039c0)={0x44, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x40004) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m32.380692531s ago: executing program 4 (id=2329): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x40) 2m32.19306755s ago: executing program 4 (id=2332): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r3, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/119, 0x77}, 0x2ae7f4ca}], 0x1, 0x10000, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FREEZING\x00', 0x9) 2m17.091651979s ago: executing program 32 (id=2332): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r3, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/119, 0x77}, 0x2ae7f4ca}], 0x1, 0x10000, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FREEZING\x00', 0x9) 5.230669368s ago: executing program 0 (id=3603): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$sock(r1, &(0x7f0000003100)={0x0, 0x0, 0x0}, 0x20000004) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}]}]}, 0x38}}, 0x0) 4.966211512s ago: executing program 1 (id=3607): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.942443038s ago: executing program 3 (id=3608): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x5000}, 0x50) 4.847841565s ago: executing program 0 (id=3609): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="120000001c000100030000000000000007"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="0f0c29bd70000700000023000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) r11 = socket(0x2, 0x2, 0x0) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r12, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r12}, &(0x7f0000000140), &(0x7f0000000180)=r11}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r12, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r11}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000327bd7000fddbdf250f00000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="04001400080014002b2ef7281400140076657468315f76697274b133e162fda75f776966", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r15 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 4.730681707s ago: executing program 1 (id=3610): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fcb60300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7040010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="05003300b4"], 0x24}}, 0x18) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x84) 4.653665979s ago: executing program 1 (id=3611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x200003, 0x0, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1814b150}}}, 0x3a) getsockname(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030400000000fedbdf25000074f4", @ANYRES32=0x0, @ANYBLOB="0008000007500500200012800b0001006272696467650000100002800c0023000604000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001d40)=""/219, 0xdb}], 0x1}}], 0x4, 0x400122a0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f00000005c0)="41589c06cc19828ca9ec76c85f53111783a2637a91f05fe60d02f2649d1ab432cc60d9a0d9b98898707ec2b11494527157cdd952f634b85feb2a53d23c034406ce468fffa44d6590e9a29b8effad31b727c09151", &(0x7f0000000680)=""/64}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={r4, &(0x7f0000000ac0)="adb88fef89124980e74389dd21ac6d9a95a3d10ba651c495715034cc3ed725fcf7a29b8028a5c6db668c5bca6625ea34fe11bf8f14f511da5da48a68914d5a890af159e8cea72532afd7efac3532e6bf892e7288a3c3a50825cbc2a6866acdac3ca3890289b50dfd3150b71bedd4a3b6b50ff6c4fdf9dfb8f8ef775b830ed9b5932d6e9443f92356a6ca3d1fc79a42dfbf6b435c949c5d62637ddd8996c342e3754b5d070c122448c5a944f14f371f07c7cb82343b22def8ebbb8ed6832e820ec11dce93578ae7e4f0ae8d903de79775390b8a45fe2f7cda1d42e47c5368ba3e997e4af17484fa0eeb4aa002a42c85667f160322a5a6f6b80d6db263fef4ae93d0c1f09cc9d40699572082bb968e259dd65e123a320ff63bcfccc0c8b36ba6212ae398c584c9239ac0de57ef5d0ec75ba36c742ae2813549a642d9a2cf6d9a273e31287ad7da7463c849e801b481d8c4a0824ac90a2782b998c3bead47b4fec253bc514b5728e5734e9d141b7a6cd653c451bedff18a7733128097651f3de1af7d4fe3e1b9628e76c7c380ad4728fbbfafa3a0cdcb915e366d91807b8f7ca06f1e799cfd756233e7be12b835ba65ed7f3ca34f6a6618a3b459cf3f3fc10b95d53c3b00613b733fc18e5d75dd9458eecf316d361b77f10e75e957b472d3bf5e8f4d50d8e7b4c19efa6ba3024ccf45ce9fbfef8a0b9559f47acfe88e4ad6264b2a3cd3f1216868910a6a608d404703150320451441fefac67596440061f84e654f04e6e729c3c45dbf6e5ed3f2a6ba43dc6b124a7605cb54ab531e13871014bfb9c865f065590734eb2b5ef8d9c145203eb7c6d10119b0f0be2e4e5b95bc432a857c3071d4db54a869fd22a0e059b54e946525c7f89c1bbe57c3836952f3a069cdf560d2e685b866dec06e4afe8b0972dfc13ddff8d7cb3dec1b512c12fba2b105b1098c6e75f1c40d0e5c3db5ad753c299e91013fc11b6a59b280b83fa087112a22c5a6d8207415d40511ea2c1464c14ae532fffe5b1a2c37b005b8f9eb6d0d82fda00279159b48b53f26767b0c159e1efa91ac6c8412240177492c9910112843ea1df6971db9a2b92414dade82f62d13f5bf082c4347607dc5f936116ec912d720eed96ccce6dfb62323d43d4890c39f5a8e2be658409e7a0252db265b60f9dc5ab504bffb00d93ff6f320b8b4967b3fcfcb87950b4fc04158dec1f7cd70d8f0ffa8629bd5204947dfb10af223e1e101e48e6aa3e3d28f7735bdea544b00d77977fdeb4bc2c0b67e351a72c761bbfb0d3a6a8bb468ba010d209a101a6b2531b110e9b8b6d24b2e05360353e194d3665187fbd29696f7aa5dd0cc0a846aac378fe6efdc5968a68eb9f6c79b33ab76dbd67ce0a4976298a828549c760a69f5133f9ac814b961ea91f3fb31b3ff21e62dbd259d6dce0a73d1b646c0a106f7ad85bd98978f22ceb8f9e214307fe6fefe9065e73a885dafc06efc8863539ce917cb694ef52143a08208efda3bd6ca695c994444570a515eda5bc80ed796a8fda71f10ef3276e0a8f73a0a1e049faa6c29ffb9cce4c09a18ef7aa928843df7deffc0b813c1ecf0fd9d5a2ba1e61e09fbe373f93614ea61959b95df8cdf1203408931e5e7cbb72e674091fed508af910f8edc428bc174f016166b099d49a283db2174c3722acfe4bc9ca52d6b1973d25f8b63e977e2ead166c2095c5491980f24be58e281f8cfaeeb3e60a77f71ac6439b9409db4ade8797526fe523c60198ed31543d1364fc7294fc97669969f9a0213dcd4d57c79c0ec849ed6ad442843aea2d3ecdec6b20be2bfcf81df1383764e7b33d7234f9ad6503d3911ac62cc6f1f6e0f28b32a8d12a8d1c595730d738f6700ab62b19c4df47c5eccb9b9f59235c13877df96e447d020eca78f9aee8553a2bd9cc61aa29c9efbf2ccf9b2544a9dafbc946dead6c37bde53baa89fbd0262c0ee0b13b6771bed2f375e1a1f24d8f78cd30eba94e80f80b6477452b903611d5b9303298b7413b2106f06bb9451b12f0af2086b36f7908170f0f05562fcbd01561a5660448ef9bfdb347ddefe0b2d114142387b6392da7ec0f1b00ae80d5f84bcf105bf3d70ec9cb3807bb596646ac5f8641032b89b9ff9aa392ba5346daf277b4acf227e3bc10330e451d69703a6b90527458de5be342f9337b2a30db09809d781082573d99849a2da692c52ac1d07e0fbb3c3bd132bf33ef7ccf20873fe001b9549e6a594cf2575417aeeea0f847df95c14ebfc79b0065566f0c0b5eaa89257a8653405345215db93be5dd55b908b4a5042595eb131bf6db3ecaf0de2d3319cae4df954245e202b9fc2b73102119e4cd7b97561ac995e8eb2404df45bfba361e96c52ffebf361df91a23c609099091a02b31418bdeaf35b07aa11d999f05c9b34f2c1371bb82a995f6b9a7ee639b5df56da0f73057aeabd788fa980e52a370d24b631b2777c3b135b878f96c81f62c44622eba709281b04f312798b9f14fcd4874152be79109010c1a534427d0f32039cbe9294a80ba6c0cd897e42b0767818918b2e04c8a9069655410ff89f49a82e96daeaa66ca94634e03a11abc35981419a3b50786afba56865f51e2f688d8dd430d91a1cf45cf9753eb8e38589aa8691d531e967753a9d8bf33d9d04dd2e57342a9443fab73f35d5aa149e7059d1df067e2766a8f88881fca6c49912da52f29fabd60124e23707f2f13435c4a492799ff73a6b11afa016bd5a6cfa438790bcdbd8c8033746bc134d86213d2be5e33cc6b6c8cdb6b55ce5e627015c652437a01830a2dd98fa97967e54080a578049faa3eb6991878ff3aa221c92afcd58dcb60a1bde4a1ac1f8338288ae4093f7e57af5c76fae5fbabb388a0baea6ca3ccf1feeddf2784a4efa808100160730007e664c59fd03218e68e6db3eab888a6fc2b7bb510cefc0df4769f84760291c572306993456185b93095dc6af96d176168952e552ccf3eb1764a6de930a2a8cdf9008d7a3535755def88cddc6154fe62b43b0aed66217a89ca5cdd43d974a4e9de605d83c4f081d9300e20f3fd6664a8d61b2dab941e479d4ebc778c999cc0c11da6d88e8927c95f307ac486cdf1f4548228bd5b3e236e4c2b5f57cad1a21e4eb1ae865410dcd37895c97a60be3f798bb712e8c0910277fe774c999d2d70f3f3855d34e662af602f61bc236400b390d691f96d15d60cb3d20ed815c626a870ac8fc3e9f776dde360d23d7c525c50fd12d01ff7da8db886b4aae1640341c8840bb986a53e19e2993027994dfec9b94ee6ab65ebd276970089c79265e6ae72b6db4a6cfdc7182be663c1a5ac57fd7f7f23bb9e74dbc1ffd2183ae0d50d92822708a125dd927a58b6dfca8746784c74da79c1293a59636e7006185b959674557005da45c413a0567e051a33c23154c8fea9745159bb327f674c7d934c24a50822aa40ea24c150aba4f7579532c6ee8c9359a9eaf9d6203af71f1ec7ceb004f64a9efcfb461079d4aac1f5f41e9ba4a1ffe13424e12f984078477bf3141bba95450699b77adb46fb81f076871705d6beae9912bf57f25674ed939fe0db36a76d0de9fe2bf8e0cc8727add36abdbc85cad0f9b85d816687aa525f220705de662f0f4b569c7b64676923dc830953e419082ac775bb19bf5be37242a99f8e9e7f7f3153764594927b9f0fffb469b42f11ab5844a6ab1eabbbc9d805e709de373c06aefd7b6afaebc6a7eb8dcbb3819ff7ff25e40a9013bcb9fefda687c29757e8bf74d26035eeda2995776694761f705f0cfc7c2155fad4e29c54627bb9b83843f69e60d9ede49f1cb828a7e24a0e4591bc698b3f6f4f51909f6d2b31c58e6379874a8c5a27652f0ba598d697eca4300503690eca07d8bc41f45e752ed347f800598bde5181b8b6201a29a8559ce701821f4e1b21b7531ef98e88d0bcfe13a092a78fbc4feb4dd11a2fd41e1e54779938abb19012bb8737142ad3430d3b358f6e941992983ea192335b22f818ac77c41ddfaac66e3f6d0c66df679b291c9681650cfbb014baa17c5ecc02d3feccf39f421045c35cd36b6aaf2f610ed7ca3fdac78247e80880a285899f2aaa33635c2a8829197f0d733588a45d6c967f3fc6d3587c0adf7abfde2daf532f253fd5c15101379620384c0865613a1f3ef8fa5ccde315d846e91f1d1300d8f026182801a5a7c31a59ff4eb9b68efec06388c75790c7b8c51ab10cf1b9aa477f27a2883dcae854011ba58480d88d8bbba1323d831895850943549e1b7902b00978a8f1049cc0fef3002fab4cfb359766a74ba1c19c19a4c99f055688b3ca9e85e065efc5022d35f129a739b17e1c013ef2e5ed148c9f733abe8b58cc010bbefcc9471bc6ea316e854dc7896e49e2bba29eeb3cb8225952e6447dd91aa407f8dfee2230226d4003a61e6f6cad07f14c5f92c4ca03aafc500a43ff45c427f1d6dd44799586b5a5a87c003589f73a3fdbee5cb14931c2499774601b88e79cf1c839ef9fc323dfdb8333709a946f2a011195d8c4ce6440d0329b1c65dcee83f46139d398ad197e693b5a8ef1f7cac8dcd8dee72fe66f4dac56b095b4fa3a806e7a8c9c171a574f9ffdaccfaac4c9bba8a7edf6ea39d0267a6d366141945eaa6e04f2401751add21582012a995f72fe1557227532513958935f6fdcfe143a69b36e3f58e159e75358733ff90e54a8194327b9c7a5e4534e9977b24b510c68cd13a4e7d6df9a1d2980088204b664050df56a342bac8f03d733cd3ce6df704f9e540c64083bd24e3a41a77e080bd0f8043280c98cdc45d0c504cfbff5f9bd4dc727c56a6df73c633c46bde01cff767cd852c519da7faf14f559bf3b144ee72c3a8552c406f9290d5f91f45dd2af88954e7c5963530c264488ecd733583b4c10cdf613f594a5b85db6512605e7ffc1479db3657011adc887e0f0b123631f948d44680783125a8c00e776c5c5ce08fa72eedddb00fbdbededbfcb9add177f88e2690ed7dd2dccbb9ae16e108d7ead5a09cfe48d33eb3a742f90e7fdc8ea49b66273c7158d3aad4406d11bbda96f1ba7cac96883c1c81038eabf0c2d9de106000e5250c24f5c5fe3af4b929a8367dfd1d4f658cf462a0452b2a2ae994bd6a2c1dd17cdfed2dd1ca12bc4d636cd6c822c7b7535caa3afaa0d6e57ef0b36735e9484b2a2c8613f7ca1480dfaf5f9572fbb2b59d866c8405b0bc902bf816c7b65cb7778974f9e60e646894663df0cf29dad210ee637f1af33b14b66a28848dbbbba3c9d474c3785832e93849c92f592b4d854020a45a6ba6ea9635a065b69f52db3f9396480a9e9a7348e2d897cb158fd06cebd105654346b8c4e5a8efb25e156e09764b707caa0bf0fbdc932ff1b77bbeea2f37aa4a091ec30fc6b23f92ce34b9bde0e211e60dc9853e288dc428cbae2047f3f5ca5fcad210c81b337dc436e5956283933e52fe8e277888abca8ed48a5cfbbb6fa4eb93996200a29a8c8fbc4fc3e8c42fb4b1f6d8ba234c834afc3e52615cff26ee074053e4609cf243603bb70cc962ed3651394f99150b6db1ef444c806add7da5c901723dfefd175bd414a6398883f0eb03d97ea6825490b419622df7ac97cd2cb7b3afffa1dcd03a0b5ec72dd4b851b5a303d8181fb8d1e109054acb3ce6f2e10c903cb63e398544c88ef4002af8bd764b3adf6c1e5ba07f678697baa8c4c0e8e6b2988bc29d7ecc490f0402941540fe45d5d5d68ebe05edcddd569fc3f03ce1a6ac6c70388aaa0665746c3ccac99076039565a49e75d9129e11cb48329816391200", &(0x7f0000001ac0)=@tcp=r3}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4000882}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x3c, r10, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000) ioctl$SIOCX25SDTEFACILITIES(r11, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008010}, 0x8800) 4.310224308s ago: executing program 5 (id=3614): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB="080000000000000000000900000000000000000070bd9a6ceaf0ff3574a1a15f81004c64d11102eaf0221378f7cb48d9c78c4c34add97c0229ed4eb47a8666cf74a813beaa9953ddd96631e108", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x12, 0x10000000, 0x1, 0x7}}]}}]}, 0x44}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f00000007c0), 0x0}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r10, @ANYBLOB="040026bd7000fedbdf250600000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) r13 = socket$inet6(0xa, 0x3, 0xff) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r14, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) setsockopt$inet6_mreq(r13, 0x3a, 0x0, 0x0, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r16}, &(0x7f0000000000), &(0x7f0000000080)=r15}, 0x20) 4.207406238s ago: executing program 5 (id=3615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x46401}, 0x0) 4.130797806s ago: executing program 3 (id=3616): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @local}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x18, {0x2, 0x4e22, @rand_addr=0x64010100}, 'dvmrp0\x00'}) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) sendmmsg$inet(r0, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000) 4.053210093s ago: executing program 3 (id=3617): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000680)=@canfd={{0x4}, 0x25, 0x2, 0x0, 0x0, "d9d2a7ae9dcf4d69beb15eec7d344087db3bf1d23ce4e5320ed7e06f51a642a2ffe41cecf2ed670bd1a9c6363fd3c9440abf43540285588003fd7e950b08d518"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x400c890) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000000000000084000000080000002001000000190000000000000000000020"], 0x58, 0x20004851}, 0x24000052) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) recvmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000200)=""/236, 0xec}], 0x2}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001010400000002000000050002000000000010000180fdff01007369743000000000180001801400020073697430"], 0x58}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$can_raw(r6, &(0x7f00000001c0), 0x10) close(0x3) 2.027211788s ago: executing program 2 (id=3618): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f00000014c0)={0x1d, r1, 0x0, {0x0, 0xf0}, 0x1}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x5, 0xffffff27, {{0x29, 0x4, 0x0, 0x3c, 0xa4, 0x64, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @local, {[@timestamp_prespec={0x44, 0x14, 0x53, 0x3, 0x6, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}, @timestamp_prespec={0x44, 0x3c, 0xef, 0x3, 0x9, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0x982}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@local, 0x10000}, {@multicast2, 0xb881fae}, {@loopback, 0x580836b0}, {@multicast2, 0xed7}]}, @timestamp={0x44, 0x18, 0xe4, 0x0, 0x4, [0x2, 0x4f58, 0x80000000, 0x3, 0x2]}, @ssrr={0x89, 0x27, 0x70, [@local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'tunl0\x00', r3, 0x700, 0x8000, 0x3, 0x8000, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x65, 0x0, 0xa, 0x4, 0x0, @broadcast, @empty, {[@generic={0x7, 0xc, "7a0c180ac71627e6dd1e"}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31040000000000f032001600000018000180140002006e657464657673696d3000000000000005000200010000000500020003000000050003"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) write$rfkill(r6, &(0x7f0000000080)={0xfdffffff, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r6, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x44, r9, 0xb97534d5fe970ccf, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2b7}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x20, r9, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40580c0}, 0x1000) 1.633720517s ago: executing program 3 (id=3619): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="20000000400007012bbd7000fedbdf2503797af4f7a89a260400018004000800"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x8, 0x0}, 0x8) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r7, r5, 0x0, r4}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r12, 0x24, 0x0, 0xfffc, &(0x7f0000000140)=[0x0], 0x4000000000000128, 0x0, 0x0, 0x0, 0x0}, 0x40) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0x101, 0x9, 0x2, 0x1, 0xdc71, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0xf}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x9, 0xffffffffffffa0c0, 0x7}) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x20, 0x10001, 0x5, 0x9, 0x80, 0x1, 0x60, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3d}, [@jmp={0x5, 0x0, 0x0, 0x8, 0x9, 0x0, 0x14}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x6a, &(0x7f00000000c0)=""/106, 0x41000, 0x49, '\x00', r1, @xdp, r2, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r3, r4, 0x9, &(0x7f0000000540)=[r8, r9, r10, r11, r12, r13, r14, r15, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x2, 0x4, 0xa, 0x1}, {0x2, 0x1, 0xf, 0x5}, {0x2, 0x2, 0x8, 0x7}, {0x2, 0x5, 0x9, 0x1}, {0x1, 0x3, 0xf, 0x5}, {0x0, 0x2, 0x0, 0x5}, {0x1, 0x3, 0xb, 0x7}, {0x5, 0x4, 0x9, 0x6}, {0x2, 0x4, 0x9, 0x7}], 0x10, 0xfffffffd}, 0x94) 1.630728732s ago: executing program 5 (id=3620): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='e', 0x1}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 1.624698337s ago: executing program 0 (id=3621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xd38, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xc68, 0xffffffff, 0xffffffff, 0xc68, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x2}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x6}, {[{0x2, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x200}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x9, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x207}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x6, 0x1000, 0x4, 0x1, 'syz0\x00', 0x6}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xd98) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000140), 0x4) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a006da800000000000000001c6f"], 0x24}}, 0x0) (async) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110, 0x2}], 0x20}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x17470f201d1ec251}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x6, 0x800}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0xfe}, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r10, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x24008094) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) pipe(&(0x7f00000000c0)) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xc, 0x4b736b782fcb80b1}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.611440209s ago: executing program 1 (id=3622): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.546448663s ago: executing program 2 (id=3623): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) (rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r3, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) 1.341465822s ago: executing program 3 (id=3624): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10840000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, r0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xcdb}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "9b48693eecaf8ca7131f6b0fcd3d46fe2e31d7098137bdcbf6f159f64c28b62dfffdafeccfbf74585aedb62122586966fdd332e82e9ab9e1e51e6e616af81b88d57deb2a04696625925b708cd0f19f60dbd05a6e6abc8a43812cc80cc6cf3292409ff9e9154038137d590ffc4b37705ca1afe47a7962d8829f3d1fa9063caea5dcdf93f0f3ac1633409e987b4bedbcd8d71fe1dd9196664fa3d9153e4dfbccb613f7adebf21849980889e73f780613219894f892d409e4146d984e344cb0f3c396ee8b7bb6a34a5b31c3c12188a7fddf523080448d3f72ab58723d9ce244ad68c2"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x41}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ee4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9e}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000380)={0x0, r1, r3, 0x10000, 0xffffffffffffff51, '\x00', {0x3, 0x2, 0x80, 0x2, 0x3e5c, 0x0, 0x5, 0x5, {0x1, 0x6}, {0x8001, 0x7}, {0x8000000000000001, 0x200}, 0xfffffffffffffff7, 0xb4, 0x7, 0x2, 0x6, 0xd2, 0x3ff, 0x7, 0x2, 0x3, '\x00', 0x800, 0x2, 0x35e3, 0xe}}) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xd64d1a7e22620d43}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000854}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000600)={@empty, @private}, &(0x7f0000000640)=0x8) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'veth1_virt_wifi\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x1, 0x700, 0x80000000, 0x2, {{0x11, 0x4, 0x2, 0x2f, 0x44, 0x66, 0x0, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0xc, 0x79, 0x0, 0x4, [0x1, 0x1ff]}, @rr={0x7, 0xf, 0x8c, [@rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xf9, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x8717, 0x7800, 0x8, 0x5, {{0x10, 0x4, 0x0, 0x3, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@rr={0x7, 0x7, 0xb0, [@local]}, @lsrr={0x83, 0x7, 0x92, [@private=0xa010100]}, @rr={0x7, 0x17, 0x39, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000e80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a00)={0x408, r7, 0x318, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x716f}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x4, 0x1, 0x2}, {0x8, 0xe8, 0x7, 0x3e70}, {0x6, 0x14, 0x50, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7991}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r13}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}]}, 0x408}, 0x1, 0x0, 0x0, 0x4018004}, 0x20000045) (async) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, r4, 0x304, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r13, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000011c0)={'bond_slave_1\x00', &(0x7f00000010c0)=@ethtool_dump={0x0, 0x70000, 0x630d, 0xd6, "0929b6ea24be227bceb4b02f4f6b67ee3037545647b015c3afa92fad7a87ecf7fd103651fa1dc050d302f24a9e6e03aa64f8e916823708acae1bdf251c8b3a5cd1da3ef938dad5d315a1be891d7d856470611cd09ee30710408bc4b695a8dcdddccd1726529ade284aa1010195d72985f22e4b02e9917dcf84302be0606d0af9e8ff30c3e7307c168bc1adaaaec1384c5021762488f30ff1da7da333f9d3237652042ee66b9a2a7fae429bafab2ad2fc892a53368157373837b060ba1549eadf3d00c1e02fd7bb8d2913c55b10af09d804121ee173f4"}}) r17 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001200), 0xc00) getpeername$packet(r17, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001280)=0x14) ioctl$BTRFS_IOC_ENCODED_WRITE(r16, 0x40809440, &(0x7f0000004600)={&(0x7f0000004580)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="64b96090cd3dfc1fca31b16b4cc2e32e1d83a2051bbac62135ac4c3ae0", 0x1d}, {&(0x7f0000003300)="e4626e2a733e6bbb51f72d71fda0fb02a5b8b3a16ea66ab540823085bd8eade20df50f6673a6c39716db6eb37bf5", 0x2e}, {&(0x7f0000003340)="3478bb40eb198d67ce3a684952ce445978e9b826a6754688ff844a787699b339b925b95d0ffb7ea694f41c359cc0b46efa86639fc370160fd8474d589f488a6645bf5829b020ad2464aa52343add72459a0b2bdeeaf6c92dc622fb084a933061a71ccbe48781c5924a2424fd5da26d7e67e0ab40928e46317503ea0d457bd0769fc60041056e6fb25deaa128f86a7217510797e8c5899160107080056473d5a6beba02a8c9298a567c3fba06ccb27c11cb7057d75522665f7010f2e7a63e235871b350acc3ace40e3ae9d220df34ee53e5f884469556374c5c1c0dd6", 0xdc}, {&(0x7f0000003440)="bad56bba9214433029a7e069ffba0658f53de98819ad5b6a7125b0a51f969739232ecaa349005e96a5fcdc324cdb41a16d9a3e8ccc7fa5fcc51451d1b8c0e1926f66bf10c3ab5b947ca68576ddf2be3fac8dc31ae74809eae56f1eb9598540218b4033932a3c0bfc47959c01709ef6a40360f4b4be053ae6c01bc9a181d2cb96d3709ca35956a7664d1e9cfde49fdcefda8e465121b5f30a8ca500ca59c240030d43796e075ad17b8727b535c49cf0dd804d2764d16b189a8f561a6aa3abeb23e38dd9f756c623c194b3b1ee3c43c5400c831712b92c5dac5c94d009", 0xdc}, {&(0x7f0000003540)="2badc97da438d1a38a662bc709459ffd99584f23d69ca973c60ea5c161a5599e1be02fc1486db8e90aae740f", 0x2c}, {&(0x7f0000003580)="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", 0x1000}], 0x8, 0xff, 0x0, 0x6, 0x4, 0xbdd, 0x3, 0x9}) 1.320479663s ago: executing program 5 (id=3625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/140, 0x8c}], 0x2, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x40000002) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r6, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.235460111s ago: executing program 0 (id=3626): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) (async) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e60, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0xf8, 0x0, [@mcast2]}}}], 0x28}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f00000020c0)}}], 0x4, 0x20002040) (async) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e60, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0xf8, 0x0, [@mcast2]}}}], 0x28}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f00000020c0)}}], 0x4, 0x20002040) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) close(r4) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket(0x10, 0x803, 0x8) (async) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r10, 0x25, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@bridge_dellink={0x28, 0x11, 0x81c, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x0, 0x40}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x19696e75c7be786d}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@bridge_dellink={0x28, 0x11, 0x81c, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x0, 0x40}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x19696e75c7be786d}, 0x0) 1.14188639s ago: executing program 2 (id=3627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x8}]}}}}}}}, 0x0) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}}, 0x0) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x7b) (async) getsockopt$inet_buf(r6, 0x118, 0x2, 0x0, &(0x7f00000003c0)) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 32) socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 1.131618197s ago: executing program 3 (id=3628): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x4000, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 823.300751ms ago: executing program 5 (id=3629): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) (async) listen(r1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) bind$inet6(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0x270, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff000000], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x260) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0x270, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff000000], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x260) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) close(0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="60876f2049818ece859f", 0xa}], 0x1}, 0x41) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) close(0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200200, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x10, 0x80002, 0x0) (async) socket(0x10, 0x80002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket(0x10, 0x80002, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 662.73225ms ago: executing program 2 (id=3630): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a401fe000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303fdff00000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) (async) 661.396219ms ago: executing program 0 (id=3631): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x968b23b03ba91a3f}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0xff, 0x0}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) (async, rerun: 32) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) (rerun: 32) sendto$inet6(r3, &(0x7f0000000000)="18f9", 0xc3ff, 0x4, 0x0, 0x0) (async) close(0x3) (async, rerun: 32) r10 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r11, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "df7ae5faa2299bf7000e5283f2da0d5c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 649.872723ms ago: executing program 5 (id=3632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x10, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r8, 0x201, 0x70bd24, 0x25dfdbf8, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4040000) sendfile(r5, r6, 0x0, 0x800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x100000001, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r10 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)=0x5382) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x100, 0x45f}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000068000100fcfffffffeffffff0a0000000000000006000700030000008d5dae31b6fd70f1af635ab1b121244db968bba5ad328eee9e098656ceae7474b95c1ab39b189fe251aad744a8afb0c4b55bef07aa79aeaea3904c0db78af176c05ca9b8d8fe6900c77299fe2a0d07d559670f2a4f15324d8d8665da2f7ef70299936b743c20"], 0x20}}, 0x8080) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="58c67056b574ca249ae56041b5ae979f9e6e1c5af416b70470149ac8109cc2fdbe51331a4e0179db7cd32fc076aae13a5fc75a571d173c951b5793a52baf86d84720512f6e9dba7e5976e806da592045b41a", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x2e, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 590.17346ms ago: executing program 2 (id=3633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300060800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) 482.780839ms ago: executing program 1 (id=3634): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000840)=@tcp6, 0x1000000}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000001080)=[@in6={0xa, 0x4e24, 0x9, @mcast1, 0x2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x200, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="0c0200001300080026bd7000fddbdf250f0902f14e224e2105000000ff7f00109fbd0000ff0f0000ff0f0000000000000700000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x11}, 0x4400) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r7, 0x29, 0x39, 0x0, &(0x7f0000000240)) sendto$inet6(r6, 0x0, 0xff00, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 426.786181ms ago: executing program 0 (id=3635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x200080c0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcffffff170000000c00068008000400"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4004084) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x1de) r4 = socket(0x9, 0x4, 0xffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x4008831) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 36.32031ms ago: executing program 2 (id=3636): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000002900)=""/4141, 0x102d}, {&(0x7f0000001680)=""/107, 0x6b}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000000)=""/76, 0x4c}], 0x5, 0x0, 0x0, 0x4100}, 0x8}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x8000005}], 0x5, 0x2000, 0x0) 0s ago: executing program 1 (id=3637): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x24000040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) kernel console output (not intermixed with test programs): xpected cc 0x1003 length: 249 > 9 [ 315.675966][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.697097][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.712242][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.203941][T15954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2798'. [ 316.271221][T15954] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2798'. [ 316.289403][T15963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2799'. [ 316.302485][T15962] netlink: 'syz.5.2800': attribute type 11 has an invalid length. [ 316.350295][T15962] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2800'. [ 316.954764][T15987] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.067516][T15987] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.090478][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2808'. [ 317.141687][T15987] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.163300][T15939] lo speed is unknown, defaulting to 1000 [ 317.337936][T15987] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.351308][T16000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2811'. [ 317.361999][T15998] sctp: [Deprecated]: syz.3.2810 (pid 15998) Use of int in maxseg socket option. [ 317.361999][T15998] Use struct sctp_assoc_value instead [ 317.492071][T15998] tap0: tun_chr_ioctl cmd 1074025672 [ 317.498497][T15998] tap0: ignored: set checksum disabled [ 317.625893][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.660685][ T5985] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.777325][ T984] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.786176][ T5639] Bluetooth: hci6: command tx timeout [ 317.864876][T13113] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.000151][ T148] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.028741][T15939] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.036768][T15939] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.044050][T15939] bridge_slave_0: entered allmulticast mode [ 318.052522][T15939] bridge_slave_0: entered promiscuous mode [ 318.063418][T15939] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.071456][T15939] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.079138][T15939] bridge_slave_1: entered allmulticast mode [ 318.087297][T15939] bridge_slave_1: entered promiscuous mode [ 318.128747][T15939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.149342][T15939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.300180][T15939] team0: Port device team_slave_0 added [ 318.334770][T15939] team0: Port device team_slave_1 added [ 318.479451][T15939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.514371][T15939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.585171][T15939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.637933][T15939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.655133][T15939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.732242][T15939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.921322][T15939] hsr_slave_0: entered promiscuous mode [ 318.953619][T15939] hsr_slave_1: entered promiscuous mode [ 318.994690][T15939] debugfs: 'hsr0' already exists in 'hsr' [ 319.012378][T15939] Cannot create hsr debugfs directory [ 319.361247][T16052] IPVS: set_ctl: invalid protocol: 163 172.20.20.34:20004 [ 319.428423][T16053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2823'. [ 319.452883][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2825'. [ 319.464629][T16057] netlink: 'syz.3.2825': attribute type 7 has an invalid length. [ 319.465029][T16053] sctp: [Deprecated]: syz.0.2823 (pid 16053) Use of int in maxseg socket option. [ 319.465029][T16053] Use struct sctp_assoc_value instead [ 319.485389][T16057] netlink: 'syz.3.2825': attribute type 8 has an invalid length. [ 319.497591][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 319.699502][T16066] openvswitch: netlink: IP tunnel dst address not specified [ 319.753114][T16068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2828'. [ 319.867173][ T5639] Bluetooth: hci6: command tx timeout [ 320.919716][T15939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.939787][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.948535][T15939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.975358][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.991901][T15939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.007359][T16102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2840'. [ 321.048159][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.086966][T15939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.121506][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.352064][T16125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2844'. [ 321.409934][T15939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.484261][T15939] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.522049][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.530640][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.571766][T16137] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 321.594452][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.601801][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.737501][T16137] 8021q: adding VLAN 0 to HW filter on device bond13 [ 321.781939][T16146] macvlan4: entered promiscuous mode [ 321.788540][T16146] macvlan4: entered allmulticast mode [ 321.795442][T16146] bond13: entered promiscuous mode [ 321.802238][T16146] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 321.820380][T16146] bond13: left promiscuous mode [ 321.891918][T16143] syzkaller0: entered promiscuous mode [ 321.911149][T16143] syzkaller0: entered allmulticast mode [ 321.947266][ T5639] Bluetooth: hci6: command tx timeout [ 324.031049][ T5639] Bluetooth: hci6: command tx timeout [ 324.721238][T16188] tipc: Started in network mode [ 324.741173][T16188] tipc: Node identity 4, cluster identity 4711 [ 324.765815][T16188] tipc: Node number set to 4 [ 324.832668][T16197] sctp: [Deprecated]: syz.2.2862 (pid 16197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.832668][T16197] Use struct sctp_sack_info instead [ 325.059824][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 325.491329][T15939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.571941][T16231] vlan4: entered promiscuous mode [ 325.581678][T16231] geneve1: entered promiscuous mode [ 325.598270][T16231] vlan4: entered allmulticast mode [ 325.618819][T16231] geneve1: entered allmulticast mode [ 325.721350][T15939] veth0_vlan: entered promiscuous mode [ 325.775485][T15939] veth1_vlan: entered promiscuous mode [ 325.905518][T15939] veth0_macvtap: entered promiscuous mode [ 325.955424][T15939] veth1_macvtap: entered promiscuous mode [ 326.007582][T15939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.067934][T15939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.095478][T16243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2876'. [ 326.118041][ T984] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.137122][ T984] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.173321][ T984] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.189632][T16244] netlink: 'syz.3.2875': attribute type 5 has an invalid length. [ 326.204405][ T984] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.236356][T16245] FAULT_INJECTION: forcing a failure. [ 326.236356][T16245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.307651][T16245] CPU: 0 UID: 0 PID: 16245 Comm: syz.2.2876 Not tainted syzkaller #0 PREEMPT(full) [ 326.307674][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.307684][T16245] Call Trace: [ 326.307691][T16245] [ 326.307698][T16245] dump_stack_lvl+0xe8/0x150 [ 326.307721][T16245] should_fail_ex+0x412/0x560 [ 326.307744][T16245] _copy_from_iter+0x1d3/0x1670 [ 326.307764][T16245] ? rcu_is_watching+0x15/0xb0 [ 326.307789][T16245] ? __pfx__copy_from_iter+0x10/0x10 [ 326.307813][T16245] ? netlink_sendmsg+0x650/0xb40 [ 326.307834][T16245] ? skb_put+0x11b/0x210 [ 326.307859][T16245] netlink_sendmsg+0x6c0/0xb40 [ 326.307887][T16245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.307912][T16245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 326.307935][T16245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.307958][T16245] ____sys_sendmsg+0x972/0x9f0 [ 326.307973][T16245] ? __might_fault+0xaf/0x130 [ 326.307999][T16245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.308024][T16245] ? import_iovec+0x73/0xa0 [ 326.308045][T16245] ___sys_sendmsg+0x2a5/0x360 [ 326.308059][T16245] ? __lock_acquire+0x6b5/0x2cf0 [ 326.308080][T16245] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.308130][T16245] ? __fget_files+0x2a/0x420 [ 326.308147][T16245] ? __fget_files+0x3a0/0x420 [ 326.308174][T16245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 326.308193][T16245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.308218][T16245] ? __pfx_ksys_write+0x10/0x10 [ 326.308247][T16245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.308264][T16245] do_syscall_64+0x174/0x580 [ 326.308279][T16245] ? trace_irq_disable+0x3b/0x140 [ 326.308299][T16245] ? clear_bhb_loop+0x40/0x90 [ 326.308317][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.308331][T16245] RIP: 0033:0x7fb49dd9ce59 [ 326.308354][T16245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.308367][T16245] RSP: 002b:00007fb49bfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.308385][T16245] RAX: ffffffffffffffda RBX: 00007fb49e016090 RCX: 00007fb49dd9ce59 [ 326.308396][T16245] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 326.308406][T16245] RBP: 00007fb49bfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 326.308416][T16245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.308425][T16245] R13: 00007fb49e016128 R14: 00007fb49e016090 R15: 00007ffd233f1038 [ 326.308452][T16245] [ 326.452227][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2878'. [ 326.708682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.727186][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.881629][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.890547][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.560065][T16297] netlink: 'syz.5.2892': attribute type 1 has an invalid length. [ 327.733404][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.747449][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.755951][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.766149][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.772269][T16297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.773878][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.845582][T16301] bond1: (slave veth0_to_bond): making interface the new active one [ 327.858911][T16301] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 327.976355][T16308] macvlan2: entered promiscuous mode [ 328.007407][T16308] macvlan2: entered allmulticast mode [ 328.040915][T16308] bond1: entered promiscuous mode [ 328.058501][T16308] veth0_to_bond: entered promiscuous mode [ 328.080534][T16308] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 328.124683][T16308] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 328.166039][T16308] bond1: left promiscuous mode [ 328.184728][T16308] veth0_to_bond: left promiscuous mode [ 328.436517][T16321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2897'. [ 328.544392][T16324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.748188][ T5632] Bluetooth: hci6: command 0x0405 tx timeout [ 328.831185][T16335] netlink: 'syz.5.2900': attribute type 1 has an invalid length. [ 328.842961][T16335] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2900'. [ 328.880030][T16336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'. [ 328.897848][T16336] IPVS: Error connecting to the multicast addr [ 329.866794][ T5639] Bluetooth: hci0: command tx timeout [ 330.710837][ T35] bond0 (unregistering): Released all slaves [ 330.723568][ T35] bond1 (unregistering): (slave veth3): Releasing active interface [ 330.733852][ T35] bond1 (unregistering): Released all slaves [ 330.752095][ T35] bond2 (unregistering): Released all slaves [ 330.775424][ T35] bond3 (unregistering): Released all slaves [ 330.790872][ T35] bond4 (unregistering): Released all slaves [ 330.815061][ T35] bond5 (unregistering): Released all slaves [ 330.834122][ T35] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 330.855415][ T35] bond6 (unregistering): Released all slaves [ 330.874869][ T35] bond7 (unregistering): Released all slaves [ 330.908455][T16335] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 330.924118][T16303] lo speed is unknown, defaulting to 1000 [ 330.944188][T16385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.041095][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 331.156508][ T35] tipc: Disabling bearer [ 331.203597][ T35] tipc: Left network mode [ 331.300074][T16410] netlink: 'syz.3.2913': attribute type 83 has an invalid length. [ 331.328555][T16410] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2913'. [ 331.351719][ T35] IPVS: stopping backup sync thread 7760 ... [ 331.580139][T16420] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 331.590401][T16420] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 331.606698][T16420] team0: Failed to send options change via netlink (err -105) [ 331.630722][T16420] team0: Port device batadv1 added [ 331.928527][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 331.947185][ T5639] Bluetooth: hci0: command 0x041b tx timeout [ 331.947799][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 331.964147][T16438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2920'. [ 332.153775][T16438] tipc: Started in network mode [ 332.172868][T16438] tipc: Node identity 4, cluster identity 4711 [ 332.211138][T16438] tipc: Node number set to 4 [ 332.572285][T16463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2926'. [ 333.052776][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 333.320545][T16491] netlink: 'syz.5.2930': attribute type 5 has an invalid length. [ 333.359846][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2930'. [ 333.495300][T16303] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.521823][T16303] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.553398][T16303] bridge_slave_0: entered allmulticast mode [ 333.626070][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.682933][T16303] bridge_slave_0: entered promiscuous mode [ 333.743100][T16303] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.782728][T16303] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.810568][T16303] bridge_slave_1: entered allmulticast mode [ 333.909355][T16303] bridge_slave_1: entered promiscuous mode [ 334.012975][T16509] batman_adv: batadv0: Adding interface: dummy0 [ 334.028113][ T5639] Bluetooth: hci0: command 0x041b tx timeout [ 334.040553][T16509] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.082748][T16509] batman_adv: batadv0: Interface activated: dummy0 [ 334.102464][ T35] hsr_slave_0: left promiscuous mode [ 334.117435][ T35] hsr_slave_1: left promiscuous mode [ 334.693847][T16539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.814869][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2940'. [ 335.048067][T16303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.074042][T16303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.102984][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 335.188957][T16553] netlink: 'syz.3.2944': attribute type 13 has an invalid length. [ 335.212556][T16553] netlink: 'syz.3.2944': attribute type 58 has an invalid length. [ 335.230855][T16553] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2944'. [ 335.304859][T16303] team0: Port device team_slave_0 added [ 335.326402][T16303] team0: Port device team_slave_1 added [ 335.441064][T16562] nbd: couldn't find device at index 2958377 [ 335.467271][T16562] netlink: 'syz.1.2946': attribute type 83 has an invalid length. [ 335.478273][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2944'. [ 335.513408][T16303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.540475][T16303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.557344][T16569] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2944'. [ 335.594125][T16303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.623478][T16303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.655851][T16303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.721920][T16303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.918805][ T35] IPVS: stop unused estimator thread 0... [ 336.106536][ T5639] Bluetooth: hci0: command 0x041b tx timeout [ 336.122147][T16303] hsr_slave_0: entered promiscuous mode [ 336.130599][T16303] hsr_slave_1: entered promiscuous mode [ 336.137412][T16303] debugfs: 'hsr0' already exists in 'hsr' [ 336.143306][T16303] Cannot create hsr debugfs directory [ 336.740065][T16612] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.780453][T16618] FAULT_INJECTION: forcing a failure. [ 336.780453][T16618] name failslab, interval 1, probability 0, space 0, times 0 [ 336.796448][T16618] CPU: 0 UID: 0 PID: 16618 Comm: syz.1.2952 Not tainted syzkaller #0 PREEMPT(full) [ 336.796469][T16618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 336.796478][T16618] Call Trace: [ 336.796485][T16618] [ 336.796491][T16618] dump_stack_lvl+0xe8/0x150 [ 336.796516][T16618] should_fail_ex+0x412/0x560 [ 336.796538][T16618] should_failslab+0xa8/0x100 [ 336.796555][T16618] ? dup_fd+0x55/0xb40 [ 336.796572][T16618] kmem_cache_alloc_noprof+0x87/0x650 [ 336.796592][T16618] ? do_raw_spin_lock+0x12b/0x2f0 [ 336.796619][T16618] dup_fd+0x55/0xb40 [ 336.796636][T16618] ? do_raw_spin_unlock+0xf5/0x210 [ 336.796659][T16618] ? _raw_spin_unlock+0x28/0x50 [ 336.796680][T16618] ? copy_fs_struct+0x1c3/0x270 [ 336.796700][T16618] ksys_unshare+0x4c1/0x9f0 [ 336.796722][T16618] ? fput+0xa0/0xd0 [ 336.796742][T16618] ? __pfx_ksys_unshare+0x10/0x10 [ 336.796761][T16618] ? __pfx_ksys_write+0x10/0x10 [ 336.796788][T16618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.796806][T16618] __x64_sys_unshare+0x38/0x50 [ 336.796824][T16618] do_syscall_64+0x174/0x580 [ 336.796838][T16618] ? trace_irq_disable+0x3b/0x140 [ 336.796859][T16618] ? clear_bhb_loop+0x40/0x90 [ 336.796879][T16618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.796894][T16618] RIP: 0033:0x7f082139ce59 [ 336.796911][T16618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.796922][T16618] RSP: 002b:00007f081f5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 336.797008][T16618] RAX: ffffffffffffffda RBX: 00007f0821616180 RCX: 00007f082139ce59 [ 336.797020][T16618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 336.797028][T16618] RBP: 00007f081f5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 336.797038][T16618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.797045][T16618] R13: 00007f0821616218 R14: 00007f0821616180 R15: 00007fffe97480a8 [ 336.797072][T16618] [ 337.191358][T16627] Bluetooth: MGMT ver 1.23 [ 337.294701][T16633] __nla_validate_parse: 1 callbacks suppressed [ 337.294719][T16633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2963'. [ 337.367210][T16633] netlink: 'syz.1.2963': attribute type 8 has an invalid length. [ 337.401207][T16612] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.643054][T16612] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.823521][T16612] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.945141][T16661] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 338.190611][ T5639] Bluetooth: hci0: command 0x041b tx timeout [ 338.514743][T16660] tipc: Resetting bearer [ 338.561707][T16681] FAULT_INJECTION: forcing a failure. [ 338.561707][T16681] name failslab, interval 1, probability 0, space 0, times 0 [ 338.576174][T16681] CPU: 1 UID: 0 PID: 16681 Comm: syz.3.2971 Not tainted syzkaller #0 PREEMPT(full) [ 338.576196][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.576217][T16681] Call Trace: [ 338.576222][T16681] [ 338.576228][T16681] dump_stack_lvl+0xe8/0x150 [ 338.576252][T16681] should_fail_ex+0x412/0x560 [ 338.576271][T16681] should_failslab+0xa8/0x100 [ 338.576285][T16681] __kmalloc_cache_noprof+0x88/0x660 [ 338.576302][T16681] ? tipc_net+0x45/0x270 [ 338.576314][T16681] ? tipc_topsrv_queue_evt+0xef/0x2d0 [ 338.576330][T16681] tipc_topsrv_queue_evt+0xef/0x2d0 [ 338.576347][T16681] tipc_sub_report_overlap+0x4bd/0x8b0 [ 338.576368][T16681] tipc_nametbl_insert_publ+0xe5a/0x13d0 [ 338.576401][T16681] tipc_nametbl_publish+0xc7/0x1f0 [ 338.576420][T16681] tipc_sk_publish+0x17b/0x3c0 [ 338.576440][T16681] ? __pfx_tipc_sk_publish+0x10/0x10 [ 338.576455][T16681] ? tipc_nametbl_build_group+0x4c8/0x500 [ 338.576469][T16681] ? tipc_nametbl_build_group+0x2e/0x500 [ 338.576489][T16681] tipc_sk_join+0x3ab/0x6a0 [ 338.576500][T16681] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.576520][T16681] ? __pfx_tipc_sk_join+0x10/0x10 [ 338.576529][T16681] ? tipc_setsockopt+0x731/0x990 [ 338.576547][T16681] ? __local_bh_enable_ip+0xd0/0x130 [ 338.576563][T16681] tipc_setsockopt+0x73e/0x990 [ 338.576585][T16681] ? __pfx_tipc_setsockopt+0x10/0x10 [ 338.576601][T16681] ? __fget_files+0x2a/0x420 [ 338.576615][T16681] ? aa_sock_opt_perm+0xff/0x1a0 [ 338.576634][T16681] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 338.576650][T16681] ? __pfx_tipc_setsockopt+0x10/0x10 [ 338.576669][T16681] do_sock_setsockopt+0x17c/0x1b0 [ 338.576692][T16681] __x64_sys_setsockopt+0x13d/0x1b0 [ 338.576712][T16681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.576725][T16681] do_syscall_64+0x174/0x580 [ 338.576739][T16681] ? clear_bhb_loop+0x40/0x90 [ 338.576754][T16681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.576766][T16681] RIP: 0033:0x7f8b11d9ce59 [ 338.576779][T16681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.576789][T16681] RSP: 002b:00007f8b12c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.576802][T16681] RAX: ffffffffffffffda RBX: 00007f8b12016090 RCX: 00007f8b11d9ce59 [ 338.576811][T16681] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008 [ 338.576819][T16681] RBP: 00007f8b12c94090 R08: 0000000000000010 R09: 0000000000000000 [ 338.576826][T16681] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 338.576833][T16681] R13: 00007f8b12016128 R14: 00007f8b12016090 R15: 00007ffec96b3058 [ 338.576855][T16681] [ 338.616054][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 338.720574][ T5776] lo speed is unknown, defaulting to 1000 [ 338.878291][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.898974][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.146286][ T35] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.266011][ T35] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.392126][T16303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.458158][T16303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.520688][T16303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.543829][T16303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.554596][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.589298][T16303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.633466][T16303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.743765][T16303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.780565][T16303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.795371][T16722] FAULT_INJECTION: forcing a failure. [ 339.795371][T16722] name failslab, interval 1, probability 0, space 0, times 0 [ 339.808080][T16722] CPU: 1 UID: 0 PID: 16722 Comm: syz.1.2982 Not tainted syzkaller #0 PREEMPT(full) [ 339.808102][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.808112][T16722] Call Trace: [ 339.808119][T16722] [ 339.808126][T16722] dump_stack_lvl+0xe8/0x150 [ 339.808154][T16722] should_fail_ex+0x412/0x560 [ 339.808179][T16722] should_failslab+0xa8/0x100 [ 339.808198][T16722] __kmalloc_cache_noprof+0x88/0x660 [ 339.808219][T16722] ? tipc_net+0x45/0x270 [ 339.808235][T16722] ? tipc_topsrv_queue_evt+0xef/0x2d0 [ 339.808257][T16722] tipc_topsrv_queue_evt+0xef/0x2d0 [ 339.808280][T16722] tipc_sub_report_overlap+0x4bd/0x8b0 [ 339.808309][T16722] tipc_nametbl_insert_publ+0xe5a/0x13d0 [ 339.808354][T16722] tipc_nametbl_publish+0xc7/0x1f0 [ 339.808379][T16722] tipc_sk_publish+0x17b/0x3c0 [ 339.808407][T16722] ? __pfx_tipc_sk_publish+0x10/0x10 [ 339.808426][T16722] ? tipc_nametbl_build_group+0x4c8/0x500 [ 339.808444][T16722] ? tipc_nametbl_build_group+0x2e/0x500 [ 339.808472][T16722] tipc_sk_join+0x3ab/0x6a0 [ 339.808487][T16722] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.808512][T16722] ? __pfx_tipc_sk_join+0x10/0x10 [ 339.808525][T16722] ? tipc_setsockopt+0x731/0x990 [ 339.808550][T16722] ? __local_bh_enable_ip+0xd0/0x130 [ 339.808571][T16722] tipc_setsockopt+0x73e/0x990 [ 339.808600][T16722] ? __pfx_tipc_setsockopt+0x10/0x10 [ 339.808628][T16722] ? __fget_files+0x2a/0x420 [ 339.808645][T16722] ? aa_sock_opt_perm+0xff/0x1a0 [ 339.808671][T16722] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 339.808690][T16722] ? __pfx_tipc_setsockopt+0x10/0x10 [ 339.808712][T16722] do_sock_setsockopt+0x17c/0x1b0 [ 339.808739][T16722] __x64_sys_setsockopt+0x13d/0x1b0 [ 339.808763][T16722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.808779][T16722] do_syscall_64+0x174/0x580 [ 339.808792][T16722] ? trace_irq_disable+0x3b/0x140 [ 339.808810][T16722] ? clear_bhb_loop+0x40/0x90 [ 339.808827][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.808840][T16722] RIP: 0033:0x7f082139ce59 [ 339.808853][T16722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.808865][T16722] RSP: 002b:00007f081f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.808881][T16722] RAX: ffffffffffffffda RBX: 00007f0821616090 RCX: 00007f082139ce59 [ 339.808893][T16722] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008 [ 339.808902][T16722] RBP: 00007f081f5f6090 R08: 0000000000000010 R09: 0000000000000000 [ 339.808912][T16722] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000002 [ 339.808921][T16722] R13: 00007f0821616128 R14: 00007f0821616090 R15: 00007fffe97480a8 [ 339.808951][T16722] [ 340.343461][T16746] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2986'. [ 340.370478][T16303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.404067][T16303] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.419699][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.426948][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.578220][T16752] netlink: 'syz.0.2988': attribute type 11 has an invalid length. [ 340.605891][T16752] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2988'. [ 340.653906][T16746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.692642][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.699881][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.875091][T16746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.064170][T16746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.176752][T16767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.200498][T16767] bridge0: port 3(bond2) entered blocking state [ 341.207313][T16767] bridge0: port 3(bond2) entered disabled state [ 341.214018][T16767] bond2: entered allmulticast mode [ 341.225628][T16767] bond2: entered promiscuous mode [ 341.233308][T16767] bridge0: port 3(bond2) entered blocking state [ 341.239812][T16767] bridge0: port 3(bond2) entered forwarding state [ 341.313110][T16749] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 341.323933][T16749] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 341.413825][T16746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.644306][T16783] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2994'. [ 341.692914][T16783] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2994'. [ 341.752265][ T140] bridge0: port 3(bond2) entered disabled state [ 341.893847][ T5792] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.993601][ T5985] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.057095][ T148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.193492][ T984] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.311961][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2999'. [ 342.803612][T16303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.032786][T16860] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3004'. [ 343.149679][T16854] netlink: 'syz.5.3004': attribute type 1 has an invalid length. [ 343.273911][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3005'. [ 343.292147][T16303] veth0_vlan: entered promiscuous mode [ 343.309265][T16868] tunl0: left promiscuous mode [ 343.360036][T16868] macvlan0: left promiscuous mode [ 343.370482][T16868] gtp0: left promiscuous mode [ 343.381726][T16868] gtp0: left allmulticast mode [ 343.391183][T16868] vlan2: left allmulticast mode [ 343.399038][T16868] : left allmulticast mode [ 343.410706][T16868] bond2: left promiscuous mode [ 343.421649][T16868] bridge5: left promiscuous mode [ 343.452068][T16868] bond4: left promiscuous mode [ 343.463541][T16868] bridge6: left promiscuous mode [ 343.522859][T16868] vlan4: left promiscuous mode [ 343.534201][T16868] geneve1: left promiscuous mode [ 343.549502][T16868] vlan4: left allmulticast mode [ 343.560189][T16868] geneve1: left allmulticast mode [ 343.579889][ T140] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.629229][T16303] veth1_vlan: entered promiscuous mode [ 343.654692][ T140] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.692020][ T140] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.724172][ T140] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.829778][T16303] veth0_macvtap: entered promiscuous mode [ 343.887881][T16303] veth1_macvtap: entered promiscuous mode [ 343.935469][T16892] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3008'. [ 343.996887][T16303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.085481][T16303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.161956][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.223164][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.243259][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.292327][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.544358][T16917] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3018'. [ 344.574765][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.602844][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.734261][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.768199][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.904905][T16927] FAULT_INJECTION: forcing a failure. [ 344.904905][T16927] name failslab, interval 1, probability 0, space 0, times 0 [ 344.926247][T16927] CPU: 1 UID: 0 PID: 16927 Comm: syz.0.3014 Not tainted syzkaller #0 PREEMPT(full) [ 344.926271][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.926282][T16927] Call Trace: [ 344.926289][T16927] [ 344.926297][T16927] dump_stack_lvl+0xe8/0x150 [ 344.926320][T16927] should_fail_ex+0x412/0x560 [ 344.926343][T16927] should_failslab+0xa8/0x100 [ 344.926359][T16927] ? create_new_namespaces+0x33/0x6a0 [ 344.926376][T16927] kmem_cache_alloc_noprof+0x87/0x650 [ 344.926404][T16927] create_new_namespaces+0x33/0x6a0 [ 344.926424][T16927] ? bpf_lsm_capable+0x9/0x20 [ 344.926439][T16927] ? security_capable+0x7e/0x2c0 [ 344.926467][T16927] unshare_nsproxy_namespaces+0x149/0x190 [ 344.926487][T16927] ksys_unshare+0x57d/0x9f0 [ 344.926513][T16927] ? __pfx_ksys_unshare+0x10/0x10 [ 344.926531][T16927] ? __pfx_ksys_write+0x10/0x10 [ 344.926558][T16927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.926574][T16927] __x64_sys_unshare+0x38/0x50 [ 344.926591][T16927] do_syscall_64+0x174/0x580 [ 344.926606][T16927] ? trace_irq_disable+0x3b/0x140 [ 344.926627][T16927] ? clear_bhb_loop+0x40/0x90 [ 344.926648][T16927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.926664][T16927] RIP: 0033:0x7f55ac79ce59 [ 344.926679][T16927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.926693][T16927] RSP: 002b:00007f55ad66f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 344.926710][T16927] RAX: ffffffffffffffda RBX: 00007f55aca16180 RCX: 00007f55ac79ce59 [ 344.926722][T16927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 344.926731][T16927] RBP: 00007f55ad66f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.926741][T16927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.926750][T16927] R13: 00007f55aca16218 R14: 00007f55aca16180 R15: 00007ffe95107108 [ 344.926779][T16927] [ 345.587943][T16938] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 345.628651][T16944] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 345.646607][T16947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3023'. [ 345.908319][T16957] netlink: 'syz.1.3027': attribute type 1 has an invalid length. [ 345.930737][T16959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3028'. [ 346.011928][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.024356][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.042837][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.043081][T16969] netlink: 'syz.2.3029': attribute type 2 has an invalid length. [ 346.062397][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.072014][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.098502][T16969] netlink: 'syz.2.3029': attribute type 11 has an invalid length. [ 346.134044][T16969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3029'. [ 346.140247][T16972] netlink: 'syz.5.3030': attribute type 24 has an invalid length. [ 346.154594][T16957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.301795][T16964] bond1: (slave veth0_to_bond): making interface the new active one [ 346.340794][T16964] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 346.471886][T16971] macvlan2: entered promiscuous mode [ 346.490312][T16971] macvlan2: entered allmulticast mode [ 346.506329][T16971] bond1: entered promiscuous mode [ 346.511613][T16971] veth0_to_bond: entered promiscuous mode [ 346.522707][T16971] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 346.543779][T16971] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 346.593269][T16971] bond1: left promiscuous mode [ 346.609624][T16971] veth0_to_bond: left promiscuous mode [ 347.242511][T17010] netlink: get zone limit has 4 unknown bytes [ 347.546252][ T5639] Bluetooth: hci0: command 0x041b tx timeout [ 347.557405][T17033] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3039'. [ 347.911570][T17049] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3040'. [ 348.186774][ T5639] Bluetooth: hci4: command tx timeout [ 348.468364][T16961] lo speed is unknown, defaulting to 1000 [ 349.627476][ T5639] Bluetooth: hci0: command 0x041b tx timeout [ 349.889190][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.919016][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.940660][T16961] bridge_slave_0: entered allmulticast mode [ 349.957253][T16961] bridge_slave_0: entered promiscuous mode [ 350.118565][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.152203][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.182201][T16961] bridge_slave_1: entered allmulticast mode [ 350.208189][T16961] bridge_slave_1: entered promiscuous mode [ 350.286084][ T5639] Bluetooth: hci4: command tx timeout [ 350.433142][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.438072][T17152] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 350.489777][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.565323][T17155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3058'. [ 350.679382][T16961] team0: Port device team_slave_0 added [ 350.700275][T16961] team0: Port device team_slave_1 added [ 350.827891][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.845127][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.885169][T17170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3060'. [ 350.902653][T17170] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3060'. [ 350.914609][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.928507][T17171] netlink: 'syz.2.3061': attribute type 29 has an invalid length. [ 350.943835][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.954560][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.986394][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.178862][T17181] tipc: Started in network mode [ 351.207193][T17181] tipc: Node identity 4, cluster identity 4711 [ 351.229376][T17181] tipc: Node number set to 4 [ 351.264048][T16961] hsr_slave_0: entered promiscuous mode [ 351.292087][T16961] hsr_slave_1: entered promiscuous mode [ 351.305112][T16961] debugfs: 'hsr0' already exists in 'hsr' [ 351.322065][T16961] Cannot create hsr debugfs directory [ 351.444043][T17193] netlink: 'syz.2.3066': attribute type 1 has an invalid length. [ 351.484989][T17195] syzkaller1: entered promiscuous mode [ 351.517089][T17195] syzkaller1: entered allmulticast mode [ 352.223466][T17229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.337702][T17229] xt_ecn: cannot match TCP bits for non-tcp packets [ 352.345929][ T5639] Bluetooth: hci4: command tx timeout [ 352.582601][T17247] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3082'. [ 352.582903][T17246] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 353.093114][T17264] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 353.141638][T17267] netlink: 'syz.1.3087': attribute type 21 has an invalid length. [ 353.165105][T17267] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3087'. [ 353.247681][T17267] netlink: 'syz.1.3087': attribute type 5 has an invalid length. [ 353.268158][T17267] netlink: 'syz.1.3087': attribute type 6 has an invalid length. [ 353.289196][T17267] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3087'. [ 353.408816][T16961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.418132][T10991] IPVS: starting estimator thread 0... [ 353.435527][T16961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.453768][T16961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.490047][T16961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.508782][T16961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.535104][T16961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.549172][T16961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.552487][T17278] IPVS: using max 30 ests per chain, 72000 per kthread [ 353.569352][T17281] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3090'. [ 353.581912][T16961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.754840][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 353.934351][T16961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.950028][T17306] netlink: 'syz.3.3094': attribute type 1 has an invalid length. [ 354.030534][T17313] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3096'. [ 354.069517][T16961] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.264115][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.271328][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.334906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.342118][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.426857][ T5639] Bluetooth: hci4: command tx timeout [ 355.060438][T17339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.122432][T17358] netlink: 'syz.1.3103': attribute type 1 has an invalid length. [ 355.142861][T17358] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3103'. [ 355.332779][T17339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.413218][T17371] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 355.485649][T17339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.639030][T17339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.753637][T17384] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3109'. [ 355.984704][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.128693][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.228938][ T47] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.286839][ T5792] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.358931][ T47] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.412089][T17403] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3116'. [ 356.444347][T17403] netlink: Unknown conntrack attr (0) [ 356.462449][T16961] veth0_vlan: entered promiscuous mode [ 356.508472][T16961] veth1_vlan: entered promiscuous mode [ 356.628466][T17412] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3120'. [ 356.946611][T16961] veth0_macvtap: entered promiscuous mode [ 357.007222][T16961] veth1_macvtap: entered promiscuous mode [ 357.085497][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.125254][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.208992][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.223288][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.238181][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.262842][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.324190][T17441] syz_tun: entered allmulticast mode [ 357.484229][T17439] syz_tun: left allmulticast mode [ 357.649751][T13113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.673388][T17448] can: request_module (can-proto-5) failed. [ 357.689004][T13113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.785480][T13117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.799587][T13117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.957086][T17464] __nla_validate_parse: 3 callbacks suppressed [ 357.957201][T17464] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3132'. [ 358.011174][T17464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3132'. [ 358.031537][T17468] Cannot find del_set index 0 as target [ 358.213103][T17475] FAULT_INJECTION: forcing a failure. [ 358.213103][T17475] name failslab, interval 1, probability 0, space 0, times 0 [ 358.254735][T17477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3137'. [ 358.268555][T17475] CPU: 0 UID: 0 PID: 17475 Comm: syz.1.3135 Not tainted syzkaller #0 PREEMPT(full) [ 358.268601][T17475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.268623][T17475] Call Trace: [ 358.268716][T17475] [ 358.268787][T17475] dump_stack_lvl+0xe8/0x150 [ 358.268979][T17475] should_fail_ex+0x412/0x560 [ 358.269037][T17475] should_failslab+0xa8/0x100 [ 358.269083][T17475] __kmalloc_cache_noprof+0x88/0x660 [ 358.269114][T17475] ? kobject_uevent_env+0x28c/0x9e0 [ 358.269237][T17475] ? __pfx_dev_uevent_name+0x10/0x10 [ 358.269285][T17475] kobject_uevent_env+0x28c/0x9e0 [ 358.269303][T17475] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.269346][T17475] ? queue_work_on+0x159/0x1d0 [ 358.269393][T17475] rfkill_set_block+0x364/0x4e0 [ 358.269458][T17475] rfkill_fop_write+0x461/0x5a0 [ 358.269504][T17475] ? apparmor_file_permission+0x1f4/0x300 [ 358.269545][T17475] ? __pfx_rfkill_fop_write+0x10/0x10 [ 358.269564][T17475] ? security_kernfs_init_security+0x250/0x270 [ 358.269599][T17475] ? rw_verify_area+0x255/0x4d0 [ 358.269633][T17475] ? __pfx_rfkill_fop_write+0x10/0x10 [ 358.269652][T17475] vfs_write+0x29a/0xb90 [ 358.269682][T17475] ? __pfx_vfs_write+0x10/0x10 [ 358.269705][T17475] ? __fget_files+0x2a/0x420 [ 358.269727][T17475] ? __fget_files+0x2a/0x420 [ 358.269744][T17475] ? __fget_files+0x3a0/0x420 [ 358.269760][T17475] ? __fget_files+0x2a/0x420 [ 358.269784][T17475] ksys_write+0x150/0x270 [ 358.269806][T17475] ? __pfx_ksys_write+0x10/0x10 [ 358.269833][T17475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.269865][T17475] do_syscall_64+0x174/0x580 [ 358.269905][T17475] ? trace_irq_disable+0x3b/0x140 [ 358.269974][T17475] ? clear_bhb_loop+0x40/0x90 [ 358.269994][T17475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.270009][T17475] RIP: 0033:0x7f082139ce59 [ 358.270059][T17475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.270158][T17475] RSP: 002b:00007f082216f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.270182][T17475] RAX: ffffffffffffffda RBX: 00007f0821615fa0 RCX: 00007f082139ce59 [ 358.270194][T17475] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 358.270204][T17475] RBP: 00007f082216f090 R08: 0000000000000000 R09: 0000000000000000 [ 358.270214][T17475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.270223][T17475] R13: 00007f0821616038 R14: 00007f0821615fa0 R15: 00007fffe97480a8 [ 358.270252][T17475] [ 358.863452][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.880539][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.890558][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.911857][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.934571][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.073452][T17496] Cannot find set identified by id 1 to match [ 359.084269][T17496] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3141'. [ 359.181707][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.241988][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.250321][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.290575][T17502] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3142'. [ 359.416145][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.448157][T17513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3142'. [ 359.477758][T17513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3142'. [ 359.534238][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3142'. [ 359.573386][T17513] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3142'. [ 359.613272][T17502] netlink: 480 bytes leftover after parsing attributes in process `syz.1.3142'. [ 359.849587][T17490] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.953408][T17490] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.087116][T17490] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.264608][T17490] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.277832][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.364244][T17534] vlan2: entered promiscuous mode [ 360.370069][T17534] geneve1: entered promiscuous mode [ 360.376181][T17534] vlan2: entered allmulticast mode [ 360.381454][T17534] geneve1: entered allmulticast mode [ 360.413760][T17534] netlink: 'syz.5.3147': attribute type 1 has an invalid length. [ 360.516763][T17482] lo speed is unknown, defaulting to 1000 [ 360.630706][ T5984] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.691416][ T5984] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.721829][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.754486][T17547] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.799873][ T5984] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.830152][T17547] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.939052][T17551] batman_adv: batadv0: Adding interface: dummy0 [ 360.962948][T17551] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.066542][ T5639] Bluetooth: hci1: command tx timeout [ 361.076150][T17551] batman_adv: batadv0: Interface activated: dummy0 [ 361.108580][T17547] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.391183][T17547] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.600952][T17572] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 361.967437][T17482] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.974768][T17482] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.987365][T17482] bridge_slave_0: entered allmulticast mode [ 361.995334][T17482] bridge_slave_0: entered promiscuous mode [ 362.073015][T17482] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.087508][T17482] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.094879][T17482] bridge_slave_1: entered allmulticast mode [ 362.108471][T17482] bridge_slave_1: entered promiscuous mode [ 362.152696][T17482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.175258][T17482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.261874][T17482] team0: Port device team_slave_0 added [ 362.275559][T17482] team0: Port device team_slave_1 added [ 362.360094][T17482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.380159][T17482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.417028][T17482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.452224][T17482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.467219][T17482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.503263][T17482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.627681][T17614] FAULT_INJECTION: forcing a failure. [ 362.627681][T17614] name failslab, interval 1, probability 0, space 0, times 0 [ 362.669870][T17614] CPU: 0 UID: 0 PID: 17614 Comm: syz.5.3163 Not tainted syzkaller #0 PREEMPT(full) [ 362.669896][T17614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.669910][T17614] Call Trace: [ 362.669917][T17614] [ 362.669928][T17614] dump_stack_lvl+0xe8/0x150 [ 362.669954][T17614] should_fail_ex+0x412/0x560 [ 362.669978][T17614] should_failslab+0xa8/0x100 [ 362.669996][T17614] __kmalloc_noprof+0xe8/0x760 [ 362.670018][T17614] ? shrinker_alloc+0x2f6/0xad0 [ 362.670066][T17614] ? __list_lru_init+0xba/0x5d0 [ 362.670086][T17614] ? __raw_spin_lock_init+0x45/0x100 [ 362.670126][T17614] __list_lru_init+0xba/0x5d0 [ 362.670156][T17614] alloc_super+0x869/0xab0 [ 362.670183][T17614] sget_fc+0x329/0xa40 [ 362.670206][T17614] ? __pfx_set_anon_super_fc+0x10/0x10 [ 362.670226][T17614] ? __pfx_mqueue_fill_super+0x10/0x10 [ 362.670248][T17614] get_tree_nodev+0x2a/0x150 [ 362.670271][T17614] vfs_get_tree+0x92/0x2a0 [ 362.670295][T17614] fc_mount_longterm+0x1c/0x100 [ 362.670314][T17614] mq_init_ns+0x513/0x760 [ 362.670337][T17614] copy_ipcs+0x460/0x6c0 [ 362.670362][T17614] create_new_namespaces+0x210/0x6a0 [ 362.670382][T17614] ? bpf_lsm_capable+0x9/0x20 [ 362.670408][T17614] ? security_capable+0x7e/0x2c0 [ 362.670436][T17614] unshare_nsproxy_namespaces+0x149/0x190 [ 362.670456][T17614] ksys_unshare+0x57d/0x9f0 [ 362.670491][T17614] ? __pfx_ksys_unshare+0x10/0x10 [ 362.670510][T17614] ? __pfx_ksys_write+0x10/0x10 [ 362.670539][T17614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.670557][T17614] __x64_sys_unshare+0x38/0x50 [ 362.670575][T17614] do_syscall_64+0x174/0x580 [ 362.670591][T17614] ? trace_irq_disable+0x3b/0x140 [ 362.670612][T17614] ? clear_bhb_loop+0x40/0x90 [ 362.670632][T17614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.670647][T17614] RIP: 0033:0x7f44e219ce59 [ 362.670663][T17614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.670677][T17614] RSP: 002b:00007f44e2fa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 362.670694][T17614] RAX: ffffffffffffffda RBX: 00007f44e2416090 RCX: 00007f44e219ce59 [ 362.670706][T17614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 362.670716][T17614] RBP: 00007f44e2fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 362.670725][T17614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.670735][T17614] R13: 00007f44e2416128 R14: 00007f44e2416090 R15: 00007ffdb89eb748 [ 362.670763][T17614] [ 362.967072][T17482] hsr_slave_0: entered promiscuous mode [ 362.973820][T17482] hsr_slave_1: entered promiscuous mode [ 362.983726][T17482] debugfs: 'hsr0' already exists in 'hsr' [ 362.992733][T17482] Cannot create hsr debugfs directory [ 363.099607][T17619] FAULT_INJECTION: forcing a failure. [ 363.099607][T17619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.144208][T17619] CPU: 1 UID: 0 PID: 17619 Comm: syz.0.3164 Not tainted syzkaller #0 PREEMPT(full) [ 363.144233][T17619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.144243][T17619] Call Trace: [ 363.144250][T17619] [ 363.144258][T17619] dump_stack_lvl+0xe8/0x150 [ 363.144283][T17619] should_fail_ex+0x412/0x560 [ 363.144307][T17619] _copy_from_user+0x2d/0xb0 [ 363.144357][T17619] __sys_connect+0x156/0x450 [ 363.144500][T17619] ? __pfx___sys_connect+0x10/0x10 [ 363.144530][T17619] ? __pfx_ksys_write+0x10/0x10 [ 363.144556][T17619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.144574][T17619] __x64_sys_connect+0x7a/0x90 [ 363.144595][T17619] do_syscall_64+0x174/0x580 [ 363.144611][T17619] ? trace_irq_disable+0x3b/0x140 [ 363.144634][T17619] ? clear_bhb_loop+0x40/0x90 [ 363.144653][T17619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.144668][T17619] RIP: 0033:0x7fbcfdf9ce59 [ 363.144685][T17619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.144698][T17619] RSP: 002b:00007fbcfee1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 363.144716][T17619] RAX: ffffffffffffffda RBX: 00007fbcfe215fa0 RCX: 00007fbcfdf9ce59 [ 363.144727][T17619] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 363.144737][T17619] RBP: 00007fbcfee1f090 R08: 0000000000000000 R09: 0000000000000000 [ 363.144746][T17619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.144755][T17619] R13: 00007fbcfe216038 R14: 00007fbcfe215fa0 R15: 00007fffa9a64ca8 [ 363.144782][T17619] [ 363.390809][ T5639] Bluetooth: hci1: command tx timeout [ 363.432092][T17482] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.452021][T17626] __nla_validate_parse: 2 callbacks suppressed [ 363.452046][T17626] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3165'. [ 363.581410][T17482] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.599643][T17631] netlink: 'syz.0.3167': attribute type 2 has an invalid length. [ 363.664716][T17482] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.707523][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.806461][T17482] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.065266][T17648] 8021q: VLANs not supported on ip6tnl0 [ 364.195298][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'. [ 364.220105][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'. [ 364.229681][T17651] openvswitch: netlink: ufid size 4229 bytes exceeds the range (1, 16) [ 364.238661][T17651] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 364.241515][T17482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.258172][T17482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.279400][T17482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.291692][T17482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.300058][T17482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.311164][T17482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.354427][T17482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.368368][T17482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.480411][T17662] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3177'. [ 364.581919][T17482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.618281][T17482] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.647833][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.655055][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.677103][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.684301][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.095535][T17688] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.228756][T17688] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.349660][T17688] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.439640][T17688] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.473442][ T5639] Bluetooth: hci1: command tx timeout [ 365.476803][T17703] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3188'. [ 365.740875][ T5792] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.819679][ T5792] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.859069][T17482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.899570][T17721] netlink: 'syz.1.3193': attribute type 1 has an invalid length. [ 366.065587][T17721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.086512][T17725] bond1: (slave veth0_to_bond): Releasing active interface [ 366.150025][T17725] bond2: (slave veth0_to_bond): making interface the new active one [ 366.172715][T17725] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 366.182383][ T5984] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.241239][T17732] macvlan2: entered promiscuous mode [ 366.246814][T17732] macvlan2: entered allmulticast mode [ 366.252834][T17732] bond2: entered promiscuous mode [ 366.258603][T17732] veth0_to_bond: entered promiscuous mode [ 366.265240][T17732] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 366.273995][T17732] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 366.290420][T17732] bond2: left promiscuous mode [ 366.295241][T17732] veth0_to_bond: left promiscuous mode [ 366.309378][ T47] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.529044][T17743] FAULT_INJECTION: forcing a failure. [ 366.529044][T17743] name failslab, interval 1, probability 0, space 0, times 0 [ 366.581115][T17743] CPU: 0 UID: 0 PID: 17743 Comm: syz.5.3197 Not tainted syzkaller #0 PREEMPT(full) [ 366.581137][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.581146][T17743] Call Trace: [ 366.581153][T17743] [ 366.581161][T17743] dump_stack_lvl+0xe8/0x150 [ 366.581186][T17743] should_fail_ex+0x412/0x560 [ 366.581208][T17743] should_failslab+0xa8/0x100 [ 366.581227][T17743] __kmalloc_noprof+0xe8/0x760 [ 366.581248][T17743] ? memcg_list_lru_alloc+0x27e/0x800 [ 366.581278][T17743] memcg_list_lru_alloc+0x27e/0x800 [ 366.581293][T17743] ? mqueue_fill_super+0xdc/0x380 [ 366.581321][T17743] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 366.581346][T17743] ? __memcg_slab_post_alloc_hook+0x1de/0xe80 [ 366.581371][T17743] __memcg_slab_post_alloc_hook+0x395/0xe80 [ 366.581392][T17743] ? __memcg_slab_post_alloc_hook+0x1de/0xe80 [ 366.581425][T17743] ? mqueue_alloc_inode+0x28/0x40 [ 366.581445][T17743] kmem_cache_alloc_lru_noprof+0x346/0x640 [ 366.581464][T17743] ? mqueue_alloc_inode+0x28/0x40 [ 366.581480][T17743] ? __raw_spin_lock_init+0x45/0x100 [ 366.581501][T17743] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 366.581524][T17743] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 366.581542][T17743] mqueue_alloc_inode+0x28/0x40 [ 366.581560][T17743] alloc_inode+0x6a/0x1b0 [ 366.581577][T17743] ? __pfx_mqueue_fill_super+0x10/0x10 [ 366.581596][T17743] new_inode+0x22/0x170 [ 366.581614][T17743] ? sget_fc+0x962/0xa40 [ 366.581631][T17743] ? __pfx_mqueue_fill_super+0x10/0x10 [ 366.581652][T17743] mqueue_fill_super+0xdc/0x380 [ 366.581668][T17743] ? __pfx_mqueue_fill_super+0x10/0x10 [ 366.581688][T17743] get_tree_nodev+0xbb/0x150 [ 366.581711][T17743] vfs_get_tree+0x92/0x2a0 [ 366.581734][T17743] fc_mount_longterm+0x1c/0x100 [ 366.581752][T17743] mq_init_ns+0x513/0x760 [ 366.581774][T17743] copy_ipcs+0x460/0x6c0 [ 366.581798][T17743] create_new_namespaces+0x210/0x6a0 [ 366.581818][T17743] ? bpf_lsm_capable+0x9/0x20 [ 366.581833][T17743] ? security_capable+0x7e/0x2c0 [ 366.581861][T17743] unshare_nsproxy_namespaces+0x149/0x190 [ 366.581880][T17743] ksys_unshare+0x57d/0x9f0 [ 366.581908][T17743] ? __pfx_ksys_unshare+0x10/0x10 [ 366.581926][T17743] ? __pfx_ksys_write+0x10/0x10 [ 366.581954][T17743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.581971][T17743] __x64_sys_unshare+0x38/0x50 [ 366.581989][T17743] do_syscall_64+0x174/0x580 [ 366.582005][T17743] ? trace_irq_disable+0x3b/0x140 [ 366.582026][T17743] ? clear_bhb_loop+0x40/0x90 [ 366.582046][T17743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.582061][T17743] RIP: 0033:0x7f44e219ce59 [ 366.582077][T17743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.582089][T17743] RSP: 002b:00007f44e2fca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 366.582107][T17743] RAX: ffffffffffffffda RBX: 00007f44e2415fa0 RCX: 00007f44e219ce59 [ 366.582118][T17743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 366.582130][T17743] RBP: 00007f44e2fca090 R08: 0000000000000000 R09: 0000000000000000 [ 366.582140][T17743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.582149][T17743] R13: 00007f44e2416038 R14: 00007f44e2415fa0 R15: 00007ffdb89eb748 [ 366.582177][T17743] [ 366.984692][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 367.025986][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3200'. [ 367.153148][T17482] veth0_vlan: entered promiscuous mode [ 367.174230][T17482] veth1_vlan: entered promiscuous mode [ 367.245321][T17482] veth0_macvtap: entered promiscuous mode [ 367.274391][T17482] veth1_macvtap: entered promiscuous mode [ 367.354474][T17482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.371946][T17482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.440302][ T984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.492911][ T984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.549834][ T5632] Bluetooth: hci1: command tx timeout [ 367.560069][ T984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.590294][ T984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.616424][T17781] netlink: 'syz.0.3208': attribute type 1 has an invalid length. [ 367.741925][T17787] netlink: 'syz.1.3210': attribute type 1 has an invalid length. [ 367.750595][T17781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.760496][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.769862][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.778259][T17782] macvlan2: entered promiscuous mode [ 367.783746][T17782] macvlan2: entered allmulticast mode [ 367.791257][T17782] bond1: entered promiscuous mode [ 367.797205][T17782] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 367.806964][T17782] bond1: left promiscuous mode [ 367.991774][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.025345][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.166448][T17800] netlink: 'syz.1.3213': attribute type 6 has an invalid length. [ 368.191519][T17803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3215'. [ 368.237461][T17809] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 368.249370][T17800] bond3: entered promiscuous mode [ 368.254488][T17800] bond3: entered allmulticast mode [ 368.260626][T17800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.271096][T17807] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3214'. [ 368.591791][T17810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.847852][T17810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.888069][T17835] netlink: 'syz.3.3221': attribute type 1 has an invalid length. [ 368.938356][T17838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3222'. [ 369.093133][T17810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.373781][T17810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.680034][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.735268][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.788625][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.813559][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.894577][T17871] netlink: 'syz.2.3230': attribute type 1 has an invalid length. [ 370.041793][T17877] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 370.080303][T17877] macvlan2: entered promiscuous mode [ 370.092074][T17877] macvlan2: entered allmulticast mode [ 371.011123][T17928] netlink: 'syz.5.3247': attribute type 1 has an invalid length. [ 371.087084][T17935] netlink: 'syz.1.3250': attribute type 1 has an invalid length. [ 371.117347][T17928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.135118][T17936] bond1: (slave veth0_to_bond): Releasing active interface [ 371.162544][T17936] bond3: (slave veth0_to_bond): making interface the new active one [ 371.172283][T17936] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 371.208540][T17928] macvlan2: entered promiscuous mode [ 371.214074][T17928] macvlan2: entered allmulticast mode [ 371.221313][T17928] bond3: entered promiscuous mode [ 371.252753][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3250'. [ 371.255568][T17928] veth0_to_bond: entered promiscuous mode [ 371.278332][T17928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 371.286760][T17928] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 371.303535][T17928] bond3: left promiscuous mode [ 371.310645][T17928] veth0_to_bond: left promiscuous mode [ 371.560506][T17944] xt_hashlimit: size too large, truncated to 1048576 [ 371.578117][T17943] xt_hashlimit: size too large, truncated to 1048576 [ 371.860351][T17948] netlink: 'syz.3.3254': attribute type 64 has an invalid length. [ 371.911134][T17948] netlink: 'syz.3.3254': attribute type 83 has an invalid length. [ 372.007765][T17961] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3257'. [ 372.081190][T17966] bridge0: port 3(syz_tun) entered blocking state [ 372.116756][T17966] bridge0: port 3(syz_tun) entered disabled state [ 372.123709][T17966] syz_tun: entered allmulticast mode [ 372.139441][T17966] syz_tun: entered promiscuous mode [ 372.156987][T17966] bridge0: port 3(syz_tun) entered blocking state [ 372.163685][T17966] bridge0: port 3(syz_tun) entered forwarding state [ 372.396704][T17976] netlink: 'syz.5.3263': attribute type 1 has an invalid length. [ 372.559140][T17976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.628543][T17980] bond3: (slave veth0_to_bond): Releasing active interface [ 372.665922][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.682144][T17980] bond4: (slave veth0_to_bond): making interface the new active one [ 372.703022][T17980] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 372.730521][T17982] macvlan2: entered promiscuous mode [ 372.742989][T17982] macvlan2: entered allmulticast mode [ 372.759430][T17982] bond4: entered promiscuous mode [ 372.768102][T17982] veth0_to_bond: entered promiscuous mode [ 372.777352][T17982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 372.798630][T17982] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 372.858257][T17982] bond4: left promiscuous mode [ 372.863342][T17982] veth0_to_bond: left promiscuous mode [ 372.934309][T17992] syzkaller0: entered promiscuous mode [ 372.949119][T17992] syzkaller0: entered allmulticast mode [ 373.032190][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3267'. [ 373.062908][T17992] block nbd0: not configured, cannot reconfigure [ 373.101903][T17991] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 373.130128][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'. [ 373.329114][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802ea79000: rx timeout, send abort [ 373.338372][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802ea79000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 373.525086][T18019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3276'. [ 373.592408][T18021] netlink: 'syz.2.3277': attribute type 4 has an invalid length. [ 373.679408][T18024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.772625][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 373.790639][T18029] netlink: 'syz.0.3280': attribute type 1 has an invalid length. [ 373.854594][T18033] netlink: 'syz.3.3281': attribute type 9 has an invalid length. [ 373.973472][T18029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.021258][T18031] bond2: (slave veth0_to_bond): making interface the new active one [ 374.091874][T18031] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 374.101949][T18047] netlink: 'syz.1.3284': attribute type 1 has an invalid length. [ 374.217024][T18035] macvlan2: entered promiscuous mode [ 374.225931][T18035] macvlan2: entered allmulticast mode [ 374.233049][T18035] bond2: entered promiscuous mode [ 374.242111][T18035] veth0_to_bond: entered promiscuous mode [ 374.273947][T18035] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.320649][T18035] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 374.353542][T18035] bond2: left promiscuous mode [ 374.360178][T18035] veth0_to_bond: left promiscuous mode [ 374.419624][T18058] bridge_slave_0: default FDB implementation only supports local addresses [ 374.523488][T18067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3289'. [ 374.633607][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 374.678864][T18074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3292'. [ 374.735648][T18078] syzkaller1: entered promiscuous mode [ 374.771647][T18078] syzkaller1: entered allmulticast mode [ 374.794460][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 375.453307][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3300'. [ 375.682839][T18114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.718941][T18116] veth1_macvtap: left promiscuous mode [ 375.768633][T18116] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 375.839876][T18121] bond2: (slave veth0_to_bond): Releasing active interface [ 375.932586][T18121] bond5: (slave veth0_to_bond): making interface the new active one [ 375.973628][T18121] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 376.052120][T18126] macvlan2: entered promiscuous mode [ 376.075179][T18126] macvlan2: entered allmulticast mode [ 376.100167][T18126] bond5: entered promiscuous mode [ 376.129601][T18126] veth0_to_bond: entered promiscuous mode [ 376.169418][T18126] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.211312][T18126] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 376.257850][T18126] bond5: left promiscuous mode [ 376.278151][T18126] veth0_to_bond: left promiscuous mode [ 379.554914][T18170] batman_adv: batadv0: Adding interface: dummy0 [ 379.561707][T18170] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.598471][T18170] batman_adv: batadv0: Interface activated: dummy0 [ 379.797519][T18182] bridge0: port 3(gretap0) entered blocking state [ 379.846777][T18182] bridge0: port 3(gretap0) entered disabled state [ 379.882202][T18182] gretap0: entered allmulticast mode [ 379.893652][T18191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3314'. [ 379.925574][T18182] gretap0: entered promiscuous mode [ 379.949091][T18182] bridge0: port 3(gretap0) entered blocking state [ 379.957198][T18182] bridge0: port 3(gretap0) entered forwarding state [ 381.522306][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3329'. [ 381.737583][T18263] validate_nla: 5 callbacks suppressed [ 381.737681][T18263] netlink: 'syz.0.3332': attribute type 1 has an invalid length. [ 381.963869][T18263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.017324][T18267] bond2: (slave veth0_to_bond): Releasing active interface [ 382.058671][T18267] bond3: (slave veth0_to_bond): making interface the new active one [ 382.069845][T18282] netlink: 'syz.3.3334': attribute type 3 has an invalid length. [ 382.079848][T18282] netlink: 'syz.3.3334': attribute type 1 has an invalid length. [ 382.089845][T18267] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 382.099685][T18282] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3334'. [ 382.167712][T18272] macvlan2: entered promiscuous mode [ 382.215630][T18272] macvlan2: entered allmulticast mode [ 382.248253][T18272] bond3: entered promiscuous mode [ 382.274011][T18272] veth0_to_bond: entered promiscuous mode [ 382.299706][T18272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.308186][T18272] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 382.327311][T18287] netlink: 'syz.3.3335': attribute type 12 has an invalid length. [ 382.346957][T18272] bond3: left promiscuous mode [ 382.347039][T18287] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3335'. [ 382.358266][T18272] veth0_to_bond: left promiscuous mode [ 382.695447][T18302] Cannot find del_set index 0 as target [ 383.231718][T18321] tc action pedit offset must be on 32 bit boundaries [ 383.678828][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3349'. [ 383.702411][T18344] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3350'. [ 383.859711][T18340] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.989937][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 384.026400][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'. [ 384.330948][T18379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.338409][T18379] IPv6: NLM_F_CREATE should be set when creating new route [ 384.345726][T18379] IPv6: NLM_F_CREATE should be set when creating new route [ 384.356598][T18379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.394277][T18363] bond5: entered promiscuous mode [ 384.400155][T18363] bond5: entered allmulticast mode [ 384.407687][T18363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.580752][T18381] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 384.749157][T18387] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 384.792469][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3359'. [ 384.863867][T18381] macvlan2: entered promiscuous mode [ 384.883699][T18381] macvlan2: entered allmulticast mode [ 384.897130][T18381] bond1: entered promiscuous mode [ 384.905376][T18381] bridge2: entered promiscuous mode [ 384.916677][T18381] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.930450][T18381] bond1: left promiscuous mode [ 384.935394][T18381] bridge2: left promiscuous mode [ 385.414195][T18411] netlink: 'syz.2.3363': attribute type 21 has an invalid length. [ 385.422389][T18411] netlink: 'syz.2.3363': attribute type 6 has an invalid length. [ 385.430606][T18411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3363'. [ 385.509219][T18390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.516694][T18390] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 385.538950][T18390] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.544936][T18390] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 385.581345][T18390] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 385.594242][T18390] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 385.611778][T18390] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.621233][T18390] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 385.638323][T18390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.645379][T18390] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 385.692160][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3363'. [ 386.176145][T18437] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 386.231240][T18439] netlink: 'syz.3.3373': attribute type 1 has an invalid length. [ 386.280835][T18439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.295259][T18439] bond1: (slave veth0_to_bond): making interface the new active one [ 386.307108][T18439] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 386.342927][T18439] macvlan2: entered promiscuous mode [ 386.350590][T18439] macvlan2: entered allmulticast mode [ 386.357563][T18439] bond1: entered promiscuous mode [ 386.396577][T18439] veth0_to_bond: entered promiscuous mode [ 386.438765][T18439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.439114][T18452] netlink: 'syz.5.3377': attribute type 1 has an invalid length. [ 386.458936][T18439] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 386.484646][T18439] bond1: left promiscuous mode [ 386.491428][T18439] veth0_to_bond: left promiscuous mode [ 386.563791][T18452] bond6: entered promiscuous mode [ 386.569520][T18452] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.654219][T18452] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.672660][T18452] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 386.685218][T18452] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 386.704723][T18452] bond6: (slave ip6gre1): making interface the new active one [ 386.713590][T18452] ip6gre1: entered promiscuous mode [ 386.721089][T18452] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 386.742273][T18469] netlink: 'syz.3.3381': attribute type 4 has an invalid length. [ 386.832843][T18470] bond2 (unregistering): Released all slaves [ 386.853993][T18466] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3381'. [ 386.864887][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3383'. [ 387.049866][T18481] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3386'. [ 387.062446][T18481] veth0_to_bond: default FDB implementation only supports local addresses [ 387.099466][T18485] FAULT_INJECTION: forcing a failure. [ 387.099466][T18485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.135276][T18485] CPU: 0 UID: 0 PID: 18485 Comm: syz.5.3387 Not tainted syzkaller #0 PREEMPT(full) [ 387.135301][T18485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.135311][T18485] Call Trace: [ 387.135319][T18485] [ 387.135326][T18485] dump_stack_lvl+0xe8/0x150 [ 387.135353][T18485] should_fail_ex+0x412/0x560 [ 387.135376][T18485] _copy_from_iter+0x1d3/0x1670 [ 387.135399][T18485] ? rcu_is_watching+0x15/0xb0 [ 387.135460][T18485] ? __pfx__copy_from_iter+0x10/0x10 [ 387.135485][T18485] ? netlink_sendmsg+0x650/0xb40 [ 387.135605][T18485] ? skb_put+0x11b/0x210 [ 387.135679][T18485] netlink_sendmsg+0x6c0/0xb40 [ 387.135707][T18485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.135729][T18485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.135751][T18485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.135776][T18485] ____sys_sendmsg+0x972/0x9f0 [ 387.135798][T18485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.135821][T18485] ? import_iovec+0x73/0xa0 [ 387.135841][T18485] ___sys_sendmsg+0x2a5/0x360 [ 387.135855][T18485] ? __lock_acquire+0x6b5/0x2cf0 [ 387.135874][T18485] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.135920][T18485] ? __fget_files+0x2a/0x420 [ 387.135939][T18485] ? __fget_files+0x3a0/0x420 [ 387.135964][T18485] __x64_sys_sendmsg+0x1bd/0x2a0 [ 387.135982][T18485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.136006][T18485] ? __pfx_ksys_write+0x10/0x10 [ 387.136034][T18485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.136053][T18485] do_syscall_64+0x174/0x580 [ 387.136069][T18485] ? trace_irq_disable+0x3b/0x140 [ 387.136090][T18485] ? clear_bhb_loop+0x40/0x90 [ 387.136110][T18485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.136124][T18485] RIP: 0033:0x7f44e219ce59 [ 387.136141][T18485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.136154][T18485] RSP: 002b:00007f44e2fca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.136172][T18485] RAX: ffffffffffffffda RBX: 00007f44e2415fa0 RCX: 00007f44e219ce59 [ 387.136183][T18485] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 387.136193][T18485] RBP: 00007f44e2fca090 R08: 0000000000000000 R09: 0000000000000000 [ 387.136202][T18485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.136211][T18485] R13: 00007f44e2416038 R14: 00007f44e2415fa0 R15: 00007ffdb89eb748 [ 387.136238][T18485] [ 387.571683][T18498] syzkaller0: entered promiscuous mode [ 387.578232][T18498] syzkaller0: entered allmulticast mode [ 387.602440][T18498] syzkaller1: entered promiscuous mode [ 387.608135][T18498] syzkaller1: entered allmulticast mode [ 387.720884][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 388.731554][T18560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3402'. [ 388.849643][T18567] Cannot find del_set index 0 as target [ 388.904068][T18564] bond2 (unregistering): Released all slaves [ 388.979290][T18571] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 389.104212][T18579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'. [ 389.224000][T18583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3411'. [ 389.269617][T18589] netlink: 'syz.1.3413': attribute type 10 has an invalid length. [ 389.279184][T18586] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3411'. [ 389.281532][T18589] veth1_macvtap: left promiscuous mode [ 389.303338][T18589] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 389.403990][T18594] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.434069][T18596] sctp: [Deprecated]: syz.3.3416 (pid 18596) Use of int in max_burst socket option deprecated. [ 389.434069][T18596] Use struct sctp_assoc_value instead [ 389.480072][T18598] SET target dimension over the limit! [ 389.537959][T18594] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.591541][T18608] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 389.643708][T18594] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.793457][T18594] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.843693][T18616] netlink: 'syz.3.3421': attribute type 9 has an invalid length. [ 389.945918][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.979357][ T47] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.013938][ T47] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.076048][T18627] tunl0: entered promiscuous mode [ 390.092096][T18627] netlink: 'syz.5.3426': attribute type 3 has an invalid length. [ 390.101242][ T47] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.127343][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.204813][T18627] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.693179][T18649] __nla_validate_parse: 3 callbacks suppressed [ 390.693922][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3434'. [ 390.697436][T18644] netlink: 'syz.5.3433': attribute type 2 has an invalid length. [ 390.803057][T18652] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3434'. [ 391.393782][T18669] syzkaller0: entered promiscuous mode [ 391.416532][T18669] syzkaller0: entered allmulticast mode [ 391.451322][T18669] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3437'. [ 391.890877][T18690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3442'. [ 392.984780][T18716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.222778][T18732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3448'. [ 393.271358][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3448'. [ 393.372287][T18738] syzkaller1: entered promiscuous mode [ 393.409929][T18738] syzkaller1: entered allmulticast mode [ 393.805965][T18764] FAULT_INJECTION: forcing a failure. [ 393.805965][T18764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.836884][T18764] CPU: 1 UID: 0 PID: 18764 Comm: syz.1.3452 Not tainted syzkaller #0 PREEMPT(full) [ 393.836907][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.836916][T18764] Call Trace: [ 393.836923][T18764] [ 393.836929][T18764] dump_stack_lvl+0xe8/0x150 [ 393.836952][T18764] should_fail_ex+0x412/0x560 [ 393.836973][T18764] _copy_from_user+0x2d/0xb0 [ 393.836991][T18764] do_ipt_set_ctl+0x6a5/0xe00 [ 393.837117][T18764] ? rcu_is_watching+0x15/0xb0 [ 393.837136][T18764] ? trace_contention_end+0x3d/0x140 [ 393.837155][T18764] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 393.837185][T18764] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 393.837267][T18764] ? __pfx___mutex_lock+0x10/0x10 [ 393.837314][T18764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.837338][T18764] ? __pfx_aa_sk_perm+0x10/0x10 [ 393.837365][T18764] nf_setsockopt+0x26f/0x290 [ 393.837426][T18764] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 393.837449][T18764] do_sock_setsockopt+0x17c/0x1b0 [ 393.837475][T18764] __x64_sys_setsockopt+0x13d/0x1b0 [ 393.837498][T18764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.837517][T18764] do_syscall_64+0x174/0x580 [ 393.837532][T18764] ? trace_irq_disable+0x3b/0x140 [ 393.837553][T18764] ? clear_bhb_loop+0x40/0x90 [ 393.837573][T18764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.837588][T18764] RIP: 0033:0x7f082139ce59 [ 393.837604][T18764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.837618][T18764] RSP: 002b:00007f082216f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.837635][T18764] RAX: ffffffffffffffda RBX: 00007f0821615fa0 RCX: 00007f082139ce59 [ 393.837646][T18764] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 393.837655][T18764] RBP: 00007f082216f090 R08: 00000000000002b0 R09: 0000000000000000 [ 393.837663][T18764] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 393.837671][T18764] R13: 00007f0821616038 R14: 00007f0821615fa0 R15: 00007fffe97480a8 [ 393.837696][T18764] [ 394.390742][T18767] SET target dimension over the limit! [ 394.694342][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'. [ 394.703610][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3455'. [ 394.713048][T18771] netlink: 'syz.1.3455': attribute type 12 has an invalid length. [ 394.721134][T18771] netlink: 'syz.1.3455': attribute type 11 has an invalid length. [ 397.440039][T18716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.679814][T18716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.746539][T18792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 397.925112][T18716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.947923][T18797] FAULT_INJECTION: forcing a failure. [ 397.947923][T18797] name failslab, interval 1, probability 0, space 0, times 0 [ 397.970799][T18797] CPU: 1 UID: 0 PID: 18797 Comm: syz.0.3463 Not tainted syzkaller #0 PREEMPT(full) [ 397.970821][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.970832][T18797] Call Trace: [ 397.970839][T18797] [ 397.970846][T18797] dump_stack_lvl+0xe8/0x150 [ 397.970870][T18797] should_fail_ex+0x412/0x560 [ 397.970916][T18797] should_failslab+0xa8/0x100 [ 397.970935][T18797] __kvmalloc_node_noprof+0x178/0x8a0 [ 397.970958][T18797] ? xt_alloc_table_info+0x40/0xb0 [ 397.971097][T18797] xt_alloc_table_info+0x40/0xb0 [ 397.971114][T18797] do_ipt_set_ctl+0x903/0xe00 [ 397.971136][T18797] ? rcu_is_watching+0x15/0xb0 [ 397.971156][T18797] ? trace_contention_end+0x3d/0x140 [ 397.971177][T18797] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 397.971210][T18797] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 397.971228][T18797] ? __pfx___mutex_lock+0x10/0x10 [ 397.971247][T18797] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 397.971269][T18797] ? __pfx_aa_sk_perm+0x10/0x10 [ 397.971294][T18797] nf_setsockopt+0x26f/0x290 [ 397.971314][T18797] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 397.971335][T18797] do_sock_setsockopt+0x17c/0x1b0 [ 397.971358][T18797] __x64_sys_setsockopt+0x13d/0x1b0 [ 397.971380][T18797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.971395][T18797] do_syscall_64+0x174/0x580 [ 397.971410][T18797] ? trace_irq_disable+0x3b/0x140 [ 397.971431][T18797] ? clear_bhb_loop+0x40/0x90 [ 397.971450][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.971465][T18797] RIP: 0033:0x7fbcfdf9ce59 [ 397.971481][T18797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.971494][T18797] RSP: 002b:00007fbcfee1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 397.971510][T18797] RAX: ffffffffffffffda RBX: 00007fbcfe215fa0 RCX: 00007fbcfdf9ce59 [ 397.971521][T18797] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 397.971531][T18797] RBP: 00007fbcfee1f090 R08: 00000000000002b0 R09: 0000000000000000 [ 397.971540][T18797] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 397.971549][T18797] R13: 00007fbcfe216038 R14: 00007fbcfe215fa0 R15: 00007fffa9a64ca8 [ 397.971574][T18797] [ 398.023804][T18804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3466'. [ 398.079975][T18808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.398929][T18821] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3470'. [ 401.654545][T18843] FAULT_INJECTION: forcing a failure. [ 401.654545][T18843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.684512][T18846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3478'. [ 401.697083][T18843] CPU: 0 UID: 0 PID: 18843 Comm: syz.0.3477 Not tainted syzkaller #0 PREEMPT(full) [ 401.697106][T18843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.697115][T18843] Call Trace: [ 401.697122][T18843] [ 401.697129][T18843] dump_stack_lvl+0xe8/0x150 [ 401.697152][T18843] should_fail_ex+0x412/0x560 [ 401.697174][T18843] _copy_from_user+0x2d/0xb0 [ 401.697193][T18843] copy_from_sockptr_offset+0x66/0xa0 [ 401.697217][T18843] do_ipt_set_ctl+0x934/0xe00 [ 401.697237][T18843] ? rcu_is_watching+0x15/0xb0 [ 401.697255][T18843] ? trace_contention_end+0x3d/0x140 [ 401.697275][T18843] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 401.697305][T18843] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 401.697323][T18843] ? __pfx___mutex_lock+0x10/0x10 [ 401.697338][T18843] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.697352][T18843] ? __pfx_aa_sk_perm+0x10/0x10 [ 401.697369][T18843] nf_setsockopt+0x26f/0x290 [ 401.697382][T18843] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 401.697396][T18843] do_sock_setsockopt+0x17c/0x1b0 [ 401.697412][T18843] __x64_sys_setsockopt+0x13d/0x1b0 [ 401.697428][T18843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.697439][T18843] do_syscall_64+0x174/0x580 [ 401.697448][T18843] ? trace_irq_disable+0x3b/0x140 [ 401.697462][T18843] ? clear_bhb_loop+0x40/0x90 [ 401.697473][T18843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.697483][T18843] RIP: 0033:0x7fbcfdf9ce59 [ 401.697493][T18843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.697501][T18843] RSP: 002b:00007fbcfee1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 401.697512][T18843] RAX: ffffffffffffffda RBX: 00007fbcfe215fa0 RCX: 00007fbcfdf9ce59 [ 401.697519][T18843] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 401.697525][T18843] RBP: 00007fbcfee1f090 R08: 00000000000002b0 R09: 0000000000000000 [ 401.697531][T18843] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 401.697536][T18843] R13: 00007fbcfe216038 R14: 00007fbcfe215fa0 R15: 00007fffa9a64ca8 [ 401.697558][T18843] [ 401.924401][ T5985] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.995640][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.036251][ T5985] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.044954][ T5985] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.092524][T18849] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3479'. [ 402.211831][T18852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3483'. [ 402.272768][T18861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 402.372963][T18866] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 402.518596][T18866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.534987][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3487'. [ 402.563608][T18870] bond2: (slave veth0_to_bond): making interface the new active one [ 402.580581][T18883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3489'. [ 402.620821][T18870] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 402.723527][T18877] macvlan2: entered promiscuous mode [ 402.760232][T18877] macvlan2: entered allmulticast mode [ 402.790788][T18877] bond2: entered promiscuous mode [ 402.801993][T18877] veth0_to_bond: entered promiscuous mode [ 402.833917][T18877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.868248][T18877] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 402.920420][T18877] bond2: left promiscuous mode [ 402.932292][T18877] veth0_to_bond: left promiscuous mode [ 403.033909][T18898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3492'. [ 403.330728][ T5639] block nbd0: Receive control failed (result -32) [ 406.109616][T18901] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.237910][T18901] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.269954][T18921] Cannot find set identified by id 0 to match [ 406.329945][T18923] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.421932][T18901] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.457959][T18923] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.502737][T18901] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.640069][T18923] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.727603][ T5985] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.757554][T13117] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.778415][T18923] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.842672][T13117] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.902833][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 406.920051][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 406.926312][ T5985] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.937212][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 406.957382][T13117] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.961991][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 406.982635][ T5985] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.991559][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 407.007063][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 407.034378][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 407.048798][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 407.055200][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 407.062831][T18950] ipt_REJECT: TCP_RESET invalid for non-tcp [ 407.068977][ T5985] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.081111][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 407.099445][ T5986] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.111544][T18954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3511'. [ 407.256672][T18957] netlink: 'syz.1.3513': attribute type 1 has an invalid length. [ 407.269875][T18961] netlink: 'syz.2.3514': attribute type 1 has an invalid length. [ 407.282896][T18957] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3513'. [ 407.302877][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'. [ 407.339040][T18961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.354255][T18957] sctp: [Deprecated]: syz.1.3513 (pid 18957) Use of int in maxseg socket option. [ 407.354255][T18957] Use struct sctp_assoc_value instead [ 407.393676][T18966] bond2: (slave veth0_to_bond): Releasing active interface [ 407.431210][T18966] bond3: (slave veth0_to_bond): making interface the new active one [ 407.442117][T18966] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 407.476653][T18961] macvlan2: entered promiscuous mode [ 407.482103][T18961] macvlan2: entered allmulticast mode [ 407.488902][T18961] bond3: entered promiscuous mode [ 407.495396][T18961] veth0_to_bond: entered promiscuous mode [ 407.503227][T18961] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.512330][T18961] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 407.530440][T18961] bond3: left promiscuous mode [ 407.548833][T18961] veth0_to_bond: left promiscuous mode [ 407.772331][T18988] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.895072][T18991] netlink: 'syz.0.3522': attribute type 26 has an invalid length. [ 407.904775][T18991] netlink: 'syz.0.3522': attribute type 26 has an invalid length. [ 407.927010][T18994] netlink: 'syz.5.3524': attribute type 1 has an invalid length. [ 407.942519][T18988] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.960782][T18994] netlink: 'syz.5.3524': attribute type 2 has an invalid length. [ 407.988510][T18994] netlink: 'syz.5.3524': attribute type 1 has an invalid length. [ 408.061971][T18988] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.237446][T18988] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.312857][T19007] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.436375][T19007] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.549054][ T5984] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.609759][T19007] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.660858][T13117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.715117][T19007] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.780387][ T5984] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.849145][ T5984] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.159708][T19047] vlan2: entered allmulticast mode [ 409.175117][T19047] bond0: entered allmulticast mode [ 409.196010][T19047] bond_slave_0: entered allmulticast mode [ 409.209202][T19047] bond_slave_1: entered allmulticast mode [ 409.327775][T19057] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 409.335810][T19055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3544'. [ 409.344999][T19057] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 409.370591][T19057] ipvlan2: entered allmulticast mode [ 409.376386][T19057] batadv_slave_1: entered allmulticast mode [ 409.384296][T19057] batman_adv: batadv0: Adding interface: ipvlan2 [ 409.391263][T19057] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.436174][T19057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.447815][T19057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.460502][T19057] batman_adv: batadv0: Interface activated: ipvlan2 [ 409.544217][ T47] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.607426][ T5985] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.658185][ T5985] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.684277][T13114] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.713273][T19069] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.808708][T19069] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.935365][T19069] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.123252][T19080] syzkaller0: entered promiscuous mode [ 410.138137][T19080] syzkaller0: entered allmulticast mode [ 410.161278][T19069] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.169632][T19093] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.011720][T13113] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.079566][ T47] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.122238][T19138] netlink: 'syz.2.3564': attribute type 16 has an invalid length. [ 414.154992][T19138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3564'. [ 414.168909][ T5986] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.178058][ T5986] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.199657][T19141] netem: change failed [ 414.205011][ T5986] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.214754][T19141] ip_vti0: entered promiscuous mode [ 414.229841][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 414.307873][T13113] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.354431][ T47] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.413511][T19151] bond6 (unregistering): Released all slaves [ 414.472028][T19149] sit1: entered promiscuous mode [ 414.477576][T19149] sit1: entered allmulticast mode [ 414.478096][T19156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3569'. [ 414.563861][ T5986] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.574737][T19161] FAULT_INJECTION: forcing a failure. [ 414.574737][T19161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.590223][T19161] CPU: 0 UID: 0 PID: 19161 Comm: syz.3.3571 Not tainted syzkaller #0 PREEMPT(full) [ 414.590247][T19161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.590256][T19161] Call Trace: [ 414.590263][T19161] [ 414.590269][T19161] dump_stack_lvl+0xe8/0x150 [ 414.590291][T19161] should_fail_ex+0x412/0x560 [ 414.590314][T19161] _copy_from_iter+0x1d3/0x1670 [ 414.590335][T19161] ? rcu_is_watching+0x15/0xb0 [ 414.590358][T19161] ? __pfx__copy_from_iter+0x10/0x10 [ 414.590379][T19161] ? netlink_sendmsg+0x650/0xb40 [ 414.590397][T19161] ? skb_put+0x11b/0x210 [ 414.590418][T19161] netlink_sendmsg+0x6c0/0xb40 [ 414.590446][T19161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.590470][T19161] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.590492][T19161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.590514][T19161] ____sys_sendmsg+0x972/0x9f0 [ 414.590527][T19161] ? __might_fault+0xaf/0x130 [ 414.590553][T19161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.590577][T19161] ? import_iovec+0x73/0xa0 [ 414.590597][T19161] ___sys_sendmsg+0x2a5/0x360 [ 414.590612][T19161] ? __lock_acquire+0x6b5/0x2cf0 [ 414.590632][T19161] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.590680][T19161] ? __fget_files+0x2a/0x420 [ 414.590697][T19161] ? __fget_files+0x3a0/0x420 [ 414.590724][T19161] __x64_sys_sendmsg+0x1bd/0x2a0 [ 414.590741][T19161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.590766][T19161] ? __pfx_ksys_write+0x10/0x10 [ 414.590794][T19161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.590812][T19161] do_syscall_64+0x174/0x580 [ 414.590827][T19161] ? trace_irq_disable+0x3b/0x140 [ 414.590849][T19161] ? clear_bhb_loop+0x40/0x90 [ 414.590868][T19161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.590883][T19161] RIP: 0033:0x7fed2859ce59 [ 414.590898][T19161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.590911][T19161] RSP: 002b:00007fed293b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.590929][T19161] RAX: ffffffffffffffda RBX: 00007fed28815fa0 RCX: 00007fed2859ce59 [ 414.590940][T19161] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000009 [ 414.590950][T19161] RBP: 00007fed293b6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.590959][T19161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.590968][T19161] R13: 00007fed28816038 R14: 00007fed28815fa0 R15: 00007ffd187b4df8 [ 414.590995][T19161] [ 414.594235][T19151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3569'. [ 414.956560][T19168] netlink: 'syz.2.3574': attribute type 1 has an invalid length. [ 415.207611][T19180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3581'. [ 415.238823][T19176] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 415.253101][T19184] FAULT_INJECTION: forcing a failure. [ 415.253101][T19184] name failslab, interval 1, probability 0, space 0, times 0 [ 415.266003][T19176] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 415.278258][T19184] CPU: 0 UID: 0 PID: 19184 Comm: syz.0.3582 Not tainted syzkaller #0 PREEMPT(full) [ 415.278281][T19184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.278290][T19184] Call Trace: [ 415.278297][T19184] [ 415.278304][T19184] dump_stack_lvl+0xe8/0x150 [ 415.278328][T19184] should_fail_ex+0x412/0x560 [ 415.278351][T19184] should_failslab+0xa8/0x100 [ 415.278375][T19184] ? skb_clone+0x212/0x3a0 [ 415.278392][T19184] kmem_cache_alloc_noprof+0x87/0x650 [ 415.278414][T19184] ? __netlink_lookup+0xc6/0x8b0 [ 415.278436][T19184] skb_clone+0x212/0x3a0 [ 415.278454][T19184] __netlink_deliver_tap+0x404/0x850 [ 415.278487][T19184] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.278508][T19184] netlink_deliver_tap+0x19c/0x1b0 [ 415.278531][T19184] netlink_unicast+0x730/0x8e0 [ 415.278561][T19184] netlink_sendmsg+0x813/0xb40 [ 415.278591][T19184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.278615][T19184] ? aa_sock_msg_perm+0xf1/0x1b0 [ 415.278638][T19184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.278661][T19184] ____sys_sendmsg+0x972/0x9f0 [ 415.278677][T19184] ? __might_fault+0xaf/0x130 [ 415.278701][T19184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.278722][T19184] ? import_iovec+0x73/0xa0 [ 415.278745][T19184] ___sys_sendmsg+0x2a5/0x360 [ 415.278758][T19184] ? __lock_acquire+0x6b5/0x2cf0 [ 415.278778][T19184] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.278825][T19184] ? __fget_files+0x2a/0x420 [ 415.278844][T19184] ? __fget_files+0x3a0/0x420 [ 415.278872][T19184] __x64_sys_sendmsg+0x1bd/0x2a0 [ 415.278892][T19184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.278918][T19184] ? __pfx_ksys_write+0x10/0x10 [ 415.278943][T19184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.278960][T19184] do_syscall_64+0x174/0x580 [ 415.278976][T19184] ? trace_irq_disable+0x3b/0x140 [ 415.278995][T19184] ? clear_bhb_loop+0x40/0x90 [ 415.279015][T19184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.279030][T19184] RIP: 0033:0x7fbcfdf9ce59 [ 415.279045][T19184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.279058][T19184] RSP: 002b:00007fbcfee1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.279075][T19184] RAX: ffffffffffffffda RBX: 00007fbcfe215fa0 RCX: 00007fbcfdf9ce59 [ 415.279087][T19184] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000009 [ 415.279100][T19184] RBP: 00007fbcfee1f090 R08: 0000000000000000 R09: 0000000000000000 [ 415.279109][T19184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.279118][T19184] R13: 00007fbcfe216038 R14: 00007fbcfe215fa0 R15: 00007fffa9a64ca8 [ 415.279146][T19184] [ 415.570246][T19187] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.621741][T19184] tipc: Started in network mode [ 415.630923][T19184] tipc: Node identity 4, cluster identity 4711 [ 415.649513][T19184] tipc: Node number set to 4 [ 415.683665][T19187] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.834393][T19187] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.882732][T19199] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 415.971586][T19187] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.157628][T19209] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 416.240319][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.332746][T13117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.356092][T13117] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.390261][T13117] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.674622][T19232] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3596'. [ 416.854389][T19236] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 416.870528][ T808] IPVS: starting estimator thread 0... [ 416.972662][T19249] netlink: 'syz.1.3601': attribute type 11 has an invalid length. [ 416.987117][T19241] IPVS: using max 31 ests per chain, 74400 per kthread [ 417.109148][T19252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.177336][T19258] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 417.278014][T19252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.416806][T19252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.523692][T19252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.069388][T19298] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3616'. [ 418.079117][T19298] 0·: renamed from hsr0 (while UP) [ 418.089660][T19298] 0·: entered allmulticast mode [ 418.094552][T19298] hsr_slave_0: entered allmulticast mode [ 418.101216][T19298] hsr_slave_1: entered allmulticast mode [ 418.117898][T19298] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 419.495647][ T47] batman_adv: batadv0: Removing interface: gretap1 [ 419.548213][ T47] bond8 (unregistering): (slave geneve2): Releasing active interface [ 419.690990][ T47]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.700986][ T47]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.710902][ T47]  (unregistering): Released all slaves [ 419.721821][ T47] bond1 (unregistering): (slave veth5): Releasing active interface [ 419.732376][ T47] batadv0: entered promiscuous mode [ 419.740168][ T47] bond1 (unregistering): (slave batadv0): Releasing active interface [ 419.751147][ T47] bond1 (unregistering): Released all slaves [ 419.764407][ T47] bond2 (unregistering): Released all slaves [ 419.778974][ T47] bond3 (unregistering): (slave bond4): Releasing backup interface [ 419.790002][ T47] bond3 (unregistering): Released all slaves [ 419.809126][ T47] bond4 (unregistering): Released all slaves [ 419.825038][ T47] bond5 (unregistering): (slave veth7): Releasing active interface [ 419.834661][ T47] bond5 (unregistering): (slave veth9): Releasing active interface [ 419.843843][ T47] bond5 (unregistering): Released all slaves [ 419.863404][ T47] bond6 (unregistering): (slave C): Releasing backup interface [ 419.879410][ T47] bond6 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 419.890998][ T47] bond6 (unregistering): Released all slaves [ 419.904597][ T47] bond7 (unregistering): Released all slaves [ 419.918737][ T47] bond0 (unregistering): Released all slaves [ 419.932313][ T47] bond8 (unregistering): Released all slaves [ 419.951355][ T47] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 419.961407][ T47] bond9 (unregistering): Released all slaves [ 419.985560][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.006676][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.060074][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.068673][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.078608][ T47] tipc: Disabling bearer [ 420.091812][ T47] tipc: Disabling bearer [ 420.109973][ T47] tipc: Left network mode [ 420.454498][T19269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.725060][T19314] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3620'. [ 420.750619][T19315] xt_hashlimit: invalid rate [ 420.798430][T19320] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 420.836432][T19320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3623'. [ 421.217924][T19333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3626'. [ 421.253881][T19339] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.266061][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3626'. [ 421.368294][T19333] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 421.447202][T19334] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 421.471002][T19339] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.608617][T19339] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.683612][ T47] batman_adv: batadv0: Removing interface: dummy0 [ 421.722989][ T47] hsr_slave_0: left promiscuous mode [ 421.737683][ T47] hsr_slave_1: left promiscuous mode [ 421.798410][T19369] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3632'. [ 421.894309][ T5985] smc: removing ib device syz2 [ 422.019472][ T47] team0 (unregistering): Port device team_slave_1 removed [ 422.034736][ T47] team0 (unregistering): Port device team_slave_0 removed [ 422.134015][T19360] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 422.182350][T19371] bridge0: port 4(ipvlan2) entered blocking state [ 422.205033][T19371] bridge0: port 4(ipvlan2) entered disabled state [ 422.225963][T19371] ipvlan2: entered allmulticast mode [ 422.234393][T19371] bridge0: entered allmulticast mode [ 422.242610][T19371] ipvlan2: left allmulticast mode [ 422.243630][T19377] netlink: 'syz.1.3637': attribute type 1 has an invalid length. [ 422.256540][T19371] bridge0: left allmulticast mode [ 422.286832][ T5743] ================================================================== [ 422.294986][ T5743] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 422.303807][ T5743] Read of size 8 at addr ffff8880786242f0 by task kworker/0:4/5743 [ 422.311709][ T5743] [ 422.314068][ T5743] CPU: 0 UID: 0 PID: 5743 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 422.314083][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.314090][ T5743] Workqueue: events smc_ib_port_event_work [ 422.314175][ T5743] Call Trace: [ 422.314180][ T5743] [ 422.314185][ T5743] dump_stack_lvl+0xe8/0x150 [ 422.314198][ T5743] print_address_description+0x55/0x1e0 [ 422.314217][ T5743] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 422.314241][ T5743] print_report+0x58/0x70 [ 422.314249][ T5743] kasan_report+0x117/0x150 [ 422.314259][ T5743] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 422.314271][ T5743] __ethtool_get_link_ksettings+0x5e/0x170 [ 422.314281][ T5743] ib_get_eth_speed+0x180/0x7f0 [ 422.314344][ T5743] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 422.314358][ T5743] ? do_raw_spin_unlock+0xf5/0x210 [ 422.314373][ T5743] rxe_query_port+0x93/0x3d0 [ 422.314440][ T5743] ib_query_port+0x170/0x830 [ 422.314476][ T5743] smc_ib_port_event_work+0x15a/0x940 [ 422.314491][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 422.314502][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 422.314511][ T5743] process_scheduled_works+0xb5d/0x1860 [ 422.314526][ T5743] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.314536][ T5743] ? assign_work+0x3d5/0x5e0 [ 422.314550][ T5743] worker_thread+0xa53/0xfc0 [ 422.314565][ T5743] kthread+0x389/0x470 [ 422.314577][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 422.314586][ T5743] ? __pfx_kthread+0x10/0x10 [ 422.314597][ T5743] ret_from_fork+0x514/0xb70 [ 422.314621][ T5743] ? __pfx_ret_from_fork+0x10/0x10 [ 422.314634][ T5743] ? __switch_to+0xc79/0x1410 [ 422.314654][ T5743] ? __pfx_kthread+0x10/0x10 [ 422.314670][ T5743] ret_from_fork_asm+0x1a/0x30 [ 422.314699][ T5743] [ 422.314713][ T5743] [ 422.488411][ T5743] Allocated by task 5626: [ 422.492804][ T5743] kasan_save_track+0x3e/0x80 [ 422.497485][ T5743] __kasan_kmalloc+0x93/0xb0 [ 422.502064][ T5743] __kvmalloc_node_noprof+0x528/0x8a0 [ 422.507419][ T5743] alloc_netdev_mqs+0xa8/0x1210 [ 422.512469][ T5743] rtnl_create_link+0x31f/0xd70 [ 422.517380][ T5743] rtnl_newlink_create+0x277/0xb70 [ 422.522532][ T5743] rtnl_newlink+0x166a/0x1bb0 [ 422.527192][ T5743] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 422.532140][ T5743] netlink_rcv_skb+0x232/0x4b0 [ 422.536886][ T5743] netlink_unicast+0x75c/0x8e0 [ 422.541631][ T5743] netlink_sendmsg+0x813/0xb40 [ 422.546385][ T5743] __sys_sendto+0x672/0x710 [ 422.551067][ T5743] __x64_sys_sendto+0xde/0x100 [ 422.555823][ T5743] do_syscall_64+0x174/0x580 [ 422.560388][ T5743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.566264][ T5743] [ 422.568570][ T5743] Freed by task 47: [ 422.572356][ T5743] kasan_save_track+0x3e/0x80 [ 422.577011][ T5743] kasan_save_free_info+0x46/0x50 [ 422.582278][ T5743] __kasan_slab_free+0x5c/0x80 [ 422.587028][ T5743] kfree+0x1c5/0x640 [ 422.590912][ T5743] device_release+0xc4/0x1f0 [ 422.595481][ T5743] kobject_put+0x228/0x560 [ 422.599905][ T5743] netdev_run_todo+0xc75/0xde0 [ 422.604672][ T5743] default_device_exit_batch+0x967/0x9e0 [ 422.610371][ T5743] ops_undo_list+0x52b/0x940 [ 422.615004][ T5743] cleanup_net+0x56b/0x800 [ 422.619408][ T5743] process_scheduled_works+0xb5d/0x1860 [ 422.624945][ T5743] worker_thread+0xa53/0xfc0 [ 422.629533][ T5743] kthread+0x389/0x470 [ 422.633598][ T5743] ret_from_fork+0x514/0xb70 [ 422.638523][ T5743] ret_from_fork_asm+0x1a/0x30 [ 422.643265][ T5743] [ 422.645577][ T5743] The buggy address belongs to the object at ffff888078624000 [ 422.645577][ T5743] which belongs to the cache kmalloc-cg-4k of size 4096 [ 422.659939][ T5743] The buggy address is located 752 bytes inside of [ 422.659939][ T5743] freed 4096-byte region [ffff888078624000, ffff888078625000) [ 422.673897][ T5743] [ 422.676207][ T5743] The buggy address belongs to the physical page: [ 422.682618][ T5743] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78620 [ 422.691698][ T5743] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 422.700282][ T5743] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 422.707839][ T5743] page_type: f5(slab) [ 422.711800][ T5743] raw: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 422.720543][ T5743] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 422.729121][ T5743] head: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 422.737778][ T5743] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 422.746430][ T5743] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 422.755089][ T5743] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 422.763733][ T5743] page dumped because: kasan: bad access detected [ 422.770133][ T5743] page_owner tracks the page as allocated [ 422.775830][ T5743] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5626, tgid 5626 (syz-executor), ts 79402572930, free_ts 59077828168 [ 422.799084][ T5743] post_alloc_hook+0x22d/0x280 [ 422.803843][ T5743] get_page_from_freelist+0x2593/0x2610 [ 422.809385][ T5743] __alloc_frozen_pages_noprof+0x18d/0x380 [ 422.815225][ T5743] allocate_slab+0x77/0x660 [ 422.819710][ T5743] refill_objects+0x339/0x3d0 [ 422.824483][ T5743] __pcs_replace_empty_main+0x321/0x720 [ 422.830094][ T5743] __kvmalloc_node_noprof+0x657/0x8a0 [ 422.835458][ T5743] alloc_netdev_mqs+0xa8/0x1210 [ 422.840719][ T5743] rtnl_create_link+0x31f/0xd70 [ 422.845725][ T5743] rtnl_newlink_create+0x277/0xb70 [ 422.850840][ T5743] rtnl_newlink+0x166a/0x1bb0 [ 422.855513][ T5743] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 422.860444][ T5743] netlink_rcv_skb+0x232/0x4b0 [ 422.865218][ T5743] netlink_unicast+0x75c/0x8e0 [ 422.870407][ T5743] netlink_sendmsg+0x813/0xb40 [ 422.875240][ T5743] __sys_sendto+0x672/0x710 [ 422.879724][ T5743] page last free pid 5467 tgid 5467 stack trace: [ 422.886201][ T5743] __free_frozen_pages+0xc1c/0xd30 [ 422.891456][ T5743] __slab_free+0x274/0x2c0 [ 422.895890][ T5743] qlist_free_all+0x99/0x100 [ 422.900507][ T5743] kasan_quarantine_reduce+0x148/0x160 [ 422.906220][ T5743] __kasan_slab_alloc+0x22/0x80 [ 422.911060][ T5743] kmem_cache_alloc_noprof+0x2bc/0x650 [ 422.916504][ T5743] do_getname+0x2e/0x250 [ 422.920727][ T5743] vfs_fstatat+0x45/0x170 [ 422.925047][ T5743] __x64_sys_newfstatat+0x151/0x200 [ 422.930223][ T5743] do_syscall_64+0x174/0x580 [ 422.934890][ T5743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.940777][ T5743] [ 422.943088][ T5743] Memory state around the buggy address: [ 422.948776][ T5743] ffff888078624180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.956926][ T5743] ffff888078624200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.964968][ T5743] >ffff888078624280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.973030][ T5743] ^ [ 422.980816][ T5743] ffff888078624300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.988871][ T5743] ffff888078624380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.996926][ T5743] ================================================================== [ 423.019167][ T5743] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 423.026414][ T5743] CPU: 0 UID: 0 PID: 5743 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 423.035795][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.045848][ T5743] Workqueue: events smc_ib_port_event_work [ 423.051842][ T5743] Call Trace: [ 423.055126][ T5743] [ 423.058049][ T5743] vpanic+0x56c/0xa60 [ 423.062111][ T5743] ? __pfx_vpanic+0x10/0x10 [ 423.066621][ T5743] ? __pfx___schedule+0x10/0x10 [ 423.071491][ T5743] panic+0xc5/0xd0 [ 423.075228][ T5743] ? __pfx_panic+0x10/0x10 [ 423.079671][ T5743] ? preempt_schedule_common+0x82/0xd0 [ 423.085128][ T5743] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 423.091100][ T5743] check_panic_on_warn+0x89/0xb0 [ 423.096034][ T5743] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 423.104095][ T5743] end_report+0x73/0x170 [ 423.108356][ T5743] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 423.114324][ T5743] kasan_report+0x128/0x150 [ 423.118902][ T5743] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 423.124878][ T5743] __ethtool_get_link_ksettings+0x5e/0x170 [ 423.130686][ T5743] ib_get_eth_speed+0x180/0x7f0 [ 423.135548][ T5743] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 423.140914][ T5743] ? do_raw_spin_unlock+0xf5/0x210 [ 423.146022][ T5743] rxe_query_port+0x93/0x3d0 [ 423.150608][ T5743] ib_query_port+0x170/0x830 [ 423.155242][ T5743] smc_ib_port_event_work+0x15a/0x940 [ 423.160606][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 423.166308][ T5743] ? process_scheduled_works+0xa70/0x1860 [ 423.172009][ T5743] process_scheduled_works+0xb5d/0x1860 [ 423.177552][ T5743] ? __pfx_process_scheduled_works+0x10/0x10 [ 423.183523][ T5743] ? assign_work+0x3d5/0x5e0 [ 423.188099][ T5743] worker_thread+0xa53/0xfc0 [ 423.194178][ T5743] kthread+0x389/0x470 [ 423.198300][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 423.203402][ T5743] ? __pfx_kthread+0x10/0x10 [ 423.207987][ T5743] ret_from_fork+0x514/0xb70 [ 423.212565][ T5743] ? __pfx_ret_from_fork+0x10/0x10 [ 423.217672][ T5743] ? __switch_to+0xc79/0x1410 [ 423.222349][ T5743] ? __pfx_kthread+0x10/0x10 [ 423.226934][ T5743] ret_from_fork_asm+0x1a/0x30 [ 423.231717][ T5743] [ 423.234911][ T5743] Kernel Offset: disabled [ 423.239240][ T5743] Rebooting in 86400 seconds..