last executing test programs: 2.813490573s ago: executing program 2 (id=3795): syz_emit_ethernet(0x48, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x7, 0x4, 0x0, 0x0, 0x1, 0x64, 0x7f, 0x81, 0x89, 0x100, @multicast1, @loopback, {[@end, @generic={0x88, 0x4, "78d2"}]}}, "e45e"}}}}}, 0x0) 2.636658103s ago: executing program 2 (id=3798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x6c, 0x2, 0x6, 0x101, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x7, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x56) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_dellink={0x20, 0x13, 0x5, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x880, 0xd101}}, 0x20}}, 0x20000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000440)=""/158, 0x9e, 0x0, &(0x7f00000010c0)=""/4096, 0x1000}}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000780)={r0, &(0x7f0000000680)='\\\x00', 0x4000, &(0x7f00000006c0)={@align=0xdb49, {0x6, 0xa9f, 0x3, 0x6}}, 0xae00000, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x28b}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x10001, 0x3, &(0x7f0000000300)=""/3, 0x41000, 0x42, '\x00', r6, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x1, 0x9, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, r8, r9, r10, r11, r12, r13], &(0x7f00000008c0)=[{0x0, 0x3, 0xb, 0x5}, {0x3, 0x2, 0xd, 0xa}, {0x1, 0x2, 0xa}, {0x1, 0x2, 0x4, 0xc}, {0x2, 0x4, 0xb, 0x4}, {0x0, 0x4, 0x3, 0x3}, {0x4, 0x3, 0x10, 0x4}, {0x3, 0x2, 0xb, 0xc}, {0x5, 0x5, 0xf, 0x5}], 0x10, 0x1ff}, 0x94) 2.416122476s ago: executing program 2 (id=3802): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x3c, 0x301, 0x70bd24, 0xfffffffc, {0xa}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x4}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc, 0x2}, 0xe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001042cbd70000000100000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c00127eda93eb3be56ae9766c616e000c00028006000200010000000800050b73244c18770c78b307a4e85e2405463596ca9cf8ddfe139e22ae1a465d9aaafeb2aee2b9f8db74ca294f85e5d84b80cd7b9ca25893b45b49814e800bb000d68cedff27b7abbec52cb380b4725dab387453749d05bd00"/156, @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x8004) 2.267887817s ago: executing program 2 (id=3804): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) bind$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.927532519s ago: executing program 2 (id=3806): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000000180), 0x0, 0x800) recvfrom$inet6(r0, &(0x7f0000000080)=""/52, 0x34, 0x2, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x1800}]}}]}, 0x40}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x20000, 0x4, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x68, 0x0, 0x3, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x9}, {@loopback, 0x9}, {@multicast1, 0x2}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000900)={0x328, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x4, 0x6, 0x4}, {0x2c0, 0x3, 0x37, 0x9}, {0x1, 0x5, 0x8, 0x1ff}, {0x9a59, 0x7, 0xc8, 0x7}, {0x4, 0x1, 0x6, 0x3}, {0x9, 0x5, 0x9, 0x1}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x8, 0x3, 0x9}, {0x8000, 0x0, 0xfb, 0x9}, {0xd4, 0x4e, 0x70, 0xf210}, {0x79, 0x9, 0x9, 0x3ff}, {0x6, 0x1, 0x7, 0x50aa}, {0x11ca, 0x9, 0x8, 0x2}, {0x77e, 0x5, 0x8, 0xffffc2ac}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x328}, 0x1, 0x0, 0x0, 0x20004085}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000914) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x0) 1.802975183s ago: executing program 1 (id=3808): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0x2a, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="180000008b000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000000f07bb030600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008700000006000000bf91000000000000b702000000000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 1.793091754s ago: executing program 0 (id=3809): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), 0x4) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) unshare(0x22020600) r1 = epoll_create(0x2040) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x20, 0x805, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), 0x4) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) unshare(0x22020600) (async) epoll_create(0x2040) (async) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x20, 0x805, 0x6}) (async) 1.67146456s ago: executing program 4 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c00018008000100f9d0875c7c95a4fe3ddb6e71de"], 0x40}}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000200)={{r2, &(0x7f0000000040)='^*\x00', 0x0, &(0x7f0000000080)={@align=0x2, {0x5, 0x61, 0x2, 0xa9}}, 0x800, &(0x7f0000000100), &(0x7f0000000140)=0x7f}, {[0x9, 0x65, 0x6, 0x7f]}, 0x3, 0x7b, &(0x7f0000000640)=""/123}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000001780)=""/185, 0xb9}, {&(0x7f0000004700)=""/4103, 0x1007}, {&(0x7f0000000600)=""/9, 0x9}, {&(0x7f0000001840)=""/144, 0x90}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f00000001c0)=""/75, 0x4b}], 0xa}, 0x40032160) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0200001300020026bd7000fbdbdf250206bc084e244e220500000009000000970200000600000006000000010000000300000001040000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2bc}}, 0x0) 1.621544493s ago: executing program 1 (id=3812): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x5e, @private=0xa010102, 0x3, 0x0, 'fo\x00', 0x20, 0x0, 0x61}, 0x2c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000000240), 0x4) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="066ad45b2d35b3ea2b6c6a4dd356d25e8212e654086d8ee895b89bc860f494e1d51a070f1eb9f4298469d6309451dbff8939f6cc96327094081e0e12f46923dec37c24cf3595b423eb1832a33e6fd41d46a25acb380edc251b42e61d22bf90612699661063d906c5888aae48d77acd8004047b22cc7c98c4d635e7061335ab757fff99cbeb219c1ce98759efdc46ace10c344b09fd05cdcfb2f7b62c7d1ef5a0f633dc25d8b68c8925a17290803910747292c3d5d607e433c4fdafce522ff8bb36882d061c532776f44c345c487080a47f19e3", 0xd3}, {&(0x7f00000000c0)="f26a1e0f38d7e882f589d24ad1e2d6d1206010", 0x13}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000140)}, {&(0x7f0000000400)="b78bdb54b7cd9cdbe8193c59596addf01089121b76fafe2fb255a98c9720ff726e75c40eb4692ac9c8d7f87fee63cb0be2044cebdf5314146c7666ea05a3ce4e7f995083bd1ee30bff1a37b6b40647704fb81c0459d5a1e0baa297e83e67e69e92f1d3caa9386f7d65e37f1b77c364b817c078f36e16bb78", 0x78}, {&(0x7f0000000300)="26f7438c963dcbc6ff5ae35061db0082f1a9f9d55679476dfee0b40611be", 0x1e}], 0x6}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78445af63bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc92", 0xda}], 0x1}}], 0x2, 0x2090) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) (async) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000006c0)={{0x2, 0x4e21, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x40, {0x2, 0x4e24, @broadcast}, 'dummy0\x00'}) (async) sendmmsg$inet6(r5, &(0x7f00000037c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000540)="f71e670f2e0cace01b76dd682c6edb", 0xf}], 0x1, &(0x7f00000034c0)=ANY=[@ANYBLOB="1400000000002c00290000000b02000000000005000000006ac9e41a3b125e777e3ce45dfe62e46d5826e7f06b5c1fa0c2f94c44ac0e5d0c29bec7782b86f2bc8a2de3dc4d5db9a3f29d572a06288675e387281e851df7b9c9eb338de5232fe4e6702bb497248e1caf72bb26370d76e646ff213c52b0a8dd6ca56e933b2c1695ec6ca79db9f749330542b223384c5c82cab5011293774aa13dc856931fc2e80a3ff0672bbf713d1df7dfac464a7da4987a119827c08211f436ea250f299755d3602f9be7fbcd73df22e43cd10bd1d7f99e50a82c0f4e2220b61297a2dc4968710ebb05cfdf710288a28c15e3"], 0x18}}, {{&(0x7f0000000a00)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000001c80)="3f01f420477a61d24d6f4c5b45d0ba9743140a454bc37fc7492c3916a3204ee1a0ec93bee7f720795a4c877a1b9da0d9a178bdfb3411cd10f86158cad690decfcaecb65c90fe3dbed599dc6f9fa0d8c0789a1cdaa83daef115238b68b2e95b13aecb08144be49b930e65f79149388856f7bdc917a8bf1dd83a84a43d96ad69e8c2ce78908bb14fd4ec5fc02a22ae7e739bad4ef90b5079cd882f427fa2306c009ad01feb34d65dc0d039c0f92f04ed4588bc0d06c57c671f42065908d29d7a0bbbdfe48c713ca56c93cfaea674913b4163897375446e3ab4aad6b8d886da3d6c6afb4c0aea0351661307af848d0f64b9da40292d4952652d85b2f6acd5ace2e411a7c1638ab17101a1a2ed0cf130994c668eaad388ca71068443478093ff6c92c4ad30f4360490b54f21aba5811a074b8f1dbba3fa17ff14122ecf7794a5ee2033979ec0c12774cf579cff8d438e1bba2382b9533779187a182f04b95faf2aebdcee941a095a92577dac438adb215e1f22623533de13bc9313fdc9c29d2b3cd541d711de2b153683c24027728c1647ba6c80ed5b9b8acc878ba065079a71669a78f583efdac5f311b6c797291e34213fcb43098f6999badcdb48fd25b147c56539f7d3c87fb9778546394ae69f0f69400a16c235ed4d3d285d3dc883fcedd8a83f433e798602404220ed569edf62cbfd6a7ce017599b5270a4747f6a5f30e7c2248b13b687a1dbeb92000f62b043506bb4a5ff56e4f2b3fe08ac7627dc5094fea87585c83b98f87eb2645ebe5dfc2cdb6d32092076647c4f4905046d500ee0374de11d75f0e90b292c0d8526537dc9ddb0a711b0b14bfd771be9d75647ae4d5bbb17a200ce994b65ea658a498a19466dffe734e0dd8922db84b6c3e7ab2902fe0cb5201c2bff8c16e09b77e45f3e04de4dfed346f0f9252fe41b0bfe036be511a622dc7e5ad949a221670f04a77331df3494cf2b2d88b7083441304a127a48d00bd3585473042dc942d2da465d399dbd23030e7c889c92b20aeb77e09308f72b0f83a64ee63d2129881d67eb317a6174558e3d49ca00cfc971636df8ce4b6365ce8a6814eeb75b23aa646daf6f4d75707f3191d932eec11ef2ec09e1ff2a4e0c4a983271938a5e46ceb653ebb81792f8871ceac936754ca2546b3de4999b6996d6ba3df323c7ca8f56f88a917cb5c7bb78760f66c8551790dc23b95ad33562da84710a9b61224c9e1a08f5c887e0fab3e966eb2bcb409fd0a831e51e49f6ac0b1b30dc6be46e3e72fd305c4402b375911cc8581b332a139f44af120c8a4e5e3875ecbf946d64c87dcbe4a94e8c1f2509935f7614f7725462d125216eb4d25f0ecec9afd986bfe034b478cb0b6b71996a32400737682f9840c60b9577729a0fdf9534e23a91be2055f3325e04f6dbc263acfcde42d9b2c5adcaed25025c9815d969d97e170fbd118690098c8b2df08b2ea9d719d1aea893376ba78a1ff634b3af6752fa1093aa7408573cd2a8f0696b59220dcd20bed1b3bc8497394fd991c0d13cc69671cc77b76d90aa0a1c476499d313b7d2968f76386f04d663e9c16377eb478b2c9608a440a990eb85699e24a0168084c8ef8e1521554b902fd2191bdea3286f2e26c4c3be513506f0431a76d21a3e245052d060bd8778019dad52e3eac273393e49043e543fadcad6668a532b0fdf869d70df6adbe367a23af0fdd97ae121366045ad43d83ec75b6fac88fa3f5ff503aa8d62a99b65eb785f77346d70a61f535d3236f44578dc3ef0f5b577785cde687ad233b7ee0470fe306170dcec6986887b381c2255e714d9f2cd758e774a6d3905ab9fc6c545c7c0539f0575c09702022c8cd6dc71d60a46eee75994f2d6b275ce82ad255d7ef3cf1c66b1e8957adcc95bb45ee0fb3bd9eb826bca3a051660790f60719c4029d1fda2d968abca675d7ccbc04eea99e2d47285d23637d4f71dd8655f85cac232959acd8594ec30ebafb3f55c79ec5cef0b9e7be8e9ab1466bf1338659b116612bd73eb89de830ca8d57b18731a9bf0138002931a621a9e623983a0079f1bcf30636625a99cec2eb081ea21ff932c09f6ec5d6bc1d0f88d64470c622b854c148070ad79b8a334065a8fd16f8efba11b999548bc622aa9ff8c6e786e905d49948a27ee4a7b4314afee499efce737fb34bae8194cbd8196e680c9fd9d72ab7085260c3648a69fd59c46131c138b6b80fb7abd93cbbe109fdff3d70a3994bc6e1d38e29fbd60826873870a94af6041cd7a50b151d41341734c4177ba0b3567248ec529feeddf03df136fefde901f1e8222d1325d89d0c9f3da733f774e7a68e222058a5e917c07e9e63b4a17e9f80af9d21a6e6842beeeff4553f87dd3b42e2da8e08645ee557aa97d502c558505dc537ef7bdc78f32ee7757205fa712a7e9520af4eae3ec547eda05e5ee6519a8abdfc4601ce8d0c3ce3d03af344ad9af14b48155861c2f84ddaf9bb5d3763226ef439e498760f0932e754e447fdf243fefb829939b33f50f45146c72c6adc172cfb1894154fd55d5cf6f238f75e60edc5113df9c5c230a4997fc7707b729424bb683ae4d817ce2d0a1df349249beaa753507e5e7f21d0a002b8046ff47343d708901e6f976d29473d8fbc551ef8466e3172fd2eb4ee1b344f02eddd2caf2f32858bc0ba29e1ccc636d7b2981a9f48a30e5e4c8e99185fc8e458a8add766b032457dab82c4b7846eb10f9bf98b11999971d6778c6ea8bcef3a68479211c54323295296882cc09b1b88f7fbfdec93cb6f7a11d7c50f460a1f8ddb8dfb59c2b6760928335de666fb6228b52d222be54c59e736e125afae96e64afff28b3622aa6539c71a38df402051930f1165ac90cdbce3856565cbd72eacf173b1d24c097533edbe0cca9962e4d5829e477a5f567b4608d9fe2eca77aa6f1c2fd20a57997e5a2085b09ccf9c8e5da412460bf131955c798ca041efafb358505a839c463b94da51650a07b2faf8034aa2a0db578b5c59aba1d8c0de8c14dd88788e90fefec6c9ede4ce9ba049a9f35dad6afa6d067659f99dde217d9e6c36b380ac23d9ebc80f6b1e15f867d5d430d2e257d62e7af00bf9374129acc09d9c8548380ca2d6179db6497b72918be9e0f67f3c5f1dc2889995623ee9281bae8b497a3efafbc5a5cd47ac3eeafad7d306aebb72c1e2ceaa6cf42b489c03df8ecbd0c728e1c39a84ccf98458881c23da85d63f552213135dfd58045512ad3e2577fc3ad4243af4e11b821b74d13244ca5d8476e5c7dcbd23f3d91e5d4b78d8283cc332fca660b0f10604052fffed5773d752fc5ad55ef5347fa568ab08fe8294cc28adcda34354640450a37148c7feb8f63fa54edb9a387f83c5e40e43baf25bfc549179dd4623928954b445ee10b3d971d48ab175ef5fec8beb1bee946de0fe4363152dd66d012b31b23472a6494bbb7644a6d9c0bfb4831b5fd97c852a4875e6f8e7425c497242089c1796e896d607cb2c41ad56f4e9444910b3682050bcc038e3d44c58fe3d051e15661c68cae4d1d5530c12498a3478b42b842ad7f35aa0c75f47694a28a2f0ffdaafbe1d43983e3fcb6cc0a4036d33f6936100b730d90314fe1dd176f76636874fee9c81e33849be7ff838b0b806546b3d59d074173c54582902623f9a83233d1c0c7c43b2743a40f1e055289bad0ae83ce53adfae844dced7458790f7f96a6e36bfa17a592ed427cb4a037a3411114799b6093d1ff69baa69f1878ad50f7c6d41d2be97a69fc7de9aac1bc933c169ab6342e30065bb22f591a685091f5dba0d119ba8ae30ec3ea265b9211f18025d94be627662560c941bc0d8431ffc548ee48069e12f70124bc089a9c299d7a5cbedaa74d87564bbb39043aad29c55bba3223def4f187a0aa01dd65ecea96f7486feabf39799f7371b9565ff2fec354233d3d2318c82add79b83b9b72d87c518befa271bd95adde124c3880369638a1b0aea401ed3a2431aca09842a6cef39800fcbe98ec7b4ad81c39338aee324866dc3ac076c34db4bfa32f303abc454fe44f027686498702331300b181ac228c31079f46c957d56f3790a13fe3c779aa455f6b2629bd24eb87ea6c052af6e3e7f253c93530e974b71ea4420115fc954380903458baf1e277fcedc8b0197428c7a34c77db09342c067e99275e1fc8bd40e43cd6f75bca4a720c5b86740235c74737c16be483fab4e610ef2d3c11fa3ed587be854c89ead9c11cc1ea051f38708cd7a3f20a1e062e9293e2d881af520c1fc32378e3e2c83bcf9685e1322f4253bba8aa649231ea9d0d5b2bd604c4fbfefa0b86d83bd4ec6a6cb13be846afc03770a17215b01cdf46030d5ac4105255a6e5cce641b9db84f345f0343adedd0836b2c3e9e2521f5e792a98f5716af4af87d590f21ef3022342825fcc1924a6cf5fcf7ff34cac71671ec186170fb77d8cec58607171d657d4cae20068e0821cfa36f00dadd36910f2db586f23d16c88b602634d38069ed3372ae77c6327d22839f53e76b461f5207e2d09baa1fce7b56bfde39851d0452fb62e154a5a869cb698d73dd78b2041f1736fdc604ed83a153ad908584c3a074516cbb34fca96cd5489a78fcc4e92a277736543be9aaa94c6dcccada3725a26394f0c8944c33bf3ea00e402fa64f5929d6cab4a9381ab3cc44134d4e082f64aba980ffed69de8e389f5fbc343facfdfd9e7e46c916e4383e2d95eb2cd604cbcfea43692be475fffbe7b1b019ffe0920aecc0b94f0f112a0cac89e2efa33d3a18b98fded9b514cd15cf372dbf9cd2f420bcb4e20fb1707b4977f4bb15b6f96be6a0714fcd3d25090ed14c48e080e1672c492f8fc8ea0012229ebeecff00a6b6b568b3cb374a9565c5abaff684087f87d6120ecea8aac93628f6d89da8d782ae73ea781601cba537d94d8f72fea3898999d042666a6ec9a696330421c9c42b24afe165ef7c7cd540331f921cc5c21816af0baceea5891ccabc9e9cc281f00a64c9459ea6230874bc308eea46ffa1a4d635a66568a226c215bbba841c93fd05c505ce7dfb7a619f5ae718c896c954c6779446e7e1fed03d9f9dec7ca8281c84658c9b2a9012d7b7363bc53653555bf6a6bc22d37ca7497c80f51cb9adf2518e1ece8ea9ca219d12342e21e8346d85fc5058b29a65918725610cd5bed7e62d209032f7638005be45eb775ceefec237020b39eb00a225798e3a2e694f9907449c8f1f7b8d8e931c97ede2b609db2b8d35d8bcacfb5d4a8e6134a0be1908f5b5f7bfba0a4a34bb7a3d13a31ee3d09ced9259b4f5d6807782c71d009813058a15b0ef06e67e726cf866fb7649a2050ca70acc23dd96fce1a9839ddb9335d6e0562c055a21aa14b4d8064f4e5bf2842dc80f5c6cbc263a4042c6f012f06d23cc1ca5f7d1a897ba1e5a908d7f392e5185460124dc3cbc440067e530be84b94e1b8cf53ad901021ceea84d02d82865697d0136bbecb2ff6679bd70f3a3f880009a7b0e5a4bbcfb67c8db08bb30f35ce95431aab7f5893352f24c40de88417f264c9cfa97f9d9b277cf60056df05c81e307831b1e2ea13e2c96e9f674190d381bc4c702d1e57d442c969b698a11e0196998e7e6a77be024cc8da436949a7c98e98e58b74e924c7bc5126f4b7703e7dbd895d8aa286c7efc49e63be5869ba7d9f987864988fa2635a3cd9c8bc5fe5ce0f3867b7ced382676476c6d0a998a25269115a36dc024d798ce37771f49398b89c9df6fedf21768e052bf8e1e2f4626e99b5bb0768346e4c227f5f57aa03d92635bc", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000a80)="218d80136b0836af825b06ab106421c38b0d5a8185040a17f1033a3a43675efb7a5fb72f9a174fae759777600018b59126efe69b1829e4f7fa23f513400a115ad9e8ae0b465b51fe0e659f6b0767384bdb491a727f750d8387b03049eeed1cba1580cffa34a6d04aa0f9bf8a7b9594140f45e1022394f608d67cb7dcef4b8e9eb76132c6e96db8e0bbb2706a53625aa5669afe854c672a1067f7aa900012ca21d5c37c0584cb2bfc205c668ed1fcffef1f82c276ce38aa6ac30899183640ad85b2d5bd6aa3f3de5e84822fa9c58b5a50954044afd4f93f0421e4b7c1a6d1034e35c98bbb00752848f7fc71f980c519", 0xef}, {&(0x7f0000002c80)="c91c14e39f77678fe1a2b792d7539babd128b384097fd718844ad2646966bea8fc37770628867af207c8e8ead3f0dd2446383bb861791c53c38fdc5e08a948fac4ab15593f928bf68d3d2bc27b5a96535ee7ca1efb20b9c583722ec985b23f83f086ffd94169526e78ed2ed32b7851599d255bca0aef3b5703ddd9ff0feaa59951fd7cbafd671bb3647d56aa8bfcafe7541c42ac9500b086615c97bf020a2c67ece5d51f3b4e24d65df0c3e7978aca2aa7e70a635a8eda37a12a2e9b3a4718d6195b0a4de95b75520d4879e4dec95d", 0xcf}, {&(0x7f0000000b80)="06a1b9", 0x3}, {&(0x7f0000000bc0)="36b86f0a8377ee696e5e89a48977ed02eca767c8d7232ad8a98d579e88d7e9ad59a0e56e8e54742a81fbfa7e33b2a5819ff8c0", 0x33}, {&(0x7f0000002d80)="3e7b2833d6928337f0cc2770451bec142d6368310d829441e68ee657cc39c8e02c8f5295d9ca703ae1b0ce0a166277b6684e19dad0f454fe6f1a33e5056a6334a12adcb80d83f3f54e925ec2ac77e5fab9edfd62c0f153b796122980f56eb8a740bf965c8e3589c4c5591a88515096b786acdb222965e2fbf37592474537fa8a4a5cc9eb15cc6873ff921465950b3cb2eb96826c4526a39023a59aa166a919dcf3da733241271d49b4c4426457fc3272d3e49d275c17e7e1", 0xb8}, {&(0x7f0000002e40)="90184b564fc7e7d04d02db98895534dc88de0df8ee0e3fc10e97fdaa90e36f0f2504fea93ad8202f57cb418545295e6d4009c16e3ebd295ef6f581afefcf943e5ab3b08f6318f02f06c6257a530e0b1070f4c05eaa3a00f1f66b81fd464089e45db1f3a09feaeace0b24ebe018c31638ace227895d20703f268e19ce911f9871", 0x80}, {&(0x7f0000003d00)="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", 0x1000}], 0x7}}, {{&(0x7f0000000c00)={0xa, 0x4e22, 0x7ff, @remote, 0x696b}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000002f40)="cb044f9770d83306bef9e6c52fa31bb14324646b41d97a9bbb66005ff70d7ac0850a0c4d28beea1f95a63189158f064f00930c14b48006ff909e74af05dad43ea437e34bfe5ce89f72a8f255b3fab8d30553ca497104368c4ec157be3e5600709e8fa2d4db36539c7b6dfdb1c4c61a7d1b11d8978201ca2b45e634d8d2a3219d3657a1659c2620afe3cd52604659983e0e8ca4ff3bfeb63b501e14a923114745b232774bacf45288", 0xa8}, {&(0x7f0000003000)="f95aa8688146a57ece288fc2623cae79ae8251165c3beb9d24a22b317eb8790a8bc53f9ab2e651bbfdd26af2c818b7cf42cc23ae6921294a0d2ecb585c24f88704babd40e9ccbd406882ccc3a67cfb60def158b792a01a6b7abc63f31dd8a30333ea61da8d201a695de54930d9fa0386309ab22a16e962b2901c8f51071fda7c080066bf4c3bbbc775daff719d302f446ab2869a479be3e3cfeeebc8eed005a0fbc2337decd7585135db74ed6ff7da925a16e6f6301ecbc8ed77f5f7187dfbc7e343091d4499c43054a10f42f53fda1ab68aedef5f81bd6c738e0ae309e14b69325de9fc6c95", 0xe6}, {&(0x7f0000003100)="7287cec02926f9b8a24c8b99faf80d4a376c1816abd316d57b00deb1ff4831a1869dbfb8a0eac522b32b2c956d8bb6f7dce54c134f430f2b6f56bd5f9316f3283ad1cb56977bf4998375e463e83006c07d28bf5e4daabd5f7de2f3eb1f0af3b91711eb0f83b45e7e38aeb24fbd247229af9c12b346", 0x75}, {&(0x7f0000003180)="931c7605b24d906a1bcd9d848045f11bc5710cde251207c9e7503a0563b5a932634c10971b7b018a9597bfa738e21245d22dffd60f3cf0c37e1d67d50b52b757aabc", 0x42}, {&(0x7f0000003200)="392de0d5a424b20754af97d9abdb49f026efc10e0f7bac68de9fc1fe3197395583370ac7f190b27f7d5abef1becaa24fa61259128c2fd89c71643045903df0f38ed121f3940a74a755fb6f0d3227a1a479ca4e", 0x53}, {&(0x7f0000003280)}, {&(0x7f00000032c0)="7cacb25a1f91edc5427f4e6ef966d80392542b7c717c41a11c0cd7", 0x1b}, {&(0x7f0000003300)="269d9c8ae8cea948a7462239f8a71192fa831ce1ce91f3f4b7347c904f5b80ae24eadb3af31bb3f2ef8d2f41bf34640f7c6153e070c428a61e97", 0x3a}, {&(0x7f0000003340)="699a341469aeb927a02ff8f53bf29bb971fe4e62bf1e2493a979b2f14f7233954d4c56fe8ad0b65a6024f32fe010d933d91853bc32f8755512b532c066883056eef3e3a0c0e7cd031316cb9450a5738f41c3e4d16c30a8b0614ee9cabeb4e943c8c1fd560a889af9b339fb635984d40b3ee875afef0e3a732948819c0714549918f8b08dfc855a24b00a055e161bec58832a6007e1db16b6e0d7d8d3d65dc00cbc83da794851bea28b1efef9f5ae", 0xae}], 0x9, &(0x7f0000004d00)=ANY=[@ANYBLOB="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"], 0x2d8}}], 0x5, 0x60040000) (async) recvmmsg(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/104, 0x68}, 0xffffff7f}], 0x1, 0x40002142, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000005000000802c0001801400030000000000000000000000ffff0000000014000400fe8000000000000000000000000000aa3c0003800c00028005000100000000002c00018014000300fe80000000000000000000000000001c14000400fe8800000000000000000000000000013c0002800c00028000ff01000000000000000000000000000114000400fe88000000000000000000000000010100"/188], 0xbc}}, 0x0) 1.560178012s ago: executing program 0 (id=3813): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000004f0000000000000000000000000000000000000000000000000000000000000000000000000700000000feffffff000000"]}, 0x108) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007910a800000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=@newpolicy={0x280, 0x13, 0x100, 0x70bd29, 0x25dfdbfd, {{@in6=@local, @in6=@remote, 0x4e21, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x84, r2, r5}, {0xe1, 0x4, 0x3, 0xfffffffffffffffd, 0x9, 0x80, 0x4}, {0x4, 0x8000000000000000, 0x2, 0x4395}, 0x2, 0x6e6bbb, 0x0, 0x1, 0x3, 0x2}, [@sec_ctx={0x98, 0x8, {0x94, 0x8, 0x1, 0x6, 0x8c, "ba73e223f890f91d6b08dbe8cf8eb8ed30dfddf43c4758030cd7753c2885b582950ebc6cd56dfd999e8980308ab7ef2739be1b78d3c4acdd6d2a4cea52bdbb89f2c8a4dc2ec55be8152457822bd070a1bd8de17ac8320edda4734d7ca248a65d70776bf302efda93842b8de27dff00d0968483ab1862227879fe09f256d5c45f0e1831fd0b100813d84557ed"}}, @migrate={0xe8, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x2b, 0x3, 0x0, 0x3503, 0xa, 0xa}, {@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@broadcast, 0xff, 0x3, 0x0, 0x3505, 0xa, 0xa}, {@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@private1, 0x3c, 0x4, 0x0, 0x3502, 0xa, 0x8}]}, @tfcpad={0x8, 0x16, 0x2}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010102}]}, 0x280}, 0x1, 0x0, 0x0, 0x40400d4}, 0x80) 1.529993013s ago: executing program 4 (id=3814): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112100000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.513281626s ago: executing program 1 (id=3815): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x20, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xe, 0xd}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004831}, 0x40) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x48, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x0, [0x8]}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], ':('}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) 1.431470841s ago: executing program 0 (id=3816): syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710446000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.428085179s ago: executing program 4 (id=3817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e5000000000000000018010000202070250000000067a500007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x88, 0x0, &(0x7f00000005c0)="2cc27ab7848ce45562bf7e02837b3aea7be3e82752dc5cd7e4c70795ff40c081ac4994cb90d300bd9eb8c70bc6dff61a565ed88658be6024b18835b0090d0efe087099feb0650effb07dfe50560a9d76bef147c1993b9ac7001549f5b3c6507f09347fe5c83ff0a8f06bb98aeb06a6fdb91c1854cdf5dab91ba007532b5b91c7af96317e8e348d42", 0x0, 0x5, 0x0, 0x9}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)=ANY=[], 0x1000f) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="7f69be", 0x3}], 0x1, 0x7) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x790dfc64, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="b90f", 0x2}], 0x1}}], 0x1, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000240900000600ffff5c03000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES8=r6, @ANYRES8=0x0, @ANYRES16=r4], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r9}, 0xc) 1.304179662s ago: executing program 0 (id=3819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb080002"], 0x78}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000100)={0x0, 0x0, 0x2}) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close(r1) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000200)) 1.303213153s ago: executing program 1 (id=3820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newsa={0xfc, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001}, {@in=@remote, 0x10, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, {0x323, 0xfffffffffffffffe}, {0x7fffffff}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xae}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9}) write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) socket$kcm(0x2, 0x3, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000061127800000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) close(r0) 1.239621005s ago: executing program 1 (id=3822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000140)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000180)=0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000000b0a010800000000000000000300000206000d40a42a00000900010073797a30000000001c000000120a0103000000000000000000000006080003400000000814000000030a030000000000000000000000000a40000000020a01020000000000000000030000040900010073797a30000000000900010073797a30000000000900010073797a30000000000400060004000600140000000e0a0103000000000000001b00000009140000001100010000000000000000000700000a"], 0xd4}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES8=r3], &(0x7f0000000080)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0x4, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200000100000085000000860000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x2, 0x5, 0x84) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x8, 0xfffffff3, 0x800, 0x3060, r10, 0x9, '\x00', r5, r12, 0x2, 0x3, 0x5}, 0x50) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x59}]}}]}, 0x3c}}, 0x0) 1.026560376s ago: executing program 2 (id=3827): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f0000000380), 0x8, 0x19, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) close(0x3) 955.639163ms ago: executing program 3 (id=3828): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14, 0xc00) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xfc, 0x1, 0x20, @local, @loopback, 0x7, 0x8, 0x3ff, 0x8}}) bind$packet(r0, &(0x7f0000000480)={0x11, 0x6, r1, 0x1, 0xfb, 0x6, @broadcast}, 0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x8, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r6}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r7, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000047c0)=r10, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000011040)=@newtaction={0x60, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0xffffffffffffffff, 0x3ff, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x48010) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) 883.719448ms ago: executing program 3 (id=3829): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x33ae, 0x1, {{0x13, 0x4, 0x3, 0x5, 0x4c, 0x64, 0x0, 0x13, 0x4, 0x0, @private=0xa010102, @loopback, {[@timestamp={0x44, 0x2c, 0xfe, 0x0, 0x8, [0x0, 0x1d, 0x7, 0x3, 0x1, 0x400, 0x5b, 0x9, 0x1, 0xffffffff]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x6, 0x3}]}}}}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0x8, 0x80000000}]}]}, {0x0, [0x70c7bacb740c03ef, 0x61]}}, &(0x7f00000001c0)=""/171, 0x38, 0xab, 0x1, 0x80000000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) 833.248373ms ago: executing program 3 (id=3830): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x4, [@fwd={0x7}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x1}, @fwd={0x3}, @const={0x2, 0x0, 0x0, 0xa, 0x4}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x2}, @datasec={0xc, 0x3, 0x0, 0xf, 0x1, [{0x4, 0x8ba6, 0x4b21d74}, {0x1, 0x8, 0x485}, {0x3, 0x7fff, 0x6000000}], "be"}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {0xe, 0x2}, {0xdd6, 0x2}, {0x10, 0x2}, {0xd, 0x3}, {0xa, 0x4}, {0x7, 0x5}, {0x5, 0x1}]}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000340)=""/235, 0xe8, 0xeb, 0x1, 0x3}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0x2, 0x5, 0x3, 0x401, 0x80000001}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7722}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 727.73321ms ago: executing program 3 (id=3831): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x1, 0x2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000026d51015b40afdc10d000000"], 0x10}, 0x4008060) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYRESDEC, @ANYRES8], 0x48) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff1, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x2004c884) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf2508000000200001801400020076657468305f6d61637674617000000008000100", @ANYRES32=r15, @ANYBLOB='SaP'], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) 493.311709ms ago: executing program 4 (id=3832): r0 = socket$inet6_sctp(0xa, 0x2, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x686, @mcast2, 0x2}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e24, 0x6, @local, 0x4}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x3, @mcast2, 0x3ff}}, 0x0, 0x0, 0x40, 0x0, "f6ae3c63bdd8577a658372513bc2711140e628b27291e206b3c17487b10bcf86c6ebe8a3297a0bedbd50b3c3ba9b29e078cb8dcc2e14fb34c9664320ab00d139cc99f0568b797311531b62edcef3ec02"}, 0xd8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000600)={{&(0x7f00000002c0)=[{0x7, 0x6, 0x7, {0x100000001, 0x7fffffffffffffff}, 0x70f0e762, 0x80, 0x5}, {0x0, 0x4, 0x80, {0x7, 0x400}, 0x6, 0x9, 0x4}, {0x7, 0xfffffffffffffffb, 0x1, {0x1, 0x7}, 0x5, 0x4, 0x4}, {0x1, 0x9, 0x2, {0xe, 0xd}, 0x0, 0xbb97, 0x9}, {0x3, 0x3, 0x0, {0x27e, 0x3}, 0x1, 0x5d, 0x1}, {0xfffffffffffff4fc, 0x2, 0x8000, {0x7f7, 0x8}, 0x1f, 0x9, 0x7}], 0x6, 0x40, 0x100, 0x8}, {&(0x7f0000000440)=[{0x7192, 0x7}, {0x879, 0x1}, {0xfffffffffffff8f8, 0x100000000}, {0x3, 0x3}, {0x4, 0x39e7}], 0x5, 0x10, 0xf64b, 0x2cc}, {&(0x7f00000004c0)=[0xfffffffffffff67e, 0x1, 0x8, 0x4, 0x1, 0x100000000], 0x6, 0x8, 0x8, 0x3}, {&(0x7f0000000500)=[{0x3, 0xfffffffffffffffa, 0xfffffffffffffff1, 0x4, 0x4}, {0x3, 0xb, 0x2, 0x8, 0x7f}], 0x2, 0x28, 0x80, 0x76}, {&(0x7f0000000580)=[0x2, 0x6, 0x4, 0x3, 0x1000, 0x8, 0x0, 0x1, 0x4, 0xe], 0xa, 0x8, 0x5, 0xffffffffffffff00}}) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000680)=""/234, 0xea, 0x100, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000840)={r2, 0xbc, &(0x7f0000000780)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x8}, @in6={0xa, 0x4e21, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa961}, @in6={0xa, 0x4e21, 0x0, @local, 0x6}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, @in6={0xa, 0x4e22, 0x9, @remote, 0x1}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000880)=0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000ac0)={@rand_addr, @dev, 0x0}, &(0x7f0000000b00)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x7f, 0x4, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x700, 0x6, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wg0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f00000008c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000900)="71086946152dc7af4f141bfdf2ff4cf56d94ffc896d712a4ccabe4f5b7d8857cf24f2fc14cf92b60631a223be76c6f603f4c9a62d7cef4d7f101a53a4810cba1a6fdf6f839c5bd204cb17a1695e8be95b9334d58a7870b9dfc6f6e1a6fb5c5a8950912fd3299927408faece58f96c87ae7baa1d3ab7e92f4a1a9b1d9875d1d044bcda5a6803d0ce2bf256df053dcffdfd8fa38f62349c95820586784", 0x9c}, {&(0x7f00000009c0)="1bee95f2529de40dc07937fd2e195d17902ca3781460f0768bae6d", 0x1b}, {&(0x7f0000000a00)="5afaf49c25ab7002fccdfbe1f6390d02c0d4a4f157d5a6b6f4522382d44ff9feddef451d5124da3a1d2985b5f0a02ddd52a8f78496aaf050cfc26051f3722c0059af89cccc4632f63656c6a3e4", 0x4d}], 0x3, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @remote}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xaf, [@multicast2, @local, @remote, @multicast1, @loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}}], 0xc0}}], 0x1, 0x44081) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000012c0)={{r0, &(0x7f0000000d40)='^\']*\x00', 0x4000, &(0x7f0000000d80)={@_ha_fsid={[0x4, 0x76a]}, {0xffff, 0x8, 0x6, 0x3}}, 0x80000000, &(0x7f0000000dc0), &(0x7f0000000e00)=0x2}, 0x5, &(0x7f0000001200)=[{0x2, 0x7fff, &(0x7f0000000e40)=',%\x00', &(0x7f0000000e80)="0b377de158d8bdb2caee6011037854458f3ffe18f39aced473f714ef698d08cf4c70cb39937eff9fde7d82ac14f4a7faf311b6e808adbf06a02a8bf29b064ed293de98bb62dbe7508b7e4642d507eb79f3fb12f3877b974520387de383c10ea47ec24612bed8ed53076880897d2876295aa776aa5edaa2e66deb91cfc1f68a064dadd468ef734c2e51999a8e51d7bafa523aa0778f1c30", 0x97}, {0x3, 0x6, &(0x7f0000000f40)=',/\x00', &(0x7f0000000f80)="8f92bc2920d6a465b35cf72abd31cc414156e90c53cbe1d07630c2d936a475f82f90e5", 0x23, 0x8}, {0x1, 0x7, &(0x7f0000000fc0)='syztnl1\x00', &(0x7f0000001000)="6276ec04206f00d7a1b570", 0xb, 0x10}, {0x0, 0xb, &(0x7f0000001040)='wg0\x00', &(0x7f0000001080)="b935763e9b5a6b89705485d916", 0xd, 0x18}, {0x3, 0xc95, &(0x7f00000010c0)='wg0\x00', &(0x7f0000001100)="6a118bbd1b48cb52c5ecea9c1d53ce545f3faba7733c8512b483d8fa9d74d10def777f28a84234ee87f1e80737c4d62646cf1fa33ac61f5e6a74681f7dac99a009e31497cb2eb28df551801157d5d19a5e093beeec7468d38f6a3546d440a2fcd6de1b451ce0c6c470c65f47fd43aceb214f3898d9b63a44c07090a363d7f454f12d0acdace954074da8ae23a724169e877a0dc5ec9a0f6369ee2a0472dd4520363f2e5fc362d1381e7fab96e91bdedbd296f73513bab13d59b6a5187ecc6f46a004be3890966ba06d4ffe8ef0c973381f37eb4df48c3b6c43c8bfe98c6f517491980c162a1737761765dded84f20d1ce01a", 0xf2, 0x8}]}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001340)=0xffffffffffffffff, 0x4) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000001380)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000013c0)={0x4, 0x7, 0x7, 0xee, 0x2}, 0x14) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r8) sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r10, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x55}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xb9adeca556afedee}, 0x4000004) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000001540)=0x1, 0x4) setsockopt(r0, 0x4, 0x1, &(0x7f0000001580)="c1e759673bd053ca46294c2195b57a7621f7a0bf6d0ce3738a992031e54aa4227e2d3f38f14cf2a3e63f9e5e9bf1de58c20f77", 0x33) recvmmsg(r8, &(0x7f00000051c0)=[{{&(0x7f00000015c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001640)=""/223, 0xdf}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/43, 0x2b}, {&(0x7f0000001800)=""/164, 0xa4}, {&(0x7f00000018c0)=""/151, 0x97}, {&(0x7f0000001980)=""/141, 0x8d}, {&(0x7f0000001a40)=""/92, 0x5c}], 0x7, &(0x7f0000001b40)=""/69, 0x45}, 0x1000}, {{&(0x7f0000001bc0)=@generic, 0x80, &(0x7f0000002180)=[{&(0x7f0000001c40)=""/211, 0xd3}, {&(0x7f0000001d40)=""/145, 0x91}, {&(0x7f0000001e00)=""/147, 0x93}, {&(0x7f0000001ec0)=""/72, 0x48}, {&(0x7f0000001f40)=""/72, 0x48}, {&(0x7f0000001fc0)=""/231, 0xe7}, {&(0x7f00000020c0)=""/179, 0xb3}], 0x7, &(0x7f0000002200)=""/123, 0x7b}, 0x2}, {{&(0x7f0000002280), 0x80, &(0x7f0000002400)=[{&(0x7f0000002300)=""/161, 0xa1}, {&(0x7f00000023c0)=""/50, 0x32}], 0x2, &(0x7f0000002440)=""/71, 0x47}, 0x9ea5}, {{&(0x7f00000024c0), 0x80, &(0x7f00000036c0)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/242, 0xf2}, {&(0x7f0000003640)=""/108, 0x6c}], 0x3, &(0x7f0000003700)=""/241, 0xf1}, 0x6}, {{&(0x7f0000003800)=@rc, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)}, {&(0x7f00000038c0)=""/189, 0xbd}], 0x2, &(0x7f00000039c0)=""/78, 0x4e}, 0x1}, {{&(0x7f0000003a40)=@isdn, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000004b00)=""/170, 0xaa}, 0x6}, {{&(0x7f0000004bc0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004c40)=""/193, 0xc1}, {&(0x7f0000004d40)=""/54, 0x36}, {&(0x7f0000004d80)=""/176, 0xb0}, {&(0x7f0000004e40)=""/239, 0xef}, {&(0x7f0000004f40)=""/199, 0xc7}], 0x5, &(0x7f00000050c0)=""/226, 0xe2}}], 0x7, 0x10000, &(0x7f0000005380)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000053c0)) connect$inet6(r8, &(0x7f0000005440)={0xa, 0x4e24, 0x0, @private1}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000005500)={'syztnl2\x00', &(0x7f0000005480)={'ip6_vti0\x00', r5, 0x2f, 0x9, 0x80, 0x1, 0x10, @remote, @private1, 0x80, 0x8000, 0x1, 0x2}}) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000005600)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000055c0)={&(0x7f0000005580)={0x2c, r10, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xb, 0x2}, {0x9, 0x4}, {0x0, 0x1}, {0x5, 0x2}, {0x30, 0x1}], "80c7fef26e6fd471"}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc484}, 0x40) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000005640)=0x52c, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000005680)={0x1b, 0x0, 0x0, 0x7, 0x0, r8, 0x5, '\x00', r5, r8, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000005900)={0x1d, 0x9, &(0x7f0000005700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x7, 0x1, 0x0, r8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r12}]}, &(0x7f0000005780)='syzkaller\x00', 0x49, 0x57, &(0x7f00000057c0)=""/87, 0x100, 0x50, '\x00', r5, @lsm=0x2b, r9, 0x8, &(0x7f0000005840)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000005880)={0x4, 0x4, 0x4, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000058c0)=[{0x0, 0x1, 0xc, 0xc}], 0x10, 0xe}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000059c0)={@local, r11}, 0x14) 393.070543ms ago: executing program 0 (id=3833): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x8, 0x1014}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) 35.95047ms ago: executing program 3 (id=3834): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000002c0)=0x5, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r5) 26.801159ms ago: executing program 1 (id=3835): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0xb, 0x4, 0xe76, 0x10, @private2, @private0, 0x80, 0x40, 0x6, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000440)={0xb4, r2, 0x2, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0xb4}}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) unshare(0x22020400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r4, 0x0, 0x49) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r0, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180000000000000004000000", @ANYRES32, @ANYBLOB="071582ecc28a5efd692b667c8128ba06745bcdd974930d6a5043e5677861f09470efae5c9d27bf0365a6a8a2355f64562539cdfd3e0a6be76d428d806ed62a0d50b30ef0884c5c6b201dc35371f0d5ce3da91af2d70a36f6bbe7889e0e06348ec9b4e97a0cea6bbd", @ANYRES64=0x0], 0x20) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x810) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@private=0xa010100, @in6=@mcast1, 0x4e22, 0x0, 0x4e24, 0xc, 0xa, 0x20, 0x80, 0xc, 0x0, r7}, {0x2, 0x5, 0x0, 0x2, 0x5, 0x1, 0xb5, 0xb7}, {0xffffffffffffffff, 0x80, 0x7fffffffffffffff, 0x9}, 0x76, 0x6e6bb8, 0x0, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x2, 0x2, 0x0, 0x3, 0x7, 0x8}}, 0xe8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 20.140893ms ago: executing program 4 (id=3836): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) (async) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 19.298581ms ago: executing program 0 (id=3837): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000000180), 0x0, 0x800) recvfrom$inet6(r0, &(0x7f0000000080)=""/52, 0x34, 0x2, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x1800}]}}]}, 0x40}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x20000, 0x4, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x68, 0x0, 0x3, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x9}, {@loopback, 0x9}, {@multicast1, 0x2}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000900)={0x328, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x4, 0x6, 0x4}, {0x2c0, 0x3, 0x37, 0x9}, {0x1, 0x5, 0x8, 0x1ff}, {0x9a59, 0x7, 0xc8, 0x7}, {0x4, 0x1, 0x6, 0x3}, {0x9, 0x5, 0x9, 0x1}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x8, 0x3, 0x9}, {0x8000, 0x0, 0xfb, 0x9}, {0xd4, 0x4e, 0x70, 0xf210}, {0x79, 0x9, 0x9, 0x3ff}, {0x6, 0x1, 0x7, 0x50aa}, {0x11ca, 0x9, 0x8, 0x2}, {0x77e, 0x5, 0x8, 0xffffc2ac}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x328}, 0x1, 0x0, 0x0, 0x20004085}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000914) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x0) 6.857877ms ago: executing program 3 (id=3838): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007002e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 0s ago: executing program 4 (id=3839): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x7, 0xa, 0xd81, 0x0, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x8, 0x5, 0x6cdf13a3, 0x7, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x10000, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x83, 0xfff78000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x9, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffff6, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x8, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff8, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0x9, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff803, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x45c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1681}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000040}, 0x40000) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="e0", 0x1}], 0x1}}], 0x1, 0xc8844) kernel console output (not intermixed with test programs): attributes in process `syz.3.2682'. [ 353.654640][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 353.690741][T16427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2679'. [ 353.751332][T16437] netlink: 'syz.1.2679': attribute type 2 has an invalid length. [ 354.015549][T16458] netlink: 'syz.2.2688': attribute type 2 has an invalid length. [ 354.080913][T16461] wlan1 speed is unknown, defaulting to 1000 [ 354.230952][T16463] netlink: 'syz.3.2690': attribute type 11 has an invalid length. [ 354.259179][T16463] netlink: 'syz.3.2690': attribute type 4 has an invalid length. [ 354.277695][T16463] netlink: 199780 bytes leftover after parsing attributes in process `syz.3.2690'. [ 354.641801][T16488] vlan2: entered promiscuous mode [ 354.650486][T16488] veth0: entered promiscuous mode [ 354.733192][T16485] wlan1 speed is unknown, defaulting to 1000 [ 354.844590][T16491] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 354.881330][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 354.910145][T16490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2696'. [ 354.920093][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 355.084229][T16494] netlink: 'syz.2.2694': attribute type 2 has an invalid length. [ 355.100039][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2694'. [ 355.260822][T16499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2699'. [ 355.282050][T16500] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2698'. [ 355.623511][T16515] wlan1 speed is unknown, defaulting to 1000 [ 355.931413][T16529] tipc: New replicast peer: 255.255.255.255 [ 355.938372][T16529] tipc: Enabled bearer , priority 10 [ 356.239275][T16541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.397698][T16543] wlan1 speed is unknown, defaulting to 1000 [ 356.418659][T16552] netlink: 'syz.2.2712': attribute type 142 has an invalid length. [ 356.455521][T16539] batman_adv: batadv0: Adding interface: ipvlan3 [ 356.462086][T16539] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.487977][T16539] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 356.510248][T16553] netlink: 'syz.4.2714': attribute type 12 has an invalid length. [ 356.711108][T16561] batadv_slave_1: entered promiscuous mode [ 356.741415][T16560] batadv_slave_1: left promiscuous mode [ 357.480562][T16601] tipc: Resetting bearer [ 357.535164][T16601] macsec2: entered promiscuous mode [ 357.644516][T16599] tipc: Resetting bearer [ 357.740151][T10859] tipc: Resetting bearer [ 358.069926][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 358.078131][ C0] lec:lec_tx_timeout: lec0 [ 358.083023][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 358.203846][T16643] wg1: entered promiscuous mode [ 358.229526][T16643] wg1: entered allmulticast mode [ 358.343885][T16649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.395010][T16651] __nla_validate_parse: 13 callbacks suppressed [ 358.395032][T16651] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2742'. [ 358.423029][T16651] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2742'. [ 358.691120][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2748'. [ 358.730681][T16664] wlan1 speed is unknown, defaulting to 1000 [ 358.822945][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2750'. [ 358.915660][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2749'. [ 358.927703][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2751'. [ 358.956880][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2749'. [ 359.269304][T16688] pim6reg: entered allmulticast mode [ 359.284007][T16696] pim6reg: left allmulticast mode [ 359.425105][T16695] wlan1 speed is unknown, defaulting to 1000 [ 359.517577][T16712] FAULT_INJECTION: forcing a failure. [ 359.517577][T16712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.568185][T16712] CPU: 0 UID: 0 PID: 16712 Comm: syz.0.2755 Not tainted syzkaller #0 PREEMPT(full) [ 359.568225][T16712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.568245][T16712] Call Trace: [ 359.568254][T16712] [ 359.568264][T16712] dump_stack_lvl+0xe8/0x150 [ 359.568393][T16712] should_fail_ex+0x412/0x560 [ 359.568537][T16712] _copy_from_user+0x2d/0xb0 [ 359.568598][T16712] __sys_bpf+0x229/0x950 [ 359.568657][T16712] ? __pfx___sys_bpf+0x10/0x10 [ 359.568708][T16712] ? ksys_write+0x242/0x270 [ 359.568758][T16712] ? __pfx_ksys_write+0x10/0x10 [ 359.568790][T16712] __x64_sys_bpf+0x7c/0x90 [ 359.568821][T16712] do_syscall_64+0x14d/0xf80 [ 359.568926][T16712] ? trace_irq_disable+0x3b/0x150 [ 359.568968][T16712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.569009][T16712] ? clear_bhb_loop+0x40/0x90 [ 359.569036][T16712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.569063][T16712] RIP: 0033:0x7f397d39c799 [ 359.569084][T16712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.569103][T16712] RSP: 002b:00007f397e1a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.569126][T16712] RAX: ffffffffffffffda RBX: 00007f397d616090 RCX: 00007f397d39c799 [ 359.569141][T16712] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 359.569156][T16712] RBP: 00007f397e1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 359.569169][T16712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.569182][T16712] R13: 00007f397d616128 R14: 00007f397d616090 R15: 00007ffcbdfa1948 [ 359.569216][T16712] [ 360.112459][T16727] syzkaller0: entered promiscuous mode [ 360.118002][T16727] syzkaller0: entered allmulticast mode [ 360.183398][T16738] xt_bpf: check failed: parse error [ 360.252507][T16738] lo speed is unknown, defaulting to 1000 [ 360.324437][T16748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2764'. [ 360.370616][T16738] lo speed is unknown, defaulting to 1000 [ 360.378422][T16738] lo speed is unknown, defaulting to 1000 [ 360.461834][T16738] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 360.522693][T16757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2767'. [ 360.542267][T16738] lo speed is unknown, defaulting to 1000 [ 360.581558][T16738] lo speed is unknown, defaulting to 1000 [ 360.607778][T16738] lo speed is unknown, defaulting to 1000 [ 360.736204][T16762] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 360.748715][T16767] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2770'. [ 360.758712][T16767] openvswitch: netlink: Flow actions attr not present in new flow. [ 360.787868][T16768] netlink: 'syz.1.2769': attribute type 4 has an invalid length. [ 360.796539][T16762] bond13 (unregistering): Released all slaves [ 360.844238][T16769] netlink: 'syz.1.2769': attribute type 4 has an invalid length. [ 360.924107][T16738] lo speed is unknown, defaulting to 1000 [ 360.932246][T16738] lo speed is unknown, defaulting to 1000 [ 360.952667][T16773] FAULT_INJECTION: forcing a failure. [ 360.952667][T16773] name failslab, interval 1, probability 0, space 0, times 0 [ 360.993370][T16773] CPU: 1 UID: 0 PID: 16773 Comm: syz.3.2771 Not tainted syzkaller #0 PREEMPT(full) [ 360.993402][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.993416][T16773] Call Trace: [ 360.993425][T16773] [ 360.993434][T16773] dump_stack_lvl+0xe8/0x150 [ 360.993473][T16773] should_fail_ex+0x412/0x560 [ 360.993508][T16773] should_failslab+0xa8/0x100 [ 360.993582][T16773] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 360.993608][T16773] ? __get_vm_area_node+0x13f/0x300 [ 360.993645][T16773] __get_vm_area_node+0x13f/0x300 [ 360.993664][T16773] ? unwind_next_frame+0xa5/0x23c0 [ 360.993716][T16773] __vmalloc_node_range_noprof+0x372/0x1730 [ 360.993740][T16773] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 360.993781][T16773] ? __lock_acquire+0x6b5/0x2cf0 [ 360.993840][T16773] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.993865][T16773] ? aa_file_perm+0x192/0x15e0 [ 360.993985][T16773] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 360.994004][T16773] __vmalloc_noprof+0xd2/0x120 [ 360.994027][T16773] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 360.994052][T16773] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 360.994078][T16773] bpf_prog_alloc+0x3c/0x1a0 [ 360.994102][T16773] bpf_prog_load+0x7ba/0x1ae0 [ 360.994140][T16773] ? __pfx_bpf_prog_load+0x10/0x10 [ 360.994185][T16773] ? bpf_lsm_bpf+0x9/0x20 [ 360.994222][T16773] ? security_bpf+0x7e/0x2d0 [ 360.994282][T16773] __sys_bpf+0x618/0x950 [ 360.994317][T16773] ? __pfx___sys_bpf+0x10/0x10 [ 360.994367][T16773] ? ksys_write+0x242/0x270 [ 360.994393][T16773] ? __pfx_ksys_write+0x10/0x10 [ 360.994426][T16773] __x64_sys_bpf+0x7c/0x90 [ 360.994456][T16773] do_syscall_64+0x14d/0xf80 [ 360.994487][T16773] ? trace_irq_disable+0x3b/0x150 [ 360.994518][T16773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.994547][T16773] ? clear_bhb_loop+0x40/0x90 [ 360.994574][T16773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.994595][T16773] RIP: 0033:0x7f6dca99c799 [ 360.994616][T16773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.994635][T16773] RSP: 002b:00007f6dcb82f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.994658][T16773] RAX: ffffffffffffffda RBX: 00007f6dcac16090 RCX: 00007f6dca99c799 [ 360.994674][T16773] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 360.994689][T16773] RBP: 00007f6dcb82f090 R08: 0000000000000000 R09: 0000000000000000 [ 360.994702][T16773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.994715][T16773] R13: 00007f6dcac16128 R14: 00007f6dcac16090 R15: 00007fff63c44988 [ 360.994750][T16773] [ 360.994833][T16773] syz.3.2771: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 361.072387][T16762] tipc: Resetting bearer [ 361.088971][T16773] ,cpuset=/,mems_allowed=0-1 [ 361.291173][T16773] CPU: 1 UID: 0 PID: 16773 Comm: syz.3.2771 Not tainted syzkaller #0 PREEMPT(full) [ 361.291205][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 361.291219][T16773] Call Trace: [ 361.291228][T16773] [ 361.291237][T16773] dump_stack_lvl+0xe8/0x150 [ 361.291275][T16773] warn_alloc+0x249/0x340 [ 361.291308][T16773] ? __pfx_warn_alloc+0x10/0x10 [ 361.291335][T16773] ? __get_vm_area_node+0x13f/0x300 [ 361.291363][T16773] ? __get_vm_area_node+0x2b5/0x300 [ 361.291382][T16773] ? unwind_next_frame+0xa5/0x23c0 [ 361.291422][T16773] __vmalloc_node_range_noprof+0x397/0x1730 [ 361.291463][T16773] ? __lock_acquire+0x6b5/0x2cf0 [ 361.291508][T16773] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 361.291541][T16773] ? aa_file_perm+0x192/0x15e0 [ 361.291585][T16773] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 361.291605][T16773] __vmalloc_noprof+0xd2/0x120 [ 361.291628][T16773] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 361.291652][T16773] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 361.291678][T16773] bpf_prog_alloc+0x3c/0x1a0 [ 361.291701][T16773] bpf_prog_load+0x7ba/0x1ae0 [ 361.291739][T16773] ? __pfx_bpf_prog_load+0x10/0x10 [ 361.291784][T16773] ? bpf_lsm_bpf+0x9/0x20 [ 361.291811][T16773] ? security_bpf+0x7e/0x2d0 [ 361.291839][T16773] __sys_bpf+0x618/0x950 [ 361.291874][T16773] ? __pfx___sys_bpf+0x10/0x10 [ 361.291924][T16773] ? ksys_write+0x242/0x270 [ 361.291950][T16773] ? __pfx_ksys_write+0x10/0x10 [ 361.291982][T16773] __x64_sys_bpf+0x7c/0x90 [ 361.292011][T16773] do_syscall_64+0x14d/0xf80 [ 361.292043][T16773] ? trace_irq_disable+0x3b/0x150 [ 361.292074][T16773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.292095][T16773] ? clear_bhb_loop+0x40/0x90 [ 361.292121][T16773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.292142][T16773] RIP: 0033:0x7f6dca99c799 [ 361.292163][T16773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.292182][T16773] RSP: 002b:00007f6dcb82f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.292205][T16773] RAX: ffffffffffffffda RBX: 00007f6dcac16090 RCX: 00007f6dca99c799 [ 361.292222][T16773] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 361.292236][T16773] RBP: 00007f6dcb82f090 R08: 0000000000000000 R09: 0000000000000000 [ 361.292249][T16773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.292262][T16773] R13: 00007f6dcac16128 R14: 00007f6dcac16090 R15: 00007fff63c44988 [ 361.292296][T16773] [ 361.292317][T16773] Mem-Info: [ 361.560076][T16773] active_anon:6020 inactive_anon:0 isolated_anon:0 [ 361.560076][T16773] active_file:3407 inactive_file:40045 isolated_file:0 [ 361.560076][T16773] unevictable:768 dirty:125 writeback:0 [ 361.560076][T16773] slab_reclaimable:12469 slab_unreclaimable:107990 [ 361.560076][T16773] mapped:31752 shmem:1364 pagetables:3492 [ 361.560076][T16773] sec_pagetables:0 bounce:0 [ 361.560076][T16773] kernel_misc_reclaimable:0 [ 361.560076][T16773] free:1313308 free_pcp:9470 free_cma:0 [ 361.607228][T16773] Node 0 active_anon:24080kB inactive_anon:0kB active_file:13628kB inactive_file:159984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127008kB dirty:500kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14532kB pagetables:13820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.649177][T16773] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.690808][T16773] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.723018][T16773] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 361.728854][T16773] Node 0 DMA32 free:1292416kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24080kB inactive_anon:0kB active_file:13628kB inactive_file:159984kB unevictable:1536kB writepending:500kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:36940kB local_pcp:23320kB free_cma:0kB [ 361.771050][T16773] lowmem_reserve[]: 0 0 0 0 0 [ 361.850045][T16773] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.931523][T16773] lowmem_reserve[]: 0 0 0 0 0 [ 361.936335][T16773] Node 1 Normal free:3946656kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.975713][T16773] lowmem_reserve[]: 0 0 0 0 0 [ 361.980951][T16773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 361.997981][T16773] Node 0 DMA32: 6060*4kB (UME) 4190*8kB (UM) 2171*16kB (UME) 245*32kB (UM) 801*64kB (UME) 771*128kB (UM) 674*256kB (UM) 531*512kB (UME) 338*1024kB (UE) 91*2048kB (UM) 15*4096kB (UM) = 1288624kB [ 362.050069][T16773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.106623][T16773] Node 1 Normal: 0*4kB 2*8kB (UM) 5*16kB (UM) 8*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946656kB [ 362.161228][T16773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.177047][T16773] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.206241][T16773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.222527][T16773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.232685][T16773] 46459 total pagecache pages [ 362.237499][T16773] 0 pages in swap cache [ 362.290101][T16795] bond13: option arp_all_targets: invalid value (129) [ 362.298849][T16795] bond13 (unregistering): Released all slaves [ 362.326175][T16773] Free swap = 124996kB [ 362.331693][T16773] Total swap = 124996kB [ 362.336026][T16773] 2097051 pages RAM [ 362.340029][T16773] 0 pages HighMem/MovableOnly [ 362.345468][T16773] 427074 pages reserved [ 362.349793][T16773] 0 pages cma reserved [ 362.449223][T16799] 8021q: VLANs not supported on nlmon0 [ 362.581993][T16809] netlink: 'syz.3.2781': attribute type 1 has an invalid length. [ 362.643997][T16809] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 362.681471][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 363.089912][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 363.097978][ C0] lec:lec_tx_timeout: lec0 [ 363.102623][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 363.361560][T16830] tipc: Enabling of bearer rejected, failed to enable media [ 363.372477][T16830] syzkaller0: entered promiscuous mode [ 363.378094][T16830] syzkaller0: entered allmulticast mode [ 363.530427][T16843] netlink: 'syz.3.2792': attribute type 30 has an invalid length. [ 363.723958][T16850] vlan4: entered promiscuous mode [ 363.729067][T16850] bridge0: entered promiscuous mode [ 363.767370][T16852] wlan1 speed is unknown, defaulting to 1000 [ 363.822047][T16852] lo speed is unknown, defaulting to 1000 [ 363.884919][T16857] __nla_validate_parse: 3 callbacks suppressed [ 363.884939][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'. [ 364.098553][T16865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.193925][T16869] ipt_REJECT: TCP_RESET invalid for non-tcp [ 364.394639][T16882] netlink: 'syz.0.2803': attribute type 2 has an invalid length. [ 364.402636][T16882] netlink: 'syz.0.2803': attribute type 2 has an invalid length. [ 364.784560][T16897] netlink: 'syz.0.2806': attribute type 10 has an invalid length. [ 364.795691][T16897] veth0_vlan: left promiscuous mode [ 364.802906][T16897] veth0_vlan: entered promiscuous mode [ 364.814452][T16897] team0: Device veth0_vlan failed to register rx_handler [ 365.052304][T16906] wlan1 speed is unknown, defaulting to 1000 [ 365.064963][T16906] lo speed is unknown, defaulting to 1000 [ 365.099060][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'. [ 365.628278][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 365.686538][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 365.695853][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 365.707493][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 365.736140][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 365.749817][T16950] netlink: 'syz.1.2819': attribute type 11 has an invalid length. [ 365.758104][T16950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2819'. [ 365.760487][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 365.781897][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2817'. [ 365.805200][T16950] netlink: 'syz.1.2819': attribute type 11 has an invalid length. [ 365.820613][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.851458][T16950] netlink: 'syz.1.2819': attribute type 11 has an invalid length. [ 366.127809][T16968] netlink: 'syz.4.2825': attribute type 1 has an invalid length. [ 366.188545][T16965] 8021q: adding VLAN 0 to HW filter on device bond13 [ 366.232206][T16968] bond12: entered promiscuous mode [ 366.247576][T16968] 8021q: adding VLAN 0 to HW filter on device bond12 [ 366.291414][T16969] 8021q: adding VLAN 0 to HW filter on device bond12 [ 366.303318][T16969] bond12: (slave vti2): The slave device specified does not support setting the MAC address [ 366.314927][T16969] bond12: (slave vti2): Setting fail_over_mac to active for active-backup mode [ 366.329156][T16969] bond12: (slave vti2): making interface the new active one [ 366.338686][T16969] vti2: entered promiscuous mode [ 366.347018][T16969] bond12: (slave vti2): Enslaving as an active interface with an up link [ 366.408933][T16986] xt_bpf: check failed: parse error [ 366.418846][T16986] siw: device registration error -23 [ 366.490202][T16983] syzkaller0: entered promiscuous mode [ 366.495745][T16983] syzkaller0: entered allmulticast mode [ 366.603040][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.633932][T16994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.704338][T16998] netlink: 'syz.4.2834': attribute type 10 has an invalid length. [ 366.750999][T16998] bridge0: left allmulticast mode [ 366.779375][T17003] tipc: Failed to remove unknown binding: 66,0,0/0:3643344403/3643344404 [ 366.789033][T17003] tipc: Failed to remove unknown binding: 66,0,0/0:3643344403/3643344404 [ 366.862699][ T5901] IPVS: starting estimator thread 0... [ 366.961750][T17008] IPVS: using max 37 ests per chain, 88800 per kthread [ 368.114945][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 368.123130][ C0] lec:lec_tx_timeout: lec0 [ 368.128185][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 368.274267][T16999] vlan5: left promiscuous mode [ 368.279107][T16999] bridge_slave_0: left promiscuous mode [ 368.288375][T16999] bridge0: port 4(vlan5) entered disabled state [ 368.296742][T16999] macsec0: left allmulticast mode [ 368.302005][T16999] macsec0: left promiscuous mode [ 368.307307][T16999] bridge0: port 3(macsec0) entered disabled state [ 368.315673][T16999] bridge_slave_1: left allmulticast mode [ 368.321453][T16999] bridge_slave_1: left promiscuous mode [ 368.327222][T16999] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.637903][T17020] netlink: 'syz.0.2839': attribute type 2 has an invalid length. [ 368.981919][T17040] __nla_validate_parse: 119 callbacks suppressed [ 368.981943][T17040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2843'. [ 369.462642][T17073] macsec0: entered promiscuous mode [ 369.470246][T17073] macsec0: entered allmulticast mode [ 369.489002][T17073] veth1_macvtap: entered allmulticast mode [ 369.507281][T17073] netlink: 'syz.2.2851': attribute type 29 has an invalid length. [ 369.516831][T17073] netlink: 'syz.2.2851': attribute type 29 has an invalid length. [ 369.526782][T17073] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2851'. [ 369.537515][T17073] unsupported nla_type 58 [ 369.767409][T17086] wlan1 speed is unknown, defaulting to 1000 [ 369.813590][T17097] netlink: 'syz.3.2856': attribute type 2 has an invalid length. [ 369.828010][T17086] lo speed is unknown, defaulting to 1000 [ 369.856680][T17097] netlink: 'syz.3.2856': attribute type 2 has an invalid length. [ 370.501291][T17130] netlink: 'syz.1.2866': attribute type 3 has an invalid length. [ 370.527077][T17124] pim6reg1: entered allmulticast mode [ 370.783832][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2867'. [ 370.830242][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2867'. [ 371.065570][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2873'. [ 371.079093][T17157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2870'. [ 371.101839][T17160] xt_hashlimit: size too large, truncated to 1048576 [ 371.120550][T17157] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 371.128356][T17157] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2870'. [ 371.296982][T17173] tipc: Enabled bearer , priority 0 [ 371.329175][T17173] syzkaller0: entered promiscuous mode [ 371.346854][T17173] syzkaller0: entered allmulticast mode [ 371.429459][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 371.440596][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 371.450817][T17173] tipc: Resetting bearer [ 371.493388][T17172] tipc: Resetting bearer [ 371.546581][T17181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.585726][T17172] tipc: Disabling bearer [ 371.753337][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.784956][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.810757][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.824519][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.832624][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.912090][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.922128][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.930168][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.942684][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.980226][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.257885][T17197] wlan1 speed is unknown, defaulting to 1000 [ 372.276684][T17197] lo speed is unknown, defaulting to 1000 [ 372.286978][T17187] wlan1 speed is unknown, defaulting to 1000 [ 372.394668][T17187] lo speed is unknown, defaulting to 1000 [ 372.512059][T17213] syzkaller0: entered promiscuous mode [ 372.518085][T17213] syzkaller0: entered allmulticast mode [ 372.586730][T17220] gretap2: entered promiscuous mode [ 372.651994][T17220] batman_adv: batadv0: Adding interface: gretap2 [ 372.659432][T17220] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 372.679439][T17220] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 372.693615][T17220] netlink: 61 bytes leftover after parsing attributes in process `syz.2.2890'. [ 373.054549][T17223] tipc: Resetting bearer [ 373.139927][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 373.148126][ C0] lec:lec_tx_timeout: lec0 [ 373.154908][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 374.040001][ T5145] Bluetooth: hci5: command tx timeout [ 374.148398][T10027] tipc: Resetting bearer [ 374.269535][T17255] netlink: 'syz.1.2900': attribute type 1 has an invalid length. [ 374.278244][T17255] __nla_validate_parse: 2 callbacks suppressed [ 374.278264][T17255] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2900'. [ 374.299758][T17187] chnl_net:caif_netlink_parms(): no params data found [ 374.403802][T17259] netlink: 'syz.3.2899': attribute type 21 has an invalid length. [ 374.420550][T17259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2899'. [ 374.623893][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 374.724484][T17187] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.732228][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.739601][T17187] bridge_slave_0: entered allmulticast mode [ 374.748083][T17187] bridge_slave_0: entered promiscuous mode [ 374.758156][T17187] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.766385][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.774604][T17187] bridge_slave_1: entered allmulticast mode [ 374.782601][T17187] bridge_slave_1: entered promiscuous mode [ 374.906791][T17187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.980603][T17187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.089584][T17187] team0: Port device team_slave_0 added [ 375.119710][T17187] team0: Port device team_slave_1 added [ 375.299163][T17187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.310721][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.343361][T17187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.379547][T17187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.397576][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.478497][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2914'. [ 375.491907][T17187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.613425][T17187] hsr_slave_0: entered promiscuous mode [ 375.627605][T17187] hsr_slave_1: entered promiscuous mode [ 375.651687][T17187] debugfs: 'hsr0' already exists in 'hsr' [ 375.670090][T17187] Cannot create hsr debugfs directory [ 375.690866][T17312] syzkaller0: left allmulticast mode [ 375.696906][T17312] tipc: Resetting bearer [ 375.729332][T17308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2913'. [ 375.779380][T17314] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2915'. [ 375.946114][T17329] x_tables: duplicate underflow at hook 3 [ 375.972230][T17285] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2907'. [ 376.124641][ T5145] Bluetooth: hci5: command tx timeout [ 376.185947][T17187] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.339590][T17187] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.429114][T17344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2923'. [ 376.515236][T17187] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.592867][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.632567][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.662757][T17187] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.696368][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2925'. [ 376.707162][T17354] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.707177][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2924'. [ 376.817476][T17357] "syz.3.2927" (17357) uses obsolete ecb(arc4) skcipher [ 376.941683][T17187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.960522][T17187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.979791][T17187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.994859][T17187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.161179][T17187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.196710][T17187] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.226683][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.233994][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.262376][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.269568][T10027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.803124][T17187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.910186][T17398] netlink: 'syz.3.2937': attribute type 2 has an invalid length. [ 377.953639][T17398] l24): entered promiscuous mode [ 377.982460][T17404] netlink: 'syz.4.2936': attribute type 1 has an invalid length. [ 377.997236][T17187] veth0_vlan: entered promiscuous mode [ 378.040035][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 378.052750][T17187] veth1_vlan: entered promiscuous mode [ 378.124904][T17187] veth0_macvtap: entered promiscuous mode [ 378.143102][T17187] veth1_macvtap: entered promiscuous mode [ 378.169904][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 378.174002][T17411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.178019][ C0] lec:lec_tx_timeout: lec0 [ 378.198192][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 378.206228][ T5145] Bluetooth: hci5: command tx timeout [ 378.206542][T17408] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 378.275545][T17408] 8021q: adding VLAN 0 to HW filter on device bond14 [ 378.297327][T17187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.342892][T17187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.374696][T10859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.410154][T10859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.472645][T10859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.504727][T10859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.749152][T10856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.788994][T10856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.857953][T10859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.869346][T10859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.149012][T17442] tipc: Enabling of bearer rejected, failed to enable media [ 379.535856][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.547946][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.557314][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.565632][T17447] bond_slave_0: entered promiscuous mode [ 379.571881][T17447] bond_slave_1: entered promiscuous mode [ 379.581702][T17447] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 379.590868][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.598804][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.602041][T17447] bond_slave_0: left promiscuous mode [ 379.611310][T17447] bond_slave_1: left promiscuous mode [ 379.749071][T17448] wlan1 speed is unknown, defaulting to 1000 [ 379.774122][T17448] lo speed is unknown, defaulting to 1000 [ 379.834128][T17453] wlan1 speed is unknown, defaulting to 1000 [ 379.863288][T17453] lo speed is unknown, defaulting to 1000 [ 380.041470][T17458] syzkaller1: entered promiscuous mode [ 380.047056][T17458] syzkaller1: entered allmulticast mode [ 380.280063][ T5145] Bluetooth: hci5: command tx timeout [ 380.477920][T17448] chnl_net:caif_netlink_parms(): no params data found [ 380.601915][T17478] __nla_validate_parse: 5 callbacks suppressed [ 380.601937][T17478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2953'. [ 380.659325][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'. [ 380.743023][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.750796][T17448] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.758069][T17448] bridge_slave_0: entered allmulticast mode [ 380.768846][T17448] bridge_slave_0: entered promiscuous mode [ 380.781515][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.788849][T17448] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.797526][T17448] bridge_slave_1: entered allmulticast mode [ 380.806578][T17448] bridge_slave_1: entered promiscuous mode [ 380.885718][T17448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.914565][T17448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.984079][T17448] team0: Port device team_slave_0 added [ 381.003250][T17448] team0: Port device team_slave_1 added [ 381.060614][T17448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.067792][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.131820][T17448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.172589][T17448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.186940][T17448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.214134][T17448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.233156][T17497] netlink: 'syz.3.2958': attribute type 20 has an invalid length. [ 381.234546][T17498] netlink: 'syz.3.2958': attribute type 20 has an invalid length. [ 381.241287][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 381.276089][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'. [ 381.294644][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'. [ 381.359363][T17497] netlink: 'syz.3.2958': attribute type 20 has an invalid length. [ 381.360220][T17498] netlink: 'syz.3.2958': attribute type 20 has an invalid length. [ 381.387646][T10027] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.410936][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'. [ 381.431957][T10027] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.450667][T17448] hsr_slave_0: entered promiscuous mode [ 381.457635][T17448] hsr_slave_1: entered promiscuous mode [ 381.490249][T17448] debugfs: 'hsr0' already exists in 'hsr' [ 381.497247][T17448] Cannot create hsr debugfs directory [ 381.502180][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'. [ 381.513445][T10027] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.562173][T10027] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.720675][ T5145] Bluetooth: hci0: command tx timeout [ 381.759195][T17512] netlink: 'syz.3.2962': attribute type 1 has an invalid length. [ 381.776290][T17512] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2962'. [ 381.787023][T17512] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2962'. [ 381.797002][T17512] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2962'. [ 381.849571][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 381.890566][T17520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.248783][T17531] netlink: 'syz.2.2969': attribute type 9 has an invalid length. [ 382.563517][T17448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.591470][T17448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.616596][T17448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.635496][T17448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.667873][T17564] netlink: 'syz.0.2974': attribute type 1 has an invalid length. [ 382.759289][T17568] batadv_slave_0: entered promiscuous mode [ 382.773231][T17556] tipc: Failed to remove unknown binding: 66,0,0/0:1301016256/1301016257 [ 382.799297][T17568] `: Port device macvlan1 removed [ 382.955820][T17448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.039498][T17567] batadv_slave_0: left promiscuous mode [ 383.083494][T17448] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.109295][T10849] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.116516][T10849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.146586][T10849] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.153848][T10849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.786780][T17448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.810252][ T5145] Bluetooth: hci0: command tx timeout [ 384.230382][T17630] wlan1 speed is unknown, defaulting to 1000 [ 384.294395][T17630] lo speed is unknown, defaulting to 1000 [ 384.449873][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6250 ms [ 384.458065][ C0] lec:lec_tx_timeout: lec0 [ 384.463342][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 384.616696][T17448] veth0_vlan: entered promiscuous mode [ 384.649019][T17648] IPv6: sit1: Disabled Multicast RS [ 384.655977][T17648] sit1: entered allmulticast mode [ 384.693517][T17448] veth1_vlan: entered promiscuous mode [ 384.962521][T17448] veth0_macvtap: entered promiscuous mode [ 385.102772][T17448] veth1_macvtap: entered promiscuous mode [ 385.138398][T17448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.152807][T17448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.195649][T10856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.227789][T10856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.268548][T10856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.288783][T10856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.478352][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.508620][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.585341][T10845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.605726][T10845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.758184][T17680] wlan1 speed is unknown, defaulting to 1000 [ 385.797827][T17680] lo speed is unknown, defaulting to 1000 [ 385.827903][T17688] __nla_validate_parse: 15 callbacks suppressed [ 385.827926][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'. [ 385.893294][ T5145] Bluetooth: hci0: command tx timeout [ 386.003990][T17688] validate_nla: 1 callbacks suppressed [ 386.004012][T17688] netlink: 'syz.2.3008': attribute type 5 has an invalid length. [ 386.036275][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'. [ 386.051780][T17696] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3008'. [ 386.231585][T17692] syzkaller0: entered promiscuous mode [ 386.238954][T17692] syzkaller0: entered allmulticast mode [ 386.256068][T17711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3011'. [ 386.317039][T17713] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 386.377565][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3013'. [ 386.431908][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'. [ 387.915511][T17715] sch_tbf: burst 88 is lower than device ip6gre0 mtu (1448) ! [ 387.944966][T17713] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 387.960771][ T5145] Bluetooth: hci0: command tx timeout [ 387.981874][T17719] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 388.155857][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 388.498792][T17743] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 388.642598][T17750] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 388.712063][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.731159][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.739955][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.777160][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.785639][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.958128][T17761] wlan1 speed is unknown, defaulting to 1000 [ 389.064129][T17761] lo speed is unknown, defaulting to 1000 [ 389.216751][T10845] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.295523][T17782] ip6t_srh: unknown srh match flags 4000 [ 389.318004][T10845] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.338920][T17782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3032'. [ 389.346234][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'. [ 389.353356][T17782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3032'. [ 389.378212][T17787] netlink: 'syz.4.3033': attribute type 3 has an invalid length. [ 389.412444][T10845] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.494588][T17787] siw: device registration error -23 [ 389.552934][T17787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.577928][T10845] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.755867][T17761] chnl_net:caif_netlink_parms(): no params data found [ 389.839749][T17802] sctp: [Deprecated]: syz.0.3038 (pid 17802) Use of int in max_burst socket option. [ 389.839749][T17802] Use struct sctp_assoc_value instead [ 390.048878][T17811] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 390.076922][ T29] IPVS: starting estimator thread 0... [ 390.190126][T17816] IPVS: using max 37 ests per chain, 88800 per kthread [ 390.199863][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 390.208025][ C0] lec:lec_tx_timeout: lec0 [ 390.213272][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 390.242980][T17828] IPv6: NLM_F_REPLACE set, but no existing node found! [ 390.273166][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.306960][T17761] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.334307][T17761] bridge_slave_0: entered allmulticast mode [ 390.365879][T17761] bridge_slave_0: entered promiscuous mode [ 390.416900][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.428879][T17761] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.446018][T17761] bridge_slave_1: entered allmulticast mode [ 390.461418][T17761] bridge_slave_1: entered promiscuous mode [ 390.505547][T10845] bridge_slave_1: left allmulticast mode [ 390.515051][T10845] bridge_slave_1: left promiscuous mode [ 390.538911][T10845] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.565529][T10845] bridge_slave_0: left allmulticast mode [ 390.572411][T10845] bridge_slave_0: left promiscuous mode [ 390.578347][T10845] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.853550][ T5830] Bluetooth: hci3: command tx timeout [ 391.141160][T10845] batman_adv: batadv0: Removing interface: gretap1 [ 391.191498][T10845] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 391.284714][T17857] __nla_validate_parse: 1 callbacks suppressed [ 391.284737][T17857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3049'. [ 391.374307][T17865] x_tables: unsorted underflow at hook 4 [ 391.461504][T10845] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 391.481724][T17870] Cannot find del_set index 0 as target [ 391.532479][T10845] bond2 (unregistering): (slave bridge2): Releasing active interface [ 391.576631][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 391.628238][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3054'. [ 391.785048][T10845] bond3 (unregistering): (slave bridge7): Removing an active aggregator [ 391.795616][T10845] bond3 (unregistering): (slave bridge7): Releasing backup interface [ 391.804860][T10845] bond3 (unregistering): (slave bridge7): the permanent HWaddr of slave - 92:63:48:3a:bd:c1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 391.824691][T10845] bridge7 (unregistering): left promiscuous mode [ 391.831815][T10845] bridge7 (unregistering): left allmulticast mode [ 391.886582][T10845] bond3 (unregistering): (slave bridge8): Releasing backup interface [ 391.895571][T10845] bridge8 (unregistering): left promiscuous mode [ 391.902542][T10845] bridge8 (unregistering): left allmulticast mode [ 392.064345][T10845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.074615][T10845] bond_slave_0: left promiscuous mode [ 392.083440][T10845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.095096][T10845] bond_slave_1: left promiscuous mode [ 392.102792][T10845] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 392.112513][T10845] batadv0: left promiscuous mode [ 392.118409][T10845] bond0 (unregistering): Released all slaves [ 392.134317][T10845] bond1 (unregistering): Released all slaves [ 392.151624][T10845] bond2 (unregistering): Released all slaves [ 392.167251][T10845] bond3 (unregistering): Released all slaves [ 392.186180][T10845] bond4 (unregistering): (slave bond5): Releasing backup interface [ 392.195712][T10845] bond4 (unregistering): Released all slaves [ 392.224065][T10845] bond5 (unregistering): Released all slaves [ 392.239502][T10845] bond6 (unregistering): Released all slaves [ 392.255549][T10845] bond7 (unregistering): Released all slaves [ 392.322832][T17761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.355100][T17761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.519015][T17847] wlan1 speed is unknown, defaulting to 1000 [ 392.526533][T17761] team0: Port device team_slave_0 added [ 392.534867][T10845] 9: left promiscuous mode [ 392.576831][T17761] team0: Port device team_slave_1 added [ 392.598645][T17875] wlan1 speed is unknown, defaulting to 1000 [ 392.598816][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3055'. [ 392.630313][T17847] lo speed is unknown, defaulting to 1000 [ 392.677659][T17875] lo speed is unknown, defaulting to 1000 [ 392.685463][T10845] l24): left promiscuous mode [ 392.712033][T17761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.729275][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.777673][T17761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.793347][T17761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.801809][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.849737][T17761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.895879][T10845] tipc: Left network mode [ 392.920072][ T5830] Bluetooth: hci3: command tx timeout [ 393.057065][T17899] syzkaller0: entered promiscuous mode [ 393.084169][T17899] syzkaller0: entered allmulticast mode [ 393.228370][T17761] hsr_slave_0: entered promiscuous mode [ 393.255665][T17761] hsr_slave_1: entered promiscuous mode [ 393.280864][T17761] debugfs: 'hsr0' already exists in 'hsr' [ 393.294932][T17761] Cannot create hsr debugfs directory [ 393.752557][T17920] netlink: 'syz.2.3059': attribute type 13 has an invalid length. [ 393.869181][T17918] pim6reg1: entered promiscuous mode [ 393.880750][T17918] pim6reg1: entered allmulticast mode [ 393.966985][ T5902] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 394.250784][ T5902] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 394.285009][T17933] netlink: 'syz.1.3064': attribute type 10 has an invalid length. [ 394.335537][T10845] hsr_slave_0: left promiscuous mode [ 394.361689][T10845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.385780][T10845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.612304][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3065'. [ 395.000030][ T5830] Bluetooth: hci3: command tx timeout [ 395.146620][T10845] team0 (unregistering): Port device team_slave_1 removed [ 395.174034][T10845] team0 (unregistering): Port device team_slave_0 removed [ 395.395327][T17961] tipc: Started in network mode [ 395.401448][T17961] tipc: Node identity ac14140f, cluster identity 4711 [ 395.409000][T17961] tipc: Enabled bearer , priority 10 [ 395.594723][T17975] No such timeout policy "syz1" [ 395.777606][T17986] netlink: 'syz.0.3074': attribute type 10 has an invalid length. [ 395.806115][T17989] netlink: 'syz.4.3073': attribute type 5 has an invalid length. [ 395.909113][T17986] syz_tun: entered promiscuous mode [ 395.969869][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 395.977977][ C0] lec:lec_tx_timeout: lec0 [ 395.983429][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 396.122770][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 396.187769][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 396.433505][T17992] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 396.630823][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 396.655807][T18003] hsr_slave_1 (unregistering): left promiscuous mode [ 396.669079][ T29] tipc: Node number set to 2886997007 [ 396.730222][T18029] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3079'. [ 396.854969][T10845] IPVS: stop unused estimator thread 0... [ 397.081002][ T5830] Bluetooth: hci3: command tx timeout [ 397.228229][T18057] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3083'. [ 397.329712][T18055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3083'. [ 397.351801][T18055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3083'. [ 397.434181][T17761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.578213][T18072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3087'. [ 397.686675][T18079] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 397.748415][T17761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 397.812151][T17761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.894850][T17761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.989365][T18085] tipc: Enabled bearer , priority 0 [ 398.065062][ T5902] hid-generic 0005:4C4A:5508.0001: item fetching failed at offset 0/1 [ 398.112396][ T5902] hid-generic 0005:4C4A:5508.0001: probe with driver hid-generic failed with error -22 [ 398.176098][T18085] tipc: Disabling bearer [ 398.189137][T18111] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 398.388112][T18125] xt_l2tp: v2 doesn't support IP mode [ 398.395055][T18121] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3095'. [ 398.405387][T18125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3095'. [ 398.420858][T18123] netlink: 'syz.2.3096': attribute type 1 has an invalid length. [ 398.565143][T17761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.632151][T17761] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.656293][T10849] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.663554][T10849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.716330][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.723765][T10859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.842850][T18143] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 398.857061][T18143] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 398.889697][T18143] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 399.174102][T18155] netlink: 'syz.4.3102': attribute type 4 has an invalid length. [ 399.380854][T18166] tipc: Enabled bearer , priority 0 [ 399.431054][T18166] syzkaller0: entered promiscuous mode [ 399.436693][T18166] syzkaller0: entered allmulticast mode [ 399.553772][T18157] tipc: Resetting bearer [ 399.614825][T18157] tipc: Disabling bearer [ 399.677142][T17761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.862158][T17761] veth0_vlan: entered promiscuous mode [ 399.917145][T17761] veth1_vlan: entered promiscuous mode [ 400.049818][T17761] veth0_macvtap: entered promiscuous mode [ 400.113338][T17761] veth1_macvtap: entered promiscuous mode [ 400.173053][T17761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.242491][T17761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.332757][T10846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.366968][T10846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.455862][T10846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.476987][T10846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.781324][T10027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.812696][T10027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.937783][T10852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.988680][T10852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.999976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 401.008096][ C0] lec:lec_tx_timeout: lec0 [ 401.012842][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 401.169437][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3118'. [ 401.231103][T18238] syzkaller1: entered promiscuous mode [ 401.257075][T18238] syzkaller1: entered allmulticast mode [ 401.622380][T18252] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 401.651808][T18253] netlink: 'syz.3.3122': attribute type 10 has an invalid length. [ 401.659683][T18253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3122'. [ 401.694665][T18253] dummy0: entered promiscuous mode [ 401.706170][T18253] bridge0: port 3(dummy0) entered blocking state [ 401.713889][T18253] bridge0: port 3(dummy0) entered disabled state [ 401.721499][T18253] dummy0: entered allmulticast mode [ 401.731908][T18253] bridge0: port 3(dummy0) entered blocking state [ 401.738460][T18253] bridge0: port 3(dummy0) entered forwarding state [ 401.947171][T18263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.964280][T18263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.974557][T18263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.992320][T18263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.001550][T18263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.080690][T18261] block nbd2: server does not support multiple connections per device. [ 402.106621][T18261] block nbd2: shutting down sockets [ 402.131066][T18262] wlan1 speed is unknown, defaulting to 1000 [ 402.141573][T18262] lo speed is unknown, defaulting to 1000 [ 402.294778][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3130'. [ 402.886816][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 402.912295][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 402.919492][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 402.926949][T10846] wlan1: Trigger new scan to find an IBSS to join [ 402.935670][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 402.947533][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 402.965285][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 402.991989][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 403.053176][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 403.090278][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 403.139161][T18299] "syz.2.3133" (18299) uses obsolete ecb(arc4) skcipher [ 403.319250][T18317] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3136'. [ 403.367930][T18262] chnl_net:caif_netlink_parms(): no params data found [ 403.398999][T18320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3138'. [ 403.638214][T18332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3141'. [ 403.640398][T18320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3138'. [ 403.952033][T18345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3143'. [ 404.018782][T18352] netlink: 'syz.4.3143': attribute type 15 has an invalid length. [ 404.033770][T18352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3143'. [ 404.043608][ T5830] Bluetooth: hci2: command tx timeout [ 404.075500][T18346] ip6tnl1: entered promiscuous mode [ 404.299414][T18339] wlan1 speed is unknown, defaulting to 1000 [ 404.516770][T10027] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 404.576064][T10027] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 404.683548][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'. [ 404.823183][T10027] bond7 (unregistering): (slave gretap2): Releasing active interface [ 404.841821][T10027] batman_adv: batadv0: Removing interface: gretap3 [ 405.049402][T10027] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 405.301047][T10027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.312174][T10027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.322793][T10027] bond0 (unregistering): Released all slaves [ 405.336759][T10027] bond1 (unregistering): Released all slaves [ 405.352575][T10027] bond2 (unregistering): Released all slaves [ 405.367370][T10027] bond3 (unregistering): Released all slaves [ 405.385265][T10027] bond4 (unregistering): Released all slaves [ 405.411178][T10027] bond5 (unregistering): Released all slaves [ 405.431155][T10027] bond6 (unregistering): Released all slaves [ 405.446123][T10027] bond7 (unregistering): Released all slaves [ 405.474855][T10027] bond8 (unregistering): (slave veth7): Releasing active interface [ 405.486076][T10027] bond8 (unregistering): (slave veth9): Releasing active interface [ 405.497389][T10027] bond8 (unregistering): Released all slaves [ 405.517989][T10027] bond9 (unregistering): Released all slaves [ 405.533159][T10027] bond10 (unregistering): Released all slaves [ 405.548633][T10027] bond11 (unregistering): Released all slaves [ 405.568544][T10027] bond12 (unregistering): Released all slaves [ 405.591866][T10027] bond13 (unregistering): Released all slaves [ 405.607592][T18262] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.615856][T18262] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.624671][T18262] bridge_slave_0: entered allmulticast mode [ 405.634861][T18262] bridge_slave_0: entered promiscuous mode [ 405.647445][T18262] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.655704][T18262] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.663928][T18262] bridge_slave_1: entered allmulticast mode [ 405.673641][T18262] bridge_slave_1: entered promiscuous mode [ 405.684487][T18339] lo speed is unknown, defaulting to 1000 [ 405.834460][T18262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.878621][T18262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.896418][T10027] tipc: Disabling bearer [ 405.921065][T10027] tipc: Left network mode [ 405.962408][T10852] wlan1: Trigger new scan to find an IBSS to join [ 405.988008][T18405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3150'. [ 406.029876][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 406.038295][ C0] lec:lec_tx_timeout: lec0 [ 406.043033][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 406.120044][ T5830] Bluetooth: hci2: command tx timeout [ 406.204709][T10027] IPVS: stopping backup sync thread 12560 ... [ 406.224672][T18262] team0: Port device team_slave_0 added [ 406.315163][T18262] team0: Port device team_slave_1 added [ 406.637647][T18262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.649294][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.698553][T18262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.838566][T18262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.860272][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.894096][T18262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.393182][T18262] hsr_slave_0: entered promiscuous mode [ 407.414250][T18262] hsr_slave_1: entered promiscuous mode [ 407.439215][T18262] debugfs: 'hsr0' already exists in 'hsr' [ 407.455619][T18262] Cannot create hsr debugfs directory [ 407.535733][T10027] hsr_slave_0: left promiscuous mode [ 407.556945][T10027] hsr_slave_1: left promiscuous mode [ 407.574720][T10027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.602443][T10027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.868097][T18479] netlink: 'syz.2.3164': attribute type 1 has an invalid length. [ 407.928383][T18482] __nla_validate_parse: 1 callbacks suppressed [ 407.928405][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3164'. [ 408.055132][T10027] ` (unregistering): Port device team_slave_1 removed [ 408.107872][T10027] ` (unregistering): Port device team_slave_0 removed [ 408.122449][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 408.200078][ T5830] Bluetooth: hci2: command tx timeout [ 408.417077][T18479] 8021q: adding VLAN 0 to HW filter on device bond15 [ 408.455860][T18482] bond15 (unregistering): Released all slaves [ 408.541125][T18480] syzkaller0: entered promiscuous mode [ 408.546752][T18480] syzkaller0: entered allmulticast mode [ 408.711287][T18502] netlink: 'syz.2.3168': attribute type 11 has an invalid length. [ 408.719579][T18502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 408.764904][T18504] netlink: 'syz.2.3168': attribute type 11 has an invalid length. [ 408.773569][T18504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 408.819121][T18505] netlink: 'syz.2.3168': attribute type 11 has an invalid length. [ 408.829942][T18505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 408.922603][T10845] wlan1: Creating new IBSS network, BSSID 72:3f:36:19:64:05 [ 410.284525][ T5830] Bluetooth: hci2: command tx timeout [ 410.332295][T18493] netlink: 'syz.3.3165': attribute type 3 has an invalid length. [ 410.381367][T18504] netlink: 'syz.2.3168': attribute type 11 has an invalid length. [ 410.382366][T18505] netlink: 'syz.2.3168': attribute type 11 has an invalid length. [ 410.440134][T18505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 410.442095][T18504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 410.739557][T18514] geneve2: entered promiscuous mode [ 411.008425][T10027] IPVS: stop unused estimator thread 0... [ 411.059854][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 411.067964][ C0] lec:lec_tx_timeout: lec0 [ 411.072620][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 411.648826][T18262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.715984][T18262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.759511][ T29] hid-generic 0005:10CF:55ED.0002: item fetching failed at offset 0/1 [ 411.807073][T18262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.842609][ T29] hid-generic 0005:10CF:55ED.0002: probe with driver hid-generic failed with error -22 [ 411.879577][T18262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.279440][T18262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.382483][T18262] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.417530][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.424772][T10859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.473290][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.480563][T10859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.546087][T18596] bond0: (slave rose0): Error: Device can not be enslaved while up [ 412.694457][T18593] wlan1 speed is unknown, defaulting to 1000 [ 412.812353][T18593] lo speed is unknown, defaulting to 1000 [ 412.818251][T18603] wlan1 speed is unknown, defaulting to 1000 [ 412.833723][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 412.981804][T18603] lo speed is unknown, defaulting to 1000 [ 413.085644][T18624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3188'. [ 413.197094][T18628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3189'. [ 413.487755][T18262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.574741][T18262] veth0_vlan: entered promiscuous mode [ 413.601550][T18262] veth1_vlan: entered promiscuous mode [ 413.714373][T18645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3194'. [ 413.752287][T18644] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 413.941675][T18262] veth0_macvtap: entered promiscuous mode [ 413.969590][T18262] veth1_macvtap: entered promiscuous mode [ 414.052413][T18262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.127003][T18262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.163447][T10846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.205528][T10846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.241146][T10846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.268705][T18673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3202'. [ 414.286293][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3199'. [ 414.309003][T10846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.357590][T18668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3201'. [ 414.371409][T18668] netlink: 'syz.0.3201': attribute type 7 has an invalid length. [ 414.379292][T18668] netlink: 'syz.0.3201': attribute type 8 has an invalid length. [ 414.502382][T18668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'. [ 414.513007][T10859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.531658][T10859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.547121][T18668] team0: entered promiscuous mode [ 414.553937][T18668] team_slave_0: entered promiscuous mode [ 414.564153][T18668] team_slave_1: entered promiscuous mode [ 414.573246][T18668] bridge0: entered promiscuous mode [ 414.580697][T18668] erspan0: entered promiscuous mode [ 414.738712][T10859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.757160][T10859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.878080][T18693] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 414.878326][T18692] IPVS: stopping backup sync thread 18693 ... [ 415.116555][T18708] netlink: 'syz.1.3121': attribute type 6 has an invalid length. [ 415.129236][T18716] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 415.371615][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3212'. [ 415.516287][T18730] tipc: Started in network mode [ 415.537111][T18730] tipc: Node identity 4a3bfee462d5, cluster identity 4711 [ 415.551243][T18730] tipc: Enabled bearer , priority 0 [ 415.584483][T18729] tipc: Disabling bearer [ 415.631596][T18739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 415.766357][T18745] wlan1 speed is unknown, defaulting to 1000 [ 415.829581][T18745] lo speed is unknown, defaulting to 1000 [ 416.079979][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 416.088173][ C0] lec:lec_tx_timeout: lec0 [ 416.093365][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 416.290421][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3222'. [ 416.378204][T18773] netlink: 'syz.0.3225': attribute type 13 has an invalid length. [ 416.402433][T18773] netlink: 'syz.0.3225': attribute type 17 has an invalid length. [ 416.525006][T18773] syz_tun: left promiscuous mode [ 416.573436][T18773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.725276][T18263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.737669][T18263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.754263][T18263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.773288][T18263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.789284][T18263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.218547][T18788] wlan1 speed is unknown, defaulting to 1000 [ 417.263806][T18788] lo speed is unknown, defaulting to 1000 [ 417.313361][T18811] netlink: 'syz.0.3235': attribute type 15 has an invalid length. [ 417.424822][T10859] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.444423][T10859] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 417.454820][T10859] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.568201][T18820] bond1: option mode: invalid value (254) [ 417.598876][T18820] bond1 (unregistering): Released all slaves [ 417.652429][T10859] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.677902][T10859] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 417.698197][T10859] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.929351][T10859] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.024518][T10859] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 418.050791][T10859] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.197068][T10859] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.223874][T10859] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 418.235126][T10859] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.261660][T18831] __nla_validate_parse: 3 callbacks suppressed [ 418.261685][T18831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3240'. [ 418.279449][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3244'. [ 418.311161][T18859] openvswitch: netlink: IP tunnel TTL not specified. [ 418.322918][T18853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.343278][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3244'. [ 418.384168][T18788] chnl_net:caif_netlink_parms(): no params data found [ 418.686028][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 418.707347][T18788] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.716242][T18872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3248'. [ 418.723001][T18788] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.733196][T18788] bridge_slave_0: entered allmulticast mode [ 418.743596][T18788] bridge_slave_0: entered promiscuous mode [ 418.773794][T18788] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.781085][T18788] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.788495][T18788] bridge_slave_1: entered allmulticast mode [ 418.798967][T18788] bridge_slave_1: entered promiscuous mode [ 418.816843][T10859] erspan0: left allmulticast mode [ 418.835503][T10859] erspan0: left promiscuous mode [ 418.850832][ T5830] Bluetooth: hci1: command tx timeout [ 418.852491][T10859] bridge1: port 1(erspan0) entered disabled state [ 418.884287][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 419.229722][T10859] batman_adv: batadv0: Removing interface: gretap2 [ 419.280287][T10859] bond7 (unregistering): (slave geneve2): Releasing active interface [ 419.464704][T10859] bond9 (unregistering): (slave bridge3): Releasing backup interface [ 419.668931][T10859] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 419.686688][T10859] bond0 (unregistering): Released all slaves [ 419.697536][T10859] bond1 (unregistering): Released all slaves [ 419.723457][T10859] bond2 (unregistering): Released all slaves [ 419.740141][T10859] bond3 (unregistering): Released all slaves [ 419.763931][T10859] bond4 (unregistering): Released all slaves [ 419.778281][T10859] bond5 (unregistering): Released all slaves [ 419.792856][T10859] bond6 (unregistering): Released all slaves [ 419.808526][T10859] bond7 (unregistering): Released all slaves [ 419.834523][T10859] bond8 (unregistering): Released all slaves [ 419.849084][T10859] bond9 (unregistering): Released all slaves [ 419.865072][T10859] bond10 (unregistering): Released all slaves [ 419.888943][T10859] bond11 (unregistering): Released all slaves [ 419.904087][T10859] bond12 (unregistering): Released all slaves [ 419.918444][T10859] bond13 (unregistering): Released all slaves [ 419.934823][T10859] bond14 (unregistering): Released all slaves [ 420.219780][T18788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.241577][T10859] : left promiscuous mode [ 420.291574][T18788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.418324][T10859] !: left promiscuous mode [ 420.488569][T18788] team0: Port device team_slave_0 added [ 420.513418][T18788] team0: Port device team_slave_1 added [ 420.528376][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'. [ 420.542036][T10859] : left promiscuous mode [ 420.592975][T18918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3257'. [ 420.605519][T18913] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3256'. [ 420.616241][T18913] netlink: 'syz.1.3256': attribute type 4 has an invalid length. [ 420.627119][T18913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3256'. [ 420.746640][T18913] bond1: entered promiscuous mode [ 420.753474][T18913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.769614][T18913] bond1 (unregistering): Released all slaves [ 420.798140][T10859] !9: left promiscuous mode [ 420.866590][T18918] ip6gre1: entered promiscuous mode [ 420.920565][ T5830] Bluetooth: hci1: command tx timeout [ 420.932070][T18918] ip6gre1: entered allmulticast mode [ 420.940592][T18788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.978816][T18788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.007655][T18788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.021694][T18788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.028866][T18788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.099860][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 421.107926][ C0] lec:lec_tx_timeout: lec0 [ 421.112713][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 421.182443][T18788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.235305][T10859] tipc: Left network mode [ 421.333236][T18938] tipc: Enabling of bearer rejected, failed to enable media [ 421.461722][T18953] netlink: zone id is out of range [ 421.477256][T18953] netlink: zone id is out of range [ 421.483691][T18788] hsr_slave_0: entered promiscuous mode [ 421.498861][T18788] hsr_slave_1: entered promiscuous mode [ 421.504651][T18953] netlink: zone id is out of range [ 421.521292][T18788] debugfs: 'hsr0' already exists in 'hsr' [ 421.527217][T18788] Cannot create hsr debugfs directory [ 421.533124][T18953] netlink: zone id is out of range [ 421.538284][T18953] netlink: zone id is out of range [ 421.570532][T18953] netlink: zone id is out of range [ 421.600100][T18953] netlink: zone id is out of range [ 421.626651][T18953] netlink: zone id is out of range [ 421.636783][T18953] netlink: zone id is out of range [ 421.664083][T18953] netlink: zone id is out of range [ 421.697564][T18953] netlink: zone id is out of range [ 421.713563][T18953] netlink: zone id is out of range [ 421.735166][T18953] netlink: zone id is out of range [ 421.755435][T18953] netlink: zone id is out of range [ 421.769533][T18953] netlink: zone id is out of range [ 421.794593][T18953] netlink: zone id is out of range [ 421.853643][T10856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.883357][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.912604][T10856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.932488][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.632004][T19000] syzkaller0: entered promiscuous mode [ 422.637548][T19000] syzkaller0: entered allmulticast mode [ 422.711738][T19000] tipc: Enabled bearer , priority 0 [ 422.840672][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.897927][T18993] tipc: Resetting bearer [ 422.994770][T18991] tipc: Resetting bearer [ 423.002207][ T5830] Bluetooth: hci1: command tx timeout [ 423.049148][T18991] tipc: Disabling bearer [ 423.139238][T19017] netlink: 'syz.4.3279': attribute type 58 has an invalid length. [ 423.204472][T10859] hsr_slave_0: left promiscuous mode [ 423.233382][T10859] veth1_macvtap: left allmulticast mode [ 423.491509][T19044] xt_hashlimit: size too large, truncated to 1048576 [ 424.166910][T18788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.258810][T18788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.298824][T10859] IPVS: stop unused estimator thread 0... [ 424.300409][T18788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.355602][T18788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.418185][T19070] netlink: 'syz.0.3287': attribute type 1 has an invalid length. [ 424.960748][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 425.092984][ T5830] Bluetooth: hci1: command tx timeout [ 425.150609][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 425.161323][T19105] __nla_validate_parse: 3 callbacks suppressed [ 425.161343][T19105] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3294'. [ 425.180532][T10846] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 425.237735][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 425.277569][T19117] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3296'. [ 425.319428][T18788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.378652][T18788] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.427976][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.435296][T10846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.454372][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.461598][T10846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.477545][T19120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3298'. [ 425.602301][T19128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3300'. [ 425.640061][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.129920][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 426.137984][ C0] lec:lec_tx_timeout: lec0 [ 426.143081][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 426.191775][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 426.215204][T19163] tls_set_device_offload_rx: netdev not found [ 426.232677][T10859] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 426.252996][T18788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.482674][T18788] veth0_vlan: entered promiscuous mode [ 426.583213][T18788] veth1_vlan: entered promiscuous mode [ 426.698875][T18788] veth0_macvtap: entered promiscuous mode [ 426.742497][T18788] veth1_macvtap: entered promiscuous mode [ 426.818911][T18788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.942287][T18788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.008196][T10859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.068443][T10859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.113641][T10859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.154530][T19201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3313'. [ 427.172346][T10859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.212004][T19204] netlink: 'syz.1.3314': attribute type 5 has an invalid length. [ 427.446338][T19216] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3317'. [ 427.469979][T19216] net_ratelimit: 343 callbacks suppressed [ 427.470000][T19216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.494480][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.520533][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.663508][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.690154][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.944953][T19233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'. [ 428.263396][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3325'. [ 428.451391][T19223] netlink: 'syz.1.3319': attribute type 4 has an invalid length. [ 428.585806][T19261] tipc: Started in network mode [ 428.597020][T19261] tipc: Node identity 021e2b11f257, cluster identity 4711 [ 428.640816][T19261] tipc: Enabled bearer , priority 0 [ 428.783701][T19262] dvmrp1: entered allmulticast mode [ 428.789436][T19254] syzkaller0: entered promiscuous mode [ 428.811937][T19254] syzkaller0: entered allmulticast mode [ 428.843647][T19262] x_tables: duplicate underflow at hook 2 [ 428.884593][T19265] dvmrp1: left allmulticast mode [ 428.903349][T19272] sctp: [Deprecated]: syz.0.3329 (pid 19272) Use of int in max_burst socket option. [ 428.903349][T19272] Use struct sctp_assoc_value instead [ 428.927857][T19268] tipc: Resetting bearer [ 428.946362][T19252] tipc: Resetting bearer [ 429.002406][T19252] tipc: Disabling bearer [ 429.227029][T19289] netlink: 'syz.0.3332': attribute type 8 has an invalid length. [ 429.485434][T19291] Bluetooth: MGMT ver 1.23 [ 430.255663][T19343] __nla_validate_parse: 4 callbacks suppressed [ 430.255684][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 430.280044][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 430.280065][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 430.740225][T19361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3345'. [ 430.806928][T19364] wlan1 speed is unknown, defaulting to 1000 [ 430.837753][T19364] lo speed is unknown, defaulting to 1000 [ 430.969754][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3347'. [ 431.002634][T19373] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 431.099344][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3347'. [ 431.134954][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 431.159898][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 431.168011][ C0] lec:lec_tx_timeout: lec0 [ 431.174645][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 431.182136][T19358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.263386][T19384] netlink: 'syz.2.3349': attribute type 58 has an invalid length. [ 431.271505][T19384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3349'. [ 431.534274][T19392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3352'. [ 431.637691][T19397] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 431.646393][T19397] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3353'. [ 431.915418][T19408] hsr0: entered promiscuous mode [ 431.946405][T19408] bond0: entered promiscuous mode [ 431.953989][T19408] bond_slave_0: entered promiscuous mode [ 431.972857][T19379] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 431.991205][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3358'. [ 432.012789][T19408] bond_slave_1: entered promiscuous mode [ 432.031251][T19408] batadv0: entered promiscuous mode [ 432.114751][T19415] netlink: 'syz.3.3359': attribute type 1 has an invalid length. [ 432.182553][T19415] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3359'. [ 432.608688][T19447] FAULT_INJECTION: forcing a failure. [ 432.608688][T19447] name failslab, interval 1, probability 0, space 0, times 0 [ 432.630199][T19447] CPU: 1 UID: 0 PID: 19447 Comm: syz.0.3370 Not tainted syzkaller #0 PREEMPT(full) [ 432.630230][T19447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.630243][T19447] Call Trace: [ 432.630251][T19447] [ 432.630260][T19447] dump_stack_lvl+0xe8/0x150 [ 432.630313][T19447] should_fail_ex+0x412/0x560 [ 432.630348][T19447] should_failslab+0xa8/0x100 [ 432.630378][T19447] __kvmalloc_node_noprof+0x178/0x8a0 [ 432.630406][T19447] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 432.630590][T19447] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 432.630628][T19447] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 432.630673][T19447] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 432.630707][T19447] ? __pfx_autoremove_wake_function+0x10/0x10 [ 432.630744][T19447] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 432.630798][T19447] ? 0xffffffffa0201a50 [ 432.630817][T19447] ? 0xffffffffa02028e4 [ 432.630862][T19447] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 432.630906][T19447] ? _copy_from_user+0x94/0xb0 [ 432.630940][T19447] ? bpf_test_init+0x113/0x150 [ 432.630967][T19447] ? xdp_convert_md_to_buff+0x5b/0x330 [ 432.631001][T19447] bpf_prog_test_run_xdp+0x81c/0x1160 [ 432.631048][T19447] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 432.631084][T19447] ? __fget_files+0x2a/0x420 [ 432.631131][T19447] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 432.631163][T19447] bpf_prog_test_run+0x2c7/0x340 [ 432.631189][T19447] __sys_bpf+0x643/0x950 [ 432.631224][T19447] ? __pfx___sys_bpf+0x10/0x10 [ 432.631274][T19447] ? ksys_write+0x242/0x270 [ 432.631308][T19447] ? __pfx_ksys_write+0x10/0x10 [ 432.631340][T19447] __x64_sys_bpf+0x7c/0x90 [ 432.631372][T19447] do_syscall_64+0x14d/0xf80 [ 432.631405][T19447] ? trace_irq_disable+0x3b/0x150 [ 432.631436][T19447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.631458][T19447] ? clear_bhb_loop+0x40/0x90 [ 432.631485][T19447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.631507][T19447] RIP: 0033:0x7f6649d9c799 [ 432.631527][T19447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.631546][T19447] RSP: 002b:00007f6647ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.631569][T19447] RAX: ffffffffffffffda RBX: 00007f664a015fa0 RCX: 00007f6649d9c799 [ 432.631586][T19447] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 432.631600][T19447] RBP: 00007f6647ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 432.631614][T19447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.631626][T19447] R13: 00007f664a016038 R14: 00007f664a015fa0 R15: 00007fff3150fd58 [ 432.631662][T19447] [ 432.954762][T19450] x_tables: duplicate underflow at hook 1 [ 433.551282][T19481] FAULT_INJECTION: forcing a failure. [ 433.551282][T19481] name failslab, interval 1, probability 0, space 0, times 0 [ 433.586994][T19481] CPU: 1 UID: 0 PID: 19481 Comm: syz.3.3382 Not tainted syzkaller #0 PREEMPT(full) [ 433.587029][T19481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.587045][T19481] Call Trace: [ 433.587054][T19481] [ 433.587064][T19481] dump_stack_lvl+0xe8/0x150 [ 433.587104][T19481] should_fail_ex+0x412/0x560 [ 433.587140][T19481] should_failslab+0xa8/0x100 [ 433.587174][T19481] __kvmalloc_node_noprof+0x178/0x8a0 [ 433.587203][T19481] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 433.587240][T19481] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 433.587274][T19481] bpf_test_run_xdp_live+0x223/0x1cf0 [ 433.587316][T19481] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 433.587365][T19481] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 433.587403][T19481] ? __pfx_autoremove_wake_function+0x10/0x10 [ 433.587433][T19481] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 433.587494][T19481] ? 0xffffffffa02019cc [ 433.587514][T19481] ? 0xffffffffa02028e4 [ 433.587566][T19481] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 433.587615][T19481] ? _copy_from_user+0x94/0xb0 [ 433.587653][T19481] ? bpf_test_init+0x113/0x150 [ 433.587683][T19481] ? xdp_convert_md_to_buff+0x5b/0x330 [ 433.587721][T19481] bpf_prog_test_run_xdp+0x81c/0x1160 [ 433.587783][T19481] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 433.587821][T19481] ? __fget_files+0x2a/0x420 [ 433.587862][T19481] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 433.587896][T19481] bpf_prog_test_run+0x2c7/0x340 [ 433.587925][T19481] __sys_bpf+0x643/0x950 [ 433.587964][T19481] ? __pfx___sys_bpf+0x10/0x10 [ 433.588042][T19481] ? ksys_write+0x242/0x270 [ 433.588071][T19481] ? __pfx_ksys_write+0x10/0x10 [ 433.588106][T19481] __x64_sys_bpf+0x7c/0x90 [ 433.588140][T19481] do_syscall_64+0x14d/0xf80 [ 433.588176][T19481] ? trace_irq_disable+0x3b/0x150 [ 433.588210][T19481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.588236][T19481] ? clear_bhb_loop+0x40/0x90 [ 433.588265][T19481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.588289][T19481] RIP: 0033:0x7fb14939c799 [ 433.588312][T19481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.588333][T19481] RSP: 002b:00007fb14a304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.588359][T19481] RAX: ffffffffffffffda RBX: 00007fb149615fa0 RCX: 00007fb14939c799 [ 433.588377][T19481] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 433.588392][T19481] RBP: 00007fb14a304090 R08: 0000000000000000 R09: 0000000000000000 [ 433.588407][T19481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.588421][T19481] R13: 00007fb149616038 R14: 00007fb149615fa0 R15: 00007ffdb74c2f88 [ 433.588459][T19481] [ 433.857658][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.897125][T19486] wlan1 speed is unknown, defaulting to 1000 [ 433.907216][T19486] lo speed is unknown, defaulting to 1000 [ 433.930361][T19484] netlink: 'syz.4.3383': attribute type 21 has an invalid length. [ 433.981968][T19493] netlink: 'syz.4.3383': attribute type 21 has an invalid length. [ 433.990241][T19487] syzkaller1: entered promiscuous mode [ 434.006204][T19487] syzkaller1: entered allmulticast mode [ 434.516114][T19515] tipc: Enabled bearer , priority 0 [ 434.535585][T19515] syzkaller0: entered promiscuous mode [ 434.545504][T19515] syzkaller0: entered allmulticast mode [ 434.644844][T19515] tipc: Resetting bearer [ 434.710739][T19522] tipc: Resetting bearer [ 434.757460][T19522] tipc: Disabling bearer [ 434.800336][T19528] Bluetooth: MGMT ver 1.23 [ 434.964382][T19535] bridge2: entered promiscuous mode [ 435.252243][T19555] netlink: 'syz.1.3403': attribute type 39 has an invalid length. [ 435.331550][T19558] __nla_validate_parse: 9 callbacks suppressed [ 435.331580][T19558] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3403'. [ 435.347371][T19558] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3403'. [ 435.356854][T19558] netlink: 'syz.1.3403': attribute type 5 has an invalid length. [ 435.365180][T19558] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3403'. [ 435.545411][T19558] vlan2: entered allmulticast mode [ 435.618426][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3405'. [ 435.664778][T19574] ip6erspan0: entered allmulticast mode [ 436.161636][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 436.461282][T19592] 8021q: VLANs not supported on vxcan1 [ 436.587346][T19594] netlink: 'syz.4.3412': attribute type 15 has an invalid length. [ 437.000203][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 437.008278][ C0] lec:lec_tx_timeout: lec0 [ 437.016139][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 437.032001][T10859] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.530488][T19617] nbd2: detected capacity change from 0 to 63 [ 437.554059][T18263] block nbd2: Receive control failed (result -104) [ 437.555414][ T5830] block nbd2: Receive control failed (result -32) [ 437.570602][ T5145] block nbd2: Receive control failed (result -32) [ 437.570804][T19633] block nbd2: Receive control failed (result -32) [ 437.656625][T19636] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3422'. [ 437.726890][T19646] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3422'. [ 437.873526][T19648] wlan1 speed is unknown, defaulting to 1000 [ 437.891854][T19648] lo speed is unknown, defaulting to 1000 [ 437.941242][T19656] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 437.951082][T19656] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 438.011211][T19656] netlink: 'syz.1.3429': attribute type 1 has an invalid length. [ 438.034352][T19659] sctp: [Deprecated]: syz.2.3430 (pid 19659) Use of int in max_burst socket option. [ 438.034352][T19659] Use struct sctp_assoc_value instead [ 438.435579][T19673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3435'. [ 438.468908][T19673] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3435'. [ 438.798009][T19687] syzkaller0: entered promiscuous mode [ 438.805646][T19687] syzkaller0: entered allmulticast mode [ 438.840758][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 438.960524][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 439.024826][T19702] veth0_to_bridge: entered promiscuous mode [ 439.031675][T19702] macvtap1: entered promiscuous mode [ 439.037271][T19702] macvtap1: entered allmulticast mode [ 439.044229][T19702] veth0_to_bridge: entered allmulticast mode [ 440.522558][T19771] __nla_validate_parse: 6 callbacks suppressed [ 440.522579][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3458'. [ 440.614437][T19756] wlan1 speed is unknown, defaulting to 1000 [ 440.622311][T19766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3457'. [ 440.752000][T19779] netlink: 'syz.2.3460': attribute type 39 has an invalid length. [ 440.818664][T19756] lo speed is unknown, defaulting to 1000 [ 440.842095][T19761] wlan1 speed is unknown, defaulting to 1000 [ 440.953042][T19761] lo speed is unknown, defaulting to 1000 [ 441.006185][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 441.027559][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 441.196001][T19798] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 441.326553][T19801] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.703142][T19818] syzkaller1: entered promiscuous mode [ 441.719064][T19818] syzkaller1: entered allmulticast mode [ 441.746266][T19818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3471'. [ 441.768670][T19818] geneve2: entered promiscuous mode [ 442.030170][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 442.038294][ C0] lec:lec_tx_timeout: lec0 [ 442.044609][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 442.294742][T19838] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3477'. [ 444.942078][T19859] netlink: 'syz.4.3481': attribute type 1 has an invalid length. [ 445.137960][T19873] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3484'. [ 445.713433][T19854] wlan1 speed is unknown, defaulting to 1000 [ 445.757923][T19854] lo speed is unknown, defaulting to 1000 [ 446.573972][T19936] IPVS: sh: FWM 3 0x00000003 - no destination available [ 446.581880][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 446.593452][ T5881] IPVS: starting estimator thread 0... [ 446.672617][T19932] wlan1 speed is unknown, defaulting to 1000 [ 446.710089][T19937] IPVS: using max 24 ests per chain, 57600 per kthread [ 446.724339][T19932] lo speed is unknown, defaulting to 1000 [ 446.763960][T19943] sctp: [Deprecated]: syz.4.3501 (pid 19943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.763960][T19943] Use struct sctp_sack_info instead [ 447.050178][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 447.058270][ C0] lec:lec_tx_timeout: lec0 [ 447.063350][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 447.143454][T19957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3503'. [ 447.147546][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'. [ 447.257097][T19959] sctp: [Deprecated]: syz.2.3505 (pid 19959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.257097][T19959] Use struct sctp_sack_info instead [ 447.451352][T19969] Bluetooth: MGMT ver 1.23 [ 447.491644][T19972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 447.522113][T19972] veth1_macvtap: left promiscuous mode [ 447.697491][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'. [ 448.144354][T20002] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3513'. [ 448.493080][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 448.516305][T20013] ip6gretap0: entered promiscuous mode [ 448.584079][T20013] ip6gretap0: left promiscuous mode [ 448.748317][T20024] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3521'. [ 448.801508][T20024] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3521'. [ 449.075302][T20038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3524'. [ 449.080830][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.395413][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3527'. [ 449.432425][T20055] wlan1 speed is unknown, defaulting to 1000 [ 449.463633][T20055] lo speed is unknown, defaulting to 1000 [ 449.479340][T20063] lo: entered promiscuous mode [ 449.577429][T20031] infiniband !yz!: set active [ 449.612209][T20031] infiniband !yz!: added team_slave_0 [ 449.628346][T20065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.664303][T20031] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 449.674756][T20031] infiniband !yz!: Couldn't open port 1 [ 449.786908][T20031] RDS/IB: !yz!: added [ 449.795130][T20031] smc: adding ib device !yz! with port count 1 [ 449.808619][T20031] smc: ib device !yz! port 1 has no pnetid [ 449.831447][T20065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.995483][T20065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.286844][T20065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.389989][T20055] lo: left promiscuous mode [ 450.589207][T20075] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 450.763795][T10859] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.844799][T10856] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.911024][T10856] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.979548][T10849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.516969][T20127] bridge_slave_0: left allmulticast mode [ 451.525497][T20127] bridge_slave_0: left promiscuous mode [ 451.534567][T20127] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.617968][T20127] bridge_slave_1: left allmulticast mode [ 451.646036][T20127] bridge_slave_1: left promiscuous mode [ 451.665655][T20127] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.738116][T20127] bond0: (slave bond_slave_0): Releasing backup interface [ 451.757370][T20127] bond0: (slave bond_slave_1): Releasing backup interface [ 451.837706][T20127] team0: Port device team_slave_0 removed [ 451.861063][T20127] team0: Port device team_slave_1 removed [ 451.880378][T20127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.887948][T20127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.919364][T20127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.938918][T20127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.961942][T20127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.069902][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 452.078171][ C0] lec:lec_tx_timeout: lec0 [ 452.083093][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 452.270334][T20151] delete_channel: no stack [ 452.657464][T20177] __nla_validate_parse: 1 callbacks suppressed [ 452.657485][T20177] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.3550'. [ 452.713964][T20178] syzkaller1: entered promiscuous mode [ 452.735235][T20178] syzkaller1: entered allmulticast mode [ 452.916984][T20187] netlink: 'syz.0.3553': attribute type 1 has an invalid length. [ 452.970952][T20187] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3553'. [ 453.006592][T20187] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3553'. [ 454.058204][T20236] netlink: 'syz.2.3566': attribute type 15 has an invalid length. [ 454.337767][T20250] netlink: 'syz.1.3570': attribute type 21 has an invalid length. [ 454.358874][T20250] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3570'. [ 454.378823][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3570'. [ 454.566372][T20261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3571'. [ 454.621861][T20264] netlink: 'syz.2.3574': attribute type 3 has an invalid length. [ 454.656878][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3571'. [ 454.835851][T20270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3576'. [ 454.998012][T20276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.684654][T20297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3585'. [ 456.094435][T20237] wlan1 speed is unknown, defaulting to 1000 [ 456.130063][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 456.156305][T20237] lo speed is unknown, defaulting to 1000 [ 456.191814][T20258] wlan1 speed is unknown, defaulting to 1000 [ 456.372995][T20258] lo speed is unknown, defaulting to 1000 [ 456.916009][T20313] wlan1 speed is unknown, defaulting to 1000 [ 456.939031][T20313] lo speed is unknown, defaulting to 1000 [ 457.091992][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 457.100107][ C0] lec:lec_tx_timeout: lec0 [ 457.109935][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 457.170913][T20326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3594'. [ 457.284989][T20336] netlink: 'syz.1.3597': attribute type 1 has an invalid length. [ 457.305316][T20337] gretap0: entered promiscuous mode [ 457.330213][T20337] vlan2: entered promiscuous mode [ 458.190164][T20370] __nla_validate_parse: 1 callbacks suppressed [ 458.190186][T20370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3602'. [ 458.453050][T20377] netlink: 145 bytes leftover after parsing attributes in process `syz.1.3605'. [ 458.897739][T20393] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 458.947309][T20402] sctp: [Deprecated]: syz.4.3613 (pid 20402) Use of int in max_burst socket option. [ 458.947309][T20402] Use struct sctp_assoc_value instead [ 458.960403][T20393] netlink: 'syz.3.3610': attribute type 2 has an invalid length. [ 459.000363][T20393] netlink: 'syz.3.3610': attribute type 3 has an invalid length. [ 459.068124][T20405] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 459.080371][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 459.130223][T20405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.235899][T20415] bond1: (slave ip6erspan0): making interface the new active one [ 459.246759][T20415] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 459.376260][T20421] netlink: 'syz.1.3619': attribute type 4 has an invalid length. [ 459.406014][T20421] netlink: 'syz.1.3619': attribute type 4 has an invalid length. [ 459.584760][T20427] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.592880][T20427] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.708494][T20427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.721819][T20427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.820981][T20447] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 459.865200][T20429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3618'. [ 459.947191][T20447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.955076][T10859] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.983099][T10859] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.031062][T20439] bond3: (slave veth5): Enslaving as an active interface with a down link [ 460.059409][T10859] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.076087][T10859] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.162331][T20458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3626'. [ 460.245379][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'. [ 460.267605][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'. [ 460.280445][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'. [ 460.289359][T20462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3628'. [ 460.312193][T20467] netlink: 'syz.4.3629': attribute type 1 has an invalid length. [ 460.340021][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'. [ 460.487751][T20467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.643116][T20472] bond4: (slave veth7): Enslaving as an active interface with a down link [ 460.693840][T20481] netlink: 'syz.0.3632': attribute type 1 has an invalid length. [ 460.745017][T20477] bond4: (slave dummy0): making interface the new active one [ 460.774715][T20477] dummy0: entered promiscuous mode [ 460.792741][T20477] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 460.806152][T20484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.829073][T20467] bond4: (slave dummy0): Releasing active interface [ 460.846360][T20467] dummy0 (unregistering): left promiscuous mode [ 460.917554][T20481] m1Ie5: entered promiscuous mode [ 461.649224][T20514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.119903][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 462.128052][ C0] lec:lec_tx_timeout: lec0 [ 462.133260][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 462.158774][T20540] wlan1 speed is unknown, defaulting to 1000 [ 462.172484][T20540] lo speed is unknown, defaulting to 1000 [ 462.448628][T19633] block nbd3: Receive control failed (result -1) [ 463.045010][T20589] tipc: Started in network mode [ 463.052569][T20589] tipc: Node identity ac14140f, cluster identity 4711 [ 463.059653][T20589] tipc: New replicast peer: 255.255.255.255 [ 463.100715][T20589] tipc: Enabled bearer , priority 10 [ 463.134575][T20587] wlan1 speed is unknown, defaulting to 1000 [ 463.144633][T20587] lo speed is unknown, defaulting to 1000 [ 463.955878][T20612] __nla_validate_parse: 11 callbacks suppressed [ 463.955899][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3667'. [ 464.030842][T20612] veth1_macvtap: left promiscuous mode [ 464.107555][T20614] netlink: 'syz.2.3668': attribute type 3 has an invalid length. [ 464.200770][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3669'. [ 464.220889][ T29] tipc: Node number set to 2886997007 [ 464.256212][T20618] netlink: 'syz.3.3670': attribute type 7 has an invalid length. [ 464.352037][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3671'. [ 464.571306][T20631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3674'. [ 464.626796][T20631] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.701245][T20631] bridge_slave_0 (unregistering): left allmulticast mode [ 464.723034][T20631] bridge_slave_0 (unregistering): left promiscuous mode [ 464.738320][T20631] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.119717][T20651] wlan1 speed is unknown, defaulting to 1000 [ 465.134903][T20651] lo speed is unknown, defaulting to 1000 [ 465.236477][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 465.269038][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 465.339302][T20673] netlink: 'syz.4.3684': attribute type 1 has an invalid length. [ 465.387976][T20673] netlink: 'syz.4.3684': attribute type 1 has an invalid length. [ 465.420848][T20673] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.3684'. [ 465.694270][T20698] netlink: 'syz.4.3688': attribute type 1 has an invalid length. [ 465.728482][T20698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3688'. [ 465.902218][T20707] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3692'. [ 465.930605][T20707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3692'. [ 466.173366][T20725] netlink: 'syz.0.3696': attribute type 34 has an invalid length. [ 466.260222][T20725] syzkaller0: entered promiscuous mode [ 466.265885][T20725] syzkaller0: entered allmulticast mode [ 466.815783][T20757] ip6t_srh: unknown srh match flags 4000 [ 467.031027][T20772] syzkaller0: entered promiscuous mode [ 467.040454][T20772] syzkaller0: entered allmulticast mode [ 467.149844][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 467.157964][ C0] lec:lec_tx_timeout: lec0 [ 467.166168][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 467.682556][ T1612] block nbd2: Connection timed out, retrying (0/4 alive) [ 467.693029][ T1612] block nbd2: Connection timed out, retrying (0/4 alive) [ 467.700839][ T1612] block nbd2: Connection timed out, retrying (0/4 alive) [ 467.708145][ T1612] block nbd2: Connection timed out, retrying (0/4 alive) [ 467.717537][ T11] block nbd2: Dead connection, failed to find a fallback [ 467.726973][ T11] block nbd2: shutting down sockets [ 467.735182][ T11] blk_print_req_error: 138 callbacks suppressed [ 467.735204][ T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 467.754415][ T11] buffer_io_error: 138 callbacks suppressed [ 467.754434][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 467.768857][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 467.779014][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 467.787369][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 467.796939][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 467.805204][ T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 467.815233][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 467.825208][ T6022] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 467.850268][ T6022] Buffer I/O error on dev nbd2, logical block 0, async page read [ 467.918870][ T6022] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 467.988118][ T6022] Buffer I/O error on dev nbd2, logical block 1, async page read [ 468.030532][ T6022] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.050311][T10852] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.079500][ T6022] Buffer I/O error on dev nbd2, logical block 2, async page read [ 468.098176][ T6022] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.132639][ T6022] Buffer I/O error on dev nbd2, logical block 3, async page read [ 468.160170][ T6022] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.190398][ T6022] Buffer I/O error on dev nbd2, logical block 0, async page read [ 468.221530][ T6022] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.241227][T20825] : renamed from vlan1 [ 468.251257][ T6022] Buffer I/O error on dev nbd2, logical block 1, async page read [ 468.266586][ T6022] ldm_validate_partition_table(): Disk read failed. [ 468.300843][ T6022] Dev nbd2: unable to read RDB block 0 [ 468.341388][ T6022] nbd2: unable to read partition table [ 468.369145][ T6022] ldm_validate_partition_table(): Disk read failed. [ 468.377366][ T6022] Dev nbd2: unable to read RDB block 0 [ 468.406987][T20833] tipc: Enabled bearer , priority 0 [ 468.414502][ T6022] nbd2: unable to read partition table [ 468.467572][T20835] syzkaller0: entered promiscuous mode [ 468.480008][T20835] syzkaller0: entered allmulticast mode [ 468.508938][T20828] tipc: Resetting bearer [ 468.591457][T20824] tipc: Resetting bearer [ 468.651666][T20845] netlink: 'syz.1.3729': attribute type 12 has an invalid length. [ 468.662744][T20824] tipc: Disabling bearer [ 468.992971][T20857] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 469.014477][T20857] netlink: 'syz.4.3733': attribute type 4 has an invalid length. [ 469.039758][T20857] __nla_validate_parse: 11 callbacks suppressed [ 469.039779][T20857] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3733'. [ 469.048283][T20862] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 469.086515][T20862] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3733'. [ 469.184064][T20866] validate_nla: 1 callbacks suppressed [ 469.184090][T20866] netlink: 'syz.3.3735': attribute type 2 has an invalid length. [ 469.234319][T20866] netlink: 'syz.3.3735': attribute type 8 has an invalid length. [ 469.284991][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'. [ 469.288467][T20866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3735'. [ 469.299236][T20869] openvswitch: netlink: Unknown nsh attribute 0 [ 469.624018][T20888] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3740'. [ 469.755003][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3743'. [ 469.765219][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3743'. [ 469.861253][T20898] wlan1 speed is unknown, defaulting to 1000 [ 469.871656][T20903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3746'. [ 469.918527][T20898] lo speed is unknown, defaulting to 1000 [ 470.622514][T20929] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 470.943215][T20941] netlink: 'syz.4.3757': attribute type 2 has an invalid length. [ 470.962511][T20941] netlink: 'syz.4.3757': attribute type 8 has an invalid length. [ 470.977073][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3757'. [ 470.995762][T20935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3755'. [ 471.846987][T20967] openvswitch: netlink: IP tunnel TTL not specified. [ 472.026435][T20978] syzkaller1: entered promiscuous mode [ 472.067267][T20978] syzkaller1: entered allmulticast mode [ 472.991034][T21017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.006376][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 473.006413][ C0] lec:lec_tx_timeout: lec0 [ 473.014920][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 473.598334][T21055] x_tables: duplicate underflow at hook 3 [ 473.617885][T21055] x_tables: duplicate underflow at hook 2 [ 473.655699][T21057] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 474.261043][T21075] __nla_validate_parse: 12 callbacks suppressed [ 474.261066][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3797'. [ 474.293547][T21075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3797'. [ 474.462638][T21082] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 474.714588][T21090] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 474.881429][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3803'. [ 474.971381][T21100] netlink: 'syz.0.3803': attribute type 13 has an invalid length. [ 474.989581][T21100] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3803'. [ 475.248051][T21107] bond1: entered promiscuous mode [ 475.271445][T21113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3806'. [ 475.283935][T21107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.392768][T21123] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 475.433357][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 475.531490][T21136] netlink: 'syz.1.3815': attribute type 13 has an invalid length. [ 475.550540][T21136] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.3815'. [ 476.007249][T21166] syzkaller0: entered promiscuous mode [ 476.013345][T21166] syzkaller0: entered allmulticast mode [ 476.025917][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3828'. [ 476.060518][T21168] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3828'. [ 476.938255][T21216] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 476.951476][T21166] [ 476.953969][T21166] ====================================================== [ 476.961074][T21166] WARNING: possible circular locking dependency detected [ 476.968235][T21166] syzkaller #0 Not tainted [ 476.972689][T21166] ------------------------------------------------------ [ 476.980170][T21166] syz.2.3827/21166 is trying to acquire lock: [ 476.986270][T21166] ffffffff8e882e40 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 476.996256][T21166] [ 476.996256][T21166] but task is already holding lock: [ 477.003663][T21166] ffff8880584c8260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 477.012630][T21166] [ 477.012630][T21166] which lock already depends on the new lock. [ 477.012630][T21166] [ 477.023226][T21166] [ 477.023226][T21166] the existing dependency chain (in reverse order) is: [ 477.032285][T21166] [ 477.032285][T21166] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 477.040165][T21166] lock_sock_nested+0x41/0x100 [ 477.045600][T21166] inet_shutdown+0x6a/0x390 [ 477.050753][T21166] nbd_mark_nsock_dead+0x2e9/0x560 [ 477.056537][T21166] recv_work+0x1c7f/0x1d90 [ 477.061516][T21166] process_scheduled_works+0xb02/0x1830 [ 477.067691][T21166] worker_thread+0xa50/0xfc0 [ 477.072835][T21166] kthread+0x388/0x470 [ 477.077467][T21166] ret_from_fork+0x51e/0xb90 [ 477.082630][T21166] ret_from_fork_asm+0x1a/0x30 [ 477.088029][T21166] [ 477.088029][T21166] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 477.095704][T21166] __mutex_lock+0x19f/0x1300 [ 477.100931][T21166] nbd_queue_rq+0x37b/0x1100 [ 477.106068][T21166] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 477.112299][T21166] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 477.119208][T21166] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 477.125908][T21166] blk_mq_run_hw_queue+0x348/0x4f0 [ 477.131617][T21166] blk_mq_dispatch_list+0xd16/0xe10 [ 477.137355][T21166] blk_mq_flush_plug_list+0x48d/0x570 [ 477.143265][T21166] __blk_flush_plug+0x3ed/0x4d0 [ 477.148906][T21166] __submit_bio+0x28d/0x580 [ 477.154001][T21166] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 477.160259][T21166] block_read_full_folio+0x599/0x830 [ 477.166124][T21166] filemap_read_folio+0x137/0x3b0 [ 477.171711][T21166] do_read_cache_folio+0x358/0x590 [ 477.177374][T21166] read_part_sector+0xb6/0x2b0 [ 477.182742][T21166] adfspart_check_ICS+0xa5/0xa40 [ 477.188220][T21166] bdev_disk_changed+0x7ba/0x1550 [ 477.193803][T21166] blkdev_get_whole+0x380/0x510 [ 477.199258][T21166] bdev_open+0x31e/0xd30 [ 477.204039][T21166] blkdev_open+0x470/0x610 [ 477.209040][T21166] do_dentry_open+0x785/0x14e0 [ 477.214371][T21166] vfs_open+0x3b/0x340 [ 477.218989][T21166] path_openat+0x2e08/0x3860 [ 477.224158][T21166] do_file_open+0x23e/0x4a0 [ 477.229205][T21166] do_sys_openat2+0x113/0x200 [ 477.234430][T21166] __x64_sys_openat+0x138/0x170 [ 477.239833][T21166] do_syscall_64+0x14d/0xf80 [ 477.244991][T21166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.251524][T21166] [ 477.251524][T21166] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 477.258777][T21166] __mutex_lock+0x19f/0x1300 [ 477.263914][T21166] nbd_queue_rq+0xc6/0x1100 [ 477.268976][T21166] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 477.275168][T21166] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 477.282052][T21166] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 477.288680][T21166] blk_mq_run_hw_queue+0x348/0x4f0 [ 477.294359][T21166] blk_mq_dispatch_list+0xd16/0xe10 [ 477.300108][T21166] blk_mq_flush_plug_list+0x48d/0x570 [ 477.306112][T21166] __blk_flush_plug+0x3ed/0x4d0 [ 477.311509][T21166] __submit_bio+0x28d/0x580 [ 477.316557][T21166] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 477.322736][T21166] block_read_full_folio+0x599/0x830 [ 477.328567][T21166] filemap_read_folio+0x137/0x3b0 [ 477.334133][T21166] do_read_cache_folio+0x358/0x590 [ 477.339931][T21166] read_part_sector+0xb6/0x2b0 [ 477.345251][T21166] adfspart_check_ICS+0xa5/0xa40 [ 477.350747][T21166] bdev_disk_changed+0x7ba/0x1550 [ 477.356321][T21166] blkdev_get_whole+0x380/0x510 [ 477.361806][T21166] bdev_open+0x31e/0xd30 [ 477.366593][T21166] blkdev_open+0x470/0x610 [ 477.371556][T21166] do_dentry_open+0x785/0x14e0 [ 477.376870][T21166] vfs_open+0x3b/0x340 [ 477.381481][T21166] path_openat+0x2e08/0x3860 [ 477.386608][T21166] do_file_open+0x23e/0x4a0 [ 477.391765][T21166] do_sys_openat2+0x113/0x200 [ 477.397074][T21166] __x64_sys_openat+0x138/0x170 [ 477.402514][T21166] do_syscall_64+0x14d/0xf80 [ 477.407747][T21166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.414181][T21166] [ 477.414181][T21166] -> #3 (set->srcu){.+.+}-{0:0}: [ 477.421418][T21166] __synchronize_srcu+0xca/0x3e0 [ 477.426909][T21166] elevator_switch+0x1e8/0x7a0 [ 477.432208][T21166] elevator_change+0x2cc/0x450 [ 477.437510][T21166] elevator_set_default+0x36c/0x430 [ 477.443241][T21166] blk_register_queue+0x366/0x430 [ 477.448816][T21166] __add_disk+0x677/0xd50 [ 477.453685][T21166] add_disk_fwnode+0xfb/0x480 [ 477.458905][T21166] nbd_dev_add+0x72c/0xb50 [ 477.463884][T21166] nbd_init+0x168/0x1f0 [ 477.468760][T21166] do_one_initcall+0x250/0x8d0 [ 477.474077][T21166] do_initcall_level+0x104/0x190 [ 477.479634][T21166] do_initcalls+0x59/0xa0 [ 477.484514][T21166] kernel_init_freeable+0x2a6/0x3e0 [ 477.490259][T21166] kernel_init+0x1d/0x1d0 [ 477.495138][T21166] ret_from_fork+0x51e/0xb90 [ 477.500273][T21166] ret_from_fork_asm+0x1a/0x30 [ 477.505582][T21166] [ 477.505582][T21166] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 477.513429][T21166] __mutex_lock+0x19f/0x1300 [ 477.518605][T21166] elevator_change+0x1b3/0x450 [ 477.523905][T21166] elevator_set_none+0xb5/0x140 [ 477.529303][T21166] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 477.535667][T21166] nbd_start_device+0x17f/0xb10 [ 477.541087][T21166] nbd_genl_connect+0x165b/0x1cf0 [ 477.546683][T21166] genl_family_rcv_msg_doit+0x22a/0x330 [ 477.552775][T21166] genl_rcv_msg+0x61c/0x7a0 [ 477.557828][T21166] netlink_rcv_skb+0x232/0x4b0 [ 477.563221][T21166] genl_rcv+0x28/0x40 [ 477.567749][T21166] netlink_unicast+0x80f/0x9b0 [ 477.573056][T21166] netlink_sendmsg+0x813/0xb40 [ 477.578370][T21166] ____sys_sendmsg+0x972/0x9f0 [ 477.583747][T21166] ___sys_sendmsg+0x2a5/0x360 [ 477.588969][T21166] __x64_sys_sendmsg+0x1bd/0x2a0 [ 477.594449][T21166] do_syscall_64+0x14d/0xf80 [ 477.599676][T21166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.606110][T21166] [ 477.606110][T21166] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 477.614824][T21166] blk_alloc_queue+0x546/0x680 [ 477.620136][T21166] __blk_mq_alloc_disk+0x197/0x390 [ 477.625824][T21166] nbd_dev_add+0x499/0xb50 [ 477.630789][T21166] nbd_init+0x168/0x1f0 [ 477.635485][T21166] do_one_initcall+0x250/0x8d0 [ 477.640828][T21166] do_initcall_level+0x104/0x190 [ 477.646315][T21166] do_initcalls+0x59/0xa0 [ 477.651186][T21166] kernel_init_freeable+0x2a6/0x3e0 [ 477.656944][T21166] kernel_init+0x1d/0x1d0 [ 477.661815][T21166] ret_from_fork+0x51e/0xb90 [ 477.666962][T21166] ret_from_fork_asm+0x1a/0x30 [ 477.672282][T21166] [ 477.672282][T21166] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 477.679518][T21166] __lock_acquire+0x15a5/0x2cf0 [ 477.684922][T21166] lock_acquire+0xf0/0x2e0 [ 477.689884][T21166] fs_reclaim_acquire+0x71/0x100 [ 477.695379][T21166] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 477.701904][T21166] __alloc_skb+0x1d0/0x7d0 [ 477.706863][T21166] tcp_send_active_reset+0x8a/0x5d0 [ 477.712686][T21166] __tcp_close+0x4c5/0xfe0 [ 477.717683][T21166] tcp_close+0x28/0x110 [ 477.722388][T21166] inet_release+0x143/0x190 [ 477.727797][T21166] sock_close+0xc3/0x240 [ 477.732583][T21166] __fput+0x44f/0xa70 [ 477.737138][T21166] task_work_run+0x1d9/0x270 [ 477.742286][T21166] get_signal+0x11eb/0x1330 [ 477.747343][T21166] arch_do_signal_or_restart+0xbc/0x830 [ 477.753574][T21166] exit_to_user_mode_loop+0x86/0x480 [ 477.759422][T21166] do_syscall_64+0x32d/0xf80 [ 477.764571][T21166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.771007][T21166] [ 477.771007][T21166] other info that might help us debug this: [ 477.771007][T21166] [ 477.781250][T21166] Chain exists of: [ 477.781250][T21166] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 477.781250][T21166] [ 477.794241][T21166] Possible unsafe locking scenario: [ 477.794241][T21166] [ 477.801714][T21166] CPU0 CPU1 [ 477.807110][T21166] ---- ---- [ 477.812511][T21166] lock(sk_lock-AF_INET6); [ 477.817058][T21166] lock(&nsock->tx_lock); [ 477.824025][T21166] lock(sk_lock-AF_INET6); [ 477.831080][T21166] lock(fs_reclaim); [ 477.835179][T21166] [ 477.835179][T21166] *** DEADLOCK *** [ 477.835179][T21166] [ 477.843339][T21166] 2 locks held by syz.2.3827/21166: [ 477.848569][T21166] #0: ffff888059fd07c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 477.858970][T21166] #1: ffff8880584c8260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 477.868142][T21166] [ 477.868142][T21166] stack backtrace: [ 477.874044][T21166] CPU: 0 UID: 0 PID: 21166 Comm: syz.2.3827 Not tainted syzkaller #0 PREEMPT(full) [ 477.874067][T21166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.874079][T21166] Call Trace: [ 477.874088][T21166] [ 477.874097][T21166] dump_stack_lvl+0xe8/0x150 [ 477.874131][T21166] print_circular_bug+0x2e1/0x300 [ 477.874162][T21166] check_noncircular+0x12e/0x150 [ 477.874193][T21166] __lock_acquire+0x15a5/0x2cf0 [ 477.874218][T21166] ? __lock_acquire+0x6b5/0x2cf0 [ 477.874243][T21166] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.874265][T21166] lock_acquire+0xf0/0x2e0 [ 477.874286][T21166] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 477.874309][T21166] fs_reclaim_acquire+0x71/0x100 [ 477.874330][T21166] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 477.874348][T21166] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 477.874367][T21166] ? __alloc_skb+0x1d0/0x7d0 [ 477.874393][T21166] ? __local_bh_enable_ip+0xd0/0x130 [ 477.874418][T21166] __alloc_skb+0x1d0/0x7d0 [ 477.874444][T21166] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 477.874492][T21166] tcp_send_active_reset+0x8a/0x5d0 [ 477.874520][T21166] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 477.874543][T21166] __tcp_close+0x4c5/0xfe0 [ 477.874568][T21166] tcp_close+0x28/0x110 [ 477.874588][T21166] inet_release+0x143/0x190 [ 477.874616][T21166] sock_close+0xc3/0x240 [ 477.874638][T21166] ? __pfx_sock_close+0x10/0x10 [ 477.874660][T21166] __fput+0x44f/0xa70 [ 477.874691][T21166] task_work_run+0x1d9/0x270 [ 477.874711][T21166] ? __pfx_task_work_run+0x10/0x10 [ 477.874730][T21166] ? __fput_deferred+0x216/0x380 [ 477.874756][T21166] ? __pfx___fput_deferred+0x10/0x10 [ 477.874781][T21166] ? tcp_sendmsg+0x39/0x50 [ 477.874798][T21166] ? __local_bh_enable_ip+0xd0/0x130 [ 477.874822][T21166] get_signal+0x11eb/0x1330 [ 477.874845][T21166] ? __sys_sendto+0x598/0x710 [ 477.874926][T21166] ? do_futex+0x395/0x420 [ 477.874959][T21166] arch_do_signal_or_restart+0xbc/0x830 [ 477.874982][T21166] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 477.875012][T21166] exit_to_user_mode_loop+0x86/0x480 [ 477.875032][T21166] ? rcu_is_watching+0x15/0xb0 [ 477.875059][T21166] do_syscall_64+0x32d/0xf80 [ 477.875087][T21166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.875111][T21166] ? clear_bhb_loop+0x40/0x90 [ 477.875131][T21166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.875149][T21166] RIP: 0033:0x7ff90f59c799 [ 477.875167][T21166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.875183][T21166] RSP: 002b:00007ff9103a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.875203][T21166] RAX: 0000000000400000 RBX: 00007ff90f815fa0 RCX: 00007ff90f59c799 [ 477.875216][T21166] RDX: 00000000d0d0c2ac RSI: 0000200000000080 RDI: 000000000000000a [ 477.875228][T21166] RBP: 00007ff90f632c99 R08: 0000000000000000 R09: 0000000000000000 [ 477.875239][T21166] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 477.875250][T21166] R13: 00007ff90f816038 R14: 00007ff90f815fa0 R15: 00007ffd4d269188 [ 477.875271][T21166] [ 477.876646][T21197] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 478.030553][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 478.197148][ C0] lec:lec_tx_timeout: lec0 [ 478.202435][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 478.227597][T21221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3837'. [ 478.520011][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.959861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 483.968042][ C0] lec:lec_tx_timeout: lec0 [ 483.973359][ C0] lec:lec_start_xmit: lec0:No lecd attached