last executing test programs: 6m32.656091862s ago: executing program 4 (id=1644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, r3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x1c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0xe, 0x4, 0x9, 0x64}, {0x8, 0x3, 0x2, 0x611f}, {0x2, 0x0, 0x3, 0x80000000}, {0x48, 0xf, 0x6, 0x96ea}, {0x877, 0x5, 0x9, 0xfff}, {0xd8a, 0x0, 0xf4, 0x534}, {0x1ab, 0x4, 0x7, 0x742}, {0xa, 0x7, 0x6, 0x7f}]}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000940), &(0x7f00000009c0)=r1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310428bd7000fcdbdf251600000018000180140002006e657464657673696d3000000000000005000300fe0000007990a09fe24983099363afbe3cceb74c8f9060a20eb752a7223a22f81aec"], 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 6m32.513928039s ago: executing program 4 (id=1647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_emit_ethernet(0xf, &(0x7f0000000040)={@local, @remote, @void, {@generic={0x88f5, '\x00'}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x60600) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @mcast1}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x88004) 6m32.201835576s ago: executing program 4 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1b8, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_NAT={0x194, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x400c010}, 0x811) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffffc, {0x2}, [@nested={0xc, 0xbd, 0x0, 0x1, [@typed={0x8, 0x145, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @nested={0x4, 0x3e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 6m32.044088327s ago: executing program 4 (id=1657): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x600}, 0x0) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x23eefdfff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x4, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r4, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) 6m31.685099602s ago: executing program 4 (id=1660): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1, 0x101}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 6m31.540579182s ago: executing program 4 (id=1663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000052}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8055}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xa, 0x3ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r2, r2, 0x37, 0x2028, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) writev(r5, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}], 0x1) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xa9a2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6m15.969839382s ago: executing program 32 (id=1663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000052}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8055}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xa, 0x3ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r2, r2, 0x37, 0x2028, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) writev(r5, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}], 0x1) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc7223731787bda817113489be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa608ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c079350000008a27cfe092f2b6b3f29599c2fb70e4ff3b6406006f07985f711ffbac75353a4dd0485de8728ce21b970a69815cc9573bf823ac81cb5492fdb730d65febcc86fa51e69972400147308c9e1d4245519934af03cecad1281994e50fff10b517b8a4af87e2cfa0bda85534b381e26c6d0129a0331c4989de36a7ce1fd38038e435d28ea4301eedc52ca3395de54498a4ed8f7d9b777b482da2b69161db7996e196e172e594b5673e3f4c607f570daebc30e0a5fbeb25a0aeb3c6e875aff6aeb6c6865eef373bce286a5557f55e28c290c1780690f3f63e6fedb4d942ddc4182e335e52d0dfe0a26108234b51d77073ce17415ead4cd526952e38353834f71cf0afff05ca8239aab1927ac1453201dd18caa4316814554fca8f579a721476946beae9d9b763b2e42dc69658a0c5d67045028aeb1135e3fabf7b7aa76ec475a06a771bb914188f"], &(0x7f0000000100)='GPL\x00', 0xa9a2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.944257015s ago: executing program 5 (id=4690): syz_emit_ethernet(0x11, &(0x7f00000002c0)={@broadcast, @local, @void, {@llc={0x8864, {@llc={0x42, 0x0, '['}}}}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="a18027", 0x3}], 0x1, 0x0, 0x0, 0x404c080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}], 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xa, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x80}, 0x1, 0x7}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000514010026bd7000f5ffffff070001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@delqdisc={0x24, 0x26, 0x1f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x10c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf1732b70831bdc4f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000842) 2.622630591s ago: executing program 5 (id=4695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0xffffffffffffffc9, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40008, 0x30}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x425571adf4830372}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0xffffffffffffffc9, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40008, 0x30}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x425571adf4830372}, 0x24044884) (async) 2.310660046s ago: executing program 5 (id=4697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x9}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0xffffffff, 0x0, 0x20}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x20000}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x3, 0x0, 0x80, 0x7}, {{@in6=@mcast2, 0x3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0xffffffff}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@private2, 0x0, 0x5}]}]}, 0x23c}}, 0x0) 2.216346811s ago: executing program 3 (id=4699): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0xe0, 0x2b8, 0xb0000010, 0xe0, 0x5c8f0200, 0x1b0, 0x3a8, 0x3a8, 0x1b0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0, 0x700}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002d40)={'ip6tnl0\x00', &(0x7f0000002cc0)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x2, 0x3, 0x20, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0xf6620b64bddb4ffb, 0x3fd}}) (rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002f80)={0x0, @remote, @multicast1}, &(0x7f0000002fc0)=0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffffbff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffddc, {0x0, 0x0, 0x0, r9, {0xffe0}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x4, 0x0, 0x6}}]}}]}, 0x148}}, 0x8040) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="73f4", 0x2}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @local, 0x7a}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000200)="c2", 0x1}], 0x1}}], 0x2, 0xc010) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0, 0x1}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4815}, 0x0) r13 = socket$kcm(0x11, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r15, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x236}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd735362e4bc61914f291a898418ceeb9c7b62b2150c93a629d18e5a5032b098de85cda1f19e1479f35d4189736cde69a5da42390c0714f69d1cc78062b5e660f8cbb3", 0x58}], 0x3}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000003680)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001900), 0x0, &(0x7f0000001980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3a}}], 0x18}}, {{&(0x7f00000019c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002c80)=[{&(0x7f0000001a00)="780d9fe49846b2ab2915f8e182d2b3ef0be926aa170be14e9f7af33a1e584feb09695ce80d5e7bf902db0558109c10ea51dd908db0cfbc84b200f338907dd53982c45eaeb4f105d6d2c15c3864b2", 0x4e}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="5f44a18a80d2723ef0f107a658e4ec39fa29660379b82fbacb0425b643f1dd84effe809a1810b0fd3b8ec071f0051367f30a0d697f412e8561b61d09ef2d6dcd79a30a65f63a70fa8606d4178983416ddae066395a2a37b7a68c5461a9d8cb04d54951736b54ac6725b162d5e24f170b3cfd862a54d7be9ce233b2a85bb6b0af922e3c647cf90c45653df33e7160ebe5f7f35767eafac719df7a0d3e87b8622da6a5ac4252cc89e6c9515317ed56d7aaf1b4e6e035a4e779f38c00d719e3c6d6320a3d8038ce6ae787da20a1db1984083c0f6fdc2e09f4867b99a7d7357c5603e6aae4bd3b1207fca287fe46f21fd397329c07", 0xf3}, {&(0x7f0000002b80)="e28ed6c822db2d3b4ab283e4d91be29dab02199c9bd7fe4e40e01bf2a7a912bd685561c3d4369131f66ba236cf9826e2b40e77891084ae6fa72a5ea701da7edc0b01bd7f50d793340cfad36ea19dfc697ffe4b6b11f757cbd15f84a40a014ad67388560c79b0a163481d1a089d2fa8a23e92e7448545804ebc36378352bfa16e8cccba131acf3858b7d05c648cfcf6c4a071b285c504d39a843f0e8ac0a4d849b0e43d5a8c248c32867033912eacd3743c4a5158173aed6483a6f597869f4360eab09bc60fe03d12113aa01ea7ff2eec3594923ed5b438373011b9a933a24488ead38ea69cdaf55084f80cc60e", 0xed}], 0x4, &(0x7f0000002d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x13, 0x9b, [@broadcast, @empty, @loopback, @loopback]}, @generic={0x89, 0x5, "4272ae"}, @ssrr={0x89, 0x17, 0x18, [@remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @remote}}}], 0x78}}, {{&(0x7f0000002e00)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002f40)=[{&(0x7f0000002e40)="5b7b840bd44cc0abdb69cd0b3e244a0227cf8fb4314068fee319f0b7de494337eb127115a7cda0615099ca89d70b2ce2d6a6bac012b96959f0460bf1f3efc80f62fd9cf22f551d4d382649fbd7ec8918c745e7306be9e6c33ff60daf9b50cd4f1082e40d3be0357bec642ef984158112940e6f30a83c3d77d4273cea401853937c2bc3b9aab15accb1ef22a853919dcf4efa99adc22f9e64514ccb15982f037ad6dd6ee17385e09ce9316b7eff9b8c285e403e6763aa8b7ab42946c78198d4363eb06cced7ab4e", 0xc7}], 0x1, &(0x7f0000003000)=[@ip_ttl={{0x0, 0x0, 0x2, 0x7ff}}], 0x20}}, {{0x0, 0xff2e, &(0x7f0000003140)=[{&(0x7f0000003040)="8751c1da234bcf41483d1275284e9344048bf93f79151a32f89ce6d494a891aa38de88325236929c47db532a47ac53183fe04793197c06ca75bd23956d38c7e67f02a0eca2ed1a3a8d52", 0x4a}, {&(0x7f00000030c0)="64c21279efeaba69edc8732b169e13275ceb3a0fcfefa0dc4306ad607fbc82227cccd44ae72679b1c4233fc0785e3c9d8c49bacbef29f54e009ae5f84c350baa9da671", 0x43}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xd4, 0x1, 0x8, [{@empty, 0xa7}, {@empty, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xd0, 0x3, 0xc, [{@rand_addr=0x64010100, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0xb7, 0x3, 0x8, [{@private=0xa010102, 0x3ff}, {@multicast2, 0x4c5a2b7d}]}, @timestamp={0x44, 0xc, 0x10, 0x0, 0x0, [0x8, 0x1000]}, @ssrr={0x89, 0x7, 0x1d, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @noop, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe33}}, @ip_retopts={{0x98, 0x0, 0x7, {[@end, @rr={0x7, 0xb, 0xd8, [@remote, @multicast1]}, @ssrr={0x89, 0x17, 0xe4, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @timestamp_prespec={0x44, 0x2c, 0xbc, 0x3, 0x7, [{@remote, 0xfffff339}, {@loopback, 0x3ff}, {@private=0xa010101, 0x8}, {@broadcast, 0xf9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @end, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x6, 0xc, "2f3c83201d1bb34d3fe0"}, {0x2, 0x12, "9aa23779246c5c16fd84d37a1a4cb96e"}, {0x0, 0xb, "56e90924223454c63e"}, {0x7, 0x6, "bbcab680"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @private=0xa000102, @broadcast}}}], 0x168}}, {{&(0x7f0000003300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003480)=[{&(0x7f0000003340)="714ea3e294d1556c96fabd9bfc04c66ffd84b6d558230b419b7ea771598798353689718eb7ee9313fac3b1a866d782cbc05a5e43f2ce4f173770515c9d15a80295ee125124291913db0535b20e785b50f2c008420d1a38316f9b3781c9c87a", 0x5f}, {&(0x7f00000033c0)="6284baf470759119de8ebd2cf4f1126efaaf00dcd3a6b0d222d99d454b0596668e810b043fd7c9bcae5a043f9ef3e9cf17e8bb034ca6495411ea676553e37c7bf9614b72b48cdcbc7067413dbc272fc1075a45ff0d0b00339f7ca284b5562935bd323f0af84a6f6207854dc0807f56793d80ce4036edf9b81e9f0e40360aa8681f49e06b870a35d44b5ee1dfdbf6dbc85b3d58720521d9528a4206076d7e98a1e416b6cad93809eaf07b141a51044a36299a55b27397f1110b", 0xb9}], 0x2, &(0x7f00000034c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @rand_addr=0x64010102, @multicast2}}}], 0x20}}, {{&(0x7f0000003500)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003540)="fd09316d70ae9ac3fa9165e5e8d369068b74625142aed2bc22d8ca690f8e538a33528c24bf1c01985358ea262b8e5250e57c4a537d106e0aa0ea8788c3aa50672e5cc631b73a0d73fcbe2177acb3979d3b63b1a150bc813e6367c9a90b85ace1fc47fd2cc747bef4d3cceec01d7dfa08a287045aa6f7224bd3a13893cb5cdde3e533a0100c041d5a97327101b4288a6bd7027ebdc7d22a578134dc9f5587eda377300f860cc7ac653bc6f2e9d7bda5cb52eaf885b6fe891c50726c821fc21c20f2402ef77a5a88f4b8ea91adf9fe2e2f477286395d3bc81d7d3c4825441c52c311779cb945ee019579c13181d1e3f5bb5da1d55a20dcd1e868ad001bde4d", 0xfe}], 0x1}}], 0x6, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004854}, 0x0) 2.029812388s ago: executing program 5 (id=4701): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x2, r1}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r4}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000107000000002c00018014000300fe800000000000000000000000000000140004"], 0x50}}, 0x0) 1.95543149s ago: executing program 2 (id=4702): r0 = socket(0x10, 0x803, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50583}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) 1.878473176s ago: executing program 3 (id=4704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x39241}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newchain={0x70, 0x1e, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf4}}, @filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_ctinfo={0x30, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000820}, 0x44004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000000008000700260939e614000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1.619139974s ago: executing program 3 (id=4705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x490, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x5, 0x3, 0x5, 0x1, 0x401, 0x4, 0x9, 0x800, 0x0, 0x81, 0x9e, 0x4, 0x6, 0x5, 0x8, 0xd897, 0x7f, 0x4, 0x3, 0x9, 0x1346, 0x5, 0x8001, 0x3, 0x8, 0xdb, 0x1, 0x3f9, 0x7ff, 0x10001, 0xf5, 0x4, 0x2, 0x3, 0x9, 0x1, 0x3, 0x610, 0x8001, 0xc66, 0x6, 0x4, 0x10000, 0x80000001, 0x80000001, 0x6, 0x3a6, 0xffff3779, 0x5, 0xd, 0x4, 0x70, 0x800, 0x9, 0x401, 0x1, 0xb5, 0x8, 0xe3f, 0x9, 0x4, 0x810c, 0xa8, 0xfffffffb, 0x70, 0x2, 0x8c2f, 0x4, 0x2, 0xa, 0x100, 0xffff, 0x1, 0x6b0, 0x2, 0x6, 0x0, 0x77, 0x99, 0x7, 0x6, 0xe, 0xd5, 0x4000000, 0x7, 0x81, 0x5, 0x80, 0x4, 0x2, 0x5, 0x7, 0x3, 0x7, 0x2, 0xf, 0xebc0, 0x7, 0x6, 0xffff0001, 0xff, 0x8000, 0x0, 0x40, 0x200, 0x1, 0x7, 0xb, 0x7fff, 0xfff, 0x7, 0x1, 0xfffffff0, 0x9, 0xa92, 0x7, 0x1, 0x101, 0x8, 0x1, 0x1, 0xf91c, 0x6, 0xff, 0x6, 0xfffff001, 0x2, 0x26, 0x2, 0x90c, 0x5111, 0x2, 0x1, 0x6, 0x6, 0x9, 0xffffffff, 0x7, 0x4, 0x0, 0xc, 0x0, 0x7, 0x7, 0x8a, 0x5, 0xfffffffc, 0x80000001, 0x9, 0x7, 0xe, 0x8, 0x7, 0x8, 0x6, 0x3, 0x9, 0x4, 0x101, 0x4, 0x4c4, 0x3, 0x6, 0x9, 0x5, 0xa06, 0x0, 0x1e, 0x6, 0x4, 0x4, 0xb90, 0x5, 0xffff, 0xffff880e, 0x80000000, 0x101, 0x4, 0x1, 0xfffffff1, 0x1, 0x4, 0x800, 0xfffffdc1, 0xffffffff, 0x8, 0x5854, 0x2, 0xb81, 0x0, 0xfffff001, 0x4, 0x6, 0x8, 0x0, 0x7, 0x40, 0x6, 0x7, 0xc0e, 0x6, 0x81, 0x7, 0x37b1, 0x7c, 0xfe06409, 0x6c, 0x0, 0x2da1, 0x4, 0x0, 0x9, 0xff, 0x4, 0x1ff, 0xd, 0x2, 0x80000001, 0x8, 0x81, 0x7, 0x6, 0x20080, 0x7, 0x1, 0x1c3d4fab, 0x6, 0x3, 0xeaa7, 0x0, 0x3, 0x7f, 0x3, 0xa6, 0x1, 0x1, 0x8, 0x2, 0x8a1, 0x3, 0x3, 0x10000, 0x5, 0xd, 0x7, 0x23, 0x3, 0xc0000000, 0x7, 0x5, 0x7f, 0x3ff, 0x38, 0x1000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x3, 0xfffffff8, 0x8, 0xffff0000, {0xf, 0x2, 0x3, 0x5, 0x0, 0x8}, {0x8, 0x0, 0x6, 0x7, 0x8}, 0x1a496f8d, 0x9, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0x1000000dd41, 0x10000000001, 0x3c, 0x27, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="cd7040b3034a908ecf585f2b7e88de49a79891eeee8c4cc0978aa890e9f8b21e3263db2af7fdd6d10d4a5b899a76529d0ba923765ced315326ff0dabf8e4a956e70fff97eb52347dbcf5d318c3b4b209934dd86f8ac80174056de4780a5b3e2f2c7f3109078e32e6228b1393afb904ec12cdafbf748ee639a56d43c16e23a1275ae577fc1817ab12d58edae13c0846558cfdbaa05c98d4bc43a1a9fcf932f02bdaf74372", @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES16=r1], 0xfdef) 1.474529353s ago: executing program 2 (id=4706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x1, 0x8, 0x8, 0x5, {{0x1f, 0x4, 0x3, 0x3a, 0x7c, 0x64, 0x0, 0x10, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @generic={0x44, 0xc, "fda13e5689cd90f8221a"}, @timestamp_prespec={0x44, 0x54, 0x9b, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@loopback, 0x1}, {@loopback, 0xb}, {@broadcast, 0xbd2}, {@loopback, 0x200}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x52}, {@multicast2, 0x216f3a3f}, {@rand_addr=0x64010100, 0xfffffffd}, {@multicast2, 0xe}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0xc, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x8, 0x8000, 0xee2, 0x8a2}}) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0x6e}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4091, 0xffb}], 0x3}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000001480), &(0x7f00000014c0)=0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40820000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8841) 1.474188334s ago: executing program 1 (id=4707): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xfffffe24}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000002e00090027040000000000000400000004000e00"], 0x18}}, 0x0) 1.207107915s ago: executing program 5 (id=4709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$sock(r1, &(0x7f0000001f40)=[{{&(0x7f00000003c0)=@isdn={0x22, 0x40, 0x1, 0xd, 0x8}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="1a4c2db4f79ee1468008677560ca575c3bbc6a9e927dc6da240a222e85b7f5a08480c157c8435ea428faae58a37d144192e655cd84d975332ea8eb31a724cb6ad3a75d8102515390f943bb5cbf4357fada08282464ce62aa57da8237e813acad2ceb286a807fcccbc11ce768c97ff331577c1747e955b3bb13a8be014f0fc5d73be44e3f0a49b71e61824755a5a2004dc749c60ee2c25d59e74c80e59e2da813be4503fa4b302bba99876f70d8bb62a3", 0xb0}, {&(0x7f0000001c00)="0bb66b14a725744c0f6242bf8f0e8740aa7f0ac4807ef750be1902ae2f05409dcdfbc2b626380da596dc8857bf9d340acde37869c1da79b26e25f3dd007b90a39ec4abab88e984e8b4ea5364618c6db577388b4f5fbd19498a121b2ae7375e6d2fa74e8a1aeacc3452b46c63cf90a28ec99b05fb922012c6d0d1c598266f0bf8b67e32b18d21b4ef40877b3daaf86293193d7aa977565557be757632e631769c7969792c7767e061f185c380f1fc00989a2d4ff19e5200d70b0aa14065c1133c84b76e12c02c0d7e48a442668f442cc5c6d5a54a3964f9da5470806dc95d2697ea1755ca", 0xe4}, {&(0x7f0000001d00)="68c992712520c9b5ce31cb30080a1cedfd537db4068850b59d3c36282934ab5b9ad505c32c720d490e6c73ebe0a8b4995fa251690d059c82d25216adc7ba4fd60ac3b641a85810501be00886df30b75803f7ac665647623ac98e4554766b981d48b89a44b1c0ee74fdc050796afab4eb5c73bb2d567e9d8c0adacd567ac061b89ca8ceb792bd29a93bd4a4c050", 0x8d}], 0x4}}, {{&(0x7f0000001e00)=@generic={0xb, "aaec073eb8505a5c391137655e385f5e6658ff4ada99b62f9fa4b8b1e9288206385bb6cef8b4ab0a83be62c7274c325f2a93174bc0ac7fcf55c1bcdc20bbae679f2b18f32a15a8742e5dc20042c5e5826a04c715133bbadb6522c5b983f8769af949a04ad978e24f2b81793cea4170baa79a3c6be6c40c23ea280ce96cff"}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e80)}], 0x1, &(0x7f0000001f00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x2, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00479d8c0100a639a60000100003040054ad000000000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0xf, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/54, 0x27, 0x36, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4}, 0x94) 1.041970093s ago: executing program 0 (id=4710): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0xe0, 0x2b8, 0xb0000010, 0xe0, 0x5c8f0200, 0x1b0, 0x3a8, 0x3a8, 0x1b0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0, 0x700}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @remote, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x3c}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x88, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfff, 0x7b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000ecbdccd7cbf1e8a4fdec592741be2954090200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000080)=0xe) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7, 0x0}, 0x8) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x80000006}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000300), 0x0}, 0x20) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000019c0)=@o_path={&(0x7f0000001980)='./file0\x00', 0x0, 0x4000, r6}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)='%-5lx \x00'}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="8200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='&\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x3, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x2, 0x1, 0x3, 0xb, 0x0, 0x18, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f0000000140)='syzkaller\x00', 0x5673, 0xc6, &(0x7f0000000180)=""/198, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xa, 0xd, 0x3}, 0x10, r7, r8, 0x7, &(0x7f0000001b80)=[0xffffffffffffffff, 0xffffffffffffffff, r9, r10, r11, r12, r13, r14, 0xffffffffffffffff], &(0x7f0000001bc0)=[{0x4, 0x4, 0x8, 0x1}, {0x1, 0x4, 0xa, 0xa}, {0x0, 0x5, 0x10, 0x7}, {0x5, 0x5, 0x8, 0xc}, {0x3, 0x1, 0x1}, {0x1, 0x4, 0x0, 0x7}, {0x0, 0x3, 0x10, 0x9}], 0x10, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r7}, 0x94) r15 = socket$can_j1939(0x1d, 0x2, 0x7) recvfrom(r15, &(0x7f0000000880)=""/245, 0xf5, 0x2061, &(0x7f0000000980)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x24}, 0x94) 1.015012843s ago: executing program 1 (id=4711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x9}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0xffffffff, 0x0, 0x300}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x20000}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x3, 0x0, 0x80, 0x7}, {{@in6=@mcast2, 0x3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0xffffffff}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@private2, 0x0, 0x5}]}]}, 0x23c}}, 0x0) 966.309728ms ago: executing program 1 (id=4712): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) close(r1) write(r0, 0x0, 0x2b) socket$kcm(0x29, 0x0, 0x0) 830.331885ms ago: executing program 1 (id=4713): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x109, 0x70bd29, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) write(r0, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) 820.719709ms ago: executing program 5 (id=4714): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18450000ffff21c754d5cb84410200009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4000000}, 0x94) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x10}, 0xc000) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xb}], 0x2, 0x20000000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000f9d612aee2b73a7ce5e0000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x1b, &(0x7f00000007c0)=ANY=[@ANYBLOB="18110000", @ANYBLOB="6a52fe0d814d0295590084d3330036b79c9e47a01ffdb01172ebf0faf9bccb2d8e5f8bd5e39702c1a85badb43b1cf5b98d404eab6e7d891d021f0781a0d2a71c39b2526f1de5c2b0092397ac619b749b07", @ANYRES64=r1, @ANYRES32, @ANYBLOB="4001d64a47d526a0dfbe5cb4def4b80000000000000000b70200000000000085003d9553d592fb5500008600000018120000", @ANYRES32, @ANYBLOB="0000000000800000b703000000000008850000000c000000b7000000000000008520000004000207850000205d000000180000004f000000000000002f9d00000ca5c346990e927b8510000002000000186000000400000000000041569f00002e0300c0ee820291acf4711cb5ac0697e932609f68f10aa77e476a40fb7d67a272eb714330f18cf9"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000004e2a1e4e063eaf7b00"], 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000f61658087d069faaaaaaaaaabb0800452300280065000009069078e0000001ac1414384e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040ff8b90780002"], 0x3a) 809.375226ms ago: executing program 2 (id=4715): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000040000701fefeffff000075b50000047c0000040042801400018006000600808a000006000c00800a"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff2, 0x7}, {0xffff, 0xffff}, {0x4}}}, 0x24}}, 0x40051) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newchain={0xa4, 0x64, 0xb20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff2, 0x5}, {0x2, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xff, 0xffffff00, 0xff000000]}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6, 0x24, 0x3}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @remote}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x2}}, @TCA_CHAIN={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400dc}, 0x8000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@getqdisc={0x40, 0x26, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0xc}, {0x4, 0xb}, {0x10, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'ip6gre0\x00', 0x8000}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000200", @ANYRES32=0x0, @ANYBLOB="08000f00", @ANYRES32=0x0, @ANYBLOB="04000280a2a62e7e2e94daaa3be6997c6316024ad41d652a462f59c0060d8c104a668e9bb722a3fa3a49e5c9499c10ddf2d00945960a7c588093b9c3e4617b2cfbec6428e2e05618fc7ba4b9319a6619d8903c3b0274fbeaf51aa053f79affb3f62c3b80e5171974664cf6c33ba7"], 0x30}}, 0xc000) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r12, &(0x7f00000060c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 758.536655ms ago: executing program 1 (id=4716): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xb1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x20000000, &(0x7f00000001c0)={0x11, 0x5, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]}) 663.480361ms ago: executing program 0 (id=4717): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000500)="17000000020001000003d68c2e07d34e85f45ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174a8d51f3c63e5c83f1ba2112ce68bf17a6e000"/190, 0xbe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x1d, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@loopback, @rand_addr=0x64010100, r7}, 0xc) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8, 0x210}, [@IFLA_LINKINFO={0xfffffd81, 0x12, 0x0, 0x1, @ip6vti={{}, {0x0, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x0, 0x3, 0xf472}, @IFLA_VTI_IKEY={0x0, 0x2, 0xb}, @IFLA_VTI_OKEY={0x0, 0x3, 0x6}, @IFLA_VTI_LINK={0x0, 0x1, r7}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x6}], @IFLA_VTI_LOCAL={0x0, 0x4, @private0}, @IFLA_VTI_REMOTE={0x0, 0x5, @rand_addr=' \x01\x00'}]}}}]}, 0x34}}, 0x8000) 586.800799ms ago: executing program 1 (id=4718): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000050000000000000700000000001e2e615f61"], 0x0, 0x2d, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0xfffffffffffffffd}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002880)=""/60, 0x26}, {0x0, 0x3c}], 0x2}}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000a80)={r3, 0x0, "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"}, &(0x7f0000000180)=0xfebd) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x71}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7d41}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x20000, 0x0, {0xa}}, 0x14}}, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010700000200fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0380000008960100140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11, @ANYBLOB="08021f00c42167db"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 438.153069ms ago: executing program 2 (id=4719): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000fe8000000000000000000000002000bb00000000000000000000ffff0000000006", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1822951500000000000000f0e9cc000000000000"], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0x1}, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x43, 0x1}, 0x50) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="0d000000010001", 0x7) recvmmsg(r4, &(0x7f000000ad80)=[{{&(0x7f0000000240)=@x25, 0x80, &(0x7f0000005e40)=[{&(0x7f0000000480)=""/197, 0xc5}, {0x0}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/177, 0xb1}, {&(0x7f0000004d40)=""/115, 0x73}, {&(0x7f0000004dc0)=""/86, 0x56}, {&(0x7f0000004e40)=""/4096, 0x1000}], 0x8}, 0x101}, {{&(0x7f0000005ec0)=@nfc_llcp, 0x80, &(0x7f0000007180)=[{&(0x7f0000005f40)=""/108, 0x6c}, {&(0x7f0000005fc0)=""/117, 0x75}, {&(0x7f0000006040)=""/53, 0x35}, {&(0x7f0000006080)=""/4096, 0x1000}, {0x0}, {&(0x7f0000007100)=""/83, 0x53}], 0x6, &(0x7f0000007200)=""/175, 0xaf}, 0xd6b3}, {{&(0x7f00000072c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000074c0)=[{&(0x7f0000007340)=""/15, 0xf}, {&(0x7f0000007380)=""/69, 0x45}, {&(0x7f0000007400)=""/26, 0x1a}, {0x0}], 0x4, &(0x7f0000007500)=""/158, 0x9e}, 0x8a2}, {{&(0x7f00000075c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000007640)=""/4096, 0x1000}, {&(0x7f0000008640)}, {&(0x7f0000008680)=""/117, 0x75}, {&(0x7f0000008700)=""/4096, 0x1000}, {&(0x7f0000009700)=""/156, 0x9c}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f000000a900)=[{&(0x7f000000a8c0)=""/30, 0x1e}], 0x1}, 0x2}, {{&(0x7f000000a940)=@isdn, 0x80, &(0x7f000000ad00)=[{&(0x7f000000a9c0)=""/253, 0xfd}, {&(0x7f000000aac0)=""/111, 0x6f}, {&(0x7f000000ab40)=""/158, 0x9e}, {&(0x7f000000ac00)=""/213, 0xd5}], 0x4, &(0x7f000000ad40)=""/45, 0x2d}, 0x3}], 0x6, 0x20002062, 0x0) (async) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000003b40)=[{0x0}, {&(0x7f0000003880)=""/172, 0xac}, {&(0x7f0000003940)=""/194, 0xc2}, {&(0x7f0000003a40)=""/235, 0xeb}], 0x4}, 0x3}], 0x2, 0x20, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 430.569398ms ago: executing program 0 (id=4720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0xa, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000050000007301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(r1, &(0x7f0000000980)=""/4096, 0x1000, 0x7) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000082295ad4a66e4bda7284b254f37f274181699aac5e92ae79c8e89e0867ea1d57fb2746e931523a636a316af00cadb32dcb9beba1cfa13a347fe625793759735bb896742e9ba1b5dae5190d8168f5cb03f324afc56ce96e461", @ANYRES32=r0, @ANYBLOB="5cfad9c4b7643ede6e07c40571c1b21ca81387fe69bc07ee8aacf4eae614aec36e22d30bb9bb8afd365c5d9c7cc37a0f3e1aa20007ecaf0a49188aef61a4ebae207f344c8b665d1f67b9a8605a2d2cdf99affdd4778229a7b43db7afc48b38928370d0d7cdf6e736506b9dc3a03b1d4f3277a29409e4fd555ab6df0e8cb3b63d25e473f1a8d2e6cdca26f041de36566477d23d9426a04ff02d75c3d2c8cc5d56f833f81c61e0344b69edcb2eb6259d7fc48d1291ebce0a7ad11f58995198744d99dadf938fc8c4c9ad77f201539995442e1d23039bcd6607ffc87e2334ea8ba96c675eb0c793c2a80e866297c002c0", @ANYRESHEX=r1, @ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x11, 0x0, &(0x7f0000000100)="ffffffff7f833e9762a536c801d740a68d", 0x0, 0x308, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6c, 0x1, 0x709d27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x289c}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 407.836877ms ago: executing program 3 (id=4721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') (async) unshare(0x6a040000) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000400000014655b50"], &(0x7f0000000180)=0x2c) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0], 0x94}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0x7}, {0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x3}, {0xc}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = getpid() (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="011b1c29", @ANYRES16=r10, @ANYRES32=r11, @ANYBLOB="05001d0009000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000840) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ed4d01000000fddbdf2531000000080001f218e1ffff07000300", @ANYRES32=r11, @ANYBLOB="080001001600000008005200", @ANYRES32=r7, @ANYBLOB], 0x34}}, 0xc0) (async) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 218.71301ms ago: executing program 2 (id=4722): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x9}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0xffffffff, 0x0, 0x500}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x20000}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x3, 0x0, 0x80, 0x7}, {{@in6=@mcast2, 0x3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0xffffffff}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@private2, 0x0, 0x5}]}]}, 0x23c}}, 0x0) 218.121929ms ago: executing program 0 (id=4723): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellinkprop={0x4c, 0x6c, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) 188.830531ms ago: executing program 3 (id=4724): r0 = socket$inet(0x2b, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800e8ff0811660000fcffff9400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000000000000000007b396000005050004000100000005000100070000000c0007800800060000000000050005000a0000000900020073797a300000000012000300686173683a6e65742c306f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000), 0x4) 128.916045ms ago: executing program 0 (id=4725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x10, 0x0, 0xe, 0x0, 0x1, 0xfd, 0x3, 0x2800}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x20048080) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@remote, @broadcast, @void, {@ipv4={0x800, @dccp={{0x13, 0x4, 0x1, 0x9, 0x5c, 0x68, 0x0, 0x8, 0x21, 0x0, @broadcast, @local, {[@lsrr={0x83, 0xf, 0x9b, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x27, 0xa5, [@dev={0xac, 0x14, 0x14, 0x24}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @multicast2, @local, @loopback, @empty]}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x2, "7dead8", 0x4, "a1d0e7"}}}}}}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) 29.611615ms ago: executing program 2 (id=4726): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x32600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0xc, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x7, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x957b}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0xe2, &(0x7f00000003c0)=""/226, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x2, 0x4, 0x10, 0x3}, {0x5, 0x3, 0xd, 0xb}, {0x1, 0x5, 0xf, 0xc}, {0x1, 0x1, 0xc, 0x9}, {0x2, 0x2, 0x9}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r9, r7, 0x36, 0x0, 0x0, @void, @value=r10, @void, @void, r8}, 0x20) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x32600) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) (async) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0xc, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000280)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x7, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x957b}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0xe2, &(0x7f00000003c0)=""/226, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x2, 0x4, 0x10, 0x3}, {0x5, 0x3, 0xd, 0xb}, {0x1, 0x5, 0xf, 0xc}, {0x1, 0x1, 0xc, 0x9}, {0x2, 0x2, 0x9}], 0x10, 0x5}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r9, r7, 0x36, 0x0, 0x0, @void, @value=r10, @void, @void, r8}, 0x20) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) 21.224127ms ago: executing program 3 (id=4727): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x1017, &(0x7f00000006c0)=""/4119, 0x0, 0x68}, 0x94) 0s ago: executing program 0 (id=4728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x3, 0x6, 0x4, 0x2}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x3, 0x6, 0x4, 0x2}}, 0x2e) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000049c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@generic=')', @nested={0x4, 0x80}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001180)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x8001, 0x2, @local, 0x30000}}, {{0xa, 0x4e20, 0xfc000000, @local, 0x5}}]}, 0x190) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2014}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfffb, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0xb1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x2, 0x1, 0x3}}, {0x4}}]}]}, 0x50}}, 0x4000810) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.3683'. [ 516.507663][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3683'. [ 516.601307][T20909] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.610771][T20909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.617992][T20909] IPv6: NLM_F_CREATE should be set when creating new route [ 516.625232][T20909] IPv6: NLM_F_CREATE should be set when creating new route [ 516.632634][T20909] IPv6: NLM_F_CREATE should be set when creating new route [ 516.994253][T20925] netlink: 'syz.1.3688': attribute type 21 has an invalid length. [ 517.099751][T11006] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.108965][T20925] netlink: 'syz.1.3688': attribute type 23 has an invalid length. [ 517.129022][T11006] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.179471][T11006] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.205215][T11006] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.322722][T20936] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3692'. [ 517.396762][T20936] syzkaller0: entered promiscuous mode [ 517.406760][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 517.419457][T20936] syzkaller0: entered allmulticast mode [ 517.550794][T20941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.773663][T20948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3695'. [ 517.814974][T20948] netlink: 'syz.3.3695': attribute type 39 has an invalid length. [ 517.953766][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 518.008366][T20958] netlink: zone id is out of range [ 518.799754][T21005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3713'. [ 518.845322][T21005] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3713'. [ 518.914542][T21014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3710'. [ 519.123803][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3717'. [ 519.349973][T21022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3717'. [ 519.359222][T21022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3717'. [ 519.389385][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 519.692295][T21031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3721'. [ 520.277403][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.316907][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.326280][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.331895][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.337622][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.343177][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.348868][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.354407][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.360125][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.365670][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.375321][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.380871][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.386551][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.392088][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.397722][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.403234][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.408886][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.414381][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.436672][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.447736][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.459881][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.470872][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.476568][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.482576][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.488251][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.494222][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.500058][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.505544][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.511571][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.517079][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.538951][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.544670][T21047] tap0: tun_chr_ioctl cmd 1074025673 [ 520.663005][T21052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3727'. [ 520.764843][T21045] tipc: Enabling of bearer rejected, already enabled [ 521.404732][T21098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.912720][T21117] netlink: 'syz.5.3745': attribute type 10 has an invalid length. [ 521.958016][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 521.968004][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 521.977803][T21117] team0: Device dummy0 is of different type [ 521.979295][T21121] netlink: 'syz.5.3745': attribute type 10 has an invalid length. [ 522.121784][T21133] netem: change failed [ 522.132571][T21132] syzkaller0: entered promiscuous mode [ 522.138255][T21132] syzkaller0: entered allmulticast mode [ 522.156299][T21135] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 522.203664][T21135] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 522.244795][T21135] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 522.393674][T13288] hid-generic 0005:046A:0A0E.0001: item fetching failed at offset 0/1 [ 522.402765][T13288] hid-generic 0005:046A:0A0E.0001: probe with driver hid-generic failed with error -22 [ 522.466962][T21149] netlink: 'syz.5.3756': attribute type 1 has an invalid length. [ 522.483459][T21149] gretap3: entered allmulticast mode [ 522.537665][T21144] bond3: (slave bridge5): Enslaving as an active interface with a down link [ 522.557226][T21144] macvlan2: entered promiscuous mode [ 522.562564][T21144] macvlan2: entered allmulticast mode [ 522.568763][T21144] bond3: entered promiscuous mode [ 522.575138][T21144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 522.587527][T21144] bond3: left promiscuous mode [ 523.154181][T21185] __nla_validate_parse: 11 callbacks suppressed [ 523.154202][T21185] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3767'. [ 523.300594][T21190] tipc: Enabling of bearer rejected, failed to enable media [ 524.001089][T21213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.014275][T21213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 524.290714][T21213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.301019][T21213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 524.430400][T21230] syzkaller0: entered promiscuous mode [ 524.436328][T21230] syzkaller0: entered allmulticast mode [ 524.592846][T21213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.605126][T21213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 524.796105][T21213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.806525][T21213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 524.893362][T21248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3786'. [ 524.902582][T21248] netlink: 'syz.0.3786': attribute type 1 has an invalid length. [ 524.940523][T21250] veth1_to_hsr: entered allmulticast mode [ 525.062894][T11007] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 525.071196][T11007] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 525.118112][T11007] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 525.126409][T11007] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 525.134611][T11007] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 525.142882][T11007] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 525.180564][ T137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 525.202067][ T137] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 525.228332][T21212] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 525.238188][T21212] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 525.333265][T21262] hsr0: entered allmulticast mode [ 525.338482][T21262] hsr_slave_0: entered allmulticast mode [ 525.345797][T21262] hsr_slave_1: entered allmulticast mode [ 525.424897][T21212] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 525.436217][T21212] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 525.585194][T21212] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 525.595464][T21212] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 525.640242][T21264] veth1: entered promiscuous mode [ 525.648854][T21264] veth1: entered allmulticast mode [ 525.734225][T21212] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 525.763269][T21212] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 525.793780][T21266] tipc: Enabling of bearer rejected, already enabled [ 525.922307][T21270] syzkaller0: entered promiscuous mode [ 525.941272][T21270] syzkaller0: entered allmulticast mode [ 526.485220][T21288] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 526.521195][T21288] bond1 (unregistering): Released all slaves [ 526.552982][T21292] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 526.560579][T21292] CPU: 1 UID: 0 PID: 21292 Comm: syz.1.3800 Not tainted syzkaller #0 PREEMPT(full) [ 526.560600][T21292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.560610][T21292] Call Trace: [ 526.560618][T21292] [ 526.560625][T21292] dump_stack_lvl+0xe8/0x150 [ 526.560651][T21292] sysfs_warn_dup+0x8e/0xa0 [ 526.560673][T21292] sysfs_do_create_link_sd+0xc0/0x110 [ 526.560695][T21292] device_add_class_symlinks+0x1cf/0x240 [ 526.560720][T21292] device_add+0x475/0xbb0 [ 526.560742][T21292] wiphy_register+0x1fb1/0x2fe0 [ 526.560775][T21292] ? __pfx_wiphy_register+0x10/0x10 [ 526.560790][T21292] ? __pfx_netdev_run_todo+0x10/0x10 [ 526.560806][T21292] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 526.560841][T21292] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 526.560872][T21292] ieee80211_register_hw+0x3c53/0x4910 [ 526.560900][T21292] ? ieee80211_register_hw+0x1971/0x4910 [ 526.560945][T21292] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 526.560968][T21292] ? __asan_memset+0x22/0x50 [ 526.560988][T21292] ? __hrtimer_setup+0x1b7/0x260 [ 526.561008][T21292] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 526.561034][T21292] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 526.561088][T21292] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 526.561110][T21292] ? kstrndup+0xbf/0x160 [ 526.561138][T21292] hwsim_new_radio_nl+0xe20/0x26e0 [ 526.561159][T21292] ? unwind_next_frame+0xa6/0x2550 [ 526.561200][T21292] ? is_bpf_text_address+0x26/0x2b0 [ 526.561227][T21292] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 526.561248][T21292] ? __kernel_text_address+0xd/0x30 [ 526.561269][T21292] ? unwind_get_return_address+0x4d/0x90 [ 526.561288][T21292] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 526.561312][T21292] ? arch_stack_walk+0xfb/0x150 [ 526.561346][T21292] ? stack_trace_save+0xa9/0x100 [ 526.561370][T21292] ? __pfx_stack_trace_save+0x10/0x10 [ 526.561399][T21292] ? stack_depot_save_flags+0x33/0x810 [ 526.561433][T21292] ? __nla_validate_parse+0x2480/0x2dc0 [ 526.561456][T21292] ? ____sys_sendmsg+0x972/0x9f0 [ 526.561479][T21292] ? ___sys_sendmsg+0x2a5/0x360 [ 526.561520][T21292] ? __pfx___nla_validate_parse+0x10/0x10 [ 526.561563][T21292] ? rcu_is_watching+0x15/0xb0 [ 526.561583][T21292] ? trace_kmalloc+0x2a/0xf0 [ 526.561613][T21292] ? __nla_parse+0x40/0x60 [ 526.561641][T21292] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 526.561661][T21292] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 526.561687][T21292] genl_family_rcv_msg_doit+0x22a/0x330 [ 526.561713][T21292] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 526.561743][T21292] ? bpf_lsm_capable+0x9/0x20 [ 526.561758][T21292] ? security_capable+0x7e/0x2c0 [ 526.561785][T21292] genl_rcv_msg+0x61c/0x7a0 [ 526.561812][T21292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.561838][T21292] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 526.561877][T21292] netlink_rcv_skb+0x232/0x4b0 [ 526.561904][T21292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.561926][T21292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.561967][T21292] ? down_read+0x270/0x2e0 [ 526.561983][T21292] ? genl_rcv+0xd/0x40 [ 526.562002][T21292] genl_rcv+0x28/0x40 [ 526.562017][T21292] netlink_unicast+0x75c/0x8e0 [ 526.562047][T21292] netlink_sendmsg+0x813/0xb40 [ 526.562079][T21292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.562105][T21292] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.562129][T21292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.562156][T21292] ____sys_sendmsg+0x972/0x9f0 [ 526.562180][T21292] ? __might_fault+0xaf/0x130 [ 526.562209][T21292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.562245][T21292] ? import_iovec+0x73/0xa0 [ 526.562271][T21292] ___sys_sendmsg+0x2a5/0x360 [ 526.562295][T21292] ? __lock_acquire+0x6b5/0x2cf0 [ 526.562318][T21292] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.562350][T21292] ? futex_wait+0x2a2/0x390 [ 526.562398][T21292] ? __fget_files+0x2a/0x420 [ 526.562417][T21292] ? __fget_files+0x3a0/0x420 [ 526.562447][T21292] __x64_sys_sendmsg+0x1bd/0x2a0 [ 526.562476][T21292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.562511][T21292] ? fput+0xa0/0xd0 [ 526.562538][T21292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.562556][T21292] do_syscall_64+0x15f/0xf80 [ 526.562572][T21292] ? trace_irq_disable+0x3b/0x140 [ 526.562595][T21292] ? clear_bhb_loop+0x40/0x90 [ 526.562616][T21292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.562633][T21292] RIP: 0033:0x7f970639cdd9 [ 526.562649][T21292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.562663][T21292] RSP: 002b:00007f97072dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.562682][T21292] RAX: ffffffffffffffda RBX: 00007f9706615fa0 RCX: 00007f970639cdd9 [ 526.562693][T21292] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 526.562703][T21292] RBP: 00007f9706432d69 R08: 0000000000000000 R09: 0000000000000000 [ 526.562714][T21292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.562723][T21292] R13: 00007f9706616038 R14: 00007f9706615fa0 R15: 00007fff918618a8 [ 526.562752][T21292] [ 527.557057][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3806'. [ 528.118861][T21354] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3809'. [ 528.444448][T21360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3812'. [ 529.037064][T21384] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.3819'. [ 529.336873][T21402] netlink: 840 bytes leftover after parsing attributes in process `syz.1.3822'. [ 529.676333][T21410] netlink: 'syz.0.3823': attribute type 1 has an invalid length. [ 530.253175][T21430] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20001 [ 530.565886][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3833'. [ 530.575650][T21443] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 530.617353][T21445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3834'. [ 530.628524][T21445] --map-set only usable from mangle table [ 530.662235][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 530.998671][T11011] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 531.007388][T11011] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.104237][T11011] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 531.112551][T11011] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.122523][T21451] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 531.143183][T21451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3836'. [ 531.164677][T11011] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 531.172980][T11011] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.181574][ T137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 531.196750][ T137] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.362127][T21463] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3840'. [ 531.371245][T21463] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 531.676446][T21473] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3844'. [ 531.685919][T21473] netlink: Unknown conntrack attr (0) [ 532.049610][T21485] tipc: Can't bind to reserved service type 0 [ 532.074245][T21487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 532.119552][T21487] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 532.135288][T21488] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 532.306814][T21498] netlink: 'syz.1.3852': attribute type 1 has an invalid length. [ 532.347338][T21498] gretap2: entered allmulticast mode [ 532.355851][T21498] bond4: (slave gretap2): making interface the new active one [ 532.364515][T21498] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 533.229927][T21538] FAULT_INJECTION: forcing a failure. [ 533.229927][T21538] name failslab, interval 1, probability 0, space 0, times 0 [ 533.246680][T21538] CPU: 1 UID: 0 PID: 21538 Comm: syz.2.3864 Not tainted syzkaller #0 PREEMPT(full) [ 533.246707][T21538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.246718][T21538] Call Trace: [ 533.246725][T21538] [ 533.246732][T21538] dump_stack_lvl+0xe8/0x150 [ 533.246758][T21538] should_fail_ex+0x412/0x560 [ 533.246787][T21538] should_failslab+0xa8/0x100 [ 533.246816][T21538] __kmalloc_cache_noprof+0x88/0x660 [ 533.246839][T21538] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 533.246866][T21538] ? sctp_add_bind_addr+0x8c/0x370 [ 533.246897][T21538] sctp_add_bind_addr+0x8c/0x370 [ 533.246925][T21538] sctp_copy_local_addr_list+0x314/0x4f0 [ 533.246953][T21538] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 533.246978][T21538] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 533.247009][T21538] ? sctp_v4_is_any+0x35/0x60 [ 533.247025][T21538] ? sctp_copy_one_addr+0x93/0x360 [ 533.247052][T21538] sctp_bind_addr_copy+0xb3/0x3c0 [ 533.247078][T21538] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 533.247105][T21538] sctp_connect_new_asoc+0x2ff/0x6b0 [ 533.247129][T21538] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 533.247157][T21538] ? __local_bh_enable_ip+0xd0/0x130 [ 533.247181][T21538] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 533.247205][T21538] ? security_sctp_bind_connect+0x7e/0x2c0 [ 533.247230][T21538] sctp_sendmsg+0x1528/0x2c10 [ 533.247248][T21538] ? unwind_next_frame+0xa6/0x2550 [ 533.247285][T21538] ? __pfx_sctp_sendmsg+0x10/0x10 [ 533.247306][T21538] ? aa_sk_perm+0x6d5/0x900 [ 533.247335][T21538] ? __pfx_aa_sk_perm+0x10/0x10 [ 533.247358][T21538] ? sock_rps_record_flow+0x19/0x350 [ 533.247379][T21538] ? inet_sendmsg+0x2f4/0x370 [ 533.247399][T21538] ____sys_sendmsg+0x80a/0x9f0 [ 533.247434][T21538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.247467][T21538] ? import_iovec+0x73/0xa0 [ 533.247495][T21538] ___sys_sendmsg+0x2a5/0x360 [ 533.247519][T21538] ? __lock_acquire+0x6b5/0x2cf0 [ 533.247542][T21538] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.247601][T21538] ? __fget_files+0x2a/0x420 [ 533.247621][T21538] ? __fget_files+0x3a0/0x420 [ 533.247650][T21538] __x64_sys_sendmsg+0x1bd/0x2a0 [ 533.247679][T21538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.247716][T21538] ? __pfx_ksys_write+0x10/0x10 [ 533.247750][T21538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.247770][T21538] do_syscall_64+0x15f/0xf80 [ 533.247786][T21538] ? trace_irq_disable+0x3b/0x140 [ 533.247811][T21538] ? clear_bhb_loop+0x40/0x90 [ 533.247833][T21538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.247851][T21538] RIP: 0033:0x7f71b9b9cdd9 [ 533.247868][T21538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.247884][T21538] RSP: 002b:00007f71bab36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.247903][T21538] RAX: ffffffffffffffda RBX: 00007f71b9e15fa0 RCX: 00007f71b9b9cdd9 [ 533.247916][T21538] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 533.247927][T21538] RBP: 00007f71bab36090 R08: 0000000000000000 R09: 0000000000000000 [ 533.247937][T21538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.247947][T21538] R13: 00007f71b9e16038 R14: 00007f71b9e15fa0 R15: 00007ffd0ce6f698 [ 533.247977][T21538] [ 533.261481][T21534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.852656][T21534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.043394][T21557] netlink: 'syz.2.3868': attribute type 1 has an invalid length. [ 534.069061][T21558] netlink: 'syz.2.3868': attribute type 1 has an invalid length. [ 534.111760][T21557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.412161][T21577] bond2: option lacp_active: invalid value (8) [ 534.419520][T21577] bond2 (unregistering): Released all slaves [ 534.652923][T21534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.108229][T21589] FAULT_INJECTION: forcing a failure. [ 535.108229][T21589] name failslab, interval 1, probability 0, space 0, times 0 [ 535.122485][T21589] CPU: 0 UID: 0 PID: 21589 Comm: syz.2.3875 Not tainted syzkaller #0 PREEMPT(full) [ 535.122501][T21589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.122508][T21589] Call Trace: [ 535.122515][T21589] [ 535.122520][T21589] dump_stack_lvl+0xe8/0x150 [ 535.122538][T21589] should_fail_ex+0x412/0x560 [ 535.122555][T21589] should_failslab+0xa8/0x100 [ 535.122572][T21589] __kmalloc_cache_noprof+0x88/0x660 [ 535.122586][T21589] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 535.122657][T21589] ? sctp_add_bind_addr+0x8c/0x370 [ 535.122675][T21589] sctp_add_bind_addr+0x8c/0x370 [ 535.122691][T21589] sctp_copy_local_addr_list+0x314/0x4f0 [ 535.122708][T21589] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 535.122722][T21589] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 535.122739][T21589] ? sctp_v4_is_any+0x35/0x60 [ 535.122755][T21589] ? sctp_copy_one_addr+0x93/0x360 [ 535.122771][T21589] sctp_bind_addr_copy+0xb3/0x3c0 [ 535.122786][T21589] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 535.122802][T21589] sctp_connect_new_asoc+0x2ff/0x6b0 [ 535.122815][T21589] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 535.122830][T21589] ? __local_bh_enable_ip+0xd0/0x130 [ 535.122841][T21589] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 535.122859][T21589] ? security_sctp_bind_connect+0x7e/0x2c0 [ 535.122873][T21589] sctp_sendmsg+0x1528/0x2c10 [ 535.122883][T21589] ? unwind_next_frame+0xa6/0x2550 [ 535.122903][T21589] ? __pfx_sctp_sendmsg+0x10/0x10 [ 535.122916][T21589] ? aa_sk_perm+0x6d5/0x900 [ 535.122933][T21589] ? __pfx_aa_sk_perm+0x10/0x10 [ 535.122946][T21589] ? sock_rps_record_flow+0x19/0x350 [ 535.122959][T21589] ? inet_sendmsg+0x2f4/0x370 [ 535.122971][T21589] ____sys_sendmsg+0x80a/0x9f0 [ 535.122992][T21589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.123011][T21589] ? import_iovec+0x73/0xa0 [ 535.123027][T21589] ___sys_sendmsg+0x2a5/0x360 [ 535.123041][T21589] ? __lock_acquire+0x6b5/0x2cf0 [ 535.123054][T21589] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.123087][T21589] ? __fget_files+0x2a/0x420 [ 535.123098][T21589] ? __fget_files+0x3a0/0x420 [ 535.123115][T21589] __x64_sys_sendmsg+0x1bd/0x2a0 [ 535.123131][T21589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.123151][T21589] ? __pfx_ksys_write+0x10/0x10 [ 535.123171][T21589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.123181][T21589] do_syscall_64+0x15f/0xf80 [ 535.123191][T21589] ? trace_irq_disable+0x3b/0x140 [ 535.123205][T21589] ? clear_bhb_loop+0x40/0x90 [ 535.123217][T21589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.123227][T21589] RIP: 0033:0x7f71b9b9cdd9 [ 535.123238][T21589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.123247][T21589] RSP: 002b:00007f71bab36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.123259][T21589] RAX: ffffffffffffffda RBX: 00007f71b9e15fa0 RCX: 00007f71b9b9cdd9 [ 535.123266][T21589] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 535.123272][T21589] RBP: 00007f71bab36090 R08: 0000000000000000 R09: 0000000000000000 [ 535.123278][T21589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.123283][T21589] R13: 00007f71b9e16038 R14: 00007f71b9e15fa0 R15: 00007ffd0ce6f698 [ 535.123300][T21589] [ 535.446767][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 535.571802][T21534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.046337][T21613] __nla_validate_parse: 2 callbacks suppressed [ 536.046354][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'. [ 536.215609][T21611] tipc: Resetting bearer [ 536.223855][T21611] tipc: Resetting bearer [ 536.476576][T21619] ipt_rpfilter: unknown options [ 536.689434][T21627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3885'. [ 536.771855][T21629] FAULT_INJECTION: forcing a failure. [ 536.771855][T21629] name failslab, interval 1, probability 0, space 0, times 0 [ 536.784487][T21629] CPU: 1 UID: 0 PID: 21629 Comm: syz.5.3886 Not tainted syzkaller #0 PREEMPT(full) [ 536.784509][T21629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.784520][T21629] Call Trace: [ 536.784527][T21629] [ 536.784534][T21629] dump_stack_lvl+0xe8/0x150 [ 536.784560][T21629] should_fail_ex+0x412/0x560 [ 536.784587][T21629] should_failslab+0xa8/0x100 [ 536.784613][T21629] __kmalloc_cache_noprof+0x88/0x660 [ 536.784636][T21629] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 536.784661][T21629] ? sctp_add_bind_addr+0x8c/0x370 [ 536.784687][T21629] sctp_add_bind_addr+0x8c/0x370 [ 536.784716][T21629] sctp_copy_local_addr_list+0x314/0x4f0 [ 536.784744][T21629] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 536.784771][T21629] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 536.784800][T21629] ? sctp_v4_is_any+0x35/0x60 [ 536.784815][T21629] ? sctp_copy_one_addr+0x93/0x360 [ 536.784850][T21629] sctp_bind_addr_copy+0xb3/0x3c0 [ 536.784877][T21629] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 536.784904][T21629] sctp_connect_new_asoc+0x2ff/0x6b0 [ 536.784928][T21629] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 536.784953][T21629] ? __local_bh_enable_ip+0xd0/0x130 [ 536.784970][T21629] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 536.784993][T21629] ? security_sctp_bind_connect+0x7e/0x2c0 [ 536.785017][T21629] sctp_sendmsg+0x1528/0x2c10 [ 536.785036][T21629] ? unwind_next_frame+0xa6/0x2550 [ 536.785074][T21629] ? __pfx_sctp_sendmsg+0x10/0x10 [ 536.785098][T21629] ? aa_sk_perm+0x6d5/0x900 [ 536.785130][T21629] ? __pfx_aa_sk_perm+0x10/0x10 [ 536.785156][T21629] ? sock_rps_record_flow+0x19/0x350 [ 536.785179][T21629] ? inet_sendmsg+0x2f4/0x370 [ 536.785202][T21629] ____sys_sendmsg+0x80a/0x9f0 [ 536.785238][T21629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.785273][T21629] ? import_iovec+0x73/0xa0 [ 536.785302][T21629] ___sys_sendmsg+0x2a5/0x360 [ 536.785326][T21629] ? __lock_acquire+0x6b5/0x2cf0 [ 536.785351][T21629] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.785413][T21629] ? __fget_files+0x2a/0x420 [ 536.785434][T21629] ? __fget_files+0x3a0/0x420 [ 536.785466][T21629] __x64_sys_sendmsg+0x1bd/0x2a0 [ 536.785494][T21629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.785531][T21629] ? __pfx_ksys_write+0x10/0x10 [ 536.785562][T21629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.785580][T21629] do_syscall_64+0x15f/0xf80 [ 536.785594][T21629] ? trace_irq_disable+0x3b/0x140 [ 536.785615][T21629] ? clear_bhb_loop+0x40/0x90 [ 536.785634][T21629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.785651][T21629] RIP: 0033:0x7f19f5d9cdd9 [ 536.785667][T21629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.785678][T21629] RSP: 002b:00007f19f6c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.785693][T21629] RAX: ffffffffffffffda RBX: 00007f19f6015fa0 RCX: 00007f19f5d9cdd9 [ 536.785702][T21629] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 536.785709][T21629] RBP: 00007f19f6c57090 R08: 0000000000000000 R09: 0000000000000000 [ 536.785717][T21629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.785725][T21629] R13: 00007f19f6016038 R14: 00007f19f6015fa0 R15: 00007ffeda343478 [ 536.785747][T21629] [ 537.201551][T11004] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.211888][T11005] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.220466][T11005] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.228809][T11005] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.350245][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.357573][ C0] bridge0: topology change detected, propagating [ 537.364406][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.371681][ C0] bridge0: topology change detected, propagating [ 537.537510][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3891'. [ 537.594166][T21644] tipc: New replicast peer: 255.255.255.255 [ 537.644006][T21644] tipc: Enabled bearer , priority 10 [ 537.739338][T21653] syzkaller1: entered promiscuous mode [ 537.745897][T21653] syzkaller1: entered allmulticast mode [ 537.977445][T21670] vlan2: entered promiscuous mode [ 537.982559][T21670] bridge0: entered promiscuous mode [ 538.041181][T21666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3895'. [ 538.282214][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'. [ 538.805850][T21708] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3904'. [ 538.956167][T21714] gtp1: entered promiscuous mode [ 538.975745][T21714] gtp1: entered allmulticast mode [ 539.413771][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3911'. [ 539.433892][T21750] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3912'. [ 539.584866][T21751] team0: Port device team_slave_0 removed [ 539.600165][T21739] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3911'. [ 539.609229][T21739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3911'. [ 539.752072][T21754] bond5: option packets_per_slave: invalid value (1048582) [ 539.759901][T21754] bond5: option packets_per_slave: allowed values 0 - 65535 [ 539.800855][T21754] bond5 (unregistering): Released all slaves [ 540.168322][T21766] ip6gre1: entered promiscuous mode [ 540.173710][T21766] ip6gre1: entered allmulticast mode [ 540.919362][T11004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.927122][T11004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.946974][T21819] xt_hashlimit: size too large, truncated to 1048576 [ 541.003678][T13584] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.133976][T13584] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.156659][T21828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.167595][T21828] netlink: 'syz.3.3928': attribute type 21 has an invalid length. [ 541.175484][T21828] __nla_validate_parse: 7 callbacks suppressed [ 541.175502][T21828] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3928'. [ 541.200689][T21828] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3928'. [ 541.294597][T21828] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 541.362458][ T137] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 541.481745][T13584] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.499508][T21834] netlink: 'syz.0.3929': attribute type 13 has an invalid length. [ 541.507358][T21834] netlink: 'syz.0.3929': attribute type 17 has an invalid length. [ 541.529093][T11006] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 541.549948][T21833] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.557316][T21833] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.603129][T21845] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3930'. [ 541.667109][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3934'. [ 541.727269][T21833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.740048][T21833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.761667][T21833] tipc: Resetting bearer [ 541.767760][T21833] tipc: Resetting bearer [ 541.847680][T21833] tipc: Resetting bearer [ 541.914711][T21834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.943017][T21834] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.974928][T21834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.015399][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3936'. [ 542.036856][T21834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.055474][T21834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.070686][T21834] veth1_to_hsr: left allmulticast mode [ 542.078948][T21834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 542.089648][T21834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.101215][T21834] tipc: Resetting bearer [ 542.106894][T21834] tipc: Resetting bearer [ 542.114372][T21834] tipc: Resetting bearer [ 542.133693][T21834] veth1_macvtap: left promiscuous mode [ 542.141209][T21834] veth0_macvtap: left promiscuous mode [ 542.149809][T21834] veth0_macvtap: entered promiscuous mode [ 542.166382][T21834] veth1_macvtap: entered promiscuous mode [ 542.190691][T21834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.201398][T21834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.213372][T21834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.222723][T21834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.234011][T21834] 8021q: adding VLAN 0 to HW filter on device eth0 [ 542.247669][T21834] 8021q: adding VLAN 0 to HW filter on device eth1 [ 542.262753][T21834] 8021q: adding VLAN 0 to HW filter on device eth2 [ 542.279018][T21834] 8021q: adding VLAN 0 to HW filter on device eth3 [ 542.291740][T21834] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.304514][T21834] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.322425][T21834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 542.331684][T21834] gtp1: left promiscuous mode [ 542.336398][T21834] gtp1: left allmulticast mode [ 542.353325][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'. [ 542.374721][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'. [ 542.387230][T21859] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 542.412503][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.420591][ T137] bridge0: port 1(bridge_slave_0) entered listening state [ 542.443426][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.451430][ T137] bridge0: port 2(bridge_slave_1) entered listening state [ 543.170629][ T137] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 543.295393][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3944'. [ 543.307774][T21912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3944'. [ 543.625171][T21925] syzkaller0: entered promiscuous mode [ 543.652264][T21925] syzkaller0: entered allmulticast mode [ 544.039721][T21937] openvswitch: netlink: IP tunnel dst address not specified [ 544.113846][T21940] netlink: 'syz.3.3951': attribute type 13 has an invalid length. [ 544.138685][T21940] netlink: 'syz.3.3951': attribute type 17 has an invalid length. [ 544.257284][T21940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.259562][T21945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3951'. [ 544.277946][T21940] bond4: left promiscuous mode [ 544.287364][T21940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.296401][T21940] 8021q: adding VLAN 0 to HW filter on device eth0 [ 544.346928][T21940] 8021q: adding VLAN 0 to HW filter on device eth1 [ 544.361179][T21940] 8021q: adding VLAN 0 to HW filter on device eth2 [ 544.384358][T21940] 8021q: adding VLAN 0 to HW filter on device eth3 [ 544.397395][T21940] vlan2: left promiscuous mode [ 544.404465][T21940] ip6gre1: left promiscuous mode [ 544.409414][T21940] ip6gre1: left allmulticast mode [ 544.433841][ T137] bond5: (slave ip6gretap2): link status up again after 0 ms [ 544.438236][ T5360] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.458317][ T137] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 544.547830][T11010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.555578][T11010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.599671][T11006] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 544.866001][T11006] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 544.986198][ T137] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 544.986794][T13583] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 545.089143][T11010] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 546.360939][T22038] __nla_validate_parse: 7 callbacks suppressed [ 546.360952][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 546.378334][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 546.466159][T11005] net_ratelimit: 8 callbacks suppressed [ 546.466178][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 546.602134][ T137] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 546.740238][ T137] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 546.828837][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 546.828856][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 546.978830][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 547.091917][T22071] tipc: Enabling of bearer rejected, already enabled [ 547.133975][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 547.211028][T22067] pim6reg1: entered promiscuous mode [ 547.216363][T22067] pim6reg1: entered allmulticast mode [ 547.326618][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3990'. [ 547.405555][ T137] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 547.477600][T22074] tipc: New replicast peer: 255.255.255.255 [ 547.484265][T22074] tipc: Enabled bearer , priority 10 [ 547.513741][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 547.647696][T22097] openvswitch: netlink: Flow actions attr not present in new flow. [ 547.670114][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 547.675008][T22097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3996'. [ 547.700427][T22097] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3996'. [ 547.827056][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 548.484824][ T5360] tipc: Node number set to 3044487504 [ 548.928715][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.050112][T22112] sit1: entered allmulticast mode [ 551.374834][T22119] netlink: 5680 bytes leftover after parsing attributes in process `syz.2.4003'. [ 551.440360][T22119] netlink: 4500 bytes leftover after parsing attributes in process `syz.2.4003'. [ 551.494149][T22128] netlink: 4500 bytes leftover after parsing attributes in process `syz.2.4003'. [ 551.533870][T22124] pimreg: entered allmulticast mode [ 551.569423][T11017] net_ratelimit: 32 callbacks suppressed [ 551.569443][T11017] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 551.586630][T22132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4002'. [ 551.666204][T22123] pimreg: left allmulticast mode [ 551.751276][T22134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4006'. [ 551.779802][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4006'. [ 551.842368][T22134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4006'. [ 551.851713][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 551.866689][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4006'. [ 551.969461][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 552.101743][T11010] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 552.186060][T22153] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 552.212690][T22153] syzkaller1: linktype set to 0 [ 552.268564][T22162] netlink: 'syz.5.4016': attribute type 10 has an invalid length. [ 552.286920][T11006] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 552.301673][T22162] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4016'. [ 552.352404][T22165] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4016'. [ 552.460419][ T29] audit: type=1800 audit(1778363921.777:15): pid=22162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4016" name="memory.events" dev="tmpfs" ino=2397 res=0 errno=0 [ 552.799558][T11010] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 552.932898][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 553.016702][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 553.136751][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 553.428987][T11010] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 554.286347][T22221] ip6gre2: entered allmulticast mode [ 554.330450][T22221] team0: Device ip6gre2 is of different type [ 554.562252][T22240] SET target dimension over the limit! [ 554.619262][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 554.879888][T22243] @0Ùÿÿ: renamed from bond_slave_1 (while UP) [ 555.746474][T22272] FAULT_INJECTION: forcing a failure. [ 555.746474][T22272] name failslab, interval 1, probability 0, space 0, times 0 [ 555.814266][T22272] CPU: 1 UID: 0 PID: 22272 Comm: syz.0.4046 Not tainted syzkaller #0 PREEMPT(full) [ 555.814297][T22272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.814308][T22272] Call Trace: [ 555.814315][T22272] [ 555.814323][T22272] dump_stack_lvl+0xe8/0x150 [ 555.814350][T22272] should_fail_ex+0x412/0x560 [ 555.814379][T22272] should_failslab+0xa8/0x100 [ 555.814407][T22272] __kmalloc_cache_noprof+0x88/0x660 [ 555.814430][T22272] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 555.814457][T22272] ? sctp_add_bind_addr+0x8c/0x370 [ 555.814487][T22272] sctp_add_bind_addr+0x8c/0x370 [ 555.814517][T22272] sctp_copy_local_addr_list+0x314/0x4f0 [ 555.814546][T22272] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 555.814572][T22272] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 555.814601][T22272] ? sctp_v4_is_any+0x35/0x60 [ 555.814617][T22272] ? sctp_copy_one_addr+0x93/0x360 [ 555.814645][T22272] sctp_bind_addr_copy+0xb3/0x3c0 [ 555.814672][T22272] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 555.814698][T22272] sctp_connect_new_asoc+0x2ff/0x6b0 [ 555.814722][T22272] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 555.814750][T22272] ? __local_bh_enable_ip+0xd0/0x130 [ 555.814767][T22272] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 555.814791][T22272] ? security_sctp_bind_connect+0x7e/0x2c0 [ 555.814815][T22272] sctp_sendmsg+0x1528/0x2c10 [ 555.814833][T22272] ? unwind_next_frame+0xa6/0x2550 [ 555.814870][T22272] ? __pfx_sctp_sendmsg+0x10/0x10 [ 555.814893][T22272] ? aa_sk_perm+0x6d5/0x900 [ 555.814923][T22272] ? __pfx_aa_sk_perm+0x10/0x10 [ 555.814949][T22272] ? sock_rps_record_flow+0x19/0x350 [ 555.814972][T22272] ? inet_sendmsg+0x2f4/0x370 [ 555.814995][T22272] ____sys_sendmsg+0x80a/0x9f0 [ 555.815030][T22272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.815065][T22272] ? import_iovec+0x73/0xa0 [ 555.815093][T22272] ___sys_sendmsg+0x2a5/0x360 [ 555.815117][T22272] ? __lock_acquire+0x6b5/0x2cf0 [ 555.815147][T22272] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.815210][T22272] ? __fget_files+0x2a/0x420 [ 555.815230][T22272] ? __fget_files+0x3a0/0x420 [ 555.815261][T22272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.815291][T22272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.815327][T22272] ? __pfx_ksys_write+0x10/0x10 [ 555.815360][T22272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.815380][T22272] do_syscall_64+0x15f/0xf80 [ 555.815397][T22272] ? trace_irq_disable+0x3b/0x140 [ 555.815421][T22272] ? clear_bhb_loop+0x40/0x90 [ 555.815443][T22272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.815461][T22272] RIP: 0033:0x7fab55d9cdd9 [ 555.815478][T22272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.815493][T22272] RSP: 002b:00007fab56c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.815512][T22272] RAX: ffffffffffffffda RBX: 00007fab56015fa0 RCX: 00007fab55d9cdd9 [ 555.815525][T22272] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 555.815536][T22272] RBP: 00007fab56c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 555.815546][T22272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.815555][T22272] R13: 00007fab56016038 R14: 00007fab56015fa0 R15: 00007fffd98f76c8 [ 555.815586][T22272] [ 556.168233][T22277] FAULT_INJECTION: forcing a failure. [ 556.168233][T22277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.181306][T22277] CPU: 1 UID: 0 PID: 22277 Comm: syz.5.4047 Not tainted syzkaller #0 PREEMPT(full) [ 556.181330][T22277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.181341][T22277] Call Trace: [ 556.181348][T22277] [ 556.181356][T22277] dump_stack_lvl+0xe8/0x150 [ 556.181383][T22277] should_fail_ex+0x412/0x560 [ 556.181412][T22277] _copy_from_user+0x2d/0xb0 [ 556.181438][T22277] ___sys_sendmsg+0x1c6/0x360 [ 556.181464][T22277] ? __lock_acquire+0x6b5/0x2cf0 [ 556.181488][T22277] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.181547][T22277] ? __fget_files+0x2a/0x420 [ 556.181569][T22277] ? __fget_files+0x3a0/0x420 [ 556.181599][T22277] __x64_sys_sendmsg+0x1bd/0x2a0 [ 556.181628][T22277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.181663][T22277] ? __pfx_ksys_write+0x10/0x10 [ 556.181698][T22277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.181717][T22277] do_syscall_64+0x15f/0xf80 [ 556.181734][T22277] ? trace_irq_disable+0x3b/0x140 [ 556.181759][T22277] ? clear_bhb_loop+0x40/0x90 [ 556.181780][T22277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.181797][T22277] RIP: 0033:0x7f19f5d9cdd9 [ 556.181814][T22277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.181830][T22277] RSP: 002b:00007f19f6c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.181848][T22277] RAX: ffffffffffffffda RBX: 00007f19f6015fa0 RCX: 00007f19f5d9cdd9 [ 556.181861][T22277] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 556.181872][T22277] RBP: 00007f19f6c57090 R08: 0000000000000000 R09: 0000000000000000 [ 556.181883][T22277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.181894][T22277] R13: 00007f19f6016038 R14: 00007f19f6015fa0 R15: 00007ffeda343478 [ 556.181923][T22277] [ 556.294261][T22284] netlink: 'syz.0.4049': attribute type 6 has an invalid length. [ 556.486953][T22284] __nla_validate_parse: 9 callbacks suppressed [ 556.486972][T22284] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4049'. [ 556.658185][T11007] net_ratelimit: 21 callbacks suppressed [ 556.658206][T11007] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 556.760007][T11007] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 556.813896][T22297] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4053'. [ 556.835832][T22298] netlink: 'syz.5.4054': attribute type 4 has an invalid length. [ 556.853211][T22301] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.4055'. [ 556.890516][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 556.902792][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4054'. [ 556.918108][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4054'. [ 556.939563][T22303] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 556.946639][T22303] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 557.006491][T11006] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 557.139416][T11006] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 557.140505][T22313] FAULT_INJECTION: forcing a failure. [ 557.140505][T22313] name failslab, interval 1, probability 0, space 0, times 0 [ 557.159433][T22313] CPU: 1 UID: 0 PID: 22313 Comm: syz.5.4058 Not tainted syzkaller #0 PREEMPT(full) [ 557.159456][T22313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.159467][T22313] Call Trace: [ 557.159474][T22313] [ 557.159481][T22313] dump_stack_lvl+0xe8/0x150 [ 557.159507][T22313] should_fail_ex+0x412/0x560 [ 557.159535][T22313] should_failslab+0xa8/0x100 [ 557.159563][T22313] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 557.159589][T22313] ? __alloc_skb+0x186/0x7d0 [ 557.159610][T22313] ? __alloc_skb+0x1d0/0x7d0 [ 557.159631][T22313] ? __local_bh_enable_ip+0xd0/0x130 [ 557.159654][T22313] __alloc_skb+0x1d0/0x7d0 [ 557.159681][T22313] netlink_sendmsg+0x5d4/0xb40 [ 557.159716][T22313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.159744][T22313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 557.159769][T22313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.159796][T22313] ____sys_sendmsg+0x972/0x9f0 [ 557.159821][T22313] ? __might_fault+0xaf/0x130 [ 557.159849][T22313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.159883][T22313] ? import_iovec+0x73/0xa0 [ 557.159921][T22313] ___sys_sendmsg+0x2a5/0x360 [ 557.159945][T22313] ? __lock_acquire+0x6b5/0x2cf0 [ 557.159968][T22313] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.160028][T22313] ? __fget_files+0x2a/0x420 [ 557.160049][T22313] ? __fget_files+0x3a0/0x420 [ 557.160079][T22313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 557.160108][T22313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.160143][T22313] ? __pfx_ksys_write+0x10/0x10 [ 557.160176][T22313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.160195][T22313] do_syscall_64+0x15f/0xf80 [ 557.160212][T22313] ? trace_irq_disable+0x3b/0x140 [ 557.160237][T22313] ? clear_bhb_loop+0x40/0x90 [ 557.160259][T22313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.160276][T22313] RIP: 0033:0x7f19f5d9cdd9 [ 557.160294][T22313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.160308][T22313] RSP: 002b:00007f19f6c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.160328][T22313] RAX: ffffffffffffffda RBX: 00007f19f6015fa0 RCX: 00007f19f5d9cdd9 [ 557.160341][T22313] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 557.160352][T22313] RBP: 00007f19f6c57090 R08: 0000000000000000 R09: 0000000000000000 [ 557.160363][T22313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.160373][T22313] R13: 00007f19f6016038 R14: 00007f19f6015fa0 R15: 00007ffeda343478 [ 557.160402][T22313] [ 557.190354][T11006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.440582][T22317] FAULT_INJECTION: forcing a failure. [ 557.440582][T22317] name failslab, interval 1, probability 0, space 0, times 0 [ 557.453303][T22317] CPU: 1 UID: 0 PID: 22317 Comm: syz.2.4059 Not tainted syzkaller #0 PREEMPT(full) [ 557.453326][T22317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.453335][T22317] Call Trace: [ 557.453343][T22317] [ 557.453350][T22317] dump_stack_lvl+0xe8/0x150 [ 557.453377][T22317] should_fail_ex+0x412/0x560 [ 557.453406][T22317] should_failslab+0xa8/0x100 [ 557.453435][T22317] __kmalloc_cache_noprof+0x88/0x660 [ 557.453460][T22317] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 557.453485][T22317] ? sctp_add_bind_addr+0x8c/0x370 [ 557.453532][T22317] sctp_add_bind_addr+0x8c/0x370 [ 557.453563][T22317] sctp_copy_local_addr_list+0x314/0x4f0 [ 557.453589][T22317] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 557.453613][T22317] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 557.453641][T22317] ? sctp_v4_is_any+0x35/0x60 [ 557.453663][T22317] ? sctp_copy_one_addr+0x93/0x360 [ 557.453689][T22317] sctp_bind_addr_copy+0xb3/0x3c0 [ 557.453714][T22317] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 557.453740][T22317] sctp_connect_new_asoc+0x2ff/0x6b0 [ 557.453763][T22317] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 557.453789][T22317] ? __local_bh_enable_ip+0xd0/0x130 [ 557.453805][T22317] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 557.453828][T22317] ? security_sctp_bind_connect+0x7e/0x2c0 [ 557.453850][T22317] sctp_sendmsg+0x1528/0x2c10 [ 557.453868][T22317] ? unwind_next_frame+0xa6/0x2550 [ 557.453903][T22317] ? __pfx_sctp_sendmsg+0x10/0x10 [ 557.453925][T22317] ? aa_sk_perm+0x6d5/0x900 [ 557.453955][T22317] ? __pfx_aa_sk_perm+0x10/0x10 [ 557.453980][T22317] ? sock_rps_record_flow+0x19/0x350 [ 557.454002][T22317] ? inet_sendmsg+0x2f4/0x370 [ 557.454024][T22317] ____sys_sendmsg+0x80a/0x9f0 [ 557.454060][T22317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.454095][T22317] ? import_iovec+0x73/0xa0 [ 557.454122][T22317] ___sys_sendmsg+0x2a5/0x360 [ 557.454146][T22317] ? __lock_acquire+0x6b5/0x2cf0 [ 557.454170][T22317] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.454232][T22317] ? __fget_files+0x2a/0x420 [ 557.454253][T22317] ? __fget_files+0x3a0/0x420 [ 557.454285][T22317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 557.454315][T22317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.454350][T22317] ? __pfx_ksys_write+0x10/0x10 [ 557.454384][T22317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.454404][T22317] do_syscall_64+0x15f/0xf80 [ 557.454419][T22317] ? trace_irq_disable+0x3b/0x140 [ 557.454443][T22317] ? clear_bhb_loop+0x40/0x90 [ 557.454462][T22317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.454478][T22317] RIP: 0033:0x7f71b9b9cdd9 [ 557.454495][T22317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.454508][T22317] RSP: 002b:00007f71bab15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.454526][T22317] RAX: ffffffffffffffda RBX: 00007f71b9e16090 RCX: 00007f71b9b9cdd9 [ 557.454538][T22317] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 557.454549][T22317] RBP: 00007f71bab15090 R08: 0000000000000000 R09: 0000000000000000 [ 557.454558][T22317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.454568][T22317] R13: 00007f71b9e16128 R14: 00007f71b9e16090 R15: 00007ffd0ce6f698 [ 557.454596][T22317] [ 557.455249][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 557.820471][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.882283][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.890207][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 557.897549][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 557.962188][T22328] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4062'. [ 557.980606][T22328] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4062'. [ 558.127225][T11008] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 558.159473][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 558.252627][T22333] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4063'. [ 558.319348][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 558.570205][T22339] syzkaller0: entered promiscuous mode [ 558.587290][T22339] syzkaller0: entered allmulticast mode [ 559.483215][T22373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4073'. [ 559.568950][T22373] nbd: must specify a device to reconfigure [ 559.681117][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4078'. [ 560.353912][T22416] bond9: entered allmulticast mode [ 560.697413][T22433] xt_l2tp: invalid flags combination: 8 [ 560.725337][T22433] netlink: 'syz.1.4091': attribute type 1 has an invalid length. [ 560.781456][T22433] gre0: entered promiscuous mode [ 560.786437][T22433] gre0: entered allmulticast mode [ 561.057434][T22444] ipip1: entered promiscuous mode [ 561.234549][T22463] xt_HMARK: proto mask must be zero with L3 mode [ 561.384447][T22464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.675261][T11006] net_ratelimit: 23 callbacks suppressed [ 561.676104][T11006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.113586][T22464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.136351][T13288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.188851][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 562.238156][T22504] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 562.386335][T22512] __nla_validate_parse: 8 callbacks suppressed [ 562.386354][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 562.427802][ T5630] Bluetooth: hci3: link tx timeout [ 562.444300][ T5630] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 562.466235][T22512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4105'. [ 562.583874][T22514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4106'. [ 562.647913][T22512] geneve2: entered promiscuous mode [ 562.654201][T22512] geneve2: entered allmulticast mode [ 562.913420][T11006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.943910][T22464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.019226][T11007] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.038696][T11007] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.103011][T11007] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.120007][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 563.184609][T11007] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.215920][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.295568][T22550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4113'. [ 563.297924][T22464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.399017][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 563.522091][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 563.643556][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 563.748449][T11005] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 563.773682][T22573] netlink: 'syz.1.4118': attribute type 3 has an invalid length. [ 563.807916][T22573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'. [ 563.851117][T11010] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 563.870617][T22573] netlink: 'syz.1.4118': attribute type 1 has an invalid length. [ 564.042231][T22573] 8021q: adding VLAN 0 to HW filter on device bond5 [ 564.120028][T22580] bond5: (slave geneve3): making interface the new active one [ 564.135346][T22580] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 564.151410][T11010] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.179031][T11010] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.234979][T11010] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.260896][T11010] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.269913][T11010] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.298893][T11010] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 564.344423][T11010] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.362039][T11010] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.491460][T22593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4125'. [ 564.509344][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 564.641205][T22593] bond2 (unregistering): Released all slaves [ 564.857861][T22600] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.968054][T22613] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4128'. [ 565.129524][T22600] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.158983][T22619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4129'. [ 565.293008][T22600] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.445373][T22600] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.594945][T22626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4131'. [ 565.669654][T11007] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.694671][T11007] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.721262][T11007] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.750887][T22631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4133'. [ 565.807539][T11007] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.779842][T22673] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 567.101059][T11008] net_ratelimit: 19 callbacks suppressed [ 567.101076][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 567.201555][T22698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.302481][T11007] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 567.325227][T13583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.441849][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 567.449911][T11008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.552754][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 567.669679][T11011] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 567.779169][T11011] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 567.888754][T11011] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 569.875395][T22681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.891819][T22700] workqueue: name exceeds WQ_NAME_LEN. Truncating to: çþÏ€Ôxµ…üô–)%ë ]ÓÙ.˜>„n÷6‡# [ 569.949724][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.117598][T22711] __nla_validate_parse: 5 callbacks suppressed [ 570.117616][T22711] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4155'. [ 570.199071][T22715] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20002 [ 570.599062][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 571.257620][T22766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4165'. [ 571.483907][T22772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4167'. [ 571.596873][T22779] netlink: 'syz.1.4170': attribute type 1 has an invalid length. [ 571.735481][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 571.802420][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4171'. [ 571.877736][T22789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4168'. [ 571.903664][T22790] netlink: 'syz.0.4171': attribute type 1 has an invalid length. [ 572.224648][T22762] erspan1: left promiscuous mode [ 572.230100][T22762] erspan1: left allmulticast mode [ 572.236412][T22762] bond5: left promiscuous mode [ 572.279751][T22762] geneve2: left promiscuous mode [ 572.345817][T22762] vlan2: left promiscuous mode [ 572.359044][T22762] bond6: left promiscuous mode [ 572.364075][T22762] batadv2: left promiscuous mode [ 572.370134][T22762] vlan2: left allmulticast mode [ 572.375353][T22762] bond6: left allmulticast mode [ 572.381129][T22762] batadv2: left allmulticast mode [ 572.393597][T22762] bond7: left promiscuous mode [ 572.399245][T22762] veth9: left promiscuous mode [ 572.429809][T22762] bridge2: left promiscuous mode [ 572.443641][T22762] bridge3: left promiscuous mode [ 572.459692][T22762] gretap3: left allmulticast mode [ 572.491781][T22762] bond9: left allmulticast mode [ 572.500653][T22766] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 572.661785][T11008] net_ratelimit: 35 callbacks suppressed [ 572.661819][T11008] bond5: (slave ip6gretap2): link status up again after 0 ms [ 572.695557][T13583] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.729121][T11011] bond5: (slave ip6gretap2): link status up again after 0 ms [ 572.737794][T22779] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 572.759393][T22790] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 572.768904][T11007] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.789078][T11008] bond5: (slave ip6gretap2): link status up again after 0 ms [ 572.805818][T11007] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.814615][T11007] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.823705][T11007] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.834249][T11007] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.843346][T11007] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.858305][T22806] pimreg: entered allmulticast mode [ 572.866541][T11007] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.886842][T11007] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.895980][T11011] bond5: (slave ip6gretap2): link status up again after 0 ms [ 572.939890][T11008] bond5: (slave ip6gretap2): link status up again after 0 ms [ 572.988993][T11008] bond5: (slave ip6gretap2): link status up again after 0 ms [ 573.025778][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4179'. [ 573.058771][T11004] bond5: (slave ip6gretap2): link status up again after 0 ms [ 573.076665][T22810] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4176'. [ 573.112116][T22818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4178'. [ 573.125811][T11004] bond5: (slave ip6gretap2): link status up again after 0 ms [ 573.223625][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.230967][ C1] bridge0: topology change detected, propagating [ 573.237627][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.244840][ C1] bridge0: topology change detected, propagating [ 573.251652][T11004] bond5: (slave ip6gretap2): link status up again after 0 ms [ 573.259278][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 573.334655][ T5360] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.536878][T22847] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4182'. [ 573.924030][T22865] dvmrp0: entered allmulticast mode [ 574.074601][T22875] ip6erspan1: entered allmulticast mode [ 574.189923][T22885] pimreg: tun_chr_ioctl cmd 1074025677 [ 574.195606][T22885] pimreg: linktype set to 823 [ 575.095714][T22904] blkio.reset_stats is deprecated [ 575.217758][T22905] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 575.570327][T22921] netlink: 'syz.2.4199': attribute type 1 has an invalid length. [ 575.703992][T22921] bond2: entered promiscuous mode [ 575.721001][T22921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.798323][T22930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.806862][T22930] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 575.817247][T22930] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 575.832130][T22930] bond2: (slave ip6gre1): making interface the new active one [ 575.839672][T22930] ip6gre1: entered promiscuous mode [ 575.846020][T22930] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 575.895424][T22935] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 576.081671][T22950] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 576.272587][T22958] bond3: option updelay: invalid value (18446744073709518847) [ 576.280067][T22958] bond3: option updelay: allowed values 0 - 2147483647 [ 576.310666][T22958] bond3 (unregistering): Released all slaves [ 576.375733][T22965] __nla_validate_parse: 5 callbacks suppressed [ 576.375753][T22965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'. [ 576.846347][T22977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4216'. [ 576.857848][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4216'. [ 576.859782][T22980] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 576.978297][T22984] netlink: 'syz.1.4217': attribute type 13 has an invalid length. [ 577.003171][T22984] netlink: 'syz.1.4217': attribute type 17 has an invalid length. [ 577.037979][T22984] gre0: left promiscuous mode [ 577.051910][T22984] gre0: left allmulticast mode [ 577.092534][T22984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.101254][T22984] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.115513][T22984] veth1: left promiscuous mode [ 577.138924][T22984] veth1: left allmulticast mode [ 577.221505][T22993] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 577.237446][T22984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.257283][T22984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.268211][T22984] hsr0: left allmulticast mode [ 577.273847][T22984] hsr_slave_0: left allmulticast mode [ 577.279986][T22984] hsr_slave_1: left allmulticast mode [ 577.319924][T22984] veth1_vlan: left promiscuous mode [ 577.327672][T23000] netlink: 'syz.2.4220': attribute type 10 has an invalid length. [ 577.335908][T23000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4220'. [ 577.339198][T22984] veth0_vlan: left promiscuous mode [ 577.351683][T22984] veth0_vlan: entered promiscuous mode [ 577.365836][T22984] veth1_vlan: entered promiscuous mode [ 577.372715][T22984] veth1_vlan: entered allmulticast mode [ 577.379331][T22984] macvlan0: left allmulticast mode [ 577.385422][T22984] veth1_vlan: left allmulticast mode [ 577.403396][T22984] veth1_macvtap: left promiscuous mode [ 577.410359][T22984] veth0_macvtap: left promiscuous mode [ 577.425329][T22984] veth0_macvtap: entered promiscuous mode [ 577.439733][T22984] veth1_macvtap: entered promiscuous mode [ 577.448625][T22984] bridge0: port 3(vlan2) entered blocking state [ 577.454969][T22984] bridge0: port 3(vlan2) entered forwarding state [ 577.476825][T22984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.485042][T22984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.505745][T22984] syzkaller0: left promiscuous mode [ 577.510970][T22984] syzkaller0: left allmulticast mode [ 577.542265][T22984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.557917][T22984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 577.565772][T22984] gretap2: left allmulticast mode [ 577.575953][T22984] 8021q: adding VLAN 0 to HW filter on device eth0 [ 577.587719][T22984] 8021q: adding VLAN 0 to HW filter on device eth1 [ 577.599358][T22984] 8021q: adding VLAN 0 to HW filter on device eth2 [ 577.646460][T22984] 8021q: adding VLAN 0 to HW filter on device eth3 [ 577.665530][T22984] ipip1: left promiscuous mode [ 577.671998][T22984] geneve2: left promiscuous mode [ 577.677298][T22984] geneve2: left allmulticast mode [ 577.687495][T22984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.697212][ T5729] bridge0: entered promiscuous mode [ 577.729567][T11015] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.737988][T11015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.747692][T11015] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.754893][T11015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.812054][T23000] team0: Port device geneve1 added [ 578.024788][T22993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.050209][T11017] net_ratelimit: 25 callbacks suppressed [ 578.050231][T11017] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 578.231167][T11017] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 578.279376][T11017] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 578.335074][T23007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4221'. [ 578.430788][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 578.486408][T23007] netlink: 'syz.1.4221': attribute type 10 has an invalid length. [ 578.514232][T23007] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 578.533208][T23022] syzkaller0: entered promiscuous mode [ 578.545954][T23022] syzkaller0: entered allmulticast mode [ 578.708903][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 578.758348][T23025] bridge0: port 1(erspan0) entered blocking state [ 578.788894][T23025] bridge0: port 1(erspan0) entered disabled state [ 578.808485][T23025] erspan0: entered allmulticast mode [ 578.828567][T23025] erspan0: entered promiscuous mode [ 578.846036][T23030] erspan0: left allmulticast mode [ 578.855876][T23030] erspan0: left promiscuous mode [ 578.873346][T23030] bridge0: port 1(erspan0) entered disabled state [ 578.927337][T23025] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4226'. [ 578.936556][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 579.073362][T11017] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 579.209600][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 579.421500][T23060] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4237'. [ 579.433040][T23060] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4237'. [ 579.499313][T11015] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 579.658927][T11004] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 579.693352][T13288] IPVS: starting estimator thread 0... [ 579.823395][T23083] netlink: 'syz.3.4245': attribute type 3 has an invalid length. [ 579.823450][T11008] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 579.868971][T23081] IPVS: using max 32 ests per chain, 76800 per kthread [ 579.894023][T23090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4247'. [ 579.978256][T23096] netem: change failed [ 580.442979][T23112] team_slave_0: left promiscuous mode [ 580.448413][T23112] team_slave_1: left promiscuous mode [ 580.873169][T23135] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4257'. [ 581.016112][T23123] ip6erspan0: entered allmulticast mode [ 581.023959][T23124] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 581.034141][T23124] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 581.044603][T23124] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 581.060293][T23124] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 581.085230][T23124] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 581.111114][T23124] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 581.140550][T23124] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 581.165856][T23124] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 581.376758][T23151] ip6erspan0: entered promiscuous mode [ 581.384389][T23151] ip6erspan0: entered allmulticast mode [ 581.523569][T23157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4264'. [ 581.883341][T23165] : renamed from bond0 [ 582.188994][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 582.239174][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4270'. [ 582.973976][T23182] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 582.990676][T23182] CPU: 0 UID: 0 PID: 23182 Comm: syz.2.4270 Not tainted syzkaller #0 PREEMPT(full) [ 582.990705][T23182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 582.990719][T23182] Call Trace: [ 582.990728][T23182] [ 582.990736][T23182] dump_stack_lvl+0xe8/0x150 [ 582.990767][T23182] sysfs_warn_dup+0x8e/0xa0 [ 582.990794][T23182] sysfs_do_create_link_sd+0xc0/0x110 [ 582.990823][T23182] device_add_class_symlinks+0x1cf/0x240 [ 582.990853][T23182] device_add+0x475/0xbb0 [ 582.990882][T23182] wiphy_register+0x1fb1/0x2fe0 [ 582.990922][T23182] ? __pfx_wiphy_register+0x10/0x10 [ 582.990947][T23182] ? __pfx_netdev_run_todo+0x10/0x10 [ 582.990969][T23182] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 582.991004][T23182] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 582.991043][T23182] ieee80211_register_hw+0x3c53/0x4910 [ 582.991080][T23182] ? ieee80211_register_hw+0x1971/0x4910 [ 582.991154][T23182] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 582.991183][T23182] ? __asan_memset+0x22/0x50 [ 582.991209][T23182] ? __hrtimer_setup+0x1b7/0x260 [ 582.991235][T23182] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 582.991273][T23182] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 582.991336][T23182] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 582.991362][T23182] ? kstrndup+0xbf/0x160 [ 582.991394][T23182] hwsim_new_radio_nl+0xe20/0x26e0 [ 582.991419][T23182] ? unwind_next_frame+0xa6/0x2550 [ 582.991464][T23182] ? is_bpf_text_address+0x26/0x2b0 [ 582.991499][T23182] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 582.991525][T23182] ? __kernel_text_address+0xd/0x30 [ 582.991554][T23182] ? unwind_get_return_address+0x4d/0x90 [ 582.991579][T23182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 582.991610][T23182] ? arch_stack_walk+0xfb/0x150 [ 582.991652][T23182] ? stack_trace_save+0xa9/0x100 [ 582.991682][T23182] ? __pfx_stack_trace_save+0x10/0x10 [ 582.991716][T23182] ? stack_depot_save_flags+0x33/0x810 [ 582.991761][T23182] ? __nla_validate_parse+0x2480/0x2dc0 [ 582.991789][T23182] ? ____sys_sendmsg+0x972/0x9f0 [ 582.991818][T23182] ? ___sys_sendmsg+0x2a5/0x360 [ 582.991869][T23182] ? __pfx___nla_validate_parse+0x10/0x10 [ 582.991921][T23182] ? rcu_is_watching+0x15/0xb0 [ 582.991947][T23182] ? trace_kmalloc+0x2a/0xf0 [ 582.991982][T23182] ? __nla_parse+0x40/0x60 [ 582.992016][T23182] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 582.992040][T23182] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 582.992074][T23182] genl_family_rcv_msg_doit+0x22a/0x330 [ 582.992106][T23182] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 582.992146][T23182] ? bpf_lsm_capable+0x9/0x20 [ 582.992165][T23182] ? security_capable+0x7e/0x2c0 [ 582.992199][T23182] genl_rcv_msg+0x61c/0x7a0 [ 582.992230][T23182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 582.992258][T23182] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 582.992300][T23182] netlink_rcv_skb+0x232/0x4b0 [ 582.992331][T23182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 582.992356][T23182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.992405][T23182] ? down_read+0x270/0x2e0 [ 582.992424][T23182] ? genl_rcv+0xd/0x40 [ 582.992448][T23182] genl_rcv+0x28/0x40 [ 582.992469][T23182] netlink_unicast+0x75c/0x8e0 [ 582.992509][T23182] netlink_sendmsg+0x813/0xb40 [ 582.992549][T23182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.992584][T23182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 582.992614][T23182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.992645][T23182] ____sys_sendmsg+0x972/0x9f0 [ 582.992676][T23182] ? __might_fault+0xaf/0x130 [ 582.992710][T23182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.992752][T23182] ? import_iovec+0x73/0xa0 [ 582.992786][T23182] ___sys_sendmsg+0x2a5/0x360 [ 582.992817][T23182] ? __lock_acquire+0x6b5/0x2cf0 [ 582.992845][T23182] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.992885][T23182] ? futex_wake+0x4ac/0x580 [ 582.992944][T23182] ? __fget_files+0x2a/0x420 [ 582.992968][T23182] ? __fget_files+0x3a0/0x420 [ 582.993006][T23182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 582.993042][T23182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.993084][T23182] ? rcu_is_watching+0x15/0xb0 [ 582.993120][T23182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.993143][T23182] do_syscall_64+0x15f/0xf80 [ 582.993162][T23182] ? trace_irq_disable+0x3b/0x140 [ 582.993192][T23182] ? clear_bhb_loop+0x40/0x90 [ 582.993219][T23182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.993244][T23182] RIP: 0033:0x7f71b9b9cdd9 [ 582.993264][T23182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.993282][T23182] RSP: 002b:00007f71bab15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.993304][T23182] RAX: ffffffffffffffda RBX: 00007f71b9e16090 RCX: 00007f71b9b9cdd9 [ 582.993320][T23182] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 582.993333][T23182] RBP: 00007f71b9c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 582.993347][T23182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.993359][T23182] R13: 00007f71b9e16128 R14: 00007f71b9e16090 R15: 00007ffd0ce6f698 [ 582.993395][T23182] [ 583.812276][T23210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4278'. [ 583.838318][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4278'. [ 584.247514][T23240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4285'. [ 584.257975][T23241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4285'. [ 584.997291][T23260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4288'. [ 585.011004][T23260] netlink: 'syz.0.4288': attribute type 8 has an invalid length. [ 585.777310][T23274] : renamed from bond0 [ 586.588817][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 586.688668][T23210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.702969][T23278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4291'. [ 586.983565][T23288] pim6reg: entered allmulticast mode [ 587.017970][T23295] pim6reg: left allmulticast mode [ 587.059664][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4298'. [ 587.071313][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4298'. [ 587.113905][T23304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4300'. [ 587.183017][T23307] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4301'. [ 587.192015][T23307] nbd: illegal input index 808464432 [ 587.263327][T23310] syzkaller1: entered promiscuous mode [ 587.268844][T23310] syzkaller1: entered allmulticast mode [ 587.315824][T23315] syzkaller1: entered promiscuous mode [ 587.322475][T23315] syzkaller1: entered allmulticast mode [ 587.335211][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4304'. [ 587.477765][T23322] netlink: 'syz.0.4306': attribute type 4 has an invalid length. [ 587.497419][T23322] netlink: 'syz.0.4306': attribute type 4 has an invalid length. [ 587.607249][T23333] FAULT_INJECTION: forcing a failure. [ 587.607249][T23333] name failslab, interval 1, probability 0, space 0, times 0 [ 587.619943][T23333] CPU: 0 UID: 0 PID: 23333 Comm: syz.0.4310 Not tainted syzkaller #0 PREEMPT(full) [ 587.619966][T23333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 587.619980][T23333] Call Trace: [ 587.619988][T23333] [ 587.619994][T23333] dump_stack_lvl+0xe8/0x150 [ 587.620020][T23333] should_fail_ex+0x412/0x560 [ 587.620047][T23333] should_failslab+0xa8/0x100 [ 587.620074][T23333] __kmalloc_cache_noprof+0x88/0x660 [ 587.620097][T23333] ? sctp_datamsg_from_user+0x88/0xef0 [ 587.620135][T23333] sctp_datamsg_from_user+0x88/0xef0 [ 587.620159][T23333] ? __sk_mem_raise_allocated+0x290/0x1290 [ 587.620179][T23333] ? __genradix_ptr+0x1e1/0x220 [ 587.620209][T23333] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 587.620225][T23333] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 587.620236][T23333] ? __asan_memcpy+0x40/0x70 [ 587.620252][T23333] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 587.620271][T23333] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 587.620282][T23333] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 587.620297][T23333] ? __local_bh_enable_ip+0xd0/0x130 [ 587.620307][T23333] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 587.620321][T23333] ? security_sctp_bind_connect+0x7e/0x2c0 [ 587.620334][T23333] sctp_sendmsg+0x1b3d/0x2c10 [ 587.620344][T23333] ? unwind_next_frame+0xa6/0x2550 [ 587.620364][T23333] ? __pfx_sctp_sendmsg+0x10/0x10 [ 587.620376][T23333] ? aa_sk_perm+0x6d5/0x900 [ 587.620393][T23333] ? __pfx_aa_sk_perm+0x10/0x10 [ 587.620407][T23333] ? sock_rps_record_flow+0x19/0x350 [ 587.620419][T23333] ? inet_sendmsg+0x2f4/0x370 [ 587.620431][T23333] ____sys_sendmsg+0x80a/0x9f0 [ 587.620452][T23333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.620471][T23333] ? import_iovec+0x73/0xa0 [ 587.620487][T23333] ___sys_sendmsg+0x2a5/0x360 [ 587.620500][T23333] ? __lock_acquire+0x6b5/0x2cf0 [ 587.620513][T23333] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.620546][T23333] ? __fget_files+0x2a/0x420 [ 587.620558][T23333] ? __fget_files+0x3a0/0x420 [ 587.620575][T23333] __x64_sys_sendmsg+0x1bd/0x2a0 [ 587.620591][T23333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.620610][T23333] ? __pfx_ksys_write+0x10/0x10 [ 587.620629][T23333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.620640][T23333] do_syscall_64+0x15f/0xf80 [ 587.620650][T23333] ? trace_irq_disable+0x3b/0x140 [ 587.620664][T23333] ? clear_bhb_loop+0x40/0x90 [ 587.620676][T23333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.620686][T23333] RIP: 0033:0x7fab55d9cdd9 [ 587.620697][T23333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.620706][T23333] RSP: 002b:00007fab56c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.620718][T23333] RAX: ffffffffffffffda RBX: 00007fab56015fa0 RCX: 00007fab55d9cdd9 [ 587.620725][T23333] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 587.620731][T23333] RBP: 00007fab56c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 587.620737][T23333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.620742][T23333] R13: 00007fab56016038 R14: 00007fab56015fa0 R15: 00007fffd98f76c8 [ 587.620758][T23333] [ 588.263828][T23338] syzkaller0: entered promiscuous mode [ 588.269347][T23338] syzkaller0: entered allmulticast mode [ 588.291163][T23356] netlink: 'syz.0.4316': attribute type 11 has an invalid length. [ 588.436760][T23360] syzkaller0: entered promiscuous mode [ 588.442664][T23360] syzkaller0: entered allmulticast mode [ 588.820875][T23380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4321'. [ 588.935581][T23384] FAULT_INJECTION: forcing a failure. [ 588.935581][T23384] name failslab, interval 1, probability 0, space 0, times 0 [ 588.974554][T23384] CPU: 1 UID: 0 PID: 23384 Comm: syz.2.4322 Not tainted syzkaller #0 PREEMPT(full) [ 588.974581][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.974592][T23384] Call Trace: [ 588.974599][T23384] [ 588.974606][T23384] dump_stack_lvl+0xe8/0x150 [ 588.974633][T23384] should_fail_ex+0x412/0x560 [ 588.974663][T23384] should_failslab+0xa8/0x100 [ 588.974691][T23384] __kmalloc_cache_noprof+0x88/0x660 [ 588.974716][T23384] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 588.974742][T23384] ? sctp_transport_new+0x7e/0x620 [ 588.974764][T23384] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 588.974794][T23384] sctp_transport_new+0x7e/0x620 [ 588.974820][T23384] sctp_assoc_add_peer+0x259/0x13b0 [ 588.974843][T23384] ? sctp_bind_addr_copy+0x380/0x3c0 [ 588.974877][T23384] sctp_connect_new_asoc+0x329/0x6b0 [ 588.974902][T23384] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 588.974930][T23384] ? __local_bh_enable_ip+0xd0/0x130 [ 588.974947][T23384] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 588.974972][T23384] ? security_sctp_bind_connect+0x7e/0x2c0 [ 588.975003][T23384] sctp_sendmsg+0x1528/0x2c10 [ 588.975022][T23384] ? unwind_next_frame+0xa6/0x2550 [ 588.975060][T23384] ? __pfx_sctp_sendmsg+0x10/0x10 [ 588.975084][T23384] ? aa_sk_perm+0x6d5/0x900 [ 588.975103][T23384] ? irqentry_exit+0x218/0x730 [ 588.975129][T23384] ? __pfx_aa_sk_perm+0x10/0x10 [ 588.975155][T23384] ? sock_rps_record_flow+0x19/0x350 [ 588.975178][T23384] ? inet_sendmsg+0x2f4/0x370 [ 588.975201][T23384] ____sys_sendmsg+0x80a/0x9f0 [ 588.975238][T23384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.975273][T23384] ? import_iovec+0x73/0xa0 [ 588.975302][T23384] ___sys_sendmsg+0x2a5/0x360 [ 588.975326][T23384] ? __lock_acquire+0x6b5/0x2cf0 [ 588.975350][T23384] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.975414][T23384] ? __fget_files+0x2a/0x420 [ 588.975434][T23384] ? __fget_files+0x3a0/0x420 [ 588.975466][T23384] __x64_sys_sendmsg+0x1bd/0x2a0 [ 588.975494][T23384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.975527][T23384] ? __pfx_ksys_write+0x10/0x10 [ 588.975549][T23384] ? handle_softirqs+0x715/0x840 [ 588.975574][T23384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.975592][T23384] do_syscall_64+0x15f/0xf80 [ 588.975611][T23384] ? clear_bhb_loop+0x40/0x90 [ 588.975633][T23384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.975649][T23384] RIP: 0033:0x7f71b9b9cdd9 [ 588.975667][T23384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.975681][T23384] RSP: 002b:00007f71bab36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.975709][T23384] RAX: ffffffffffffffda RBX: 00007f71b9e15fa0 RCX: 00007f71b9b9cdd9 [ 588.975722][T23384] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 588.975733][T23384] RBP: 00007f71bab36090 R08: 0000000000000000 R09: 0000000000000000 [ 588.975743][T23384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.975753][T23384] R13: 00007f71b9e16038 R14: 00007f71b9e15fa0 R15: 00007ffd0ce6f698 [ 588.975784][T23384] [ 589.395358][T23392] netlink: 'syz.0.4324': attribute type 16 has an invalid length. [ 589.427282][T23392] netlink: 'syz.0.4324': attribute type 17 has an invalid length. [ 589.738319][T23400] netlink: 'syz.2.4327': attribute type 1 has an invalid length. [ 590.210827][T23420] net_ratelimit: 3 callbacks suppressed [ 590.210844][T23420] openvswitch: netlink: Message has 4 unknown bytes. [ 590.243843][T23420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.297979][T23414] netlink: 'syz.3.4333': attribute type 13 has an invalid length. [ 590.476534][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 590.513168][T23428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4335'. [ 590.522160][T23428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4335'. [ 590.686424][T23414] syzkaller0: entered promiscuous mode [ 590.691949][T23414] syzkaller0: entered allmulticast mode [ 591.075362][T23458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4341'. [ 591.537114][T23489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.881359][T23498] netlink: 'syz.0.4349': attribute type 1 has an invalid length. [ 591.943469][T23501] FAULT_INJECTION: forcing a failure. [ 591.943469][T23501] name failslab, interval 1, probability 0, space 0, times 0 [ 591.963599][T23504] netlink: 'syz.0.4349': attribute type 10 has an invalid length. [ 591.989890][T23501] CPU: 0 UID: 0 PID: 23501 Comm: syz.1.4350 Not tainted syzkaller #0 PREEMPT(full) [ 591.989915][T23501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.989927][T23501] Call Trace: [ 591.989935][T23501] [ 591.989943][T23501] dump_stack_lvl+0xe8/0x150 [ 591.989971][T23501] should_fail_ex+0x412/0x560 [ 591.990000][T23501] should_failslab+0xa8/0x100 [ 591.990027][T23501] ? sctp_chunkify+0x5a/0x260 [ 591.990046][T23501] kmem_cache_alloc_noprof+0x87/0x650 [ 591.990080][T23501] sctp_chunkify+0x5a/0x260 [ 591.990102][T23501] _sctp_make_chunk+0x122/0x290 [ 591.990124][T23501] sctp_make_init+0x5e3/0xe00 [ 591.990149][T23501] ? is_bpf_text_address+0x292/0x2b0 [ 591.990180][T23501] ? __pfx_sctp_make_init+0x10/0x10 [ 591.990218][T23501] ? stack_trace_save+0xa9/0x100 [ 591.990245][T23501] ? __pfx_stack_trace_save+0x10/0x10 [ 591.990291][T23501] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 591.990319][T23501] sctp_do_sm+0x238/0x5cf0 [ 591.990342][T23501] ? __pfx_sctp_pname+0x10/0x10 [ 591.990365][T23501] ? kasan_save_track+0x4f/0x80 [ 591.990385][T23501] ? kasan_save_track+0x3e/0x80 [ 591.990407][T23501] ? __kmalloc_cache_noprof+0x31c/0x660 [ 591.990431][T23501] ? sctp_sendmsg+0x1b3d/0x2c10 [ 591.990450][T23501] ? ___sys_sendmsg+0x2a5/0x360 [ 591.990473][T23501] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.990503][T23501] ? do_syscall_64+0x15f/0xf80 [ 591.990519][T23501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.990544][T23501] ? __pfx_sctp_do_sm+0x10/0x10 [ 591.990606][T23501] ? __sk_mem_raise_allocated+0x290/0x1290 [ 591.990626][T23501] ? __genradix_ptr+0x1e1/0x220 [ 591.990659][T23501] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 591.990685][T23501] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 591.990705][T23501] ? __asan_memcpy+0x40/0x70 [ 591.990734][T23501] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 591.990770][T23501] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 591.990790][T23501] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 591.990817][T23501] ? __local_bh_enable_ip+0xd0/0x130 [ 591.990835][T23501] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 591.990860][T23501] ? security_sctp_bind_connect+0x7e/0x2c0 [ 591.990888][T23501] sctp_sendmsg+0x1b3d/0x2c10 [ 591.990906][T23501] ? unwind_next_frame+0xa6/0x2550 [ 591.990943][T23501] ? __pfx_sctp_sendmsg+0x10/0x10 [ 591.990967][T23501] ? aa_sk_perm+0x6d5/0x900 [ 591.990996][T23501] ? __pfx_aa_sk_perm+0x10/0x10 [ 591.991018][T23501] ? sock_rps_record_flow+0x19/0x350 [ 591.991040][T23501] ? inet_sendmsg+0x2f4/0x370 [ 591.991063][T23501] ____sys_sendmsg+0x80a/0x9f0 [ 591.991097][T23501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.991131][T23501] ? import_iovec+0x73/0xa0 [ 591.991160][T23501] ___sys_sendmsg+0x2a5/0x360 [ 591.991184][T23501] ? __lock_acquire+0x6b5/0x2cf0 [ 591.991207][T23501] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.991266][T23501] ? __fget_files+0x2a/0x420 [ 591.991286][T23501] ? __fget_files+0x3a0/0x420 [ 591.991317][T23501] __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.991346][T23501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.991381][T23501] ? __pfx_ksys_write+0x10/0x10 [ 591.991416][T23501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.991435][T23501] do_syscall_64+0x15f/0xf80 [ 591.991454][T23501] ? clear_bhb_loop+0x40/0x90 [ 591.991474][T23501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.991498][T23501] RIP: 0033:0x7f970639cdd9 [ 591.991516][T23501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.991530][T23501] RSP: 002b:00007f97072dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.991551][T23501] RAX: ffffffffffffffda RBX: 00007f9706615fa0 RCX: 00007f970639cdd9 [ 591.991564][T23501] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 591.991576][T23501] RBP: 00007f97072dc090 R08: 0000000000000000 R09: 0000000000000000 [ 591.991588][T23501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.991598][T23501] R13: 00007f9706616038 R14: 00007f9706615fa0 R15: 00007fff918618a8 [ 591.991629][T23501] [ 592.388274][T23504] __nla_validate_parse: 1 callbacks suppressed [ 592.388293][T23504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4349'. [ 592.472056][T23504] dummy0: entered promiscuous mode [ 592.477358][T23509] netlink: 'syz.1.4351': attribute type 2 has an invalid length. [ 592.485112][T23509] netlink: 'syz.1.4351': attribute type 1 has an invalid length. [ 592.617913][T23516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4352'. [ 593.353187][T23549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4354'. [ 593.702751][T23561] FAULT_INJECTION: forcing a failure. [ 593.702751][T23561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.726188][T23561] CPU: 0 UID: 0 PID: 23561 Comm: syz.0.4361 Not tainted syzkaller #0 PREEMPT(full) [ 593.726214][T23561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 593.726226][T23561] Call Trace: [ 593.726234][T23561] [ 593.726243][T23561] dump_stack_lvl+0xe8/0x150 [ 593.726271][T23561] should_fail_ex+0x412/0x560 [ 593.726301][T23561] _copy_from_iter+0x1d3/0x1670 [ 593.726323][T23561] ? sctp_chunkify+0x5a/0x260 [ 593.726343][T23561] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 593.726376][T23561] ? __pfx__copy_from_iter+0x10/0x10 [ 593.726400][T23561] ? __asan_memcpy+0x40/0x70 [ 593.726423][T23561] ? sctp_make_datafrag_empty+0x184/0x240 [ 593.726453][T23561] ? skb_put+0x11b/0x210 [ 593.726482][T23561] sctp_user_addto_chunk+0x87/0x240 [ 593.726507][T23561] sctp_datamsg_from_user+0x748/0xef0 [ 593.726561][T23561] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 593.726582][T23561] ? __asan_memcpy+0x40/0x70 [ 593.726611][T23561] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 593.726648][T23561] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 593.726670][T23561] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 593.726699][T23561] ? __local_bh_enable_ip+0xd0/0x130 [ 593.726717][T23561] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 593.726743][T23561] ? security_sctp_bind_connect+0x7e/0x2c0 [ 593.726768][T23561] sctp_sendmsg+0x1b3d/0x2c10 [ 593.726787][T23561] ? unwind_next_frame+0xa6/0x2550 [ 593.726825][T23561] ? __pfx_sctp_sendmsg+0x10/0x10 [ 593.726850][T23561] ? aa_sk_perm+0x6d5/0x900 [ 593.726882][T23561] ? __pfx_aa_sk_perm+0x10/0x10 [ 593.726908][T23561] ? sock_rps_record_flow+0x19/0x350 [ 593.726932][T23561] ? inet_sendmsg+0x2f4/0x370 [ 593.726956][T23561] ____sys_sendmsg+0x80a/0x9f0 [ 593.726992][T23561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.727027][T23561] ? import_iovec+0x73/0xa0 [ 593.727054][T23561] ___sys_sendmsg+0x2a5/0x360 [ 593.727080][T23561] ? __lock_acquire+0x6b5/0x2cf0 [ 593.727104][T23561] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.727167][T23561] ? __fget_files+0x2a/0x420 [ 593.727188][T23561] ? __fget_files+0x3a0/0x420 [ 593.727221][T23561] __x64_sys_sendmsg+0x1bd/0x2a0 [ 593.727251][T23561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.727286][T23561] ? __pfx_ksys_write+0x10/0x10 [ 593.727322][T23561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.727342][T23561] do_syscall_64+0x15f/0xf80 [ 593.727359][T23561] ? trace_irq_disable+0x3b/0x140 [ 593.727384][T23561] ? clear_bhb_loop+0x40/0x90 [ 593.727413][T23561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.727432][T23561] RIP: 0033:0x7fab55d9cdd9 [ 593.727450][T23561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.727466][T23561] RSP: 002b:00007fab56c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.727486][T23561] RAX: ffffffffffffffda RBX: 00007fab56015fa0 RCX: 00007fab55d9cdd9 [ 593.727500][T23561] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 593.727512][T23561] RBP: 00007fab56c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 593.727528][T23561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.727546][T23561] R13: 00007fab56016038 R14: 00007fab56015fa0 R15: 00007fffd98f76c8 [ 593.727578][T23561] [ 594.072765][T23558] netlink: 'syz.2.4360': attribute type 4 has an invalid length. [ 594.087109][T23558] netlink: 'syz.2.4360': attribute type 4 has an invalid length. [ 594.122629][T23541] infiniband syz0: set down [ 594.127176][T23541] infiniband syz0: added bridge_slave_1 [ 594.134747][T23541] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 594.140012][T23541] infiniband syz0: Couldn't open port 1 [ 594.154330][T23541] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 594.169716][T23541] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 594.189948][T23541] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 594.222537][T23541] RDS/IB: syz0: added [ 594.226604][T23541] smc: adding ib device syz0 with port count 1 [ 594.232847][T23541] smc: ib device syz0 port 1 has no pnetid [ 594.318416][T23569] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 595.595641][T23606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4368'. [ 595.604714][T23607] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 595.680917][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4369'. [ 595.809078][T23606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.086231][T23620] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4371'. [ 597.697380][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 597.722988][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 598.206024][T23696] IPVS: length: 244 != 24 [ 599.164233][T23706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4386'. [ 599.361042][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4389'. [ 599.370432][T23717] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 599.707880][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4395'. [ 599.954385][T23752] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4398'. [ 599.989411][T23752] netlink: 'syz.3.4398': attribute type 13 has an invalid length. [ 600.035154][T23752] netlink: 'syz.3.4398': attribute type 17 has an invalid length. [ 600.168311][T23752] gretap0: refused to change device tx_queue_len [ 600.175279][T23752] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 600.261668][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4401'. [ 600.292727][T23766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4401'. [ 600.317144][T23765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4401'. [ 600.352979][T23766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4401'. [ 600.552803][T23774] netlink: 'syz.3.4404': attribute type 24 has an invalid length. [ 601.949788][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 606.429331][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 608.989619][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 611.477856][ T5630] Bluetooth: hci3: link tx timeout [ 611.483519][ T5630] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 612.780741][ T5631] Bluetooth: hci3: link tx timeout [ 612.787742][ T5631] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 613.550011][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 619.231662][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 621.703682][T24026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.745448][T24026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.054392][T24050] xt_nfacct: accounting object `syz0' does not exist [ 622.110892][T24054] ip6t_srh: unknown srh match flags 4000 [ 622.242392][T24060] veth0: entered promiscuous mode [ 622.249364][T24060] veth0: left promiscuous mode [ 622.384233][T24066] syzkaller0: entered promiscuous mode [ 622.407469][T24066] syzkaller0: entered allmulticast mode [ 622.431341][T24066] 0: reclassify loop, rule prio 0, protocol 800 [ 622.892679][T24082] netlink: 'syz.1.4425': attribute type 10 has an invalid length. [ 622.905294][T24082] ipvlan0: entered allmulticast mode [ 622.910626][T24082] veth0_vlan: entered allmulticast mode [ 622.940762][T24082] team0: Device ipvlan0 failed to register rx_handler [ 622.959459][T24095] __nla_validate_parse: 1 callbacks suppressed [ 622.959478][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4433'. [ 622.973131][T24075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'. [ 623.009835][T23107] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.018166][T23107] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.026370][T23107] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.034605][T23107] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.164207][T24112] bond0: entered promiscuous mode [ 623.169463][T24112] bond_slave_0: entered promiscuous mode [ 623.175317][T24112] bond_slave_1: entered promiscuous mode [ 623.187089][T24112] batadv0: entered promiscuous mode [ 623.199806][T24112] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 623.213896][T24112] bond0: left promiscuous mode [ 623.218711][T24112] bond_slave_0: left promiscuous mode [ 623.224305][T24112] bond_slave_1: left promiscuous mode [ 623.231148][T24112] batadv0: left promiscuous mode [ 623.417363][T24126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4443'. [ 623.656713][T24133] veth0: entered promiscuous mode [ 623.960676][T24145] can: request_module (can-proto-5) failed. [ 624.292952][T24133] veth0: left promiscuous mode [ 624.606960][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4457'. [ 624.620482][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4457'. [ 624.882062][T24184] netlink: 'syz.2.4460': attribute type 1 has an invalid length. [ 624.892217][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4460'. [ 624.978475][T24166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4454'. [ 624.989900][T24166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4454'. [ 625.001421][T24185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4460'. [ 625.019783][T24185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4460'. [ 625.213240][T24199] netlink: 'syz.2.4462': attribute type 4 has an invalid length. [ 625.935611][ T29] audit: type=1804 audit(1778363995.257:16): pid=24239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4474" name="/newroot/350/memory.events" dev="tmpfs" ino=1817 res=1 errno=0 [ 626.021939][ T29] audit: type=1804 audit(1778363995.317:17): pid=24242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4476" name="/newroot/544/memory.events" dev="tmpfs" ino=2827 res=1 errno=0 [ 626.045006][ T29] audit: type=1800 audit(1778363995.317:18): pid=24242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4476" name="memory.events" dev="tmpfs" ino=2827 res=0 errno=0 [ 626.350793][T24262] syzkaller0: entered promiscuous mode [ 626.357612][T24262] syzkaller0: entered allmulticast mode [ 626.382944][T24260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.394129][T24260] netlink: 'syz.2.4484': attribute type 5 has an invalid length. [ 626.432718][T24260] netlink: 'syz.2.4484': attribute type 5 has an invalid length. [ 626.524139][T23100] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.532387][T23100] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.540701][T23100] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.679917][T23100] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.383511][T24315] x_tables: unsorted entry at hook 2 [ 627.869347][T24329] netlink: zone id is out of range [ 627.874506][T24329] netlink: zone id is out of range [ 627.879625][T24329] netlink: zone id is out of range [ 627.884744][T24329] netlink: zone id is out of range [ 627.889865][T24329] netlink: zone id is out of range [ 627.894986][T24329] netlink: zone id is out of range [ 627.900110][T24329] netlink: zone id is out of range [ 627.905228][T24329] netlink: zone id is out of range [ 627.910344][T24329] netlink: zone id is out of range [ 627.915460][T24329] netlink: zone id is out of range [ 628.607629][T24376] __nla_validate_parse: 16 callbacks suppressed [ 628.607650][T24376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4510'. [ 628.608249][T24379] netlink: 'syz.3.4511': attribute type 4 has an invalid length. [ 628.715933][T24386] netlink: 'syz.3.4512': attribute type 83 has an invalid length. [ 628.724307][T24386] netlink: 'syz.3.4512': attribute type 11 has an invalid length. [ 629.051094][T24400] netlink: 'syz.5.4515': attribute type 8 has an invalid length. [ 629.277693][T24407] netlink: 'syz.0.4518': attribute type 2 has an invalid length. [ 629.401845][T24414] netlink: 'syz.1.4520': attribute type 16 has an invalid length. [ 629.410776][T24414] netlink: 'syz.1.4520': attribute type 3 has an invalid length. [ 629.422464][T24414] netlink: 64026 bytes leftover after parsing attributes in process `syz.1.4520'. [ 629.455467][T24416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4519'. [ 629.918994][T24431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4525'. [ 630.292598][T24436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4526'. [ 630.798364][T24343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.325733][T24440] kthread_run failed with err -4 [ 633.493564][T24459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4531'. [ 633.515406][T24462] netlink: 'syz.5.4532': attribute type 1 has an invalid length. [ 633.587864][T24463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4533'. [ 633.678093][T24475] net_ratelimit: 35 callbacks suppressed [ 633.678111][T24475] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 633.730481][T24477] pim6reg1: entered promiscuous mode [ 633.738961][T24477] pim6reg1: entered allmulticast mode [ 633.807045][T24478] netlink: 'syz.0.4531': attribute type 5 has an invalid length. [ 633.924833][T24459] wg1: entered promiscuous mode [ 633.940281][T24459] wg1: entered allmulticast mode [ 633.978356][T24483] veth0_vlan: entered allmulticast mode [ 634.670819][T24514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4546'. [ 634.712348][T24518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 634.721385][T24518] netlink: 'syz.0.4547': attribute type 1 has an invalid length. [ 634.729116][T24518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4547'. [ 634.768187][T24517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 634.828151][T24517] netlink: 'syz.0.4547': attribute type 1 has an invalid length. [ 634.835908][T24517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4547'. [ 634.927182][T24518] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4547'. [ 635.212005][T24533] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4552'. [ 635.345287][T24542] geneve3: entered promiscuous mode [ 635.360027][T11008] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 33220 - 0 [ 635.374418][T11008] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 33220 - 0 [ 635.485277][T24554] bond10: entered allmulticast mode [ 635.550041][T24529] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33220 - 0 [ 635.567752][T24550] xt_CONNSECMARK: invalid mode: 254 [ 635.969331][T24529] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33220 - 0 [ 635.998355][T24570] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4562'. [ 636.143452][T24574] ±ÿ: renamed from lo [ 636.272808][T24584] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4566'. [ 636.284760][T24584] syzkaller0: entered promiscuous mode [ 636.290581][T24584] syzkaller0: entered allmulticast mode [ 636.356508][T24586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4567'. [ 636.494112][T24589] netlink: 'syz.1.4568': attribute type 1 has an invalid length. [ 636.509472][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 636.557168][T24590] netlink: 'syz.1.4568': attribute type 13 has an invalid length. [ 636.602081][T24590] netlink: 'syz.1.4568': attribute type 17 has an invalid length. [ 636.657707][T24588] bridge0: port 3(vlan2) entered disabled state [ 636.665083][T24588] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.675268][T24588] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.738237][T24599] netlink: 'syz.0.4571': attribute type 9 has an invalid length. [ 637.475471][T24588] tipc: Resetting bearer [ 638.004997][T24590] bridge0: left promiscuous mode [ 638.014078][T24590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.027342][T24590] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.074736][T24590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 638.085554][T24590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.102756][T24590] veth1_vlan: left promiscuous mode [ 638.110159][T24590] veth0_vlan: left promiscuous mode [ 638.116512][T24590] veth0_vlan: entered promiscuous mode [ 638.126484][T24590] veth1_vlan: entered promiscuous mode [ 638.135997][T24590] ipvlan0: left allmulticast mode [ 638.141521][T24590] veth0_vlan: left allmulticast mode [ 638.150434][T24590] veth1_macvtap: left promiscuous mode [ 638.157365][T24590] veth0_macvtap: left promiscuous mode [ 638.164768][T24590] veth0_macvtap: entered promiscuous mode [ 638.172365][T24590] veth1_macvtap: entered promiscuous mode [ 638.185174][T24590] bridge0: port 3(vlan2) entered blocking state [ 638.191631][T24590] bridge0: port 3(vlan2) entered forwarding state [ 638.219075][T24590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.230455][T24590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.242902][T24590] syzkaller0: left promiscuous mode [ 638.248164][T24590] syzkaller0: left allmulticast mode [ 638.279365][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.288079][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.294500][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.300871][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.307207][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.313595][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.319958][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.326293][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.332681][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.339060][ C0] tc action pedit 'at' offset 8680 out of bounds [ 638.345438][ C0] TC_ACT_REPEAT abuse ? [ 638.364190][T24590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.374527][T24590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 638.395630][T24590] 8021q: adding VLAN 0 to HW filter on device bond4 [ 638.407240][T24590] 8021q: adding VLAN 0 to HW filter on device eth0 [ 638.416231][T24590] 8021q: adding VLAN 0 to HW filter on device eth1 [ 638.425971][T24590] 8021q: adding VLAN 0 to HW filter on device eth2 [ 638.436175][T24590] 8021q: adding VLAN 0 to HW filter on device eth3 [ 638.480417][T24590] 8021q: adding VLAN 0 to HW filter on device bond5 [ 638.493962][T24590] 8021q: adding VLAN 0 to HW filter on device bond6 [ 638.506341][T24590] ip6erspan0: left allmulticast mode [ 638.522809][T24590] A link change request failed with some changes committed already. Interface bond_slave_0.2 may have been left with an inconsistent configuration, please check. [ 638.562831][T24589] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.599566][ T24] bridge0: entered promiscuous mode [ 638.630945][T23101] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.638177][T23101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.803927][T23107] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 638.861763][T24614] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 638.875804][T24623] netlink: 'syz.2.4576': attribute type 1 has an invalid length. [ 639.015377][T23107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 33220 - 0 [ 639.142187][T23107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 33220 - 0 [ 639.316301][T23101] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 33220 - 0 [ 639.324638][T23101] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 33220 - 0 [ 639.416232][T24635] netlink: 'syz.1.4579': attribute type 16 has an invalid length. [ 639.429375][T24635] netlink: 'syz.1.4579': attribute type 17 has an invalid length. [ 639.441013][ C0] TC_ACT_REPEAT abuse ? [ 639.830704][T24635] A link change request failed with some changes committed already. Interface bond_slave_0.2 may have been left with an inconsistent configuration, please check. [ 639.871609][T23107] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.878780][T23107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.913851][T24652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.189766][T24657] team0: Port device veth11 added [ 640.214971][T23101] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 640.228792][T23101] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 640.259915][ T5750] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 640.344406][T24673] openvswitch: netlink: IP tunnel dst address not specified [ 640.717492][T24680] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 640.800395][ T5736] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 640.977586][T24690] __nla_validate_parse: 3 callbacks suppressed [ 640.977605][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4597'. [ 641.099389][ T5750] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 641.259426][T24702] sctp: [Deprecated]: syz.1.4601 (pid 24702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.259426][T24702] Use struct sctp_sack_info instead [ 641.926487][T24705] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4602'. [ 642.057862][T24724] netlink: 'syz.2.4608': attribute type 4 has an invalid length. [ 642.311714][T23100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.327292][T23100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.387959][T24735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.064725][T24763] tipc: Enabled bearer , priority 0 [ 643.072708][T24763] syzkaller0: entered promiscuous mode [ 643.079366][T24763] syzkaller0: entered allmulticast mode [ 643.309466][T24765] tipc: Resetting bearer [ 643.314515][T24769] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 643.317209][T24771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.384683][T24762] tipc: Resetting bearer [ 643.461152][T24762] tipc: Disabling bearer [ 643.464961][T24778] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4626'. [ 644.063272][T24816] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4634'. [ 644.216593][T24825] netlink: 'syz.2.4639': attribute type 1 has an invalid length. [ 644.429205][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 644.472006][T24825] block nbd0: server does not support multiple connections per device. [ 644.520140][T24829] 8021q: adding VLAN 0 to HW filter on device bond6 [ 644.545095][T24825] block nbd0: shutting down sockets [ 644.567511][T24829] bond5: (slave bond6): making interface the new active one [ 644.593311][T24829] bond5: (slave bond6): Enslaving as an active interface with an up link [ 644.650222][T24822] 8021q: VLANs not supported on ip6gre0 [ 645.714408][T24880] bond11: entered promiscuous mode [ 645.787682][T24880] bond11: entered allmulticast mode [ 645.793424][T24880] 8021q: adding VLAN 0 to HW filter on device bond11 [ 645.801068][T24889] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4648'. [ 645.984572][T24908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4652'. [ 646.189136][T24932] netlink: 'syz.3.4656': attribute type 4 has an invalid length. [ 646.219538][T24932] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.4656'. [ 646.276794][T24924] veth0: Caught tx_queue_len zero misconfig [ 646.584262][T24947] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 646.590917][T24949] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 646.631142][T24943] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4657'. [ 647.247011][T24978] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 647.372515][T24982] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4671'. [ 647.799168][T25010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4678'. [ 647.808611][T25010] netlink: 'syz.2.4678': attribute type 26 has an invalid length. [ 647.816447][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4678'. [ 647.838276][T25010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4678'. [ 647.847276][T25010] netlink: 'syz.2.4678': attribute type 26 has an invalid length. [ 647.855097][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4678'. [ 647.876897][T25010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4678'. [ 648.213176][T25034] netlink: 473 bytes leftover after parsing attributes in process `syz.2.4686'. [ 649.469067][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 649.700555][T25101] gre1: entered promiscuous mode [ 650.243736][T25122] netlink: 'syz.5.4709': attribute type 1 has an invalid length. [ 650.253167][T25116] netlink: 'syz.2.4706': attribute type 11 has an invalid length. [ 650.332313][T25125] netlink: 'syz.5.4709': attribute type 10 has an invalid length. [ 650.394368][T25122] 8021q: adding VLAN 0 to HW filter on device bond12 [ 650.408164][T25125] dummy0: entered promiscuous mode [ 650.626659][T25143] syzkaller0: entered promiscuous mode [ 650.648255][T25143] syzkaller0: entered allmulticast mode [ 651.228048][T25176] __nla_validate_parse: 6 callbacks suppressed [ 651.228106][T25176] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4724'. [ 651.343415][T25180] [ 651.345783][T25180] ====================================================== [ 651.352903][T25180] WARNING: possible circular locking dependency detected [ 651.360113][T25180] syzkaller #0 Not tainted [ 651.364532][T25180] ------------------------------------------------------ [ 651.371540][T25180] syz.2.4726/25180 is trying to acquire lock: [ 651.377607][T25180] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 651.386753][T25180] [ 651.386753][T25180] but task is already holding lock: [ 651.394116][T25180] ffff888025b88338 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0 [ 651.403333][T25180] [ 651.403333][T25180] which lock already depends on the new lock. [ 651.403333][T25180] [ 651.413740][T25180] [ 651.413740][T25180] the existing dependency chain (in reverse order) is: [ 651.422749][T25180] [ 651.422749][T25180] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 651.430324][T25180] __might_fault+0xcb/0x130 [ 651.435349][T25180] _copy_from_user+0x28/0xb0 [ 651.440455][T25180] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 651.446964][T25180] ip_generic_getfrag+0x149/0x2d0 [ 651.452491][T25180] __ip6_append_data+0x39cd/0x3f60 [ 651.458122][T25180] ip6_append_data+0x10f/0x280 [ 651.463422][T25180] rawv6_sendmsg+0x12d3/0x18e0 [ 651.468704][T25180] ____sys_sendmsg+0x80a/0x9f0 [ 651.473991][T25180] ___sys_sendmsg+0x2a5/0x360 [ 651.479190][T25180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 651.484653][T25180] do_syscall_64+0x15f/0xf80 [ 651.489783][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.496201][T25180] [ 651.496201][T25180] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 651.503927][T25180] lock_sock_nested+0x41/0x100 [ 651.509300][T25180] inet_shutdown+0x6a/0x390 [ 651.514325][T25180] nbd_mark_nsock_dead+0x2e9/0x560 [ 651.519946][T25180] sock_shutdown+0x15e/0x260 [ 651.525043][T25180] nbd_clear_sock+0x24/0x170 [ 651.530153][T25180] nbd_config_put+0x2dd/0x580 [ 651.535440][T25180] nbd_genl_connect+0x19d5/0x1cf0 [ 651.540978][T25180] genl_family_rcv_msg_doit+0x22a/0x330 [ 651.547049][T25180] genl_rcv_msg+0x61c/0x7a0 [ 651.552076][T25180] netlink_rcv_skb+0x232/0x4b0 [ 651.557352][T25180] genl_rcv+0x28/0x40 [ 651.561851][T25180] netlink_unicast+0x75c/0x8e0 [ 651.567149][T25180] netlink_sendmsg+0x813/0xb40 [ 651.572441][T25180] ____sys_sendmsg+0x972/0x9f0 [ 651.577732][T25180] ___sys_sendmsg+0x2a5/0x360 [ 651.582939][T25180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 651.588394][T25180] do_syscall_64+0x15f/0xf80 [ 651.593498][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.599912][T25180] [ 651.599912][T25180] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 651.607563][T25180] __mutex_lock+0x1a3/0x1550 [ 651.612678][T25180] nbd_queue_rq+0x37b/0x1100 [ 651.617800][T25180] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 651.623867][T25180] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 651.630717][T25180] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 651.637387][T25180] blk_mq_run_hw_queue+0x348/0x4f0 [ 651.643015][T25180] blk_mq_dispatch_list+0xd16/0xe10 [ 651.648735][T25180] blk_mq_flush_plug_list+0x48d/0x570 [ 651.654620][T25180] __blk_flush_plug+0x3ed/0x4d0 [ 651.659990][T25180] __submit_bio+0x28d/0x580 [ 651.665015][T25180] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 651.671169][T25180] block_read_full_folio+0x599/0x830 [ 651.676973][T25180] filemap_read_folio+0x137/0x3b0 [ 651.682515][T25180] do_read_cache_folio+0x358/0x590 [ 651.688153][T25180] read_part_sector+0xb6/0x2b0 [ 651.693439][T25180] adfspart_check_ICS+0xb1/0x960 [ 651.698892][T25180] bdev_disk_changed+0x817/0x1770 [ 651.704427][T25180] blkdev_get_whole+0x380/0x510 [ 651.709796][T25180] bdev_open+0x31e/0xd30 [ 651.714552][T25180] blkdev_open+0x470/0x610 [ 651.719473][T25180] do_dentry_open+0x785/0x14e0 [ 651.724757][T25180] vfs_open+0x3b/0x340 [ 651.729334][T25180] path_openat+0x2e08/0x3860 [ 651.735129][T25180] do_file_open+0x23e/0x4a0 [ 651.740141][T25180] do_sys_openat2+0x113/0x200 [ 651.745337][T25180] __x64_sys_openat+0x138/0x170 [ 651.750692][T25180] do_syscall_64+0x15f/0xf80 [ 651.755784][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.762180][T25180] [ 651.762180][T25180] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 651.769379][T25180] __mutex_lock+0x1a3/0x1550 [ 651.774473][T25180] nbd_queue_rq+0xc6/0x1100 [ 651.779585][T25180] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 651.785641][T25180] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 651.792481][T25180] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 651.798975][T25180] blk_mq_run_hw_queue+0x348/0x4f0 [ 651.804602][T25180] blk_mq_dispatch_list+0xd16/0xe10 [ 651.810320][T25180] blk_mq_flush_plug_list+0x48d/0x570 [ 651.816213][T25180] __blk_flush_plug+0x3ed/0x4d0 [ 651.821590][T25180] __submit_bio+0x28d/0x580 [ 651.826612][T25180] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 651.832765][T25180] block_read_full_folio+0x599/0x830 [ 651.838731][T25180] filemap_read_folio+0x137/0x3b0 [ 651.844277][T25180] do_read_cache_folio+0x358/0x590 [ 651.849898][T25180] read_part_sector+0xb6/0x2b0 [ 651.855185][T25180] adfspart_check_ICS+0xb1/0x960 [ 651.860650][T25180] bdev_disk_changed+0x817/0x1770 [ 651.866189][T25180] blkdev_get_whole+0x380/0x510 [ 651.871554][T25180] bdev_open+0x31e/0xd30 [ 651.876310][T25180] blkdev_open+0x470/0x610 [ 651.881229][T25180] do_dentry_open+0x785/0x14e0 [ 651.886498][T25180] vfs_open+0x3b/0x340 [ 651.891082][T25180] path_openat+0x2e08/0x3860 [ 651.896282][T25180] do_file_open+0x23e/0x4a0 [ 651.901301][T25180] do_sys_openat2+0x113/0x200 [ 651.906491][T25180] __x64_sys_openat+0x138/0x170 [ 651.911854][T25180] do_syscall_64+0x15f/0xf80 [ 651.916951][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.923353][T25180] [ 651.923353][T25180] -> #3 (set->srcu){.+.+}-{0:0}: [ 651.930464][T25180] __synchronize_srcu+0xca/0x300 [ 651.935907][T25180] elevator_switch+0x1e8/0x7a0 [ 651.941181][T25180] elevator_change+0x2cc/0x450 [ 651.946458][T25180] elevator_set_default+0x36c/0x430 [ 651.952179][T25180] blk_register_queue+0x3e9/0x4e0 [ 651.957708][T25180] __add_disk+0x677/0xd50 [ 651.962544][T25180] add_disk_fwnode+0xfb/0x480 [ 651.967738][T25180] nbd_dev_add+0x72c/0xb50 [ 651.972660][T25180] nbd_init+0x168/0x1f0 [ 651.977349][T25180] do_one_initcall+0x250/0x870 [ 651.982649][T25180] do_initcall_level+0x104/0x190 [ 651.988117][T25180] do_initcalls+0x59/0xa0 [ 651.992966][T25180] kernel_init_freeable+0x2a6/0x3e0 [ 651.998686][T25180] kernel_init+0x1d/0x1d0 [ 652.003526][T25180] ret_from_fork+0x514/0xb70 [ 652.008627][T25180] ret_from_fork_asm+0x1a/0x30 [ 652.013900][T25180] [ 652.013900][T25180] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 652.021707][T25180] __mutex_lock+0x1a3/0x1550 [ 652.026805][T25180] elevator_change+0x1b3/0x450 [ 652.032079][T25180] elevator_set_none+0xb5/0x140 [ 652.037438][T25180] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 652.043753][T25180] nbd_start_device+0x17f/0xb10 [ 652.049111][T25180] nbd_genl_connect+0x165b/0x1cf0 [ 652.054641][T25180] genl_family_rcv_msg_doit+0x22a/0x330 [ 652.060703][T25180] genl_rcv_msg+0x61c/0x7a0 [ 652.065719][T25180] netlink_rcv_skb+0x232/0x4b0 [ 652.071006][T25180] genl_rcv+0x28/0x40 [ 652.075509][T25180] netlink_unicast+0x75c/0x8e0 [ 652.080796][T25180] netlink_sendmsg+0x813/0xb40 [ 652.086094][T25180] ____sys_sendmsg+0x972/0x9f0 [ 652.091383][T25180] ___sys_sendmsg+0x2a5/0x360 [ 652.096582][T25180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 652.102043][T25180] do_syscall_64+0x15f/0xf80 [ 652.107153][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.113560][T25180] [ 652.113560][T25180] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 652.122157][T25180] blk_alloc_queue+0x546/0x680 [ 652.127436][T25180] __blk_mq_alloc_disk+0x197/0x390 [ 652.133075][T25180] nbd_dev_add+0x499/0xb50 [ 652.138002][T25180] nbd_init+0x168/0x1f0 [ 652.142699][T25180] do_one_initcall+0x250/0x870 [ 652.147976][T25180] do_initcall_level+0x104/0x190 [ 652.153430][T25180] do_initcalls+0x59/0xa0 [ 652.158363][T25180] kernel_init_freeable+0x2a6/0x3e0 [ 652.164081][T25180] kernel_init+0x1d/0x1d0 [ 652.168942][T25180] ret_from_fork+0x514/0xb70 [ 652.174043][T25180] ret_from_fork_asm+0x1a/0x30 [ 652.179319][T25180] [ 652.179319][T25180] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 652.186548][T25180] __lock_acquire+0x15a5/0x2cf0 [ 652.191938][T25180] lock_acquire+0x106/0x350 [ 652.196953][T25180] fs_reclaim_acquire+0x71/0x100 [ 652.202402][T25180] prepare_alloc_pages+0x152/0x650 [ 652.208029][T25180] __alloc_frozen_pages_noprof+0x12f/0x380 [ 652.214350][T25180] alloc_pages_mpol+0x235/0x490 [ 652.219715][T25180] alloc_pages_noprof+0xac/0x2a0 [ 652.225166][T25180] __pmd_alloc+0x3a/0x5c0 [ 652.230006][T25180] handle_mm_fault+0xe96/0x3170 [ 652.235365][T25180] __get_user_pages+0x1683/0x2720 [ 652.240896][T25180] get_dump_page+0x1b5/0x410 [ 652.245997][T25180] dump_user_range+0x20a/0x12c0 [ 652.251354][T25180] elf_core_dump+0x34c2/0x3ad0 [ 652.256622][T25180] coredump_write+0x1216/0x1910 [ 652.261978][T25180] vfs_coredump+0x3807/0x4530 [ 652.267168][T25180] get_signal+0x1107/0x1330 [ 652.272178][T25180] arch_do_signal_or_restart+0xbc/0x830 [ 652.278234][T25180] exit_to_user_mode_loop+0x86/0x480 [ 652.284024][T25180] do_syscall_64+0x33e/0xf80 [ 652.289119][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.295523][T25180] [ 652.295523][T25180] other info that might help us debug this: [ 652.295523][T25180] [ 652.305744][T25180] Chain exists of: [ 652.305744][T25180] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 652.305744][T25180] [ 652.318334][T25180] Possible unsafe locking scenario: [ 652.318334][T25180] [ 652.325773][T25180] CPU0 CPU1 [ 652.331120][T25180] ---- ---- [ 652.336468][T25180] rlock(&mm->mmap_lock); [ 652.340874][T25180] lock(sk_lock-AF_INET6); [ 652.347883][T25180] lock(&mm->mmap_lock); [ 652.354719][T25180] lock(fs_reclaim); [ 652.358696][T25180] [ 652.358696][T25180] *** DEADLOCK *** [ 652.358696][T25180] [ 652.366866][T25180] 2 locks held by syz.2.4726/25180: [ 652.372068][T25180] #0: ffff88807db3a410 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3807/0x4530 [ 652.381387][T25180] #1: ffff888025b88338 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0 [ 652.391032][T25180] [ 652.391032][T25180] stack backtrace: [ 652.396909][T25180] CPU: 1 UID: 0 PID: 25180 Comm: syz.2.4726 Not tainted syzkaller #0 PREEMPT(full) [ 652.396926][T25180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.396935][T25180] Call Trace: [ 652.396941][T25180] [ 652.396947][T25180] dump_stack_lvl+0xe8/0x150 [ 652.396967][T25180] print_circular_bug+0x2e1/0x300 [ 652.396987][T25180] check_noncircular+0x12e/0x150 [ 652.397008][T25180] __lock_acquire+0x15a5/0x2cf0 [ 652.397028][T25180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 652.397049][T25180] ? lockdep_hardirqs_on+0x7a/0x110 [ 652.397071][T25180] ? prepare_alloc_pages+0x152/0x650 [ 652.397090][T25180] lock_acquire+0x106/0x350 [ 652.397105][T25180] ? prepare_alloc_pages+0x152/0x650 [ 652.397125][T25180] ? __kmalloc_cache_noprof+0x31c/0x660 [ 652.397147][T25180] fs_reclaim_acquire+0x71/0x100 [ 652.397165][T25180] ? prepare_alloc_pages+0x152/0x650 [ 652.397184][T25180] prepare_alloc_pages+0x152/0x650 [ 652.397206][T25180] __alloc_frozen_pages_noprof+0x12f/0x380 [ 652.397229][T25180] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 652.397251][T25180] ? __pfx_policy_nodemask+0x10/0x10 [ 652.397271][T25180] ? lockdep_hardirqs_on+0x7a/0x110 [ 652.397290][T25180] ? __thp_vma_allowable_orders+0x2bb/0xb30 [ 652.397312][T25180] alloc_pages_mpol+0x235/0x490 [ 652.397333][T25180] alloc_pages_noprof+0xac/0x2a0 [ 652.397348][T25180] __pmd_alloc+0x3a/0x5c0 [ 652.397365][T25180] handle_mm_fault+0xe96/0x3170 [ 652.397382][T25180] ? mt_find+0x186/0x630 [ 652.397398][T25180] ? handle_mm_fault+0xee/0x3170 [ 652.397417][T25180] ? __pfx_handle_mm_fault+0x10/0x10 [ 652.397441][T25180] __get_user_pages+0x1683/0x2720 [ 652.397467][T25180] get_dump_page+0x1b5/0x410 [ 652.397483][T25180] ? __pfx_get_dump_page+0x10/0x10 [ 652.397498][T25180] ? dump_user_range+0x1c5/0x12c0 [ 652.397511][T25180] ? down_read_killable+0x1bb/0x340 [ 652.397528][T25180] dump_user_range+0x20a/0x12c0 [ 652.397546][T25180] ? __pfx_dump_user_range+0x10/0x10 [ 652.397561][T25180] ? elf_coredump_extra_notes_write+0x441/0x4d0 [ 652.397576][T25180] ? dump_align+0xee/0x110 [ 652.397590][T25180] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 652.397606][T25180] ? __pfx_writenote+0x10/0x10 [ 652.397624][T25180] elf_core_dump+0x34c2/0x3ad0 [ 652.397644][T25180] ? __pfx_elf_core_dump+0x10/0x10 [ 652.397658][T25180] ? __kasan_kmalloc+0x93/0xb0 [ 652.397676][T25180] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 652.397695][T25180] ? coredump_write+0x387/0x1910 [ 652.397708][T25180] ? vfs_coredump+0x3807/0x4530 [ 652.397719][T25180] ? get_signal+0x1107/0x1330 [ 652.397733][T25180] ? exit_to_user_mode_loop+0x86/0x480 [ 652.397752][T25180] ? do_syscall_64+0x33e/0xf80 [ 652.397764][T25180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.397780][T25180] ? mas_ascend+0x304/0x890 [ 652.397806][T25180] ? vfs_coredump+0x3807/0x4530 [ 652.397819][T25180] ? 0xffffffffff600000 [ 652.397836][T25180] coredump_write+0x1216/0x1910 [ 652.397856][T25180] ? __pfx_coredump_write+0x10/0x10 [ 652.397868][T25180] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.397890][T25180] ? put_files_struct+0x256/0x350 [ 652.397906][T25180] ? do_raw_spin_unlock+0xf5/0x210 [ 652.397926][T25180] ? unshare_files+0xfc/0x140 [ 652.397943][T25180] vfs_coredump+0x3807/0x4530 [ 652.397964][T25180] ? __pfx_vfs_coredump+0x10/0x10 [ 652.397978][T25180] ? __lock_acquire+0x6b5/0x2cf0 [ 652.397994][T25180] ? __lock_acquire+0x6b5/0x2cf0 [ 652.398012][T25180] ? unwind_next_frame+0xa6/0x2550 [ 652.398028][T25180] ? lock_acquire+0x106/0x350 [ 652.398043][T25180] ? unwind_next_frame+0xa6/0x2550 [ 652.398061][T25180] ? is_bpf_text_address+0x26/0x2b0 [ 652.398074][T25180] ? lock_acquire+0x106/0x350 [ 652.398091][T25180] ? is_bpf_text_address+0x26/0x2b0 [ 652.398107][T25180] ? is_bpf_text_address+0x292/0x2b0 [ 652.398120][T25180] ? is_bpf_text_address+0x26/0x2b0 [ 652.398135][T25180] ? kernel_text_address+0xa5/0xe0 [ 652.398154][T25180] ? __kernel_text_address+0xd/0x30 [ 652.398173][T25180] ? unwind_get_return_address+0x4d/0x90 [ 652.398189][T25180] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 652.398210][T25180] ? arch_stack_walk+0xfb/0x150 [ 652.398231][T25180] ? stack_trace_save+0xa9/0x100 [ 652.398250][T25180] ? __pfx_stack_trace_save+0x10/0x10 [ 652.398271][T25180] ? stack_depot_save_flags+0x33/0x810 [ 652.398291][T25180] ? kasan_save_track+0x4f/0x80 [ 652.398308][T25180] ? kasan_save_track+0x3e/0x80 [ 652.398324][T25180] ? kasan_save_free_info+0x46/0x50 [ 652.398339][T25180] ? __kasan_slab_free+0x5c/0x80 [ 652.398357][T25180] ? kmem_cache_free+0x182/0x650 [ 652.398374][T25180] ? __dequeue_signal+0x487/0x5b0 [ 652.398392][T25180] ? dequeue_signal+0x1a1/0x370 [ 652.398408][T25180] ? get_signal+0x55d/0x1330 [ 652.398420][T25180] ? arch_do_signal_or_restart+0xbc/0x830 [ 652.398440][T25180] ? exit_to_user_mode_loop+0x86/0x480 [ 652.398453][T25180] ? do_syscall_64+0x33e/0xf80 [ 652.398465][T25180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.398481][T25180] ? __lock_acquire+0x6b5/0x2cf0 [ 652.398504][T25180] ? cgroup1_freezing+0x20/0x350 [ 652.398520][T25180] ? lock_acquire+0x106/0x350 [ 652.398534][T25180] ? cgroup1_freezing+0x20/0x350 [ 652.398563][T25180] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.398584][T25180] get_signal+0x1107/0x1330 [ 652.398605][T25180] arch_do_signal_or_restart+0xbc/0x830 [ 652.398626][T25180] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 652.398652][T25180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.398667][T25180] exit_to_user_mode_loop+0x86/0x480 [ 652.398680][T25180] ? rcu_is_watching+0x15/0xb0 [ 652.398697][T25180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.398711][T25180] do_syscall_64+0x33e/0xf80 [ 652.398723][T25180] ? trace_irq_disable+0x3b/0x140 [ 652.398748][T25180] ? clear_bhb_loop+0x40/0x90 [ 652.398764][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.398778][T25180] RIP: 0033:0x7f71b9b9cdd9 [ 652.398791][T25180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.398804][T25180] RSP: 002b:00007f71bab36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 652.398820][T25180] RAX: 0000000000000000 RBX: 00007f71b9e15fa0 RCX: 00007f71b9b9cdd9 [ 652.398830][T25180] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 652.398839][T25180] RBP: 00007f71b9c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 652.398849][T25180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.398858][T25180] R13: 00007f71b9e16038 R14: 00007f71b9e15fa0 R15: 00007ffd0ce6f698 [ 652.398874][T25180] [ 653.102647][T25184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.149093][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!