last executing test programs: 7.46432368s ago: executing program 2 (id=4553): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e20, 0x200, @mcast2, 0x10}}}, &(0x7f0000000540)=0x84) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x300}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 7.087421466s ago: executing program 2 (id=4556): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdc00, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="040400002e00090027bd70000016d4efc7d87002"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) (async) unshare(0x62040200) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000192fbd8c00000000000000000a0000000000000004000400"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800dd8d00000000fcdbdf2502101000000300060029042008001e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4014) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000000000000000000000000000027000000000800010000000000"], 0x20}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r6], 0xd4}}, 0x804) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 4.40676072s ago: executing program 4 (id=4563): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)='h?\x00W', 0x4}, {&(0x7f0000000240)="a492ce3ffd9311d70350", 0xa}], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local, {[@end, @end, @timestamp_addr={0x44, 0x4, 0x7d, 0x1, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.401386902s ago: executing program 3 (id=4564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000001400)="30f67a895ba966473ef2695b4c4e67f30a96189a0bc0a5bd0c08121b367f440734931c72ba100af14cc95d774931ccec38206ed1163be25555f9d349b2063185847542a2b86f9c2fb4927750321f6a2acf85a91506ae3bda091c0500000007e12007875105ed7699589afc9d1376896d1f8daa43831ab4", 0xfffffe8b) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000000540)=""/2, &(0x7f0000000080)=0x2) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r8, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 3.446625266s ago: executing program 4 (id=4569): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000040)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.313584094s ago: executing program 3 (id=4570): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) pwritev(r1, 0x0, 0x0, 0x1, 0xf597) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000120001002bbd7000ffdbdf257f000001000000000000000000000000000004d50a0032000c0015"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x20008055}, 0x24008090) 3.249591757s ago: executing program 4 (id=4571): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) syz_emit_ethernet(0x5ea, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b4, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x29, 0x3, 0x8, 0xf9, 0x16, @private2, @private2, 0x40, 0x8, 0x6, 0x9e}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000980)={0x6cc, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r1}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r1}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x5c, 0x0, 0x7}, {0xf2, 0x8, 0x5, 0x8}, {0x4, 0x1, 0x7, 0xfffffffb}]}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8, 0x1, r1}, {0x4}}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private=0xa010100, 0x4e21, 0x4, 'lc\x00', 0x5, 0x8, 0x74}, {@multicast2, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r6, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.014188153s ago: executing program 2 (id=4574): unshare(0x28000600) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001b00)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x4000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x1000]}, {0x3ff, 0x4, 0x9, 0xffff}}, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x5}, 0x9, &(0x7f00000019c0)=[{0x3, 0x3, &(0x7f0000000100)='\x00', &(0x7f00000002c0)="6613c7d892fe1b0328daafd1a57a279ffd75f909f74789780dfbe6127faaa93020d26378d3b5f3a68e62623091456a0b0ea81b533e180aeebe7900e48fec0c197664183becfdf72db5ebd95386bf615e4134f6c0b3fb17bcb63a2b640aea4e9aca07db2a28082ef9592b575c", 0x6c}, {0x1, 0x100, &(0x7f0000000340)='}&-+\x00', &(0x7f0000001c00)="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", 0x1000, 0x22}, {0x2, 0x9, &(0x7f0000001440)='\x00', &(0x7f0000001480)="7ebb31d7b0c869d25a16180ad9c2a5acfed2797b94678f8eac8502", 0x1b, 0x2}, {0x3, 0x6, &(0x7f00000014c0)='\x00', &(0x7f0000001500)="fbf5e0612aa408abdded93471c1914a087eea461320ce951d4a6ce1419c5104bf1819cb28f6183dfc63ab37e682466647d9329b7a9ccc0ff3058e30a0fb778dcaee73610c1bc3a216abd1cee52", 0x4d, 0x10}, {0x3, 0x3, &(0x7f0000001580)='--\'\x86+-~-**}@[\x00', &(0x7f00000015c0)="6ad0b11786b6efb1998d9f16dcc862d737e1a45d67178cb9e0d2f64708865ac4284fc25cc239b65abf4d679b234717866c1243063dba449a619617edacce8378085a1b1660f04e20a493987c1f52580fa49d6f9988af803e968638061bc626977056197cf03db98bdeb308", 0x6b, 0x20}, {0x1, 0xab, &(0x7f0000001640)='.@^:@-.\x00', &(0x7f0000001680)="d6753700962be8069e08dfe75ee86be36af773788f9ac6c8647b164dbca816aeeecd1f0fcf5521b89252ea19240780b9ce19ab941acdc0d01fdd8afbf1b346611efcf264bcee8e708eb3471a603038d6eedf3623f3a240a82e5b0c6eb820988f7d6ce750f65a22bb13047805f2e87c88adb4bdb11a46450948fac645a6460287c3cb3049a14faf10879c1eca9f05c9f5e794ad144111cbf7d140ca353874ed562d060ed0bb0e3c14000bdcc5f67450e5a623654db3b84d8fd644c562c04b1c22931c209e91fd4699824a79eb0f", 0xcd, 0x10}, {0x2, 0x6, &(0x7f0000001780)='\x00', &(0x7f00000017c0)="7989e19e6dff5d606dc8", 0xa, 0x30}, {0x2, 0x7f, &(0x7f0000001800)='\x00', &(0x7f0000001840)="200f170e846396974b5e9e8dfe34cf5288084de7c9fffd431db712b8a9049469b6e47208df1e28724d67dc6a29c0bb44cfa73e7896a1de2573a1a83d661ffd611bf8bdb440f7bb53173bf79e9c78a1eac25009dcb690955c84a778586552b2d5897d41ba03badcf326978073d336b4c2462638a74f26b306c622bcf1e1a0d0b3986f70f7d2840362f79a318a5930cd47369bbde8607becbe0ebc539d0d5cb56ff776c3b39ada77ca2ee17bcbc6b6e6247dda6117f1abd94bc6b87173e98f6b2f697d3a", 0xc3, 0xa}, {0x3, 0xc, &(0x7f0000001940)='+\x00', &(0x7f0000001980)="585fc7618a9ca69dd0f924d912a166aa83ed796a8a28d6ef", 0x18, 0x8}]}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001b80), &(0x7f0000001bc0)=0x30) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) 2.867031244s ago: executing program 3 (id=4575): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x4b) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x32c1}], 0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x44855) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000340)=0x4, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.638932844s ago: executing program 2 (id=4577): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xfe, @loopback, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="fe2f6e5391700ad0c6d7f0f92f13e57de78aeecc26b014f9550381a4d2349f7e05f433bc177dfcb09e3faea0f64d8ca49366478b77930c5ca1d3da01aaa65627d2adfc408eb92b1c2e9ad10614ce6825d4ec5284919fbd51fff227470da24cd910ce68bb"], 0x18, 0x4855}, 0x24000052) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x40840) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0xf0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111ac0000000000850000008c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff0335a90012000000080003000d4c30bd8cc3ae0673b90cf79db3a8edd006cf8e7a883a629e7b804b118deee96c7ad2ed9b1bd76d61010000", @ANYRES32=r11, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x581c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x1412, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bind$netlink(r2, &(0x7f0000003a00)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) 2.577016871s ago: executing program 1 (id=4578): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffffffffffc000) 2.296633677s ago: executing program 1 (id=4579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x200}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r3], 0x20}}, 0x44800) 2.23789155s ago: executing program 2 (id=4580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000001400)="30f67a895ba966473ef2695b4c4e67f30a96189a0bc0a5bd0c08121b367f440734931c72ba100af14cc95d774931ccec38206ed1163be25555f9d349b2063185847542a2b86f9c2fb4927750321f6a2acf85a91506ae3bda091c0500000007e12007875105ed7699589afc9d1376896d1f8daa43831ab4", 0xfffffe8b) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000000540)=""/2, &(0x7f0000000080)=0x2) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r8, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.863443906s ago: executing program 4 (id=4583): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x800, 0x5, 0x4, @local, 'team_slave_1\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x240000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES8=r1], 0xfffffe28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000008, 0x4010, r1, 0x6341c000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 1.805855376s ago: executing program 1 (id=4584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) 1.782065069s ago: executing program 3 (id=4585): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000500116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.654481559s ago: executing program 0 (id=4586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100001}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname(r2, &(0x7f0000000940), &(0x7f00000009c0)=0x80) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r6], 0x44}}, 0x2000800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r9, r10, 0x2f, 0x20, 0x4}, 0x20) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="75c88def06995d69bf655ad22b023bfffffffffffffff92a6798bf4ed7756dc77b1f926a921f478ddb71730e3aac0d4ebfbe00000000000000005ed90bccd3dd3483844b5f8515ab532c6676ef2906bbed2b770b34d7d63855c5b014e9097f26ce8640f4e7c1f09bf4ac563dec4e616852e32140131d303b1300498f78b0e71d852975a3285ae0fc258b3331c0ce72397c952924fa16df221fcd7198b12663c6293ebc24d4cd", @ANYRES16=r11, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bb08000700", @ANYRES32=r12, @ANYBLOB="08000500e0000002"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x80, 0x20, 0x0, 0x5, {{0x16, 0x4, 0x1, 0x31, 0x58, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x27, 0xfa, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x41, 0x0}, @broadcast, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback]}, @rr={0x7, 0x1b, 0x37, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x3c}]}]}}}}}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={r0, &(0x7f00000001c0)='\x00', 0x440000, &(0x7f0000000200)={@align=0x3, {0x9f8, 0xa, 0x3ff, 0x5}}, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x3}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r15) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r15, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x45, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00'}) sendmsg$GTP_CMD_NEWPDP(r14, &(0x7f0000000800)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="89d628bd7000fcdbdf250000000008000100", @ANYRES32=r13, @ANYBLOB="080008000000000000000c000300040000000000000008000700"/40, @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r17, @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x4081) 1.453673555s ago: executing program 1 (id=4587): socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}}, 0x40) recvfrom$phonet(r0, 0x0, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 1.431001335s ago: executing program 0 (id=4588): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8932, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x9, 0xd9ed, 0x3, 0x3, 0x0, [0x3, 0x1, 0x7ff, 0xf]}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0xfffffffd, 0xd0, &(0x7f0000000540)=""/208, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x4000003}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x2000}) (async) ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x1, 0x16f, 0x7, 0xd, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="2800000010000108fdfffffe00000008000000001c179e295dccde6862a12b129b7663eba4324256bfc72e8e2a3a5ffecf2e423ab1c0aa183019da", @ANYRES32=0x0, @ANYBLOB="20000000a304040008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'bond0\x00', {0x2, 0x0, @multicast1}}) sendto$inet(r0, &(0x7f0000000300)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c80", 0x3f, 0x4044880, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'dummy0\x00'}) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=0x96) (async, rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) 1.392457464s ago: executing program 3 (id=4589): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x4000000}}], 0x20, 0x2400c850}, 0x4008880) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34c12}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x80}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x44}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) sendmmsg$inet(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee08000000105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d4420380000000000000000bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf01000000ca92c73d97ce54164c2742b2568635bec8e020b41fb2f800000000000000", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5c", 0x83}], 0x1}}], 0x2, 0x2090) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 1.174227699s ago: executing program 2 (id=4590): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x4000000}}], 0x20, 0x2400c850}, 0x4008880) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34c12}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x80}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x44}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee08000000105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d4420380000000000000000bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf01000000ca92c73d97ce54164c2742b2568635bec8e020b41fb2f800000000000000", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5c", 0x83}], 0x1}}], 0x2, 0x2090) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xffffffea}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0xe8b801e016fb586b) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 1.105862459s ago: executing program 0 (id=4591): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xfe, @loopback, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="fe2f6e5391700ad0c6d7f0f92f13e57de78aeecc26b014f9550381a4d2349f7e05f433bc177dfcb09e3faea0f64d8ca49366478b77930c5ca1d3da01aaa65627d2adfc408eb92b1c2e9ad10614ce6825d4ec5284919fbd51fff227470da24cd910ce68bb"], 0x18, 0x4855}, 0x24000052) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x40840) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x208, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111ac0000000000850000008c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff0335a90012000000080003000d4c30bd8cc3ae0673b90cf79db3a8edd006cf8e7a883a629e7b804b118deee96c7ad2ed9b1bd76d61010000", @ANYRES32=r11, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x581c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x1412, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bind$netlink(r2, &(0x7f0000003a00)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) 900.610076ms ago: executing program 1 (id=4592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0ff9e861b7976fc4759c00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="050800"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$kcm(0x23, 0x2, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002900)=r10, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 717.975355ms ago: executing program 4 (id=4593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f00000000c0)) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x806}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 579.68735ms ago: executing program 0 (id=4594): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x498, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x468, 0x2, [@TCA_BASIC_POLICE={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x502, 0x0, 0x2, 0x2, 0x5, 0x1, 0x9, 0x913d, 0x9, 0x9, 0x20, 0x80000001, 0x7, 0x9, 0x8, 0x3, 0x3, 0x0, 0x9, 0x8, 0xb6ed, 0x4, 0x9, 0x10001, 0x788, 0x80000001, 0x72b63a23, 0x9eea, 0x80, 0x2, 0x5c07, 0x6, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0xc, 0x2, 0x7, 0xb6, 0xfffffffe, 0x9, 0xff, 0x8, 0x3, 0x7, 0xa6f2, 0xf2fd, 0x1, 0x8, 0x7, 0x8, 0x7, 0x2, 0xb, 0xfffeffff, 0xffff, 0x1, 0x6, 0x80, 0x7fff, 0x1cb1415d, 0x6, 0x0, 0x61d, 0x8, 0x8, 0x2, 0x1, 0xffffffff, 0x5, 0x0, 0x5, 0x5, 0x1, 0xfffffffa, 0x7, 0x4, 0x8, 0xb861, 0xffffffff, 0x9, 0x5, 0x3390, 0x7f, 0x2, 0x4, 0x650, 0x4, 0x3, 0x6, 0x10000, 0x2, 0xc15, 0x5, 0x1, 0x5, 0x7, 0x2, 0x101, 0xfffffffd, 0xd, 0xffff, 0x1, 0x69f, 0x4, 0x40, 0x45, 0x9, 0x3, 0xfffffffe, 0x6, 0x7, 0x3, 0xa61, 0xa2, 0x8, 0x345, 0x7, 0x0, 0x0, 0x8, 0xecf9, 0x1, 0x8000, 0x80, 0x3, 0x4, 0x7, 0xffff, 0x8, 0x10, 0xc17, 0xb8, 0x27, 0x800, 0x100, 0x100, 0x2d, 0x1, 0x184, 0xfffffffb, 0x8001, 0x3, 0x6, 0xda, 0x6, 0x8, 0xd71, 0x2, 0x10001, 0x3, 0x2, 0xdc3, 0x4, 0x400, 0x5ff, 0x1, 0x80, 0x5, 0x8, 0x5, 0x30fc, 0x1, 0x3, 0x8d, 0x9, 0x7, 0x0, 0x3, 0x0, 0x3, 0x7fff, 0xfffff5f0, 0x7fffffff, 0x3, 0xd7, 0xf1, 0x1, 0x5, 0xaed, 0x7, 0xa, 0xfffffffb, 0x9, 0x1, 0x8, 0x5050, 0x8, 0x58, 0x8cb9, 0x5, 0x4, 0x5, 0xe0c, 0x1, 0x2, 0x2, 0xa, 0x10, 0x9, 0x69c, 0x2, 0x7, 0x1, 0x10, 0x1, 0x9, 0x8, 0x49c, 0x7ff, 0x800, 0xfff, 0x8, 0x3, 0x6, 0x3, 0xf03, 0x0, 0x4, 0x1, 0xbab3, 0xffffff00, 0x10, 0xf17, 0x3, 0x10000, 0x7, 0x2, 0xfdb4, 0x5, 0xfffffffc, 0x6, 0xc7, 0x2, 0x3, 0x5, 0xfffffffa, 0x5, 0xb, 0x5, 0x8204, 0x7f, 0x7, 0x1, 0x3, 0x7f, 0x0, 0x80000000, 0x7fff, 0x75054153, 0xfffffffe, 0x40, 0x5]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x2}}, @TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x4, 0x159, 0xdebc, 0xffffff47, {0xf1, 0x2, 0x8, 0xffff, 0x8001}, {0x9, 0xfce0a9191980eb45, 0x1000, 0x7f, 0x7, 0xffff4289}, 0x7fffffff, 0x0, 0x9}}]}]}}]}, 0x498}}, 0x24000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000001c0)) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x0, @initdev}}) write$bt_hci(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="8a660525428df56a7061506f70091241ed7838e3c2bb70a52ea8b9b4dea45beef9f27cdde74e77fe573ed04c6c6f9e84c06a443030c58562ed994b0970701648425ca0d453e726c7af4f4f8a5e2259fa54813067d9c1405c6c0e13c93cf7abb02e52afade67041458753b2e14ff13ee9ad7c1401b02a8653961e6cc7f567de1808f0feed986e24b982484b4c1f737cea2d5e8d02d3f7c893dd0a960cc576bd39243ea69801e35f293333ef044ebbde77651f5f046eab8d6b73e2f4c484b365cc07a6d583c7c23332752f916ea818fd01151b9c139ba38462db74ca3a4e5ff0", @ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES8=r2, @ANYRES8=r2], 0x6) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe5, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040890) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 340.821573ms ago: executing program 0 (id=4595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x41aa, 0x6, 0x0, 0x8, 0x80, 0x8}, 0xc) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40090) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x4e21, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x6, 0x9, 0x8, 0x0, 0x1, 0x20000000000000}, {0x1081, 0x9, 0x83}, 0x3ff, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x7, 0x0, 0x0, 0x800}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x4080) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 340.059891ms ago: executing program 1 (id=4596): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socketpair(0x2c, 0x5, 0xeffffffb, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0012000400000001000084ffffffff0a000000030000000000000100000000000000010500000020000000000000000000000b0200000000305f302e4f00612e002e00"], 0x0, 0x58, 0x0, 0x0, 0x400}, 0x28) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000540)={0x4, {{0xa, 0x4e20, 0x38, @mcast1, 0xfffff511}}, {{0xa, 0x4e21, 0xcd7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2e}}}, 0x108) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f00000002c0), 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socketpair(0x2c, 0x5, 0xeffffffb, &(0x7f00000000c0)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0012000400000001000084ffffffff0a000000030000000000000100000000000000010500000020000000000000000000000b0200000000305f302e4f00612e002e00"], 0x0, 0x58, 0x0, 0x0, 0x400}, 0x28) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r3, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000540)={0x4, {{0xa, 0x4e20, 0x38, @mcast1, 0xfffff511}}, {{0xa, 0x4e21, 0xcd7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2e}}}, 0x108) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) (async) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {}, 0xa}}, 0x26) (async) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f00000002c0), 0x0}, 0x20) (async) socket$netlink(0x10, 0x3, 0x7) (async) 291.635401ms ago: executing program 3 (id=4597): r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f00000001c0)={0x14, 0xfdfffffd}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) 55.761099ms ago: executing program 0 (id=4598): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000ecff0606030000000000000000000100000908000640000000020800064000000008080006400000001005000100070000000900020073797a300000000008000640000000e70700064000000002"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0x4, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xd4}}, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000001ced850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=4599): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000700116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) kernel console output (not intermixed with test programs): TION: forcing a failure. [ 646.929961][T19058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 646.977139][T19058] CPU: 1 UID: 0 PID: 19058 Comm: syz.4.3474 Not tainted syzkaller #0 PREEMPT(full) [ 646.977169][T19058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.977183][T19058] Call Trace: [ 646.977191][T19058] [ 646.977200][T19058] dump_stack_lvl+0xe8/0x150 [ 646.977231][T19058] should_fail_ex+0x412/0x560 [ 646.977264][T19058] prepare_alloc_pages+0x22a/0x650 [ 646.977305][T19058] __alloc_frozen_pages_noprof+0x12f/0x380 [ 646.977341][T19058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.977377][T19058] ? __pfx_policy_nodemask+0x10/0x10 [ 646.977408][T19058] ? __folio_batch_add_and_move+0x11a/0xc50 [ 646.977435][T19058] ? lock_acquire+0x106/0x350 [ 646.977466][T19058] alloc_pages_mpol+0x235/0x490 [ 646.977501][T19058] folio_alloc_mpol_noprof+0x39/0x160 [ 646.977535][T19058] vma_alloc_folio_noprof+0xe1/0x1e0 [ 646.977571][T19058] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 646.977614][T19058] do_wp_page+0x118a/0x4cc0 [ 646.977645][T19058] ? __pte_offset_map+0x29/0x240 [ 646.977681][T19058] ? __pfx_do_wp_page+0x10/0x10 [ 646.977702][T19058] ? do_raw_spin_lock+0x12b/0x2f0 [ 646.977735][T19058] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 646.977776][T19058] handle_mm_fault+0x151f/0x3170 [ 646.977818][T19058] ? handle_mm_fault+0xee/0x3170 [ 646.977851][T19058] ? __pfx_handle_mm_fault+0x10/0x10 [ 646.977882][T19058] ? follow_page_pte+0xbb7/0xe50 [ 646.977923][T19058] ? __pfx_follow_page_pte+0x10/0x10 [ 646.977961][T19058] __get_user_pages+0x1683/0x2720 [ 646.978023][T19058] __gup_longterm_locked+0xdcf/0x1630 [ 646.978062][T19058] ? sanity_check_pinned_pages+0x7af/0x870 [ 646.978095][T19058] gup_fast_fallback+0x1d84/0x20d0 [ 646.978155][T19058] ? __pfx_gup_fast_fallback+0x10/0x10 [ 646.978177][T19058] ? ____sys_recvmsg+0x1e6/0x4a0 [ 646.978197][T19058] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 646.978216][T19058] ? do_syscall_64+0x15f/0xf80 [ 646.978244][T19058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.978270][T19058] ? pin_user_pages_fast+0x4d/0xb0 [ 646.978297][T19058] iov_iter_extract_pages+0x37b/0x5f0 [ 646.978338][T19058] extract_iter_to_sg+0xefb/0x25d0 [ 646.978380][T19058] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 646.978401][T19058] ? rcu_is_watching+0x15/0xb0 [ 646.978426][T19058] ? trace_kmalloc+0x2a/0xf0 [ 646.978459][T19058] ? __kmalloc_noprof+0x1b8/0x760 [ 646.978492][T19058] ? __asan_memset+0x22/0x50 [ 646.978518][T19058] af_alg_get_rsgl+0x4b6/0x8e0 [ 646.978564][T19058] skcipher_recvmsg+0x392/0x1140 [ 646.978614][T19058] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 646.978640][T19058] ? __lock_acquire+0x6b5/0x2cf0 [ 646.978659][T19058] ? aa_sock_msg_perm+0xf1/0x1b0 [ 646.978688][T19058] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 646.978714][T19058] ? security_socket_recvmsg+0x7e/0x2c0 [ 646.978746][T19058] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 646.978775][T19058] sock_recvmsg+0x172/0x1b0 [ 646.978803][T19058] ____sys_recvmsg+0x1e6/0x4a0 [ 646.978834][T19058] ? __pfx_____sys_recvmsg+0x10/0x10 [ 646.978872][T19058] ? import_iovec+0x73/0xa0 [ 646.978906][T19058] ___sys_recvmsg+0x215/0x590 [ 646.978932][T19058] ? get_pid_task+0x20/0x1f0 [ 646.978964][T19058] ? __pfx____sys_recvmsg+0x10/0x10 [ 646.978991][T19058] ? __fget_files+0x2a/0x420 [ 646.979035][T19058] ? __fget_files+0x3a0/0x420 [ 646.979070][T19058] __x64_sys_recvmsg+0x1ba/0x2a0 [ 646.979094][T19058] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 646.979127][T19058] ? __pfx_ksys_write+0x10/0x10 [ 646.979166][T19058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.979187][T19058] do_syscall_64+0x15f/0xf80 [ 646.979214][T19058] ? trace_irq_disable+0x3b/0x140 [ 646.979244][T19058] ? clear_bhb_loop+0x40/0x90 [ 646.979270][T19058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.979290][T19058] RIP: 0033:0x7f71a359ce59 [ 646.979310][T19058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.979327][T19058] RSP: 002b:00007f71a43b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 646.979349][T19058] RAX: ffffffffffffffda RBX: 00007f71a3815fa0 RCX: 00007f71a359ce59 [ 646.979364][T19058] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 646.979377][T19058] RBP: 00007f71a43b9090 R08: 0000000000000000 R09: 0000000000000000 [ 646.979388][T19058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.979400][T19058] R13: 00007f71a3816038 R14: 00007f71a3815fa0 R15: 00007ffe10f3f7e8 [ 646.979435][T19058] [ 647.539095][T19065] __nla_validate_parse: 8 callbacks suppressed [ 647.539114][T19065] netlink: 5102 bytes leftover after parsing attributes in process `syz.3.3476'. [ 647.635613][T19065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.081707][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 648.129659][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3483'. [ 648.269665][T19099] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 648.317550][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'. [ 648.517895][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'. [ 648.695875][T19115] bridge_slave_0: left allmulticast mode [ 648.715461][T19115] bridge_slave_0: left promiscuous mode [ 648.738253][T19115] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.771350][T19115] bridge_slave_1: left allmulticast mode [ 648.781795][T19114] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3489'. [ 648.794114][T19115] bridge_slave_1: left promiscuous mode [ 648.812920][T19115] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.825986][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 648.853138][T19115] bond0: (slave bond_slave_0): Releasing backup interface [ 648.876960][T19115] bond0: (slave bond_slave_1): Releasing backup interface [ 648.901840][T19115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.927140][T19115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.938910][T19115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 649.414496][T19144] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3497'. [ 649.666882][T19156] syzkaller0: entered promiscuous mode [ 649.682380][T19156] syzkaller0: entered allmulticast mode [ 650.047801][T19178] Bluetooth: MGMT ver 1.23 [ 650.113283][T19185] FAULT_INJECTION: forcing a failure. [ 650.113283][T19185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.134915][T19185] CPU: 0 UID: 0 PID: 19185 Comm: syz.4.3510 Not tainted syzkaller #0 PREEMPT(full) [ 650.134946][T19185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 650.134959][T19185] Call Trace: [ 650.134968][T19185] [ 650.134977][T19185] dump_stack_lvl+0xe8/0x150 [ 650.135008][T19185] should_fail_ex+0x412/0x560 [ 650.135040][T19185] _copy_from_iter+0x1d3/0x1670 [ 650.135072][T19185] ? rcu_is_watching+0x15/0xb0 [ 650.135105][T19185] ? __pfx__copy_from_iter+0x10/0x10 [ 650.135140][T19185] ? netlink_sendmsg+0x650/0xb40 [ 650.135160][T19185] ? skb_put+0x11b/0x210 [ 650.135194][T19185] netlink_sendmsg+0x6c0/0xb40 [ 650.135224][T19185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.135249][T19185] ? aa_sock_msg_perm+0xf1/0x1b0 [ 650.135277][T19185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 650.135309][T19185] ____sys_sendmsg+0x972/0x9f0 [ 650.135330][T19185] ? __might_fault+0xaf/0x130 [ 650.135363][T19185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.135393][T19185] ? import_iovec+0x73/0xa0 [ 650.135426][T19185] ___sys_sendmsg+0x2a5/0x360 [ 650.135445][T19185] ? __lock_acquire+0x6b5/0x2cf0 [ 650.135471][T19185] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.135525][T19185] ? __fget_files+0x2a/0x420 [ 650.135549][T19185] ? __fget_files+0x3a0/0x420 [ 650.135584][T19185] __x64_sys_sendmsg+0x1bd/0x2a0 [ 650.135606][T19185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.135641][T19185] ? __pfx_ksys_write+0x10/0x10 [ 650.135679][T19185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.135701][T19185] do_syscall_64+0x15f/0xf80 [ 650.135731][T19185] ? trace_irq_disable+0x3b/0x140 [ 650.135762][T19185] ? clear_bhb_loop+0x40/0x90 [ 650.135786][T19185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.135807][T19185] RIP: 0033:0x7f71a359ce59 [ 650.135826][T19185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.135843][T19185] RSP: 002b:00007f71a43b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.135879][T19185] RAX: ffffffffffffffda RBX: 00007f71a3815fa0 RCX: 00007f71a359ce59 [ 650.135893][T19185] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 650.135906][T19185] RBP: 00007f71a43b9090 R08: 0000000000000000 R09: 0000000000000000 [ 650.135919][T19185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.135930][T19185] R13: 00007f71a3816038 R14: 00007f71a3815fa0 R15: 00007ffe10f3f7e8 [ 650.135963][T19185] [ 650.642923][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'. [ 650.691452][T19201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 650.761671][T19207] netlink: 'syz.3.3514': attribute type 3 has an invalid length. [ 651.109454][T19219] netlink: 'syz.4.3515': attribute type 21 has an invalid length. [ 651.187158][ T1132] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.187187][T19219] netlink: 'syz.4.3515': attribute type 21 has an invalid length. [ 651.251132][ T1132] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.284077][ T1132] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.322579][ T1132] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.464635][T19236] dvmrp0: entered allmulticast mode [ 651.541515][T19252] FAULT_INJECTION: forcing a failure. [ 651.541515][T19252] name failslab, interval 1, probability 0, space 0, times 0 [ 651.588392][T19252] CPU: 1 UID: 0 PID: 19252 Comm: syz.4.3523 Not tainted syzkaller #0 PREEMPT(full) [ 651.588420][T19252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.588433][T19252] Call Trace: [ 651.588441][T19252] [ 651.588450][T19252] dump_stack_lvl+0xe8/0x150 [ 651.588480][T19252] should_fail_ex+0x412/0x560 [ 651.588512][T19252] should_failslab+0xa8/0x100 [ 651.588542][T19252] ? skb_clone+0x212/0x3a0 [ 651.588562][T19252] kmem_cache_alloc_noprof+0x87/0x650 [ 651.588598][T19252] ? __netlink_lookup+0xc6/0x8b0 [ 651.588630][T19252] skb_clone+0x212/0x3a0 [ 651.588655][T19252] __netlink_deliver_tap+0x404/0x850 [ 651.588689][T19252] ? netlink_deliver_tap+0x2e/0x1b0 [ 651.588711][T19252] netlink_deliver_tap+0x19c/0x1b0 [ 651.588733][T19252] netlink_unicast+0x730/0x8e0 [ 651.588774][T19252] netlink_sendmsg+0x813/0xb40 [ 651.588806][T19252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.588830][T19252] ? aa_sock_msg_perm+0xf1/0x1b0 [ 651.588859][T19252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.588890][T19252] ____sys_sendmsg+0x972/0x9f0 [ 651.588910][T19252] ? __might_fault+0xaf/0x130 [ 651.588942][T19252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.588973][T19252] ? import_iovec+0x73/0xa0 [ 651.589006][T19252] ___sys_sendmsg+0x2a5/0x360 [ 651.589024][T19252] ? __lock_acquire+0x6b5/0x2cf0 [ 651.589051][T19252] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.589110][T19252] ? __fget_files+0x2a/0x420 [ 651.589133][T19252] ? __fget_files+0x3a0/0x420 [ 651.589168][T19252] __x64_sys_sendmsg+0x1bd/0x2a0 [ 651.589192][T19252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.589222][T19252] ? __pfx_ksys_write+0x10/0x10 [ 651.589261][T19252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.589283][T19252] do_syscall_64+0x15f/0xf80 [ 651.589312][T19252] ? trace_irq_disable+0x3b/0x140 [ 651.589343][T19252] ? clear_bhb_loop+0x40/0x90 [ 651.589367][T19252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.589387][T19252] RIP: 0033:0x7f71a359ce59 [ 651.589407][T19252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.589424][T19252] RSP: 002b:00007f71a43b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.589445][T19252] RAX: ffffffffffffffda RBX: 00007f71a3815fa0 RCX: 00007f71a359ce59 [ 651.589459][T19252] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 651.589472][T19252] RBP: 00007f71a43b9090 R08: 0000000000000000 R09: 0000000000000000 [ 651.589483][T19252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.589494][T19252] R13: 00007f71a3816038 R14: 00007f71a3815fa0 R15: 00007ffe10f3f7e8 [ 651.589527][T19252] [ 652.095793][T19265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3524'. [ 652.619056][T19282] hmó3)ó: entered promiscuous mode [ 652.667617][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.683059][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.693958][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.709357][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.719755][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.738173][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.755316][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.775854][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.785320][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.799276][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3534'. [ 652.831512][T19292] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.839277][T19292] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.918586][T19292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.933074][T19292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.967565][T19292] veth0_vlan: left promiscuous mode [ 653.038523][T19291] pim6reg1: entered promiscuous mode [ 653.055450][T19291] pim6reg1: entered allmulticast mode [ 653.106793][T19297] FAULT_INJECTION: forcing a failure. [ 653.106793][T19297] name failslab, interval 1, probability 0, space 0, times 0 [ 653.129110][ T47] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.138995][T19297] CPU: 1 UID: 0 PID: 19297 Comm: syz.2.3535 Not tainted syzkaller #0 PREEMPT(full) [ 653.139022][T19297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.139035][T19297] Call Trace: [ 653.139043][T19297] [ 653.139052][T19297] dump_stack_lvl+0xe8/0x150 [ 653.139081][T19297] should_fail_ex+0x412/0x560 [ 653.139114][T19297] should_failslab+0xa8/0x100 [ 653.139148][T19297] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 653.139176][T19297] ? __alloc_skb+0x186/0x7d0 [ 653.139203][T19297] ? __alloc_skb+0x1d0/0x7d0 [ 653.139229][T19297] ? __local_bh_enable_ip+0xd0/0x130 [ 653.139255][T19297] __alloc_skb+0x1d0/0x7d0 [ 653.139284][T19297] ? netlink_ack_tlv_len+0x6c/0x210 [ 653.139308][T19297] netlink_ack+0x146/0xa50 [ 653.139325][T19297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 653.139353][T19297] ? ref_tracker_free+0x693/0x840 [ 653.139384][T19297] ? __pfx_ref_tracker_free+0x10/0x10 [ 653.139423][T19297] netlink_rcv_skb+0x2b6/0x4b0 [ 653.139445][T19297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 653.139476][T19297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.139511][T19297] ? netlink_deliver_tap+0x2e/0x1b0 [ 653.139531][T19297] ? netlink_deliver_tap+0x2e/0x1b0 [ 653.139558][T19297] netlink_unicast+0x75c/0x8e0 [ 653.139609][T19297] netlink_sendmsg+0x813/0xb40 [ 653.139640][T19297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.139673][T19297] ? aa_sock_msg_perm+0xf1/0x1b0 [ 653.139704][T19297] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.139735][T19297] ____sys_sendmsg+0x972/0x9f0 [ 653.139755][T19297] ? __might_fault+0xaf/0x130 [ 653.139788][T19297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.139818][T19297] ? import_iovec+0x73/0xa0 [ 653.139852][T19297] ___sys_sendmsg+0x2a5/0x360 [ 653.139870][T19297] ? __lock_acquire+0x6b5/0x2cf0 [ 653.139897][T19297] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.139955][T19297] ? __fget_files+0x2a/0x420 [ 653.139977][T19297] ? __fget_files+0x3a0/0x420 [ 653.140012][T19297] __x64_sys_sendmsg+0x1bd/0x2a0 [ 653.140036][T19297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.140067][T19297] ? __pfx_ksys_write+0x10/0x10 [ 653.140105][T19297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.140128][T19297] do_syscall_64+0x15f/0xf80 [ 653.140157][T19297] ? trace_irq_disable+0x3b/0x140 [ 653.140187][T19297] ? clear_bhb_loop+0x40/0x90 [ 653.140211][T19297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.140231][T19297] RIP: 0033:0x7f5ec0d9ce59 [ 653.140250][T19297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.140268][T19297] RSP: 002b:00007f5ebeff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.140289][T19297] RAX: ffffffffffffffda RBX: 00007f5ec1015fa0 RCX: 00007f5ec0d9ce59 [ 653.140304][T19297] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 653.140316][T19297] RBP: 00007f5ebeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 653.140328][T19297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.140339][T19297] R13: 00007f5ec1016038 R14: 00007f5ec1015fa0 R15: 00007ffec4a6b918 [ 653.140372][T19297] [ 653.140585][ T47] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.525425][ T47] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.592897][ T47] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.680309][ T47] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.706353][ T47] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.730021][ T47] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.749350][ T47] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.900467][T19311] gretap0: entered promiscuous mode [ 653.990389][T19311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.047213][T19311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.119352][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.219875][T19311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 654.248264][T19311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.297450][T19311] veth1_vlan: left promiscuous mode [ 654.319445][T19311] veth0_vlan: left promiscuous mode [ 654.330632][T19311] veth0_vlan: entered promiscuous mode [ 654.376073][T19311] veth1_vlan: entered promiscuous mode [ 654.426122][T19311] veth1_macvtap: left promiscuous mode [ 654.465731][T19311] veth0_macvtap: left promiscuous mode [ 654.514447][T19311] veth0_macvtap: entered promiscuous mode [ 654.551423][T19311] veth1_macvtap: entered promiscuous mode [ 654.595471][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 654.631337][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.709653][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.717808][T19359] x_tables: duplicate underflow at hook 1 [ 654.727105][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.845854][T19311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.978300][T19358] IPVS: Error connecting to the multicast addr [ 655.005146][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.036949][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.073460][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.126597][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.439442][T19385] netlink: 'syz.3.3559': attribute type 4 has an invalid length. [ 655.499580][T19386] netlink: 'syz.3.3559': attribute type 4 has an invalid length. [ 655.970310][T19403] vlan0: left promiscuous mode [ 656.030033][T19403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.044255][T19403] mac80211_hwsim hwsim93 syzkaller0: left promiscuous mode [ 656.065598][T19404] FAULT_INJECTION: forcing a failure. [ 656.065598][T19404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.100875][T19404] CPU: 1 UID: 0 PID: 19404 Comm: syz.4.3564 Not tainted syzkaller #0 PREEMPT(full) [ 656.100903][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.100916][T19404] Call Trace: [ 656.100923][T19404] [ 656.100932][T19404] dump_stack_lvl+0xe8/0x150 [ 656.100962][T19404] should_fail_ex+0x412/0x560 [ 656.100994][T19404] _copy_from_user+0x2d/0xb0 [ 656.101025][T19404] kstrtouint_from_user+0xd6/0x180 [ 656.101053][T19404] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 656.101098][T19404] proc_fail_nth_write+0x8e/0x210 [ 656.101125][T19404] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 656.101157][T19404] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 656.101183][T19404] vfs_write+0x29a/0xb90 [ 656.101230][T19404] ? __pfx_vfs_write+0x10/0x10 [ 656.101262][T19404] ? __fget_files+0x2a/0x420 [ 656.101291][T19404] ? __fget_files+0x3a0/0x420 [ 656.101314][T19404] ? __fget_files+0x2a/0x420 [ 656.101348][T19404] ksys_write+0x150/0x270 [ 656.101379][T19404] ? __pfx_ksys_write+0x10/0x10 [ 656.101418][T19404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.101441][T19404] do_syscall_64+0x15f/0xf80 [ 656.101471][T19404] ? trace_irq_disable+0x3b/0x140 [ 656.101502][T19404] ? clear_bhb_loop+0x40/0x90 [ 656.101527][T19404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.101547][T19404] RIP: 0033:0x7f71a355d68e [ 656.101566][T19404] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 656.101587][T19404] RSP: 002b:00007f71a43b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 656.101608][T19404] RAX: ffffffffffffffda RBX: 00007f71a43b96c0 RCX: 00007f71a355d68e [ 656.101623][T19404] RDX: 0000000000000001 RSI: 00007f71a43b90a0 RDI: 0000000000000005 [ 656.101635][T19404] RBP: 00007f71a43b9090 R08: 0000000000000000 R09: 0000000000000000 [ 656.101647][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.101659][T19404] R13: 00007f71a3816038 R14: 00007f71a3815fa0 R15: 00007ffe10f3f7e8 [ 656.101693][T19404] [ 657.061478][T19443] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 657.142546][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.513973][T19456] ipvlan2: entered promiscuous mode [ 657.550001][T19456] bridge0: port 3(ipvlan2) entered blocking state [ 657.578550][T19456] bridge0: port 3(ipvlan2) entered disabled state [ 657.605830][T19456] ipvlan2: entered allmulticast mode [ 657.617048][T19456] bridge0: entered allmulticast mode [ 657.644486][T19456] ipvlan2: left allmulticast mode [ 657.661835][T19456] bridge0: left allmulticast mode [ 657.779680][T19464] __nla_validate_parse: 148 callbacks suppressed [ 657.779699][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3583'. [ 657.847053][T19463] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3582'. [ 657.991197][T19476] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3587'. [ 658.010579][T19476] openvswitch: netlink: Message has 4 unknown bytes. [ 658.024945][T19476] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3587'. [ 658.040437][T19478] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 658.060585][T19476] ip6gre1: entered promiscuous mode [ 658.067721][T19476] ip6gre1: entered allmulticast mode [ 658.089260][T19478] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 659.185310][T19529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3600'. [ 659.352774][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'. [ 659.498230][T19547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.509506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.526098][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3606'. [ 659.545345][T19551] netlink: 94 bytes leftover after parsing attributes in process `syz.4.3606'. [ 659.553645][T19547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.562971][T19551] netlink: 580 bytes leftover after parsing attributes in process `syz.4.3606'. [ 659.571856][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.593520][T19556] netlink: 'syz.2.3607': attribute type 1 has an invalid length. [ 659.618008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.640975][T19557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.667893][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.703336][T19556] netlink: 'syz.2.3607': attribute type 10 has an invalid length. [ 659.706909][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.734604][T19538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.806695][T19556] veth0_vlan: left promiscuous mode [ 659.818980][T19556] veth0_vlan: entered promiscuous mode [ 659.831610][T19556] `: Device veth0_vlan failed to register rx_handler [ 659.876442][T19563] netlink: 'syz.0.3610': attribute type 4 has an invalid length. [ 659.935148][T19566] netlink: 'syz.0.3610': attribute type 4 has an invalid length. [ 659.964870][T19565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3611'. [ 660.021170][T19538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.146846][T19576] netlink: 'syz.4.3614': attribute type 12 has an invalid length. [ 660.440875][T19538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.616009][T19538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.263425][T19616] bond5 (unregistering): Released all slaves [ 661.350802][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.490163][ T1107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.506552][T19633] x_tables: duplicate underflow at hook 2 [ 661.810517][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.938275][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.519701][T19673] syzkaller0: entered promiscuous mode [ 662.527828][T19673] syzkaller0: entered allmulticast mode [ 663.065580][T19685] __nla_validate_parse: 4 callbacks suppressed [ 663.065600][T19685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3639'. [ 663.435054][T19708] netlink: 'syz.3.3643': attribute type 10 has an invalid length. [ 663.621816][T19708] team0: Port device dummy0 added [ 664.099933][T19733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3649'. [ 664.539443][T19743] mac80211_hwsim hwsim93 syzkaller0: entered promiscuous mode [ 664.568297][T19742] syzkaller0: entered promiscuous mode [ 664.586369][T19742] syzkaller0: entered allmulticast mode [ 664.698682][T19743] tipc: Started in network mode [ 664.708244][T19743] tipc: Node identity 080211000001, cluster identity 4711 [ 664.732879][T19743] tipc: Enabled bearer , priority 0 [ 664.890057][T19750] xt_hashlimit: size too large, truncated to 1048576 [ 665.016691][ T5643] IPVS: starting estimator thread 0... [ 665.109906][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3659'. [ 665.122318][T19773] IPVS: using max 27 ests per chain, 64800 per kthread [ 665.145566][T19777] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 665.186625][T19767] batadv_slave_1: entered promiscuous mode [ 665.207828][T19767] macsec1: entered promiscuous mode [ 665.220079][T19767] macsec1: entered allmulticast mode [ 665.227973][T19780] netlink: 'syz.3.3660': attribute type 2 has an invalid length. [ 665.239752][T19767] batadv_slave_1: entered allmulticast mode [ 665.254284][T19780] netlink: 'syz.3.3660': attribute type 8 has an invalid length. [ 665.268278][T19780] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3660'. [ 665.269203][T19767] batadv_slave_1: left allmulticast mode [ 665.301312][T19767] batadv_slave_1: left promiscuous mode [ 665.467519][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.493668][T19775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.511454][T19779] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3659'. [ 665.730874][T19796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3662'. [ 665.853120][ T9895] tipc: Node number set to 134418688 [ 666.132228][T19815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3670'. [ 666.279362][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'. [ 666.450300][T19824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 666.468979][T19826] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3673'. [ 666.759943][T19843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 666.960402][T19852] FAULT_INJECTION: forcing a failure. [ 666.960402][T19852] name failslab, interval 1, probability 0, space 0, times 0 [ 666.998456][T19852] CPU: 0 UID: 0 PID: 19852 Comm: syz.4.3681 Not tainted syzkaller #0 PREEMPT(full) [ 666.998485][T19852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.998498][T19852] Call Trace: [ 666.998506][T19852] [ 666.998516][T19852] dump_stack_lvl+0xe8/0x150 [ 666.998546][T19852] should_fail_ex+0x412/0x560 [ 666.998585][T19852] should_failslab+0xa8/0x100 [ 666.998619][T19852] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 666.998650][T19852] ? __alloc_skb+0x1d0/0x7d0 [ 666.998677][T19852] ? __local_bh_enable_ip+0xd0/0x130 [ 666.998704][T19852] __alloc_skb+0x1d0/0x7d0 [ 666.998731][T19852] ? netlink_ack_tlv_len+0x6c/0x210 [ 666.998755][T19852] netlink_ack+0x146/0xa50 [ 666.998779][T19852] ? trace_contention_end+0x3d/0x140 [ 666.998819][T19852] netlink_rcv_skb+0x2b6/0x4b0 [ 666.998841][T19852] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 666.998874][T19852] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.998912][T19852] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.998932][T19852] ? netlink_deliver_tap+0x2e/0x1b0 [ 666.998955][T19852] xfrm_netlink_rcv+0x79/0x90 [ 666.998986][T19852] netlink_unicast+0x75c/0x8e0 [ 666.999028][T19852] netlink_sendmsg+0x813/0xb40 [ 666.999060][T19852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.999085][T19852] ? aa_sock_msg_perm+0xf1/0x1b0 [ 666.999114][T19852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.999146][T19852] ____sys_sendmsg+0x972/0x9f0 [ 666.999166][T19852] ? __might_fault+0xaf/0x130 [ 666.999199][T19852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.999230][T19852] ? import_iovec+0x73/0xa0 [ 666.999264][T19852] ___sys_sendmsg+0x2a5/0x360 [ 666.999283][T19852] ? __lock_acquire+0x6b5/0x2cf0 [ 666.999310][T19852] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.999376][T19852] ? __fget_files+0x2a/0x420 [ 666.999400][T19852] ? __fget_files+0x3a0/0x420 [ 666.999436][T19852] __x64_sys_sendmsg+0x1bd/0x2a0 [ 666.999460][T19852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.999492][T19852] ? __pfx_ksys_write+0x10/0x10 [ 666.999530][T19852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.999552][T19852] do_syscall_64+0x15f/0xf80 [ 666.999595][T19852] ? trace_irq_disable+0x3b/0x140 [ 666.999625][T19852] ? clear_bhb_loop+0x40/0x90 [ 666.999650][T19852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.999670][T19852] RIP: 0033:0x7f71a359ce59 [ 666.999690][T19852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.999707][T19852] RSP: 002b:00007f71a43b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.999729][T19852] RAX: ffffffffffffffda RBX: 00007f71a3815fa0 RCX: 00007f71a359ce59 [ 666.999743][T19852] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 666.999756][T19852] RBP: 00007f71a43b9090 R08: 0000000000000000 R09: 0000000000000000 [ 666.999767][T19852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.999778][T19852] R13: 00007f71a3816038 R14: 00007f71a3815fa0 R15: 00007ffe10f3f7e8 [ 666.999811][T19852] [ 667.541581][T19869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 667.659170][T19878] ªªªªªª: renamed from lo (while UP) [ 667.981236][T19898] openvswitch: netlink: nsh attr 14384 is out of range max 3 [ 668.017222][T19897] smc: net device hsr0 applied user defined pnetid SYZ2 [ 668.053343][T19898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.163556][T19908] __nla_validate_parse: 6 callbacks suppressed [ 668.163575][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3696'. [ 668.209161][T19907] macsec1: entered promiscuous mode [ 668.323930][T19914] FAULT_INJECTION: forcing a failure. [ 668.323930][T19914] name failslab, interval 1, probability 0, space 0, times 0 [ 668.395316][T19914] CPU: 0 UID: 0 PID: 19914 Comm: syz.1.3698 Not tainted syzkaller #0 PREEMPT(full) [ 668.395345][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.395358][T19914] Call Trace: [ 668.395365][T19914] [ 668.395374][T19914] dump_stack_lvl+0xe8/0x150 [ 668.395404][T19914] should_fail_ex+0x412/0x560 [ 668.395437][T19914] should_failslab+0xa8/0x100 [ 668.395469][T19914] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 668.395500][T19914] ? __alloc_skb+0x1d0/0x7d0 [ 668.395527][T19914] ? __local_bh_enable_ip+0xd0/0x130 [ 668.395554][T19914] __alloc_skb+0x1d0/0x7d0 [ 668.395581][T19914] ? netlink_ack_tlv_len+0x6c/0x210 [ 668.395605][T19914] netlink_ack+0x146/0xa50 [ 668.395628][T19914] ? trace_contention_end+0x3d/0x140 [ 668.395669][T19914] netlink_rcv_skb+0x2b6/0x4b0 [ 668.395691][T19914] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 668.395729][T19914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 668.395766][T19914] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.395786][T19914] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.395807][T19914] xfrm_netlink_rcv+0x79/0x90 [ 668.395837][T19914] netlink_unicast+0x75c/0x8e0 [ 668.395883][T19914] netlink_sendmsg+0x813/0xb40 [ 668.395914][T19914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.395939][T19914] ? aa_sock_msg_perm+0xf1/0x1b0 [ 668.395969][T19914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 668.396001][T19914] ____sys_sendmsg+0x972/0x9f0 [ 668.396021][T19914] ? __might_fault+0xaf/0x130 [ 668.396055][T19914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.396086][T19914] ? import_iovec+0x73/0xa0 [ 668.396118][T19914] ___sys_sendmsg+0x2a5/0x360 [ 668.396138][T19914] ? __lock_acquire+0x6b5/0x2cf0 [ 668.396165][T19914] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.396225][T19914] ? __fget_files+0x2a/0x420 [ 668.396248][T19914] ? __fget_files+0x3a0/0x420 [ 668.396285][T19914] __x64_sys_sendmsg+0x1bd/0x2a0 [ 668.396308][T19914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.396340][T19914] ? __pfx_ksys_write+0x10/0x10 [ 668.396379][T19914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.396401][T19914] do_syscall_64+0x15f/0xf80 [ 668.396433][T19914] ? clear_bhb_loop+0x40/0x90 [ 668.396458][T19914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.396478][T19914] RIP: 0033:0x7fc16919ce59 [ 668.396499][T19914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.396516][T19914] RSP: 002b:00007fc1673f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.396538][T19914] RAX: ffffffffffffffda RBX: 00007fc169415fa0 RCX: 00007fc16919ce59 [ 668.396553][T19914] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 668.396566][T19914] RBP: 00007fc1673f6090 R08: 0000000000000000 R09: 0000000000000000 [ 668.396578][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.396590][T19914] R13: 00007fc169416038 R14: 00007fc169415fa0 R15: 00007fff941a32c8 [ 668.396624][T19914] [ 669.018744][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3702'. [ 669.066827][T19921] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 669.122562][T19921] team0 (unregistering): Port device team_slave_0 removed [ 669.193407][T19921] team0 (unregistering): Failed to send options change via netlink (err -105) [ 669.266281][T19921] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 669.283382][T19936] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3703'. [ 669.300956][T19921] team0 (unregistering): Port device team_slave_1 removed [ 669.358500][T19940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3703'. [ 669.402187][T19921] team0 (unregistering): Failed to send options change via netlink (err -105) [ 669.433280][T19921] team0 (unregistering): Failed to send port change of device dummy0 via netlink (err -105) [ 669.459711][T19921] team0 (unregistering): Port device dummy0 removed [ 669.583650][T19924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.595944][T19930] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3702'. [ 670.193466][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3712'. [ 670.213682][T19969] netlink: 62447 bytes leftover after parsing attributes in process `syz.2.3712'. [ 670.254416][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3713'. [ 670.544834][T19977] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3716'. [ 670.675182][T19991] macsec1: entered promiscuous mode [ 670.811205][T19996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3722'. [ 670.961048][T20010] FAULT_INJECTION: forcing a failure. [ 670.961048][T20010] name failslab, interval 1, probability 0, space 0, times 0 [ 671.001801][T20010] CPU: 0 UID: 0 PID: 20010 Comm: syz.1.3725 Not tainted syzkaller #0 PREEMPT(full) [ 671.001833][T20010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 671.001845][T20010] Call Trace: [ 671.001854][T20010] [ 671.001862][T20010] dump_stack_lvl+0xe8/0x150 [ 671.001892][T20010] should_fail_ex+0x412/0x560 [ 671.001925][T20010] should_failslab+0xa8/0x100 [ 671.001957][T20010] ? skb_clone+0x212/0x3a0 [ 671.001978][T20010] kmem_cache_alloc_noprof+0x87/0x650 [ 671.002014][T20010] skb_clone+0x212/0x3a0 [ 671.002038][T20010] __netlink_deliver_tap+0x404/0x850 [ 671.002073][T20010] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.002095][T20010] netlink_deliver_tap+0x19c/0x1b0 [ 671.002117][T20010] netlink_sendskb+0x68/0x140 [ 671.002149][T20010] netlink_rcv_skb+0x2b6/0x4b0 [ 671.002171][T20010] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 671.002205][T20010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.002266][T20010] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.002287][T20010] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.002310][T20010] xfrm_netlink_rcv+0x79/0x90 [ 671.002340][T20010] netlink_unicast+0x75c/0x8e0 [ 671.002384][T20010] netlink_sendmsg+0x813/0xb40 [ 671.002415][T20010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.002441][T20010] ? aa_sock_msg_perm+0xf1/0x1b0 [ 671.002471][T20010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.002502][T20010] ____sys_sendmsg+0x972/0x9f0 [ 671.002523][T20010] ? __might_fault+0xaf/0x130 [ 671.002555][T20010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.002592][T20010] ? import_iovec+0x73/0xa0 [ 671.002623][T20010] ___sys_sendmsg+0x2a5/0x360 [ 671.002642][T20010] ? __lock_acquire+0x6b5/0x2cf0 [ 671.002668][T20010] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.002727][T20010] ? __fget_files+0x2a/0x420 [ 671.002750][T20010] ? __fget_files+0x3a0/0x420 [ 671.002786][T20010] __x64_sys_sendmsg+0x1bd/0x2a0 [ 671.002810][T20010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.002842][T20010] ? __pfx_ksys_write+0x10/0x10 [ 671.002880][T20010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.002902][T20010] do_syscall_64+0x15f/0xf80 [ 671.002931][T20010] ? trace_irq_disable+0x3b/0x140 [ 671.002960][T20010] ? clear_bhb_loop+0x40/0x90 [ 671.002986][T20010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.003006][T20010] RIP: 0033:0x7fc16919ce59 [ 671.003026][T20010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.003043][T20010] RSP: 002b:00007fc1673f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.003064][T20010] RAX: ffffffffffffffda RBX: 00007fc169415fa0 RCX: 00007fc16919ce59 [ 671.003078][T20010] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 671.003091][T20010] RBP: 00007fc1673f6090 R08: 0000000000000000 R09: 0000000000000000 [ 671.003102][T20010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.003113][T20010] R13: 00007fc169416038 R14: 00007fc169415fa0 R15: 00007fff941a32c8 [ 671.003148][T20010] [ 671.283149][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.404041][T20017] sctp: [Deprecated]: syz.2.3729 (pid 20017) Use of int in maxseg socket option. [ 671.404041][T20017] Use struct sctp_assoc_value instead [ 671.444035][T20017] tipc: Started in network mode [ 671.450047][T20017] tipc: Node identity 080211000001, cluster identity 4711 [ 671.458271][T20017] tipc: Enabled bearer , priority 0 [ 671.955735][T20042] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 672.055368][T20045] tipc: Enabled bearer , priority 27 [ 672.251762][T20053] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001 [ 672.269913][T20054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 672.533568][T20062] netlink: 'syz.2.3743': attribute type 5 has an invalid length. [ 672.572170][ T10] tipc: Node number set to 134418688 [ 673.141409][T20090] netlink: 'syz.3.3752': attribute type 13 has an invalid length. [ 673.149608][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 673.205852][T20090] netlink: 'syz.3.3752': attribute type 17 has an invalid length. [ 673.236742][T20094] __nla_validate_parse: 12 callbacks suppressed [ 673.236765][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3753'. [ 673.501259][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3754'. [ 673.515838][T20099] netlink: 11118 bytes leftover after parsing attributes in process `syz.4.3754'. [ 673.584214][T20087] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.740967][T20087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.760266][T20087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.775303][T20103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 674.218992][T20090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.243764][T20090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.294512][T20090] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.301690][T20090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.336281][T20090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.349986][T20090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.391120][T20090] veth1_macvtap: left promiscuous mode [ 674.399487][T20090] veth0_macvtap: left promiscuous mode [ 674.408027][T20090] veth0_macvtap: entered promiscuous mode [ 674.431154][T20090] veth1_macvtap: entered promiscuous mode [ 674.454661][T20090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.470569][T20090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.486936][T20090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.506283][T20090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.539675][T20090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.558587][T20090] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 674.569715][T20090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 674.597709][T20090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.610151][T20090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 674.615677][T20115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3758'. [ 674.908651][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 675.070333][T20136] ip6tnl1: entered allmulticast mode [ 675.257597][T20147] FAULT_INJECTION: forcing a failure. [ 675.257597][T20147] name failslab, interval 1, probability 0, space 0, times 0 [ 675.304959][T20147] CPU: 0 UID: 0 PID: 20147 Comm: syz.1.3767 Not tainted syzkaller #0 PREEMPT(full) [ 675.304998][T20147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.305011][T20147] Call Trace: [ 675.305018][T20147] [ 675.305027][T20147] dump_stack_lvl+0xe8/0x150 [ 675.305055][T20147] should_fail_ex+0x412/0x560 [ 675.305104][T20147] should_failslab+0xa8/0x100 [ 675.305135][T20147] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 675.305163][T20147] ? __alloc_skb+0x186/0x7d0 [ 675.305190][T20147] ? __alloc_skb+0x1d0/0x7d0 [ 675.305224][T20147] ? __local_bh_enable_ip+0xd0/0x130 [ 675.305250][T20147] __alloc_skb+0x1d0/0x7d0 [ 675.305283][T20147] netlink_sendmsg+0x5d4/0xb40 [ 675.305314][T20147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.305339][T20147] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.305367][T20147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.305398][T20147] ____sys_sendmsg+0x972/0x9f0 [ 675.305416][T20147] ? __might_fault+0xaf/0x130 [ 675.305449][T20147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.305478][T20147] ? import_iovec+0x73/0xa0 [ 675.305511][T20147] ___sys_sendmsg+0x2a5/0x360 [ 675.305529][T20147] ? __lock_acquire+0x6b5/0x2cf0 [ 675.305554][T20147] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.305611][T20147] ? __fget_files+0x2a/0x420 [ 675.305633][T20147] ? __fget_files+0x3a0/0x420 [ 675.305667][T20147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 675.305691][T20147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.305721][T20147] ? __pfx_ksys_write+0x10/0x10 [ 675.305759][T20147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.305781][T20147] do_syscall_64+0x15f/0xf80 [ 675.305809][T20147] ? trace_irq_disable+0x3b/0x140 [ 675.305838][T20147] ? clear_bhb_loop+0x40/0x90 [ 675.305862][T20147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.305894][T20147] RIP: 0033:0x7fc16919ce59 [ 675.305911][T20147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.305927][T20147] RSP: 002b:00007fc1673f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.305947][T20147] RAX: ffffffffffffffda RBX: 00007fc169415fa0 RCX: 00007fc16919ce59 [ 675.305961][T20147] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 675.305973][T20147] RBP: 00007fc1673f6090 R08: 0000000000000000 R09: 0000000000000000 [ 675.305984][T20147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.305994][T20147] R13: 00007fc169416038 R14: 00007fc169415fa0 R15: 00007fff941a32c8 [ 675.306024][T20147] [ 675.583780][T20154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3768'. [ 675.674614][T20156] vlan0: entered promiscuous mode [ 675.879797][T20171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3773'. [ 676.008953][T20176] netlink: 'syz.1.3774': attribute type 22 has an invalid length. [ 676.026527][T20176] netlink: 'syz.1.3774': attribute type 1 has an invalid length. [ 676.034875][T20176] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3774'. [ 676.045783][T20176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3774'. [ 676.138692][T20184] netlink: 'syz.4.3775': attribute type 30 has an invalid length. [ 676.167220][T20180] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3775'. [ 676.988496][ T1132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.063361][ T1132] wlan1: Trigger new scan to find an IBSS to join [ 677.391207][T20250] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 677.406061][T20250] bond3 (unregistering): Released all slaves [ 677.440645][T20247] sit1: entered promiscuous mode [ 677.796751][T20272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 678.509920][T20297] __nla_validate_parse: 10 callbacks suppressed [ 678.509941][T20297] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3808'. [ 678.649128][T20304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.666081][T20304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.700068][T20304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.736447][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 678.745722][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 678.791025][T20304] tipc: Resetting bearer [ 678.964837][T20318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3815'. [ 679.441637][T20318] 8021q: adding VLAN 0 to HW filter on device bond6 [ 679.465321][T20320] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3815'. [ 679.535254][T20348] FAULT_INJECTION: forcing a failure. [ 679.535254][T20348] name failslab, interval 1, probability 0, space 0, times 0 [ 679.617571][ T1107] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.629575][T20348] CPU: 1 UID: 0 PID: 20348 Comm: syz.1.3820 Not tainted syzkaller #0 PREEMPT(full) [ 679.629604][T20348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.629617][T20348] Call Trace: [ 679.629626][T20348] [ 679.629634][T20348] dump_stack_lvl+0xe8/0x150 [ 679.629664][T20348] should_fail_ex+0x412/0x560 [ 679.629696][T20348] should_failslab+0xa8/0x100 [ 679.629734][T20348] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 679.629763][T20348] ? __alloc_skb+0x186/0x7d0 [ 679.629792][T20348] ? __alloc_skb+0x1d0/0x7d0 [ 679.629817][T20348] ? __local_bh_enable_ip+0xd0/0x130 [ 679.629842][T20348] __alloc_skb+0x1d0/0x7d0 [ 679.629869][T20348] ? netlink_ack_tlv_len+0x6c/0x210 [ 679.629893][T20348] netlink_ack+0x146/0xa50 [ 679.629911][T20348] ? kasan_quarantine_put+0xbb/0x1f0 [ 679.629938][T20348] ? lockdep_hardirqs_on+0x7a/0x110 [ 679.629974][T20348] ? nfnetlink_rcv+0x260f/0x27b0 [ 679.630019][T20348] nfnetlink_rcv+0x251a/0x27b0 [ 679.630086][T20348] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 679.630166][T20348] ? netlink_deliver_tap+0x2e/0x1b0 [ 679.630199][T20348] ? netlink_deliver_tap+0x2e/0x1b0 [ 679.630219][T20348] ? netlink_deliver_tap+0x2e/0x1b0 [ 679.630245][T20348] netlink_unicast+0x75c/0x8e0 [ 679.630285][T20348] netlink_sendmsg+0x813/0xb40 [ 679.630313][T20348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.630336][T20348] ? aa_sock_msg_perm+0xf1/0x1b0 [ 679.630363][T20348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.630394][T20348] ____sys_sendmsg+0x972/0x9f0 [ 679.630415][T20348] ? __might_fault+0xaf/0x130 [ 679.630448][T20348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.630479][T20348] ? import_iovec+0x73/0xa0 [ 679.630513][T20348] ___sys_sendmsg+0x2a5/0x360 [ 679.630532][T20348] ? __lock_acquire+0x6b5/0x2cf0 [ 679.630558][T20348] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.630614][T20348] ? __fget_files+0x2a/0x420 [ 679.630637][T20348] ? __fget_files+0x3a0/0x420 [ 679.630673][T20348] __x64_sys_sendmsg+0x1bd/0x2a0 [ 679.630697][T20348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.630728][T20348] ? __pfx_ksys_write+0x10/0x10 [ 679.630766][T20348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.630793][T20348] do_syscall_64+0x15f/0xf80 [ 679.630825][T20348] ? clear_bhb_loop+0x40/0x90 [ 679.630851][T20348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.630870][T20348] RIP: 0033:0x7fc16919ce59 [ 679.630890][T20348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.630906][T20348] RSP: 002b:00007fc1673f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.630931][T20348] RAX: ffffffffffffffda RBX: 00007fc169415fa0 RCX: 00007fc16919ce59 [ 679.630946][T20348] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 679.630958][T20348] RBP: 00007fc1673f6090 R08: 0000000000000000 R09: 0000000000000000 [ 679.630970][T20348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.630981][T20348] R13: 00007fc169416038 R14: 00007fc169415fa0 R15: 00007fff941a32c8 [ 679.631021][T20348] [ 679.953070][ T1107] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.029533][ T1107] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.178659][ T47] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.245180][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3824'. [ 680.398842][T20350] syzkaller0: entered promiscuous mode [ 680.413162][T20350] syzkaller0: entered allmulticast mode [ 680.450932][T20374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3826'. [ 680.478210][T20374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3826'. [ 680.593433][ T6001] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 680.629342][ T5768] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 680.643390][ T6001] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 680.655760][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 680.701397][T20379] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 680.786930][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 680.810366][T20384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3830'. [ 680.893399][ T5871] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 681.671280][T20421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 681.705278][ T7637] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 681.753486][T20430] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 682.466789][T20460] syz_tun: entered allmulticast mode [ 682.530171][T20460] pim6reg: entered allmulticast mode [ 682.671326][T20466] syz_tun (unregistering): left allmulticast mode [ 682.743590][T20469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 683.113044][T20501] syzkaller0: entered promiscuous mode [ 683.139074][T20501] syzkaller0: entered allmulticast mode [ 683.180817][T20501] tipc: Started in network mode [ 683.200745][T20501] tipc: Node identity de6deb1b099b, cluster identity 4711 [ 683.233089][T20501] tipc: Enabled bearer , priority 0 [ 683.250652][T20500] tipc: Resetting bearer [ 683.306131][T20500] tipc: Disabling bearer [ 683.327458][T20507] bridge_slave_0: left allmulticast mode [ 683.335740][T20507] bridge_slave_0: left promiscuous mode [ 683.341693][T20507] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.966336][T20546] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 684.123152][T20551] syzkaller0: entered promiscuous mode [ 684.129317][T20551] syzkaller0: entered allmulticast mode [ 684.191144][T20553] __nla_validate_parse: 21 callbacks suppressed [ 684.191167][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'. [ 684.338874][T20563] tipc: Enabled bearer , priority 0 [ 684.360247][T20568] FAULT_INJECTION: forcing a failure. [ 684.360247][T20568] name failslab, interval 1, probability 0, space 0, times 0 [ 684.385746][T20568] CPU: 1 UID: 0 PID: 20568 Comm: syz.4.3882 Not tainted syzkaller #0 PREEMPT(full) [ 684.385774][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.385787][T20568] Call Trace: [ 684.385795][T20568] [ 684.385804][T20568] dump_stack_lvl+0xe8/0x150 [ 684.385838][T20568] should_fail_ex+0x412/0x560 [ 684.385870][T20568] should_failslab+0xa8/0x100 [ 684.385902][T20568] __kmalloc_noprof+0xe8/0x760 [ 684.385931][T20568] ? sock_kmalloc+0xd6/0x160 [ 684.385958][T20568] sock_kmalloc+0xd6/0x160 [ 684.385980][T20568] skcipher_recvmsg+0x517/0x1140 [ 684.386029][T20568] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 684.386056][T20568] ? __lock_acquire+0x6b5/0x2cf0 [ 684.386077][T20568] ? aa_sock_msg_perm+0xf1/0x1b0 [ 684.386105][T20568] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 684.386130][T20568] ? security_socket_recvmsg+0x7e/0x2c0 [ 684.386160][T20568] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 684.386187][T20568] sock_recvmsg+0x172/0x1b0 [ 684.386216][T20568] ____sys_recvmsg+0x1e6/0x4a0 [ 684.386246][T20568] ? __pfx_____sys_recvmsg+0x10/0x10 [ 684.386283][T20568] ? import_iovec+0x73/0xa0 [ 684.386316][T20568] ___sys_recvmsg+0x215/0x590 [ 684.386335][T20568] ? get_pid_task+0x20/0x1f0 [ 684.386379][T20568] ? __pfx____sys_recvmsg+0x10/0x10 [ 684.386405][T20568] ? __fget_files+0x2a/0x420 [ 684.386449][T20568] ? __fget_files+0x3a0/0x420 [ 684.386483][T20568] __x64_sys_recvmsg+0x1ba/0x2a0 [ 684.386507][T20568] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 684.386539][T20568] ? __pfx_ksys_write+0x10/0x10 [ 684.386576][T20568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.386599][T20568] do_syscall_64+0x15f/0xf80 [ 684.386628][T20568] ? trace_irq_disable+0x3b/0x140 [ 684.386658][T20568] ? clear_bhb_loop+0x40/0x90 [ 684.386683][T20568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.386703][T20568] RIP: 0033:0x7f71a359ce59 [ 684.386723][T20568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.386740][T20568] RSP: 002b:00007f71a43b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 684.386762][T20568] RAX: ffffffffffffffda RBX: 00007f71a3815fa0 RCX: 00007f71a359ce59 [ 684.386776][T20568] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 684.386789][T20568] RBP: 00007f71a43b9090 R08: 0000000000000000 R09: 0000000000000000 [ 684.386801][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.386813][T20568] R13: 00007f71a3816038 R14: 00007f71a3815fa0 R15: 00007ffe10f3f7e8 [ 684.386845][T20568] [ 684.684256][T20565] tipc: Resetting bearer [ 684.739898][T20565] tipc: Disabling bearer [ 684.847455][T20582] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3886'. [ 684.902351][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 685.026295][T20590] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 685.820930][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3895'. [ 686.018546][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 686.395384][T20649] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 686.905086][T20682] netlink: 'syz.4.3909': attribute type 32 has an invalid length. [ 687.532688][T20715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3916'. [ 688.265166][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3921'. [ 688.307296][T20750] netlink: 94 bytes leftover after parsing attributes in process `syz.0.3921'. [ 688.347698][T20750] netlink: 580 bytes leftover after parsing attributes in process `syz.0.3921'. [ 688.363078][T20727] ip6tnl1: left allmulticast mode [ 688.393371][T20727] sit1: left promiscuous mode [ 688.635164][T20767] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3926'. [ 688.762258][T20772] mac80211_hwsim hwsim95 wlan0: entered promiscuous mode [ 688.789730][T20772] mac80211_hwsim hwsim95 wlan0: entered allmulticast mode [ 688.813648][T20772] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 688.847780][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3928'. [ 689.083071][T20778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 689.232648][T20787] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3932'. [ 689.508791][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3934'. [ 689.620925][T20801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.645837][T20810] netlink: 'syz.3.3938': attribute type 1 has an invalid length. [ 689.668800][T20801] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3934'. [ 689.742884][T20820] netlink: 'syz.2.3940': attribute type 58 has an invalid length. [ 689.755608][T20820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3940'. [ 689.770595][T20821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3938'. [ 689.808374][T20816] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 689.826645][T20810] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3938'. [ 689.848393][T20816] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 689.862911][ T4946] Bluetooth: hci0: command 0x0405 tx timeout [ 689.933091][T20821] bond7: (slave bridge0): Enslaving as an active interface with a down link [ 690.150815][T20832] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 690.195783][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3945'. [ 690.207671][T20838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.217469][T20836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3945'. [ 690.706669][T20857] netlink: 'syz.0.3951': attribute type 3 has an invalid length. [ 690.760798][T20857] netlink: 'syz.0.3951': attribute type 3 has an invalid length. [ 690.918324][T20870] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3953'. [ 690.933734][T20857] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 691.095490][T20877] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3955'. [ 691.827473][T20888] sock: sock_timestamping_bind_phc: sock not bind to device [ 692.736451][T20918] netlink: 'syz.1.3969': attribute type 4 has an invalid length. [ 693.120415][T20945] x_tables: duplicate underflow at hook 1 [ 693.142753][ T4946] Bluetooth: hci5: command 0x0406 tx timeout [ 693.348223][T20957] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 693.374715][T20957] unsupported nla_type 216 [ 693.384754][T20957] netlink: zone id is out of range [ 693.389958][T20957] netlink: zone id is out of range [ 693.395828][T20957] netlink: zone id is out of range [ 693.401027][T20957] netlink: zone id is out of range [ 693.406864][T20957] netlink: zone id is out of range [ 693.419291][T20957] netlink: zone id is out of range [ 693.426545][ T808] IPVS: starting estimator thread 0... [ 693.443866][T20957] netlink: zone id is out of range [ 693.476148][T20957] netlink: zone id is out of range [ 693.489163][T20967] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:8188 [ 693.524528][T20960] IPVS: using max 27 ests per chain, 64800 per kthread [ 693.622541][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 693.809160][T20994] netlink: 'syz.4.3988': attribute type 3 has an invalid length. [ 693.894228][T20994] nbd: nbd4 already in use [ 693.918598][T20994] block nbd4: NBD_DISCONNECT [ 693.924033][T20994] block nbd4: Send disconnect failed -32 [ 693.969104][T21000] netlink: 'syz.3.3989': attribute type 1 has an invalid length. [ 694.097000][T21002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.108144][T21002] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.124952][T21002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.193453][T21002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.204505][T21002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.220087][T21002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 694.231768][T21002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.246193][T21002] veth1_vlan: left promiscuous mode [ 694.254579][T21002] veth0_vlan: entered promiscuous mode [ 694.269483][T21002] veth1_vlan: entered promiscuous mode [ 694.285568][T21002] veth1_macvtap: left promiscuous mode [ 694.294224][T21002] veth0_macvtap: left promiscuous mode [ 694.301750][T21002] veth0_macvtap: entered promiscuous mode [ 694.309933][T21002] veth1_macvtap: entered promiscuous mode [ 694.324789][T21002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.334394][T21002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.344529][T21002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.354405][T21002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.364217][T21002] mac80211_hwsim hwsim95 wlan0: left promiscuous mode [ 694.371195][T21002] mac80211_hwsim hwsim95 wlan0: left allmulticast mode [ 694.681040][ T47] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 694.855088][ T47] gretap0 (unregistering): left promiscuous mode [ 694.888791][ T47] bond14 (unregistering): (slave geneve2): Releasing active interface [ 695.258895][ T47] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 695.316524][ T47] bond8 (unregistering): (slave bridge9): Releasing backup interface [ 695.557503][ T47] bond9 (unregistering): (slave bridge13): Releasing backup interface [ 695.711157][ T47] bond10 (unregistering): (slave bridge16): Releasing backup interface [ 695.836592][ T47] bond12 (unregistering): (slave bridge19): Releasing backup interface [ 695.931717][ T47] bond15 (unregistering): (slave bridge0): Releasing backup interface [ 695.942674][ T47] bridge0 (unregistering): left promiscuous mode [ 696.002658][ T47] bond18 (unregistering): (slave bridge21): Releasing backup interface [ 696.068087][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.080724][ T47] bond0 (unregistering): Released all slaves [ 696.094816][ T47] bond1 (unregistering): Released all slaves [ 696.113590][ T47] bond2 (unregistering): Released all slaves [ 696.140383][ T47] bond3 (unregistering): Released all slaves [ 696.158795][ T47] bond4 (unregistering): Released all slaves [ 696.177912][ T47] bond5 (unregistering): (slave lo): Releasing backup interface [ 696.190297][ T47] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 696.205528][ T47] bond5 (unregistering): Released all slaves [ 696.224347][ T47] bond6 (unregistering): Released all slaves [ 696.240836][ T47] bond7 (unregistering): Released all slaves [ 696.258112][ T47] bond8 (unregistering): Released all slaves [ 696.281403][ T47] bond9 (unregistering): Released all slaves [ 696.299073][ T47] bond10 (unregistering): Released all slaves [ 696.317129][ T47] bond11 (unregistering): Released all slaves [ 696.338617][ T47] bond12 (unregistering): Released all slaves [ 696.358884][ T47] bond13 (unregistering): (slave vcan1): Releasing backup interface [ 696.367539][ T47] vcan1: left promiscuous mode [ 696.375379][ T47] bond13 (unregistering): Released all slaves [ 696.399361][ T47] bond14 (unregistering): Released all slaves [ 696.417361][ T47] bond15 (unregistering): Released all slaves [ 696.436394][ T47] bond16 (unregistering): (slave bond17): Releasing backup interface [ 696.447058][ T47] bond16 (unregistering): Released all slaves [ 696.466040][ T47] bond17 (unregistering): Released all slaves [ 696.484617][ T47] bond18 (unregistering): Released all slaves [ 696.507788][ T47] bond19 (unregistering): Released all slaves [ 696.538291][T20975] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.545590][T20975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.573293][T20975] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.580597][T20975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.699010][T13299] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.714736][T13299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.733600][T13299] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.771606][T13299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.828595][T13299] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.882860][T13299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.958019][T13299] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.008255][T13299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.077998][T21039] netlink: 'syz.0.3996': attribute type 4 has an invalid length. [ 697.087358][T21047] __nla_validate_parse: 10 callbacks suppressed [ 697.087381][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3997'. [ 697.175105][T21043] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3995'. [ 697.335019][ T47] hmó3)ó: left promiscuous mode [ 697.381289][T21050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3999'. [ 697.776549][ T47] tipc: Left network mode [ 697.964927][T21080] batadv_slave_1: entered allmulticast mode [ 698.091132][T21082] bridge_slave_0: left allmulticast mode [ 698.138500][T21082] bridge_slave_0: left promiscuous mode [ 698.159225][T21082] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.199731][T21082] bridge_slave_1: left allmulticast mode [ 698.214472][T21082] bridge_slave_1: left promiscuous mode [ 698.235120][T21082] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.279951][T21082] bond0: (slave bond_slave_0): Releasing backup interface [ 698.309891][T21082] bond0: (slave bond_slave_1): Releasing backup interface [ 698.373312][T21082] `: Port device team_slave_0 removed [ 698.398966][T21082] `: Port device team_slave_1 removed [ 698.414250][T21082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.423644][T21082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.435464][T21082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.446353][T21082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.458786][T21082] net_ratelimit: 16 callbacks suppressed [ 698.458805][T21082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 698.574860][T21079] batadv_slave_1: left allmulticast mode [ 698.698885][T21101] tipc: Enabled bearer , priority 10 [ 698.711150][T21102] tipc: Enabling of bearer rejected, already enabled [ 698.796391][T21110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4007'. [ 698.886389][T21101] IPVS: persistence engine module ip_vs_pe_À not found [ 699.399173][T21122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4012'. [ 699.414999][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4015'. [ 699.562797][T21132] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4014'. [ 699.812286][ T7637] tipc: Node number set to 1467465207 [ 699.945811][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4018'. [ 700.325280][T21163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4020'. [ 700.458438][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 700.557800][T21167] netlink: 'syz.3.4015': attribute type 1 has an invalid length. [ 700.631362][T21131] syzkaller0: entered promiscuous mode [ 700.638587][T21131] syzkaller0: entered allmulticast mode [ 703.887610][T21206] __nla_validate_parse: 2 callbacks suppressed [ 703.887627][T21206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4029'. [ 703.988371][T21206] bond0: entered promiscuous mode [ 703.993789][T21206] bond_slave_0: entered promiscuous mode [ 704.000324][T21206] bond_slave_1: entered promiscuous mode [ 704.014197][T21206] bond0: left promiscuous mode [ 704.019199][T21206] bond_slave_0: left promiscuous mode [ 704.033206][T21206] bond_slave_1: left promiscuous mode [ 704.288006][T21213] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4031'. [ 704.353547][T21223] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 704.758676][T21242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 704.860030][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 705.053878][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 705.180456][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 705.308003][T21262] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4042'. [ 705.822911][T21246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.841490][T21246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.420813][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 706.435490][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 706.508010][T21266] geneve2: entered promiscuous mode [ 706.514824][T21266] geneve2: entered allmulticast mode [ 706.525731][T20974] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.554427][T20974] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.583808][T20974] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.601818][T20974] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.626040][T20974] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 706.639493][ T47] veth1_to_team: left promiscuous mode [ 706.651014][ T47] hsr_slave_0: left promiscuous mode [ 706.658311][ T47] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 706.667005][ T47] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 706.676256][ T47] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 706.685307][ T47] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 706.698548][ T47] veth0_macvtap: left promiscuous mode [ 706.707753][ T47] veth1_vlan: left promiscuous mode [ 707.017247][ T47] team_slave_1 (unregistering): left promiscuous mode [ 707.026929][ T47] team0 (unregistering): Port device team_slave_1 removed [ 707.059203][ T47] team_slave_0 (unregistering): left promiscuous mode [ 707.067980][ T47] team0 (unregistering): Port device team_slave_0 removed [ 707.189834][T20974] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 707.199162][T20974] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 707.223399][T20974] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 707.350401][T21279] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4047'. [ 707.545582][T21231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.731498][T21282] netlink: 'syz.1.4048': attribute type 32 has an invalid length. [ 708.048739][T21304] netlink: 'syz.1.4054': attribute type 58 has an invalid length. [ 708.136727][T21313] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 708.174235][T21317] openvswitch: netlink: IPv6 tunnel dst address is zero [ 708.886327][T21329] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 708.948287][T21329] bond4: (slave lo): Enslaving as an active interface with an up link [ 708.966497][T21342] __nla_validate_parse: 5 callbacks suppressed [ 708.966518][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 708.993822][T21329] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 709.115168][T21338] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 709.790634][T21375] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4067'. [ 710.119871][T21381] netlink: 'syz.4.4069': attribute type 13 has an invalid length. [ 710.419855][T21393] gre0: MTU too low for tipc bearer [ 710.466674][T21393] tipc: Disabling bearer [ 710.807665][T21409] netlink: 'syz.1.4076': attribute type 32 has an invalid length. [ 711.161742][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 711.276859][T21425] netlink: 'syz.0.4078': attribute type 13 has an invalid length. [ 711.336741][T21425] netlink: 'syz.0.4078': attribute type 17 has an invalid length. [ 711.604324][T21423] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4076'. [ 711.647208][T21437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4081'. [ 712.042738][T21422] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.050611][T21422] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.493183][T21422] tipc: Resetting bearer [ 714.128499][T21425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.139337][T21425] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.178594][T21425] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.188049][T21425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.204184][T21425] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.213700][T21425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.277209][T21425] veth1_vlan: left promiscuous mode [ 714.291559][T21425] vlan0: left promiscuous mode [ 714.299237][T21425] veth1_vlan: entered promiscuous mode [ 714.314249][T21425] veth1_macvtap: left promiscuous mode [ 714.321420][T21425] veth0_macvtap: left promiscuous mode [ 714.331109][T21425] veth0_macvtap: entered promiscuous mode [ 714.354742][T21425] veth1_macvtap: entered promiscuous mode [ 714.371707][T21425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.390078][T21425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.403926][T21425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.418179][T21425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.437745][T21425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 714.447807][T21425] mac80211_hwsim hwsim93 syzkaller0: left promiscuous mode [ 714.455450][T21425] mac80211_hwsim hwsim93 syzkaller0: left allmulticast mode [ 714.465756][T21425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 714.554417][T21425] ip6gre1: left promiscuous mode [ 714.559534][T21425] ip6gre1: left allmulticast mode [ 714.571652][T21425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 714.585105][T21425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 714.981508][T21456] sctp: [Deprecated]: syz.3.4084 (pid 21456) Use of int in max_burst socket option. [ 714.981508][T21456] Use struct sctp_assoc_value instead [ 715.419650][T21470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4089'. [ 715.440624][T21471] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 715.758453][T21461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.790207][T21461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 716.049313][T21490] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4092'. [ 716.277683][T21485] bond0: (slave bond_slave_0): Releasing backup interface [ 716.314322][T21485] bond0: (slave bond_slave_1): Releasing backup interface [ 716.396053][T21485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.424492][T21485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.464132][T21485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 716.559773][T21509] openvswitch: netlink: Unknown key attributes 2 [ 716.748121][T21461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.761064][T21461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 716.901803][T21521] netlink: 'syz.3.4099': attribute type 4 has an invalid length. [ 716.920999][T21521] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4099'. [ 717.055099][T21461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.089143][T21461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 717.381347][T21461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.422274][T21461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 717.641817][T21533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4102'. [ 717.819972][ T6001] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 717.839225][ T6001] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 717.901465][T21542] netlink: 'syz.4.4104': attribute type 10 has an invalid length. [ 717.971083][T21544] netlink: 'syz.4.4104': attribute type 10 has an invalid length. [ 718.071527][T21542] team0: Failed to send options change via netlink (err -105) [ 718.092102][T21542] team0: Port device dummy0 added [ 718.125420][T21544] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 718.158514][T21544] team0: Failed to send options change via netlink (err -105) [ 718.180462][T21544] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 718.195262][T21544] team0: Port device dummy0 removed [ 718.267659][T21544] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 718.278065][ T6001] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 718.290026][ T6001] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 718.466659][T20978] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 718.475464][T20978] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 718.496901][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4107'. [ 718.556087][T20978] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 718.566117][T20978] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 718.744094][T21564] Bluetooth: hci1: command 0x0406 tx timeout [ 718.752849][T21564] Bluetooth: hci2: command 0x0406 tx timeout [ 719.003971][T21581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4113'. [ 719.135800][T21586] mac80211_hwsim hwsim98 syzkaller0: entered promiscuous mode [ 719.148939][T21586] mac80211_hwsim hwsim98 syzkaller0: entered allmulticast mode [ 719.159004][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'. [ 719.367707][T21590] Bluetooth: MGMT ver 1.23 [ 719.501626][T21599] netlink: 'syz.4.4119': attribute type 4 has an invalid length. [ 719.553177][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4119'. [ 719.565986][T21599] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.573843][T21599] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.710839][T21604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4120'. [ 720.007840][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4123'. [ 720.360154][T21628] ip6erspan1: entered allmulticast mode [ 720.422058][ T5637] Bluetooth: hci0: command 0x0405 tx timeout [ 720.428193][ T4946] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 720.523634][T21639] netlink: 'syz.3.4129': attribute type 33 has an invalid length. [ 720.531720][T21639] __nla_validate_parse: 3 callbacks suppressed [ 720.531735][T21639] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4129'. [ 720.780187][T21652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4134'. [ 721.187753][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4137'. [ 721.229464][T21671] openvswitch: netlink: Key type 142 is out of range max 32 [ 725.156665][T21655] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 725.168795][T21655] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 725.182350][T21655] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 725.467565][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4138'. [ 725.609596][T21651] tipc: Resetting bearer [ 725.972139][T21697] nbd4: detected capacity change from 0 to 63 [ 725.991684][ T4946] block nbd4: Receive control failed (result -104) [ 726.002508][ T5637] block nbd4: Receive control failed (result -32) [ 726.667484][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4142'. [ 726.681606][T21726] syzkaller1: entered promiscuous mode [ 726.689445][T21726] syzkaller1: entered allmulticast mode [ 726.814450][T21729] tipc: Enabling of bearer rejected, already enabled [ 726.848708][T21727] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4142'. [ 726.930210][T21736] netlink: 'syz.2.4147': attribute type 10 has an invalid length. [ 727.010719][T21736] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 727.049079][T21741] tipc: Resetting bearer [ 727.746409][T21760] netlink: 'syz.4.4155': attribute type 1 has an invalid length. [ 727.977202][T21760] bond5: entered promiscuous mode [ 728.008220][T21760] bond5: entered allmulticast mode [ 728.044738][T21760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 728.136455][T21763] macvlan2: entered promiscuous mode [ 728.148044][T21763] macvlan2: entered allmulticast mode [ 728.159508][T21763] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 728.849158][T21783] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4161'. [ 729.305253][ T11] block nbd4: Connection timed out, retrying (0/2 alive) [ 729.317033][ T11] block nbd4: Connection timed out, retrying (0/2 alive) [ 729.324515][T16623] block nbd4: Dead connection, failed to find a fallback [ 729.334300][T16623] block nbd4: shutting down sockets [ 729.339900][ T11] block nbd4: Connection timed out, retrying (0/2 alive) [ 729.347596][T16623] blk_print_req_error: 137 callbacks suppressed [ 729.347617][T16623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.364535][ T11] block nbd4: Connection timed out, retrying (0/2 alive) [ 729.371783][T16623] buffer_io_error: 137 callbacks suppressed [ 729.371800][T16623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 729.389127][T16623] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.398729][T16623] Buffer I/O error on dev nbd4, logical block 3, async page read [ 729.408348][T16623] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.417684][T16623] Buffer I/O error on dev nbd4, logical block 2, async page read [ 729.426725][T16623] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.435908][T16623] Buffer I/O error on dev nbd4, logical block 1, async page read [ 729.444093][T21686] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.455175][T21686] Buffer I/O error on dev nbd4, logical block 0, async page read [ 729.465342][T21686] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.475030][T21686] Buffer I/O error on dev nbd4, logical block 1, async page read [ 729.483668][T21686] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.493598][T21686] Buffer I/O error on dev nbd4, logical block 2, async page read [ 729.501668][T21686] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.510963][T21686] Buffer I/O error on dev nbd4, logical block 3, async page read [ 729.519488][T21686] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.528945][T21686] Buffer I/O error on dev nbd4, logical block 0, async page read [ 729.537068][T21686] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.546696][T21686] Buffer I/O error on dev nbd4, logical block 1, async page read [ 729.558104][T21686] ldm_validate_partition_table(): Disk read failed. [ 729.567214][T21686] Dev nbd4: unable to read RDB block 0 [ 729.574804][T21791] veth0_vlan: left promiscuous mode [ 729.596054][T21686] nbd4: unable to read partition table [ 729.603967][T21791] veth0_vlan: entered promiscuous mode [ 729.621042][T21686] ldm_validate_partition_table(): Disk read failed. [ 729.656983][T21686] Dev nbd4: unable to read RDB block 0 [ 729.670819][T21686] nbd4: unable to read partition table [ 729.741674][T21791] mac80211_hwsim hwsim98 syzkaller0: left promiscuous mode [ 729.777001][T21791] mac80211_hwsim hwsim97 wlan0: entered promiscuous mode [ 729.876330][T21791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.905418][T21791] geneve2: left promiscuous mode [ 729.927799][T21791] 8021q: adding VLAN 0 to HW filter on device eth0 [ 729.957866][T21791] 8021q: adding VLAN 0 to HW filter on device eth1 [ 729.980348][T21791] 8021q: adding VLAN 0 to HW filter on device eth2 [ 730.260637][T21791] 8021q: adding VLAN 0 to HW filter on device eth3 [ 730.499058][ T1132] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 731.327299][T21854] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4176'. [ 731.445042][T21854] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4176'. [ 731.579496][T21862] sctp: [Deprecated]: syz.0.4180 (pid 21862) Use of int in max_burst socket option. [ 731.579496][T21862] Use struct sctp_assoc_value instead [ 731.849107][T21868] nbd: must specify a device to reconfigure [ 732.252972][T21878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4185'. [ 732.451561][T21887] IPVS: sh: FWM 3 0x00000003 - no destination available [ 732.468642][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4187'. [ 732.515437][T21888] netlink: 'syz.0.4187': attribute type 13 has an invalid length. [ 732.533316][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 734.356924][T21941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 734.422078][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 734.573629][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4202'. [ 734.590315][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4202'. [ 734.991194][T21963] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 735.031431][T21963] x_tables: ip_tables: ah match: only valid for protocol 51 [ 735.214609][T21962] syzkaller0: entered promiscuous mode [ 735.258691][T21973] netlink: 1788 bytes leftover after parsing attributes in process `syz.0.4209'. [ 735.271080][T21962] syzkaller0: entered allmulticast mode [ 735.817621][T21984] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 735.844933][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'. [ 735.871702][T21984] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 735.887600][T21984] veth1_virt_wifi: entered allmulticast mode [ 735.926723][T21984] veth1_virt_wifi: left allmulticast mode [ 736.017097][T21989] sctp: [Deprecated]: syz.2.4213 (pid 21989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.017097][T21989] Use struct sctp_sack_info instead [ 740.029759][T22016] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 740.060850][T22016] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4217'. [ 740.099934][T22016] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4217'. [ 740.148125][T22016] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4217'. [ 740.495150][T22032] bond4: entered promiscuous mode [ 740.520613][T22032] bond4: entered allmulticast mode [ 740.543143][T22032] 8021q: adding VLAN 0 to HW filter on device bond4 [ 740.990477][T22051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4227'. [ 741.504808][T22064] tipc: Can't bind to reserved service type 0 [ 741.554140][T22064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 741.699960][T22036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.742751][T22036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.916697][T22036] veth0_vlan: left promiscuous mode [ 742.839268][T22047] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.846713][T22047] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.902364][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 743.977591][T22047] tipc: Resetting bearer [ 744.499483][T22051] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 744.620235][ T1132] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.652018][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4231'. [ 744.663592][ T1132] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.675566][ T1132] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.688230][T22080] netlink: 'syz.0.4231': attribute type 1 has an invalid length. [ 744.697707][ T1132] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.720145][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4231'. [ 744.744854][ T1132] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.770750][ T1132] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.859413][ T1132] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.901141][ T1132] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.963791][ T1132] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.061158][T22092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4234'. [ 745.109680][ T1132] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.181636][ T1132] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.246167][ T1132] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.340246][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4236'. [ 745.503683][T22102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4236'. [ 745.701548][T22111] netlink: 'syz.3.4239': attribute type 5 has an invalid length. [ 745.979827][T22122] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4242'. [ 746.301206][T22132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 746.319737][T22131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4245'. [ 746.658296][T22143] batadv_slave_1: entered promiscuous mode [ 746.724925][T22146] ipt_rpfilter: unknown options [ 746.811763][T22146] syzkaller1: entered promiscuous mode [ 746.879653][T22138] batadv_slave_1: left promiscuous mode [ 747.146413][T22158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4255'. [ 747.183904][T22158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4255'. [ 747.236822][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4257'. [ 747.256853][T22161] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4257'. [ 747.323595][T22164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4256'. [ 747.447618][T22170] netlink: 'syz.4.4254': attribute type 10 has an invalid length. [ 747.967203][T22185] netlink: 'syz.0.4261': attribute type 6 has an invalid length. [ 747.976152][T22152] netlink: 'syz.3.4251': attribute type 1 has an invalid length. [ 748.056190][T22161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.871068][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.915557][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.923736][T22206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.010469][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.036046][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.090024][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.132391][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.155955][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.179912][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.205599][T22221] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 749.215325][T22205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.462403][ T4946] Bluetooth: hci4: command 0x0406 tx timeout [ 749.557818][T22231] netlink: 'syz.2.4275': attribute type 4 has an invalid length. [ 749.639197][T22232] netlink: 'syz.2.4275': attribute type 4 has an invalid length. [ 749.730566][T22231] netlink: 'syz.2.4275': attribute type 1 has an invalid length. [ 750.137987][T22248] netlink: 'syz.2.4280': attribute type 1 has an invalid length. [ 750.185512][T22245] netlink: 'syz.4.4279': attribute type 11 has an invalid length. [ 750.479231][T22248] bond5: entered promiscuous mode [ 750.489583][T22248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 750.637568][T22264] netlink: 'syz.3.4284': attribute type 1 has an invalid length. [ 750.679581][T22258] bond5: (slave bridge4): making interface the new active one [ 750.688173][T22258] bridge4: entered promiscuous mode [ 750.700203][T22258] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 750.817113][T22264] bond8: entered promiscuous mode [ 750.825431][T22264] 8021q: adding VLAN 0 to HW filter on device bond8 [ 750.969492][T22262] __nla_validate_parse: 7 callbacks suppressed [ 750.969511][T22262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4285'. [ 751.182819][T22279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4288'. [ 752.425945][T22326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4298'. [ 752.438750][T22327] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.4295'. [ 752.490286][T22326] nbd: must specify at least one socket [ 752.530051][T22327] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.4295'. [ 752.613336][T22307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4294'. [ 753.447428][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4302'. [ 753.539244][T22352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4304'. [ 753.804792][T22358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4306'. [ 753.969510][T22362] netlink: 'syz.4.4305': attribute type 2 has an invalid length. [ 753.991520][T22363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4308'. [ 754.018283][T22362] netlink: 'syz.4.4305': attribute type 2 has an invalid length. [ 754.131808][T22362] macsec1: entered promiscuous mode [ 754.275877][T22367] netlink: 'syz.0.4309': attribute type 10 has an invalid length. [ 754.296558][T22367] syz_tun: entered promiscuous mode [ 754.333979][T22367] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 755.532406][ T5637] Bluetooth: hci0: link tx timeout [ 755.540653][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.559840][ T5637] Bluetooth: hci0: link tx timeout [ 755.568379][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.585895][ T5637] Bluetooth: hci0: link tx timeout [ 755.591218][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.599238][ T5637] Bluetooth: hci0: link tx timeout [ 755.604779][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.640566][ T5637] Bluetooth: hci0: link tx timeout [ 755.646894][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.663052][ T5637] Bluetooth: hci0: link tx timeout [ 755.668387][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.695532][ T5637] Bluetooth: hci0: link tx timeout [ 755.700832][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.711782][ T5637] Bluetooth: hci0: link tx timeout [ 755.718747][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.727099][ T5637] Bluetooth: hci0: link tx timeout [ 755.732536][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 755.741936][T22404] 8021q: VLANs not supported on ip6gre0 [ 755.747672][ T5637] Bluetooth: hci0: link tx timeout [ 755.752943][ T5637] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 756.867971][T22432] macsec1: entered promiscuous mode [ 756.978068][T22419] nbd5: detected capacity change from 0 to 63 [ 757.015776][T22436] netlink: 'syz.3.4327': attribute type 2 has an invalid length. [ 757.033264][ T5639] block nbd5: Receive control failed (result -32) [ 757.046230][T22436] netlink: 'syz.3.4327': attribute type 2 has an invalid length. [ 757.047546][ T5637] block nbd5: Receive control failed (result -32) [ 757.064131][T22215] block nbd5: Dead connection, failed to find a fallback [ 757.112417][T22215] block nbd5: shutting down sockets [ 757.121001][T22215] blk_print_req_error: 138 callbacks suppressed [ 757.121019][T22215] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.139847][T22215] buffer_io_error: 138 callbacks suppressed [ 757.139864][T22215] Buffer I/O error on dev nbd5, logical block 0, async page read [ 757.155963][T22215] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.169559][T22215] Buffer I/O error on dev nbd5, logical block 1, async page read [ 757.178714][T22215] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.188339][T22215] Buffer I/O error on dev nbd5, logical block 2, async page read [ 757.197733][T22215] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.208039][T22215] Buffer I/O error on dev nbd5, logical block 3, async page read [ 757.216582][T22215] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.246493][T22215] Buffer I/O error on dev nbd5, logical block 0, async page read [ 757.270759][T22215] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.289881][T22215] Buffer I/O error on dev nbd5, logical block 1, async page read [ 757.327945][T22215] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.349274][T22215] Buffer I/O error on dev nbd5, logical block 2, async page read [ 757.373957][T22215] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.402071][T22215] Buffer I/O error on dev nbd5, logical block 3, async page read [ 757.419308][T22215] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.441009][T22215] Buffer I/O error on dev nbd5, logical block 0, async page read [ 757.458503][T22215] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 757.492021][T22215] Buffer I/O error on dev nbd5, logical block 1, async page read [ 757.544438][T22215] ldm_validate_partition_table(): Disk read failed. [ 757.575642][T22215] Dev nbd5: unable to read RDB block 0 [ 757.614832][T22215] nbd5: unable to read partition table [ 757.625268][ T5637] Bluetooth: hci0: command 0x0405 tx timeout [ 757.653684][T22215] ldm_validate_partition_table(): Disk read failed. [ 757.663440][T22215] Dev nbd5: unable to read RDB block 0 [ 757.671532][T22215] nbd5: unable to read partition table [ 757.830689][T22458] __nla_validate_parse: 4 callbacks suppressed [ 757.830711][T22458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4337'. [ 758.639269][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4343'. [ 758.672893][T22479] block nbd6: server does not support multiple connections per device. [ 758.687872][T22479] block nbd6: shutting down sockets [ 758.902241][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 758.945517][T22494] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 758.993734][T22494] team0 (unregistering): Port device team_slave_0 removed [ 759.094538][T22494] team0 (unregistering): Failed to send options change via netlink (err -105) [ 759.114683][T22501] xt_hashlimit: max too large, truncated to 1048576 [ 759.127717][T22494] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 759.175688][T22494] team0 (unregistering): Port device team_slave_1 removed [ 759.457654][T22514] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 759.497920][T22516] net_ratelimit: 888 callbacks suppressed [ 759.497942][T22516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.514636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.760057][T22529] netlink: 'syz.1.4353': attribute type 2 has an invalid length. [ 759.769891][T22529] netlink: 'syz.1.4353': attribute type 2 has an invalid length. [ 759.879538][T22531] netlink: 'syz.3.4352': attribute type 2 has an invalid length. [ 759.890162][T22531] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 759.901007][T22531] netlink: 'syz.3.4352': attribute type 2 has an invalid length. [ 759.912310][T22531] netlink: 'syz.3.4352': attribute type 2 has an invalid length. [ 759.923818][T22531] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 759.934856][T22531] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 759.945466][T22531] netlink: 'syz.3.4352': attribute type 2 has an invalid length. [ 760.034049][T22514] 8021q: adding VLAN 0 to HW filter on device bond9 [ 760.188758][T22519] bond9: (slave veth7): Enslaving as an active interface with a down link [ 760.247895][T22523] bond9: (slave veth9): Enslaving as an active interface with a down link [ 760.257485][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4351'. [ 760.271014][T22524] bond9: entered allmulticast mode [ 760.413748][T22516] macsec1: entered promiscuous mode [ 760.485497][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4351'. [ 760.517332][ T6001] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.564467][ T6001] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.593838][ T6001] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.651739][ T6001] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.702075][ T6001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 760.731150][ T6001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 760.767724][ T6001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 760.811566][ T6001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 760.937907][T22544] hmac(sha224: entered promiscuous mode [ 760.965722][T22552] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4361'. [ 760.996587][T22556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4363'. [ 761.011649][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4361'. [ 761.046045][T22553] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4361'. [ 761.098632][T22556] ip6gre2: entered promiscuous mode [ 761.114914][T22556] ip6gre2: entered allmulticast mode [ 761.138524][T22560] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4363'. [ 761.253970][T22559] syzkaller0: entered promiscuous mode [ 761.274380][T22559] syzkaller0: entered allmulticast mode [ 761.350108][T22559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4362'. [ 761.380932][T22562] netlink: set zone limit has 4 unknown bytes [ 761.501761][T22563] netlink: set zone limit has 4 unknown bytes [ 762.750524][T22594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.185082][T22612] __nla_validate_parse: 1 callbacks suppressed [ 763.185139][T22612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4379'. [ 763.485545][T22618] macsec1: entered promiscuous mode [ 764.058963][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4385'. [ 764.084932][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4385'. [ 764.173738][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4387'. [ 764.273899][T22641] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4388'. [ 764.525044][T22649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4393'. [ 764.644944][T22654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4393'. [ 764.812870][T22658] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4394'. [ 765.055961][T22666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4397'. [ 765.230339][T22675] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4399'. [ 765.603713][T22686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.701194][T22688] vxcan2: entered allmulticast mode [ 765.757808][T22691] validate_nla: 6 callbacks suppressed [ 765.757827][T22691] netlink: 'syz.1.4404': attribute type 1 has an invalid length. [ 765.812351][T22691] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.847443][T22691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.867338][T22693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 765.919865][T22693] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 766.854087][T22739] netlink: 'syz.0.4417': attribute type 2 has an invalid length. [ 766.868904][T22734] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 766.900818][T22734] syzkaller1: linktype set to 776 [ 766.926146][T22739] netlink: 'syz.0.4417': attribute type 2 has an invalid length. [ 767.045438][T22728] macsec1: entered promiscuous mode [ 767.362531][T22752] 8021q: adding VLAN 0 to HW filter on device bond10 [ 767.372948][T22749] xt_l2tp: invalid flags combination: 8 [ 767.427475][T22752] bond10: entered promiscuous mode [ 767.443153][T22752] bond10: entered allmulticast mode [ 767.590716][T22755] netlink: 'syz.2.4424': attribute type 1 has an invalid length. [ 768.916438][T22799] bridge0: port 3(syz_tun) entered blocking state [ 768.937604][T22799] bridge0: port 3(syz_tun) entered disabled state [ 768.946927][T22799] syz_tun: entered allmulticast mode [ 768.955531][T22799] syz_tun: entered promiscuous mode [ 769.034764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.215027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.282917][T22809] __nla_validate_parse: 15 callbacks suppressed [ 769.282938][T22809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4440'. [ 769.517591][T22816] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4444'. [ 769.545424][T22818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4445'. [ 769.598341][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4443'. [ 769.694574][T22818] 8021q: adding VLAN 0 to HW filter on device bond7 [ 769.703372][T22823] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4445'. [ 769.783148][T22823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4445'. [ 769.891151][T22823] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 770.161209][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4449'. [ 770.182505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.518635][T22858] netlink: 'syz.4.4453': attribute type 2 has an invalid length. [ 770.527923][T22858] netlink: 'syz.4.4453': attribute type 11 has an invalid length. [ 770.536336][T22858] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4453'. [ 770.625764][T22861] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4453'. [ 770.645921][T22859] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4454'. [ 771.448779][T22899] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 771.998178][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.071474][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.084007][T22916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.094465][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.122746][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.157168][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.197826][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.218653][T22921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.233672][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.245579][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.256909][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.267227][T22912] netlink: 'syz.0.4470': attribute type 29 has an invalid length. [ 772.290595][T22921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.259141][T23004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 774.280983][T23006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.299107][T23010] __nla_validate_parse: 31 callbacks suppressed [ 774.299127][T23010] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4493'. [ 774.404363][T23004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4493'. [ 774.771731][T23004] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 774.808166][T23029] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4498'. [ 774.831115][T23029] nbd: must specify at least one socket [ 774.948534][T23029] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 775.346979][T23047] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 775.506392][T23049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.515346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.533818][T23049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.660994][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4507'. [ 776.001783][T23071] gre0: entered allmulticast mode [ 776.075637][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4506'. [ 776.089544][T23045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.116343][ T7640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.170844][T23045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.221477][T23071] syzkaller1: entered promiscuous mode [ 776.232745][T23045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.234902][T23071] syzkaller1: entered allmulticast mode [ 776.388613][T23091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4514'. [ 777.337529][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4521'. [ 777.398605][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4521'. [ 777.457580][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4521'. [ 777.482416][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4521'. [ 778.771061][T23168] validate_nla: 17 callbacks suppressed [ 778.771115][T23168] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 778.811234][T23169] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 778.961437][T23167] veth7: entered promiscuous mode [ 779.084089][T23179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.103250][T23179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.192447][T23179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 779.203606][T23179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.247204][T23179] veth1_macvtap: left promiscuous mode [ 779.255723][T23179] veth0_macvtap: left promiscuous mode [ 779.264357][T23179] veth0_macvtap: entered promiscuous mode [ 779.295118][T23179] veth1_macvtap: entered promiscuous mode [ 779.312212][T23179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.328899][T23179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 779.345886][T23179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 779.362551][T23179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 779.398307][T23179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.410967][T23179] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 779.423888][T23179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 779.444927][T23179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 779.456190][T23179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 779.483190][T23179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 779.495761][T23179] 8021q: adding VLAN 0 to HW filter on device bond6 [ 779.524582][T23179] 8021q: adding VLAN 0 to HW filter on device bond7 [ 779.539667][T23179] bond8: left promiscuous mode [ 779.558639][T23179] 8021q: adding VLAN 0 to HW filter on device bond9 [ 779.575037][T23179] bond10: left promiscuous mode [ 779.580766][T23179] 8021q: adding VLAN 0 to HW filter on device bond10 [ 779.589776][T23179] veth0_to_team: entered promiscuous mode [ 779.748350][T23178] syzkaller0: entered promiscuous mode [ 779.767155][T23178] syzkaller0: entered allmulticast mode [ 779.872595][T23192] netlink: 'syz.0.4536': attribute type 3 has an invalid length. [ 779.937043][ T5997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.177051][T23205] netlink: 'syz.0.4539': attribute type 1 has an invalid length. [ 780.221439][T23204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.230146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.233648][T23207] __nla_validate_parse: 65 callbacks suppressed [ 780.233699][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4539'. [ 780.266804][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4539'. [ 780.327057][T23211] netlink: 'syz.2.4538': attribute type 1 has an invalid length. [ 780.504006][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4538'. [ 780.780941][ T5997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.793172][ T5997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.805013][T23196] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 780.816427][T23196] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 780.837542][T23196] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 780.948757][T23205] bond7: entered promiscuous mode [ 780.957503][T23205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 781.035827][T23211] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 781.231161][ T47] bond9: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 781.324214][ T47] bond9: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 781.351520][ T47] bond9: (slave veth7): making interface the new active one [ 781.361698][ T47] veth7: entered allmulticast mode [ 781.379173][ T47] bond9: active interface up! [ 781.394712][ T5997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.415520][T13299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 781.442422][ T9898] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 781.450276][T13299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 781.534635][T23229] tipc: Enabled bearer , priority 10 [ 781.577782][T23238] netlink: 'syz.0.4546': attribute type 4 has an invalid length. [ 781.639670][T23240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4546'. [ 781.782741][ T9898] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 781.832203][T23244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4548'. [ 781.846302][T23244] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4548'. [ 781.879650][T23244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4548'. [ 782.042772][ T9898] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 782.294099][T23262] nbd: nbd3 already in use [ 782.309712][T23262] block nbd3: NBD_DISCONNECT [ 782.327741][T23262] block nbd3: Send disconnect failed -32 [ 782.363210][T23262] block nbd3: Send disconnect failed -32 [ 782.539008][ T1132] vlan1: left allmulticast mode [ 782.558111][ T1132] geneve0: left allmulticast mode [ 782.586464][ T1132] vlan1: left promiscuous mode [ 782.614214][ T1132] geneve0: left promiscuous mode [ 782.643962][ T1132] bridge0: port 2(vlan1) entered disabled state [ 782.709000][ T1132] bridge_slave_0: left allmulticast mode [ 782.715444][ T1132] bridge_slave_0: left promiscuous mode [ 782.725558][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.778773][T23276] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4558'. [ 782.876900][ T1132] tipc: Resetting bearer [ 782.948985][ T1132] tipc: Disabling bearer [ 783.754653][ T1132] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 783.961261][ T1132] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 784.019439][ T1132] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 784.526156][ T1132] bond1 (unregistering): Released all slaves [ 784.547605][ T1132] bond2 (unregistering): Released all slaves [ 784.570330][ T1132] bond3 (unregistering): Released all slaves [ 784.604159][ T1132] bond4 (unregistering): Released all slaves [ 784.630444][ T1132] bond5 (unregistering): Released all slaves [ 784.663464][ T1132] bond6 (unregistering): Released all slaves [ 784.690407][ T1132] bond0 (unregistering): Released all slaves [ 784.720126][ T7640] tipc: Node number set to 3623283483 [ 785.076322][ T1132] : left promiscuous mode [ 785.374101][T23301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4565'. [ 785.500381][T23308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4563'. [ 785.527864][ T1132] tipc: Left network mode [ 785.553657][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.640831][T23312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4565'. [ 785.701429][T23301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 785.714058][T23305] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4565'. [ 785.835035][T23312] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 786.069138][T23320] vlan2: entered allmulticast mode [ 786.084962][T23320] bond0: entered allmulticast mode [ 786.097418][T23320] dummy0: entered allmulticast mode [ 786.340668][ T7636] IPVS: starting estimator thread 0... [ 786.346933][T23326] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 786.442995][T23327] IPVS: using max 26 ests per chain, 62400 per kthread [ 787.957281][T23371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4586'. [ 788.445621][T23384] vxcan0: entered allmulticast mode [ 788.484531][T23385] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 788.700001][T23393] vxcan2: entered allmulticast mode [ 788.717282][T23394] netlink: 'syz.2.4590': attribute type 1 has an invalid length. [ 789.041407][T23402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4594'. [ 789.491786][T23417] ------------[ cut here ]------------ [ 789.500252][T23417] !cfg80211_chandef_valid(chandef) [ 789.500339][T23417] WARNING: net/wireless/chan.c:904 at cfg80211_chandef_dfs_required+0xe0c/0xed0, CPU#1: syz.3.4597/23417 [ 789.521048][T23417] Modules linked in: [ 789.528948][T23417] CPU: 1 UID: 0 PID: 23417 Comm: syz.3.4597 Not tainted syzkaller #0 PREEMPT(full) [ 789.541308][T23417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 789.553047][T23417] RIP: 0010:cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 789.564887][T23417] Code: de e8 c8 f9 c0 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 79 f5 c0 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 3b f4 ff ff e8 65 f5 c0 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 28 f4 ff ff e8 e2 74 a5 00 89 d1 80 e1 [ 789.587319][T23417] RSP: 0018:ffffc9000645f6e0 EFLAGS: 00010283 [ 789.595181][T23417] RAX: ffffffff8b04cefb RBX: ffff8880308098e8 RCX: 0000000000080000 [ 789.605300][T23417] RDX: ffffc9001ce02000 RSI: 00000000000006c6 RDI: 00000000000006c7 [ 789.615402][T23417] RBP: ffffc9000645f870 R08: ffffffff8225a3ef R09: ffff8880b873f5e8 [ 789.625812][T23417] R10: dffffc0000000000 R11: ffffed1007758558 R12: 0000000000000006 [ 789.635870][T23417] R13: dffffc0000000000 R14: ffffc9000645f9e0 R15: ffff888030808018 [ 789.646009][T23417] FS: 00007f21ad38b6c0(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 789.657273][T23417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.665772][T23417] CR2: 00007f21ad38aff8 CR3: 0000000066172000 CR4: 00000000003526f0 [ 789.675893][T23417] Call Trace: [ 789.679717][T23417] [ 789.683707][T23417] ? kvfree_call_rcu+0x9f/0x430 [ 789.689328][T23417] ? ieee80211_free_chanctx+0x2dc/0x390 [ 789.698014][T23417] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 789.706435][T23417] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 789.714888][T23417] _ieee80211_link_use_channel+0x28c/0x860 [ 789.721564][T23417] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 789.730189][T23417] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 789.737993][T23417] ieee80211_set_monitor_channel+0x6fd/0xa10 [ 789.745298][T23417] ? lockdep_hardirqs_on+0x7a/0x110 [ 789.751289][T23417] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 789.758787][T23417] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 789.766299][T23417] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 789.773933][T23417] cfg80211_wext_siwfreq+0x717/0x850 [ 789.780008][T23417] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 789.787327][T23417] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 789.795037][T23417] ioctl_standard_call+0xcb/0x1b0 [ 789.800812][T23417] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 789.808962][T23417] wext_ioctl_dispatch+0xee/0x410 [ 789.815840][T23417] ? __pfx_ioctl_standard_call+0x10/0x10 [ 789.823416][T23417] wext_handle_ioctl+0x10f/0x1d0 [ 789.829153][T23417] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 789.836517][T23417] ? do_futex+0x395/0x420 [ 789.841561][T23417] sock_ioctl+0x159/0x7f0 [ 789.847598][T23417] ? __pfx_sock_ioctl+0x10/0x10 [ 789.853727][T23417] ? __fget_files+0x2a/0x420 [ 789.859065][T23417] ? __fget_files+0x3a0/0x420 [ 789.865051][T23417] ? __fget_files+0x2a/0x420 [ 789.870699][T23417] ? bpf_lsm_file_ioctl+0x9/0x20 [ 789.876887][T23417] ? __pfx_sock_ioctl+0x10/0x10 [ 789.883549][T23417] __se_sys_ioctl+0xfc/0x170 [ 789.888823][T23417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.896590][T23417] do_syscall_64+0x15f/0xf80 [ 789.902397][T23417] ? trace_irq_disable+0x3b/0x140 [ 789.908193][T23417] ? clear_bhb_loop+0x40/0x90 [ 789.914579][T23417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.921321][T23417] RIP: 0033:0x7f21ac59ce59 [ 789.927560][T23417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.949950][T23417] RSP: 002b:00007f21ad38b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.959575][T23417] RAX: ffffffffffffffda RBX: 00007f21ac816090 RCX: 00007f21ac59ce59 [ 789.968607][T23417] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003 [ 789.978210][T23417] RBP: 00007f21ac632d6f R08: 0000000000000000 R09: 0000000000000000 [ 789.988411][T23417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.998018][T23417] R13: 00007f21ac816128 R14: 00007f21ac816090 R15: 00007ffdb89c2ee8 [ 790.008518][T23417] [ 790.012000][T23417] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 790.019342][T23417] CPU: 1 UID: 0 PID: 23417 Comm: syz.3.4597 Not tainted syzkaller #0 PREEMPT(full) [ 790.028763][T23417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.038861][T23417] Call Trace: [ 790.042178][T23417] [ 790.045138][T23417] vpanic+0x56c/0xa60 [ 790.049153][T23417] ? __pfx__printk+0x10/0x10 [ 790.053775][T23417] ? __pfx_vpanic+0x10/0x10 [ 790.058308][T23417] ? irqentry_exit+0x218/0x760 [ 790.063116][T23417] panic+0xc5/0xd0 [ 790.066867][T23417] ? __pfx_panic+0x10/0x10 [ 790.071324][T23417] __warn+0x315/0x4c0 [ 790.075333][T23417] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 790.081511][T23417] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 790.087689][T23417] __report_bug+0x29a/0x540 [ 790.092232][T23417] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 790.098443][T23417] ? __pfx___report_bug+0x10/0x10 [ 790.103504][T23417] ? lockdep_hardirqs_on+0x7a/0x110 [ 790.108781][T23417] ? irqentry_exit+0x218/0x760 [ 790.113605][T23417] ? trace_irq_disable+0x3b/0x140 [ 790.118844][T23417] ? cfg80211_chandef_dfs_required+0xe0e/0xed0 [ 790.125044][T23417] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 790.131225][T23417] report_bug+0x16a/0x220 [ 790.135588][T23417] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 790.141771][T23417] ? cfg80211_chandef_dfs_required+0xe0e/0xed0 [ 790.147952][T23417] handle_bug+0x9c/0x200 [ 790.152215][T23417] exc_invalid_op+0x1a/0x50 [ 790.156741][T23417] asm_exc_invalid_op+0x1a/0x20 [ 790.161607][T23417] RIP: 0010:cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 790.168408][T23417] Code: de e8 c8 f9 c0 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 79 f5 c0 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 3b f4 ff ff e8 65 f5 c0 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 28 f4 ff ff e8 e2 74 a5 00 89 d1 80 e1 [ 790.188046][T23417] RSP: 0018:ffffc9000645f6e0 EFLAGS: 00010283 [ 790.194241][T23417] RAX: ffffffff8b04cefb RBX: ffff8880308098e8 RCX: 0000000000080000 [ 790.202239][T23417] RDX: ffffc9001ce02000 RSI: 00000000000006c6 RDI: 00000000000006c7 [ 790.210236][T23417] RBP: ffffc9000645f870 R08: ffffffff8225a3ef R09: ffff8880b873f5e8 [ 790.218228][T23417] R10: dffffc0000000000 R11: ffffed1007758558 R12: 0000000000000006 [ 790.226230][T23417] R13: dffffc0000000000 R14: ffffc9000645f9e0 R15: ffff888030808018 [ 790.234239][T23417] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 790.239295][T23417] ? cfg80211_chandef_dfs_required+0xe0b/0xed0 [ 790.245524][T23417] ? kvfree_call_rcu+0x9f/0x430 [ 790.250424][T23417] ? ieee80211_free_chanctx+0x2dc/0x390 [ 790.256028][T23417] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 790.261977][T23417] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 790.268538][T23417] _ieee80211_link_use_channel+0x28c/0x860 [ 790.274439][T23417] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 790.281237][T23417] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 790.287608][T23417] ieee80211_set_monitor_channel+0x6fd/0xa10 [ 790.293619][T23417] ? lockdep_hardirqs_on+0x7a/0x110 [ 790.298854][T23417] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 790.305396][T23417] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 790.311941][T23417] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 790.317906][T23417] cfg80211_wext_siwfreq+0x717/0x850 [ 790.323247][T23417] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 790.329105][T23417] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 790.334947][T23417] ioctl_standard_call+0xcb/0x1b0 [ 790.340106][T23417] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 790.345943][T23417] wext_ioctl_dispatch+0xee/0x410 [ 790.351000][T23417] ? __pfx_ioctl_standard_call+0x10/0x10 [ 790.356665][T23417] wext_handle_ioctl+0x10f/0x1d0 [ 790.361639][T23417] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 790.367145][T23417] ? do_futex+0x395/0x420 [ 790.371524][T23417] sock_ioctl+0x159/0x7f0 [ 790.375880][T23417] ? __pfx_sock_ioctl+0x10/0x10 [ 790.380759][T23417] ? __fget_files+0x2a/0x420 [ 790.385373][T23417] ? __fget_files+0x3a0/0x420 [ 790.390074][T23417] ? __fget_files+0x2a/0x420 [ 790.394693][T23417] ? bpf_lsm_file_ioctl+0x9/0x20 [ 790.399665][T23417] ? __pfx_sock_ioctl+0x10/0x10 [ 790.404554][T23417] __se_sys_ioctl+0xfc/0x170 [ 790.409174][T23417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.415262][T23417] do_syscall_64+0x15f/0xf80 [ 790.419907][T23417] ? trace_irq_disable+0x3b/0x140 [ 790.424962][T23417] ? clear_bhb_loop+0x40/0x90 [ 790.429673][T23417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.435598][T23417] RIP: 0033:0x7f21ac59ce59 [ 790.440137][T23417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.459781][T23417] RSP: 002b:00007f21ad38b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.468228][T23417] RAX: ffffffffffffffda RBX: 00007f21ac816090 RCX: 00007f21ac59ce59 [ 790.476255][T23417] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003 [ 790.484249][T23417] RBP: 00007f21ac632d6f R08: 0000000000000000 R09: 0000000000000000 [ 790.492329][T23417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.500326][T23417] R13: 00007f21ac816128 R14: 00007f21ac816090 R15: 00007ffdb89c2ee8 [ 790.508357][T23417] [ 790.512387][T23417] Kernel Offset: disabled [ 790.516724][T23417] Rebooting in 86400 seconds..