last executing test programs: 4.125876085s ago: executing program 0 (id=6231): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}}, 0x0) 3.971739672s ago: executing program 0 (id=6235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in6=@loopback, 0x4c21, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x37f, 0xfffffffffffffffd, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0xb00}}}}}}}}}, 0x4a) 3.649498692s ago: executing program 0 (id=6240): r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x64, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="e1"], 0x4) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x1, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004840) 3.456891112s ago: executing program 0 (id=6241): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100), 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'bridge_slave_1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 3.441595444s ago: executing program 0 (id=6243): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x12}, 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25OPTRT(r4, 0x89e7, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) 3.124941136s ago: executing program 0 (id=6248): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffb, 0x0}, 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000380)={r7, 0x3}, 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10, r0}, 0x94) 2.448772611s ago: executing program 4 (id=6255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000000)) 2.200794053s ago: executing program 4 (id=6258): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r5, 0x809, 0x70bd29, 0x3, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000380)='-', 0x1}], 0x1) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x5) 2.008506799s ago: executing program 4 (id=6261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x24}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x8890) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00030724cf7002f8dbdf2507"], 0x14}}, 0x4008800) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000200)={0x3, {0x30, 0x10000, 0x8, 0x7, 0x9}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.942751433s ago: executing program 4 (id=6263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x20, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r5 = accept$unix(r0, &(0x7f0000000240), &(0x7f0000000180)=0x6e) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x13, 0x0, 0x54, 0x0, 0x3f}, 0x40002003) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2e1ade69cff00cba, &(0x7f0000000300)={0xa, 0x4e24, 0xb, @mcast1}, 0x1a) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x4c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x4, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000040)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r11) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r11, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x88, r12, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000800}, 0x810) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a3000000000befdffff160a01040000000000000000020000022c00038018000380140001007465616d5f736c6176655f3000000000080001400000000008000240000000050900020073797a30000000000900010073797a2000000000140000001100010000000000400000000100000a"], 0xac}}, 0x0) 1.261220576s ago: executing program 1 (id=6268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x15, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in6=@loopback, 0x4c21, 0x0, 0x0, 0x0, 0xa}, {0x8001, 0x37f, 0xfffffffffffffffd, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 1.259565495s ago: executing program 3 (id=6271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) (async) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.104977323s ago: executing program 3 (id=6273): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(r2, &(0x7f0000000340)={@val={0xa, 0x1a}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 1.10452108s ago: executing program 1 (id=6274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000004, {0x1, 0xf0, 0x4}, 0xfd}, 0x18) (async) sendmmsg$inet6(r2, &(0x7f0000000180)=[{{0x0, 0x14, 0x0}}], 0x1, 0x404c004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x8000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) 1.033991594s ago: executing program 1 (id=6276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r3, 0x3a, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)={0x20, 0x1405, 0x400, 0x70bd2d, 0x25dfdbfb, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008064) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000610a6100011f00189500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x1403, 0x1, 0x70bd24, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_emit_ethernet(0x129, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"d20fccb8224cfc2acfee1bf7969ddbebf2fa43f4fe802c24cf65a44a4394f98a818fd7b4dd9a3750e9621acf4257584302bbf78edfc75a14b4de501540eb7b39acd96bdacaa173f30e748c25a07970d05d0786f47cb52ad385a31c09cc012d3b47cb888f781cd63ca4519cb30e3df9ce3160f01cdc18331baa302e933dc5c730405dbc3fe77b5174396a29fd1d7bd199961f6858d09f1dfa6881bd048e4728a4cded173ad44801dbc13894c53ed364bb701b8c4158c16c367ace0e9fb0369c203b91f29294114df30d6246fc387c6b1c9b3af3f9feed65b7976d516e2c2806296428438166a87b4d963b67b6e05d895f6f0be7"}}}}}}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r6, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x3e8, 0x300, 0x70bd29, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040080}, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x0, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xe, 0xffffffff}}) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r7], 0xa) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0xfffe}) preadv(r11, &(0x7f0000000200)=[{&(0x7f0000000040)=""/92, 0x5c}], 0x1, 0x2, 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x34b, 0x0}, 0x8) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000600001f68f93cc47185f3caefaf08247e9ecb59a1817acff8876e95de9c581e4cc0d923b672d89fd8170121e2ed5f0bcdeba05355bc2ce81d279bcbebe5fc7c0a5a347d6a54bb78e3f5aa211e0136901326a787204f78f35229b7185a98f41d265c690ba685bddfd833cea208a3fa26ad2a014d96a869fb2b6e56f5a57fdaafcfbfdca714c93026", @ANYRES32, @ANYBLOB="d200"/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="00000000050000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0xe, &(0x7f0000000340)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @jmp={0x5, 0x1, 0xd, 0x8, 0x9, 0x6, 0xffffffffffffffff}], &(0x7f00000003c0)='GPL\x00', 0xd, 0xa4, &(0x7f0000000400)=""/164, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x12, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r5, 0x3, &(0x7f0000000580)=[r13], &(0x7f00000005c0)=[{0x5, 0x3, 0x1, 0x6}, {0x1, 0x1, 0x5, 0x3}, {0x1, 0x3, 0x8, 0x1}], 0x10, 0x6}, 0x94) 937.387763ms ago: executing program 4 (id=6277): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async, rerun: 64) unshare(0x6020400) (rerun: 64) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000001000), 0xc) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x50) (async) r4 = socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x133, 0x0, 0x0, {{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) (async) recvfrom(r4, &(0x7f0000000000)=""/66, 0x42, 0x1, &(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) 788.190782ms ago: executing program 4 (id=6279): syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/120, 0x78}, 0xad65}], 0x2, 0x40002002, &(0x7f0000000500)={0x0, 0x989680}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 786.169209ms ago: executing program 1 (id=6280): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x6}]}, 0xa) r4 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x6a, 0x4, 0x20000000, 0x4) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x14, 0x6, "bfe03adc55c504336d8907e2bf2b2f00"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r5, &(0x7f0000000280)={@void, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "9ba428", 0xe7, 0x6, 0x1, @local, @empty, {[], {{0x4e21, 0x4e22, r8, r9, 0x0, 0x0, 0x8, 0x20, 0x400, 0x0, 0x800, {[@timestamp={0x8, 0xa, 0x8, 0xd089}]}}, {"28d30d60b7d091ce1059200fa6949720ff367b73519d095638aa47b187ede7023812560413f0c602b4da94f697965013a5fb8623f3aac7a8fdaa92d013195dbfbd4dda3f8e8eaf70d46d13a209e57926198700e37f4b43e945520f4934f0bd9237cd86e34ac946aeda0921ed0714462ae8a8bc7a37453c1934b87621599a8346b81d0761bf7d5bf68617c4703bf283755a6305059b48222a0801c21e20ea5e92dc036a64b94bcff841433f22e70fcf4721fe4d1e7d5f65fd8bab439631a1639c73945df6961b3c"}}}}}}}}, 0x11d) (async) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={r10}) bind$xdp(r11, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) close(r10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800062eddca4111d959234304e739a6524700"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 750.362645ms ago: executing program 3 (id=6281): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01006abd7000ffdbdf251300000008000300", @ANYRES32=r1, @ANYBLOB="0a0006000802110000010000f6ff1100ce060000"], 0x30}, 0x1, 0x0, 0x0, 0x24000012}, 0x4814) 667.701285ms ago: executing program 1 (id=6283): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) pwrite64(r0, &(0x7f0000000000)="f39c5987b749de2437711488faf57d6c6434226898c26d4a959b19c35bc21cdc2625bdbd0cac52f890b979199e77bd", 0x2f, 0x6) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0x9, 0x7f, 0x2}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"9fac3920c3b64b4a69c3693bf7061952", 0x0, 0x0, {0x7af}, {0x3ff, 0x6}, 0x6, [0xffff, 0x8000, 0xd, 0x7f, 0x0, 0x5000, 0x5586023d, 0x7f, 0x32, 0x1bf40000000, 0x8, 0x5, 0x10001, 0x1, 0x2, 0x100]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000280)={{r0}, r1, 0x10, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x10000, 0x6, {0x18, 0x1, 0x9, 0x4, 0x2}, [0x6, 0x8, 0xffffffffffffff00, 0x8000000000000001, 0x9, 0x401, 0x7, 0x0]}}, @name="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"}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000001280), &(0x7f00000012c0)=0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000001300)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000013c0)={'ip6gre0\x00', &(0x7f0000001340)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0xfa, 0x9, 0x4f, @dev={0xfe, 0x80, '\x00', 0x20}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0x2, 0x5}}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001400)={r4, @broadcast, @local}, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000001440)={0x8, [0xc, 0x9, 0x401, 0x2, 0x3, 0x6e, 0x81, 0xb]}, &(0x7f0000001480)=0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000014c0)={0x1f, 0xffffffffffffffff}, 0x6) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001540)=0x14, 0x800) accept$packet(r7, 0x0, &(0x7f0000001580)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8080) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r11, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x20, 0x1406, 0x800, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x800) sendto$packet(r7, &(0x7f0000001840)="f8d70c83b81a3d8a8b24e2ccc49a5e8d0c6c67e75e35c5376f1a6cf7da86d3d0636933311c9ae617a333b19e229bc8a9cb59f20a40c01d4ce9addfc0e18989ff83aadf2967b58fa7906190243920aaaba9620478c86b34991956bb0ffc60cdd35366430cadfb34ff5cc044df4b8974b87c943792d3448c38a3c40fe9b2b8cd139cfbf97be09ee5c38ae7ee6434c8d63030653aad499d0db6860812f9d7c0dd84c914043287d4932d", 0xa8, 0x4004004, &(0x7f0000001900)={0x11, 0xd, r8, 0x1, 0x40}, 0x14) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x13, r12, 0x815eb000) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000001940)) ioctl$PPPIOCUNBRIDGECHAN(r5, 0x7434) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000001980)=@gcm_128={{0x304}, "c871e329c00a897b", "a2180b0464853138dd74fcbcf5885bb2", "cc9f02df", "eb9936a1c5e111bc"}, 0x28) 664.97619ms ago: executing program 3 (id=6284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in6=@loopback, 0x4c21, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x37f, 0xfffffffffffffffd, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00001abbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000000000000000000000ff0200000000000000000000000000014f194e2000109078c205000000000000"], 0x4a) 503.80652ms ago: executing program 2 (id=6285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r4, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000c40)=[0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'erspan0\x00', r6, 0x40, 0x700, 0x7, 0x1, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x10, 0x0, 0x0, 0xa, 0x4}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x30, 0x30, 0x0, 0x0]}}, &(0x7f00000003c0)=""/216, 0x36, 0xd8, 0x0, 0x9e}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xa7, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x15, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@generic={0x9, 0x0, 0x7, 0x5, 0x5}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0xc, 0x9, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000a00)=[{0x1, 0x2, 0x5, 0x8}], 0x10, 0x10001}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r11, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x0, 0x8, 0x4, 0x7, 0x40, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x28, '\x00', r7, @fallback=0xd, r8, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xd, 0x2, 0x7}, 0x10, r9, r10, 0x0, &(0x7f0000000b00)=[0x1, r11], 0x0, 0x10, 0xb878}, 0x94) 352.862607ms ago: executing program 1 (id=6286): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000000)='yeah\x00', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000000400)="3dcc1f663186bdd72a51e16ffd65fb1c55f46f927c0d20e9765d23d8346632ef854a59332e8c0f51035bd2951d0d66da8fcf37fc70effdfa4977a0cd930d35f6899ddd36d9267a1c782a6fe32fc47b97b2d42810839dfde4d07168bff9d4e1d935219022ed37a7a998cfc115968d06d156a81107b48ca66a6bb5e9dc0cdeae7e8649036dab76ebf5d5b5391989368302b004e0748ca08d1160574f6af2f5232d30e3d5f23f803badda6ff27b18dc93bce1074e89d4bfe8cd4d56e3294fcb04bb685ced3f586381b4a689cb2d286065428121bfff5e6b215c038bc54588ef169f443339261dc272337da0a601750756cb02d32d8c0fd1e8698c") getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000500)={0x6, 'nr0\x00', {0x80}, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)={0x14, 0x1, 0x9, 0x401}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000200)=""/9, 0x9, 0x2, &(0x7f00000003c0)={0x11, 0x7, r6, 0x1, 0x9, 0x6, @remote}, 0x14) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r7, 0x400442c9, 0x4d) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) syz_emit_ethernet(0x29d, &(0x7f00000009c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "b700", 0x267, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x2b, 0x0, 0x2, 0x1, 0x0, 0x6, 0x67}, @dstopts={0x0, 0xa, '\x00', [@generic={0x9, 0x53, "6e8caab85ad233d12e3f9cfbfb329bf148b5ac7f46255a5873d35ff63cd3f40e724dba8aa551c284ddfc5ce0d43d18d9f2ad0aafab20dbd7da0d6c927af55e6e599cb4b9712910761f83e44fa618192d069979"}]}, @hopopts={0x0, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x8}, @pad1, @generic={0x31, 0x3f, "ea580766b5474db187ab5c89cd07c30a4ae5a1a19b60b5cb3adb917e773db5ddfdfd41a90b5b58e5d76fe6f2f3952f10c18ad63b4ca5b96dfa9035c950b248"}]}, @fragment={0x2f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x64}, @fragment={0x1d, 0x0, 0x7f, 0x1, 0x0, 0x8, 0x65}, @dstopts={0x4, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xf8}, @jumbo={0xc2, 0x4, 0x4}]}, @fragment={0x0, 0x0, 0xb8, 0x1, 0x0, 0x2, 0x68}, @hopopts={0x2f, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @empty}, @generic={0x80, 0x4c, "1354383656db6723235798052a0682b346b4788bbfade39d7898e845e46a771c5befc238db97d48ceaefe54e45176794dc20e64955e5c088bb52b8c8d8ccc87ca2e408a2775fe26ab0459c46"}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, "fda389", 0x3, "050205"}, "3d44d7cc203e7eed77ba577acdcc8f76dc244667c273423dce54cd7d5667559deb562f530687c4b0573bb4731690539cb0957c838c9aadece6b26352c6819fe33cfd6e50b22178048e09bdc925c2ba24e280bd68b3107f06e51ffa95179268e110908344434f47a86a5067ae7feae133df40f3ee77c4c711795169dae3161bf22e14826164b95fdf166383adbabf95134b42353a58477af69dd79bd3289c8a9ea1b7c46b1f44cacc93064358ae08d7154f7ff035f3ee20d7e122d70d903b2c56aa5b0bf996e44c871669f429a63cba9936bdf751986daec92e9ecd5a5ff7c6bd5e29b6f4ca05120a9a2e8f5f7a3d3e"}}}}}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000380)={@empty}, 0x14) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000080)={@private2, @dev={0xfe, 0x80, '\x00', 0x27}, @rand_addr=' \x01\x00', 0x1, 0x3, 0x5, 0x500, 0x9, 0x0, r4}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff1}, {0x1, 0xfff1}, {0x8}}, ["", "", "", ""]}, 0x24}}, 0x0) 351.651868ms ago: executing program 2 (id=6287): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104000000000000002800000000540201"], 0x268}, 0x1, 0x0, 0x0, 0x8064}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43) 315.013715ms ago: executing program 2 (id=6288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@getsa={0x19c, 0x12, 0x100, 0x70bd29, 0x25dfdbfd, {@in6=@remote, 0x4d6, 0xa, 0x5f}, [@encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e21, @in6=@private2}}, @policy={0xac, 0x7, {{@in6=@private1, @in6=@mcast2, 0x4e20, 0x0, 0x4e20, 0x6, 0x2, 0xb0, 0x0, 0x1d, 0x0, r2}, {0x6, 0xffffffffce8815e2, 0x6, 0x6, 0x6, 0x3, 0x47, 0x8}, {0xf6f, 0xf, 0xc, 0x8}, 0x6, 0x6e6bb4, 0x2, 0x0, 0x0, 0x1}}, @policy={0xac, 0x7, {{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0xff10, 0x4e23, 0xff, 0x2, 0x80, 0x20, 0x3b, r3, r4}, {0xfff, 0x3, 0x3, 0xffffffffffffffff, 0x7, 0x4, 0x7, 0x1}, {0xd1, 0xf77, 0x5, 0x1}, 0x4, 0x6e6bb0, 0x2, 0x1, 0x2}}]}, 0x19c}}, 0xc052) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r6, 0x104, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(r7, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) 251.125601ms ago: executing program 2 (id=6289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000027c0000040042800c0001"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="8da8a5e99f3aa647a61e9e2f2cc0c19fe500792f61b1e54cfd", @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x425, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES16=r7, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30", @ANYRESDEC=0x0], 0x34}}, 0x4004080) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES16=r7, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30", @ANYRESDEC=0x0], 0x34}}, 0x4004080) ioctl$FS_IOC_RESVSP(r5, 0x800442d4, 0x0) (async) ioctl$FS_IOC_RESVSP(r5, 0x800442d4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="22bd06bc", @ANYRES16=r8, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="14005a8010000180040001000500020008000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="22bd06bc", @ANYRES16=r8, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="14005a8010000180040001000500020008000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x7800, 0x10, 0x2, 0x10, {{0x3c, 0x4, 0x1, 0x9, 0xf0, 0x64, 0x0, 0xd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop, @timestamp_addr={0x44, 0x34, 0x84, 0x1, 0x0, [{@empty, 0x744}, {@local, 0x8}, {@broadcast, 0x8eb}, {@rand_addr=0x64010100, 0x742}, {@loopback, 0x9}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x87, [@dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0xed, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4281}, {@multicast2, 0x80000000}, {@remote, 0x4}]}, @lsrr={0x83, 0xf, 0x53, [@local, @broadcast, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0x9, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}}]}, @timestamp_prespec={0x44, 0x54, 0xc6, 0x3, 0x4, [{@private=0xa010101}, {@rand_addr=0x64010100, 0xfffffffa}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400000}, {@private=0xa010101, 0x2}, {@private=0xa010100, 0x5}, {@broadcast, 0xfffffffd}, {@broadcast, 0x4}, {@loopback, 0x3}, {@multicast1, 0x3}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x7800, 0x10, 0x2, 0x10, {{0x3c, 0x4, 0x1, 0x9, 0xf0, 0x64, 0x0, 0xd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop, @timestamp_addr={0x44, 0x34, 0x84, 0x1, 0x0, [{@empty, 0x744}, {@local, 0x8}, {@broadcast, 0x8eb}, {@rand_addr=0x64010100, 0x742}, {@loopback, 0x9}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x87, [@dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0xed, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4281}, {@multicast2, 0x80000000}, {@remote, 0x4}]}, @lsrr={0x83, 0xf, 0x53, [@local, @broadcast, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0x9, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}}]}, @timestamp_prespec={0x44, 0x54, 0xc6, 0x3, 0x4, [{@private=0xa010101}, {@rand_addr=0x64010100, 0xfffffffa}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400000}, {@private=0xa010101, 0x2}, {@private=0xa010100, 0x5}, {@broadcast, 0xfffffffd}, {@broadcast, 0x4}, {@loopback, 0x3}, {@multicast1, 0x3}]}]}}}}}) sendmsg$nl_route(r9, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a80000004a00100029bd7000fcdbdf250a008000", @ANYRES32=r10, @ANYBLOB="0600000014000100fe800000000000000000000000000041140001000000000000000000000000000000000014000100000000000000000000000014000100fe8000000000000000000000000000aa14000100fe88000000000000000000000000010114000100fe8000000000000000000000000000bb14000100fe800000000000000000000000000023"], 0xa8}, 0x1, 0x0, 0x0, 0x24050000}, 0x4040011) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x4}, 0x4) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000180)) (async) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r11, 0x0, 0x6, &(0x7f0000000000)=0x7fff, 0x4) sendto$inet(r11, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async) sendto$inet(r11, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000740)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000780)={0xfffe, 0x9, 0xb0e3, 0x4, r12}, 0x10) recvmmsg(r11, &(0x7f000000e280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10064, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@loopback, @multicast1}, &(0x7f00000002c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) 144.9296ms ago: executing program 3 (id=6290): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, 0x0, 0x0) 142.22971ms ago: executing program 2 (id=6291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x8a6, 0x10}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0xfff, 0x2, 0x0, 0x40628, r3, 0x3, '\x00', r4, r5, 0x2, 0x5}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800003}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r6], 0x38}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x8060) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x8a6, 0x10}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0xfff, 0x2, 0x0, 0x40628, r3, 0x3, '\x00', r4, r5, 0x2, 0x5}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800003}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r6], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x8060) (async) 28.643027ms ago: executing program 2 (id=6292): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000580)=0x4, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r2, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff583a}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) (async) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff583a}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x40080) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1300000042000106"], 0x1c}], 0x1}, 0x0) 0s ago: executing program 3 (id=6293): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffff1, &(0x7f0000000680)={&(0x7f0000000280)={0x1, 0x600, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0xfc, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x40) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCNRDECOBS(r2, 0x89e2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x7800, 0x1, 0x1000, 0x8001, {{0x1b, 0x4, 0x3, 0x1f, 0x6c, 0x65, 0x0, 0xe7, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @remote, {[@generic={0x88, 0x6, "1e215dc9"}, @end, @timestamp_addr={0x44, 0x24, 0x41, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x1}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x3ff}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x7a, [@multicast2, @loopback, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010102]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0xf4, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc4, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0xfffffffffffffeb8}, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x11, 0x0, 0x0, 0xfffffff8}, {0x0, 0x18, 0x0, 0x0, 0x7}, {0x0, 0x9, 0x0, 0x0, 0x200}, {0x0, 0x17, 0x0, 0x0, 0x1}, {0x0, 0x2}]}}, @AF_MPLS={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x19, 0x0, 0x0, 0x8}]}}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb3}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0xfc}}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x9}, {0x8, 0xd, 0x0, 0x0, 0x69}, {0x8, 0x1f, 0x0, 0x0, 0x4}, {0x8, 0x1a, 0x0, 0x0, 0x4}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xf4}}, 0x805) kernel console output (not intermixed with test programs): 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.258106][T22113] RSP: 002b:00007f28d3108038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 449.258126][T22113] RAX: ffffffffffffffda RBX: 00007f28d23e5fa0 RCX: 00007f28d218efc9 [ 449.258140][T22113] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 449.258152][T22113] RBP: 00007f28d3108090 R08: 0000000000000004 R09: 0000000000000000 [ 449.258163][T22113] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.258174][T22113] R13: 00007f28d23e6038 R14: 00007f28d23e5fa0 R15: 00007ffdd90e5778 [ 449.258206][T22113] [ 449.635340][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4976'. [ 451.443900][T22128] FAULT_INJECTION: forcing a failure. [ 451.443900][T22128] name failslab, interval 1, probability 0, space 0, times 0 [ 451.457052][T22128] CPU: 0 UID: 0 PID: 22128 Comm: syz.3.4976 Not tainted syzkaller #0 PREEMPT(full) [ 451.457076][T22128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.457088][T22128] Call Trace: [ 451.457095][T22128] [ 451.457103][T22128] dump_stack_lvl+0x189/0x250 [ 451.457132][T22128] ? __pfx____ratelimit+0x10/0x10 [ 451.457151][T22128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.457170][T22128] ? __pfx__printk+0x10/0x10 [ 451.457189][T22128] ? __pfx___might_resched+0x10/0x10 [ 451.457204][T22128] ? fs_reclaim_acquire+0x7d/0x100 [ 451.457229][T22128] should_fail_ex+0x414/0x560 [ 451.457253][T22128] should_failslab+0xa8/0x100 [ 451.457269][T22128] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 451.457289][T22128] ? __kernfs_new_node+0x9c/0x7e0 [ 451.457312][T22128] kstrdup+0x42/0x100 [ 451.457328][T22128] __kernfs_new_node+0x9c/0x7e0 [ 451.457353][T22128] ? __pfx___kernfs_new_node+0x10/0x10 [ 451.457370][T22128] ? kernfs_root+0x1c/0x230 [ 451.457398][T22128] ? kernfs_root+0x1c/0x230 [ 451.457414][T22128] ? kernfs_root+0x1c/0x230 [ 451.457434][T22128] kernfs_new_node+0x102/0x210 [ 451.457456][T22128] kernfs_create_link+0xa7/0x200 [ 451.457473][T22128] sysfs_do_create_link_sd+0x83/0x110 [ 451.457492][T22128] device_add_class_symlinks+0x1cf/0x240 [ 451.457511][T22128] device_add+0x475/0xb50 [ 451.457525][T22128] ? device_initialize+0x24b/0x440 [ 451.457542][T22128] netdev_register_kobject+0x178/0x310 [ 451.457563][T22128] register_netdevice+0x126c/0x1ae0 [ 451.457592][T22128] ? __pfx_register_netdevice+0x10/0x10 [ 451.457610][T22128] ? __asan_memset+0x22/0x50 [ 451.457628][T22128] ? dev_addr_mod+0x2ce/0x3d0 [ 451.457646][T22128] team_newlink+0x114/0x160 [ 451.457666][T22128] ? __pfx_team_newlink+0x10/0x10 [ 451.457686][T22128] ? rtnl_create_link+0x9d5/0xd10 [ 451.457704][T22128] ? __pfx_team_newlink+0x10/0x10 [ 451.457723][T22128] rtnl_newlink_create+0x310/0xb00 [ 451.457749][T22128] ? __mutex_lock+0x5bb/0x1350 [ 451.457771][T22128] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 451.457795][T22128] ? __pfx___mutex_lock+0x10/0x10 [ 451.457820][T22128] ? ns_capable+0x8a/0xf0 [ 451.457839][T22128] rtnl_newlink+0x16e4/0x1c80 [ 451.457870][T22128] ? __pfx_rtnl_newlink+0x10/0x10 [ 451.457897][T22128] ? __lock_acquire+0xab9/0xd20 [ 451.457917][T22128] ? __lock_acquire+0xab9/0xd20 [ 451.457940][T22128] ? __lock_acquire+0xab9/0xd20 [ 451.457969][T22128] ? is_bpf_text_address+0x26/0x2b0 [ 451.457989][T22128] ? is_bpf_text_address+0x292/0x2b0 [ 451.458004][T22128] ? is_bpf_text_address+0x26/0x2b0 [ 451.458025][T22128] ? __lock_acquire+0xab9/0xd20 [ 451.458058][T22128] ? __pfx_rtnl_newlink+0x10/0x10 [ 451.458076][T22128] rtnetlink_rcv_msg+0x7cf/0xb70 [ 451.458094][T22128] ? __lock_acquire+0xab9/0xd20 [ 451.458109][T22128] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 451.458126][T22128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.458159][T22128] netlink_rcv_skb+0x208/0x470 [ 451.458178][T22128] ? __lock_acquire+0xab9/0xd20 [ 451.458191][T22128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.458212][T22128] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.458240][T22128] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.458266][T22128] netlink_unicast+0x82f/0x9e0 [ 451.458292][T22128] ? __pfx_netlink_unicast+0x10/0x10 [ 451.458311][T22128] ? netlink_sendmsg+0x642/0xb30 [ 451.458330][T22128] ? skb_put+0x11b/0x210 [ 451.458352][T22128] netlink_sendmsg+0x805/0xb30 [ 451.458384][T22128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.458407][T22128] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.458429][T22128] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.458443][T22128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.458464][T22128] __sock_sendmsg+0x21c/0x270 [ 451.458484][T22128] ____sys_sendmsg+0x52d/0x830 [ 451.458502][T22128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.458530][T22128] ? import_iovec+0x74/0xa0 [ 451.458549][T22128] ___sys_sendmsg+0x21f/0x2a0 [ 451.458565][T22128] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.458607][T22128] ? __fget_files+0x2a/0x420 [ 451.458620][T22128] ? __fget_files+0x3a0/0x420 [ 451.458642][T22128] __sys_sendmmsg+0x227/0x430 [ 451.458661][T22128] ? __pfx___sys_sendmmsg+0x10/0x10 [ 451.458682][T22128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.458713][T22128] ? ksys_write+0x22a/0x250 [ 451.458735][T22128] ? __pfx_ksys_write+0x10/0x10 [ 451.458758][T22128] __x64_sys_sendmmsg+0xa0/0xc0 [ 451.458773][T22128] do_syscall_64+0xfa/0xfa0 [ 451.458790][T22128] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.458806][T22128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.458820][T22128] ? clear_bhb_loop+0x60/0xb0 [ 451.458837][T22128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.458851][T22128] RIP: 0033:0x7f28d218efc9 [ 451.458865][T22128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.458879][T22128] RSP: 002b:00007f28d3108038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 451.458895][T22128] RAX: ffffffffffffffda RBX: 00007f28d23e5fa0 RCX: 00007f28d218efc9 [ 451.458905][T22128] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 451.458916][T22128] RBP: 00007f28d3108090 R08: 0000000000000000 R09: 0000000000000000 [ 451.458924][T22128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.458932][T22128] R13: 00007f28d23e6038 R14: 00007f28d23e5fa0 R15: 00007ffdd90e5778 [ 451.458957][T22128] [ 452.059686][T22150] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4981'. [ 452.180373][T22155] erspan0: entered allmulticast mode [ 452.239397][T22160] FAULT_INJECTION: forcing a failure. [ 452.239397][T22160] name failslab, interval 1, probability 0, space 0, times 0 [ 452.274673][T22160] CPU: 1 UID: 0 PID: 22160 Comm: syz.4.4985 Not tainted syzkaller #0 PREEMPT(full) [ 452.274699][T22160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.274710][T22160] Call Trace: [ 452.274718][T22160] [ 452.274727][T22160] dump_stack_lvl+0x189/0x250 [ 452.274756][T22160] ? __pfx____ratelimit+0x10/0x10 [ 452.274777][T22160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.274801][T22160] ? __pfx__printk+0x10/0x10 [ 452.274823][T22160] ? __pfx___might_resched+0x10/0x10 [ 452.274843][T22160] ? fs_reclaim_acquire+0x7d/0x100 [ 452.274874][T22160] should_fail_ex+0x414/0x560 [ 452.274905][T22160] should_failslab+0xa8/0x100 [ 452.274925][T22160] __kmalloc_cache_noprof+0x6f/0x6f0 [ 452.274949][T22160] ? __asan_memcpy+0x40/0x70 [ 452.274970][T22160] ? nft_trans_elem_alloc+0x55/0x320 [ 452.274995][T22160] ? nft_set_elem_expr_setup+0xab/0x830 [ 452.275023][T22160] nft_trans_elem_alloc+0x55/0x320 [ 452.275046][T22160] ? nf_tables_newsetelem+0x24bc/0x4330 [ 452.275068][T22160] nf_tables_newsetelem+0x24db/0x4330 [ 452.275137][T22160] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 452.275157][T22160] ? __lock_acquire+0xab9/0xd20 [ 452.275199][T22160] ? nla_validate_array+0xfc/0x260 [ 452.275250][T22160] ? __pfx___nla_validate_parse+0x10/0x10 [ 452.275274][T22160] ? __lock_acquire+0xab9/0xd20 [ 452.275303][T22160] ? nfnl_pernet+0x23/0x240 [ 452.275336][T22160] ? __nla_parse+0x40/0x60 [ 452.275359][T22160] nfnetlink_rcv+0x11d9/0x2590 [ 452.275418][T22160] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 452.275459][T22160] ? ref_tracker_free+0x63a/0x7d0 [ 452.275506][T22160] ? __netlink_deliver_tap+0x807/0x850 [ 452.275531][T22160] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.275575][T22160] netlink_unicast+0x82f/0x9e0 [ 452.275607][T22160] ? __pfx_netlink_unicast+0x10/0x10 [ 452.275632][T22160] ? netlink_sendmsg+0x642/0xb30 [ 452.275656][T22160] ? skb_put+0x11b/0x210 [ 452.275686][T22160] netlink_sendmsg+0x805/0xb30 [ 452.275721][T22160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.275750][T22160] ? aa_sock_msg_perm+0xf1/0x1d0 [ 452.275776][T22160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.275794][T22160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.275819][T22160] __sock_sendmsg+0x21c/0x270 [ 452.275845][T22160] ____sys_sendmsg+0x505/0x830 [ 452.275870][T22160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.275897][T22160] ? import_iovec+0x74/0xa0 [ 452.275922][T22160] ___sys_sendmsg+0x21f/0x2a0 [ 452.275942][T22160] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.275997][T22160] ? __fget_files+0x2a/0x420 [ 452.276015][T22160] ? __fget_files+0x3a0/0x420 [ 452.276044][T22160] __x64_sys_sendmsg+0x19b/0x260 [ 452.276065][T22160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.276094][T22160] ? __pfx_ksys_write+0x10/0x10 [ 452.276128][T22160] ? do_syscall_64+0xbe/0xfa0 [ 452.276153][T22160] do_syscall_64+0xfa/0xfa0 [ 452.276173][T22160] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.276194][T22160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.276212][T22160] ? clear_bhb_loop+0x60/0xb0 [ 452.276235][T22160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.276253][T22160] RIP: 0033:0x7f20fab8efc9 [ 452.276270][T22160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.276286][T22160] RSP: 002b:00007f20fba2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.276306][T22160] RAX: ffffffffffffffda RBX: 00007f20fade5fa0 RCX: 00007f20fab8efc9 [ 452.276320][T22160] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 452.276332][T22160] RBP: 00007f20fba2f090 R08: 0000000000000000 R09: 0000000000000000 [ 452.276344][T22160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.276355][T22160] R13: 00007f20fade6038 R14: 00007f20fade5fa0 R15: 00007ffcd0600b38 [ 452.276388][T22160] [ 452.339244][T22167] __nla_validate_parse: 2 callbacks suppressed [ 452.339261][T22167] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4989'. [ 452.431931][T22166] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 452.436642][T22167] 1{X: renamed from 30{X (while UP) [ 452.792186][T22167] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 452.912766][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4994'. [ 452.923751][T22190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4994'. [ 452.935720][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4994'. [ 453.214641][T22204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4998'. [ 453.294353][T22213] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4999'. [ 453.355749][T22217] FAULT_INJECTION: forcing a failure. [ 453.355749][T22217] name failslab, interval 1, probability 0, space 0, times 0 [ 453.413157][T22217] CPU: 1 UID: 0 PID: 22217 Comm: syz.1.5002 Not tainted syzkaller #0 PREEMPT(full) [ 453.413181][T22217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.413193][T22217] Call Trace: [ 453.413200][T22217] [ 453.413209][T22217] dump_stack_lvl+0x189/0x250 [ 453.413238][T22217] ? __pfx____ratelimit+0x10/0x10 [ 453.413260][T22217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.413283][T22217] ? __pfx__printk+0x10/0x10 [ 453.413307][T22217] ? __pfx___might_resched+0x10/0x10 [ 453.413324][T22217] ? fs_reclaim_acquire+0x7d/0x100 [ 453.413353][T22217] should_fail_ex+0x414/0x560 [ 453.413383][T22217] should_failslab+0xa8/0x100 [ 453.413403][T22217] __kvmalloc_node_noprof+0x158/0x910 [ 453.413430][T22217] ? nf_tables_newset+0x1330/0x2540 [ 453.413451][T22217] ? nft_set_lookup+0x128/0x150 [ 453.413476][T22217] ? nft_rhash_init+0x1f/0x3a0 [ 453.413503][T22217] nf_tables_newset+0x1330/0x2540 [ 453.413538][T22217] ? __pfx_nf_tables_newset+0x10/0x10 [ 453.413580][T22217] ? __nla_parse+0x40/0x60 [ 453.413605][T22217] nfnetlink_rcv+0x11d9/0x2590 [ 453.413662][T22217] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 453.413737][T22217] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.413781][T22217] netlink_unicast+0x82f/0x9e0 [ 453.413814][T22217] ? __pfx_netlink_unicast+0x10/0x10 [ 453.413848][T22217] ? netlink_sendmsg+0x642/0xb30 [ 453.413870][T22217] ? skb_put+0x11b/0x210 [ 453.413899][T22217] netlink_sendmsg+0x805/0xb30 [ 453.413934][T22217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.413963][T22217] ? aa_sock_msg_perm+0xf1/0x1d0 [ 453.413997][T22217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.414015][T22217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.414042][T22217] __sock_sendmsg+0x21c/0x270 [ 453.414068][T22217] ____sys_sendmsg+0x505/0x830 [ 453.414092][T22217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.414122][T22217] ? import_iovec+0x74/0xa0 [ 453.414147][T22217] ___sys_sendmsg+0x21f/0x2a0 [ 453.414168][T22217] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.414221][T22217] ? __fget_files+0x2a/0x420 [ 453.414237][T22217] ? __fget_files+0x3a0/0x420 [ 453.414265][T22217] __x64_sys_sendmsg+0x19b/0x260 [ 453.414287][T22217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.414314][T22217] ? __pfx_ksys_write+0x10/0x10 [ 453.414343][T22217] ? do_syscall_64+0xbe/0xfa0 [ 453.414368][T22217] do_syscall_64+0xfa/0xfa0 [ 453.414388][T22217] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.414408][T22217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.414425][T22217] ? clear_bhb_loop+0x60/0xb0 [ 453.414447][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.414464][T22217] RIP: 0033:0x7f2bac18efc9 [ 453.414481][T22217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.414497][T22217] RSP: 002b:00007f2baa3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.414522][T22217] RAX: ffffffffffffffda RBX: 00007f2bac3e5fa0 RCX: 00007f2bac18efc9 [ 453.414535][T22217] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 453.414547][T22217] RBP: 00007f2baa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 453.414559][T22217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.414570][T22217] R13: 00007f2bac3e6038 R14: 00007f2bac3e5fa0 R15: 00007fff6a55a1d8 [ 453.414604][T22217] [ 453.853811][T22229] Cannot find set identified by id 3 to match [ 453.866973][T22232] Cannot find set identified by id 3 to match [ 454.289479][T22257] FAULT_INJECTION: forcing a failure. [ 454.289479][T22257] name failslab, interval 1, probability 0, space 0, times 0 [ 454.304230][T22257] CPU: 1 UID: 0 PID: 22257 Comm: syz.3.5016 Not tainted syzkaller #0 PREEMPT(full) [ 454.304255][T22257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 454.304266][T22257] Call Trace: [ 454.304274][T22257] [ 454.304282][T22257] dump_stack_lvl+0x189/0x250 [ 454.304310][T22257] ? __pfx____ratelimit+0x10/0x10 [ 454.304332][T22257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.304355][T22257] ? __pfx__printk+0x10/0x10 [ 454.304381][T22257] ? __pfx___might_resched+0x10/0x10 [ 454.304400][T22257] ? fs_reclaim_acquire+0x7d/0x100 [ 454.304431][T22257] should_fail_ex+0x414/0x560 [ 454.304461][T22257] should_failslab+0xa8/0x100 [ 454.304481][T22257] __kmalloc_noprof+0xcb/0x7f0 [ 454.304505][T22257] ? nla_strdup+0x9d/0x140 [ 454.304522][T22257] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 454.304552][T22257] nla_strdup+0x9d/0x140 [ 454.304569][T22257] ? nft_rhash_init+0x1f/0x3a0 [ 454.304596][T22257] nf_tables_newset+0x136f/0x2540 [ 454.304630][T22257] ? __pfx_nf_tables_newset+0x10/0x10 [ 454.304673][T22257] ? __nla_parse+0x40/0x60 [ 454.304696][T22257] nfnetlink_rcv+0x11d9/0x2590 [ 454.304755][T22257] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 454.304829][T22257] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.304872][T22257] netlink_unicast+0x82f/0x9e0 [ 454.304904][T22257] ? __pfx_netlink_unicast+0x10/0x10 [ 454.304929][T22257] ? netlink_sendmsg+0x642/0xb30 [ 454.304952][T22257] ? skb_put+0x11b/0x210 [ 454.304981][T22257] netlink_sendmsg+0x805/0xb30 [ 454.305015][T22257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.305043][T22257] ? aa_sock_msg_perm+0xf1/0x1d0 [ 454.305070][T22257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.305087][T22257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.305113][T22257] __sock_sendmsg+0x21c/0x270 [ 454.305139][T22257] ____sys_sendmsg+0x505/0x830 [ 454.305169][T22257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.305198][T22257] ? import_iovec+0x74/0xa0 [ 454.305224][T22257] ___sys_sendmsg+0x21f/0x2a0 [ 454.305245][T22257] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.305303][T22257] ? __fget_files+0x2a/0x420 [ 454.305319][T22257] ? __fget_files+0x3a0/0x420 [ 454.305348][T22257] __x64_sys_sendmsg+0x19b/0x260 [ 454.305370][T22257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.305400][T22257] ? __pfx_ksys_write+0x10/0x10 [ 454.305428][T22257] ? do_syscall_64+0xbe/0xfa0 [ 454.305453][T22257] do_syscall_64+0xfa/0xfa0 [ 454.305474][T22257] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.305495][T22257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.305514][T22257] ? clear_bhb_loop+0x60/0xb0 [ 454.305536][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.305554][T22257] RIP: 0033:0x7f28d218efc9 [ 454.305571][T22257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.305587][T22257] RSP: 002b:00007f28d3108038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.305607][T22257] RAX: ffffffffffffffda RBX: 00007f28d23e5fa0 RCX: 00007f28d218efc9 [ 454.305621][T22257] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 454.305633][T22257] RBP: 00007f28d3108090 R08: 0000000000000000 R09: 0000000000000000 [ 454.305646][T22257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.305657][T22257] R13: 00007f28d23e6038 R14: 00007f28d23e5fa0 R15: 00007ffdd90e5778 [ 454.305690][T22257] [ 454.695995][T22263] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5020'. [ 454.732209][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5017'. [ 454.741605][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5017'. [ 454.765917][T22264] netlink: 'syz.4.5017': attribute type 14 has an invalid length. [ 454.780194][T22264] netlink: 'syz.4.5017': attribute type 13 has an invalid length. [ 454.782332][T22270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5022'. [ 455.120763][T22290] sctp: [Deprecated]: syz.3.5028 (pid 22290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.120763][T22290] Use struct sctp_sack_info instead [ 455.181523][T22290] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 455.240811][T22296] FAULT_INJECTION: forcing a failure. [ 455.240811][T22296] name failslab, interval 1, probability 0, space 0, times 0 [ 455.253949][T22296] CPU: 0 UID: 0 PID: 22296 Comm: syz.1.5031 Not tainted syzkaller #0 PREEMPT(full) [ 455.253973][T22296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.253985][T22296] Call Trace: [ 455.253992][T22296] [ 455.254001][T22296] dump_stack_lvl+0x189/0x250 [ 455.254029][T22296] ? __pfx____ratelimit+0x10/0x10 [ 455.254049][T22296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.254071][T22296] ? __pfx__printk+0x10/0x10 [ 455.254094][T22296] ? __pfx___might_resched+0x10/0x10 [ 455.254118][T22296] should_fail_ex+0x414/0x560 [ 455.254149][T22296] should_failslab+0xa8/0x100 [ 455.254170][T22296] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 455.254195][T22296] ? kasprintf+0xd4/0x120 [ 455.254221][T22296] kvasprintf+0xdc/0x190 [ 455.254240][T22296] ? nf_tables_newset+0x136f/0x2540 [ 455.254258][T22296] ? nfnetlink_rcv+0x11d9/0x2590 [ 455.254278][T22296] ? netlink_unicast+0x82f/0x9e0 [ 455.254302][T22296] ? __pfx_kvasprintf+0x10/0x10 [ 455.254322][T22296] ? __x64_sys_sendmsg+0x19b/0x260 [ 455.254354][T22296] kasprintf+0xd4/0x120 [ 455.254381][T22296] ? __pfx_kasprintf+0x10/0x10 [ 455.254418][T22296] nf_tables_set_alloc_name+0x109/0x720 [ 455.254446][T22296] ? rcu_is_watching+0x15/0xb0 [ 455.254467][T22296] ? trace_kmalloc+0x1f/0xd0 [ 455.254490][T22296] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 455.254512][T22296] ? nla_strdup+0xb8/0x140 [ 455.254539][T22296] nf_tables_newset+0x1390/0x2540 [ 455.254569][T22296] ? __pfx_nf_tables_newset+0x10/0x10 [ 455.254606][T22296] ? __nla_parse+0x40/0x60 [ 455.254627][T22296] nfnetlink_rcv+0x11d9/0x2590 [ 455.254681][T22296] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 455.254752][T22296] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.254791][T22296] netlink_unicast+0x82f/0x9e0 [ 455.254822][T22296] ? __pfx_netlink_unicast+0x10/0x10 [ 455.254855][T22296] ? netlink_sendmsg+0x642/0xb30 [ 455.254878][T22296] ? skb_put+0x11b/0x210 [ 455.254912][T22296] netlink_sendmsg+0x805/0xb30 [ 455.254946][T22296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.254975][T22296] ? aa_sock_msg_perm+0xf1/0x1d0 [ 455.255001][T22296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.255019][T22296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.255046][T22296] __sock_sendmsg+0x21c/0x270 [ 455.255072][T22296] ____sys_sendmsg+0x505/0x830 [ 455.255097][T22296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.255125][T22296] ? import_iovec+0x74/0xa0 [ 455.255151][T22296] ___sys_sendmsg+0x21f/0x2a0 [ 455.255172][T22296] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.255229][T22296] ? __fget_files+0x2a/0x420 [ 455.255246][T22296] ? __fget_files+0x3a0/0x420 [ 455.255275][T22296] __x64_sys_sendmsg+0x19b/0x260 [ 455.255297][T22296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.255326][T22296] ? __pfx_ksys_write+0x10/0x10 [ 455.255354][T22296] ? do_syscall_64+0xbe/0xfa0 [ 455.255380][T22296] do_syscall_64+0xfa/0xfa0 [ 455.255400][T22296] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.255421][T22296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.255440][T22296] ? clear_bhb_loop+0x60/0xb0 [ 455.255463][T22296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.255481][T22296] RIP: 0033:0x7f2bac18efc9 [ 455.255498][T22296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.255513][T22296] RSP: 002b:00007f2baa3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.255534][T22296] RAX: ffffffffffffffda RBX: 00007f2bac3e5fa0 RCX: 00007f2bac18efc9 [ 455.255548][T22296] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 455.255560][T22296] RBP: 00007f2baa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.255571][T22296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.255582][T22296] R13: 00007f2bac3e6038 R14: 00007f2bac3e5fa0 R15: 00007fff6a55a1d8 [ 455.255616][T22296] [ 455.791999][T22300] netlink: 'syz.3.5032': attribute type 1 has an invalid length. [ 455.913554][T22315] tipc: Enabling of bearer rejected, failed to enable media [ 455.951713][T22315] netlink: 'syz.1.5037': attribute type 1 has an invalid length. [ 456.318601][T22341] netlink: 'syz.0.5047': attribute type 4 has an invalid length. [ 456.597207][T22355] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 456.611751][T22355] bond8 (unregistering): Released all slaves [ 456.810724][T22361] netlink: 'syz.3.5054': attribute type 39 has an invalid length. [ 457.198641][T22384] IPv6: sit1: Disabled Multicast RS [ 457.204972][T22384] sit1: entered allmulticast mode [ 457.353492][T22388] __nla_validate_parse: 10 callbacks suppressed [ 457.353511][T22388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5065'. [ 457.386947][T22392] netlink: 'syz.1.5067': attribute type 83 has an invalid length. [ 457.540664][T22400] tap0: tun_chr_ioctl cmd 1074025677 [ 457.553526][T22400] tap0: linktype set to 823 [ 457.558671][T22399] tap0: tun_chr_ioctl cmd 1074025677 [ 457.564747][T22399] tap0: linktype set to 823 [ 457.571740][T22400] tap0: tun_chr_ioctl cmd 1074025672 [ 457.578640][T22400] tap0: ignored: set checksum disabled [ 457.598045][T22402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5071'. [ 457.616451][T22402] xt_TCPMSS: Only works on TCP SYN packets [ 457.636631][T22402] syzkaller0: entered promiscuous mode [ 457.642369][T22402] syzkaller0: entered allmulticast mode [ 457.685327][T22406] netlink: 'syz.3.5073': attribute type 1 has an invalid length. [ 457.812709][T22406] bond0: entered promiscuous mode [ 457.821081][T22406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.829505][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5075'. [ 457.833764][T22420] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5077'. [ 458.239742][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5084'. [ 458.574965][T22469] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5094'. [ 458.650885][T22475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5096'. [ 458.663040][T22475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5096'. [ 458.718107][T22478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5097'. [ 458.746671][T22476] veth1_to_hsr: default FDB implementation only supports local addresses [ 458.833783][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5100'. [ 458.873543][T22485] netlink: 'syz.0.5100': attribute type 1 has an invalid length. [ 458.886945][T22485] NCSI netlink: No device for ifindex 0 [ 459.469916][T22533] nbd: must specify a device to reconfigure [ 459.563263][T22538] sctp: [Deprecated]: syz.1.5116 (pid 22538) Use of int in max_burst socket option deprecated. [ 459.563263][T22538] Use struct sctp_assoc_value instead [ 459.736547][T22548] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.748585][T22548] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 459.759632][T22548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.802949][T22553] FAULT_INJECTION: forcing a failure. [ 459.802949][T22553] name failslab, interval 1, probability 0, space 0, times 0 [ 459.820557][T22553] CPU: 1 UID: 0 PID: 22553 Comm: syz.1.5121 Not tainted syzkaller #0 PREEMPT(full) [ 459.820581][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.820593][T22553] Call Trace: [ 459.820600][T22553] [ 459.820608][T22553] dump_stack_lvl+0x189/0x250 [ 459.820638][T22553] ? __pfx____ratelimit+0x10/0x10 [ 459.820660][T22553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.820683][T22553] ? __pfx__printk+0x10/0x10 [ 459.820704][T22553] ? __pfx___might_resched+0x10/0x10 [ 459.820724][T22553] ? fs_reclaim_acquire+0x7d/0x100 [ 459.820762][T22553] should_fail_ex+0x414/0x560 [ 459.820792][T22553] should_failslab+0xa8/0x100 [ 459.820812][T22553] __kmalloc_cache_noprof+0x6f/0x6f0 [ 459.820835][T22553] ? __asan_memcpy+0x40/0x70 [ 459.820856][T22553] ? nft_trans_elem_alloc+0x55/0x320 [ 459.820881][T22553] ? nft_set_elem_expr_setup+0xab/0x830 [ 459.820912][T22553] nft_trans_elem_alloc+0x55/0x320 [ 459.820934][T22553] ? nf_tables_newsetelem+0x24bc/0x4330 [ 459.820957][T22553] nf_tables_newsetelem+0x24db/0x4330 [ 459.821021][T22553] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 459.821040][T22553] ? __lock_acquire+0xab9/0xd20 [ 459.821081][T22553] ? nla_validate_array+0xfc/0x260 [ 459.821131][T22553] ? __pfx___nla_validate_parse+0x10/0x10 [ 459.821155][T22553] ? __lock_acquire+0xab9/0xd20 [ 459.821184][T22553] ? nfnl_pernet+0x23/0x240 [ 459.821217][T22553] ? __nla_parse+0x40/0x60 [ 459.821240][T22553] nfnetlink_rcv+0x11d9/0x2590 [ 459.821297][T22553] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 459.821372][T22553] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.821415][T22553] netlink_unicast+0x82f/0x9e0 [ 459.821448][T22553] ? __pfx_netlink_unicast+0x10/0x10 [ 459.821473][T22553] ? netlink_sendmsg+0x642/0xb30 [ 459.821496][T22553] ? skb_put+0x11b/0x210 [ 459.821525][T22553] netlink_sendmsg+0x805/0xb30 [ 459.821559][T22553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.821588][T22553] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.821614][T22553] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.821633][T22553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.821658][T22553] __sock_sendmsg+0x21c/0x270 [ 459.821683][T22553] ____sys_sendmsg+0x505/0x830 [ 459.821707][T22553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.821739][T22553] ? import_iovec+0x74/0xa0 [ 459.821765][T22553] ___sys_sendmsg+0x21f/0x2a0 [ 459.821786][T22553] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.821843][T22553] ? __fget_files+0x2a/0x420 [ 459.821860][T22553] ? __fget_files+0x3a0/0x420 [ 459.821888][T22553] __x64_sys_sendmsg+0x19b/0x260 [ 459.821909][T22553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.821939][T22553] ? __pfx_ksys_write+0x10/0x10 [ 459.821967][T22553] ? do_syscall_64+0xbe/0xfa0 [ 459.821992][T22553] do_syscall_64+0xfa/0xfa0 [ 459.822011][T22553] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.822033][T22553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.822051][T22553] ? clear_bhb_loop+0x60/0xb0 [ 459.822073][T22553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.822090][T22553] RIP: 0033:0x7f2bac18efc9 [ 459.822107][T22553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.822123][T22553] RSP: 002b:00007f2baa3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.822143][T22553] RAX: ffffffffffffffda RBX: 00007f2bac3e5fa0 RCX: 00007f2bac18efc9 [ 459.822157][T22553] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 459.822169][T22553] RBP: 00007f2baa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 459.822181][T22553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.822192][T22553] R13: 00007f2bac3e6038 R14: 00007f2bac3e5fa0 R15: 00007fff6a55a1d8 [ 459.822233][T22553] [ 460.198575][T22548] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.208570][T22548] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 460.219524][T22548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.353128][T22548] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.373282][T22548] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 460.383894][T22548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.534678][T22548] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.590238][T22548] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 460.608426][T22548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.748802][T22590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.781593][ T154] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.792868][ T154] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 460.809371][ T154] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.835482][ T154] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.845187][ T154] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 460.856363][ T154] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.880262][T22600] netlink: 'syz.4.5138': attribute type 32 has an invalid length. [ 460.908125][ T154] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.918894][ T154] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 460.928015][ T154] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.947129][ T154] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.955385][ T154] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 460.967231][ T154] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.099375][T22616] netlink: 'syz.1.5140': attribute type 7 has an invalid length. [ 461.111650][T22616] netlink: 'syz.1.5140': attribute type 8 has an invalid length. [ 461.387692][T22632] pim6reg: entered allmulticast mode [ 461.393269][T15594] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.411532][T22632] pim6reg: left allmulticast mode [ 461.433423][T15594] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.474561][T15594] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.795100][T22653] netlink: zone id is out of range [ 461.880545][T22659] syzkaller1: entered promiscuous mode [ 461.886267][T22659] syzkaller1: entered allmulticast mode [ 462.158481][T22673] vlan1: mtu less than device minimum [ 462.325418][T22687] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 462.501664][T22699] __nla_validate_parse: 20 callbacks suppressed [ 462.501683][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5169'. [ 462.592537][T22704] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 462.693421][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5173'. [ 462.724341][T22712] netlink: 'syz.0.5172': attribute type 3 has an invalid length. [ 462.910394][T22722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5176'. [ 462.920822][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5176'. [ 462.947793][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 462.972836][T22722] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.176592][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5179'. [ 463.280568][T22735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5180'. [ 463.290781][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5180'. [ 463.415402][T22741] xt_ecn: cannot match TCP bits for non-tcp packets [ 463.443319][T22743] tipc: Enabling of bearer rejected, failed to enable media [ 463.515339][T22746] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5184'. [ 463.593641][T22750] tipc: Enabled bearer , priority 0 [ 463.601405][T22750] syzkaller0: entered promiscuous mode [ 463.607279][T22750] syzkaller0: entered allmulticast mode [ 463.655714][T22745] tipc: Resetting bearer [ 463.788134][T22745] tipc: Disabling bearer [ 463.827645][T22752] lo: entered allmulticast mode [ 463.832618][T22752] lo: left allmulticast mode [ 463.881362][T22752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5186'. [ 464.093197][T22771] tipc: Enabling of bearer rejected, failed to enable media [ 464.231821][T22777] netlink: 'syz.1.5195': attribute type 15 has an invalid length. [ 464.427168][T22785] veth7: entered promiscuous mode [ 464.445703][T22794] xt_recent: Unsupported userspace flags (000000b1) [ 464.543607][T22791] veth7: entered promiscuous mode [ 464.884898][T22809] netlink: 'syz.4.5205': attribute type 7 has an invalid length. [ 465.663736][T22852] 8021q: adding VLAN 0 to HW filter on device bond10 [ 465.680086][T22852] bond0: (slave bond10): making interface the new active one [ 465.688008][T22852] bond10: entered promiscuous mode [ 465.694150][T22852] bond0: (slave bond10): Enslaving as an active interface with an up link [ 466.095646][T22879] syzkaller0: entered promiscuous mode [ 466.106780][T22879] syzkaller0: entered allmulticast mode [ 466.250709][T22888] bridge2: port 1(gretap2) entered blocking state [ 466.257645][T22888] bridge2: port 1(gretap2) entered disabled state [ 466.269125][T22888] gretap2: entered allmulticast mode [ 466.276647][T22888] gretap2: entered promiscuous mode [ 466.389470][T22905] nbd: nbd0 already in use [ 466.434958][T22912] netlink: 'syz.3.5240': attribute type 10 has an invalid length. [ 466.460922][T22912] `: (slave geneve1): Enslaving as an active interface with an up link [ 466.743200][T22933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.902457][T22944] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 466.935472][T22944] bond8 (unregistering): Released all slaves [ 467.361590][T22975] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 467.561762][T22988] nbd: must specify a size in bytes for the device [ 467.603178][T22988] nbd: must specify a size in bytes for the device [ 467.619401][T22988] nbd: must specify a size in bytes for the device [ 467.642197][T22988] nbd: must specify a size in bytes for the device [ 467.779654][T23006] Cannot find del_set index 4 as target [ 467.859129][T23008] bond13 (unregistering): Released all slaves [ 468.249762][T23025] bridge6: entered promiscuous mode [ 468.255493][T23025] bridge6: entered allmulticast mode [ 468.433363][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.460383][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.476160][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.489088][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.501156][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.513027][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.525011][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.536493][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.548856][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.560218][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.571587][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.583240][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.594798][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.608700][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.632669][T23048] netlink: 'syz.1.5284': attribute type 10 has an invalid length. [ 468.644682][T23048] geneve1: entered promiscuous mode [ 468.651564][T23048] geneve1: entered allmulticast mode [ 468.656270][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.658115][T23048] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 468.673776][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.680377][T15597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.688417][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.696250][T15597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.707392][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.723674][T23050] netlink: 'syz.0.5285': attribute type 4 has an invalid length. [ 468.735534][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.741937][T15597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.756638][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.823073][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.840123][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.852498][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.864258][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.875586][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.887075][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.899318][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.910728][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.921973][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.933068][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.944573][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.956216][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.967898][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.076684][T23062] FAULT_INJECTION: forcing a failure. [ 469.076684][T23062] name failslab, interval 1, probability 0, space 0, times 0 [ 469.089974][T23062] CPU: 0 UID: 0 PID: 23062 Comm: syz.2.5288 Not tainted syzkaller #0 PREEMPT(full) [ 469.089995][T23062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 469.090004][T23062] Call Trace: [ 469.090019][T23062] [ 469.090026][T23062] dump_stack_lvl+0x189/0x250 [ 469.090051][T23062] ? __pfx____ratelimit+0x10/0x10 [ 469.090069][T23062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.090088][T23062] ? __pfx__printk+0x10/0x10 [ 469.090104][T23062] ? __pfx___might_resched+0x10/0x10 [ 469.090122][T23062] ? fs_reclaim_acquire+0x7d/0x100 [ 469.090148][T23062] should_fail_ex+0x414/0x560 [ 469.090174][T23062] should_failslab+0xa8/0x100 [ 469.090192][T23062] __kmalloc_cache_noprof+0x6f/0x6f0 [ 469.090215][T23062] ? nf_tables_newtable+0x435/0x1890 [ 469.090231][T23062] ? nla_strcmp+0x106/0x140 [ 469.090251][T23062] nf_tables_newtable+0x435/0x1890 [ 469.090286][T23062] nfnetlink_rcv+0x11d9/0x2590 [ 469.090335][T23062] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 469.090368][T23062] ? ref_tracker_free+0x63a/0x7d0 [ 469.090409][T23062] ? __netlink_deliver_tap+0x807/0x850 [ 469.090431][T23062] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.090467][T23062] netlink_unicast+0x82f/0x9e0 [ 469.090490][T23062] ? __pfx_netlink_unicast+0x10/0x10 [ 469.090508][T23062] ? netlink_sendmsg+0x642/0xb30 [ 469.090525][T23062] ? skb_put+0x11b/0x210 [ 469.090548][T23062] netlink_sendmsg+0x805/0xb30 [ 469.090576][T23062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.090602][T23062] ? aa_sock_msg_perm+0xf1/0x1d0 [ 469.090628][T23062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.090645][T23062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.090669][T23062] __sock_sendmsg+0x21c/0x270 [ 469.090693][T23062] ____sys_sendmsg+0x505/0x830 [ 469.090718][T23062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.090745][T23062] ? import_iovec+0x74/0xa0 [ 469.090769][T23062] ___sys_sendmsg+0x21f/0x2a0 [ 469.090790][T23062] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.090843][T23062] ? __fget_files+0x2a/0x420 [ 469.090858][T23062] ? __fget_files+0x3a0/0x420 [ 469.090882][T23062] __x64_sys_sendmsg+0x19b/0x260 [ 469.090898][T23062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.090924][T23062] ? __pfx_ksys_write+0x10/0x10 [ 469.090949][T23062] ? do_syscall_64+0xbe/0xfa0 [ 469.090973][T23062] do_syscall_64+0xfa/0xfa0 [ 469.090990][T23062] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.091016][T23062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.091032][T23062] ? clear_bhb_loop+0x60/0xb0 [ 469.091049][T23062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.091066][T23062] RIP: 0033:0x7f0c0018efc9 [ 469.091083][T23062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.091099][T23062] RSP: 002b:00007f0c0102b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.091118][T23062] RAX: ffffffffffffffda RBX: 00007f0c003e5fa0 RCX: 00007f0c0018efc9 [ 469.091131][T23062] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 469.091142][T23062] RBP: 00007f0c0102b090 R08: 0000000000000000 R09: 0000000000000000 [ 469.091153][T23062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.091164][T23062] R13: 00007f0c003e6038 R14: 00007f0c003e5fa0 R15: 00007ffda7dd68d8 [ 469.091194][T23062] [ 469.095554][T23057] veth1_vlan: left promiscuous mode [ 469.419165][T23057] veth1_vlan: entered promiscuous mode [ 469.424648][T23057] veth1_vlan: entered allmulticast mode [ 469.458920][T23059] tipc: Enabled bearer , priority 0 [ 469.474177][T23070] tipc: Resetting bearer [ 469.547763][T23073] __nla_validate_parse: 20 callbacks suppressed [ 469.547781][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5291'. [ 469.653376][T23056] tipc: Disabling bearer [ 469.947894][T23102] netlink: 'syz.1.5301': attribute type 1 has an invalid length. [ 469.955705][T23102] netlink: 'syz.1.5301': attribute type 3 has an invalid length. [ 469.975324][T23102] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5301'. [ 469.983514][T23104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5303'. [ 470.023278][T23109] pim6reg527: entered allmulticast mode [ 470.205003][T23121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5308'. [ 470.442806][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'. [ 470.467020][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5314'. [ 470.475921][T23133] netlink: 'syz.0.5314': attribute type 12 has an invalid length. [ 470.477414][T23136] netlink: 'syz.2.5315': attribute type 11 has an invalid length. [ 470.500475][T23133] netlink: 'syz.0.5314': attribute type 11 has an invalid length. [ 470.798841][T23160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5323'. [ 470.863500][T23160] tipc: Enabled bearer , priority 0 [ 470.890870][T23160] syzkaller0: entered promiscuous mode [ 470.896373][T23160] syzkaller0: entered allmulticast mode [ 471.056309][T23160] syzkaller0: mtu less than device minimum [ 471.078811][T23159] tipc: Resetting bearer [ 471.128450][T23159] tipc: Disabling bearer [ 471.165025][T23177] smc: net device vcan0 applied user defined pnetid SYZ1 [ 471.370041][T23186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5334'. [ 471.536082][T23201] : entered promiscuous mode [ 471.909624][T23224] team0: Device gtp0 is of different type [ 471.954044][T23232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5344'. [ 472.081994][T23224] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 472.094197][T23224] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 472.138830][T23232] macvlan2: entered promiscuous mode [ 472.144352][T23232] macvlan2: entered allmulticast mode [ 472.155388][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5347'. [ 472.687957][T23273] can: request_module (can-proto-3) failed. [ 473.041532][T23300] macvtap1: entered promiscuous mode [ 473.067003][T23300] vlan0: entered promiscuous mode [ 473.072420][T23300] macvtap1: entered allmulticast mode [ 473.094832][T23300] vlan0: entered allmulticast mode [ 473.103301][T23300] veth0_vlan: entered allmulticast mode [ 473.171817][T23305] hsr0 speed is unknown, defaulting to 1000 [ 473.181810][T23305] lo speed is unknown, defaulting to 1000 [ 473.883745][ T5917] IPVS: starting estimator thread 0... [ 473.929102][T23347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.996885][T23349] IPVS: using max 28 ests per chain, 67200 per kthread [ 474.411651][T23386] netlink: 'syz.2.5396': attribute type 13 has an invalid length. [ 474.693871][ T10] hsr0 speed is unknown, defaulting to 1000 [ 474.877762][T23427] __nla_validate_parse: 8 callbacks suppressed [ 474.877778][T23427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5406'. [ 474.879141][T23417] xt_hashlimit: size too large, truncated to 1048576 [ 474.884095][T23427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5406'. [ 475.034384][T23435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5407'. [ 475.048539][T23435] bond0: Caught tx_queue_len zero misconfig [ 475.053176][T23417] warn_alloc: 1 callbacks suppressed [ 475.053191][T23417] syz.1.5402: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null) [ 475.070704][T23442] netlink: 'syz.0.5408': attribute type 1 has an invalid length. [ 475.081209][T23417] ,cpuset= [ 475.085313][T23434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5407'. [ 475.106923][T23417] /,mems_allowed=0-1 [ 475.112481][T23417] CPU: 0 UID: 0 PID: 23417 Comm: syz.1.5402 Not tainted syzkaller #0 PREEMPT(full) [ 475.112503][T23417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 475.112514][T23417] Call Trace: [ 475.112523][T23417] [ 475.112531][T23417] dump_stack_lvl+0x189/0x250 [ 475.112560][T23417] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 475.112587][T23417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.112611][T23417] ? __pfx__printk+0x10/0x10 [ 475.112630][T23417] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 475.112663][T23417] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 475.112695][T23417] warn_alloc+0x214/0x310 [ 475.112727][T23417] ? __pfx_warn_alloc+0x10/0x10 [ 475.112762][T23417] ? __get_vm_area_node+0x28f/0x300 [ 475.112787][T23417] ? htable_create+0x101/0x7a0 [ 475.112812][T23417] __vmalloc_node_range_noprof+0x690/0x12d0 [ 475.112868][T23417] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 475.112898][T23417] ? rcu_is_watching+0x15/0xb0 [ 475.112919][T23417] ? htable_create+0x101/0x7a0 [ 475.112940][T23417] __kvmalloc_node_noprof+0x674/0x910 [ 475.112965][T23417] ? htable_create+0x101/0x7a0 [ 475.112982][T23417] ? hashlimit_pernet+0x23/0x240 [ 475.113003][T23417] ? hashlimit_pernet+0x23/0x240 [ 475.113021][T23417] ? hashlimit_pernet+0x23/0x240 [ 475.113047][T23417] htable_create+0x101/0x7a0 [ 475.113075][T23417] hashlimit_mt_check_common+0x719/0xa10 [ 475.113106][T23417] xt_check_match+0x3d1/0xab0 [ 475.113134][T23417] ? __pfx_xt_check_match+0x10/0x10 [ 475.113157][T23417] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 475.113192][T23417] ? xt_find_match+0x1f7/0x250 [ 475.113218][T23417] translate_table+0x1553/0x2040 [ 475.113268][T23417] ? __pfx_translate_table+0x10/0x10 [ 475.113292][T23417] ? __might_fault+0xb0/0x130 [ 475.113333][T23417] ? _copy_from_user+0x94/0xb0 [ 475.113359][T23417] do_ip6t_set_ctl+0x970/0xce0 [ 475.113385][T23417] ? rcu_is_watching+0x15/0xb0 [ 475.113405][T23417] ? trace_contention_end+0x39/0x120 [ 475.113424][T23417] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 475.113467][T23417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.113494][T23417] ? file_init_path+0x3b/0x590 [ 475.113517][T23417] ? __lock_acquire+0xab9/0xd20 [ 475.113538][T23417] nf_setsockopt+0x26f/0x290 [ 475.113565][T23417] rawv6_setsockopt+0x23b/0x5b0 [ 475.113595][T23417] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 475.113619][T23417] ? aa_sock_opt_perm+0xff/0x1b0 [ 475.113646][T23417] ? sock_common_setsockopt+0x36/0xc0 [ 475.113668][T23417] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 475.113693][T23417] do_sock_setsockopt+0x17c/0x1b0 [ 475.113724][T23417] __x64_sys_setsockopt+0x13f/0x1b0 [ 475.113755][T23417] do_syscall_64+0xfa/0xfa0 [ 475.113775][T23417] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.113796][T23417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.113814][T23417] ? clear_bhb_loop+0x60/0xb0 [ 475.113842][T23417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.113860][T23417] RIP: 0033:0x7f2bac18efc9 [ 475.113877][T23417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.113893][T23417] RSP: 002b:00007f2baa3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 475.113912][T23417] RAX: ffffffffffffffda RBX: 00007f2bac3e5fa0 RCX: 00007f2bac18efc9 [ 475.113925][T23417] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000085 [ 475.113934][T23417] RBP: 00007f2bac211f91 R08: 0000000000000588 R09: 0000000000000000 [ 475.113944][T23417] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 475.113953][T23417] R13: 00007f2bac3e6038 R14: 00007f2bac3e5fa0 R15: 00007fff6a55a1d8 [ 475.113981][T23417] [ 475.113988][T23417] Mem-Info: [ 475.474940][T23417] active_anon:5006 inactive_anon:0 isolated_anon:0 [ 475.474940][T23417] active_file:3469 inactive_file:40040 isolated_file:0 [ 475.474940][T23417] unevictable:768 dirty:135 writeback:0 [ 475.474940][T23417] slab_reclaimable:13552 slab_unreclaimable:152682 [ 475.474940][T23417] mapped:29495 shmem:1368 pagetables:1388 [ 475.474940][T23417] sec_pagetables:0 bounce:0 [ 475.474940][T23417] kernel_misc_reclaimable:0 [ 475.474940][T23417] free:1260826 free_pcp:13403 free_cma:0 [ 475.526331][T23417] Node 0 active_anon:20024kB inactive_anon:0kB active_file:13876kB inactive_file:159956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117980kB dirty:540kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17908kB pagetables:5288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 475.563006][T23417] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 475.594452][T23417] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.624499][T23417] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 475.630587][T23417] Node 0 DMA32 free:1128720kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20024kB inactive_anon:0kB active_file:13876kB inactive_file:159956kB unevictable:1536kB writepending:540kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:40084kB local_pcp:20884kB free_cma:0kB [ 475.664256][T23417] lowmem_reserve[]: 0 0 0 0 0 [ 475.671242][T23417] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.702577][T23417] lowmem_reserve[]: 0 0 0 0 0 [ 475.707383][T23417] Node 1 Normal free:3899224kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:11136kB free_cma:0kB [ 475.740120][T23417] lowmem_reserve[]: 0 0 0 0 0 [ 475.744856][T23417] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 475.757616][T23417] Node 0 DMA32: 1589*4kB (UM) 491*8kB (UM) 244*16kB (UME) 365*32kB (UM) 281*64kB (UM) 120*128kB (UME) 402*256kB (UME) 356*512kB (UM) 202*1024kB (UME) 8*2048kB (UM) 137*4096kB (UM) = 1128780kB [ 475.782255][T23417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 475.793943][T23417] Node 1 Normal: 202*4kB (UME) 60*8kB (UM) 51*16kB (UME) 173*32kB (UME) 54*64kB (UME) 12*128kB (UME) 6*256kB (UME) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3899224kB [ 475.813642][T23417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.856819][T23417] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 475.923555][T23417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.934783][T23417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 475.945083][T23417] 44874 total pagecache pages [ 475.951156][T23417] 0 pages in swap cache [ 475.955435][T23417] Free swap = 124996kB [ 475.960229][T23417] Total swap = 124996kB [ 475.964387][T23417] 2097051 pages RAM [ 475.975957][T23417] 0 pages HighMem/MovableOnly [ 475.993077][T23417] 424107 pages reserved [ 476.001801][T23417] 0 pages cma reserved [ 476.172790][T23464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5416'. [ 476.266343][T23483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5420'. [ 476.363228][T23489] netlink: 'syz.4.5423': attribute type 3 has an invalid length. [ 476.394783][T23493] ip6erspan0: entered promiscuous mode [ 476.431383][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5424'. [ 476.472459][T23495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5425'. [ 476.489731][T23499] sctp: [Deprecated]: syz.1.5427 (pid 23499) Use of int in max_burst socket option. [ 476.489731][T23499] Use struct sctp_assoc_value instead [ 476.498841][T23497] bond11: option mode: unable to set because the bond device is up [ 476.534713][T23497] bond_slave_0: entered promiscuous mode [ 476.547689][T23497] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 476.559918][T23497] bond11: (slave macvlan3): Enslaving as a backup interface with an up link [ 476.572929][T23497] netlink: 'syz.4.5426': attribute type 10 has an invalid length. [ 476.578593][T23504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5428'. [ 476.581173][T23497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5426'. [ 476.600177][T23497] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 476.623865][T23497] bridge0: port 1(syz_tun) entered blocking state [ 476.631953][T23497] bridge0: port 1(syz_tun) entered disabled state [ 476.639287][T23497] syz_tun: entered allmulticast mode [ 476.646453][T23497] syz_tun: entered promiscuous mode [ 476.663789][T23497] netlink: 'syz.4.5426': attribute type 10 has an invalid length. [ 476.673357][T23497] rdma_rxe: rxe_newlink: failed to add syz_tun [ 477.024121][T23530] ip6t_srh: unknown srh match flags 5F28 [ 477.047887][T23536] netlink: zone id is out of range [ 477.122728][T23539] pimreg3: entered allmulticast mode [ 477.353359][T23558] netlink: 'syz.2.5447': attribute type 1 has an invalid length. [ 477.762186][T23564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.775036][T23564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 477.787627][T23564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.889881][T23564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.902940][T23564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 477.914893][T23564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 478.011190][T23564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.022618][T23564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 478.051569][T23564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 478.205032][T23564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.226920][T23564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 478.240673][T23564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 478.436634][T14320] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.445168][T14320] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.466535][T14320] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.520865][T14320] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.529245][T14320] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.538857][T14320] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.614085][T23613] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 478.646599][T23613] bond13 (unregistering): Released all slaves [ 478.734240][T14307] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.747819][T14307] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.768927][T14307] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.782405][T14307] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.791049][T14307] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.817124][T14307] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.911410][T23622] hsr0 speed is unknown, defaulting to 1000 [ 478.949491][T23622] lo speed is unknown, defaulting to 1000 [ 479.818061][T23667] lo speed is unknown, defaulting to 1000 [ 479.829169][T23667] lo speed is unknown, defaulting to 1000 [ 479.864715][T23667] lo speed is unknown, defaulting to 1000 [ 479.915042][T23678] netlink: 'syz.3.5486': attribute type 30 has an invalid length. [ 479.980035][T23682] __nla_validate_parse: 9 callbacks suppressed [ 479.980051][T23682] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5486'. [ 480.002421][T23678] bond11: option arp_missed_max: invalid value (0) [ 480.044313][T23678] bond11: option arp_missed_max: allowed values 1 - 255 [ 480.141537][T23678] bond11 (unregistering): Released all slaves [ 480.447096][T23693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5491'. [ 480.782512][T23708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5496'. [ 480.994927][T23719] netlink: 'syz.4.5498': attribute type 29 has an invalid length. [ 481.073663][ T10] lo speed is unknown, defaulting to 1000 [ 481.097494][T23667] infiniband syz0: set down [ 481.113388][T23667] infiniband syz0: added lo [ 481.314665][T23667] RDS/IB: syz0: added [ 481.321214][T23667] smc: adding ib device syz0 with port count 1 [ 481.327714][T23667] smc: ib device syz0 port 1 has no pnetid [ 481.714278][T23732] gtp0: left promiscuous mode [ 481.771115][T23732] geneve2: left promiscuous mode [ 481.785236][T23732] team1: left promiscuous mode [ 481.802553][T23732] vxlan2: left promiscuous mode [ 481.812621][T23732] team2: left promiscuous mode [ 481.831623][T23732] team3: left promiscuous mode [ 481.850932][T23732] team4: left promiscuous mode [ 481.864824][T23732] team5: left promiscuous mode [ 481.884026][T23732] bond0: left promiscuous mode [ 481.888972][T23732] bond10: left promiscuous mode [ 481.918163][T23732] ip6erspan0: left promiscuous mode [ 481.942927][T10576] lo speed is unknown, defaulting to 1000 [ 481.950754][T23667] lo speed is unknown, defaulting to 1000 [ 481.967946][T23743] tipc: Enabled bearer , priority 0 [ 481.977500][T23746] syzkaller0: entered promiscuous mode [ 481.987077][T23746] syzkaller0: entered allmulticast mode [ 482.003360][ T154] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.019594][ T154] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 482.038191][ T154] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.054899][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5504'. [ 482.056852][ T154] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.092931][ T154] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 482.106807][ T154] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.128596][T23748] tipc: Resetting bearer [ 482.212737][T23738] tipc: Resetting bearer [ 482.259876][T23738] tipc: Disabling bearer [ 482.281630][ T154] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.297267][ T154] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 482.315870][ T154] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.357263][ T154] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.380500][ T154] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 482.397768][ T154] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.472362][T23765] bond13: entered promiscuous mode [ 482.479081][T23765] bond13: entered allmulticast mode [ 482.484847][T23765] 8021q: adding VLAN 0 to HW filter on device bond13 [ 482.515394][T23667] lo speed is unknown, defaulting to 1000 [ 482.521493][T23777] xt_cgroup: invalid path, errno=-2 [ 482.750350][T23793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5513'. [ 482.919583][T23805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5514'. [ 483.101799][T23812] syzkaller1: entered promiscuous mode [ 483.119512][T23812] syzkaller1: entered allmulticast mode [ 483.151425][T23667] lo speed is unknown, defaulting to 1000 [ 483.287271][T23826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.490231][T23832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5523'. [ 483.661412][T23844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.661420][T23845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.843808][T23667] lo speed is unknown, defaulting to 1000 [ 484.355311][T23888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5540'. [ 484.380525][T23887] netlink: 'syz.0.5539': attribute type 83 has an invalid length. [ 484.399412][T23892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5542'. [ 484.497337][T23898] netlink: 596 bytes leftover after parsing attributes in process `syz.0.5543'. [ 484.554373][T23900] netlink: 'syz.0.5545': attribute type 4 has an invalid length. [ 484.571622][T23667] lo speed is unknown, defaulting to 1000 [ 484.718101][T23904] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 484.931499][T23920] veth5: entered allmulticast mode [ 484.956051][T23922] erspan0: left allmulticast mode [ 484.964761][T23922] ip6gretap0: left allmulticast mode [ 485.024992][T23922] veth1_vlan: left promiscuous mode [ 485.042369][T23922] veth1_vlan: left allmulticast mode [ 485.085090][T23937] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5553'. [ 485.087354][T23934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5554'. [ 485.098242][T23922] team1: left promiscuous mode [ 485.110930][T23922] team1: left allmulticast mode [ 485.116019][T23922] team2: left promiscuous mode [ 485.121808][T23922] team2: left allmulticast mode [ 485.128666][T23922] team3: left promiscuous mode [ 485.133551][T23922] team3: left allmulticast mode [ 485.139671][T23922] team4: left promiscuous mode [ 485.144561][T23922] team4: left allmulticast mode [ 485.185380][T23922] geneve4: left promiscuous mode [ 485.190639][T23922] geneve4: left allmulticast mode [ 485.203514][T23922] macvlan2: left promiscuous mode [ 485.208710][T23922] macvlan2: left allmulticast mode [ 485.215917][T23667] lo speed is unknown, defaulting to 1000 [ 485.255465][T15606] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.286404][T15606] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.297545][T15606] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.316229][T15606] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.350334][T15606] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.373098][T15606] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.385171][T15606] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.423031][T15606] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.437125][T15606] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.476260][T15606] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.500461][T15606] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.532051][T15606] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.555556][T23958] Unsupported ieee802154 address type: 0 [ 485.801108][T23979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5565'. [ 485.946338][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5568'. [ 485.967234][T23667] lo speed is unknown, defaulting to 1000 [ 486.112950][T24000] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5569'. [ 486.308912][T24012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5574'. [ 486.320046][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5572'. [ 486.330102][T24012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5574'. [ 486.358038][T24010] team6 (uninitialized): Failed to send options change via netlink (err -105) [ 486.401021][T24010] team6: entered promiscuous mode [ 486.420381][T24010] team6: entered allmulticast mode [ 486.500556][T23667] lo speed is unknown, defaulting to 1000 [ 486.598729][T24022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5578'. [ 487.106670][T24061] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5587'. [ 487.138917][T24061] ksmbd: Unknown IPC event: 3, ignore. [ 487.191592][T23667] lo speed is unknown, defaulting to 1000 [ 487.227560][T24061] geneve3: entered promiscuous mode [ 487.259980][T24061] geneve3: entered allmulticast mode [ 487.306634][T14307] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 487.405940][T14307] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 487.427849][T14307] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 487.448395][T24061] tipc: Enabled bearer , priority 0 [ 487.471350][T14307] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 487.506809][T24056] tipc: Disabling bearer [ 488.099878][T24112] netlink: 'syz.1.5599': attribute type 13 has an invalid length. [ 491.063221][T24112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.079524][T24112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.129787][T10576] lo speed is unknown, defaulting to 1000 [ 491.147761][T10576] syz0: Port: 1 Link ACTIVE [ 491.193844][T24117] veth7: entered promiscuous mode [ 491.199215][T24117] veth7: entered allmulticast mode [ 491.350230][T10576] lo speed is unknown, defaulting to 1000 [ 491.402352][T24127] __nla_validate_parse: 6 callbacks suppressed [ 491.402369][T24127] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5604'. [ 491.423692][T24124] tipc: Enabled bearer , priority 0 [ 491.479689][T24132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5605'. [ 491.495626][T24122] tipc: Resetting bearer [ 491.735336][T24126] syzkaller0: entered promiscuous mode [ 491.745628][T24126] syzkaller0: entered allmulticast mode [ 491.783143][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5606'. [ 491.814406][T24121] tipc: Resetting bearer [ 491.987973][T24121] tipc: Disabling bearer [ 492.237354][T24154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5610'. [ 492.288748][T24154] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5610'. [ 492.325686][T24154] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5610'. [ 492.452468][T24175] netlink: 'syz.2.5617': attribute type 1 has an invalid length. [ 492.503933][T24160] IPVS: persistence engine module ip_vs_pe_ not found [ 492.678150][T24187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5620'. [ 492.704273][T24188] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5619'. [ 492.781239][T24184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5618'. [ 493.141570][T24228] tipc: Enabling of bearer rejected, failed to enable media [ 493.416279][T24239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5635'. [ 493.652845][T24259] sit0: entered promiscuous mode [ 493.676522][T24259] netlink: 'syz.3.5639': attribute type 1 has an invalid length. [ 493.845740][T24268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.894772][T24268] syzkaller1: entered promiscuous mode [ 493.901110][T24268] syzkaller1: entered allmulticast mode [ 493.910051][T24268] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 494.625946][T24281] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 495.157266][T24316] syzkaller0: entered promiscuous mode [ 495.162773][T24316] syzkaller0: entered allmulticast mode [ 495.426199][T24332] xt_CONNSECMARK: invalid mode: 0 [ 495.459439][T24332] bridge3: entered promiscuous mode [ 495.472371][T24332] bridge3: entered allmulticast mode [ 495.712764][T24351] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 495.741016][T24351] netlink: 'syz.3.5663': attribute type 8 has an invalid length. [ 496.193054][T24379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.603148][T24409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.899521][T24443] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 496.953103][T24445] nbd: nbd0 already in use [ 496.960004][T24445] nbd: nbd0 already in use [ 497.182644][T24465] __nla_validate_parse: 82 callbacks suppressed [ 497.182662][T24465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5692'. [ 497.359490][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5693'. [ 497.370962][T24477] netlink: 'syz.4.5694': attribute type 58 has an invalid length. [ 497.379492][T24477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5694'. [ 497.604258][T24495] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.5701'. [ 497.652465][T24495] hsr_slave_1 (unregistering): left promiscuous mode [ 497.681223][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'. [ 497.691462][T24501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5701'. [ 497.714392][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'. [ 497.723832][T24501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5701'. [ 497.789925][T24505] nft_compat: unsupported protocol 5 [ 497.796145][T24505] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5705'. [ 498.072210][T24518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5709'. [ 498.285156][T24542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.320606][T24546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.491555][T24555] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 609 [ 498.600486][T24561] syzkaller1: entered promiscuous mode [ 498.612686][T24561] syzkaller1: entered allmulticast mode [ 499.215145][T24598] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 499.494768][T24612] ip6tnl0: Caught tx_queue_len zero misconfig [ 499.917468][T24640] netlink: 'syz.0.5748': attribute type 3 has an invalid length. [ 499.936084][T24640] netlink: 'syz.0.5748': attribute type 1 has an invalid length. [ 500.060646][ T5847] block nbd1: Receive control failed (result -107) [ 501.380575][T24713] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.504749][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.661157][T24703] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 501.689022][ T10] lo speed is unknown, defaulting to 1000 [ 501.707339][ T10] syz0: Port: 1 Link DOWN [ 501.714056][ T10] lo speed is unknown, defaulting to 1000 [ 501.727309][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.737109][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.745054][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.753769][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.761609][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.801057][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.808928][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.816309][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.824893][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.833119][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.912856][T24722] hsr0 speed is unknown, defaulting to 1000 [ 501.933880][T24722] lo speed is unknown, defaulting to 1000 [ 501.947885][T24722] lo speed is unknown, defaulting to 1000 [ 501.998585][T24732] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 502.160425][T24742] netlink: 'syz.2.5785': attribute type 30 has an invalid length. [ 502.269032][T24751] blkio.reset_stats is deprecated [ 502.560755][T24722] chnl_net:caif_netlink_parms(): no params data found [ 502.589228][T24763] __nla_validate_parse: 19 callbacks suppressed [ 502.589244][T24763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5791'. [ 502.721861][T24773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5793'. [ 502.734898][T24722] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.742415][T24722] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.750140][T24722] bridge_slave_0: entered allmulticast mode [ 502.758458][T24722] bridge_slave_0: entered promiscuous mode [ 502.767595][T24722] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.774926][T24722] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.783069][T24722] bridge_slave_1: entered allmulticast mode [ 502.793063][T24722] bridge_slave_1: entered promiscuous mode [ 502.842854][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5795'. [ 502.864073][T24722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.877532][T24722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.933460][T24722] team0: Port device team_slave_0 added [ 502.961107][T24722] team0: Port device team_slave_1 added [ 503.005236][T24782] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5797'. [ 503.047046][T24722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.058586][T24722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.126841][T24722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.157502][T24722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.182938][T24722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.246888][T24722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.297763][T24795] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 503.439845][T24795] 8021q: adding VLAN 0 to HW filter on device bond11 [ 503.565916][T24802] bond11: (slave veth9): Enslaving as an active interface with a down link [ 503.600797][T24806] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 503.625072][T24722] hsr_slave_0: entered promiscuous mode [ 503.631560][T24722] hsr_slave_1: entered promiscuous mode [ 503.689004][T24814] syzkaller0: entered promiscuous mode [ 503.694724][T24814] syzkaller0: entered allmulticast mode [ 503.762813][T24814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5804'. [ 503.773252][T24814] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5804'. [ 503.898132][ T5847] Bluetooth: hci2: command tx timeout [ 504.345515][T24842] netlink: 'syz.2.5814': attribute type 21 has an invalid length. [ 504.367041][T24842] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5814'. [ 504.580424][T24852] FAULT_INJECTION: forcing a failure. [ 504.580424][T24852] name failslab, interval 1, probability 0, space 0, times 0 [ 504.727177][T24852] CPU: 0 UID: 0 PID: 24852 Comm: syz.1.5817 Not tainted syzkaller #0 PREEMPT(full) [ 504.727206][T24852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.727218][T24852] Call Trace: [ 504.727226][T24852] [ 504.727235][T24852] dump_stack_lvl+0x189/0x250 [ 504.727264][T24852] ? __pfx____ratelimit+0x10/0x10 [ 504.727286][T24852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.727309][T24852] ? __pfx__printk+0x10/0x10 [ 504.727334][T24852] ? __pfx___might_resched+0x10/0x10 [ 504.727353][T24852] ? fs_reclaim_acquire+0x7d/0x100 [ 504.727384][T24852] should_fail_ex+0x414/0x560 [ 504.727416][T24852] should_failslab+0xa8/0x100 [ 504.727436][T24852] __kmalloc_cache_noprof+0x6f/0x6f0 [ 504.727459][T24852] ? bpf_lsm_capable+0x9/0x20 [ 504.727480][T24852] ? security_capable+0x7e/0x2e0 [ 504.727501][T24852] ? nfnl_osf_add_callback+0x193/0x490 [ 504.727527][T24852] nfnl_osf_add_callback+0x193/0x490 [ 504.727552][T24852] nfnetlink_rcv_msg+0xb4d/0x1130 [ 504.727576][T24852] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 504.727618][T24852] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 504.727638][T24852] ? kasan_save_track+0x4f/0x80 [ 504.727710][T24852] netlink_rcv_skb+0x208/0x470 [ 504.727734][T24852] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.727756][T24852] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 504.727781][T24852] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.727818][T24852] ? bpf_lsm_capable+0x9/0x20 [ 504.727846][T24852] ? security_capable+0x7e/0x2e0 [ 504.727877][T24852] nfnetlink_rcv+0x282/0x2590 [ 504.727903][T24852] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.727924][T24852] ? __dev_queue_xmit+0x1d79/0x3b50 [ 504.727940][T24852] ? kasan_save_track+0x3e/0x80 [ 504.727961][T24852] ? __kasan_slab_alloc+0x6c/0x80 [ 504.727993][T24852] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.728025][T24852] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 504.728048][T24852] ? __pfx___dev_queue_xmit+0x10/0x10 [ 504.728082][T24852] ? ref_tracker_free+0x63a/0x7d0 [ 504.728100][T24852] ? __asan_memcpy+0x40/0x70 [ 504.728122][T24852] ? __pfx_ref_tracker_free+0x10/0x10 [ 504.728157][T24852] ? skb_clone+0x246/0x3a0 [ 504.728179][T24852] ? __netlink_deliver_tap+0x807/0x850 [ 504.728204][T24852] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.728236][T24852] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.728269][T24852] netlink_unicast+0x82f/0x9e0 [ 504.728301][T24852] ? __pfx_netlink_unicast+0x10/0x10 [ 504.728327][T24852] ? netlink_sendmsg+0x642/0xb30 [ 504.728350][T24852] ? skb_put+0x11b/0x210 [ 504.728378][T24852] netlink_sendmsg+0x805/0xb30 [ 504.728413][T24852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.728442][T24852] ? aa_sock_msg_perm+0xf1/0x1d0 [ 504.728468][T24852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.728486][T24852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.728512][T24852] __sock_sendmsg+0x21c/0x270 [ 504.728537][T24852] ____sys_sendmsg+0x505/0x830 [ 504.728562][T24852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.728590][T24852] ? import_iovec+0x74/0xa0 [ 504.728616][T24852] ___sys_sendmsg+0x21f/0x2a0 [ 504.728637][T24852] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.728693][T24852] ? __fget_files+0x2a/0x420 [ 504.728727][T24852] ? __fget_files+0x3a0/0x420 [ 504.728756][T24852] __x64_sys_sendmsg+0x19b/0x260 [ 504.728778][T24852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.728807][T24852] ? __pfx_ksys_write+0x10/0x10 [ 504.728887][T24852] ? do_syscall_64+0xbe/0xfa0 [ 504.728914][T24852] do_syscall_64+0xfa/0xfa0 [ 504.728934][T24852] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.728956][T24852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.728974][T24852] ? clear_bhb_loop+0x60/0xb0 [ 504.728997][T24852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.729015][T24852] RIP: 0033:0x7f2bac18efc9 [ 504.729032][T24852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.729047][T24852] RSP: 002b:00007f2baa3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.729065][T24852] RAX: ffffffffffffffda RBX: 00007f2bac3e5fa0 RCX: 00007f2bac18efc9 [ 504.729078][T24852] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 504.729089][T24852] RBP: 00007f2baa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.729100][T24852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.729110][T24852] R13: 00007f2bac3e6038 R14: 00007f2bac3e5fa0 R15: 00007fff6a55a1d8 [ 504.729141][T24852] [ 504.731567][T24722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 505.353724][T24861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 505.363589][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 505.377417][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 505.386634][T24722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 505.425686][T24722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 505.526150][T24722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 505.773820][T24722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.833546][T24722] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.854595][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.861784][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.881017][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.888213][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.977113][ T5847] Bluetooth: hci2: command tx timeout [ 506.054639][T24910] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20002 [ 506.385018][T24722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.462717][T24722] veth0_vlan: entered promiscuous mode [ 506.481611][T24722] veth1_vlan: entered promiscuous mode [ 506.532207][T24722] veth0_macvtap: entered promiscuous mode [ 506.543963][T24722] veth1_macvtap: entered promiscuous mode [ 506.593008][T24722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.630651][T24722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.677839][T15606] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.686994][T15606] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.708290][T15606] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.881724][T15606] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.242503][T15606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.280959][T15606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.543661][T15594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.557396][T15594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.595401][T24943] netlink: 'syz.1.5839': attribute type 1 has an invalid length. [ 507.604437][T24943] __nla_validate_parse: 7 callbacks suppressed [ 507.604453][T24943] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5839'. [ 507.690647][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'. [ 507.712850][T24948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5840'. [ 508.060821][ T5847] Bluetooth: hci2: command tx timeout [ 508.719054][T25003] delete_channel: no stack [ 509.052964][T25023] netlink: 'syz.1.5864': attribute type 1 has an invalid length. [ 509.098896][T25023] bond10: entered promiscuous mode [ 509.108256][T25023] 8021q: adding VLAN 0 to HW filter on device bond10 [ 509.213522][T25034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5867'. [ 509.902549][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5878'. [ 510.068762][T25079] netlink: 'syz.2.5881': attribute type 11 has an invalid length. [ 510.142037][ T5847] Bluetooth: hci2: command tx timeout [ 510.184684][T25086] veth1_macvtap: left promiscuous mode [ 510.257416][T25101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5889'. [ 510.284451][T25103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5888'. [ 510.357270][T25107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5890'. [ 510.673164][T25124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5894'. [ 510.788654][T25133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.820856][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5896'. [ 510.831307][T25130] netlink: 'syz.3.5896': attribute type 1 has an invalid length. [ 510.832476][T25135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.849093][T25130] netlink: 'syz.3.5896': attribute type 2 has an invalid length. [ 511.372912][T25176] veth0: Caught tx_queue_len zero misconfig [ 511.380954][T25176] netlink: 'syz.2.5910': attribute type 3 has an invalid length. [ 511.478884][T25179] lo: Caught tx_queue_len zero misconfig [ 511.506398][T25177] delete_channel: no stack [ 511.512296][T25177] delete_channel: no stack [ 511.588374][T25187] 8021q: VLANs not supported on caif0 [ 511.616365][T25188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.664251][T25196] batman_adv: batadv0: Removing interface: dummy0 [ 511.679451][T25196] bridge_slave_0: left allmulticast mode [ 511.685495][T25196] bridge_slave_0: left promiscuous mode [ 511.719797][T25196] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.761699][T25196] bridge_slave_1: left allmulticast mode [ 511.782212][T25196] bridge_slave_1: left promiscuous mode [ 511.800653][T25202] xt_hashlimit: size too large, truncated to 1048576 [ 511.809935][T25196] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.875144][T25196] bond11: (slave veth0_to_bond): Releasing active interface [ 512.155907][T25196] bond0: (slave bond_slave_0): Releasing backup interface [ 512.202499][T25196] bond0: (slave bond_slave_1): Releasing backup interface [ 512.216508][T25196] team0: Port device team_slave_0 removed [ 512.227808][T25196] team0: Port device team_slave_1 removed [ 512.234971][T25196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.245154][T25196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.255494][T25196] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 512.558787][T25228] netlink: 'syz.0.5925': attribute type 30 has an invalid length. [ 512.623384][T25228] bond15: entered promiscuous mode [ 512.628387][T25233] xt_TCPMSS: Only works on TCP SYN packets [ 512.852386][T25252] __nla_validate_parse: 4 callbacks suppressed [ 512.852463][T25252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5934'. [ 513.344278][T25287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5944'. [ 513.357392][T25287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5944'. [ 513.523278][T25295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5945'. [ 513.542938][T25294] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 514.045904][T25327] netlink: 'syz.0.5954': attribute type 1 has an invalid length. [ 514.089528][T25327] 8021q: adding VLAN 0 to HW filter on device bond17 [ 514.102451][T25327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5954'. [ 514.174164][T25331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5955'. [ 514.657375][T25341] sctp: [Deprecated]: syz.3.5958 (pid 25341) Use of int in maxseg socket option. [ 514.657375][T25341] Use struct sctp_assoc_value instead [ 514.814302][T25348] netlink: 'syz.1.5961': attribute type 12 has an invalid length. [ 514.824736][T25346] netlink: zone id is out of range [ 515.233572][T25387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5973'. [ 515.411484][T25364] bond_slave_0: left promiscuous mode [ 515.428669][T25364] batman_adv: batadv0: Interface deactivated: team0 [ 515.637972][T25364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.661042][T25364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.929487][T25364] vlan0: left allmulticast mode [ 515.934394][T25364] veth0_vlan: left allmulticast mode [ 515.939893][T25364] vlan0: left promiscuous mode [ 515.978556][T25381] tipc: Enabled bearer , priority 0 [ 515.987098][T25390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5973'. [ 516.024131][ T154] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.075195][ T154] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.114398][ T154] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.123734][ T154] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.184018][T25384] tipc: Disabling bearer [ 516.207932][ T154] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.220953][ T154] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.231077][ T154] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.241475][ T154] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.297514][T25403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5977'. [ 516.406419][T25420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5983'. [ 516.587466][T25427] netlink: 'syz.1.5986': attribute type 29 has an invalid length. [ 516.589668][ T5840] IPVS: starting estimator thread 0... [ 516.641647][T25431] 8021q: adding VLAN 0 to HW filter on device bond10 [ 516.652371][T25427] netlink: 'syz.1.5986': attribute type 29 has an invalid length. [ 516.670934][T25438] syzkaller0: entered promiscuous mode [ 516.678019][T25438] syzkaller0: entered allmulticast mode [ 516.707409][T25431] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 516.728989][T25434] IPVS: using max 27 ests per chain, 64800 per kthread [ 516.736284][T25437] tipc: Enabled bearer , priority 0 [ 516.804621][T25441] tipc: Resetting bearer [ 516.925114][T25441] tipc: Disabling bearer [ 517.406282][T25481] nbd: must specify a device to reconfigure [ 517.508611][T25479] hsr0 speed is unknown, defaulting to 1000 [ 517.550178][T25479] lo speed is unknown, defaulting to 1000 [ 517.561655][T25479] lo speed is unknown, defaulting to 1000 [ 517.584948][T25487] netlink: 'syz.3.6005': attribute type 1 has an invalid length. [ 517.748818][T25494] bond2: (slave geneve2): making interface the new active one [ 517.780717][T25494] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 517.811077][T15594] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.836310][T15594] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.865647][T15594] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.909834][T25501] netlink: 'syz.4.6008': attribute type 1 has an invalid length. [ 517.972288][T25501] 8021q: adding VLAN 0 to HW filter on device bond17 [ 518.013155][T15594] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 518.054984][T25506] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 518.194057][T25525] __nla_validate_parse: 6 callbacks suppressed [ 518.194075][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6014'. [ 518.444765][T25544] netlink: 'syz.4.6017': attribute type 1 has an invalid length. [ 518.478693][T25530] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 518.563236][T25530] netlink: 'syz.2.6016': attribute type 1 has an invalid length. [ 518.672834][T25539] 8021q: adding VLAN 0 to HW filter on device bond19 [ 518.694253][T25539] bond18: (slave bond19): making interface the new active one [ 518.705850][T25539] bond18: (slave bond19): Enslaving as an active interface with an up link [ 518.774829][T25544] bond18: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.800133][T25544] bond18: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 518.888091][T25530] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 519.021404][T25570] bond11: option mode: unable to set because the bond device has slaves [ 519.198849][T25572] hsr0 speed is unknown, defaulting to 1000 [ 519.206964][T25572] lo speed is unknown, defaulting to 1000 [ 519.214467][T25572] lo speed is unknown, defaulting to 1000 [ 519.567423][T25597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6031'. [ 519.757240][T25614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6036'. [ 520.130745][T25625] bond_slave_0: entered promiscuous mode [ 520.136473][T25625] bond_slave_1: entered promiscuous mode [ 520.144859][T25625] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 520.158898][T25625] bond10: (slave macvlan3): Enslaving as an active interface with an up link [ 520.264621][T25639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6043'. [ 520.534362][T25655] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6046'. [ 520.550604][T25655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6046'. [ 520.908870][T25683] tipc: Enabling of bearer rejected, failed to enable media [ 521.199925][T25698] netlink: 'syz.2.6059': attribute type 1 has an invalid length. [ 521.284135][T25701] bond11: (slave gretap3): making interface the new active one [ 521.293565][T25701] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 521.493223][T25709] xt_bpf: check failed: parse error [ 521.498983][T25709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6061'. [ 521.508330][T25709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6061'. [ 521.721478][T16294] syz_tun (unregistering): left allmulticast mode [ 521.734955][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.745131][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.748603][T16294] syz_tun (unregistering): left promiscuous mode [ 521.758970][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.771916][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.780476][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.784487][T16294] bridge0: port 1(syz_tun) entered disabled state [ 521.890413][T25718] hsr0 speed is unknown, defaulting to 1000 [ 521.899852][T25718] lo speed is unknown, defaulting to 1000 [ 521.907495][T25718] lo speed is unknown, defaulting to 1000 [ 522.093883][T25730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6069'. [ 522.127136][T25730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6069'. [ 522.359402][T25745] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 522.784662][T25718] chnl_net:caif_netlink_parms(): no params data found [ 522.924697][T25782] bond18: entered promiscuous mode [ 522.960071][T25782] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 522.969187][T25782] bond18: (slave macvlan3): making interface the new active one [ 522.985429][T25782] macvlan3: entered promiscuous mode [ 522.992503][T25782] bond0: entered promiscuous mode [ 522.998449][T25782] geneve1: entered promiscuous mode [ 523.006973][T25782] bond18: (slave macvlan3): Enslaving as an active interface with an up link [ 523.116122][T25718] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.127315][T25718] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.136066][T25718] bridge_slave_0: entered allmulticast mode [ 523.144766][T25718] bridge_slave_0: entered promiscuous mode [ 523.153986][T25718] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.161737][T25718] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.169276][T25718] bridge_slave_1: entered allmulticast mode [ 523.177169][T25718] bridge_slave_1: entered promiscuous mode [ 523.240701][T25718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.261350][T25718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.287418][T25806] openvswitch: netlink: Message has 4 unknown bytes. [ 523.353583][T25811] __nla_validate_parse: 4 callbacks suppressed [ 523.353601][T25811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6089'. [ 523.398191][T25718] team0: Port device team_slave_0 added [ 523.429149][T25718] team0: Port device team_slave_1 added [ 523.531882][T25718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.546514][T25718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.594442][T25718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.638030][T25718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.645000][T25718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.673430][T25718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.685540][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6092'. [ 523.694541][T25824] netlink: zone id is out of range [ 523.699888][T25824] netlink: zone id is out of range [ 523.705002][T25824] netlink: zone id is out of range [ 523.727083][T25824] netlink: zone id is out of range [ 523.734713][T25824] netlink: zone id is out of range [ 523.762981][T25824] netlink: zone id is out of range [ 523.783365][T25824] netlink: zone id is out of range [ 523.813186][T25824] netlink: zone id is out of range [ 523.830699][ T5847] Bluetooth: hci4: command tx timeout [ 523.914177][T25718] hsr_slave_0: entered promiscuous mode [ 523.930509][T25718] hsr_slave_1: entered promiscuous mode [ 523.943831][T25718] debugfs: 'hsr0' already exists in 'hsr' [ 523.956796][T25718] Cannot create hsr debugfs directory [ 524.485440][T25869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6104'. [ 524.794237][T25881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6108'. [ 524.828994][T25883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.899020][T25883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.932107][T25885] bond19: entered promiscuous mode [ 524.937711][T25885] bond19: entered allmulticast mode [ 524.944198][T25885] 8021q: adding VLAN 0 to HW filter on device bond19 [ 524.981724][T25718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 525.002437][T25718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 525.023076][T25718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 525.036277][T25718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 525.078271][T25896] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6114'. [ 525.103050][T25896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6114'. [ 525.113881][T25896] netlink: 'syz.3.6114': attribute type 13 has an invalid length. [ 525.122206][T25896] netlink: 'syz.3.6114': attribute type 58 has an invalid length. [ 525.130326][T25896] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6114'. [ 525.158921][T25907] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.6115'. [ 525.202009][T25909] netlink: 'syz.3.6116': attribute type 1 has an invalid length. [ 525.222810][T25907] hsr_slave_1 (unregistering): left promiscuous mode [ 525.252791][T25906] netlink: 'syz.0.6115': attribute type 12 has an invalid length. [ 525.261350][T25906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6115'. [ 525.288810][T25909] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 525.358232][T25718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.419568][T25718] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.455157][T15594] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.462389][T15594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.512294][T15594] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.519506][T15594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.600640][T25927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6121'. [ 525.633356][T25927] xfrm1: entered promiscuous mode [ 525.639217][T25927] xfrm1: entered allmulticast mode [ 525.662725][T25718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.898275][ T5847] Bluetooth: hci4: command tx timeout [ 526.068997][T25718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.252314][T25974] netlink: 'syz.3.6134': attribute type 3 has an invalid length. [ 526.380313][T25978] block nbd2: server does not support multiple connections per device. [ 526.394890][T25978] block nbd2: shutting down sockets [ 526.430414][T25978] netlink: 'syz.1.6135': attribute type 2 has an invalid length. [ 526.484498][T25990] syzkaller0: entered promiscuous mode [ 526.700644][T25718] veth0_vlan: entered promiscuous mode [ 526.731959][T25718] veth1_vlan: entered promiscuous mode [ 526.805764][T25718] veth0_macvtap: entered promiscuous mode [ 526.856547][T25718] veth1_macvtap: entered promiscuous mode [ 526.914908][T25718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.945416][T25718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.968991][ T154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.986526][ T154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.022184][ T154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.036644][ T154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.204845][T26028] RDS: rds_bind could not find a transport for 400:0:1200::ffff:ffff, load rds_tcp or rds_rdma? [ 527.268008][T15606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.298107][T15606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.381521][T15606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.390593][T15606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.469796][T26045] policy can only be matched on NF_INET_PRE_ROUTING [ 527.469818][T26045] unable to load match [ 527.542940][T26047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 527.644386][T26055] 8021q: VLANs not supported on ip6gre0 [ 527.978706][ T5847] Bluetooth: hci4: command tx timeout [ 528.001855][T25399] IPVS: starting estimator thread 0... [ 528.152769][ T30] audit: type=1107 audit(1761155645.882:3): pid=26068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 528.169626][T26067] IPVS: using max 30 ests per chain, 72000 per kthread [ 528.231638][T26073] syzkaller0: entered promiscuous mode [ 528.250145][T26073] syzkaller0: entered allmulticast mode [ 528.309401][T26070] netdevsim netdevsim4: Direct firmware load for 8 failed with error -2 [ 528.320050][T26070] netdevsim netdevsim4: Falling back to sysfs fallback for: 8 [ 528.368890][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 528.378871][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 528.397147][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 528.405140][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 528.414646][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 528.583123][T26075] hsr0 speed is unknown, defaulting to 1000 [ 528.593690][T26075] lo speed is unknown, defaulting to 1000 [ 528.601559][T26075] lo speed is unknown, defaulting to 1000 [ 528.607701][T26083] netlink: 'syz.2.6169': attribute type 9 has an invalid length. [ 528.717768][T26085] net_ratelimit: 5 callbacks suppressed [ 528.717786][T26085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.123844][T26098] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 529.192478][T26090] bridge0: port 3(ip6gretap0) entered disabled state [ 529.209881][T26090] ip6gretap0: left allmulticast mode [ 529.221971][T26090] ip6gretap0: left promiscuous mode [ 529.230306][T26090] bridge0: port 3(ip6gretap0) entered disabled state [ 529.240873][T26090] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.248620][T26090] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.305131][T26090] bond_slave_0: left promiscuous mode [ 529.318209][T26090] bond_slave_1: left promiscuous mode [ 529.409049][T26109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.534511][T26090] bridge_slave_0: left allmulticast mode [ 529.540452][T26090] bridge_slave_0: left promiscuous mode [ 529.546338][T26090] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.590696][T26090] bridge_slave_1: left allmulticast mode [ 529.596425][T26090] bridge_slave_1: left promiscuous mode [ 529.602409][T26090] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.649480][T26090] bond0: (slave bond_slave_0): Releasing backup interface [ 529.691180][T26090] bond0: (slave bond_slave_1): Releasing backup interface [ 529.743663][T26090] team0: Port device team_slave_0 removed [ 529.761191][T26090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.777961][T26090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.787782][T26090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.801722][T26090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.841530][T26090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 530.041815][T26127] tipc: Enabling of bearer rejected, failed to enable media [ 530.057131][ T51] Bluetooth: hci4: command tx timeout [ 530.088258][T26134] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 530.236477][T26147] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 530.270273][T26147] __nla_validate_parse: 11 callbacks suppressed [ 530.270293][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6184'. [ 530.397252][T26147] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 530.421624][T26147] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6184'. [ 530.443196][T26075] chnl_net:caif_netlink_parms(): no params data found [ 530.457277][ T51] Bluetooth: hci5: command tx timeout [ 530.520128][T26159] 8021q: VLANs not supported on ip6gre0 [ 530.530114][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 530.542843][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6189'. [ 530.680803][T26157] tipc: Enabled bearer , priority 0 [ 530.746139][T26156] tipc: Disabling bearer [ 530.763981][T26075] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.784995][T26075] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.792969][T26075] bridge_slave_0: entered allmulticast mode [ 530.800965][T26075] bridge_slave_0: entered promiscuous mode [ 530.819455][T26075] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.828490][T26075] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.835773][T26075] bridge_slave_1: entered allmulticast mode [ 530.843662][T26075] bridge_slave_1: entered promiscuous mode [ 530.957918][T26075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.998493][T26075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.100103][T26075] team0: Port device team_slave_0 added [ 531.167632][T26075] team0: Port device team_slave_1 added [ 531.289532][T26075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.296610][T26075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.326803][T26075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.340761][T26204] netlink: 'syz.0.6201': attribute type 13 has an invalid length. [ 531.349220][T26204] netlink: 'syz.0.6201': attribute type 17 has an invalid length. [ 531.352153][T26075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.364831][T26075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.395406][T26075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.407017][T26201] 8021q: VLANs not supported on ip6gre0 [ 531.407446][T26197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6200'. [ 531.503579][T26075] hsr_slave_0: entered promiscuous mode [ 531.518449][T26075] hsr_slave_1: entered promiscuous mode [ 531.528191][T26075] debugfs: 'hsr0' already exists in 'hsr' [ 531.533933][T26075] Cannot create hsr debugfs directory [ 531.574151][T26209] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 531.589042][T26209] bond1: option packets_per_slave: allowed values 0 - 65535 [ 531.601554][T26209] bond1 (unregistering): Released all slaves [ 531.605361][T26216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6206'. [ 531.619441][T26216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6206'. [ 531.630921][T26214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.631018][T26216] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6206'. [ 531.659437][T26216] netlink: 'syz.2.6206': attribute type 3 has an invalid length. [ 531.667499][T26217] netlink: 'syz.2.6206': attribute type 10 has an invalid length. [ 531.667597][T26216] netlink: 'syz.2.6206': attribute type 2 has an invalid length. [ 531.683654][T26216] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6206'. [ 531.696079][T26217] batman_adv: batadv0: Adding interface: team0 [ 531.712367][T26217] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.738938][T26217] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 531.861069][T26223] netlink: 'syz.2.6208': attribute type 1 has an invalid length. [ 531.906569][T26227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6209'. [ 531.941063][T26075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.964271][T26075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.970425][T26229] netlink: 'syz.2.6210': attribute type 21 has an invalid length. [ 532.002374][T26229] netlink: 'syz.2.6210': attribute type 4 has an invalid length. [ 532.011597][T26229] netlink: 'syz.2.6210': attribute type 5 has an invalid length. [ 532.049173][T26075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.062273][T26075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.125775][T26075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.138453][T26075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.248828][T26238] 8021q: VLANs not supported on ip6gre0 [ 532.449942][T26075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 532.481143][T26075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 532.501980][T26075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 532.537997][ T51] Bluetooth: hci5: command tx timeout [ 532.543268][T26075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 532.741930][T26075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.798827][T26075] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.878791][T26274] bond20: entered promiscuous mode [ 532.935387][T26278] bond18: (slave macvlan4): Error -98 calling set_mac_address [ 532.967531][T15597] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.974738][T15597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.022554][T15597] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.029766][T15597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.279025][T26303] netlink: 'syz.0.6229': attribute type 1 has an invalid length. [ 533.566027][T26317] unsupported nla_type 52263 [ 533.578954][T26075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.712729][T26075] veth0_vlan: entered promiscuous mode [ 533.778201][T26075] veth1_vlan: entered promiscuous mode [ 533.885359][T26075] veth0_macvtap: entered promiscuous mode [ 533.914186][T26075] veth1_macvtap: entered promiscuous mode [ 533.960305][T26075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.044743][T26075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.087999][T15606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.113560][T15606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.157166][T15606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.162210][T26344] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 534.165897][T15606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.285007][T14307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.292957][T14307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.355480][T15597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.365500][T15597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.617123][ T51] Bluetooth: hci5: command tx timeout [ 534.848050][T26380] sctp: [Deprecated]: syz.1.6252 (pid 26380) Use of int in maxseg socket option. [ 534.848050][T26380] Use struct sctp_assoc_value instead [ 534.923958][T26370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.201803][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.212866][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.220943][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.232214][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.240554][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.325096][T26391] hsr0 speed is unknown, defaulting to 1000 [ 535.332955][T26391] lo speed is unknown, defaulting to 1000 [ 535.341176][T26391] lo speed is unknown, defaulting to 1000 [ 535.602970][T26407] bond10: (slave macvlan5): Error -98 calling set_mac_address [ 535.831590][T26409] veth0: entered promiscuous mode [ 535.978961][T26417] __nla_validate_parse: 11 callbacks suppressed [ 535.978978][T26417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6265'. [ 536.124522][T26391] chnl_net:caif_netlink_parms(): no params data found [ 536.266272][T26440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6272'. [ 536.277001][T26440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6272'. [ 536.304589][T26440] gtp1: entered promiscuous mode [ 536.313377][T26440] gtp1: entered allmulticast mode [ 536.326609][T26440] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 536.419264][T26391] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.433899][T26391] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.450792][T26391] bridge_slave_0: entered allmulticast mode [ 536.460039][T26391] bridge_slave_0: entered promiscuous mode [ 536.468629][T26391] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.475868][T26391] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.483820][T26391] bridge_slave_1: entered allmulticast mode [ 536.492026][T26391] bridge_slave_1: entered promiscuous mode [ 536.513932][T26450] bond10: (slave macvlan5): Error -98 calling set_mac_address [ 536.526044][T26408] veth0: left promiscuous mode [ 536.626329][T26453] rdma_rxe: rxe_newlink: failed to add lo [ 536.631224][T26391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.651898][T26391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.696076][T26462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6278'. [ 536.709266][ T51] Bluetooth: hci5: command tx timeout [ 536.717824][T26462] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6278'. [ 536.748499][T26465] netlink: 'syz.4.6279': attribute type 3 has an invalid length. [ 536.831114][T26391] team0: Port device team_slave_0 added [ 536.846344][T26391] team0: Port device team_slave_1 added [ 536.931399][T26391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.947724][T26391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.974470][T26391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.990793][T26391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.001247][T26391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.029517][T26391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.160511][T26391] hsr_slave_0: entered promiscuous mode [ 537.175563][T26391] hsr_slave_1: entered promiscuous mode [ 537.198059][T26391] debugfs: 'hsr0' already exists in 'hsr' [ 537.203924][T26391] Cannot create hsr debugfs directory [ 537.277079][T26495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6289'. [ 537.343232][ T51] Bluetooth: hci1: command tx timeout [ 537.545601][T26510] [ 537.547971][T26510] ====================================================== [ 537.554983][T26510] WARNING: possible circular locking dependency detected [ 537.562000][T26510] syzkaller #0 Not tainted [ 537.566399][T26510] ------------------------------------------------------ [ 537.573397][T26510] syz.3.6293/26510 is trying to acquire lock: [ 537.579440][T26510] ffffffff8f4271d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 537.588569][T26510] [ 537.588569][T26510] but task is already holding lock: [ 537.595910][T26510] ffff888033581870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 537.605113][T26510] [ 537.605113][T26510] which lock already depends on the new lock. [ 537.605113][T26510] [ 537.615494][T26510] [ 537.615494][T26510] the existing dependency chain (in reverse order) is: [ 537.624491][T26510] [ 537.624491][T26510] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 537.632471][T26510] lock_acquire+0x120/0x360 [ 537.637492][T26510] _raw_spin_lock_bh+0x36/0x50 [ 537.642770][T26510] nr_rt_device_down+0x12a/0x720 [ 537.648211][T26510] nr_device_event+0x137/0x150 [ 537.653478][T26510] notifier_call_chain+0x1b6/0x3e0 [ 537.659098][T26510] __dev_notify_flags+0x18d/0x2e0 [ 537.664633][T26510] netif_change_flags+0xe8/0x1a0 [ 537.670079][T26510] dev_change_flags+0x130/0x260 [ 537.675442][T26510] dev_ioctl+0x7b4/0x1150 [ 537.680280][T26510] sock_do_ioctl+0x22c/0x300 [ 537.685377][T26510] sock_ioctl+0x576/0x790 [ 537.690207][T26510] __se_sys_ioctl+0xfc/0x170 [ 537.695305][T26510] do_syscall_64+0xfa/0xfa0 [ 537.700314][T26510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.706715][T26510] [ 537.706715][T26510] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 537.714522][T26510] lock_acquire+0x120/0x360 [ 537.719526][T26510] _raw_spin_lock_bh+0x36/0x50 [ 537.724796][T26510] nr_rt_device_down+0xa9/0x720 [ 537.730148][T26510] nr_device_event+0x137/0x150 [ 537.735413][T26510] notifier_call_chain+0x1b6/0x3e0 [ 537.741030][T26510] __dev_notify_flags+0x18d/0x2e0 [ 537.746568][T26510] netif_change_flags+0xe8/0x1a0 [ 537.752013][T26510] dev_change_flags+0x130/0x260 [ 537.757371][T26510] dev_ioctl+0x7b4/0x1150 [ 537.762206][T26510] sock_do_ioctl+0x22c/0x300 [ 537.767296][T26510] sock_ioctl+0x576/0x790 [ 537.772129][T26510] __se_sys_ioctl+0xfc/0x170 [ 537.777227][T26510] do_syscall_64+0xfa/0xfa0 [ 537.782236][T26510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.788631][T26510] [ 537.788631][T26510] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 537.796518][T26510] validate_chain+0xb9b/0x2140 [ 537.801785][T26510] __lock_acquire+0xab9/0xd20 [ 537.806963][T26510] lock_acquire+0x120/0x360 [ 537.811967][T26510] _raw_spin_lock_bh+0x36/0x50 [ 537.817235][T26510] nr_rt_ioctl+0x390/0xd50 [ 537.822166][T26510] sock_do_ioctl+0xdc/0x300 [ 537.827173][T26510] sock_ioctl+0x576/0x790 [ 537.832004][T26510] __se_sys_ioctl+0xfc/0x170 [ 537.837102][T26510] do_syscall_64+0xfa/0xfa0 [ 537.842113][T26510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.848537][T26510] [ 537.848537][T26510] other info that might help us debug this: [ 537.848537][T26510] [ 537.858744][T26510] Chain exists of: [ 537.858744][T26510] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 537.858744][T26510] [ 537.872546][T26510] Possible unsafe locking scenario: [ 537.872546][T26510] [ 537.879974][T26510] CPU0 CPU1 [ 537.885318][T26510] ---- ---- [ 537.890664][T26510] lock(&nr_node->node_lock); [ 537.895410][T26510] lock(nr_node_list_lock); [ 537.902501][T26510] lock(&nr_node->node_lock); [ 537.909772][T26510] lock(nr_neigh_list_lock); [ 537.914433][T26510] [ 537.914433][T26510] *** DEADLOCK *** [ 537.914433][T26510] [ 537.922561][T26510] 2 locks held by syz.3.6293/26510: [ 537.927748][T26510] #0: ffffffff8f427238 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 537.937230][T26510] #1: ffff888033581870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 537.946881][T26510] [ 537.946881][T26510] stack backtrace: [ 537.952765][T26510] CPU: 1 UID: 0 PID: 26510 Comm: syz.3.6293 Not tainted syzkaller #0 PREEMPT(full) [ 537.952784][T26510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.952794][T26510] Call Trace: [ 537.952801][T26510] [ 537.952809][T26510] dump_stack_lvl+0x189/0x250 [ 537.952833][T26510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.952852][T26510] ? __pfx__printk+0x10/0x10 [ 537.952866][T26510] ? stack_trace_save+0x9c/0xe0 [ 537.952889][T26510] print_circular_bug+0x2ee/0x310 [ 537.952909][T26510] check_noncircular+0x134/0x160 [ 537.952928][T26510] validate_chain+0xb9b/0x2140 [ 537.952953][T26510] __lock_acquire+0xab9/0xd20 [ 537.952970][T26510] ? nr_rt_ioctl+0x390/0xd50 [ 537.952984][T26510] lock_acquire+0x120/0x360 [ 537.952997][T26510] ? nr_rt_ioctl+0x390/0xd50 [ 537.953013][T26510] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.953033][T26510] ? nr_rt_ioctl+0x390/0xd50 [ 537.953047][T26510] _raw_spin_lock_bh+0x36/0x50 [ 537.953063][T26510] ? nr_rt_ioctl+0x390/0xd50 [ 537.953078][T26510] nr_rt_ioctl+0x390/0xd50 [ 537.953097][T26510] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 537.953110][T26510] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.953131][T26510] ? apparmor_capable+0x137/0x1b0 [ 537.953148][T26510] ? capable+0x89/0xe0 [ 537.953163][T26510] ? nr_ioctl+0x1b1/0x3b0 [ 537.953185][T26510] sock_do_ioctl+0xdc/0x300 [ 537.953203][T26510] ? __pfx_sock_do_ioctl+0x10/0x10 [ 537.953225][T26510] sock_ioctl+0x576/0x790 [ 537.953241][T26510] ? __pfx_sock_ioctl+0x10/0x10 [ 537.953258][T26510] ? __fget_files+0x3a0/0x420 [ 537.953271][T26510] ? __fget_files+0x2a/0x420 [ 537.953284][T26510] ? bpf_lsm_file_ioctl+0x9/0x20 [ 537.953301][T26510] ? __pfx_sock_ioctl+0x10/0x10 [ 537.953316][T26510] __se_sys_ioctl+0xfc/0x170 [ 537.953334][T26510] do_syscall_64+0xfa/0xfa0 [ 537.953351][T26510] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.953368][T26510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.953382][T26510] ? clear_bhb_loop+0x60/0xb0 [ 537.953398][T26510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.953413][T26510] RIP: 0033:0x7fabc818efc9 [ 537.953433][T26510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.953447][T26510] RSP: 002b:00007fabc63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.953463][T26510] RAX: ffffffffffffffda RBX: 00007fabc83e5fa0 RCX: 00007fabc818efc9 [ 537.953474][T26510] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 537.953484][T26510] RBP: 00007fabc8211f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.953494][T26510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.953503][T26510] R13: 00007fabc83e6038 R14: 00007fabc83e5fa0 R15: 00007ffdcf54b928 [ 537.953520][T26510] [ 538.540539][T15606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.587093][T15606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 538.723407][T15606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.733895][T15606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 538.831999][T15606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.842665][T15606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 538.900091][T15606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.910437][T15606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 538.969228][T15594] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 538.982355][T15594] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 539.002400][T15594] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 539.053796][T15606] bond10 (unregistering): (slave ip6gretap1): Releasing backup interface [ 539.062550][T15606] bond10 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 7a:8a:ec:31:1b:5c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 539.146963][T15606] bond7 (unregistering): (slave gretap2): Releasing active interface [ 539.157998][T15606] bond11 (unregistering): (slave gretap3): Releasing active interface [ 539.335188][T15606] bond7 (unregistering): (slave bridge2): Releasing active interface [ 539.680834][T15606] bond10 (unregistering): (slave macvlan3): Releasing backup interface [ 539.692734][T15606] bond0 (unregistering): Released all slaves [ 539.776237][T15606] bond1 (unregistering): Released all slaves [ 539.857468][T15606] bond2 (unregistering): Released all slaves [ 539.939875][T15606] bond3 (unregistering): Released all slaves [ 540.022158][T15606] bond4 (unregistering): Released all slaves [ 540.104606][T15606] bond5 (unregistering): Released all slaves [ 540.185395][T15606] bond6 (unregistering): Released all slaves [ 540.194093][T15606] bond7 (unregistering): Released all slaves [ 540.203985][T15606] bond8 (unregistering): Released all slaves [ 540.213352][T15606] bond9 (unregistering): Released all slaves [ 540.225718][T15606] bond10 (unregistering): Released all slaves [ 540.235444][T15606] bond11 (unregistering): Released all slaves [ 540.246037][T15594] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 19999 - 0 [ 540.288126][T15606] tipc: Left network mode [ 540.438436][T15606] hsr_slave_0: left promiscuous mode [ 540.444098][T15606] hsr_slave_1: left promiscuous mode [ 540.449953][T15606] batman_adv: batadv0: Removing interface: team0 [ 540.459922][T15606] vlan0: left allmulticast mode [ 540.464780][T15606] veth0_vlan: left allmulticast mode [ 540.470250][T15606] vlan0: left promiscuous mode [ 540.475543][T15606] veth1_macvtap: left promiscuous mode [ 540.481128][T15606] veth0_macvtap: left promiscuous mode [ 540.486802][T15606] veth1_vlan: left promiscuous mode [ 540.492075][T15606] veth0_vlan: left promiscuous mode [ 540.525136][T15606] pim6reg527 (unregistering): left allmulticast mode [ 541.039718][T25399] hsr0 speed is unknown, defaulting to 1000 [ 541.045626][T25399] infiniband syz1: ib_query_port failed (-19) [ 541.371089][T15606] IPVS: stop unused estimator thread 0... [ 541.444640][T15606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.455117][T15606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 541.481819][T15606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.492161][T15606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 541.551039][T15606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.561430][T15606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 541.610454][T15606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.620816][T15606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 541.683879][ T154] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.694933][ T154] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.705817][ T154] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.717011][ T154] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.728466][T15606] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.780934][T15606] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.821229][T15606] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.875311][T15606] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.944360][ T154] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.955671][ T154] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.967415][ T154] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.978553][T14311] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.989753][T15606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.041450][T15606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.091084][T15606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.141656][T15606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.194203][ T154] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 19999 - 0 [ 542.205436][ T154] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 19999 - 0 [ 542.216581][ T154] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 19999 - 0 [ 542.228210][ T154] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 19999 - 0 [ 542.236953][T15606] bridge_slave_1: left allmulticast mode [ 542.242587][T15606] bridge_slave_1: left promiscuous mode [ 542.248682][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.256998][T15606] bridge_slave_0: left allmulticast mode [ 542.262617][T15606] bridge_slave_0: left promiscuous mode [ 542.268349][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.276674][T15606] bridge_slave_1: left allmulticast mode [ 542.282551][T15606] bridge_slave_1: left promiscuous mode [ 542.288441][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.296369][T15606] bridge_slave_0: left allmulticast mode [ 542.302848][T15606] bridge_slave_0: left promiscuous mode [ 542.308909][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.317668][T15606] bridge_slave_1: left allmulticast mode [ 542.323284][T15606] bridge_slave_1: left promiscuous mode [ 542.329034][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.337478][T15606] bridge_slave_0: left allmulticast mode [ 542.343099][T15606] bridge_slave_0: left promiscuous mode [ 542.349107][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.357863][T15606] bridge_slave_1: left allmulticast mode [ 542.363481][T15606] bridge_slave_1: left promiscuous mode [ 542.369457][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.378201][T15606] bridge_slave_0: left allmulticast mode [ 542.383847][T15606] bridge_slave_0: left promiscuous mode [ 542.389732][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.499177][T15606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.509118][T15606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.518662][T15606] bond0 (unregistering): Released all slaves [ 542.550186][T15606] bond2 (unregistering): (slave geneve2): Releasing active interface [ 542.615274][T15606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.625647][T15606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.635208][T15606] bond0 (unregistering): Released all slaves [ 542.644699][T15606] bond1 (unregistering): Released all slaves [ 542.653452][T15606] bond2 (unregistering): Released all slaves [ 542.663307][T15606] bond3 (unregistering): (slave veth5): Releasing backup interface [ 542.672274][T15606] bond3 (unregistering): Released all slaves [ 542.735994][T15606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.746347][T15606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.756073][T15606] bond0 (unregistering): Released all slaves [ 542.825395][T15606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.835831][T15606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.845329][T15606] bond0 (unregistering): Released all slaves [ 543.371100][T15606] hsr_slave_0: left promiscuous mode [ 543.377243][T15606] hsr_slave_1: left promiscuous mode [ 543.383047][T15606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.402844][T15606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.412941][T15606] hsr_slave_0: left promiscuous mode [ 543.419440][T15606] hsr_slave_1: left promiscuous mode [ 543.425034][T15606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.432735][T15606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.440380][T15606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.447965][T15606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.458497][T15606] hsr_slave_0: left promiscuous mode [ 543.464134][T15606] hsr_slave_1: left promiscuous mode [ 543.470020][T15606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.477458][T15606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.484951][T15606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.492512][T15606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.503003][T15606] hsr_slave_0: left promiscuous mode [ 543.508910][T15606] hsr_slave_1: left promiscuous mode [ 543.514501][T15606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.522084][T15606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.529821][T15606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.537815][T15606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.553529][T15606] veth1_macvtap: left promiscuous mode [ 543.559089][T15606] veth0_macvtap: left promiscuous mode [ 543.564578][T15606] veth1_vlan: left promiscuous mode [ 543.569867][T15606] veth0_vlan: left promiscuous mode [ 543.575612][T15606] veth1_macvtap: left promiscuous mode [ 543.581207][T15606] veth0_macvtap: left promiscuous mode [ 543.586899][T15606] veth1_vlan: left promiscuous mode [ 543.592135][T15606] veth0_vlan: left promiscuous mode [ 543.598145][T15606] veth1_macvtap: left promiscuous mode [ 543.603605][T15606] veth0_macvtap: left promiscuous mode [ 543.609151][T15606] veth1_vlan: left promiscuous mode [ 543.614359][T15606] veth0_vlan: left promiscuous mode [ 543.811857][T15606] team0 (unregistering): Port device team_slave_1 removed [ 543.832400][T15606] team0 (unregistering): Port device team_slave_0 removed [ 544.000558][T15606] team0 (unregistering): Port device team_slave_1 removed [ 544.019716][T15606] team0 (unregistering): Port device team_slave_0 removed [ 544.175231][T15606] team0 (unregistering): Port device team_slave_1 removed [ 544.199215][T15606] team0 (unregistering): Port device team_slave_0 removed [ 544.345768][T15606] team0 (unregistering): Port device team_slave_1 removed [ 544.365917][T15606] team0 (unregistering): Port device team_slave_0 removed [ 545.227584][T15606] IPVS: stop unused estimator thread 0...