last executing test programs: 6.224582076s ago: executing program 3 (id=1278): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "48000000000000e7"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 4.6726999s ago: executing program 2 (id=1291): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESOCT, @ANYRESDEC=r1], 0x38, 0x40044}}], 0x1, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) 4.568942995s ago: executing program 4 (id=1292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) 4.382850085s ago: executing program 2 (id=1295): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x6, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xa, 0xc}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0xc0956febbce12c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept4(r1, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000003c0)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c004}, 0x8090) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xc8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xb9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendto$inet6(r1, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x2, 0x2}}) socket$rxrpc(0x21, 0x2, 0x2) unshare(0x6a040000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)="77ab7fc334b617a3c71df5730b1113ebb02042f732e57a45b0a3fe7d8831f3767611d559aea6847e75188a366cc7f4ffa38663106a5637208942e6ecd0d3c0bb8aa05c448bfa6c4faf8c59e2690ef6416e9ee7984a95bb5481bd8f221459853640b5bc448923a950a0d9d328ab114436c807102432174c7daea1ee23e1eac70dfba5f2aa92f7ab81ca77bbb116366194ffb64f5d7a9b84dfce43efac3fbd84e9af204b3c7257fb054877aaf6c6c26e0495cdb4c211f831d1d5e92f52849d9469ae05066b495cd49fe78a431da6e213d87ec0623ba55573959a282544aebf001711f8f44396d4236a2bf9f5732c", 0xed}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000001c0)="bfd6f22ac86afd279fd89a0cb8dbe7d8b6dd94449e1a7a398adbbef8ef0c9c169d28b2f60498608cf6070000001ab647c502e4828fa87c6eb1f6bc5321bb491476ca37dd9d822411bb92091fbd2c9559196d918abd80c9d8cd553e7d229c73dd370553f7e3b0e6f2db7db88ca1656ec684f98fef4a00c6342bb240c768ac33534fe133a0540a3b72b11915127661a0461a16582591c4cc8efb9b9d29e0efd29392e2000000000000000000000004000000", 0xb1, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001200010127a68c7f11672527a400000008000000060000000800e88004004380"], 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x54) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038b364dd8c3f71504e7c340d880a59c5d8cab342a3e5aaff1ac200d1814adac395c080e500"], 0x68) 4.367420346s ago: executing program 1 (id=1296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x30000005) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x43, r5}, 0x38) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6b, 0x61}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044085}, 0xd1) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)={'veth1_to_team\x00'}) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f00000000c0)={0x97, {0x2, 0x6eb, 0x10000000, 0x81, 0x3}}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f00000001c0)=@random="c776e292e9ff187f2526", 0xa, 0x2) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800900002801f0004000000000045af001c00630000401190780a010104ac1414bb4e244e2300089078"], 0x2a) 4.366044589s ago: executing program 4 (id=1297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 4.229959238s ago: executing program 3 (id=1298): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) (async, rerun: 64) r2 = socket(0x1, 0x2, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000280)=@tcp=r2, 0x2}, 0x20) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) (rerun: 64) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x80) 4.00635254s ago: executing program 4 (id=1300): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) 3.725664415s ago: executing program 0 (id=1301): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {}, 0x20}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20000) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) (async) sendmsg$can_j1939(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000100)={r5, &(0x7f0000000000)='{\n\x00', 0x8081, &(0x7f0000000040)={@_ha_fsid={[0x4, 0xc]}, {0x401, 0x101, 0xf4dc4049}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfff}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000100)={r5, &(0x7f0000000000)='{\n\x00', 0x8081, &(0x7f0000000040)={@_ha_fsid={[0x4, 0xc]}, {0x401, 0x101, 0xf4dc4049}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) 3.641520883s ago: executing program 4 (id=1302): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 3.594760169s ago: executing program 1 (id=1303): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xc, 0x4) (async) recvmmsg(r0, 0x0, 0x0, 0x40004020, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x20008080) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xfe32}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000094000100ffffffff6a00000000000000"], 0x0, 0xf}, 0x94) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xa7, 0x9, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x80, 0x1, 0x7}}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c8ffe6744f99ce4e58b362cd5000028", @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c4) (async) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="02ba9e26daa00823000000000000000186dd06100004ffffffff006400000000c8bb02851eb2fe800000000000000000000000ddffa900"/66], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.328525692s ago: executing program 3 (id=1304): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002, 0x800, 0xffffffffffffffff, 0x4}, 0x50) (async) close(0xffffffffffffffff) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ppoll(&(0x7f0000000080)=[{r0, 0x1a0}], 0x1, &(0x7f0000000480), 0x0, 0x0) (async) close(0x3) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.3275299s ago: executing program 0 (id=1305): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) unshare(0x400) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) close(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80000, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, 0x0, &(0x7f0000000100)=""/7}, 0x20) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)={0x84, @loopback, 0x4e22, 0x3, 'lc\x00', 0x34, 0x80001, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0x3}}]}}]}, 0x4c}}, 0x800) 3.166653643s ago: executing program 1 (id=1306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xd0, 0x1b8, 0xd0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @empty, [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'batadv0\x00', {}, {0xff}, 0x87, 0x4, 0x3, 0x22}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0x2000010}}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xff], [0x0, 0xffffff00, 0xff, 0xff000000], 'bridge_slave_0\x00', '\x00', {}, {0xff}, 0x11, 0x80, 0x0, 0x6a}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0xf, {0xb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0xffffffffffffff95, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) 3.1122782s ago: executing program 4 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000fff818150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffff17b703000008000000b704000000000000850000000b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.00914958s ago: executing program 3 (id=1308): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x2, 0x364, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x4a, 0x8884, 'nicvf0\x00', 'wlan0\x00', 'nicvf0\x00', 'batadv_slave_0\x00', @random="7755fdd72b3e", [0x0, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x1ee, 0x236, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xaaa, 'system_u:object_r:getty_etc_t:s0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0xfffffff9, {0x6}}}}], @common=@ERROR={'ERROR\x00', 0x20, {"06561e284ea3c1ce724cb34879019747069ad758f2b8ceab6e03235a2ac1"}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x3, 0x4, 0x6006, 'veth1_to_team\x00', 'ip6_vti0\x00', 'lo\x00', 'veth1_to_hsr\x00', @remote, [0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xc5dd}}}}]}]}, 0x3dc) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000440)={'icmp\x00'}, &(0x7f0000000480)=0x1e) (async) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000004c0)={0xfff, 0x3, 0x3, 0x5a, 0x7, 0x20}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x90, "91a9eb64a72d3b8217646fa6ae7c2a2e025d73555bd89673f2be7a139f65e9abeeb943ddd5c3656daa5cd7f572ba07eb2c01a9b4c23546b6437fe73ece9d8ac54c05d9cf8e59cdd3bff303c6bcb1d7d598cccb85823116ab71fe2831aa4231b83957274db962817500a8c4957f31be1c49e5e9be0b2209d22b9f9c7dc633d344f4bcf43656d54964a8cae5e899b4f4bd"}, &(0x7f00000005c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000600)={r3, 0x22, "0791d725a1ae0b023f75ef15a71a79b751e74a8e9ddf1be2c353b68a0d2c4f9365eb"}, &(0x7f0000000640)=0x2a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000680)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x14) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000700), 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000740)={r6, 0x48, "f0477567eca6c4a72f62f800c86e08cf72ecf5085f132b7b9bac7d7634d2dac7abaf29e54589f8c548be7a3214416392b6c323ab4534dfe811df5ce71d037a015940a1fd42c16142"}, &(0x7f00000007c0)=0x50) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000800)={r4, @in={{0x2, 0x4e24, @local}}, [0x40, 0x5, 0x0, 0x7, 0x10, 0xb24, 0x7ff, 0xfffffffffffffffb, 0x75b, 0x8000, 0xffffffffffff74b9, 0x564, 0x6, 0x7, 0x3]}, &(0x7f0000000900)=0x100) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000940)=0x0) r9 = syz_open_procfs$namespace(r8, &(0x7f0000000980)='ns/uts\x00') r10 = accept4(r2, &(0x7f00000009c0)=@qipcrtr, &(0x7f0000000a40)=0x80, 0x80000) recvfrom$inet(r0, &(0x7f0000000a80)=""/46, 0x2e, 0x12002, &(0x7f0000000ac0)={0x2, 0x4e22, @empty}, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000b00)=0x0) (async) bind$llc(r10, &(0x7f0000000b40)={0x1a, 0x10e, 0x80, 0x7, 0x9, 0x53, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r10) sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r12, 0x20, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getpeername(r13, &(0x7f0000000cc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000d40)=0x80) (async, rerun: 32) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000d80)={r5, 0x9}, 0x8) (async, rerun: 32) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r14, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f00)='./cgroup.net/syz1\x00', 0x1ff) (async) ioctl$FIONCLEX(r9, 0x5450) (async) r15 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r15, 0x0, 0x2, &(0x7f0000000f40)=""/235, &(0x7f0000001040)=0xeb) 2.781177601s ago: executing program 3 (id=1309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000090) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xffffffffffffffb2, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.658399105s ago: executing program 4 (id=1310): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000002c0)={r3, &(0x7f0000000080)='syztnl0\x00', 0x10801, &(0x7f0000000180)={@align=0x8001, {0xd, 0x2, 0x5, 0x7}}, 0x49d, &(0x7f00000001c0), &(0x7f0000000280)=0x7}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x80, 0x0, 0xd1, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r6, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r6, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a040007000000b6f1ff0c0100854105001a000000000000d74619edc700006040231e93e304ad59cac20e4acd8a1220bb64e6fda632eee816"], 0x38}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001000000000000000000f900fe"], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 2.576878073s ago: executing program 0 (id=1311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fbfffffb00000000000000008500000041000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r3, 0x29, 0x24, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) unshare(0x400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000940)="ece06c49d84f57a8b8c3a1749afa51d48b852a0016e5f23dbc", 0x19}], 0x1, 0x0, 0x0, 0x1}, 0x4800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private0}, &(0x7f0000000180)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffd, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffff64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0xfffffe29, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0xff06, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) 2.570182788s ago: executing program 1 (id=1312): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) 2.415921294s ago: executing program 3 (id=1313): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000180c20000000800450000b0000000000011907864010101ac1414210000ce20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373688caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472ed41db9cdb042d2643fcbb2c5a57df67d544af6e8da"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x40880) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9, 0x2b12}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) 2.168646287s ago: executing program 1 (id=1314): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@private=0xa010100, 0x4e1f, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x6, 0x0, 0xc00000000000000, 0x0, 0x80000000, 0xffffffffffffffff, 0xffffffffffeffffa}, {0x0, 0x0, 0x0, 0x600000}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r1 = socket(0x1e, 0x4, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000140)=""/119, 0x77, 0x0, &(0x7f00000003c0)=""/50, 0x32}}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x3b, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0xfffffed3, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x840) writev(r2, &(0x7f0000000380), 0x4) 1.767095571s ago: executing program 2 (id=1315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x12, r2, 0xbef59000) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000300)=0xcf99, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000004300010025bd7000fcdbdf2502210000"], 0x14}}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000000)="f166b13d31589d77501d3370c05021177bbc1bb126b0723dbba27ed53b75b621fece5893b34d1f65f76334e99d201f96ab0a6f228eaad477e6595204d91e498b250ba238a1fbfa728eb8ee0ee64ce1fd5b74137dfcabc2ec1efb83fcd60e036e04ec7454c7790f93937dde6e299feb924f8db8f152094fcd275dd8f3032cfd1cb8d3d3b15b348098dde8a66dd5faafc86c2b97928b") 1.473205543s ago: executing program 0 (id=1316): socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) unshare(0x20000400) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x102030405060708, {}, 0x20}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x0, 0xee}, 0x1}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f00000001c0), 0x4) (async, rerun: 32) r7 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf250c000000080000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c0d0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x1b, 0x5, 0x428, 0x108, 0x0, 0xffffffff, 0x0, 0x220, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x7, @ipv6=@mcast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @icmp_id=0x64}}}, {{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x32}, 0xff000000, 0xffffff00, '\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x29, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x8], 0x1}}, @common=@addrtype={{0x30}, {0x449, 0x80, 0x1, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x11, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2, @icmp_id=0x67, @icmp_id=0x68}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x3e}, 0xff, 0x0, 'dummy0\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x2, 0x20}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @loopback, @multicast1, @gre_key=0xb9e5, @port=0x4e22}}}}, {{@ip={@broadcast, @loopback, 0xffffffff, 0xff000000, 'veth0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x5e, 0x0, 0x20}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @rand_addr=0x64010102, @private=0xa010102, @gre_key=0x3, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) (async) sendfile(r3, r6, 0x0, 0xffffffff000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x1360, 0xffffffff, 0x0, 0x140, 0x1d8, 0xffffffff, 0xffffffff, 0x12c8, 0x12c8, 0x12c8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x4, 0x6}, {0x86, 0x401}, {0xfb, 0x9}, 0x6}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4e20, 0x4e21, 0x4e23, 0x4e21, 0xa, 0x6b65, 0x5, 0x6, 0xf16}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0xff000000, 'team0\x00', 'team0\x00', {}, {0xff}, 0x5e, 0x1, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x10c8, 0x10f0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "44a2"}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13c0) r10 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r10, &(0x7f0000000380)='k', 0x1, 0xc) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180009f3ffdf48f91bc0ad9adba2ad137c18ffff00"/36], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 1.410015819s ago: executing program 1 (id=1317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r4], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r4], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x4040) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x8000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a80900300003003000000060ce902d"], 0xfdef) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a80900300003003000000060ce902d"], 0xfdef) 1.269497918s ago: executing program 2 (id=1318): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8000) 1.070532528s ago: executing program 0 (id=1319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 892.459286ms ago: executing program 2 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000f8ff18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffff17b703000008000000b704000000000000850000000b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 732.319243ms ago: executing program 2 (id=1321): getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2, 0x3, [0x7, 0x0, 0x6]}, &(0x7f0000000040)=0xe) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000080)={r0, @in={{0x2, 0x4e21, @local}}}, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000140)={0x1, @le_set_adv_param={{0x2006, 0xf}, {0x0, 0x37, 0x1, 0x3, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}}}, 0x13) (async) write$bt_hci(r1, &(0x7f0000000180)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0xff2c, 0x2, 0x8, 0x2, 0xd0, 0x6}}}, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={r1, &(0x7f0000000200)='%-*\x00', 0x400, &(0x7f0000000240)={@align=0x2, {0xf9a2, 0x6, 0x6, 0x61}}, 0x6, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x80e}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c1}, 0x40000) (async) sendmsg$tipc(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000440)="10c5bffc3043bac683c3b8ebd142a72649ebc27aef0346e0f3bdc9c9f18172bc5c6f8556fc0716bf509b7a41ad0815f9c913fd3e7ba2982b529d816f265e2ff3e7305aff6ce44d06324fd25e151701fdf741ffb6f891b6761dd63d62499dfb54393eee6bcac2a9fc331439dd1b1541f3be991d11cf9ee3d4af3b1e8c2764e38ca580369b1e4a2281bef3662b4995600013d0fef66f277f8acd92143bde81d740a2030778beed7f4a04331c996bf140d2ef6e273f1f168f2897ca257b", 0xbc}, {&(0x7f0000000500)="45759ac8e334b3", 0x7}, {&(0x7f0000000540)="3017590c4be07f2d2485dffd9c9ed17678af8011484caf5d611f330238c43b4c06b5cd249c62597899ad145bba879e49fc0af16e4418f91ea3347efd0a9267e2f441ed3f918052c3c1d5666f97c125a66d644a6a8597a8f156e40b42f6dee4c29614883b1583c8adb320865f268dc1f1110b1a9b51c578398df22ff1fa2690a896b31c2ccaafba630d129560fb30a05ece40a5a0458bc1cbfa9e9d1b057cb1830752fc0c12e92e25d5a953c47c992c44d0e8b7f756c384961d", 0xb9}, {&(0x7f0000000600)="3e57c1b9ed9204cb7561174b6e8037f99d8001e614af4463b2fa291b6f741e6ce78f2a7ea98f892cdb7f13ebb51d692da7b132c1e3c011002ffbd5833613df383d72b26c66a0880da4cefaef900d2d7cf8213d38fd71861e442707be1a3be3519b21798151bc3eec872e8c0439847b2e09821e15c51fa6100d342bd51d2042987fb872ee4bc0b4c01e9bf040d1a16cde7f9f3b931dce7d361afdbc747a9358d9f8261d59bd2631c0691634628c172d47a9a1a9b082914e8d9a48dd71f026c4e865282f8fd97559a6fd454d846fdf69847da70d19a2cb5007dd87bf7f220a43d91bc1b46316ba12e7476bd4ad8d748ea061e66f6f4dd0447e7fce469eab2ca55bdb3beac7be1295bf0d4f8d97935b4cb5896aa95e3b5cb963fa684848a56eed1c46a4b350b873c45c65b0f26b1a266caf235dad01bc0bd826282fb952da21e82bd7a3e447fbc1db264222b96fa147e37e1c1122ed8bf3c8ecf130737a252c2b789e7adf319e29bb1b7f453bd8bc11aa0bd025ef0c958d9ac0c3c8d08f0bb24269ad548752315f8b9750e0249afc5c405827a8503d14c61cb2c764108b08b5d61f9873596bab77dbc916992be0fa5a90f577c99c95093d387a0c19739681c01a660be5eeb06550b5ebf0f3c1761f04827f6f04722b99cae39dbef663f1b9eddc7317e58a025b900be288304b81558879da9a416821c76025987ff05c2b9199b6847f46a80683d50b5901487cf9bf318bcce89c2dfbd3d9aee68485891a8ac24d47db19123f1258898412b5cb565a3bcfe84de70281915d1309e7277cec0ab742722bd5e1b454b818ea1057558ffb2de664c503e8b52fb2b932eac6b9d740b33822d5ddca108090bf3d4d087be2fb5d26c9f99f60f4e0e38c6e16a960aa4cda7e919afba4999b1fba763fd7b486ad75dfea1ae0156b13425fbb9325635aaddc957dcbd914b6dd9cd4c080c254a1983631ce40d6ab56dd31961ff11e57461bddab2c17f14aee524729bfa8991ead1afdee23e92afab4d00c60c2201bc8de97619c0138e1f2bdec4e8a0138ae37359325cc5c135279a7d1d9c625e044a5c515ae617200b89b2548f9218eaeb452e943bfe0602629f72b97d262a5a1deba6c208419f1f5182b06702c7fab2cd209f8faf447cbeee933b50b625f670bd235ee609d14ebaa014a193ca4455b75bcd40a619858a3599b442e84983698b957f500bba189c1a0afcba6c8c571c681775e4c328c68c18c7e3b056d39f3baa596512151e87a6d6eacf01867a43ff21e09157bd1b98aa1ef48fd60a57446e2a6f9298ea895a0b68eff27112def69a2de4c9404a2915ab18eeec7a0aaa689c5f0f43c7acec4aed04920074a7f984d16642cf61458c6e87c5106fde07ced07ed88792929605d669b77717d2c135ca4b0a245b5c53ad7bac4a9891f078408005266493940ea694465d06cbe241eaca3ddbe0c249f20a6a3d93b9d4ea46280742da8224ad4a95d26eb4514d95c7b4dbd52996255da71a30489f56743c5d053ca3da28fc3c3e6d7685fb078ec8e461645e79856548b77da77af2c1223127a613cc54bd2e766a3171dd8ea02a2c8048ff138e13651b531476e725dcdab9e8076abf64b0b92e90f80d344db9ebe4e5df6bd066f71ecab5d20d1c754712d81767aae27199bf61f32132cb677d1fc5119bd5f563afb8825bc8efa66ba76b556c3e62153689724d5b8dab3308e58fe473069e3d7ce6cd638d7f58ea76fa914e72d0c0664bfc5d742eed6588378f59f99ff366447c43cffd79e3f48817c8ddd906e731737d6069f63a1cf54869ebe40fda358c98114baebd2771c38853b7bc39b55b5cc94fc1652407dccd2baca868ca0ec8c401dc7c6cf65d198800f1640c8aa68dc0fde6e6241ec3b0ea43d6ae82530145a5503ecdac556e8b3337bb1291fbd680c3c252c3d1c6939d94c7868c8376b0c9bf0ea799ebc2a2583784401e12e399a673593169ba271394a38638a89d31bcbff22d8c855048cdd564cc12e0e54cab1bd5dc9d9a5604d49720c7bc99f8a6a25bbd624e3eda557b88bb78551bb0080e9505618ae30fc44c7454f9a15861d7d1b34aca3cbc7e35661219c3fafca5e6b812423896d1f8d28205262fd5360c17b8c6dfe256dd540a8fc797848cb7656440d46190a40eecba76d3ff6d680a39e0a7fd815f5846b0b42f5fc80e374655feaa32d1eba755134ba9625ec81a543c64234a3cb31c0f22aaa07664823c1c866088ef479c896f0f02fc33834f881936cdc060d8cb22324277bc4f6d34ec68aefa93814adbc4c251bafbf2d1803e76f4d3e6a0beafb3150dd3c0fddb28715b66d99eb80c9980cc37265874b6fbe59db3ea98758b9cef66c7514153dd42ecbce4fa36f953dc5688b19ea6445b5fc3a1a9d9ae1f6a5f51f2d30d727c121388decb205cb618021f6cb53496fd563a288f3830410db88374effe52d8b35b8ad67c0259df4c72af8ae5eb0f2d7356677de6d18bc613f2a93fb5acbeb48f21ab66e81e137f63b9517c163f473bc282fef19c7c770026c9c5306c914873667a5b14d36fa62f0a02c7e8ca840c31ca82c0f3c73ad8f548604ec264c890caf25cd5c2ab92bf34f3b078bf6973519815fe9c1196161663ff23b3e0595c88f6f0bb9b0865e24db4f1d4463b9c287c94b197c710d068793020296c17638f792ccf7b2537faa0ba3f4369fe61184915a08e1987d0ea1575a262c9d905fdc2944fe085b86fe2185a786963627313758b122ba7a3e16f0fe63fec4982aa02de2019d97c067265ad806a71d1cd1333c9669b173398901c557bea0bb4cfabfb3f579cde7196584b62d1e6b466f9fd3f1711f78c49842363adcf09d17a0f34eb2eb8d4923f794863238c97abf0804385ba7145d546ee356f9eb07f3cc5f790567baacfe73ad81ab1948b1c059854a84020ddbcd8501bb376bb316969d43f74570ffa2e5b9e7dcd99ade2fb4780f720bb474aa5e112221bcec35b7614e61746036403192f9a8b53770a66eac58fd7c2dd03d35cf66e23a532468a4b36513c9cec4057cc6ccfcf1d76cf02ac021bc0c13abf28eb8b879579645ed3f46bf6760d83b2f98c05105594575aae54e9ff433814f0cec7c3201dc1a6bfe8bb41249594b58b31da8f50841c9059a3778ab81e54fbbdda22eb59ba8d67499421191184e221078a54663fb4f406f5e433f695458be32187dc43da57340c260b4762514650b4905865d4cf2641185dd4b86dbdd087e679d4fd3ff2031ae24cc19c020b528316933ced67f8dfbcf08feb76974ee564459b02a82621536752e1e598d4990d34a693099118533687c5c08a8ddc195f256f563d6d74b31c64af257406edf0b0accd69fbd9c79c890a39e242cf3f66622d854a9fd59c2e9c17cffe1a9da49ac03454158739c751730704d865944e0e3a0710f882225f3dc386485fc45b0c40de2599cb7a2b38515a311c1393c7b4d4a5df80e54b1f8aa131ebba7dbe9d889defac949df7cf836e2873a3f474da9f976021cd322ff362466164750989d390e6cf71e474ea99ae1091b52e1178d78b17729d3b36b8187dee109f198c9846fddfab335e77616851fc4a494c66ae64bad4d459d64fa2740d88b085410e8db101f057e3561693be79466478b872a7336ddf1e864c8d3e44210088fc027c69e72b56eae0939d27e119cc79aeca34d8a9ffde864c5bb88a95daac869a3584da6c07eb5e4a54183adfacedfb7f882bcd10076e3446573ebfd120a5c1e898ea517f9536f6b899300a870074394dbc5b1a2025f943006531d25f99e304f9b24631df688d8281071b16ddb0ccfb5d343b4b0bdbf361997cd4616b3d6a6d18f47799b8bdcc2aa943840e7aaa05f4b8f62158842d5050cca077eaee2db7135aca2e3fbb3bcc245c72150e9cb32163e82387a59bef61a7fa310d606621339a06040215e4cdf115065024c2cd38c38267e9b7e172464117b0241d4f34986fcde1093521ff99507999e5081a31d4919540eef48618691045539130398f1823c3dbb25c93b054f2b14f8dd6e19473e5f49fe1f6b0608c70e2de022b697bbb70f085c4d58c3afb463f4adca41e6f64f0edaef80a4d3819e86344c429157ac1b008edbc59b7df1b59e15ad9942c17c9f062c2687460f8ce7aab3c53abd820b863db9c3fa1e3eeb9333de9a37ec2fab2c06adaba4cd41df8c7b2e1e744888b80cd319a82a842390c8ca03f0378be38f7b66496fb3746d91f1fe9bff3e3699a99462dc4a700bf0d2efd94b4e227b1b23fa0be28332fb28db965c34544f4375dca76b7ac37f7d2a1dccd8731c5ab28a8b77b74b629a7d9cac973d095fbab444d6e7abf4cd5a8556a0035fdbc5e2bdcd2a2b0e361d57e1fc186f98236cc14fb7c7845f60a4a78d816ff389229d88bc9e79fb9d8f1fd3b241ec7c79fec8645ef5f8284750e1c7a4dbe3027a431557393cb7805ba4cfc733a471fcf90058a7f281be815863ead85cb4f2861cbc95b57e78eb13628c150539d25ae39d03dd807d85d1852fc754ed26b9c5fb96b3ed97b8ce1ed3202a5c1084bd3cd4f7f89a23e04ad97496a906f84a8ec094702070a121435698c4cb9c64fc849a730d3076dc349dedec9af0d815cb6dc0015d882e00e6a7a1ed283ea1fb120e50661fdf9f6b4875b95449a707e750f2b0b3be6da605bd1f82ac5d3ebe78303aea54e570416271666031484693dc3508796f42d2429fa15ee435323b56e3e2c82ba60f29e24390a0a89b61bad9005394b8dbb45f45bdab1beadec2e2991f004b778a732c33738e1eb1b39bfecf4131fe21fecdde0114903282314fc6ec5fdec940f47e7d84e94b82c3b35e6c3722e62c3978959851d94b0fcbd7d667523239e346f6db56cf994d6ffb28511db1de413e2285f896e04b9ac5c331ce2de7bff32e80d32876d6a42e74862ddc7d77b4d433719fc8a4c3db09d69ae74e862aaacccb2c46c8bd6301f8ce5e57279f9037e1ee3a3989bac9b99db03df418c0781e2558556ab522c2ec83f12edfa6ec38c03afea28345b9168b9af4a1bf01f54bd429307e2ce2dde1ee8d762b55c60669429bc003b457d6a7cd4501e2c77bb8fa0749c7f9780a411078394bf346127cab62d3b4b704f25d4c5d5eb49ab47de4edd5282f2a151009af883387c356588561164a1e1750fe8f87e6fe199568fefe994ddedd955e072c99b55866192e261d2172b67fcd9fcf435f42b775add1e97cc4181eff9cd19b025aa09112932a387b0fdfb4a9d6cf1979de8c37c76a98b871f063202ebb9b84c0fa3f4193ee0b82b0f58b9bd630fa163dce0fe0e5f4e1d1ab44ab5845306b9f214cb65dc758f24a395e865fbe5249035e72e179e4e1c0e33da5ca0a3cd2d73c673b463e6f356cbb6dad9ed8ea53eb1ea3ba7abba2c44f0a02fcbc7d76d29a7cdfddf7d67468386907ee9662e9c5ef4c527e0331e40ff021626b66c7353410e4ceb2db6b33ee7cb854cec6750ac957003941f61fda381c85b378be71241bd6e491c995d21808e45b85cc3ec7d9e3e983b70e6da8b534219516fd91513472fdc140f2f84c5f4bdeaf91dbce55574cd7304acc3a143d9c4b697d01043ae226ddc8b187f0e25f110f8bc37d17acd7db5131e1c005bc7cf0560cd19a0f2b2c334afb4cec6caae97a069788b22262412c897a85d58a71c4c53ed16f10d355dbcaae779b271992a498534d09ce2bd892bec504f0fa97c5289f2f5a9d6c9869a5b52e9fd2f8c051740d33dd941ce7082cc1ca6e1cb3d60b02a1039aa22ca0cd58bd7c62f447e8ef41cfa1cc82", 0x1000}], 0x4, &(0x7f0000001640)="159b3f40bbe6ce705cb7be94b2ba618f2f8eacb05377d1903b368fb2994d54016ebdcbad88508ca828073d3172f41ecb747f79c225c4e84dbade08bd73b3bc14a76190fb1d648974d80ad9a759f56e4605c5c665a69ce4d40bfa27fe59995254e9cad3680d38fa2f27c797aa9924954fcf571941c205850783aec815dfd5b9f1e7193b150fe6a47c148ff37998a647d7edeb5ae16af38d7fd249db6ee8e42e427d31d98233eb864052780530d59100f7a034b6133b2df18bf2eb5bf2e1c653237a9af2d7ddde8f407582cf1221ec2a75645ac85f918caa5953d7ab697d21414074cea77e5e2f87bc0dc5a4cef73c16", 0xef, 0x20000000}, 0x14040840) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000001780)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r2) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x98, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x433}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x48}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200000}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf440}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x14}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) sendto$inet6(r2, &(0x7f0000001980)="cc60f3ccb82f38de93c46384a342acca70e14a97cc673671ab1a3c05a1d5e65fa5b724bc414c56bd445db584b62ee27805e4dfe34169e62db3901d85d04af148c6d7", 0x42, 0x4000010, 0x0, 0x0) (async) r5 = openat$cgroup_subtree(r2, &(0x7f0000001a00), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001a40)={r0, @in6={{0xa, 0x4e23, 0x0, @local, 0x3}}, [0x7, 0x0, 0x1, 0x2, 0x8000000000000000, 0x9, 0x400, 0x7fffffff, 0xffff, 0x100, 0x1, 0xa, 0x6, 0x0, 0x7]}, &(0x7f0000001b40)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001b80)={r6, 0xd, "8f933b595c5f6b3c522f437add"}, &(0x7f0000001bc0)=0x15) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000001c00)=0x4, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001cc0)={r2, &(0x7f0000001c40)="770255078ee458ab1b93d1748ab7a71ddc9ea14dc0d9d742e90683cc0767", &(0x7f0000001c80)=@udp6=r2, 0x1}, 0x20) (async) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000001d00)={{0x84, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e20, 0x3, 'lc\x00', 0x10, 0x1, 0x12}, {@remote, 0x4e22, 0x10000, 0x40, 0x557a, 0x6b6}}, 0x44) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001d80)={r6, 0x1f, "2014c576c6b9bd43270418c802552a9359dbd707cc3f218627aae2185bcbdb"}, &(0x7f0000001dc0)=0x27) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001e80)={'ip6gre0\x00', &(0x7f0000001e00)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x2, 0x4, 0x2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x10, 0xffff, 0x7}}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001ec0)={0x1, 'bond0\x00', {}, 0x2}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002140)={0x101, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x8, 0x18, &(0x7f0000001f00)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x1, 0x0, 0x2, 0x5, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xd, 0xd, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x92f2}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000001fc0)='GPL\x00', 0x6, 0xa1, &(0x7f0000002000)=""/161, 0x41000, 0x19, '\x00', 0x0, @fallback=0x14, r2, 0x8, &(0x7f00000020c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002100)={0x4, 0xe, 0xaf92, 0x4abe}, 0x10, r9, r2, 0x0, &(0x7f0000002180)=[r5], 0x0, 0x10, 0x13e}, 0x94) (async) getsockopt$inet6_buf(r2, 0x29, 0x23, &(0x7f0000002280)=""/136, &(0x7f0000002340)=0x88) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000002380)={r7, 0x2}, 0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) 0s ago: executing program 0 (id=1322): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) close(r1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xa, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x2, @remote, 'pim6reg\x00'}}, 0x1e) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x2, @remote, 'pim6reg\x00'}}, 0x1e) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000041000708000000ff00000000017c0000040042802c00018010000400cab1893a20b8d2a9a795c26355f06b3314000300fe800000000000000000000000000032fd000280"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r10, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e00)=ANY=[@ANYRESHEX, @ANYRESHEX=r10, @ANYRES32, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1d}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffb}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0x8, 0xb}, {0xe, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x56fc22f5afe1433}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x48, 0x0, 0xd, 0x1a64}, {0xc, 0x2, 0x6, 0x2, 0x400, 0xcc7}, 0x7f, 0x3, 0x1981}}, @TCA_TBF_BURST={0x8, 0x6, 0x200}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc890) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0x8, 0xb}, {0xe, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x56fc22f5afe1433}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x48, 0x0, 0xd, 0x1a64}, {0xc, 0x2, 0x6, 0x2, 0x400, 0xcc7}, 0x7f, 0x3, 0x1981}}, @TCA_TBF_BURST={0x8, 0x6, 0x200}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 73.274399][ T5590] cgroup: Unknown subsys name 'net' [ 73.427718][ T5590] cgroup: Unknown subsys name 'cpuset' [ 73.436599][ T5590] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.785309][ T5590] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.926802][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.935237][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.945786][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.946814][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.955595][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.968185][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.968522][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.976517][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.986022][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.999611][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.000476][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.007374][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.015824][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.024628][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.029096][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.035454][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.044277][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.050320][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.057680][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.063506][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.071766][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.078200][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.085907][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.112453][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.129522][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.652247][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.659867][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.667234][ T5601] bridge_slave_0: entered allmulticast mode [ 78.674519][ T5601] bridge_slave_0: entered promiscuous mode [ 78.752225][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.761647][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.768849][ T5601] bridge_slave_1: entered allmulticast mode [ 78.775853][ T5601] bridge_slave_1: entered promiscuous mode [ 78.787750][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.797876][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.805509][ T5602] bridge_slave_0: entered allmulticast mode [ 78.812798][ T5602] bridge_slave_0: entered promiscuous mode [ 78.858876][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.866249][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.873462][ T5602] bridge_slave_1: entered allmulticast mode [ 78.880558][ T5602] bridge_slave_1: entered promiscuous mode [ 78.932648][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.940107][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.947936][ T5604] bridge_slave_0: entered allmulticast mode [ 78.955126][ T5604] bridge_slave_0: entered promiscuous mode [ 78.965698][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.998371][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.005747][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.012910][ T5604] bridge_slave_1: entered allmulticast mode [ 79.020124][ T5604] bridge_slave_1: entered promiscuous mode [ 79.028970][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.050380][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.081637][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.089042][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.096306][ T5603] bridge_slave_0: entered allmulticast mode [ 79.103267][ T5603] bridge_slave_0: entered promiscuous mode [ 79.112673][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.125024][ T5621] Bluetooth: hci4: command tx timeout [ 79.153351][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.160699][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.168225][ T5603] bridge_slave_1: entered allmulticast mode [ 79.175268][ T5603] bridge_slave_1: entered promiscuous mode [ 79.201583][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.210831][ T5621] Bluetooth: hci2: command tx timeout [ 79.211127][ T5621] Bluetooth: hci0: command tx timeout [ 79.216479][ T5612] Bluetooth: hci1: command tx timeout [ 79.216675][ T5612] Bluetooth: hci3: command tx timeout [ 79.227381][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.245263][ T5601] team0: Port device team_slave_0 added [ 79.268885][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.276372][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.283522][ T5600] bridge_slave_0: entered allmulticast mode [ 79.290998][ T5600] bridge_slave_0: entered promiscuous mode [ 79.311439][ T5601] team0: Port device team_slave_1 added [ 79.329440][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.341041][ T5602] team0: Port device team_slave_0 added [ 79.347287][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.354656][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.361821][ T5600] bridge_slave_1: entered allmulticast mode [ 79.369746][ T5600] bridge_slave_1: entered promiscuous mode [ 79.405624][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.416484][ T5602] team0: Port device team_slave_1 added [ 79.439965][ T5604] team0: Port device team_slave_0 added [ 79.446790][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.453775][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.480417][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.520860][ T5604] team0: Port device team_slave_1 added [ 79.531533][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.538768][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.564810][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.585301][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.592356][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.618500][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.632942][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.659289][ T5603] team0: Port device team_slave_0 added [ 79.665628][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.672687][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.698784][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.720138][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.741340][ T5603] team0: Port device team_slave_1 added [ 79.776505][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.783516][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.809764][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.842222][ T5600] team0: Port device team_slave_0 added [ 79.848739][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.856190][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.882560][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.894971][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.902332][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.928683][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.941142][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.948272][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.974210][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.005065][ T5600] team0: Port device team_slave_1 added [ 80.037090][ T5601] hsr_slave_0: entered promiscuous mode [ 80.043465][ T5601] hsr_slave_1: entered promiscuous mode [ 80.069322][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.076367][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.102440][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.118472][ T5602] hsr_slave_0: entered promiscuous mode [ 80.124899][ T5602] hsr_slave_1: entered promiscuous mode [ 80.130942][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 80.136963][ T5602] Cannot create hsr debugfs directory [ 80.146143][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.153088][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.179218][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.262025][ T5604] hsr_slave_0: entered promiscuous mode [ 80.268505][ T5604] hsr_slave_1: entered promiscuous mode [ 80.275234][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 80.280991][ T5604] Cannot create hsr debugfs directory [ 80.292544][ T5603] hsr_slave_0: entered promiscuous mode [ 80.298812][ T5603] hsr_slave_1: entered promiscuous mode [ 80.305026][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 80.310755][ T5603] Cannot create hsr debugfs directory [ 80.434854][ T5600] hsr_slave_0: entered promiscuous mode [ 80.441182][ T5600] hsr_slave_1: entered promiscuous mode [ 80.447542][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 80.453313][ T5600] Cannot create hsr debugfs directory [ 80.853000][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.865321][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.873707][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.883828][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.892048][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.902737][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.919987][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.930748][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.986503][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.997193][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.012309][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.022226][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.030420][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.042002][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.050215][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.059143][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.150612][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.160119][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.179040][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.190087][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.205356][ T5612] Bluetooth: hci4: command tx timeout [ 81.211831][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.222092][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.230225][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.240000][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.284658][ T5612] Bluetooth: hci3: command tx timeout [ 81.294177][ T50] Bluetooth: hci1: command tx timeout [ 81.294519][ T5621] Bluetooth: hci2: command tx timeout [ 81.302242][ T5612] Bluetooth: hci0: command tx timeout [ 81.361554][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.372249][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.380628][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.390561][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.413202][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.426111][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.441063][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.451349][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.461991][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.543029][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.554501][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.563450][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.571546][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.580883][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.595404][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.605936][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.613978][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.623899][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.641456][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.664356][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.671996][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.704599][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.711762][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.743567][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.776786][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.783904][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.811849][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.843394][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.850565][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.901138][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.936245][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.943451][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.981482][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.988684][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.029247][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.112124][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.123311][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.157792][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.164999][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.208078][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.215287][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.271720][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.338234][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.345444][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.408342][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.415547][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.845395][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.091668][ T5601] veth0_vlan: entered promiscuous mode [ 83.109243][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.143968][ T5601] veth1_vlan: entered promiscuous mode [ 83.282256][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.289958][ T5612] Bluetooth: hci4: command tx timeout [ 83.305258][ T5601] veth0_macvtap: entered promiscuous mode [ 83.364786][ T5602] veth0_vlan: entered promiscuous mode [ 83.370662][ T5612] Bluetooth: hci0: command tx timeout [ 83.372521][ T5621] Bluetooth: hci1: command tx timeout [ 83.376318][ T5612] Bluetooth: hci3: command tx timeout [ 83.376342][ T5612] Bluetooth: hci2: command tx timeout [ 83.392685][ T5601] veth1_macvtap: entered promiscuous mode [ 83.467899][ T5602] veth1_vlan: entered promiscuous mode [ 83.479658][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.492403][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.506975][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.541580][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.559084][ T5603] veth0_vlan: entered promiscuous mode [ 83.599703][ T5603] veth1_vlan: entered promiscuous mode [ 83.708551][ T5602] veth0_macvtap: entered promiscuous mode [ 83.722383][ T5604] veth0_vlan: entered promiscuous mode [ 83.748541][ T5602] veth1_macvtap: entered promiscuous mode [ 83.785411][ T5604] veth1_vlan: entered promiscuous mode [ 83.793867][ T5603] veth0_macvtap: entered promiscuous mode [ 83.805957][ T5762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.847101][ T5603] veth1_macvtap: entered promiscuous mode [ 83.861411][ T5762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.871213][ T5762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.896177][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.934758][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.944694][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.956566][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.973925][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.982180][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.995847][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.025340][ T5604] veth0_macvtap: entered promiscuous mode [ 84.045504][ T5604] veth1_macvtap: entered promiscuous mode [ 84.054937][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073326][ T5601] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.107856][ T5600] veth0_vlan: entered promiscuous mode [ 84.148731][ T5600] veth1_vlan: entered promiscuous mode [ 84.193969][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.222382][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.267760][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.317654][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.340921][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.369042][ T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.377714][ T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.443767][ T5600] veth0_macvtap: entered promiscuous mode [ 84.463845][ T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.466577][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.480269][ T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.510934][ T5600] veth1_macvtap: entered promiscuous mode [ 84.524344][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.535631][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.612860][ T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.633863][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.637986][ T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.701487][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.757468][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.794662][ T406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.842705][ T5807] syzkaller1: entered promiscuous mode [ 84.855175][ T5807] syzkaller1: entered allmulticast mode [ 84.868230][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.876232][ T5762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.884719][ T5762] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.913655][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.985807][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.997755][ T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.020403][ T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.045821][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119978][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.208569][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.246962][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.359765][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.366557][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.369069][ T5621] Bluetooth: hci4: command tx timeout [ 85.394964][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.407239][ T5826] netlink: 'syz.2.9': attribute type 12 has an invalid length. [ 85.445153][ T5621] Bluetooth: hci1: command tx timeout [ 85.445214][ T50] Bluetooth: hci2: command tx timeout [ 85.450642][ T5621] Bluetooth: hci3: command tx timeout [ 85.456666][ T5612] Bluetooth: hci0: command tx timeout [ 85.478469][ T5826] netlink: 'syz.2.9': attribute type 29 has an invalid length. [ 85.542252][ T5826] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9'. [ 85.601780][ T5826] netlink: 'syz.2.9': attribute type 3 has an invalid length. [ 85.630863][ T5826] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 85.651822][ T5822] Zero length message leads to an empty skb [ 85.667724][ T5826] netlink: 35 bytes leftover after parsing attributes in process `syz.2.9'. [ 85.679666][ T57] IPVS: starting estimator thread 0... [ 85.786069][ T5840] IPVS: using max 36 ests per chain, 86400 per kthread [ 85.824203][ T406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.858892][ T406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.930375][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.956016][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.026219][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.054921][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.227589][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.513952][ T5859] syzkaller0: entered promiscuous mode [ 86.527702][ T5859] syzkaller0: entered allmulticast mode [ 86.549147][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 86.753557][ T5867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 86.841494][ T9] cfg80211: failed to load regulatory.db [ 87.014296][ T5874] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 88.032157][ T5911] netlink: 564 bytes leftover after parsing attributes in process `syz.0.30'. [ 88.065500][ T5918] openvswitch: netlink: Actions may not be safe on all matching packets [ 88.110457][ T5911] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 88.466545][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 88.539063][ T5948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35'. [ 88.551659][ T5946] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 88.911016][ T5954] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 88.938103][ T5954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.149364][ T5960] syzkaller0: entered promiscuous mode [ 89.182256][ T5960] syzkaller0: entered allmulticast mode [ 89.236864][ T5960] tipc: Started in network mode [ 89.244909][ T5960] tipc: Node identity a6a270365365, cluster identity 4711 [ 89.289949][ T5960] tipc: Enabled bearer , priority 0 [ 89.314408][ T5964] trusted_key: syz.4.47 sent an empty control message without MSG_MORE. [ 89.340343][ T5957] tipc: Resetting bearer [ 89.371603][ T5957] tipc: Disabling bearer [ 89.408355][ T5970] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.618311][ T5980] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 89.771219][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 89.995474][ T5993] team0: Port device team_slave_0 removed [ 90.061377][ T5992] tipc: Started in network mode [ 90.071129][ T5992] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 90.082878][ T5992] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 90.095879][ T5992] tipc: Enabled bearer , priority 10 [ 90.104476][ T6004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.60'. [ 90.128172][ T6005] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.60'. [ 90.236264][ T6013] tipc: Started in network mode [ 90.242400][ T6013] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 90.273416][ T6013] tipc: Enabled bearer , priority 30 [ 90.313124][ T6018] netlink: zone id is out of range [ 90.329377][ T6018] netlink: zone id is out of range [ 90.343168][ T6018] netlink: zone id is out of range [ 90.387852][ T6018] netlink: zone id is out of range [ 90.402500][ T6018] netlink: zone id is out of range [ 90.411190][ T6018] netlink: zone id is out of range [ 90.417039][ T6018] netlink: zone id is out of range [ 90.422272][ T6018] netlink: zone id is out of range [ 90.451188][ T6022] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 90.520334][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 90.572296][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.581662][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.860373][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.878748][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.014206][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.118480][ T6054] xt_ecn: cannot match TCP bits for non-tcp packets [ 91.129666][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.70'. [ 91.136031][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.151778][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.227685][ T5720] tipc: Node number set to 1 [ 91.251210][ T6054] netlink: 2 bytes leftover after parsing attributes in process `syz.1.70'. [ 91.261836][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.394419][ T5720] tipc: Node number set to 10005162 [ 91.442720][ T6059] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 91.510215][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 91.532871][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 91.875508][ T6082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.977620][ T6088] netlink: 'syz.3.83': attribute type 4 has an invalid length. [ 92.031555][ T6090] netlink: 'syz.3.83': attribute type 4 has an invalid length. [ 92.269662][ T6102] gretap0: entered promiscuous mode [ 92.307531][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 92.388753][ T6115] ªªªªªª: renamed from vlan0 (while UP) [ 92.420607][ T6115] tipc: Disabling bearer [ 92.457155][ T6121] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 93.079820][ T6148] nbd: must specify a device to reconfigure [ 93.268207][ T6161] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 93.329260][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.104'. [ 93.586458][ T6170] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 93.939080][ T5616] udevd[5616]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 94.128886][ T6192] ovs-s!: entered promiscuous mode [ 94.364613][ T6209] netlink: 'syz.2.115': attribute type 15 has an invalid length. [ 94.645706][ T6168] syz.4.105 (6168) used greatest stack depth: 17704 bytes left [ 94.712193][ T6222] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 95.427962][ T6252] __nla_validate_parse: 3 callbacks suppressed [ 95.427980][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 95.498166][ T6262] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 95.683984][ T6274] netlink: 80 bytes leftover after parsing attributes in process `syz.1.132'. [ 95.754214][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 95.777066][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 95.862341][ T6262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.902979][ T6277] syzkaller0: entered promiscuous mode [ 95.909036][ T6277] syzkaller0: entered allmulticast mode [ 96.214581][ T6296] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 96.624390][ T6316] syzkaller0: entered promiscuous mode [ 96.643415][ T6316] syzkaller0: entered allmulticast mode [ 96.891682][ T6333] Bluetooth: MGMT ver 1.23 [ 96.990994][ T6326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.142'. [ 97.022329][ T6326] veth1_to_team: entered promiscuous mode [ 97.037206][ T6326] veth1_to_team: left promiscuous mode [ 97.250230][ T6348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 97.319648][ T6351] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 97.740552][ T6375] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 98.151822][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.165'. [ 98.161885][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.165'. [ 98.533636][ T6411] netlink: 'syz.2.170': attribute type 13 has an invalid length. [ 98.579338][ T6413] netlink: 'syz.1.171': attribute type 23 has an invalid length. [ 98.691546][ T6417] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 98.969460][ T5612] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 98.976652][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.318312][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 99.341755][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 99.459690][ T6456] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 99.859944][ T6473] syzkaller0: entered promiscuous mode [ 99.893846][ T6473] syzkaller0: entered allmulticast mode [ 99.976078][ T6479] Unsupported ieee802154 address type: 0 [ 100.188370][ T6491] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 100.584434][ T6502] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.678374][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.686271][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.749862][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.757127][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.765365][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.772550][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.793561][ T6503] team0: Port device bridge0 added [ 101.009293][ T6531] net_ratelimit: 2 callbacks suppressed [ 101.009309][ T6531] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.216098][ T6550] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 101.327206][ T6556] netlink: 'syz.4.208': attribute type 2 has an invalid length. [ 101.613853][ T6570] netlink: 'syz.2.211': attribute type 32 has an invalid length. [ 101.790974][ T6556] : entered promiscuous mode [ 101.791912][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 102.001340][ T6597] syz_tun: entered allmulticast mode [ 102.037367][ T6597] syz_tun: left allmulticast mode [ 102.251096][ T5268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.259993][ T6606] __nla_validate_parse: 3 callbacks suppressed [ 102.260011][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 102.589433][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 102.623265][ T6627] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 102.727909][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 103.013967][ T6630] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 103.076323][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 103.112967][ T6630] bond2 (unregistering): Released all slaves [ 103.324435][ T6652] syzkaller0: entered promiscuous mode [ 103.359836][ T6652] syzkaller0: entered allmulticast mode [ 104.052847][ T6690] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 104.158897][ T6696] FAULT_INJECTION: forcing a failure. [ 104.158897][ T6696] name failslab, interval 1, probability 0, space 0, times 1 [ 104.172048][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.2.240 Not tainted syzkaller #0 PREEMPT(full) [ 104.172071][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.172086][ T6696] Call Trace: [ 104.172093][ T6696] [ 104.172100][ T6696] dump_stack_lvl+0xe8/0x150 [ 104.172128][ T6696] should_fail_ex+0x40c/0x560 [ 104.172151][ T6696] should_failslab+0xa8/0x100 [ 104.172174][ T6696] __kmalloc_noprof+0xfe/0x720 [ 104.172194][ T6696] ? tomoyo_encode+0x2ad/0x570 [ 104.172210][ T6696] ? tomoyo_encode+0x2ad/0x570 [ 104.172233][ T6696] tomoyo_encode+0x2ad/0x570 [ 104.172255][ T6696] tomoyo_realpath_from_path+0x5fa/0x640 [ 104.172282][ T6696] ? tomoyo_path_number_perm+0x219/0x5f0 [ 104.172304][ T6696] tomoyo_path_number_perm+0x246/0x5f0 [ 104.172328][ T6696] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.172348][ T6696] ? __lock_acquire+0x683/0x2cf0 [ 104.172382][ T6696] ? hook_file_ioctl+0x1f0/0x5f0 [ 104.172423][ T6696] ? __fget_files+0x2a/0x420 [ 104.172445][ T6696] ? __fget_files+0x2a/0x420 [ 104.172463][ T6696] ? __fget_files+0x3a2/0x420 [ 104.172480][ T6696] ? __fget_files+0x2a/0x420 [ 104.172501][ T6696] security_file_ioctl+0xc3/0x2a0 [ 104.172524][ T6696] __se_sys_ioctl+0x47/0x170 [ 104.172539][ T6696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.172557][ T6696] do_syscall_64+0x174/0x580 [ 104.172578][ T6696] ? trace_irq_disable+0x3b/0x140 [ 104.172597][ T6696] ? clear_bhb_loop+0x70/0xc0 [ 104.172617][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.172632][ T6696] RIP: 0033:0x7feb5299e0d9 [ 104.172653][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.172665][ T6696] RSP: 002b:00007feb50bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.172685][ T6696] RAX: ffffffffffffffda RBX: 00007feb52c25fa0 RCX: 00007feb5299e0d9 [ 104.172696][ T6696] RDX: 0000200000000000 RSI: 0000000000008934 RDI: 0000000000000003 [ 104.172706][ T6696] RBP: 00007feb50bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.172714][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.172723][ T6696] R13: 00007feb52c26038 R14: 00007feb52c25fa0 R15: 00007ffeaa7d7a28 [ 104.172751][ T6696] [ 104.172771][ T6696] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.840424][ T6719] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 105.077134][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.248'. [ 105.109534][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.249'. [ 105.128365][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.248'. [ 105.131480][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.249'. [ 105.158778][ T6735] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 105.173846][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 105.183957][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.251'. [ 105.388453][ T6748] raw_sendmsg: syz.3.255 forgot to set AF_INET. Fix it! [ 105.781111][ T6773] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 106.330477][ T6802] netlink: 'syz.0.269': attribute type 18 has an invalid length. [ 106.405740][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.416027][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.441223][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.461626][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.622701][ T30] audit: type=1800 audit(1787070602.049:2): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.273" name="blkio.bfq.time_recursive" dev="tmpfs" ino=286 res=0 errno=0 [ 108.815697][ T6775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.102311][ T6838] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 109.168074][ T6846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.243993][ T6846] netdevsim netdevsim2 €Â: renamed from netdevsim0 [ 109.413598][ T6853] __nla_validate_parse: 1 callbacks suppressed [ 109.413629][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 109.582028][ T6859] syzkaller1: entered promiscuous mode [ 109.624074][ T6859] syzkaller1: entered allmulticast mode [ 109.976641][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 110.156472][ T6894] tipc: Started in network mode [ 110.164011][ T6894] tipc: Node identity ac14140f, cluster identity 4711 [ 110.177670][ T6894] tipc: New replicast peer: 255.255.255.255 [ 110.190564][ T6894] tipc: Enabled bearer , priority 10 [ 110.397505][ T6904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.293'. [ 110.425955][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 110.525622][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 110.570753][ T6909] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 110.585411][ T6915] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 110.597781][ T6909] netlink: 84 bytes leftover after parsing attributes in process `syz.3.295'. [ 110.610285][ T6903] IPVS: Scheduler module ip_vs_sip not found [ 110.635022][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 110.879465][ T6924] pim6reg1: entered promiscuous mode [ 110.898868][ T6924] pim6reg1: entered allmulticast mode [ 110.911812][ T6923] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 111.274570][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 111.314669][ T187] tipc: Node number set to 2886997007 [ 111.797564][ T6955] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 111.813410][ T6955] batman_adv: batadv0: Adding interface: gretap1 [ 111.833509][ T6955] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.869892][ T6955] batman_adv: batadv0: Interface activated: gretap1 [ 112.053106][ T6973] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 112.583173][ T6995] xt_hashlimit: size too large, truncated to 1048576 [ 112.604761][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'. [ 112.605514][ T6995] xt_hashlimit: max too large, truncated to 1048576 [ 112.643956][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'. [ 112.824654][ T7007] netlink: 'syz.1.322': attribute type 8 has an invalid length. [ 112.961100][ T7007] veth1_to_team: entered promiscuous mode [ 112.978194][ T7007] veth1_to_team: left promiscuous mode [ 113.313056][ T7039] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 113.957857][ T7061] pimreg9: entered allmulticast mode [ 113.972486][ T7061] netlink: 'syz.2.338': attribute type 3 has an invalid length. [ 114.139905][ T7077] xt_ecn: cannot match TCP bits for non-tcp packets [ 114.509197][ T7117] __nla_validate_parse: 5 callbacks suppressed [ 114.509240][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.342'. [ 114.532203][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.540003][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.922761][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.962913][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.098459][ T7085] batman_adv: batadv0: Interface deactivated: gretap1 [ 115.184399][ T7115] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.198623][ T7126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.348'. [ 115.209515][ T7115] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.242851][ T7115] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.550911][ T7148] xt_hashlimit: size too large, truncated to 1048576 [ 115.642569][ T7152] –: renamed from vxcan1 (while UP) [ 115.801654][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.357'. [ 116.017895][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 116.089983][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 116.100834][ T7181] batadv_slave_0: entered promiscuous mode [ 116.130049][ T7183] ip6erspan0: entered promiscuous mode [ 116.178765][ T7180] batadv_slave_0: left promiscuous mode [ 116.198456][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 116.208201][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 116.331176][ T7200] netlink: 'syz.4.367': attribute type 9 has an invalid length. [ 116.370135][ T7202] vlan2: entered promiscuous mode [ 116.376273][ T7202] bridge0: entered promiscuous mode [ 116.384650][ T7201] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 116.435597][ T7201] syzkaller0: entered promiscuous mode [ 116.441328][ T7201] syzkaller0: entered allmulticast mode [ 116.475658][ T7210] syzkaller0: entered promiscuous mode [ 116.481280][ T7210] syzkaller0: entered allmulticast mode [ 116.489713][ T7206] syzkaller0: entered promiscuous mode [ 116.495678][ T7206] syzkaller0: entered allmulticast mode [ 116.505529][ T7210] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 116.514638][ T7206] tipc: Started in network mode [ 116.526233][ T7206] tipc: Node identity 6289364b9f5, cluster identity 4711 [ 116.533665][ T7206] tipc: Enabled bearer , priority 0 [ 116.551356][ T7205] tipc: Resetting bearer [ 116.606653][ T7205] tipc: Disabling bearer [ 116.629991][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 116.669908][ T7215] netlink: 64 bytes leftover after parsing attributes in process `syz.4.372'. [ 117.233433][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 117.331743][ T7250] tipc: Enabled bearer , priority 0 [ 117.351150][ T7250] syzkaller0: entered promiscuous mode [ 117.367151][ T7250] syzkaller0: entered allmulticast mode [ 117.520920][ T7250] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 118.057861][ T7263] tipc: Resetting bearer [ 118.138427][ T7244] tipc: Resetting bearer [ 118.192935][ T7244] tipc: Disabling bearer [ 118.268106][ T7282] syz.3.387: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.285436][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.3.387 Not tainted syzkaller #0 PREEMPT(full) [ 118.285461][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.285471][ T7282] Call Trace: [ 118.285478][ T7282] [ 118.285486][ T7282] dump_stack_lvl+0xe8/0x150 [ 118.285526][ T7282] warn_alloc+0x24c/0x270 [ 118.285558][ T7282] ? __pfx_warn_alloc+0x10/0x10 [ 118.285577][ T7282] ? xskq_create+0x56/0x220 [ 118.285598][ T7282] ? xsk_setsockopt+0x52a/0x960 [ 118.285617][ T7282] ? do_syscall_64+0x174/0x580 [ 118.285637][ T7282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.285666][ T7282] __vmalloc_node_range_noprof+0x12c/0x1730 [ 118.285709][ T7282] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.285725][ T7282] ? __kmalloc_cache_noprof+0x32d/0x660 [ 118.285743][ T7282] ? __kmalloc_cache_noprof+0x150/0x660 [ 118.285760][ T7282] ? xskq_create+0x56/0x220 [ 118.285784][ T7282] xskq_create+0x148/0x220 [ 118.285806][ T7282] ? xsk_init_queue+0x8a/0xe0 [ 118.285830][ T7282] xsk_init_queue+0x8a/0xe0 [ 118.285853][ T7282] xsk_setsockopt+0x52a/0x960 [ 118.285873][ T7282] ? __fget_files+0x2a/0x420 [ 118.285894][ T7282] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.285915][ T7282] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.285943][ T7282] ? aa_sock_opt_perm+0xff/0x1a0 [ 118.285962][ T7282] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 118.285979][ T7282] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.286001][ T7282] do_sock_setsockopt+0x17c/0x1b0 [ 118.286027][ T7282] __x64_sys_setsockopt+0x13d/0x1b0 [ 118.286049][ T7282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.286067][ T7282] do_syscall_64+0x174/0x580 [ 118.286090][ T7282] ? trace_irq_disable+0x3b/0x140 [ 118.286109][ T7282] ? clear_bhb_loop+0x70/0xc0 [ 118.286130][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.286147][ T7282] RIP: 0033:0x7f2c6a99e0d9 [ 118.286172][ T7282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.286186][ T7282] RSP: 002b:00007f2c6b8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.286204][ T7282] RAX: ffffffffffffffda RBX: 00007f2c6ac25fa0 RCX: 00007f2c6a99e0d9 [ 118.286216][ T7282] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 118.286227][ T7282] RBP: 00007f2c6aa35024 R08: 0000000000000004 R09: 0000000000000000 [ 118.286237][ T7282] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.286248][ T7282] R13: 00007f2c6ac26038 R14: 00007f2c6ac25fa0 R15: 00007ffc077fe1a8 [ 118.286279][ T7282] [ 118.286353][ T7282] Mem-Info: [ 118.556753][ T7282] active_anon:5906 inactive_anon:0 isolated_anon:0 [ 118.556753][ T7282] active_file:0 inactive_file:43236 isolated_file:0 [ 118.556753][ T7282] unevictable:0 dirty:167 writeback:0 [ 118.556753][ T7282] slab_reclaimable:10302 slab_unreclaimable:94327 [ 118.556753][ T7282] mapped:29470 shmem:542 pagetables:1302 [ 118.556753][ T7282] sec_pagetables:0 bounce:0 [ 118.556753][ T7282] kernel_misc_reclaimable:0 [ 118.556753][ T7282] free:1331730 free_pcp:11841 free_cma:0 [ 118.563696][ T7288] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 118.753271][ T7282] Node 0 active_anon:24424kB inactive_anon:0kB active_file:0kB inactive_file:172740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118480kB dirty:664kB writeback:0kB shmem:2568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12420kB pagetables:4784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 118.913106][ T7282] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 118.954132][ T7282] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.043674][ T7282] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 119.069865][ T7282] Node 0 DMA32 free:1368660kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29088kB inactive_anon:0kB active_file:0kB inactive_file:172748kB unevictable:0kB writepending:788kB zspages:0kB present:3129332kB managed:2548388kB mlocked:0kB bounce:0kB free_pcp:44724kB local_pcp:20408kB free_cma:0kB [ 119.069983][ T7319] netlink: 'syz.1.394': attribute type 11 has an invalid length. [ 119.245750][ T7282] lowmem_reserve[]: 0 0 0 0 0 [ 119.267155][ T7282] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.335029][ T7282] lowmem_reserve[]: 0 0 0 0 0 [ 119.341019][ T7282] Node 1 Normal free:3942500kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.407603][ T7282] lowmem_reserve[]: 0 0 0 0 0 [ 119.421502][ T7282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 119.457992][ T7282] Node 0 DMA32: 28*4kB (UE) 547*8kB (U) 205*16kB (UM) 305*32kB (U) 50*64kB (UME) 43*128kB (UME) 18*256kB (UME) 25*512kB (UME) 8*1024kB (UM) 10*2048kB (UME) 315*4096kB (UM) = 1362552kB [ 119.494138][ T7282] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 119.557535][ T7282] Node 1 Normal: 5*4kB (UM) 6*8kB (UM) 6*16kB (UM) 10*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942500kB [ 119.618361][ T7282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.673214][ T7282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.711331][ T7282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.755701][ T7282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.796936][ T7282] 44893 total pagecache pages [ 119.808640][ T7282] 0 pages in swap cache [ 119.822420][ T7282] Free swap = 124996kB [ 119.856014][ T7282] Total swap = 124996kB [ 119.873938][ T7282] 2097051 pages RAM [ 119.897732][ T7351] __nla_validate_parse: 3 callbacks suppressed [ 119.897748][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 119.908644][ T7282] 0 pages HighMem/MovableOnly [ 119.925073][ T7282] 428275 pages reserved [ 119.928482][ T7351] bond0: ARP target 0.0.0.2 is already present [ 119.951194][ T7282] 0 pages cma reserved [ 119.961579][ T7351] bond0: option arp_ip_target: invalid value (33554432) [ 119.992848][ T7355] netlink: 96 bytes leftover after parsing attributes in process `syz.2.404'. [ 120.235789][ T7378] FAULT_INJECTION: forcing a failure. [ 120.235789][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.267920][ T7109] IPVS: starting estimator thread 0... [ 120.276085][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 120.276422][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT(full) [ 120.276442][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.276450][ T7378] Call Trace: [ 120.276457][ T7378] [ 120.276463][ T7378] dump_stack_lvl+0xe8/0x150 [ 120.276490][ T7378] should_fail_ex+0x40c/0x560 [ 120.276514][ T7378] _copy_from_user+0x2d/0xb0 [ 120.276537][ T7378] ___sys_sendmsg+0x1c6/0x360 [ 120.276557][ T7378] ? __lock_acquire+0x683/0x2cf0 [ 120.276579][ T7378] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.276756][ T7378] ? __fget_files+0x2a/0x420 [ 120.276784][ T7378] ? __fget_files+0x3a2/0x420 [ 120.276811][ T7378] __x64_sys_sendmsg+0x1b1/0x290 [ 120.276836][ T7378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.276872][ T7378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.276889][ T7378] do_syscall_64+0x174/0x580 [ 120.276910][ T7378] ? trace_irq_disable+0x3b/0x140 [ 120.276929][ T7378] ? clear_bhb_loop+0x70/0xc0 [ 120.276948][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.276964][ T7378] RIP: 0033:0x7f24c959e0d9 [ 120.276979][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.276994][ T7378] RSP: 002b:00007f24ca4fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.277012][ T7378] RAX: ffffffffffffffda RBX: 00007f24c9825fa0 RCX: 00007f24c959e0d9 [ 120.277023][ T7378] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 120.277033][ T7378] RBP: 00007f24ca4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 120.277042][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.277051][ T7378] R13: 00007f24c9826038 R14: 00007f24c9825fa0 R15: 00007ffcb5353358 [ 120.277078][ T7378] [ 120.374151][ T7383] IPVS: using max 32 ests per chain, 76800 per kthread [ 120.496410][ T7380] veth3: entered allmulticast mode [ 120.827019][ T7400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.851834][ T7413] netlink: 'syz.4.417': attribute type 5 has an invalid length. [ 121.664984][ T7438] FAULT_INJECTION: forcing a failure. [ 121.664984][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 121.677822][ T7438] CPU: 1 UID: 0 PID: 7438 Comm: syz.1.423 Not tainted syzkaller #0 PREEMPT(full) [ 121.677844][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.677852][ T7438] Call Trace: [ 121.677859][ T7438] [ 121.677866][ T7438] dump_stack_lvl+0xe8/0x150 [ 121.677893][ T7438] should_fail_ex+0x40c/0x560 [ 121.677916][ T7438] should_failslab+0xa8/0x100 [ 121.677939][ T7438] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 121.677957][ T7438] ? local_lock_release+0x9c/0x160 [ 121.677976][ T7438] ? __alloc_skb+0x1d7/0x7a0 [ 121.677991][ T7438] ? __alloc_skb+0x1d7/0x7a0 [ 121.678014][ T7438] __alloc_skb+0x1d7/0x7a0 [ 121.678035][ T7438] netlink_sendmsg+0x5d4/0xb40 [ 121.678065][ T7438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.678089][ T7438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 121.678118][ T7438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.678137][ T7438] sock_sendmsg_nosec+0x13a/0x180 [ 121.678163][ T7438] ____sys_sendmsg+0x54e/0x850 [ 121.678188][ T7438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.678216][ T7438] ? import_iovec+0x73/0xa0 [ 121.678241][ T7438] ___sys_sendmsg+0x2a5/0x360 [ 121.678259][ T7438] ? __lock_acquire+0x683/0x2cf0 [ 121.678283][ T7438] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.678335][ T7438] ? __fget_files+0x2a/0x420 [ 121.678353][ T7438] ? __fget_files+0x3a2/0x420 [ 121.678381][ T7438] __x64_sys_sendmsg+0x1b1/0x290 [ 121.678402][ T7438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.678434][ T7438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.678450][ T7438] do_syscall_64+0x174/0x580 [ 121.678473][ T7438] ? clear_bhb_loop+0x70/0xc0 [ 121.678493][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.678509][ T7438] RIP: 0033:0x7ff5c6b9e0d9 [ 121.678523][ T7438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.678535][ T7438] RSP: 002b:00007ff5c7a43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.678552][ T7438] RAX: ffffffffffffffda RBX: 00007ff5c6e25fa0 RCX: 00007ff5c6b9e0d9 [ 121.678562][ T7438] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 121.678572][ T7438] RBP: 00007ff5c7a43090 R08: 0000000000000000 R09: 0000000000000000 [ 121.678581][ T7438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.678591][ T7438] R13: 00007ff5c6e26038 R14: 00007ff5c6e25fa0 R15: 00007ffcb81f9ca8 [ 121.678618][ T7438] [ 122.149884][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.160201][ T7430] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.182274][ T7430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.221580][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.230511][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.241643][ T7430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.252289][ T7430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.269397][ T7430] veth1_vlan: left promiscuous mode [ 122.275667][ T7430] veth0_vlan: left promiscuous mode [ 122.281918][ T7430] veth0_vlan: entered promiscuous mode [ 122.289324][ T7430] veth1_vlan: entered promiscuous mode [ 122.298010][ T7430] veth1_macvtap: left promiscuous mode [ 122.306513][ T7430] veth0_macvtap: left promiscuous mode [ 122.313556][ T7430] veth0_macvtap: entered promiscuous mode [ 122.320673][ T7430] veth1_macvtap: entered promiscuous mode [ 122.330386][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.339277][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.347230][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.360006][ T7430] batman_adv: batadv0: Interface activated: gretap1 [ 122.367059][ T7430] ip6erspan0: left promiscuous mode [ 122.384698][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.402891][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.427466][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.434666][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.484324][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.491506][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.538663][ T7455] netlink: 10 bytes leftover after parsing attributes in process `syz.3.429'. [ 122.585647][ T7459] netlink: 'syz.4.427': attribute type 11 has an invalid length. [ 122.618207][ T7459] netlink: 224 bytes leftover after parsing attributes in process `syz.4.427'. [ 122.775487][ T5762] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.821469][ T5762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.831771][ T7472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 122.856917][ T5762] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.895647][ T5762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.940196][ T7474] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.434'. [ 122.952700][ T7476] netlink: 92 bytes leftover after parsing attributes in process `syz.0.433'. [ 122.977859][ T7479] FAULT_INJECTION: forcing a failure. [ 122.977859][ T7479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.991137][ T7479] CPU: 0 UID: 0 PID: 7479 Comm: syz.3.436 Not tainted syzkaller #0 PREEMPT(full) [ 122.991159][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.991168][ T7479] Call Trace: [ 122.991174][ T7479] [ 122.991181][ T7479] dump_stack_lvl+0xe8/0x150 [ 122.991209][ T7479] should_fail_ex+0x40c/0x560 [ 122.991232][ T7479] _copy_from_iter+0x1d3/0x1660 [ 122.991251][ T7479] ? kmem_cache_alloc_node_noprof+0x101/0x610 [ 122.991276][ T7479] ? rcu_is_watching+0x15/0xb0 [ 122.991297][ T7479] ? trace_kmem_cache_alloc+0x29/0xe0 [ 122.991315][ T7479] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 122.991332][ T7479] ? __pfx__copy_from_iter+0x10/0x10 [ 122.991350][ T7479] ? __alloc_skb+0x276/0x7a0 [ 122.991367][ T7479] ? __alloc_skb+0x276/0x7a0 [ 122.991388][ T7479] ? netlink_sendmsg+0x650/0xb40 [ 122.991405][ T7479] ? skb_put+0x112/0x210 [ 122.991420][ T7479] netlink_sendmsg+0x6c0/0xb40 [ 122.991443][ T7479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.991460][ T7479] ? aa_sock_msg_perm+0xf1/0x1b0 [ 122.991477][ T7479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.991491][ T7479] sock_sendmsg_nosec+0x13a/0x180 [ 122.991511][ T7479] ____sys_sendmsg+0x54e/0x850 [ 122.991530][ T7479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.991562][ T7479] ? import_iovec+0x73/0xa0 [ 122.991581][ T7479] ___sys_sendmsg+0x2a5/0x360 [ 122.991595][ T7479] ? __lock_acquire+0x683/0x2cf0 [ 122.991613][ T7479] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.991653][ T7479] ? __fget_files+0x2a/0x420 [ 122.991667][ T7479] ? __fget_files+0x3a2/0x420 [ 122.991690][ T7479] __x64_sys_sendmsg+0x1b1/0x290 [ 122.991706][ T7479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.991734][ T7479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.991747][ T7479] do_syscall_64+0x174/0x580 [ 122.991764][ T7479] ? trace_irq_disable+0x3b/0x140 [ 122.991778][ T7479] ? clear_bhb_loop+0x70/0xc0 [ 122.991793][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.991805][ T7479] RIP: 0033:0x7f2c6a99e0d9 [ 122.991818][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.991827][ T7479] RSP: 002b:00007f2c6b8e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.991842][ T7479] RAX: ffffffffffffffda RBX: 00007f2c6ac25fa0 RCX: 00007f2c6a99e0d9 [ 122.991850][ T7479] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 122.991858][ T7479] RBP: 00007f2c6b8e3090 R08: 0000000000000000 R09: 0000000000000000 [ 122.991865][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.991872][ T7479] R13: 00007f2c6ac26038 R14: 00007f2c6ac25fa0 R15: 00007ffc077fe1a8 [ 122.991893][ T7479] [ 122.995574][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 123.088125][ T7483] netlink: 'syz.1.434': attribute type 6 has an invalid length. [ 123.183608][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 123.638798][ T7494] openvswitch: netlink: Message has 5920 unknown bytes. [ 123.669013][ T7494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.848709][ T7509] atomic_op ffff88807e8a99e0 conn xmit_atomic 0000000000000000 [ 124.036355][ T7509] bond2 (unregistering): Released all slaves [ 124.117274][ T6147] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.127292][ T6147] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.137107][ T6147] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.314856][ T7530] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 124.332522][ T7529] xt_ecn: cannot match TCP bits for non-tcp packets [ 124.857767][ T7568] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 124.941940][ T7576] IPVS: set_ctl: invalid protocol: 95 0.0.0.0:20002 [ 124.959364][ T7115] IPVS: starting estimator thread 0... [ 125.058714][ T7577] IPVS: using max 36 ests per chain, 86400 per kthread [ 125.379683][ T7585] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 125.530920][ T7596] FAULT_INJECTION: forcing a failure. [ 125.530920][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 125.569433][ T7585] bond1 (unregistering): Released all slaves [ 125.581104][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.4.469 Not tainted syzkaller #0 PREEMPT(full) [ 125.581128][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.581137][ T7596] Call Trace: [ 125.581144][ T7596] [ 125.581151][ T7596] dump_stack_lvl+0xe8/0x150 [ 125.581179][ T7596] should_fail_ex+0x40c/0x560 [ 125.581204][ T7596] should_failslab+0xa8/0x100 [ 125.581228][ T7596] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 125.581249][ T7596] ? skb_clone+0x212/0x3a0 [ 125.581267][ T7596] ? skb_clone+0x212/0x3a0 [ 125.581293][ T7596] skb_clone+0x212/0x3a0 [ 125.581325][ T7596] __netlink_deliver_tap+0x413/0x860 [ 125.581357][ T7596] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.581378][ T7596] netlink_deliver_tap+0x19c/0x1b0 [ 125.581399][ T7596] netlink_unicast+0x77f/0x940 [ 125.581428][ T7596] netlink_sendmsg+0x813/0xb40 [ 125.581459][ T7596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.581483][ T7596] ? aa_sock_msg_perm+0xf1/0x1b0 [ 125.581505][ T7596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.581524][ T7596] sock_sendmsg_nosec+0x13a/0x180 [ 125.581550][ T7596] ____sys_sendmsg+0x54e/0x850 [ 125.581575][ T7596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.581603][ T7596] ? import_iovec+0x73/0xa0 [ 125.581631][ T7596] ___sys_sendmsg+0x2a5/0x360 [ 125.581650][ T7596] ? __lock_acquire+0x683/0x2cf0 [ 125.581674][ T7596] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.581728][ T7596] ? __fget_files+0x2a/0x420 [ 125.581747][ T7596] ? __fget_files+0x3a2/0x420 [ 125.581775][ T7596] __x64_sys_sendmsg+0x1b1/0x290 [ 125.581797][ T7596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.581835][ T7596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.581853][ T7596] do_syscall_64+0x174/0x580 [ 125.581874][ T7596] ? trace_irq_disable+0x3b/0x140 [ 125.581893][ T7596] ? clear_bhb_loop+0x70/0xc0 [ 125.581914][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.581930][ T7596] RIP: 0033:0x7fa8f159e0d9 [ 125.581946][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.581959][ T7596] RSP: 002b:00007fa8f2464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.581976][ T7596] RAX: ffffffffffffffda RBX: 00007fa8f1825fa0 RCX: 00007fa8f159e0d9 [ 125.581988][ T7596] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 125.581998][ T7596] RBP: 00007fa8f2464090 R08: 0000000000000000 R09: 0000000000000000 [ 125.582008][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.582017][ T7596] R13: 00007fa8f1826038 R14: 00007fa8f1825fa0 R15: 00007ffddbb3fb68 [ 125.582045][ T7596] [ 125.877706][ T7587] __nla_validate_parse: 9 callbacks suppressed [ 125.877722][ T7587] netlink: 260 bytes leftover after parsing attributes in process `syz.2.465'. [ 126.004804][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 126.045840][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 126.203648][ T7616] lo: entered allmulticast mode [ 126.335996][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 126.457537][ T7630] ovs-system: entered promiscuous mode [ 126.819251][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.486'. [ 126.869502][ T7661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.486'. [ 126.901411][ T7661] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 127.011323][ T7615] lo: left allmulticast mode [ 127.083965][ T7672] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 127.090884][ T7676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.491'. [ 127.221031][ T7691] netlink: 'syz.4.493': attribute type 3 has an invalid length. [ 127.331908][ T7672] bond1: entered promiscuous mode [ 127.358459][ T7672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.387390][ T7701] syzkaller0: left promiscuous mode [ 127.425705][ T7701] syzkaller0: left allmulticast mode [ 127.457783][ T7701] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 127.518712][ T7709] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 127.591727][ T7712] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 128.378296][ T7759] syzkaller0: entered promiscuous mode [ 128.396545][ T7759] syzkaller0: entered allmulticast mode [ 128.411308][ T7771] netlink: 'syz.2.511': attribute type 2 has an invalid length. [ 128.457094][ T7775] x_tables: duplicate underflow at hook 3 [ 129.182336][ T7821] block nbd0: Unsupported socket: should be TCP or UNIX. [ 131.424892][ T7780] syzkaller1: entered promiscuous mode [ 131.430599][ T7780] syzkaller1: entered allmulticast mode [ 131.438261][ T7787] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 131.822123][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.529'. [ 132.062743][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 132.098170][ T7890] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 132.149916][ T7889] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 132.192108][ T7891] block nbd0: Unsupported socket: should be TCP or UNIX. [ 132.897088][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.909897][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.028593][ T7953] netlink: 'syz.1.553': attribute type 11 has an invalid length. [ 133.148689][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 133.242017][ T7966] bond2: (slave bond_slave_1): Device is not our slave [ 133.249273][ T7966] bond2: option active_slave: invalid value (bond_slave_1) [ 133.260222][ T7966] bond2 (unregistering): Released all slaves [ 133.662525][ T7946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.547'. [ 134.019298][ T8006] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 134.045004][ T8006] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 134.192646][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 134.357764][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 134.389043][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 134.517358][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 134.548228][ T8038] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 134.686609][ T8050] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 134.711826][ T8050] bond1 (unregistering): Released all slaves [ 134.954012][ T8066] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.038369][ T8132] openvswitch: netlink: Duplicate key (type 0). [ 137.081038][ T8163] netlink: 4340 bytes leftover after parsing attributes in process `syz.4.603'. [ 137.114549][ T8163] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 137.308559][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 137.342662][ T8179] netlink: 'syz.2.607': attribute type 10 has an invalid length. [ 137.350989][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 137.370714][ T8179] geneve2: entered promiscuous mode [ 137.376159][ T8179] geneve2: entered allmulticast mode [ 137.401859][ T8193] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.615840][ T8206] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 137.621109][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.615'. [ 137.754725][ T8207] netlink: 128 bytes leftover after parsing attributes in process `syz.3.615'. [ 137.772596][ T8207] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 138.027618][ T8174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.249596][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 138.486818][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 138.508033][ T8247] netlink: 52 bytes leftover after parsing attributes in process `syz.0.623'. [ 138.521051][ T8245] netlink: 'syz.3.624': attribute type 4 has an invalid length. [ 138.527490][ T8249] xt_ecn: cannot match TCP bits for non-tcp packets [ 138.578569][ T8252] netlink: 'syz.3.624': attribute type 4 has an invalid length. [ 138.589143][ T8250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.626'. [ 138.816469][ T8260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.227647][ T8270] xt_ecn: cannot match TCP bits for non-tcp packets [ 139.245423][ T8268] netlink: 60 bytes leftover after parsing attributes in process `syz.2.630'. [ 139.370878][ T8268] syzkaller1: entered promiscuous mode [ 139.418620][ T8268] syzkaller1: entered allmulticast mode [ 140.193065][ T8301] netlink: 'syz.1.637': attribute type 4 has an invalid length. [ 140.234613][ T8301] netlink: 'syz.1.637': attribute type 3 has an invalid length. [ 140.349972][ T8303] bond2 (unregistering): Released all slaves [ 140.571857][ T8316] syzkaller0: entered promiscuous mode [ 140.630935][ T8316] syzkaller0: entered allmulticast mode [ 142.813049][ T8420] __nla_validate_parse: 6 callbacks suppressed [ 142.813065][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.679'. [ 142.937384][ T8428] syzkaller0: entered promiscuous mode [ 142.945051][ T8428] syzkaller0: entered allmulticast mode [ 143.011504][ T8434] veth0_macvtap: Caught tx_queue_len zero misconfig [ 144.819432][ T8373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.017584][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.695'. [ 145.222514][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 145.251876][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 145.291489][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 145.622922][ T8501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.916713][ T8514] netlink: 'syz.4.717': attribute type 32 has an invalid length. [ 146.092513][ T8523] sctp: [Deprecated]: syz.4.720 (pid 8523) Use of int in max_burst socket option. [ 146.092513][ T8523] Use struct sctp_assoc_value instead [ 146.317229][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 146.483567][ T8547] netlink: 'syz.3.729': attribute type 9 has an invalid length. [ 146.535545][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.731'. [ 146.588177][ T8555] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 147.048955][ T8576] sctp: [Deprecated]: syz.2.741 (pid 8576) Use of int in maxseg socket option. [ 147.048955][ T8576] Use struct sctp_assoc_value instead [ 147.123987][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 147.192094][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 147.278768][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 148.081729][ T8633] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.288733][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.772'. [ 148.956518][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.783'. [ 149.146525][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 149.200196][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 149.352702][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 149.795774][ T8713] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.970027][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 149.985006][ T8723] bridge_slave_1: left allmulticast mode [ 149.990718][ T8723] bridge_slave_1: left promiscuous mode [ 149.997507][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.015061][ T8723] bridge_slave_0: left allmulticast mode [ 150.021978][ T8723] bridge_slave_0: left promiscuous mode [ 150.028587][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.069303][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 150.230637][ T8732] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.273640][ T8737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.559498][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.821'. [ 151.193675][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 151.593926][ T8786] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 152.517706][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 152.589216][ T8844] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 152.631050][ T8844] bond1: entered promiscuous mode [ 152.636939][ T8844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.683914][ T8848] sctp: [Deprecated]: syz.0.860 (pid 8848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.683914][ T8848] Use struct sctp_sack_info instead [ 152.757975][ T8844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.799336][ T8844] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 152.826955][ T8844] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 152.891550][ T8844] bond1: (slave ipip0): making interface the new active one [ 152.913027][ T8844] ipip0: entered promiscuous mode [ 152.923761][ T8844] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 152.969844][ T8862] IPv6: sit1: Disabled Multicast RS [ 153.065850][ T8869] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.413980][ T8891] tipc: New replicast peer: 255.255.255.255 [ 153.445290][ T8891] tipc: Enabled bearer , priority 10 [ 153.671599][ T8904] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.794402][ T8903] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 154.075403][ T8932] xt_hashlimit: size too large, truncated to 1048576 [ 154.102290][ T8932] xt_hashlimit: invalid interval [ 154.450760][ T8954] sctp: [Deprecated]: syz.4.892 (pid 8954) Use of int in max_burst socket option deprecated. [ 154.450760][ T8954] Use struct sctp_assoc_value instead [ 154.494947][ T8954] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 154.619544][ T8954] bond1: option mode: invalid value (8) [ 154.649192][ T8954] bond1 (unregistering): Released all slaves [ 154.838368][ T8971] __nla_validate_parse: 6 callbacks suppressed [ 154.838385][ T8971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.895'. [ 154.919897][ T8964] netlink: 64 bytes leftover after parsing attributes in process `syz.4.892'. [ 154.937606][ T8971] ip: renamed from virt_wifi0 [ 154.969323][ T8971] ip: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.103381][ T8978] xt_connbytes: Forcing CT accounting to be enabled [ 155.179622][ T8983] netlink: 'syz.2.901': attribute type 23 has an invalid length. [ 155.192748][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 155.346466][ T8986] bond2: entered promiscuous mode [ 155.370913][ T8986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.413879][ T9001] syz.1.904 (9001) used obsolete PPPIOCDETACH ioctl [ 155.466588][ T9008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'. [ 155.501845][ T9002] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 155.547562][ T9002] bond1 (unregistering): Released all slaves [ 155.599377][ T9010] netlink: 7 bytes leftover after parsing attributes in process `syz.2.907'. [ 155.792165][ T9015] netlink: 'syz.3.911': attribute type 4 has an invalid length. [ 156.351159][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.921'. [ 156.371561][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.921'. [ 156.709102][ T9066] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.926'. [ 156.788549][ T9070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.930'. [ 156.824680][ T9070] unsupported nlmsg_type 40 [ 156.883738][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'. [ 157.191432][ T9093] xt_hashlimit: size too large, truncated to 1048576 [ 157.211949][ T50] Bluetooth: hci3: link tx timeout [ 157.218751][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.235068][ T9101] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20003 [ 157.260041][ T9100] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.503572][ T9121] netlink: 'syz.0.948': attribute type 2 has an invalid length. [ 158.905820][ T9205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.296515][ T5612] Bluetooth: hci3: command 0x0405 tx timeout [ 160.282426][ T9201] ip6gre0: Caught tx_queue_len zero misconfig [ 160.289263][ T9201] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 160.498884][ T9222] __nla_validate_parse: 10 callbacks suppressed [ 160.498902][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 160.555427][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'. [ 160.620193][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 160.710487][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 160.738046][ T9233] netlink: 'syz.4.996': attribute type 30 has an invalid length. [ 160.789188][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 160.816001][ T9239] netlink: 'syz.4.996': attribute type 30 has an invalid length. [ 160.967360][ T9251] netlink: 598 bytes leftover after parsing attributes in process `syz.1.1001'. [ 161.158294][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 161.280123][ T9269] netlink: 'syz.1.1010': attribute type 6 has an invalid length. [ 161.318275][ T9269] netlink: 'syz.1.1010': attribute type 30 has an invalid length. [ 161.400964][ T9269] bond1: option arp_missed_max: invalid value (0) [ 161.415866][ T9269] bond1: option arp_missed_max: allowed values 1 - 255 [ 161.426096][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 161.446191][ T9269] bond1 (unregistering): Released all slaves [ 161.528577][ T9278] bridge2: entered allmulticast mode [ 161.618816][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 161.670081][ T9294] xt_hashlimit: size too large, truncated to 1048576 [ 161.671523][ T9296] xt_hashlimit: size too large, truncated to 1048576 [ 161.856523][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 161.931765][ T9310] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.953191][ T9303] geneve2: entered promiscuous mode [ 161.968717][ T9303] geneve2: entered allmulticast mode [ 162.304664][ T9311] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 162.407891][ T9329] netlink: 'syz.1.1025': attribute type 7 has an invalid length. [ 162.416159][ T9329] netlink: 'syz.1.1025': attribute type 8 has an invalid length. [ 162.461955][ T9335] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 162.465506][ T6147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.497049][ T9329] team0: entered promiscuous mode [ 162.503097][ T9329] team_slave_0: entered promiscuous mode [ 162.509665][ T9329] team_slave_1: entered promiscuous mode [ 162.521633][ T9329] bond0: entered promiscuous mode [ 162.527567][ T9329] bond_slave_0: entered promiscuous mode [ 162.546648][ T9329] bond_slave_1: entered promiscuous mode [ 162.568285][ T24] hid-generic 0005:0C45:0008.0001: item fetching failed at offset 2/3 [ 162.571812][ T9329] erspan0: entered promiscuous mode [ 162.578123][ T24] hid-generic 0005:0C45:0008.0001: probe with driver hid-generic failed with error -22 [ 162.655626][ T9329] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 162.674273][ T6149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.725915][ T6149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.769676][ T7115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.047674][ T9345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.060759][ T9345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.368711][ T9345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.398785][ T9345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.537114][ T9345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.569099][ T9345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.606149][ T9384] team0 (unregistering): Port device team_slave_0 removed [ 163.621731][ T9386] FAULT_INJECTION: forcing a failure. [ 163.621731][ T9386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.645604][ T9384] team0 (unregistering): Port device team_slave_1 removed [ 163.662432][ T9386] CPU: 0 UID: 0 PID: 9386 Comm: syz.3.1047 Not tainted syzkaller #0 PREEMPT(full) [ 163.662455][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.662464][ T9386] Call Trace: [ 163.662471][ T9386] [ 163.662478][ T9386] dump_stack_lvl+0xe8/0x150 [ 163.662505][ T9386] should_fail_ex+0x40c/0x560 [ 163.662529][ T9386] _copy_from_user+0x2d/0xb0 [ 163.662551][ T9386] ___sys_recvmsg+0x173/0x5a0 [ 163.662578][ T9386] ? __pfx____sys_recvmsg+0x10/0x10 [ 163.662602][ T9386] ? __fget_files+0x2a/0x420 [ 163.662650][ T9386] do_recvmmsg+0x31a/0x7f0 [ 163.662678][ T9386] ? __pfx_do_recvmmsg+0x10/0x10 [ 163.662709][ T9386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.662732][ T9386] ? __fget_files+0x3a2/0x420 [ 163.662760][ T9386] __x64_sys_recvmmsg+0x198/0x250 [ 163.662783][ T9386] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 163.662811][ T9386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.662828][ T9386] do_syscall_64+0x174/0x580 [ 163.662849][ T9386] ? trace_irq_disable+0x3b/0x140 [ 163.662867][ T9386] ? clear_bhb_loop+0x70/0xc0 [ 163.662886][ T9386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.662901][ T9386] RIP: 0033:0x7f2c6a99e0d9 [ 163.662917][ T9386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.662929][ T9386] RSP: 002b:00007f2c6b8e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 163.662946][ T9386] RAX: ffffffffffffffda RBX: 00007f2c6ac25fa0 RCX: 00007f2c6a99e0d9 [ 163.662957][ T9386] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 163.662968][ T9386] RBP: 00007f2c6b8e3090 R08: 0000000000000000 R09: 0000000000000000 [ 163.662977][ T9386] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 163.662986][ T9386] R13: 00007f2c6ac26038 R14: 00007f2c6ac25fa0 R15: 00007ffc077fe1a8 [ 163.663013][ T9386] [ 163.864150][ T72] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.889195][ T6147] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.898511][ T6147] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.923093][ T6147] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.991761][ T9345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.002626][ T9345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.111126][ T9403] ip6tnl2: entered allmulticast mode [ 164.254511][ T6147] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.262935][ T6147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.272293][ T6147] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.280839][ T6147] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.290463][ T6147] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.300500][ T6147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.310413][ T6147] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.319076][ T6147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.349820][ T9413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.241635][ T9472] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 165.265910][ T9472] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 165.292891][ T9472] veth0_virt_wifi: entered allmulticast mode [ 165.323473][ T9472] veth0_virt_wifi: entered promiscuous mode [ 165.344660][ T9472] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 165.351971][ T9472] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 165.400322][ T9476] gretap1: entered allmulticast mode [ 165.873488][ T9510] __nla_validate_parse: 13 callbacks suppressed [ 165.873505][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 166.131540][ T9533] sctp: [Deprecated]: syz.2.1079 (pid 9533) Use of int in maxseg socket option. [ 166.131540][ T9533] Use struct sctp_assoc_value instead [ 166.228032][ T9537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1086'. [ 166.273259][ T9537] hsr_slave_1 (unregistering): left promiscuous mode [ 166.683925][ T9568] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 167.770324][ T9590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1102'. [ 168.205712][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 168.759374][ T9506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.943382][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 169.027086][ T9620] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1115'. [ 169.029212][ T9625] syzkaller0: left promiscuous mode [ 169.050584][ T9625] syzkaller0: left allmulticast mode [ 169.077830][ T9623] ip6gre1: entered promiscuous mode [ 169.094278][ T9623] ip6gre1: entered allmulticast mode [ 169.108248][ T9631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.171924][ T406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.190953][ T9636] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 169.207632][ T6147] IPVS: starting estimator thread 0... [ 169.207775][ T5606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.222365][ T406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.305103][ T9639] IPVS: using max 36 ests per chain, 86400 per kthread [ 169.415965][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.440557][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 170.006233][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.505028][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1140'. [ 170.550609][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 170.572042][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 170.798801][ T9725] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 170.824903][ T9728] netlink: 'syz.2.1149': attribute type 2 has an invalid length. [ 170.878061][ T9728] : entered promiscuous mode [ 171.020153][ T9743] ip_tables: iptables: counters copy to user failed while replacing table [ 171.200949][ T9753] __nla_validate_parse: 1 callbacks suppressed [ 171.200968][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 171.273016][ T9753] openvswitch: ovs-system: Dropping previously announced user features [ 171.493920][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1157'. [ 171.523058][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 171.534205][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 171.769767][ T9772] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 171.817350][ T9777] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1161'. [ 171.932436][ T9783] openvswitch: netlink: Message has -2 unknown bytes. [ 171.947554][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1162'. [ 171.971855][ T9783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.466973][ T9803] netlink: 'syz.0.1165': attribute type 16 has an invalid length. [ 173.058401][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 173.092132][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 173.147560][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 173.174881][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 173.444307][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.747022][ T9838] netdevsim netdevsim2 €Â: left allmulticast mode [ 173.781226][ T9838] 8021q: adding VLAN 0 to HW filter on device €Â [ 173.853518][ T9838] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 173.916104][ T9838] veth3: left allmulticast mode [ 173.928263][ T9838] bond1: left promiscuous mode [ 173.934001][ T9838] ipip0: left promiscuous mode [ 174.019878][ T9838] ip6tnl2: left allmulticast mode [ 174.293229][ T9856] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.578428][ T9860] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 175.218735][ T9895] netlink: 'syz.1.1188': attribute type 4 has an invalid length. [ 175.270521][ T9896] netlink: 'syz.1.1188': attribute type 4 has an invalid length. [ 177.046303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.149829][ T9909] veth0: entered promiscuous mode [ 177.158623][ T9910] veth0: left promiscuous mode [ 177.216344][ T9912] ip6tnl2: entered promiscuous mode [ 177.254462][ T6147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.341656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.468495][ T7109] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.523046][ T7109] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.565996][ T7109] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.634180][ T9940] __nla_validate_parse: 12 callbacks suppressed [ 177.634214][ T9940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1195'. [ 177.857373][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 177.987440][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'. [ 178.168833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.780533][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 178.849405][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'. [ 178.854332][ T406] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.896666][ T406] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.921373][ T406] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.954728][ T406] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.100591][ T9999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.283781][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 179.295603][T10007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'. [ 179.327764][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 179.517960][T10019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'. [ 179.564907][T10019] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 180.267229][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 181.810557][T10058] syzkaller0: entered promiscuous mode [ 181.844360][T10058] syzkaller0: entered allmulticast mode [ 182.164270][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.814858][T10089] __nla_validate_parse: 2 callbacks suppressed [ 183.814877][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 186.679459][T10098] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1247'. [ 187.006129][T10110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1250'. [ 187.219977][T10120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1252'. [ 187.431123][T10124] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.596799][T10130] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 188.043630][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 188.159695][T10150] netlink: 'syz.2.1258': attribute type 62 has an invalid length. [ 189.506930][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 189.805918][T10169] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 189.936956][T10169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.032228][T10172] bond1: (slave geneve3): making interface the new active one [ 190.061518][T10172] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 190.355528][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 190.365974][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 190.462541][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 190.827981][T10183] netlink: 'syz.0.1268': attribute type 16 has an invalid length. [ 190.880638][T10183] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1268'. [ 192.523299][T10220] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 192.623139][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'. [ 192.828838][T10228] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1283'. [ 192.857021][T10228] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1283'. [ 192.969337][T10233] IPVS: set_ctl: invalid protocol: 58 172.20.20.54:20004 [ 193.391456][T10232] ipvlan2: entered promiscuous mode [ 193.689937][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 194.101883][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 194.331775][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.339914][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.439618][T10279] xt_hashlimit: size too large, truncated to 1048576 [ 194.478495][T10279] xt_hashlimit: max too large, truncated to 1048576 [ 195.606290][T10322] __nla_validate_parse: 2 callbacks suppressed [ 195.606323][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 195.813618][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 196.496992][T10355] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1313'. [ 196.554505][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 196.707171][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 197.510426][T10381] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 197.554288][T10353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.604769][T10353] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.707477][T10353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.980116][T10353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.027039][T10353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.101396][T10353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.139733][T10353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.306679][T10353] veth1_vlan: left promiscuous mode [ 198.365345][T10353] veth0_vlan: left promiscuous mode [ 198.438722][T10353] veth0_vlan: entered promiscuous mode [ 198.502016][T10353] veth1_vlan: entered promiscuous mode [ 198.546824][T10353] veth1_macvtap: left promiscuous mode [ 198.557850][T10353] veth0_macvtap: left promiscuous mode [ 198.571233][T10353] veth0_macvtap: entered promiscuous mode [ 198.594703][T10353] veth1_macvtap: entered promiscuous mode [ 198.628777][T10353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.647062][T10353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.668494][T10353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.725897][T10353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.804148][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.849474][T10353] geneve2: left promiscuous mode [ 201.524283][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 201.530395][ T4923] Bluetooth: hci1: command 0x0406 tx timeout [ 201.538279][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 204.311281][T10353] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 204.318820][T10353] ------------[ cut here ]------------ [ 204.324287][T10353] lockdep bfs error:-1 [ 204.328367][T10353] WARNING: kernel/locking/lockdep.c:2059 at print_bfs_bug+0x20/0x40, CPU#0: syz.3.1313/10353 [ 204.338540][T10353] Modules linked in: [ 204.342455][T10353] CPU: 0 UID: 0 PID: 10353 Comm: syz.3.1313 Not tainted syzkaller #0 PREEMPT(full) [ 204.351827][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.361882][T10353] RIP: 0010:print_bfs_bug+0x22/0x40 [ 204.367095][T10353] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 67 d8 2c 03 89 c5 e8 90 89 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d b0 97 b7 0e 89 de <67> 48 0f b9 3a 5b 5d e9 02 a6 33 0a cc 48 c7 c7 63 ad 3c 8e e8 85 [ 204.386709][T10353] RSP: 0018:ffffc9000c9ce548 EFLAGS: 00010046 [ 204.392785][T10353] RAX: 000000000000003b RBX: 00000000ffffffff RCX: a58f9551b01c7900 [ 204.400759][T10353] RDX: ffffc9000de84000 RSI: 00000000ffffffff RDI: ffffffff905aaa80 [ 204.408730][T10353] RBP: 0000000000000001 R08: ffffc9000c9ce2c7 R09: 1ffff92001939c58 [ 204.416699][T10353] R10: dffffc0000000000 R11: fffff52001939c59 R12: 0000000000000049 [ 204.424672][T10353] R13: ffffffff9418f408 R14: ffff888028618000 R15: ffffffff96fd90a8 [ 204.432643][T10353] FS: 00007f2c6b8c26c0(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000 [ 204.441578][T10353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.448163][T10353] CR2: 00007fff2e55ff14 CR3: 00000000749a2000 CR4: 00000000003526f0 [ 204.456140][T10353] Call Trace: [ 204.459416][T10353] [ 204.462353][T10353] __lock_acquire+0x24f0/0x2cf0 [ 204.467213][T10353] ? stack_trace_save+0xa9/0x100 [ 204.472161][T10353] ? ktime_get+0x45/0x220 [ 204.476489][T10353] lock_acquire+0x106/0x350 [ 204.481007][T10353] ? ktime_get+0x45/0x220 [ 204.485370][T10353] ? ktime_get+0x45/0x220 [ 204.489711][T10353] seqcount_lockdep_reader_access+0x55/0x100 [ 204.495703][T10353] ? ktime_get+0x45/0x220 [ 204.500040][T10353] ktime_get+0x45/0x220 [ 204.504200][T10353] clockevents_program_event+0x290/0x630 [ 204.509840][T10353] ? __pfx_clockevents_program_event+0x10/0x10 [ 204.516000][T10353] ? tick_program_event+0x8f/0x120 [ 204.521113][T10353] __hrtimer_rearm_deferred+0x26c/0x420 [ 204.526658][T10353] irqentry_exit+0x8b7/0x8f0 [ 204.531265][T10353] ? trace_irq_disable+0x3b/0x140 [ 204.536306][T10353] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 204.542291][T10353] RIP: 0010:lock_acquire+0x221/0x350 [ 204.547591][T10353] Code: ff ff ff e8 51 fd 30 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 87 ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 80 00 34 0a cc 48 8d 3d 28 ec b7 [ 204.567202][T10353] RSP: 0018:ffffc9000c9ce9b0 EFLAGS: 00000282 [ 204.573282][T10353] RAX: a58f9551b01c7900 RBX: 0000000000000000 RCX: 0000000080000201 [ 204.581257][T10353] RDX: ffffffff9428b4d8 RSI: ffffffff8e4bbbab RDI: ffffffff8c4bbf80 [ 204.589234][T10353] RBP: ffffffff89c4994e R08: 0000000000000008 R09: ffffffff9696edf0 [ 204.597208][T10353] R10: 0000000066c6261f R11: 000000007add4bfb R12: 0000000000000000 [ 204.605182][T10353] R13: ffff888048153170 R14: 0000000000000001 R15: 0000000000000246 [ 204.613162][T10353] ? dev_deactivate_many+0xade/0xda0 [ 204.618468][T10353] ? dev_deactivate_many+0xade/0xda0 [ 204.623760][T10353] _raw_spin_lock_bh+0x36/0x50 [ 204.628527][T10353] ? dev_deactivate_many+0xade/0xda0 [ 204.633823][T10353] dev_deactivate_many+0xade/0xda0 [ 204.638957][T10353] ? dev_deactivate_many+0x25d/0xda0 [ 204.644253][T10353] dev_qdisc_change_tx_queue_len+0x185/0x530 [ 204.650236][T10353] ? ip6_route_dev_notify+0x9a/0x5b0 [ 204.655536][T10353] ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10 [ 204.662074][T10353] netif_change_tx_queue_len+0x184/0x290 [ 204.667717][T10353] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 204.673882][T10353] ? netif_change_flags+0xde/0x1b0 [ 204.678995][T10353] do_setlink+0xf9c/0x4670 [ 204.683421][T10353] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.688633][T10353] ? __lock_acquire+0x683/0x2cf0 [ 204.693582][T10353] ? __pfx_do_setlink+0x10/0x10 [ 204.698439][T10353] ? __lock_acquire+0x683/0x2cf0 [ 204.703389][T10353] ? irqentry_exit+0x218/0x8f0 [ 204.708168][T10353] ? trace_irq_disable+0x3b/0x140 [ 204.713203][T10353] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.718241][T10353] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.724055][T10353] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.729257][T10353] ? __mutex_lock+0x1092/0x1550 [ 204.734127][T10353] ? irqentry_exit+0x218/0x8f0 [ 204.738912][T10353] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.744122][T10353] ? irqentry_exit+0x218/0x8f0 [ 204.748892][T10353] ? trace_irq_disable+0x3b/0x140 [ 204.753932][T10353] rtnl_newlink+0x146f/0x1c30 [ 204.758620][T10353] ? __pfx_rtnl_newlink+0x10/0x10 [ 204.763649][T10353] ? __lock_acquire+0x683/0x2cf0 [ 204.768596][T10353] ? __lock_acquire+0x683/0x2cf0 [ 204.773549][T10353] ? is_bpf_text_address+0x26/0x2b0 [ 204.778754][T10353] ? unwind_next_frame+0x8f/0x2550 [ 204.783875][T10353] ? is_bpf_text_address+0x26/0x2b0 [ 204.789082][T10353] ? is_bpf_text_address+0x26/0x2b0 [ 204.794289][T10353] ? __lock_acquire+0x683/0x2cf0 [ 204.799233][T10353] ? kernel_text_address+0xa5/0xe0 [ 204.804351][T10353] ? __kernel_text_address+0xd/0x30 [ 204.809558][T10353] ? unwind_get_return_address+0x4d/0x90 [ 204.815190][T10353] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.821345][T10353] ? arch_stack_walk+0xfb/0x150 [ 204.826204][T10353] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 204.831317][T10353] ? __pfx_rtnl_newlink+0x10/0x10 [ 204.836352][T10353] ? __pfx_rtnl_newlink+0x10/0x10 [ 204.841388][T10353] rtnetlink_rcv_msg+0x802/0xc00 [ 204.846334][T10353] ? netlink_sendmsg+0x5d4/0xb40 [ 204.851280][T10353] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 204.856399][T10353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.861860][T10353] ? __lock_acquire+0x683/0x2cf0 [ 204.866896][T10353] netlink_rcv_skb+0x226/0x4a0 [ 204.871665][T10353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.877125][T10353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.882429][T10353] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.887632][T10353] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.892836][T10353] netlink_unicast+0x7bb/0x940 [ 204.897607][T10353] netlink_sendmsg+0x813/0xb40 [ 204.902380][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.907684][T10353] ? aa_sock_msg_perm+0xf1/0x1b0 [ 204.912627][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.917915][T10353] sock_sendmsg_nosec+0x13a/0x180 [ 204.922947][T10353] ____sys_sendmsg+0x54e/0x850 [ 204.927713][T10353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.933005][T10353] ? import_iovec+0x73/0xa0 [ 204.937520][T10353] ___sys_sendmsg+0x2a5/0x360 [ 204.942210][T10353] ? __lock_acquire+0x683/0x2cf0 [ 204.947158][T10353] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.952389][T10353] ? futex_wait+0x2a2/0x390 [ 204.956918][T10353] ? __fget_files+0x2a/0x420 [ 204.961513][T10353] ? __fget_files+0x3a2/0x420 [ 204.966203][T10353] __x64_sys_sendmsg+0x1b1/0x290 [ 204.971161][T10353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.976655][T10353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.982734][T10353] do_syscall_64+0x174/0x580 [ 204.987331][T10353] ? trace_irq_disable+0x3b/0x140 [ 204.992362][T10353] ? clear_bhb_loop+0x70/0xc0 [ 204.997040][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.002940][T10353] RIP: 0033:0x7f2c6a99e0d9 [ 205.007359][T10353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.026972][T10353] RSP: 002b:00007f2c6b8c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.035392][T10353] RAX: ffffffffffffffda RBX: 00007f2c6ac26090 RCX: 00007f2c6a99e0d9 [ 205.043371][T10353] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000d [ 205.051350][T10353] RBP: 00007f2c6aa35024 R08: 0000000000000000 R09: 0000000000000000 [ 205.059320][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.067290][T10353] R13: 00007f2c6ac26128 R14: 00007f2c6ac26090 R15: 00007ffc077fe1a8 [ 205.075279][T10353] [ 205.078313][T10353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.085593][T10353] CPU: 0 UID: 0 PID: 10353 Comm: syz.3.1313 Not tainted syzkaller #0 PREEMPT(full) [ 205.094962][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.105056][T10353] Call Trace: [ 205.108339][T10353] [ 205.111269][T10353] vpanic+0x56c/0xa60 [ 205.115283][T10353] ? __pfx__printk+0x10/0x10 [ 205.119891][T10353] ? __pfx_vpanic+0x10/0x10 [ 205.124396][T10353] ? is_bpf_text_address+0x292/0x2b0 [ 205.129686][T10353] ? is_bpf_text_address+0x26/0x2b0 [ 205.134895][T10353] panic+0xc5/0xd0 [ 205.138624][T10353] ? __pfx_panic+0x10/0x10 [ 205.143083][T10353] __warn+0x315/0x4c0 [ 205.147080][T10353] ? print_bfs_bug+0x20/0x40 [ 205.151685][T10353] ? print_bfs_bug+0x20/0x40 [ 205.156283][T10353] __report_bug+0x276/0x570 [ 205.160799][T10353] ? do_raw_spin_unlock+0xf5/0x210 [ 205.165924][T10353] ? print_bfs_bug+0x20/0x40 [ 205.170538][T10353] ? __pfx___report_bug+0x10/0x10 [ 205.175586][T10353] ? __pfx_vprintk_emit+0x10/0x10 [ 205.180628][T10353] report_bug_entry+0x19a/0x290 [ 205.185486][T10353] ? print_bfs_bug+0x22/0x40 [ 205.190082][T10353] ? print_bfs_bug+0x27/0x40 [ 205.194686][T10353] handle_bug+0xce/0x200 [ 205.198930][T10353] exc_invalid_op+0x1a/0x50 [ 205.203434][T10353] asm_exc_invalid_op+0x1a/0x20 [ 205.208282][T10353] RIP: 0010:print_bfs_bug+0x22/0x40 [ 205.213489][T10353] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 67 d8 2c 03 89 c5 e8 90 89 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d b0 97 b7 0e 89 de <67> 48 0f b9 3a 5b 5d e9 02 a6 33 0a cc 48 c7 c7 63 ad 3c 8e e8 85 [ 205.233100][T10353] RSP: 0018:ffffc9000c9ce548 EFLAGS: 00010046 [ 205.239217][T10353] RAX: 000000000000003b RBX: 00000000ffffffff RCX: a58f9551b01c7900 [ 205.247211][T10353] RDX: ffffc9000de84000 RSI: 00000000ffffffff RDI: ffffffff905aaa80 [ 205.255196][T10353] RBP: 0000000000000001 R08: ffffc9000c9ce2c7 R09: 1ffff92001939c58 [ 205.263170][T10353] R10: dffffc0000000000 R11: fffff52001939c59 R12: 0000000000000049 [ 205.271142][T10353] R13: ffffffff9418f408 R14: ffff888028618000 R15: ffffffff96fd90a8 [ 205.279127][T10353] ? print_bfs_bug+0x3b/0x40 [ 205.283736][T10353] __lock_acquire+0x24f0/0x2cf0 [ 205.288603][T10353] ? stack_trace_save+0xa9/0x100 [ 205.293560][T10353] ? ktime_get+0x45/0x220 [ 205.297890][T10353] lock_acquire+0x106/0x350 [ 205.302399][T10353] ? ktime_get+0x45/0x220 [ 205.306734][T10353] ? ktime_get+0x45/0x220 [ 205.311064][T10353] seqcount_lockdep_reader_access+0x55/0x100 [ 205.317048][T10353] ? ktime_get+0x45/0x220 [ 205.321382][T10353] ktime_get+0x45/0x220 [ 205.325541][T10353] clockevents_program_event+0x290/0x630 [ 205.331185][T10353] ? __pfx_clockevents_program_event+0x10/0x10 [ 205.337356][T10353] ? tick_program_event+0x8f/0x120 [ 205.342474][T10353] __hrtimer_rearm_deferred+0x26c/0x420 [ 205.348029][T10353] irqentry_exit+0x8b7/0x8f0 [ 205.352639][T10353] ? trace_irq_disable+0x3b/0x140 [ 205.357669][T10353] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.363650][T10353] RIP: 0010:lock_acquire+0x221/0x350 [ 205.368941][T10353] Code: ff ff ff e8 51 fd 30 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 87 ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 80 00 34 0a cc 48 8d 3d 28 ec b7 [ 205.388553][T10353] RSP: 0018:ffffc9000c9ce9b0 EFLAGS: 00000282 [ 205.394629][T10353] RAX: a58f9551b01c7900 RBX: 0000000000000000 RCX: 0000000080000201 [ 205.402599][T10353] RDX: ffffffff9428b4d8 RSI: ffffffff8e4bbbab RDI: ffffffff8c4bbf80 [ 205.410569][T10353] RBP: ffffffff89c4994e R08: 0000000000000008 R09: ffffffff9696edf0 [ 205.418554][T10353] R10: 0000000066c6261f R11: 000000007add4bfb R12: 0000000000000000 [ 205.426526][T10353] R13: ffff888048153170 R14: 0000000000000001 R15: 0000000000000246 [ 205.434497][T10353] ? dev_deactivate_many+0xade/0xda0 [ 205.439802][T10353] ? dev_deactivate_many+0xade/0xda0 [ 205.445094][T10353] _raw_spin_lock_bh+0x36/0x50 [ 205.449871][T10353] ? dev_deactivate_many+0xade/0xda0 [ 205.455168][T10353] dev_deactivate_many+0xade/0xda0 [ 205.460290][T10353] ? dev_deactivate_many+0x25d/0xda0 [ 205.465589][T10353] dev_qdisc_change_tx_queue_len+0x185/0x530 [ 205.471574][T10353] ? ip6_route_dev_notify+0x9a/0x5b0 [ 205.476874][T10353] ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10 [ 205.483389][T10353] netif_change_tx_queue_len+0x184/0x290 [ 205.489031][T10353] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 205.495195][T10353] ? netif_change_flags+0xde/0x1b0 [ 205.500311][T10353] do_setlink+0xf9c/0x4670 [ 205.504737][T10353] ? lockdep_hardirqs_on+0x7a/0x110 [ 205.509945][T10353] ? __lock_acquire+0x683/0x2cf0 [ 205.514885][T10353] ? __pfx_do_setlink+0x10/0x10 [ 205.519739][T10353] ? __lock_acquire+0x683/0x2cf0 [ 205.524684][T10353] ? irqentry_exit+0x218/0x8f0 [ 205.529454][T10353] ? trace_irq_disable+0x3b/0x140 [ 205.534490][T10353] ? do_raw_spin_lock+0x12b/0x2f0 [ 205.539526][T10353] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 205.545341][T10353] ? lockdep_hardirqs_on+0x7a/0x110 [ 205.550549][T10353] ? __mutex_lock+0x1092/0x1550 [ 205.555418][T10353] ? irqentry_exit+0x218/0x8f0 [ 205.560198][T10353] ? lockdep_hardirqs_on+0x7a/0x110 [ 205.565399][T10353] ? irqentry_exit+0x218/0x8f0 [ 205.570167][T10353] ? trace_irq_disable+0x3b/0x140 [ 205.575205][T10353] rtnl_newlink+0x146f/0x1c30 [ 205.579904][T10353] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.584932][T10353] ? __lock_acquire+0x683/0x2cf0 [ 205.589877][T10353] ? __lock_acquire+0x683/0x2cf0 [ 205.594824][T10353] ? is_bpf_text_address+0x26/0x2b0 [ 205.600028][T10353] ? unwind_next_frame+0x8f/0x2550 [ 205.605143][T10353] ? is_bpf_text_address+0x26/0x2b0 [ 205.610355][T10353] ? is_bpf_text_address+0x26/0x2b0 [ 205.615564][T10353] ? __lock_acquire+0x683/0x2cf0 [ 205.620508][T10353] ? kernel_text_address+0xa5/0xe0 [ 205.625624][T10353] ? __kernel_text_address+0xd/0x30 [ 205.630827][T10353] ? unwind_get_return_address+0x4d/0x90 [ 205.636459][T10353] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.642703][T10353] ? arch_stack_walk+0xfb/0x150 [ 205.647557][T10353] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 205.652668][T10353] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.657705][T10353] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.662744][T10353] rtnetlink_rcv_msg+0x802/0xc00 [ 205.667687][T10353] ? netlink_sendmsg+0x5d4/0xb40 [ 205.672639][T10353] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 205.677758][T10353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.683223][T10353] ? __lock_acquire+0x683/0x2cf0 [ 205.688175][T10353] netlink_rcv_skb+0x226/0x4a0 [ 205.692957][T10353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.698429][T10353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.703735][T10353] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.708939][T10353] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.714151][T10353] netlink_unicast+0x7bb/0x940 [ 205.718931][T10353] netlink_sendmsg+0x813/0xb40 [ 205.723704][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.728998][T10353] ? aa_sock_msg_perm+0xf1/0x1b0 [ 205.733942][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.739231][T10353] sock_sendmsg_nosec+0x13a/0x180 [ 205.744269][T10353] ____sys_sendmsg+0x54e/0x850 [ 205.749040][T10353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.754337][T10353] ? import_iovec+0x73/0xa0 [ 205.758858][T10353] ___sys_sendmsg+0x2a5/0x360 [ 205.763552][T10353] ? __lock_acquire+0x683/0x2cf0 [ 205.768507][T10353] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.773748][T10353] ? futex_wait+0x2a2/0x390 [ 205.778270][T10353] ? __fget_files+0x2a/0x420 [ 205.782874][T10353] ? __fget_files+0x3a2/0x420 [ 205.787562][T10353] __x64_sys_sendmsg+0x1b1/0x290 [ 205.792506][T10353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.797992][T10353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.804064][T10353] do_syscall_64+0x174/0x580 [ 205.808663][T10353] ? trace_irq_disable+0x3b/0x140 [ 205.813694][T10353] ? clear_bhb_loop+0x70/0xc0 [ 205.818373][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.824267][T10353] RIP: 0033:0x7f2c6a99e0d9 [ 205.828686][T10353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.848298][T10353] RSP: 002b:00007f2c6b8c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.856732][T10353] RAX: ffffffffffffffda RBX: 00007f2c6ac26090 RCX: 00007f2c6a99e0d9 [ 205.864714][T10353] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000d [ 205.872695][T10353] RBP: 00007f2c6aa35024 R08: 0000000000000000 R09: 0000000000000000 [ 205.880667][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.888640][T10353] R13: 00007f2c6ac26128 R14: 00007f2c6ac26090 R15: 00007ffc077fe1a8 [ 205.896627][T10353] [ 205.899793][T10353] Kernel Offset: disabled [ 205.904108][T10353] Rebooting in 86400 seconds..