last executing test programs: 5.084579787s ago: executing program 4 (id=2775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) pread64(r4, &(0x7f0000000340)=""/69, 0x45, 0x3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a030000000000000000000a0000060900020073797a31000000000900010073797a310000eaf6353968000014000380100000800c00018006000100d65b0000140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100012f00000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="8ea2808d7aa6b6abed33cf60111eeb1f5a06014cf493cc7db196163eb2f62a15e17e000000c043691d71dd1bdf360196a4df379705d4156113f814d7484169119324235c842bc2abf1bc06f2d5a9cd30a91730811ce4c1e4d4f0ec70e6bceb0b8278369f8fbc70e37eba7aeeba65480c70d2c6c7a347e4889d4a2b014be20faca51e892efae4e2bdcf0466bef5c59a6fa389c513ac2e1615fe50c949712fd2e50bca830bde033ecee6c4779c6f758358007c00009269b9042247e04e421a280400000000000000070862f367b08fb1aae2cb86a540"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r10, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r9, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005000300000000000000080001"], 0xf8}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20003c8a260000c604f906e8bbeb2730be00020000", @ANYRES16=r11, @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x2004c000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000040000180101000000692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c48dc4ca85000000ca00000095000000000000004123d3e62f8eb715d3f77e81ba3f5cd414721c37bdbe518369a39a23766efb5327444b1b1abc8b65844c0f3ad8c004fbd7ee3c42e6407b3418be86a7ae251128d591b75f7410eddde9390e85bfdfc7c94dce413e18c1eb51f56e65f08e7f50dcc5f7ba2171f4f6c627a8837fa4b17c7aca55aa01f0d35f3c98f270893eb81d314c63e953be9fc4cc04112509f163ef39ac65d7062b9bd3"], &(0x7f0000000000)='GPL\x00', 0x1, 0xff3, &(0x7f0000002e00)=""/4083, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x403, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 2.981978382s ago: executing program 2 (id=2792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002000010004000000fbdbdf250a400000030000080800000014000200fc020000000000000000000000000000140001002001000000e0c3d04a0ba3e08c59554aa860bf59524e5f809aaa7ff3e4987e1af05d13eb9c98a85ffd38dfdf6ad2a506957e8b2c9c1e61cb83bae671f8"], 0x44}}, 0x40000) (async) socketpair(0x2a, 0x80005, 0xd, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRES64=r2], 0x3c}}, 0x8004) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="122bfc00000000000a00edffa9aaaab3aaeb423863d1fcd891552e7821f037a1b74560e23df30ea15a4630624f38e498f5bb14db4a8e77fb2281c280"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000043) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f80)={{}, &(0x7f0000001f00), &(0x7f0000001f40)=r6}, 0x20) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={&(0x7f0000001fc0)='./file0\x00', 0x0, 0x18, r2}, 0x18) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002040)={0xffffffffffffffff, 0x101}, 0xc) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r4], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10}, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x18, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0xe, 0x6c, &(0x7f0000000cc0)=ANY=[@ANYRES8=r9, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000001839000001000000000000000000000018490000fcffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001834000001000000002c00000000000018440000f8ffffff00000000000000008510eefffeffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000010010000f8ffffffbfa40000000026e200000000f0ffffffb70200000800000018230000", @ANYRESHEX=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000", @ANYRES8=0x0, @ANYRES16=r7, @ANYRESOCT, @ANYBLOB="6259e42316f1a33887d60f64809ae2c1a1e576d2ca832eda198cfc39ece503b6a4e925d1c16ca590a5f97e018f6a8bcb1f87d948610d69a135b5d68930408f06f800a86a744eda73046202a3548e4a50cfd130f24d1441387bbd9b9ce6aaefffe66d3f0b4e8ad14302a83bc01dff7a1aff723854673cfb788809d289af0d0abeb618e22f31c0d521cf170149c37663d561aa7cf129d0010ae9a432e9899d6080de089cdc9e0a7814e62a5bc247b7e9eb4153c86a67d4118ff401778233dcf8a74ecee1417c776313021def6244fb9ffbf23e4253", @ANYRESOCT=r5, @ANYRES8=r3, @ANYRES32], &(0x7f0000000740)='GPL\x00', 0x17ff, 0xc1, &(0x7f0000000780)=""/193, 0x40f00, 0x72, '\x00', r4, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x3, 0x1, 0x91e2, 0xfffffffa}, 0x10, 0x0, r11, 0x0, &(0x7f00000002c0)}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000390500"/20, @ANYRES32=0x0, @ANYBLOB="10100000105000003c0012800b000100697036746e6c00002c000280140003002001001600000000000000000000000214000200fc0200000000000000000000000000ffe4ec6952217b2bfe74684595509d55ac289f47d154"], 0x5c}}, 0x0) 2.769161821s ago: executing program 2 (id=2795): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'ip6gre0\x00', {0x7}, 0x5}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000140)=0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x401, 0x1, {{0xf, 0x4, 0x1, 0x16, 0x3c, 0x64, 0x0, 0x5e, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}, {[@noop, @timestamp_addr={0x44, 0x24, 0x71, 0x1, 0xc, [{@loopback, 0x582}, {@local, 0x2}, {@rand_addr=0x64010100, 0x20000c83}, {@loopback, 0x5}]}]}}}}}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1212001}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="640000000308010400000000000000000000005974246ef0f82750a13038990b06000240884c00000900010073797a31000000002c0004800800034000000057c3714407c1d7a188f8d5a6d22b0508000640000000000800024000000401080004400000"], 0x64}}, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}, [@TCA_RATE={0x6, 0x5, {0xb0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000e430000000000000000000000000000000014000000000030a2868b0ad595687adca5728133a2849511438cf5d15ec831496eb38efaa523652f148aaf7e49ed2295f3bae58a8d3b2a0ec99560548fa744b2c3c332414833d1395662c7965445a2cb74b69afcb4d34c6bf3d17589f49814d71e4102a91dc6cf57c530da7a0015af94ae249de768bcb6e43ca02a96891fd562789191d8813b4b367f478f1511137bc7d1b5720d1a99cb87c251bc75bfed6df90b1d2a7a532d"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r1, @ANYBLOB="000000000000000018140000", @ANYRES32=r1, @ANYBLOB="0000007b234954fe200a1da0e61f0eedfc4ce60000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000400)="d2245181ef298b63aa4861114f4987b85ac2b6109e5c22aec374e3c2ddf98487806afe803e259b4a9ca03714ce5a540aace61fe21f140cb68098ae564c0187ad6f2cfee666905e64ec173010990963e6d52a814b58a7a7cb49b5a2ab6ec0f199e42149fcc31a6561c06fe07673c72b465bee0c7e87637396881665744ea401f17b4950ea63b1d6129a32ca2176db6787df80ffb4855d89b83dfd1860cd592c940b2269", &(0x7f0000000540)=""/162, &(0x7f0000000600)="7a42d34b6e5ae44726c0bed24f70f0055a73b3b2517b55597cd572810fd3783983d8cc403da1233e15d7db9c382648d456c7b63330", &(0x7f0000000640)="639225bdce192db44c30aee99ff63d4c9fe9ae058a14bd6b5e476c96ac6a3d75e99a6be27e4d446da5fd737658a0152e32aeeb39cfc55d6d66d404c45e3b689aa9", 0x1, r1}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000900)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xec9}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000800) sendto$inet(r5, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 2.542629807s ago: executing program 0 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x30}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.488842854s ago: executing program 0 (id=2798): socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x4, 0xe, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000035ee198dea03e10044602c53df6e7fa8477c296d61dcc385132fad4b07718c81fc45", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009118f32f85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r9, r8, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0) tee(r0, r2, 0x8f5, 0x100000000000000) write$cgroup_type(r2, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x10040) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000500)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, r11, 0x41424344, 0x0, 0x6, 0x9, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000004, 0x56}, @exp_fastopen={0xfe, 0x6, 0xf989, "0b12"}]}}}}}}}, 0x0) write(r1, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1.987935238s ago: executing program 4 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0xa, 0x6, 0x5c13}, {0x6, 0xff, 0xc, 0x401}]}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}]}, 0x84}}, 0x0) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x22}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000d0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)="72ccb4dc", 0xca, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000000180), 0x0}, 0x20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x1) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r9, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x48100}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@deltaction={0xc4, 0x31, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x98, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x95}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x10) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000540)) 1.803327938s ago: executing program 2 (id=2803): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8", 0x58}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.6420839s ago: executing program 2 (id=2805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000012000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000001500000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7081c33b30a0000755ced1254bb9be4b914b592e4d77b8af8ff00000000bfa20000000000000702000000000001000000b7040000020000008500680f3008141235ec72f0ee1c520ba2d223b8697a84ea0de43b7cf06f892dcfed61cade13fcbec8c8d24fa69bb42f8593f183dce975f0c8ddc730ad6585b75eb6d978591999ac1845f8"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x11, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{r3, &(0x7f0000000380)='\x00', 0x4100, 0x0, 0xffff, &(0x7f00000000c0), &(0x7f0000000140)=0x4}, {[0x9, 0x1000, 0x5, 0x1]}, 0x2a, 0x5, &(0x7f0000000180)=""/5}) syz_emit_ethernet(0xba, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a00843c0020010000000000000000000000000001ff02000000000000000000000000808715b02a62108379190f240800012f04000000000000c910ff020000000000000000000000000001c910fe8000000000000000000000000000aa000000000420880b0000000000000800ba878464fe4672d177b58c20328b9fc8000486dd080088be00000001100020000100000000000000080022eb00000000200000080200000000000078531666d74fd7bbfca58361bf855a792a3b02262065143b438817e09bdd"], 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000002dc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x806) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800000016000100000000000000000020010000000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000200100000000000000000000000000010000000000000000000000000000000000000000000000000000008000000000000000000000000000001000000000000000502a79c9b6a70700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffff0009000000000000000000000000000a00"/174], 0xf8}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf25170000005400068014000300322d73352d3a955d482ee5364c4323843c00040067636d2861657329b7ff00000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='%\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f0001000000"], 0x40}}, 0x24000080) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e401727eb53b", 0x17, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @random="6c267dad3e11"}, 0x14) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b40)=@newtfilter={0x1254, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1224, 0x2, [@TCA_FLOW_EMATCHES={0x1220, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x11ec, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x8c, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "479bb735bfaffbc858"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x57, 0x5, "8c7dad409bc13bcc3507617eaf1500b6d16299ca32886db947a72fc2b4a23dfc90e62830d531fb6b38ec931812aeb1f2b96090e0f3e0807e29692dbc85d649a260ed7cb9aa06a07c2974d0ccafcb7f2c856122"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xeb}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x1}, {0xb58, 0x7, 0x2, "8457f3130563e7"}}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x4455}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="7e47b122300e2bc5", @TCF_META_TYPE_VAR="976b71"]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR='d', @TCF_META_TYPE_VAR="df1205e22e1cab026666", @TCF_META_TYPE_VAR="b55dea", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="76759281"]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="5a23d834801026", @TCF_META_TYPE_VAR='<', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5606b6bc58", @TCF_META_TYPE_VAR="ffd1ef86", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='#I', @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6, 0x1}, {0xb22, 0x9}}}]}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x5}, "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"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x3}, {0x4, 0x7, 0xc, 0xfc4c16d}}}, @TCF_EM_CANID={0x14, 0x7f, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6}, {0x8, 0x6}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='j']}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="235311ce03eb", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x3, 0x2}, {0xc641, 0xfc, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc3, 0x2}, {0x4, 0x0, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0x2}, {0x4, 0x4, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x80, 0x7, 0x401}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x1ff}, {0x6, 0xea, 0x4, 0xb5a}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x20004, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x1254}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1.563891529s ago: executing program 4 (id=2806): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f0000000440)="763d04e808620b6a6c6ef273ed8a66d3f408d68ab8", 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000002800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000027c0)={&(0x7f0000001480)={0x1330, r7, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "dbf3919447a7849acc432285d2951fc8cf5660eaf5a8cbb684e76c822805c1c65e32d2bbdb6b7d17282a20e9d5c138ce9522b334bb1df1c74b292c2d7f28a73830ba5a9fb404a3803e2c75a1a8e84e69b8728737d35f6e6b9ba72584fa4d9caa8fe2944de7cfef33984a20d8ac4032557ea8c326f862cc37a5d6853d44a0038b8d19753a1ac1f1bf54e81a78cd0d362e06aa3e95c0077fe496974b6036834d7a3bf134cf17f4f4f80f2ffb0614c8575e6dcf8922d389"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "439f6b0a5ba1198e0a14542310"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "906b16d0d9747a4a3ba8e3ed7d"}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x61}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30fa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x646}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*[\\\xeb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "c91bbca5ece880fc7590591fdec42c03666953dbfed9c26bcc847b2a5c231b047b2d2f419078c5711d7920ed2480b225e5f98af7a9ae5882f891fd"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x1330}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) sendmmsg$inet(r8, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040c0) close(r8) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={r6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xb, &(0x7f0000000680)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xa, 0x3, 0x5, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x1, 0x3, 0x6, 0x80, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x6, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x80}], &(0x7f0000000700)='GPL\x00', 0x65, 0x58, &(0x7f0000000740)=""/88, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xe, 0x3, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x1, 0x1, r10, r0], &(0x7f0000000940)=[{0x5, 0x1, 0xc, 0x1}, {0x3, 0x3, 0xd, 0x8}, {0x4, 0x5, 0xb, 0x5}, {0x3, 0x1, 0x5, 0xa}], 0x10, 0x8}, 0x94) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x40) 1.55218778s ago: executing program 0 (id=2807): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x13, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 1.29391369s ago: executing program 0 (id=2810): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x2, @private=0xa010101}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000006c0)='x', 0x1}], 0x1}, 0x4000054) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="f8feff00f5ffffffff05000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r9 = socket(0xb, 0x80000, 0xfffffffc) bind$vsock_stream(r9, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r9) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x30, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x40}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x1}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xfa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.254293144s ago: executing program 1 (id=2811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@empty}, &(0x7f00000001c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@delqdisc={0xa8, 0x25, 0x223, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xc}, {0xfff2, 0x6}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x65, 0x7, 0x4, 0x27}, 0x15de, 0x1, 0x3, 0x7, 0x6, 0x1c, 0x15, 0x14, 0x8, 0xfffffff9, {0x1, 0xfffffffc, 0x0, 0x21, 0x5, 0x1}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffb}}, @TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x79}]}, 0xa8}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) unshare(0x22020600) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 922.344172ms ago: executing program 3 (id=2812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x400) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x280303, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000280)) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="18005a8014000180050009"], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r1, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f", @ANYRESOCT=0x0, @ANYRESDEC=r8, @ANYRES64=r7], 0xe8}}, 0x0) (async) close(r0) 920.815288ms ago: executing program 4 (id=2813): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x1d, &(0x7f0000000080)=ANY=[@ANYRES32], 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fc11142603600e12080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189ce16277ce06bbace8013cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4a53f5aeb4edbb57a5025ccca9e06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 879.629175ms ago: executing program 1 (id=2814): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000029000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001400128009000100766c616e000000000400028008000500", @ANYRES32=0x0, @ANYBLOB="ecafe2d902f2e24961c73935bb532521f87d30796cbbfaba29c5f5ed23bc4bd7ce7d780f9668d4a78761aadecc052a018c1de698459200072f2140a9dcf2921ed36943a99428965b0d2bcd8c909ef18c36409f66607cdf444978b7769bde5e2556547df941587871baa10dc938ee9c647c275a61fae83a071905bb7fe6d204d4099b246e569ecdf0c090b6d43588703ad5943be4782854b5b28fac121a53e0e1f502b3620b000000000000000015bc2993"], 0x3c}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1e, 0x4) bind$inet(r0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r6) sendmsg$NFC_CMD_ENABLE_SE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x24060880) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000380)=0x0) bind$rds(r4, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB='n\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040027bd7000fcdbdf250f00000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="09001400766c616e000000000500140000000000110014002f6465762f6e65742f74756e0000000029001400626c6b696f2e7468726f74746c652e696f5f73657276696365645f72656375727369766500000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0xc7}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="00e3449b1136243800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x4}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) 851.577324ms ago: executing program 3 (id=2815): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffffffff0000000000000000000000000a0010"], 0xd4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000061c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000002a0002000000000000001f0d0000ac1e000100f3aae634b14ca4000000000000000000000000000000ff00000000000000fc4a000000000000010000000000000000000000050000000000000000000000000000007608dd3ef664115edc4d3ae6756e76328b4768d569d96d825999f80e0a99eb20df67fb03da6f759951da1c323293c58c2600"/323], 0x13c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a5", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)='Ir', 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x50044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 32) r3 = accept4(r0, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000006c0)=0x80, 0x80000) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x9}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x7, 0x40, 0x4, 0x4, 0x3, 0x7, 0x3, 0x8, 0x8001]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4844}, 0x4c001) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 64) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 64) recvmmsg(r6, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/69, 0x45}, {&(0x7f0000001ec0)=""/169, 0xa9}, {&(0x7f0000001f80)=""/244, 0xf4}, {&(0x7f0000002080)=""/3, 0x3}, {&(0x7f00000020c0)=""/184, 0xb8}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000002200)=""/155, 0x9b}, {&(0x7f00000022c0)=""/140, 0x8c}, {&(0x7f0000002380)=""/241, 0xf1}], 0xa, &(0x7f0000002540)=""/43, 0x2b}, 0x5}, {{&(0x7f0000002580)=@alg, 0x80, &(0x7f0000002780)=[{&(0x7f0000002600)=""/49, 0x31}, {&(0x7f0000002640)=""/95, 0x5f}, {&(0x7f00000026c0)=""/47, 0x2f}, {&(0x7f0000002700)=""/86, 0x56}], 0x4, &(0x7f00000027c0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f00000037c0)=""/41, 0x29}, {&(0x7f0000003800)=""/254, 0xfe}, {&(0x7f0000003900)}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/163, 0xa3}, {&(0x7f0000004a00)=""/119, 0x77}, {&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/194, 0xc2}, {&(0x7f0000004c40)=""/172, 0xac}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0xa, &(0x7f0000005dc0)=""/177, 0xb1}, 0xc0}, {{&(0x7f0000005e80)=@isdn, 0x80, &(0x7f0000007900)=[{&(0x7f0000005f00)=""/52, 0x34}, {&(0x7f0000005f40)=""/44, 0x2c}, {&(0x7f0000005f80)=""/111, 0x6f}, {&(0x7f0000006000)=""/160, 0xa0}, {&(0x7f00000060c0)=""/198, 0xc6}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/89, 0x59}, {&(0x7f0000007840)=""/167, 0xa7}], 0x8}, 0x3}], 0x5, 0x10003, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (rerun: 32) 771.102372ms ago: executing program 4 (id=2816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002380)={{r0, &(0x7f0000002040)='udp\x00', 0x171141, &(0x7f0000002080)={@_ha_fsid={[0x6, 0x6]}, {0x2, 0xc4, 0x4, 0x4d7}}, 0xffffa924, &(0x7f00000020c0)={@_ha_fsid}, &(0x7f0000002100)=0x7}, 0x2, &(0x7f0000002340)=[{0x2, 0x3ff, &(0x7f0000002140)='&f@\x00', &(0x7f0000002180)="9472a5dce41fb47250e1a906d83af625c52cdc1674f2d908fa003562b2317db84f6a2eefb48422cc284a94a69bdcd24b01954a4ddf337c2a7e240b551ff6bee0f61fe711195483526269ae2ae956ba438f0808ae24ef8e937fb2a81ef183f4f31c1837763865de6c03588079a0566d1277a06f0f07ccc7774b", 0x79, 0x28}, {0x6ec9df299eac932a, 0x6, &(0x7f0000002200)='ib\x00', &(0x7f0000002240)="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", 0xff, 0x12}]}) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000002400)={0x7, 0x83}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000002440)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x8401}, 0x4048000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001fc0)={{r0, &(0x7f0000000180)='\x00', 0x101000, &(0x7f00000001c0)={@align, {0x101, 0x0, 0x6, 0x3}}, 0xed08, &(0x7f0000000500), &(0x7f0000000540)=0x3}, 0xa, &(0x7f0000001e80)=[{0x3, 0x8000, &(0x7f0000000580)='ib\x00', &(0x7f00000005c0)="8cd8ba51a357cb38c486f019a9cd839e28f051bf536712ba8eff38633148fe2a9a1e707c503579c5dd32b586a422be014e10bc592428eeae89401dd2b2c6eb53a686a20104b413ffba74b5d5a10ac68dcca1cf697a9de4e475bf0582eeaa7993cd53f10eb01493c7b0ad02fe2e9e4448e4a30961390727556260a2a725595c444bd7351f0d548cfcece5dc160b94ec7ba4dfbdad0adf484a9bec0e53ba1ff16ce8325a77b47e2dcb143587841888280f3e55f2a10fb26a43b248a5c3e263d662ad28fb261a9c7221257a652a2c582e191b38b35ad86ee7644ba45b6a840559afd4e5af2da4487e02f0a31e75836823abc67b", 0xf2, 0x30}, {0x3, 0xe9, &(0x7f00000006c0)='eth\x00', &(0x7f0000000740)="64ab18a1559d2260a2eb22ca0db0108b06bf06131ec13419e2efb2400b862f75a2360179888ab41d3f9a5f04a7e5063a41c4098c92c94bc06dd0b3b4a9917202c7eaebaa00101a8f1210b9bf2514294b4bc10379832a667e0b2b7048067a9f6d95662a946e3781be43915d895d3ad3a06d07605619320994d85f4f83260db3274258e67ebe0993dbd25396247cac0e2e34f118e1a14c3193985b3e94b420231e", 0xa0, 0x2}, {0x1, 0x401, &(0x7f0000000800)='\':!$,%^\x00', &(0x7f0000000840)="6723ab197d8aeb74f26aa1db170f624437f2a3be5707d04af4e38b1c5f0a689a4363771c6db9f669d5fabdf226482822e9f3d109f9dad722a041b9890c8a8ed0a9d1f5e76d863e8db82dbe769cbac912f01e89d0b86628a9609481571c425fccbcf2a16c7c668cf7bb89662dac417a500a61c6eb9cb4e889a50ccc21522c60c36b08d5f9de36d9cb6b3269dcf283ac0543f51944a1a1747b", 0x98, 0x8}, {0x2, 0x518a, &(0x7f0000000900)='TIPCv2\x00', &(0x7f0000000940)="5a448fc562a52aef62b9014dfd0d662a85da09443a2444ab94df876796def062e4d03eb7a6ad421b9a0e364022097426a60c5739467df66464799200b1c4e8d059b1b5e918ece2872b09535aebf812e0f9a21a9f5502e5c49527df8dfb8ef3a6ae73b798942169bb22fd49ea26b2fb7197f112952b403a2ac2a862b8e7733fef1f5ceb9f2bac0fe80ae4ad2736d991cde6cb56a76ba603d249bbdd2caa3205f3fad52a240188bff1e8919ca5dbe85e257c7523e3808c4cd7d704dcff5a0de57d413f5bc51742e191a30ef4ae495cbc9e0c74afabf3c87f232d32f8d5cda82500271620774e7b58396e575534eaa294", 0xef, 0x20}, {0x2, 0xfffffff8, &(0x7f0000000a40)='#\x00', &(0x7f0000000a80)="e7986e7db2096cca301e4e1c582cf0ea5c326cb5f78f7f69f270c6b3444b3fd3bea599478cab083cada6d3b83ad014c026c67e7e469ca9e1bb0c36eba77dffb5a7f5d61b5eec97893d60120c034bf5775f8a59d780f9ab39235189985d5e95c096e8bd0309a89d22dba08b9939e153fd547e3bde9e47d61a1e57a4c3399e9602a82f9275f4b4cec307c32cf3dfa976df343d7b43d8742a0e8e28dc0db5fa1c1c5d49ba7f3a75cb6d16", 0xa9, 0x18}, {0x3, 0x6, &(0x7f0000000b40)='\x00', &(0x7f0000000b80)="63213c0ac2a729e1b85bc87e0dacb68b61011af7717ea591dd7ea986caeb2064e6bb04605b78cfd21dfe8dfd8d0911672ccef1efb3b4855595d3b4938b0d3622df6da0f5a87dc16ef6a61cbd79d69e334dc61bbe2d59762cf709ead040b696f62953bfe25753ea72c76aa4ea1e17ab0528828bca38b14c31c6eb7559ae4c39929903a8544c4fac8098708a193325fdc42000f981eedcf1cdcd2675b22d3a583060d857e4e72431132c96c4bda20a2a9f1e5054e2fa0a81f21a5732", 0xbb, 0x8}, {0x1, 0x1, &(0x7f0000000c80)='&f@\x00', &(0x7f0000000cc0)="0f9abeb2433cd7b60e2d1c79e0ce3e84c918ba1fafa5749365b0b0c4882ab55fbb247a9ae81d1c08b049b2c685cc578775", 0x31, 0x8}, {0x2, 0xffff372a, &(0x7f0000000d00)='\\#\xf1\x00', &(0x7f0000000d40)="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", 0x1000}, {0x1, 0x80000001, &(0x7f0000001d40)='\xcc\x00', &(0x7f0000001d80)="5d88c9aef30b6288e99eb9498dade6f33f236d986e7458f35bd1", 0x1a, 0xba3a03d7e8eeedc3}, {0x2, 0x48, &(0x7f0000001dc0)='()^{,\x00', &(0x7f0000001e00)="422c108d048a2af1e7e4a37f38842ad4840cac172882a9df0f7b3bd76e05a227848bf660c5b7c9e08e8b0db23a5f73289772da944eaa27ba8e0a8411adb1e31c5a3ebb99cd5c805969386f7eca797406f766052862a56334d45cf36fe6315ed597308783b467091b5e7e96587991", 0x6e, 0x22}]}) socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041dfffff00000000080020409111cb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e348930eeb"], 0xfdef) 704.176231ms ago: executing program 1 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) 677.959233ms ago: executing program 2 (id=2818): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) setsockopt$inet_int(r6, 0x0, 0x22, &(0x7f0000000000), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000e05f50300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) r12 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r12, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x6c008000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000040000004a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000009e211c39"], 0x34}}, 0x0) 676.976819ms ago: executing program 3 (id=2819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 502.796192ms ago: executing program 3 (id=2820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f3a05c70c00000000620bf26d7126ac3aabf41cfa00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 496.970531ms ago: executing program 4 (id=2821): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x606a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000014c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x147}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r0, 0x8000}, {r0, 0x20}], 0x2, 0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="00010000f4f13be957694e4cc4a32dbe586e4244855d3d2e8b1d1a071f0cc1f57d96a0509810a7", @ANYRES16, @ANYBLOB="010000000000fcffffff0100000044000180060001000a00000008000500020000000c0007000000000000000000080009005b000000090006006e6f6e6500000000080008000000000008000b0073697000"], 0x58}}, 0x800) r11 = socket$inet6(0xa, 0x80000, 0xffff) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @empty, 0x5}, 0x1c) 487.352305ms ago: executing program 1 (id=2822): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d32", 0xe}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 426.92123ms ago: executing program 3 (id=2823): r0 = socket(0x2, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x37, &(0x7f00000000c0)={&(0x7f0000001380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x8010) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x2}, &(0x7f00000002c0)=0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) 259.211029ms ago: executing program 0 (id=2824): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xf08}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0xc000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffd}, 0x94) 257.401173ms ago: executing program 2 (id=2825): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xc) write$nci(0xffffffffffffffff, 0x0, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r5, @ANYRESOCT=r6], 0x0, 0x100002, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f0000000280)="17000000020001000003d68c5ee17688a20032000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff0601150039330100000000000300000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000003eb7d4d9f53a3b6cf36e351cdf", 0xb8) 244.032093ms ago: executing program 3 (id=2826): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="d8000000180081054e81f782db4cb9040220080406037c01e8fe55a10a0015400200142603600e122f0016000600060055000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e490163d93451792954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000001c40)={'team_slave_0\x00', @ifru_settings={0x5, 0x3, @cisco=&(0x7f0000001c80)={0x9, 0x7}}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x2f, 0x0, &(0x7f0000000480)) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x3c5842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000180)=0x2cf7) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="afa844c7b7f77bf4aa1c5c43b29a71c2336c8594c3135ee0"], 0xffdd) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180), &(0x7f0000001c00)=0x8) getsockname$packet(r3, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r8 = socket(0x40000000015, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000001bc0)={&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001d00)=""/72, 0x48}, {&(0x7f00000005c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/139, 0x8b}, {&(0x7f0000001940)=""/76, 0x4c}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000001a00)=""/214, 0xd6}], 0x9}, 0x0) sendto$inet6(r8, 0x0, 0xfffffffffffffe4e, 0x18100, &(0x7f0000000240)={0xa, 0x4e22, 0x30, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7ff}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000340)=0xf) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket(0x1, 0x803, 0x0) 222.895164ms ago: executing program 1 (id=2827): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @private=0xa010100}, 0x10) (async, rerun: 64) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x804, 0x2, 0x80000000000004, 0x8}, 0x0, &(0x7f0000000400)={0x1fa, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x4, 0x8}, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) (async, rerun: 64) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) (rerun: 64) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000500)={'dummy0\x00', &(0x7f0000000600)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x26bfb77f, 0x3, 0x1, 0x5, 0x7, 0x4, 0x9, 0x400009, 0xf9, 0xfffffffe, 0x2, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x7, 0xfffffffb, 0x8, 0x800, 0x5}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000a471f4395579097a8e7ae7e9e09e79eab90a6169c2572b1d3bea6f7fd9fcc84226001f565350b4fd966d6df39fafa6a2711b47676f4d9917283f9e7bf1ed14bc9837f8e34c92338de9c169", @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf25050000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r6, &(0x7f0000000080), 0x0) (async) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYBLOB='\x00'/20, @ANYRES64=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b502000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 58.659892ms ago: executing program 1 (id=2828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x15, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000012000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7081c33b30a0000755ced1254bb9be4b914b592e4d77b8af8ff00000000bfa20000000000000702000000000001000000b7040000020000008500680f3008141235ec72f0ee1c520ba2d223b8697a84ea0de43b7cf06f892dcfed61cade13fcbec8c8d24fa69bb42f8593f183dce975f0c8ddc730ad6585b75eb6d978591999ac1845f8"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{r3, &(0x7f0000000380)='\x00', 0x4100, 0x0, 0xffff, &(0x7f00000000c0), &(0x7f0000000140)=0x4}, {[0x9, 0x1000, 0x5, 0x1]}, 0x2a, 0x5, &(0x7f0000000180)=""/5}) syz_emit_ethernet(0xba, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a00843c0020010000000000000000000000000001ff02000000000000000000000000808715b02a62108379190f240800012f04000000000000c910ff020000000000000000000000000001c910fe8000000000000000000000000000aa000000000420880b0000000000000800ba878464fe4672d177b58c20328b9fc8000486dd080088be00000001100020000100000000000000080022eb00000000200000080200000000000078531666d74fd7bbfca58361bf855a792a3b02262065143b438817e09bdd"], 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYBLOB="fefffe07b4e093dbe6d312865872602a2a8b5b0496af8050fa4a43aa1d5648971672eb608d0822fe34abe7ba0b0335298a60cac29f63b5b8d275d370d6c3a147b9d9bc17afa045edcbaf4f9857952a61ec4e57343d35b412885e262e77b5c837c75a366780c0e7131e2557f0b56afd9bda082509c48f40ea14e162f223dc34c432f3c1a49ed83b00ef3bc38b449a27d4fe7fdda2af51c97e7292819222be351c749f697e9e724c171f619ee525db01444a16d0febcd1cefa074a082266b4418f5203ee671549731a209273285a8f4f34c2d457a3573546dc442a96f3468ff2fb10c00ddb0b9fbc049b898ad77c2e8d85465412cf2b20eb57b889e5013c2e392e4fe3123be6ae4adb93fa522c080def86f4e7af3e65d377fbafd5f1a2e7a8bf90884707864557507c65ffaf8a415f6a8be381f125c083a7b95ee597c8dcf1753f992bf21a43462bfc131b4e68bd44bcb2f2d8d50ea9ff9f6c6021c89cc4e5a9bb88ecbadeba909bcf04150f582e2cb3668260775e0dfe6a06e0ecaf16f3396352adb57edc6125ee1e9a1ca10c0405dfc434e3dfdc92e4404ecd5165f6775472ff143a16bd4090d6e41e03a7e0c204651e40947fd8006d0b782432dfae2b1eb3e2e1456bba26bce249b19e7beeb1ac47b2576751a13e25f6f40d08a4e914a68fd557627c42af039a1227c9d3de9a71d2574cf3c51817600d4eff13271bfebe2179361a4a7eb216bb2d2342e65de8d84178eda32aac3ed15779737e49ad451636bb9b792258612958279e0c7cb5d119660cf83a21c6246f4cd3859c7164aa8215e98b81d7696f0d61260be22af088cfbae066c01a041f9bd3b457606f44596b6aaf2536c889ee3cdb854072a8210f240fd446e3f0518e3be0951a48bf2dae77c3e2d86ec1056730fc9eb1c7a6bb1a2963edb278771d3f17ddc0946e8d78cfa64c999df1fa8e7dd7d20bfd1deabc8ca1b55f4e6b6e54f3f5a35f4344321e968a3b2d7876fb0099e881299e7b23951828ba8dea064e2f4966a7f72b13909fcbe5717aa5190bf0797a26e62fd193e8843b7b8d5534052b9378820da5a85bf59dd08d47f6b672648b64772caf9ef84df7ff036c90061907508011c3782c644c122a68937bdb0a3ff6b1eb780ce6a6a33c954af88ff31d798ea8059d513400c244c31477cd06162d65e074e75c0f74ee9238075b3e9d5003895b6419b0f1e4661ec1fe09c378fb01b36a7667afaa8d785248f15e96d5752e5c65388a5b31158fcaceb5971b4e6a35a8dfb74695cad2018d1902a664ca9481880ee95a84489082ac8f68fd18a593ba646b14f0dbe3d64abd8b593f7173ffa38e1c44322dc6baaea1355c3d4b084a29e48ec4a774529c604b49f1be8eefd509fe03ee61164d9217cf7b7a674268e2b05537854113cd1f95a4aaaaa55d84f59ed4b9c8f33795c80b3df73b8fc76bf246bc6a5da0104c891df902eecddb758e73d297dd9b5f8e4c236baae1e5b1fbc03fc432cac261f31a16f959dcbffbcd7d4964eca5f980b0d0bb4acc6aa15a0c35cd7d29ba2d6624129a33161a616b921e2e8d722e74fb842b72adb4b23e75881c031a4588885c964ecc3f5f39ebadee253ad20ae3eae5f857d38e88048dd8b82ed657b58dd697d7e7e6a930daadd23d148ea5f4b23de3072e7d84a2028d283c33048fea35f53daf391852666fcebd33a9b35638206c514b282fb5273a7f763afdeee069a284a5d5e8c9d3b109a2213b59d864c524dfef347f4bd70f2bca2d4ff43c39faa2a028bc08ac4032692cdfba8622c832f71aafa045ee3cf144489657137376a7c5c511225254acf25689fb36c0e53b5fc9a0e5426b1fa835306644d776285b53c17c178323654c2538cbeb002b0aa66b29f5d5f192e5fc6ad381d907bdf6c38ad3d5cb149955f7c65ac0d66038c94600365fd6c119af6ac15d1018ddf6a992059fde12f4d12371b12042458e906c832b0800b4c1e360f6a8f3b5c7b82d1bebbe82efd08c9b9468d8809480f632bc7e5d53de0a979a2ba9bea8a7b3e96a7a6f1adb0f4d57f5c0b68bfd412a7940bc5ff404e5e6211557da516f3347b9345c1dcd9fcf17dfc37a78a785d154eb685a5318f3fdb6ba65b297884925f08b7102b81c0bb9a9c2350c64d9b69094c1d17d4b235526e8b93fb53ba92f81d27375ea8ddd23d3fd86eb027a9531b6bb95fba190bad9f28ccbd0f48a092fa2924560a47300073df281a2b66999f4bf5519e0742b4ab5d7c9a99af3e0c68d7b34ceb180422bac3dc2f5863790a7103106cea592b08c7e0b6a931fd64d3256212bc8a6f533a3a047ac5fdf13b2588f3986a750c9416fa0fe6d5e173dcd5396d23e06ce549f4eed69f4cfd8ddbad368ef824401920891b803a0a147e660d37adba0b6c3afe6398ab9031d32ce42c41f133ad217f8ed9e8fd79478c9a27568ca73ca477c5a02e87c607c35ed55b7133d1f216cf3076701b784c76fb251027c345e8a82c2c00fe1ee8bd49da00ee372361c62051a17f66b59efc1d840b9af6766dfccc8c56068801892d521d1911bab78ecb57b26cb22ad49751e25b5a129b515a7f0b883db0a323e7fc87495a4a594ac50ddec1ec56a98dff77272cd7ac69564210e4a561a6ecdeade93d255da254af36c35baf079b339455cdd08e3c328d5efa68819421b397552902dbce8ccc8a3bc5158ecade155fd44858a177e8748e3bfd310fccfab1c02ebb88191c36462061f81d36a1074bfc843c25b86b5d4478e5541f63f3bc51ddb67831739f63eacba93513cd88009b01c99607b1ccd9c8fa0d538f0317caafd8c7ca1cb669b3b5395ab10025ab300850ae931225f95e4fdabc904d54e88dec5eaf0881063031a2a8310b554bc3f411e62bff9226fc84acc8b1aea06cc26299cc7786397e0a44ca659216ea1b360c9f9d8c7e62e661b0f28ecd7319ad6830ed893684e84d76a39ef6c7c37ecb2d519"], 0x806) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x80000000, 0x0, 0x100000}, {}, {0xfffffffe, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf25170000005400068014000300322d73352d3a955d482ee5364c4323843c00040067636d2861657329b7ff00000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='%\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f0001000000"], 0x40}}, 0x24000080) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e401727eb53b", 0x17, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @random="6c267dad3e11"}, 0x14) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b40)=@newtfilter={0x1254, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1224, 0x2, [@TCA_FLOW_EMATCHES={0x1220, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x11ec, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x8c, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "479bb735bfaffbc858"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x57, 0x5, "8c7dad409bc13bcc3507617eaf1500b6d16299ca32886db947a72fc2b4a23dfc90e62830d531fb6b38ec931812aeb1f2b96090e0f3e0807e29692dbc85d649a260ed7cb9aa06a07c2974d0ccafcb7f2c856122"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xeb}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x1}, {0xb58, 0x7, 0x2, "8457f3130563e7"}}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x4455}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="7e47b122300e2bc5", @TCF_META_TYPE_VAR="976b71"]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR='d', @TCF_META_TYPE_VAR="df1205e22e1cab026666", @TCF_META_TYPE_VAR="b55dea", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="76759281"]}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="5a23d834801026", @TCF_META_TYPE_VAR='<', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5606b6bc58", @TCF_META_TYPE_VAR="ffd1ef86", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='#I', @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6, 0x1}, {0xb22, 0x9}}}]}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x5}, "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"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x3}, {0x4, 0x7, 0xc, 0xfc4c16d}}}, @TCF_EM_CANID={0x14, 0x7f, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6}, {0x8, 0x6}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='j']}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="235311ce03eb", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x3, 0x2}, {0xc641, 0xfc, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc3, 0x2}, {0x4, 0x0, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0x2}, {0x4, 0x4, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x80, 0x7, 0x401}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x1ff}, {0x6, 0xea, 0x4, 0xb5a}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x20004, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x1254}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 0s ago: executing program 0 (id=2829): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, 0x0, 0x0) (async) close(r0) kernel console output (not intermixed with test programs): 930][T10477] should_fail_ex+0x40c/0x560 [ 225.928045][T10477] should_failslab+0xa8/0x100 [ 225.928100][T10477] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 225.928144][T10477] ? skb_clone+0x212/0x3a0 [ 225.928261][T10477] ? skb_clone+0x212/0x3a0 [ 225.928291][T10477] skb_clone+0x212/0x3a0 [ 225.928317][T10477] __netlink_deliver_tap+0x413/0x860 [ 225.928389][T10477] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.928415][T10477] netlink_deliver_tap+0x19c/0x1b0 [ 225.928441][T10477] netlink_unicast+0x77f/0x940 [ 225.928473][T10477] netlink_sendmsg+0x813/0xb40 [ 225.928528][T10477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.928557][T10477] ? aa_sock_msg_perm+0xf1/0x1b0 [ 225.928651][T10477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.928673][T10477] sock_sendmsg_nosec+0x13a/0x180 [ 225.928764][T10477] ____sys_sendmsg+0x54e/0x850 [ 225.928792][T10477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.928824][T10477] ? import_iovec+0x73/0xa0 [ 225.928884][T10477] ___sys_sendmsg+0x2a5/0x360 [ 225.928905][T10477] ? __lock_acquire+0x683/0x2cf0 [ 225.928955][T10477] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.929018][T10477] ? __fget_files+0x2a/0x420 [ 225.929051][T10477] ? __fget_files+0x3a2/0x420 [ 225.929082][T10477] __x64_sys_sendmsg+0x1b1/0x290 [ 225.929107][T10477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.929151][T10477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.929199][T10477] do_syscall_64+0x174/0x580 [ 225.929285][T10477] ? trace_irq_disable+0x3b/0x140 [ 225.929324][T10477] ? clear_bhb_loop+0x40/0x90 [ 225.929350][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.929371][T10477] RIP: 0033:0x7f2cb119ce59 [ 225.929400][T10477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.929454][T10477] RSP: 002b:00007f2cb206d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.929504][T10477] RAX: ffffffffffffffda RBX: 00007f2cb1416090 RCX: 00007f2cb119ce59 [ 225.929519][T10477] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 225.929531][T10477] RBP: 00007f2cb206d090 R08: 0000000000000000 R09: 0000000000000000 [ 225.929544][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.929556][T10477] R13: 00007f2cb1416128 R14: 00007f2cb1416090 R15: 00007fff09097db8 [ 225.929599][T10477] [ 226.217523][T10468] 0: reclassify loop, rule prio 0, protocol 700 [ 226.453530][T10492] bond3: option xmit_hash_policy: invalid value (10) [ 226.471884][T10492] bond3 (unregistering): Released all slaves [ 228.816674][T10465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.086603][T10508] FAULT_INJECTION: forcing a failure. [ 229.086603][T10508] name failslab, interval 1, probability 0, space 0, times 0 [ 229.087333][T10507] __nla_validate_parse: 4 callbacks suppressed [ 229.087379][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1512'. [ 229.118508][T10508] CPU: 0 UID: 0 PID: 10508 Comm: syz.1.1514 Not tainted syzkaller #0 PREEMPT(full) [ 229.118537][T10508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.118549][T10508] Call Trace: [ 229.118557][T10508] [ 229.118566][T10508] dump_stack_lvl+0xe8/0x150 [ 229.118598][T10508] should_fail_ex+0x40c/0x560 [ 229.118634][T10508] should_failslab+0xa8/0x100 [ 229.118660][T10508] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 229.118690][T10508] ? local_lock_release+0x9c/0x160 [ 229.118723][T10508] ? __alloc_skb+0x1d7/0x7a0 [ 229.118739][T10508] ? __alloc_skb+0x1d7/0x7a0 [ 229.118765][T10508] __alloc_skb+0x1d7/0x7a0 [ 229.118789][T10508] netlink_ack+0x136/0xb30 [ 229.118809][T10508] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.118837][T10508] ? __pfx_nl80211_post_doit+0x10/0x10 [ 229.118973][T10508] ? __pfx_ref_tracker_free+0x10/0x10 [ 229.119118][T10508] netlink_rcv_skb+0x2a4/0x4a0 [ 229.119142][T10508] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.119173][T10508] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.119213][T10508] ? down_read+0x2be/0x330 [ 229.119266][T10508] genl_rcv+0x28/0x40 [ 229.119292][T10508] netlink_unicast+0x7bb/0x940 [ 229.119327][T10508] netlink_sendmsg+0x813/0xb40 [ 229.119362][T10508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.119391][T10508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 229.119423][T10508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.119445][T10508] sock_sendmsg_nosec+0x13a/0x180 [ 229.119475][T10508] ____sys_sendmsg+0x54e/0x850 [ 229.119502][T10508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.119531][T10508] ? import_iovec+0x73/0xa0 [ 229.119555][T10508] ___sys_sendmsg+0x2a5/0x360 [ 229.119574][T10508] ? __lock_acquire+0x683/0x2cf0 [ 229.119600][T10508] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.119660][T10508] ? __fget_files+0x2a/0x420 [ 229.119679][T10508] ? __fget_files+0x3a2/0x420 [ 229.119705][T10508] __x64_sys_sendmsg+0x1b1/0x290 [ 229.119731][T10508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.119773][T10508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.119795][T10508] do_syscall_64+0x174/0x580 [ 229.119812][T10508] ? trace_irq_disable+0x3b/0x140 [ 229.119832][T10508] ? clear_bhb_loop+0x40/0x90 [ 229.119857][T10508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.119875][T10508] RIP: 0033:0x7f752739ce59 [ 229.119899][T10508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.119915][T10508] RSP: 002b:00007f75282d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.119936][T10508] RAX: ffffffffffffffda RBX: 00007f7527615fa0 RCX: 00007f752739ce59 [ 229.119950][T10508] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 229.119962][T10508] RBP: 00007f75282d5090 R08: 0000000000000000 R09: 0000000000000000 [ 229.119974][T10508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.119986][T10508] R13: 00007f7527616038 R14: 00007f7527615fa0 R15: 00007ffffdf82978 [ 229.120028][T10508] [ 229.423819][T10510] netlink: 'syz.2.1513': attribute type 13 has an invalid length. [ 229.458046][T10502] syzkaller0 speed is unknown, defaulting to 1000 [ 229.488135][T10510] netlink: 'syz.2.1513': attribute type 17 has an invalid length. [ 229.681727][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 229.693206][T10524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1519'. [ 229.697961][T10510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.713353][T10510] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.722199][T10510] dummy0: left promiscuous mode [ 229.731965][T10510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.783773][T10510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.794427][T10510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.808409][T10510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.819879][T10510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.843117][T10510] veth1_vlan: left promiscuous mode [ 229.849772][T10510] veth0_vlan: left promiscuous mode [ 229.859318][T10510] veth0_vlan: entered promiscuous mode [ 229.869781][T10510] veth1_vlan: entered promiscuous mode [ 229.890106][T10510] tipc: Resetting bearer [ 229.903698][T10510] tipc: Resetting bearer [ 229.917560][T10510] veth1_macvtap: left promiscuous mode [ 229.926222][T10510] veth0_macvtap: left promiscuous mode [ 229.935171][T10510] veth0_macvtap: entered promiscuous mode [ 229.943411][T10510] veth0_macvtap: entered allmulticast mode [ 229.949773][T10510] macvtap0: left allmulticast mode [ 229.955875][T10510] veth0_macvtap: left allmulticast mode [ 229.974605][T10510] veth1_macvtap: entered promiscuous mode [ 229.988818][T10510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.000156][T10510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.014800][T10510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.029985][T10510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.048212][T10510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.057784][T10510] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 230.113492][T10526] veth1_macvtap: left promiscuous mode [ 230.119458][T10526] macsec0: entered allmulticast mode [ 230.148341][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.155601][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.169514][ T5629] Bluetooth: hci4: link tx timeout [ 230.175208][ T5629] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 230.198258][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.205608][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.347760][T10543] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1521'. [ 230.426360][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.440416][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.456114][T10532] syzkaller0: entered promiscuous mode [ 230.462829][T10532] syzkaller0: entered allmulticast mode [ 230.485152][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.517751][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.669992][T10560] FAULT_INJECTION: forcing a failure. [ 230.669992][T10560] name failslab, interval 1, probability 0, space 0, times 0 [ 230.722271][T10562] FAULT_INJECTION: forcing a failure. [ 230.722271][T10562] name failslab, interval 1, probability 0, space 0, times 0 [ 230.738927][T10560] CPU: 0 UID: 0 PID: 10560 Comm: syz.0.1526 Not tainted syzkaller #0 PREEMPT(full) [ 230.738956][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.738968][T10560] Call Trace: [ 230.738975][T10560] [ 230.738984][T10560] dump_stack_lvl+0xe8/0x150 [ 230.739018][T10560] should_fail_ex+0x40c/0x560 [ 230.739049][T10560] should_failslab+0xa8/0x100 [ 230.739074][T10560] __kmalloc_noprof+0xfe/0x720 [ 230.739106][T10560] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 230.739137][T10560] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 230.739179][T10560] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 230.739219][T10560] genl_family_rcv_msg_doit+0xda/0x340 [ 230.739256][T10560] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 230.739295][T10560] ? apparmor_capable+0x126/0x170 [ 230.739405][T10560] ? bpf_lsm_capable+0x9/0x20 [ 230.739446][T10560] ? security_capable+0x7e/0x2c0 [ 230.739516][T10560] genl_rcv_msg+0x614/0x7a0 [ 230.739562][T10560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.739587][T10560] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 230.739613][T10560] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 230.739640][T10560] ? __pfx_nl80211_post_doit+0x10/0x10 [ 230.739666][T10560] ? __pfx_ref_tracker_free+0x10/0x10 [ 230.739706][T10560] netlink_rcv_skb+0x226/0x4a0 [ 230.739731][T10560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.739761][T10560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.739800][T10560] ? down_read+0x2be/0x330 [ 230.739826][T10560] genl_rcv+0x28/0x40 [ 230.739852][T10560] netlink_unicast+0x7bb/0x940 [ 230.739886][T10560] netlink_sendmsg+0x813/0xb40 [ 230.739920][T10560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.739949][T10560] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.739978][T10560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.739999][T10560] sock_sendmsg_nosec+0x13a/0x180 [ 230.740029][T10560] ____sys_sendmsg+0x54e/0x850 [ 230.740056][T10560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.740088][T10560] ? import_iovec+0x73/0xa0 [ 230.740114][T10560] ___sys_sendmsg+0x2a5/0x360 [ 230.740135][T10560] ? __lock_acquire+0x683/0x2cf0 [ 230.740161][T10560] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.740221][T10560] ? __fget_files+0x2a/0x420 [ 230.740241][T10560] ? __fget_files+0x3a2/0x420 [ 230.740273][T10560] __x64_sys_sendmsg+0x1b1/0x290 [ 230.740299][T10560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.740343][T10560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.740364][T10560] do_syscall_64+0x174/0x580 [ 230.740383][T10560] ? trace_irq_disable+0x3b/0x140 [ 230.740401][T10560] ? clear_bhb_loop+0x40/0x90 [ 230.740423][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.740443][T10560] RIP: 0033:0x7f9de819ce59 [ 230.740463][T10560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.740483][T10560] RSP: 002b:00007f9de9138028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.740505][T10560] RAX: ffffffffffffffda RBX: 00007f9de8415fa0 RCX: 00007f9de819ce59 [ 230.740529][T10560] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 230.740541][T10560] RBP: 00007f9de9138090 R08: 0000000000000000 R09: 0000000000000000 [ 230.740554][T10560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.740565][T10560] R13: 00007f9de8416038 R14: 00007f9de8415fa0 R15: 00007ffc951fdf68 [ 230.740599][T10560] [ 230.781246][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.3.1527 Not tainted syzkaller #0 PREEMPT(full) [ 230.781272][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.781283][T10562] Call Trace: [ 230.781291][T10562] [ 230.781300][T10562] dump_stack_lvl+0xe8/0x150 [ 230.781329][T10562] should_fail_ex+0x40c/0x560 [ 230.781359][T10562] should_failslab+0xa8/0x100 [ 230.781382][T10562] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 230.781409][T10562] ? skb_clone+0x212/0x3a0 [ 230.781429][T10562] ? skb_clone+0x212/0x3a0 [ 230.781456][T10562] skb_clone+0x212/0x3a0 [ 230.781480][T10562] __netlink_deliver_tap+0x413/0x860 [ 230.781513][T10562] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.781540][T10562] netlink_deliver_tap+0x19c/0x1b0 [ 230.781562][T10562] netlink_sendskb+0x68/0x140 [ 230.781583][T10562] netlink_rcv_skb+0x2a4/0x4a0 [ 230.781604][T10562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.781631][T10562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.781667][T10562] ? down_read+0x2be/0x330 [ 230.781691][T10562] genl_rcv+0x28/0x40 [ 230.781714][T10562] netlink_unicast+0x7bb/0x940 [ 230.781744][T10562] netlink_sendmsg+0x813/0xb40 [ 230.781775][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.781800][T10562] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.781829][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.781848][T10562] sock_sendmsg_nosec+0x13a/0x180 [ 230.781875][T10562] ____sys_sendmsg+0x54e/0x850 [ 230.781902][T10562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.781932][T10562] ? import_iovec+0x73/0xa0 [ 230.781955][T10562] ___sys_sendmsg+0x2a5/0x360 [ 230.781974][T10562] ? __lock_acquire+0x683/0x2cf0 [ 230.781997][T10562] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.782061][T10562] ? __fget_files+0x2a/0x420 [ 230.782078][T10562] ? __fget_files+0x3a2/0x420 [ 230.782106][T10562] __x64_sys_sendmsg+0x1b1/0x290 [ 230.782130][T10562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.782183][T10562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.782203][T10562] do_syscall_64+0x174/0x580 [ 230.782220][T10562] ? trace_irq_disable+0x3b/0x140 [ 230.782238][T10562] ? clear_bhb_loop+0x40/0x90 [ 230.782261][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.782278][T10562] RIP: 0033:0x7f2cb119ce59 [ 230.782297][T10562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.782312][T10562] RSP: 002b:00007f2cb208e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.782332][T10562] RAX: ffffffffffffffda RBX: 00007f2cb1415fa0 RCX: 00007f2cb119ce59 [ 230.782345][T10562] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 230.782356][T10562] RBP: 00007f2cb208e090 R08: 0000000000000000 R09: 0000000000000000 [ 230.782367][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.782378][T10562] R13: 00007f2cb1416038 R14: 00007f2cb1415fa0 R15: 00007fff09097db8 [ 230.782409][T10562] [ 231.441854][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 231.469452][T10568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1529'. [ 231.566094][T10570] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1530'. [ 231.577886][T10570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1530'. [ 231.817848][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 231.827301][T10577] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1532'. [ 231.917231][T10580] syzkaller0 speed is unknown, defaulting to 1000 [ 231.990076][T10587] netlink: 'syz.1.1535': attribute type 4 has an invalid length. [ 232.031446][T10587] netlink: 'syz.1.1535': attribute type 4 has an invalid length. [ 232.251141][ T5631] Bluetooth: hci4: command 0x0405 tx timeout [ 232.497474][T10606] syzkaller1: entered promiscuous mode [ 232.508028][T10606] syzkaller1: entered allmulticast mode [ 232.566772][T10609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.582435][T10609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.219754][T10682] __nla_validate_parse: 7 callbacks suppressed [ 234.219775][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1545'. [ 234.951181][T10588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.235005][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 235.288444][T10719] netlink: 'syz.4.1549': attribute type 3 has an invalid length. [ 235.300101][T10715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1546'. [ 235.522086][T10722] tipc: Enabling of bearer rejected, already enabled [ 235.590518][T10722] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1550'. [ 235.642779][T10722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.659657][T10735] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.077765][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 236.120874][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 236.158474][T10758] sctp: [Deprecated]: syz.3.1559 (pid 10758) Use of int in maxseg socket option. [ 236.158474][T10758] Use struct sctp_assoc_value instead [ 236.409315][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1561'. [ 236.537473][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'. [ 236.583995][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'. [ 236.652057][ T29] audit: type=1107 audit(1782628955.157:2): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 236.764414][T10785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.841619][T10775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.533189][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 237.574357][T10812] mac80211_hwsim hwsim2 wlan0: default FDB implementation only supports local addresses [ 238.827961][T10882] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 238.844723][T10879] vlan0: entered promiscuous mode [ 238.879875][T10879] bridge0: entered promiscuous mode [ 238.925190][T10883] netlink: 'syz.3.1587': attribute type 5 has an invalid length. [ 238.979090][T10882] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 239.861114][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.230066][T10939] __nla_validate_parse: 2 callbacks suppressed [ 240.230088][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 240.287871][T10943] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 240.336920][T10942] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 240.502690][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 240.638173][T10951] bond3: entered promiscuous mode [ 240.659970][T10951] bond3: entered allmulticast mode [ 240.686680][T10951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.896834][ T48] tipc: Subscription rejected, illegal request [ 241.018657][T10960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1609'. [ 241.434841][T10988] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 241.776738][T10988] bond4: entered promiscuous mode [ 241.800177][T10988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.998556][T10988] vlan2: entered allmulticast mode [ 242.041245][T10988] bond4: entered allmulticast mode [ 242.879771][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 243.111592][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 243.120890][T11032] netlink: 'syz.1.1629': attribute type 10 has an invalid length. [ 243.145071][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1629'. [ 243.280571][T11037] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 243.547417][T11038] bond5: (slave bridge1): Enslaving as a backup interface with an up link [ 244.084071][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 244.110398][T11080] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 244.132219][T11080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1644'. [ 244.411212][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1647'. [ 244.549628][T11099] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1650'. [ 244.701689][T11110] xt_connbytes: Forcing CT accounting to be enabled [ 244.922288][T11118] netlink: 'syz.3.1656': attribute type 10 has an invalid length. [ 245.020001][T11120] netlink: 'syz.0.1658': attribute type 1 has an invalid length. [ 245.049239][T11122] syzkaller0: entered promiscuous mode [ 245.067687][T11122] syzkaller0: entered allmulticast mode [ 245.372730][T11137] __nla_validate_parse: 3 callbacks suppressed [ 245.372753][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 245.415734][T11135] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1664'. [ 245.457273][T11137] gretap0: entered promiscuous mode [ 245.584779][T11143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1663'. [ 245.684019][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 245.715599][T11147] netlink: 'syz.3.1669': attribute type 10 has an invalid length. [ 245.721802][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1671'. [ 245.731110][T11147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1669'. [ 245.761627][T11152] tipc: Started in network mode [ 245.770760][T11152] tipc: Node identity 080211, cluster identity 4711 [ 245.791679][T11152] tipc: Enabled bearer , priority 0 [ 245.858429][T11152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1670'. [ 245.879835][T11152] tipc: Resetting bearer [ 246.049293][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'. [ 246.088660][T11158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1674'. [ 246.168492][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 246.403143][T11175] netlink: 'syz.1.1680': attribute type 8 has an invalid length. [ 246.871819][ T809] tipc: Node number set to 134353152 [ 246.922009][T11201] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 246.964322][T11201] netlink: 'syz.0.1688': attribute type 12 has an invalid length. [ 247.067730][T11207] openvswitch: netlink: Message has 512 unknown bytes. [ 247.072574][T11198] syzkaller0 speed is unknown, defaulting to 1000 [ 247.142842][T11213] netlink: 'syz.2.1691': attribute type 11 has an invalid length. [ 247.206610][T11217] netlink: 'syz.2.1691': attribute type 11 has an invalid length. [ 247.368940][T11211] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.381969][T11211] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.465245][T11213] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 247.529455][T11222] x_tables: duplicate underflow at hook 2 [ 247.730434][T11235] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 247.739796][T11235] vxcan1: entered promiscuous mode [ 247.750193][T11235] vxcan1: entered allmulticast mode [ 247.759836][T11235] team0: Device vxcan1 is of different type [ 248.597487][T11255] bond5: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 248.652085][T11255] bond5: entered promiscuous mode [ 248.668646][T11255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.696417][T11257] erspan0: entered promiscuous mode [ 250.567027][T11277] erspan0: left promiscuous mode [ 250.578469][T11257] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 250.590273][T11257] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 250.600266][T11257] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 250.615582][T11294] tipc: Enabling of bearer rejected, already enabled [ 250.763992][ T5285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.130100][T11316] __nla_validate_parse: 15 callbacks suppressed [ 251.130121][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 251.215246][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1713'. [ 251.350932][T11316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.646063][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1716'. [ 252.224345][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 252.225568][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 252.261501][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 252.322291][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 252.545293][T11383] netlink: 'syz.0.1735': attribute type 10 has an invalid length. [ 252.583034][T11383] team0: Device vxcan1 is of different type [ 252.613666][T11377] syzkaller0: entered promiscuous mode [ 252.620915][T11377] syzkaller0: entered allmulticast mode [ 253.190389][T11400] : renamed from veth0_to_bond (while UP) [ 253.377695][T11412] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 253.397518][T11414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 253.450107][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 253.574986][T11415] netlink: 'syz.2.1743': attribute type 13 has an invalid length. [ 253.599601][T11415] netlink: 'syz.2.1743': attribute type 17 has an invalid length. [ 253.654742][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.662315][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.949223][T11414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.963408][T11414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.066871][T11414] tipc: Resetting bearer [ 254.244296][T11415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.257072][T11415] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.273533][T11415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.306704][T11415] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.314074][T11415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.326398][T11415] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.333748][T11415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.359926][T11415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.372123][T11415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.395436][T11415] veth1_vlan: left promiscuous mode [ 254.403492][T11415] veth0_vlan: left promiscuous mode [ 254.417751][T11415] veth0_vlan: entered promiscuous mode [ 254.429866][T11415] veth1_vlan: entered promiscuous mode [ 254.447721][T11415] veth1_macvtap: left promiscuous mode [ 254.457413][T11415] veth0_macvtap: left promiscuous mode [ 254.467660][T11415] veth0_macvtap: entered promiscuous mode [ 254.480302][T11415] veth1_macvtap: entered promiscuous mode [ 254.511213][T11415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.520113][T11415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.533888][T11415] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.544804][T11415] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.556693][T11415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.568736][T11415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.583406][T11415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.593072][T11415] geneve2: left promiscuous mode [ 254.598168][T11415] geneve2: left allmulticast mode [ 254.605701][T11415] ip6erspan0: left promiscuous mode [ 254.650284][T11415] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 254.729937][T11439] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1750'. [ 254.742694][T11439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.295059][T11483] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 255.448664][T11483] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.483769][T11483] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 255.519251][T11492] bond7: (slave geneve3): making interface the new active one [ 255.540299][T11492] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 255.568691][ T5629] block nbd0: Receive control failed (result -32) [ 255.579726][ T5631] block nbd0: Receive control failed (result -32) [ 255.791295][T11493] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 255.842957][T11502] macvlan3: entered promiscuous mode [ 255.852982][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.867210][T11502] macvlan3: entered allmulticast mode [ 255.878505][T11502] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 256.318344][T11526] __nla_validate_parse: 8 callbacks suppressed [ 256.318370][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 256.640006][T11510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1766'. [ 258.750419][T11522] geneve1: entered promiscuous mode [ 259.285919][T11561] netlink: 'syz.4.1779': attribute type 4 has an invalid length. [ 259.326337][T11561] netlink: 'syz.4.1779': attribute type 4 has an invalid length. [ 259.702909][T11585] netlink: 'syz.2.1787': attribute type 3 has an invalid length. [ 259.734002][T11585] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1787'. [ 259.746679][T11583] netlink: 'syz.3.1786': attribute type 5 has an invalid length. [ 259.870348][T11591] gretap0: left allmulticast mode [ 259.891307][T11591] gretap0: left promiscuous mode [ 259.898230][T11591] bridge0: port 3(gretap0) entered disabled state [ 259.998535][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 260.024928][T11591] bridge_slave_0: left allmulticast mode [ 260.027508][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1790'. [ 260.040537][T11591] bridge_slave_0: left promiscuous mode [ 260.053060][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.090450][T11591] bridge_slave_1: left allmulticast mode [ 260.125316][T11591] bridge_slave_1: left promiscuous mode [ 260.141601][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.161938][T11591] bond0: (slave bond_slave_0): Releasing backup interface [ 260.178385][T11591] bond0: (slave bond_slave_1): Releasing backup interface [ 260.182684][T11608] sctp: [Deprecated]: syz.2.1793 (pid 11608) Use of int in max_burst socket option. [ 260.182684][T11608] Use struct sctp_assoc_value instead [ 260.205870][T11608] sctp: [Deprecated]: syz.2.1793 (pid 11608) Use of int in max_burst socket option. [ 260.205870][T11608] Use struct sctp_assoc_value instead [ 260.226195][T11591] team0: Port device team_slave_0 removed [ 260.242477][T11591] team0: Port device team_slave_1 removed [ 260.254077][T11591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.540274][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1797'. [ 260.597070][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 260.617275][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 260.636737][T11626] netlink: 'syz.2.1800': attribute type 14 has an invalid length. [ 260.661341][T11626] netlink: 'syz.2.1800': attribute type 13 has an invalid length. [ 260.736306][T11624] Cannot find del_set index 3 as target [ 260.914641][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 261.006444][T11633] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 261.752751][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 262.052339][T11686] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 262.599060][ T5285] veth1_macvtap: entered promiscuous mode [ 262.618092][ T5285] veth1_macvtap: entered allmulticast mode [ 262.693188][T11712] netlink: 'syz.0.1821': attribute type 3 has an invalid length. [ 262.792401][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'. [ 262.840988][T11717] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1823'. [ 263.008102][T11722] syzkaller0: entered promiscuous mode [ 263.043250][T11722] syzkaller0: entered allmulticast mode [ 263.466961][T11743] netlink: 'syz.2.1827': attribute type 29 has an invalid length. [ 263.492767][T11744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.533497][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 263.575117][T11743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1827'. [ 263.636546][T11752] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1829'. [ 263.888690][T11762] syzkaller0 speed is unknown, defaulting to 1000 [ 263.968546][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 264.035287][T11771] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 264.039012][T11770] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1833'. [ 264.057738][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 264.074283][T11771] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 264.213460][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 264.364354][T11782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.448586][T11787] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.462271][T11792] xfrm0 speed is unknown, defaulting to 1000 [ 264.469294][T11798] bond8: entered promiscuous mode [ 264.476842][T11798] bond8: entered allmulticast mode [ 264.484658][T11798] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.495062][T11798] team0: Port device bond8 added [ 264.508806][T11800] team0: Port device bond8 removed [ 264.516661][T11800] bond8 (unregistering): Released all slaves [ 264.538090][T11792] xfrm0 speed is unknown, defaulting to 1000 [ 264.554436][T11792] xfrm0 speed is unknown, defaulting to 1000 [ 264.565442][T11792] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 264.594949][T11792] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 264.613983][T11792] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 264.641646][T11792] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 264.736744][T11792] xfrm0 speed is unknown, defaulting to 1000 [ 264.751079][T11804] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 264.772412][T11804] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 264.794130][T11792] xfrm0 speed is unknown, defaulting to 1000 [ 264.804648][T11803] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 264.829163][T11792] xfrm0 speed is unknown, defaulting to 1000 [ 264.841559][T11792] xfrm0 speed is unknown, defaulting to 1000 [ 264.893097][T11804] tipc: Resetting bearer [ 264.899495][T11804] tipc: Resetting bearer [ 264.981778][T11792] xfrm0 speed is unknown, defaulting to 1000 [ 265.095881][T11814] x_tables: duplicate underflow at hook 3 [ 265.576737][T11831] syzkaller0: entered promiscuous mode [ 265.584830][T11831] syzkaller0: entered allmulticast mode [ 267.572408][T11840] __nla_validate_parse: 7 callbacks suppressed [ 267.572430][T11840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1848'. [ 267.588300][T11840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1848'. [ 267.598372][T11840] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1848'. [ 267.633902][T11844] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 267.669181][T11844] batman_adv: batadv0: Adding interface: gretap1 [ 267.689668][T11844] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.725788][T11844] batman_adv: batadv0: Interface activated: gretap1 [ 267.939751][T11867] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1853'. [ 268.014691][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.033985][T11867] netlink: 'syz.3.1853': attribute type 11 has an invalid length. [ 268.242225][T11885] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 268.270204][T11885] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 268.298770][T11885] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 268.625891][T11906] pim6reg: entered allmulticast mode [ 269.314261][T11936] netlink: 'syz.4.1865': attribute type 1 has an invalid length. [ 269.402456][T11936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.444798][T11940] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 269.993831][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 270.383141][T11972] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 270.528765][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.536313][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.599798][T11978] vxcan1: left promiscuous mode [ 270.606606][T11978] vxcan1: left allmulticast mode [ 270.798703][T11978] vlan0: left promiscuous mode [ 270.819962][T11989] tap0: tun_chr_ioctl cmd 2148553947 [ 270.843659][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.865288][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.896183][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.913172][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.954359][ T84] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.965435][ T84] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.109444][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 271.210345][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 271.874906][T12049] netlink: 'syz.1.1884': attribute type 4 has an invalid length. [ 271.906321][T12049] netlink: 'syz.1.1884': attribute type 4 has an invalid length. [ 271.957847][T12049] netlink: 'syz.1.1884': attribute type 4 has an invalid length. [ 272.919687][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 272.972782][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 273.019199][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1895'. [ 275.078733][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 275.100265][T12055] tipc: Resetting bearer [ 275.396638][T12143] bridge2: entered promiscuous mode [ 275.411383][T12143] bridge2: entered allmulticast mode [ 275.438957][T12143] team0: Port device bridge2 added [ 275.498954][T12146] bridge0: port 3(team0) entered blocking state [ 275.513203][T12146] bridge0: port 3(team0) entered disabled state [ 275.524298][T12146] team0: entered allmulticast mode [ 275.558934][T12146] team_slave_0: entered allmulticast mode [ 275.583597][T12146] team_slave_1: entered allmulticast mode [ 275.626046][T12146] team0: entered promiscuous mode [ 275.640487][T12146] team_slave_0: entered promiscuous mode [ 275.655071][T12146] team_slave_1: entered promiscuous mode [ 275.823337][T12102] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 276.051457][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 276.297209][T12174] FAULT_INJECTION: forcing a failure. [ 276.297209][T12174] name failslab, interval 1, probability 0, space 0, times 0 [ 276.331962][T12174] CPU: 0 UID: 0 PID: 12174 Comm: syz.2.1904 Not tainted syzkaller #0 PREEMPT(full) [ 276.331994][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.332005][T12174] Call Trace: [ 276.332014][T12174] [ 276.332023][T12174] dump_stack_lvl+0xe8/0x150 [ 276.332055][T12174] should_fail_ex+0x40c/0x560 [ 276.332089][T12174] should_failslab+0xa8/0x100 [ 276.332115][T12174] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 276.332143][T12174] ? local_lock_release+0x9c/0x160 [ 276.332176][T12174] ? __alloc_skb+0x1d7/0x7a0 [ 276.332193][T12174] ? __alloc_skb+0x1d7/0x7a0 [ 276.332218][T12174] __alloc_skb+0x1d7/0x7a0 [ 276.332241][T12174] netlink_sendmsg+0x5d4/0xb40 [ 276.332277][T12174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.332306][T12174] ? aa_sock_msg_perm+0xf1/0x1b0 [ 276.332338][T12174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.332359][T12174] sock_sendmsg_nosec+0x13a/0x180 [ 276.332391][T12174] ____sys_sendmsg+0x54e/0x850 [ 276.332429][T12174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.332462][T12174] ? import_iovec+0x73/0xa0 [ 276.332489][T12174] ___sys_sendmsg+0x2a5/0x360 [ 276.332510][T12174] ? __lock_acquire+0x683/0x2cf0 [ 276.332537][T12174] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.332599][T12174] ? __fget_files+0x2a/0x420 [ 276.332619][T12174] ? __fget_files+0x3a2/0x420 [ 276.332654][T12174] __x64_sys_sendmsg+0x1b1/0x290 [ 276.332680][T12174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.332724][T12174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.332747][T12174] do_syscall_64+0x174/0x580 [ 276.332766][T12174] ? trace_irq_disable+0x3b/0x140 [ 276.332797][T12174] ? clear_bhb_loop+0x40/0x90 [ 276.332823][T12174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.332842][T12174] RIP: 0033:0x7f9eedb9ce59 [ 276.332863][T12174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.332880][T12174] RSP: 002b:00007f9eebdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.332903][T12174] RAX: ffffffffffffffda RBX: 00007f9eede15fa0 RCX: 00007f9eedb9ce59 [ 276.332917][T12174] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 276.332929][T12174] RBP: 00007f9eebdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 276.332941][T12174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.332953][T12174] R13: 00007f9eede16038 R14: 00007f9eede15fa0 R15: 00007ffe42384508 [ 276.332985][T12174] [ 276.663556][T12170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.889052][T12197] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 276.915984][T12195] netlink: 'syz.0.1909': attribute type 21 has an invalid length. [ 276.925836][T12195] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1909'. [ 276.960581][T12195] netlink: 'syz.0.1909': attribute type 4 has an invalid length. [ 276.990190][T12195] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1909'. [ 277.217306][T12212] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1913'. [ 277.484704][T12218] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 277.775565][T12229] netlink: 'syz.4.1918': attribute type 4 has an invalid length. [ 277.835833][T12239] bond0: (slave bond_slave_1): Releasing backup interface [ 278.065211][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'. [ 278.087667][T12251] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1924'. [ 278.279335][T12251] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1924'. [ 278.368277][T12254] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 278.421387][T12254] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1923'. [ 278.930561][T12270] bond4: option ad_user_port_key: invalid value (65535) [ 278.966542][T12270] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 279.038059][T12270] bond4 (unregistering): Released all slaves [ 279.093481][T12287] netlink: zone id is out of range [ 279.114492][T12287] netlink: zone id is out of range [ 279.145102][T12287] netlink: zone id is out of range [ 279.177450][T12287] netlink: zone id is out of range [ 279.189889][T12293] xt_hashlimit: size too large, truncated to 1048576 [ 279.216532][T12287] netlink: zone id is out of range [ 279.257984][T12287] netlink: zone id is out of range [ 279.314799][T12287] netlink: zone id is out of range [ 279.386319][T12287] netlink: zone id is out of range [ 279.434350][T12287] netlink: zone id is out of range [ 279.493819][T12279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1929'. [ 279.495165][T12287] netlink: zone id is out of range [ 279.754197][T12319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1936'. [ 279.852280][T12323] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 279.918979][T12326] tap0: tun_chr_ioctl cmd 1074025677 [ 279.941701][T12326] tap0: linktype set to 787 [ 281.016910][T12364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.036441][T12364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.170805][T12388] macvlan0: entered promiscuous mode [ 281.263428][T12375] bridge3: entered promiscuous mode [ 281.283380][T12375] bridge3: entered allmulticast mode [ 281.435104][T12364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.484214][T12364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.729967][T12364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.745875][T12407] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1955'. [ 281.777875][T12364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.089980][T12364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.109895][T12364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.155079][T12433] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 282.427947][T12445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1964'. [ 282.478964][T12002] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.509941][T12002] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.618333][ T3357] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.645910][ T3357] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.695365][ T3357] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.724811][ T3357] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.817601][ T3357] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.829391][ T3357] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.839999][T12464] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1967'. [ 283.065649][T12473] netlink: 'syz.1.1970': attribute type 3 has an invalid length. [ 283.066927][T12476] netlink: 'syz.4.1971': attribute type 10 has an invalid length. [ 283.086951][T12473] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1970'. [ 283.088348][T12476] team0: Port device dummy0 added [ 283.103050][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 283.110447][T12476] netlink: 'syz.4.1971': attribute type 10 has an invalid length. [ 283.144711][T12476] team0: Port device dummy0 removed [ 283.183575][T12476] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 283.364485][T12484] netlink: 'syz.0.1973': attribute type 111 has an invalid length. [ 283.467533][T12488] geneve3: entered promiscuous mode [ 283.481221][T12488] geneve3: entered allmulticast mode [ 283.548065][T12497] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 283.563838][T12499] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1977'. [ 283.623549][T12484] bond8: Removing last ns target with arp_interval on [ 283.689879][ T154] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 283.729956][ T154] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 283.753601][ T154] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 283.779632][ T154] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 283.897205][T12506] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1979'. [ 284.638425][T12529] netlink: 'syz.0.1983': attribute type 13 has an invalid length. [ 284.658910][T12529] netlink: 'syz.0.1983': attribute type 17 has an invalid length. [ 285.065872][T12529] net_ratelimit: 21 callbacks suppressed [ 285.065968][T12529] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 285.179815][T12537] bond3: entered promiscuous mode [ 285.201373][T12537] bond3: entered allmulticast mode [ 285.232067][T12537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.335825][ T5727] xfrm0 speed is unknown, defaulting to 1000 [ 285.407411][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 285.418199][T12551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1988'. [ 286.197205][T12591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.559181][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 286.595743][T12614] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 288.713451][T12614] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 289.016653][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2007'. [ 289.335257][T12653] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2011'. [ 289.361652][T12658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2013'. [ 289.422327][T12658] netlink: 'syz.1.2013': attribute type 10 has an invalid length. [ 289.659413][T12658] veth1_macvtap (unregistering): left allmulticast mode [ 289.929875][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 290.282324][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 290.433514][T12702] syzkaller0 speed is unknown, defaulting to 1000 [ 290.442546][T12704] netlink: 'syz.4.2024': attribute type 12 has an invalid length. [ 290.476790][T12702] xfrm0 speed is unknown, defaulting to 1000 [ 291.106191][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2028'. [ 291.431888][T12735] netlink: 'syz.3.2030': attribute type 2 has an invalid length. [ 291.475926][T12735] netlink: 'syz.3.2030': attribute type 1 has an invalid length. [ 291.502461][T12735] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2030'. [ 291.819395][T12751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2033'. [ 291.872459][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2033'. [ 292.841545][T12787] netlink: 'syz.0.2039': attribute type 22 has an invalid length. [ 292.850283][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 292.876374][T12787] netlink: 'syz.0.2039': attribute type 22 has an invalid length. [ 292.957989][T12787] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20002 [ 293.314066][T12804] bond5 (unregistering): Released all slaves [ 293.460158][T12779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.486072][T12814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.248860][T12848] bridge0: port 3(team0) entered disabled state [ 294.284915][T12848] team0 (unregistering): left allmulticast mode [ 294.303848][T12848] team_slave_0: left allmulticast mode [ 294.309739][T12848] team_slave_1: left allmulticast mode [ 294.317229][T12848] team0 (unregistering): left promiscuous mode [ 294.329720][T12859] __nla_validate_parse: 4 callbacks suppressed [ 294.329740][T12859] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2053'. [ 294.351651][T12848] team_slave_0: left promiscuous mode [ 294.357467][T12848] team_slave_1: left promiscuous mode [ 294.367534][T12848] bridge0: port 3(team0) entered disabled state [ 294.412738][T12848] team0 (unregistering): Port device team_slave_0 removed [ 294.442804][T12848] team0 (unregistering): Port device team_slave_1 removed [ 294.470566][T12848] team0 (unregistering): Port device bridge2 removed [ 294.522746][T12849] vlan3: entered promiscuous mode [ 294.707921][T12002] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 295.119991][T12858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.189148][T12885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.313487][T12902] syzkaller0: entered promiscuous mode [ 295.339268][T12902] syzkaller0: entered allmulticast mode [ 295.413803][T12909] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2064'. [ 295.428302][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2064'. [ 295.799443][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 295.819154][T12933] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 295.838434][T12933] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 295.887516][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2068'. [ 296.088849][T12934] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.117421][T12938] gretap2: entered allmulticast mode [ 296.138653][T12938] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 296.167974][T12939] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 296.182942][T12939] bond4 (unregistering): Released all slaves [ 316.055737][T12947] netlink: 'syz.1.2071': attribute type 4 has an invalid length. [ 316.347853][T12961] syzkaller0 speed is unknown, defaulting to 1000 [ 316.519464][T12965] syzkaller0: entered promiscuous mode [ 316.552370][T12965] syzkaller0: entered allmulticast mode [ 316.582836][T12961] xfrm0 speed is unknown, defaulting to 1000 [ 319.527231][T13030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2085'. [ 320.708273][T13046] netlink: 'syz.4.2088': attribute type 4 has an invalid length. [ 320.758632][T13046] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2088'. [ 320.853399][T13046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.988595][T13061] netlink: zone id is out of range [ 321.016033][T13061] netlink: zone id is out of range [ 321.063919][T13067] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2092'. [ 321.184101][T13077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2097'. [ 321.239125][T13079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2098'. [ 322.024304][T13067] tun0: tun_chr_ioctl cmd 1074025680 [ 322.167428][T13082] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 322.262161][T13089] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2102'. [ 322.272756][T13089] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2102'. [ 322.366363][T13094] netlink: 'syz.0.2102': attribute type 10 has an invalid length. [ 322.543074][T13102] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2105'. [ 324.527603][T13094] team0: Port device dummy0 added [ 324.542998][T13103] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 324.743307][T13116] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2110'. [ 324.772243][T13121] xt_connbytes: Forcing CT accounting to be enabled [ 324.814160][T13122] netlink: 420 bytes leftover after parsing attributes in process `syz.2.2109'. [ 325.020272][T13132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2111'. [ 325.113426][T13136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.178317][T13132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2111'. [ 325.795840][T13113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2109'. [ 325.870530][T13108] pimreg: entered allmulticast mode [ 326.049326][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2118'. [ 326.177173][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2117'. [ 326.279411][T13162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.372030][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2117'. [ 326.407489][T13173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2121'. [ 326.477715][T13166] bond7: entered promiscuous mode [ 326.487990][T13166] 8021q: adding VLAN 0 to HW filter on device bond7 [ 326.710288][T13188] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2127'. [ 327.436521][T13214] syzkaller0 speed is unknown, defaulting to 1000 [ 327.459967][T13216] syzkaller0 speed is unknown, defaulting to 1000 [ 327.465589][T13214] xfrm0 speed is unknown, defaulting to 1000 [ 327.581334][T13216] xfrm0 speed is unknown, defaulting to 1000 [ 328.033090][T13255] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.200558][T13265] x_tables: duplicate underflow at hook 1 [ 329.113444][T13287] syzkaller1: entered allmulticast mode [ 329.226684][T13287] netlink: 'syz.3.2150': attribute type 12 has an invalid length. [ 330.986736][T13255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.233178][T13304] __nla_validate_parse: 4 callbacks suppressed [ 331.233199][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2154'. [ 331.286735][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2154'. [ 331.349332][T13311] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.2155'. [ 331.594871][T13311] 8021q: VLANs not supported on ip_vti0 [ 332.164206][T13358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2164'. [ 332.274274][T13363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2166'. [ 332.437840][T13355] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.487456][T13355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.524066][T13355] wireguard: wg1: Could not create IPv4 socket [ 332.530854][T13355] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 332.738767][ T5629] block nbd1: Receive control failed (result -32) [ 332.739136][ T5631] block nbd1: Receive control failed (result -32) [ 332.746792][ T50] block nbd1: Receive control failed (result -32) [ 332.868492][T13379] geneve5: entered promiscuous mode [ 332.901518][T12002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.941475][T12002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.968913][T13377] xt_CT: No such helper "syz1" [ 332.970045][T12002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.589035][T13411] FAULT_INJECTION: forcing a failure. [ 333.589035][T13411] name failslab, interval 1, probability 0, space 0, times 0 [ 333.608245][T13411] CPU: 0 UID: 0 PID: 13411 Comm: syz.1.2177 Not tainted syzkaller #0 PREEMPT(full) [ 333.608275][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.608286][T13411] Call Trace: [ 333.608294][T13411] [ 333.608303][T13411] dump_stack_lvl+0xe8/0x150 [ 333.608337][T13411] should_fail_ex+0x40c/0x560 [ 333.608374][T13411] should_failslab+0xa8/0x100 [ 333.608401][T13411] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 333.608432][T13411] ? __kernfs_new_node+0xe6/0x980 [ 333.608500][T13411] ? __kernfs_new_node+0xe6/0x980 [ 333.608530][T13411] __kernfs_new_node+0xe6/0x980 [ 333.608563][T13411] ? __pfx___kernfs_new_node+0x10/0x10 [ 333.608586][T13411] ? kernfs_root+0x1c/0x230 [ 333.608614][T13411] ? kernfs_root+0x1c/0x230 [ 333.608633][T13411] ? kernfs_root+0x1c/0x230 [ 333.608650][T13411] ? kernfs_root+0x1c/0x230 [ 333.608676][T13411] kernfs_new_node+0xea/0x140 [ 333.608714][T13411] __kernfs_create_file+0x4b/0x2e0 [ 333.608746][T13411] sysfs_add_file_mode_ns+0x237/0x300 [ 333.608785][T13411] sysfs_merge_group+0x183/0x320 [ 333.608810][T13411] ? __pfx_sysfs_merge_group+0x10/0x10 [ 333.608829][T13411] ? device_add_attrs+0x5c3/0x600 [ 333.608932][T13411] ? __pfx_device_add_attrs+0x10/0x10 [ 333.608964][T13411] dpm_sysfs_add+0xd2/0x270 [ 333.609023][T13411] device_add+0x4ca/0xb80 [ 333.609052][T13411] device_create+0x269/0x300 [ 333.609106][T13411] ? timer_init_key+0x161/0x2c0 [ 333.609148][T13411] ? __pfx_device_create+0x10/0x10 [ 333.609181][T13411] ? ieee80211_roc_setup+0x119/0x1d0 [ 333.609310][T13411] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 333.609373][T13411] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 333.609451][T13411] ? __pfx___nla_validate_parse+0x10/0x10 [ 333.609492][T13411] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 333.609508][T13411] ? trace_kmalloc+0x2a/0xf0 [ 333.609538][T13411] hwsim_new_radio_nl+0xd8b/0xf90 [ 333.609594][T13411] genl_family_rcv_msg_doit+0x233/0x340 [ 333.609627][T13411] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 333.609661][T13411] ? bpf_lsm_capable+0x9/0x20 [ 333.609677][T13411] ? security_capable+0x7e/0x2c0 [ 333.609711][T13411] genl_rcv_msg+0x614/0x7a0 [ 333.609738][T13411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.609759][T13411] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 333.609796][T13411] netlink_rcv_skb+0x226/0x4a0 [ 333.609814][T13411] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.609838][T13411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.609870][T13411] ? down_read+0x2be/0x330 [ 333.609892][T13411] genl_rcv+0x28/0x40 [ 333.609912][T13411] netlink_unicast+0x7bb/0x940 [ 333.609942][T13411] netlink_sendmsg+0x813/0xb40 [ 333.609970][T13411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.609991][T13411] ? aa_sock_msg_perm+0xf1/0x1b0 [ 333.610017][T13411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.610034][T13411] sock_sendmsg_nosec+0x13a/0x180 [ 333.610060][T13411] ____sys_sendmsg+0x54e/0x850 [ 333.610084][T13411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.610110][T13411] ? import_iovec+0x73/0xa0 [ 333.610131][T13411] ___sys_sendmsg+0x2a5/0x360 [ 333.610148][T13411] ? __lock_acquire+0x683/0x2cf0 [ 333.610170][T13411] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.610223][T13411] ? __fget_files+0x2a/0x420 [ 333.610239][T13411] ? __fget_files+0x3a2/0x420 [ 333.610265][T13411] __x64_sys_sendmsg+0x1b1/0x290 [ 333.610285][T13411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.610321][T13411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.610340][T13411] do_syscall_64+0x174/0x580 [ 333.610354][T13411] ? trace_irq_disable+0x3b/0x140 [ 333.610370][T13411] ? clear_bhb_loop+0x40/0x90 [ 333.610390][T13411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.610406][T13411] RIP: 0033:0x7f752739ce59 [ 333.610423][T13411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.610437][T13411] RSP: 002b:00007f75282d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.610455][T13411] RAX: ffffffffffffffda RBX: 00007f7527615fa0 RCX: 00007f752739ce59 [ 333.610466][T13411] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 333.610477][T13411] RBP: 00007f75282d5090 R08: 0000000000000000 R09: 0000000000000000 [ 333.610487][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.610496][T13411] R13: 00007f7527616038 R14: 00007f7527615fa0 R15: 00007ffffdf82978 [ 333.610524][T13411] [ 334.303472][T13422] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2182'. [ 334.506995][T13429] x_tables: ip_tables: osf match: only valid for protocol 6 [ 335.343549][T13448] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2189'. [ 336.812097][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 337.496778][T13462] netlink: 'syz.0.2193': attribute type 21 has an invalid length. [ 337.525023][T13462] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.642191][T13458] "syz.4.2192" (13458) uses obsolete ecb(arc4) skcipher [ 338.090161][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 338.574337][T13511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2204'. [ 338.598362][T13511] netlink: 'syz.1.2204': attribute type 7 has an invalid length. [ 338.619239][T13511] netlink: 'syz.1.2204': attribute type 8 has an invalid length. [ 338.636122][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'. [ 338.822338][T13514] syzkaller1: entered promiscuous mode [ 338.835439][T13514] syzkaller1: entered allmulticast mode [ 338.899993][T13525] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2208'. [ 338.939616][T13526] netlink: 'syz.4.2207': attribute type 1 has an invalid length. [ 338.961500][T13526] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2207'. [ 339.110510][T13532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2211'. [ 339.123565][T13532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2211'. [ 339.243392][T13535] veth0: entered promiscuous mode [ 339.352381][T13535] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 339.396686][T13540] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2213'. [ 339.412434][T13540] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2213'. [ 339.601777][T13534] veth0: left promiscuous mode [ 339.754217][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 340.245086][T13578] syzkaller1: entered promiscuous mode [ 340.275219][T13578] syzkaller1: entered allmulticast mode [ 340.481071][T13597] netlink: 'syz.0.2229': attribute type 1 has an invalid length. [ 340.601898][T13604] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 340.614163][T13597] 8021q: adding VLAN 0 to HW filter on device bond10 [ 340.646405][T13601] vlan3: entered allmulticast mode [ 340.654409][T13601] bond10: entered allmulticast mode [ 340.706722][T13604] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.817082][T13604] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 341.086101][T13615] can: request_module (can-proto-5) failed. [ 341.334684][T13634] (: renamed from veth0_to_hsr (while UP) [ 341.571680][T13640] syzkaller1: entered promiscuous mode [ 341.598997][T13640] syzkaller1: entered allmulticast mode [ 343.085210][T13690] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 344.969590][T13665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.281331][T13711] __nla_validate_parse: 16 callbacks suppressed [ 345.281354][T13711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2254'. [ 345.417844][T13723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2261'. [ 345.756235][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2265'. [ 345.791297][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2265'. [ 345.801655][T13741] netlink: 'syz.4.2265': attribute type 11 has an invalid length. [ 345.804439][T13743] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 345.809578][T13741] netlink: 'syz.4.2265': attribute type 14 has an invalid length. [ 346.079532][T13743] bond8: entered promiscuous mode [ 346.093238][T13743] 8021q: adding VLAN 0 to HW filter on device bond8 [ 346.142704][T13740] vlan0: entered allmulticast mode [ 346.152247][T13740] bond8: entered allmulticast mode [ 346.405594][T13761] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2270'. [ 346.417552][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2268'. [ 346.475627][T13765] netlink: 'syz.1.2271': attribute type 6 has an invalid length. [ 346.512016][T13765] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.608626][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'. [ 346.615152][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2273'. [ 346.618657][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2272'. [ 346.637496][T13774] netlink: 'syz.2.2272': attribute type 7 has an invalid length. [ 346.690346][T13773] bond11: entered promiscuous mode [ 346.696916][T13773] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.706751][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'. [ 346.716783][T13774] netlink: 'syz.2.2272': attribute type 7 has an invalid length. [ 346.728306][T13777] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.737217][T13777] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 346.749176][T13777] bond11: (slave ip6gre1): Error -95 calling set_mac_address [ 346.944481][T13781] geneve1: entered promiscuous mode [ 346.952549][T13781] macsec1: entered promiscuous mode [ 346.960190][T13781] geneve1: left promiscuous mode [ 347.442641][T13802] netlink: 'syz.3.2283': attribute type 11 has an invalid length. [ 347.464477][T13802] netlink: 'syz.3.2283': attribute type 4 has an invalid length. [ 347.567416][T13805] netlink: 'syz.2.2284': attribute type 83 has an invalid length. [ 348.320358][T13842] netlink: 'syz.2.2293': attribute type 13 has an invalid length. [ 349.605247][T13871] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 350.701347][T13919] syzkaller0: entered promiscuous mode [ 350.735950][T13919] syzkaller0: entered allmulticast mode [ 350.997206][T13927] netlink: 'syz.1.2314': attribute type 13 has an invalid length. [ 351.190115][T13927] gretap0: refused to change device tx_queue_len [ 351.221551][T13927] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 351.474282][T13926] syzkaller0 speed is unknown, defaulting to 1000 [ 351.524564][T13926] xfrm0 speed is unknown, defaulting to 1000 [ 351.608348][T13936] __nla_validate_parse: 11 callbacks suppressed [ 351.608370][T13936] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2316'. [ 352.040499][T13940] syzkaller0 speed is unknown, defaulting to 1000 [ 352.215063][T13940] xfrm0 speed is unknown, defaulting to 1000 [ 354.713133][T13998] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 354.752727][T13999] gretap1: entered allmulticast mode [ 354.828166][T13998] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 354.894922][T14004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.313157][T14020] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.2337'. [ 355.357080][T14021] syzkaller0 speed is unknown, defaulting to 1000 [ 355.427765][T14021] xfrm0 speed is unknown, defaulting to 1000 [ 355.849301][T14037] syzkaller0: entered promiscuous mode [ 355.864151][T14037] syzkaller0: entered allmulticast mode [ 355.924794][T14035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2342'. [ 356.042613][T14040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2342'. [ 356.128836][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2338'. [ 356.211397][T14021] dvmrp0: entered allmulticast mode [ 356.313158][T14048] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2347'. [ 356.415691][T12006] dvmrp0: left allmulticast mode [ 356.757243][T14057] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 357.222061][T14078] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 357.284103][T14078] netlink: 'syz.3.2357': attribute type 1 has an invalid length. [ 357.295422][T14092] SET target dimension over the limit! [ 357.314058][T14078] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2357'. [ 357.495397][T14089] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2360'. [ 357.519347][T14089] netlink: 'syz.1.2360': attribute type 3 has an invalid length. [ 357.559605][T14085] xt_CT: No such helper "netbios-ns" [ 357.669502][T14085] ipvlan0: entered allmulticast mode [ 357.692821][T14085] veth0_vlan: entered allmulticast mode [ 357.697572][T14105] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2363'. [ 357.712262][T14085] team0: Device ipvlan0 failed to register rx_handler [ 358.376663][T14105] bond0: (slave wlan0): Opening slave failed [ 358.391440][T14121] xt_hashlimit: size too large, truncated to 1048576 [ 358.498375][T14119] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 358.644015][T14125] syzkaller0: entered promiscuous mode [ 358.658389][T14125] syzkaller0: entered allmulticast mode [ 358.997862][ T42] IPVS: starting estimator thread 0... [ 359.101288][T14140] IPVS: using max 29 ests per chain, 69600 per kthread [ 359.975561][T14162] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20001 [ 360.185385][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 360.249968][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 360.449856][T14189] xt_hashlimit: size too large, truncated to 1048576 [ 360.473278][T14157] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.480795][T14157] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.519119][T14191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2384'. [ 360.850085][T14157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.871789][T14157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.113298][T14157] tipc: Resetting bearer [ 361.485628][ T54] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.518917][ T54] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.557747][ T54] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.580309][ T54] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.590409][T14203] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 361.594068][ T54] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.642978][ T54] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.678365][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'. [ 361.693876][T14213] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 361.739844][T14213] netlink: 'syz.1.2390': attribute type 2 has an invalid length. [ 361.810058][T14204] bond4: (slave bridge4): making interface the new active one [ 361.837113][T14204] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 361.864427][ T54] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.893288][ T54] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.911638][T14223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.070810][T14233] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 362.168572][T14245] netlink: 'syz.2.2397': attribute type 13 has an invalid length. [ 362.358453][T14233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.730724][T14258] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 362.741640][T14258] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 362.901778][T14263] batadv_slave_1: entered promiscuous mode [ 362.948736][ T5631] block nbd2: Receive control failed (result -32) [ 362.948784][ T5629] block nbd2: Receive control failed (result -32) [ 362.963161][ T50] block nbd2: Receive control failed (result -32) [ 363.685006][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 363.824348][T14259] batadv_slave_1: left promiscuous mode [ 363.896075][T14296] netlink: 'syz.2.2409': attribute type 1 has an invalid length. [ 364.359168][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 364.396326][T14323] netlink: 'syz.4.2418': attribute type 10 has an invalid length. [ 364.408266][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 364.417305][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2418'. [ 364.417396][T14323] FAULT_INJECTION: forcing a failure. [ 364.417396][T14323] name failslab, interval 1, probability 0, space 0, times 0 [ 364.448646][T14323] CPU: 1 UID: 0 PID: 14323 Comm: syz.4.2418 Not tainted syzkaller #0 PREEMPT(full) [ 364.448673][T14323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.448685][T14323] Call Trace: [ 364.448694][T14323] [ 364.448703][T14323] dump_stack_lvl+0xe8/0x150 [ 364.448733][T14323] should_fail_ex+0x40c/0x560 [ 364.448769][T14323] should_failslab+0xa8/0x100 [ 364.448794][T14323] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 364.448826][T14323] ? __d_lookup+0x66/0x790 [ 364.448883][T14323] ? __d_alloc+0x37/0x6f0 [ 364.448901][T14323] ? __d_alloc+0x37/0x6f0 [ 364.448931][T14323] __d_alloc+0x37/0x6f0 [ 364.448961][T14323] d_alloc+0x4b/0x190 [ 364.448980][T14323] ? lookup_one_qstr_excl+0xc4/0x360 [ 364.449016][T14323] lookup_one_qstr_excl+0xd8/0x360 [ 364.449038][T14323] ? lookup_noperm_common+0x245/0x430 [ 364.449062][T14323] start_dirop+0x5c/0x90 [ 364.449084][T14323] simple_start_creating+0xcc/0x110 [ 364.449109][T14323] ? __pfx_simple_start_creating+0x10/0x10 [ 364.449133][T14323] ? do_raw_spin_unlock+0xf5/0x210 [ 364.449162][T14323] ? mntput+0x65/0xc0 [ 364.449195][T14323] debugfs_start_creating+0xdb/0x1a0 [ 364.449341][T14323] __debugfs_create_file+0x6f/0x400 [ 364.449374][T14323] debugfs_create_file_full+0x3f/0x60 [ 364.449404][T14323] ref_tracker_dir_debugfs+0x197/0x360 [ 364.449433][T14323] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 364.449486][T14323] ? __kvmalloc_node_noprof+0x55a/0x860 [ 364.449511][T14323] ? __kvmalloc_node_noprof+0x35c/0x860 [ 364.449535][T14323] ? __raw_spin_lock_init+0x45/0x100 [ 364.449567][T14323] alloc_netdev_mqs+0x275/0x12b0 [ 364.449642][T14323] ? __pfx_snprintf+0x10/0x10 [ 364.449694][T14323] ? __pfx_geneve_setup+0x10/0x10 [ 364.449770][T14323] rtnl_create_link+0x321/0xd70 [ 364.449832][T14323] rtnl_newlink_create+0x25f/0xb00 [ 364.449888][T14323] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 364.449915][T14323] ? __pfx___mutex_lock+0x10/0x10 [ 364.449945][T14323] ? ns_capable+0x89/0xe0 [ 364.450010][T14323] rtnl_newlink+0x167f/0x1bd0 [ 364.450051][T14323] ? __pfx_rtnl_newlink+0x10/0x10 [ 364.450068][T14323] ? do_syscall_64+0x174/0x580 [ 364.450086][T14323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.450150][T14323] ? kasan_quarantine_put+0xbb/0x1f0 [ 364.450180][T14323] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.450239][T14323] ? nlmon_xmit+0xb0/0x100 [ 364.450255][T14323] ? kmem_cache_free+0x182/0x650 [ 364.450290][T14323] ? __lock_acquire+0x683/0x2cf0 [ 364.450317][T14323] ? __dev_queue_xmit+0x29b/0x37f0 [ 364.450366][T14323] ? __local_bh_enable_ip+0xd0/0x130 [ 364.450395][T14323] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.450424][T14323] ? __dev_queue_xmit+0x29b/0x37f0 [ 364.450446][T14323] ? __local_bh_enable_ip+0xd0/0x130 [ 364.450472][T14323] ? __dev_queue_xmit+0x29b/0x37f0 [ 364.450503][T14323] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 364.450553][T14323] ? __pfx_rtnl_newlink+0x10/0x10 [ 364.450569][T14323] rtnetlink_rcv_msg+0x802/0xc00 [ 364.450602][T14323] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 364.450631][T14323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.450660][T14323] ? ref_tracker_free+0x689/0x830 [ 364.450692][T14323] ? __pfx_ref_tracker_free+0x10/0x10 [ 364.450734][T14323] netlink_rcv_skb+0x226/0x4a0 [ 364.450760][T14323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.450793][T14323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.450833][T14323] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.450855][T14323] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.450885][T14323] netlink_unicast+0x7bb/0x940 [ 364.450920][T14323] netlink_sendmsg+0x813/0xb40 [ 364.450955][T14323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.450984][T14323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.451025][T14323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.451046][T14323] sock_sendmsg_nosec+0x13a/0x180 [ 364.451076][T14323] ____sys_sendmsg+0x54e/0x850 [ 364.451104][T14323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.451137][T14323] ? import_iovec+0x73/0xa0 [ 364.451164][T14323] ___sys_sendmsg+0x2a5/0x360 [ 364.451183][T14323] ? __lock_acquire+0x683/0x2cf0 [ 364.451208][T14323] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.451274][T14323] ? __fget_files+0x2a/0x420 [ 364.451293][T14323] ? __fget_files+0x3a2/0x420 [ 364.451327][T14323] __x64_sys_sendmsg+0x1b1/0x290 [ 364.451353][T14323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.451397][T14323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.451420][T14323] do_syscall_64+0x174/0x580 [ 364.451437][T14323] ? trace_irq_disable+0x3b/0x140 [ 364.451457][T14323] ? clear_bhb_loop+0x40/0x90 [ 364.451484][T14323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.451503][T14323] RIP: 0033:0x7f4d14b9ce59 [ 364.451524][T14323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.451541][T14323] RSP: 002b:00007f4d15a68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.451563][T14323] RAX: ffffffffffffffda RBX: 00007f4d14e15fa0 RCX: 00007f4d14b9ce59 [ 364.451578][T14323] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 364.451590][T14323] RBP: 00007f4d15a68090 R08: 0000000000000000 R09: 0000000000000000 [ 364.451603][T14323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.451615][T14323] R13: 00007f4d14e16038 R14: 00007f4d14e15fa0 R15: 00007ffefea30648 [ 364.451652][T14323] [ 365.001991][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 365.013845][T12012] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.023178][T12012] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.053226][T12012] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.114854][T12012] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.559175][T14350] syzkaller0 speed is unknown, defaulting to 1000 [ 365.587967][T14356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2427'. [ 365.598654][T14353] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2426'. [ 365.622693][T14360] netlink: 'syz.1.2427': attribute type 28 has an invalid length. [ 365.627556][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 365.643733][T14360] netlink: 'syz.1.2427': attribute type 3 has an invalid length. [ 365.672914][T14350] xfrm0 speed is unknown, defaulting to 1000 [ 365.695214][T14356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2427'. [ 365.705054][T14360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2427'. [ 366.147217][T14373] netlink: 'syz.0.2433': attribute type 1 has an invalid length. [ 366.190871][T14375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.842894][T14402] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 367.525794][T14440] batadv_slave_0: entered promiscuous mode [ 367.547761][T14438] batadv_slave_0: left promiscuous mode [ 367.920267][T14457] syzkaller1: entered promiscuous mode [ 367.937786][T14457] syzkaller1: entered allmulticast mode [ 368.057364][ T50] block nbd3: Receive control failed (result -32) [ 369.313941][T14526] bond6: invalid ARP target 0.0.0.0 specified for addition [ 369.323039][T14526] bond6: option arp_ip_target: invalid value (0) [ 369.333015][T14526] bond6 (unregistering): Released all slaves [ 369.723477][T14557] __nla_validate_parse: 10 callbacks suppressed [ 369.723499][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 369.978500][T14565] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 370.017337][T14565] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 370.041849][T14570] netlink: 'syz.3.2485': attribute type 5 has an invalid length. [ 370.335453][T14586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2488'. [ 370.372770][T14586] netlink: 'syz.4.2488': attribute type 13 has an invalid length. [ 370.405842][T14586] netlink: 'syz.4.2488': attribute type 17 has an invalid length. [ 370.630023][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 371.191871][T14586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.199976][T14586] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.216322][T14586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.252831][T14586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.263316][T14586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.278121][T14586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.289230][T14586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.305940][T14586] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 371.322783][T14593] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 371.346930][T14604] tipc: Enabled bearer , priority 0 [ 371.382937][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.390219][T12002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.406815][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.414195][T12002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.563907][T14607] syzkaller0: entered promiscuous mode [ 371.572692][T14607] syzkaller0: entered allmulticast mode [ 371.580010][T14607] tipc: Resetting bearer [ 371.592503][T12006] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.616788][T12006] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 371.639162][T14596] tipc: Resetting bearer [ 371.706052][T14626] netlink: 'syz.4.2498': attribute type 2 has an invalid length. [ 374.020287][T14596] tipc: Disabling bearer [ 374.046289][T12006] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.057255][T12006] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 374.066905][T12006] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.076657][T12006] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 374.153577][T12006] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.178718][T12006] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 374.202527][T14617] syzkaller0 speed is unknown, defaulting to 1000 [ 374.264018][T14617] xfrm0 speed is unknown, defaulting to 1000 [ 374.385528][T14646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2502'. [ 374.439097][T14650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2504'. [ 374.932898][T14668] bridge7: entered promiscuous mode [ 374.943110][T14679] netlink: 'syz.0.2511': attribute type 1 has an invalid length. [ 374.951327][T14668] bridge7: entered allmulticast mode [ 374.998531][T14668] team0: Port device bridge7 added [ 375.186049][T14679] bond13: entered promiscuous mode [ 375.196579][T14679] bond13: entered allmulticast mode [ 375.204462][T14679] 8021q: adding VLAN 0 to HW filter on device bond13 [ 375.437449][T14698] syzkaller0: entered promiscuous mode [ 375.455992][T14707] syz.4.2516: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 375.471630][T14698] syzkaller0: entered allmulticast mode [ 375.498246][T14707] CPU: 0 UID: 0 PID: 14707 Comm: syz.4.2516 Not tainted syzkaller #0 PREEMPT(full) [ 375.498277][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.498289][T14707] Call Trace: [ 375.498298][T14707] [ 375.498307][T14707] dump_stack_lvl+0xe8/0x150 [ 375.498339][T14707] warn_alloc+0x24c/0x270 [ 375.498374][T14707] ? stack_depot_save_flags+0x33/0x800 [ 375.498404][T14707] ? __pfx_warn_alloc+0x10/0x10 [ 375.498434][T14707] ? kasan_save_track+0x3e/0x80 [ 375.498452][T14707] ? __kasan_kmalloc+0x93/0xb0 [ 375.498474][T14707] ? xsk_setsockopt+0x52a/0x960 [ 375.498609][T14707] ? do_sock_setsockopt+0x17c/0x1b0 [ 375.498627][T14707] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 375.498643][T14707] ? do_syscall_64+0x174/0x580 [ 375.498661][T14707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.498692][T14707] __vmalloc_node_range_noprof+0x12c/0x1730 [ 375.498752][T14707] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 375.498786][T14707] ? __kasan_kmalloc+0x93/0xb0 [ 375.498809][T14707] ? __kmalloc_cache_noprof+0x32d/0x660 [ 375.498840][T14707] ? __kmalloc_cache_noprof+0x150/0x660 [ 375.498874][T14707] vmalloc_user_noprof+0xad/0xe0 [ 375.498902][T14707] ? xskq_create+0xbf/0x170 [ 375.498930][T14707] xskq_create+0xbf/0x170 [ 375.498962][T14707] xsk_init_queue+0x8a/0xe0 [ 375.498991][T14707] xsk_setsockopt+0x52a/0x960 [ 375.499014][T14707] ? __fget_files+0x2a/0x420 [ 375.499037][T14707] ? __pfx_xsk_setsockopt+0x10/0x10 [ 375.499061][T14707] ? __pfx_aa_sk_perm+0x10/0x10 [ 375.499117][T14707] ? aa_sock_opt_perm+0xff/0x1a0 [ 375.499145][T14707] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 375.499172][T14707] ? __pfx_xsk_setsockopt+0x10/0x10 [ 375.499200][T14707] do_sock_setsockopt+0x17c/0x1b0 [ 375.499236][T14707] __x64_sys_setsockopt+0x13d/0x1b0 [ 375.499259][T14707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.499278][T14707] do_syscall_64+0x174/0x580 [ 375.499293][T14707] ? trace_irq_disable+0x3b/0x140 [ 375.499311][T14707] ? clear_bhb_loop+0x40/0x90 [ 375.499334][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.499355][T14707] RIP: 0033:0x7f4d14b9ce59 [ 375.499376][T14707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.499393][T14707] RSP: 002b:00007f4d15a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 375.499417][T14707] RAX: ffffffffffffffda RBX: 00007f4d14e16090 RCX: 00007f4d14b9ce59 [ 375.499432][T14707] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 375.499455][T14707] RBP: 00007f4d14c32e6f R08: 0000000000000004 R09: 0000000000000000 [ 375.499468][T14707] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.499481][T14707] R13: 00007f4d14e16128 R14: 00007f4d14e16090 R15: 00007ffefea30648 [ 375.499517][T14707] [ 375.591563][T14707] Mem-Info: [ 375.819813][T14707] active_anon:5737 inactive_anon:5 isolated_anon:0 [ 375.819813][T14707] active_file:390 inactive_file:42953 isolated_file:0 [ 375.819813][T14707] unevictable:768 dirty:157 writeback:0 [ 375.819813][T14707] slab_reclaimable:11608 slab_unreclaimable:192836 [ 375.819813][T14707] mapped:32633 shmem:1310 pagetables:1310 [ 375.819813][T14707] sec_pagetables:0 bounce:0 [ 375.819813][T14707] kernel_misc_reclaimable:0 [ 375.819813][T14707] free:1232305 free_pcp:11756 free_cma:0 [ 375.901291][T14707] Node 0 active_anon:22848kB inactive_anon:20kB active_file:1560kB inactive_file:171612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122332kB dirty:628kB writeback:0kB shmem:3704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13984kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 375.945381][T14707] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 376.051886][T14707] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.090306][T14707] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 376.136598][T14707] Node 0 DMA32 free:976764kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22572kB inactive_anon:20kB active_file:1560kB inactive_file:171612kB unevictable:1536kB writepending:636kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:44728kB local_pcp:20460kB free_cma:0kB [ 376.213736][T14727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2523'. [ 376.214616][T14707] lowmem_reserve[]: 0 0 0 0 0 [ 376.261596][T14707] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.348215][T14707] lowmem_reserve[]: 0 0 0 0 0 [ 376.368490][T14707] Node 1 Normal free:3941200kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.471237][T14707] lowmem_reserve[]: 0 0 0 0 0 [ 376.490403][T14707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 376.543945][T14707] Node 0 DMA32: 2774*4kB (UM) 1067*8kB (UME) 1155*16kB (UME) 549*32kB (UM) 317*64kB (UM) 97*128kB (UME) 56*256kB (UME) 41*512kB (UM) 28*1024kB (UME) 9*2048kB (UM) 197*4096kB (UM) = 977728kB [ 376.599895][T14707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 376.633973][T14707] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 7*16kB (UM) 2*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941200kB [ 376.677555][T14707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.702016][T14707] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.732391][T14707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.749729][T14707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.759871][T14707] 44631 total pagecache pages [ 376.765231][T14707] 2 pages in swap cache [ 376.769449][T14707] Free swap = 124988kB [ 376.775360][T14707] Total swap = 124996kB [ 376.779588][T14707] 2097051 pages RAM [ 376.787092][T14707] 0 pages HighMem/MovableOnly [ 376.793267][T14707] 427419 pages reserved [ 376.797611][T14707] 0 pages cma reserved [ 376.941808][T14770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2531'. [ 376.987206][T14770] netlink: 'syz.1.2531': attribute type 10 has an invalid length. [ 377.044117][T14775] xfrm1: entered allmulticast mode [ 377.048505][T14779] netlink: 'syz.1.2531': attribute type 1 has an invalid length. [ 377.051589][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2532'. [ 377.068265][T14779] netlink: 'syz.1.2531': attribute type 2 has an invalid length. [ 377.265300][T14790] netlink: 'syz.0.2535': attribute type 1 has an invalid length. [ 377.299379][T14781] syzkaller0 speed is unknown, defaulting to 1000 [ 377.425029][T14790] bond14: entered promiscuous mode [ 377.441830][T14790] 8021q: adding VLAN 0 to HW filter on device bond14 [ 377.459931][T14781] xfrm0 speed is unknown, defaulting to 1000 [ 377.490485][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 377.491947][T14788] 8021q: adding VLAN 0 to HW filter on device bond14 [ 377.544835][T14788] bond14: (slave gre2): The slave device specified does not support setting the MAC address [ 377.582171][T14788] bond14: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 377.596762][T14788] bond14: (slave gre2): making interface the new active one [ 377.605509][T14788] gre2: entered promiscuous mode [ 377.613032][T14788] bond14: (slave gre2): Enslaving as an active interface with an up link [ 377.663253][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2540'. [ 377.870503][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2538'. [ 377.906272][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 377.957689][T14825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2542'. [ 377.977749][T14796] veth0_vlan: left promiscuous mode [ 378.185131][T14810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 378.210050][T14811] ip6gretap0: entered promiscuous mode [ 378.220979][T14806] syz_tun: entered allmulticast mode [ 378.233245][ T5356] xfrm0 speed is unknown, defaulting to 1000 [ 378.234011][T14805] syz_tun: left allmulticast mode [ 378.242446][ T5356] syz0: Port: 1 Link DOWN [ 378.277853][ T3357] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.291237][ T3357] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.315759][T14830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2543'. [ 378.326179][T14834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2543'. [ 378.363539][ T3357] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.393979][ T3357] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.576292][ T3357] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.593800][ T3357] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.719440][T14845] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 378.784506][T14845] bond5 (unregistering): Released all slaves [ 378.906757][ T3357] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.934220][ T3357] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.060520][T14868] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 379.134003][T14868] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.378953][T14872] bond15: (slave veth5): Enslaving as an active interface with a down link [ 379.513354][T14868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.544507][T14868] bond15: (slave batadv0): making interface the new active one [ 379.574483][T14868] batadv0: entered promiscuous mode [ 379.595771][T14868] bond15: (slave batadv0): Enslaving as an active interface with an up link [ 379.896157][T14906] xt_hashlimit: size too large, truncated to 1048576 [ 380.078078][T12002] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 380.124863][T14915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.487402][T14931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.530094][T14931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.788648][T14938] xt_TCPMSS: Only works on TCP SYN packets [ 380.807037][T14904] ip6erspan1: entered allmulticast mode [ 381.055009][T14955] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 381.394933][T14965] __nla_validate_parse: 5 callbacks suppressed [ 381.394953][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 381.444524][T14962] openvswitch: netlink: Missing valid actions attribute. [ 381.485704][T14962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.675091][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2566'. [ 381.683189][T14972] bond5: Unable to set up delay as MII monitoring is disabled [ 381.735192][T14972] bond5 (unregistering): Released all slaves [ 382.124077][T14990] netlink: 'syz.1.2569': attribute type 12 has an invalid length. [ 382.251943][T14999] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 382.265517][T14993] bond5: option arp_all_targets: invalid value (3) [ 382.311967][T15001] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 382.333231][T14993] bond5 (unregistering): Released all slaves [ 382.763925][T15019] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2576'. [ 382.775870][T15019] openvswitch: netlink: Message has 512 unknown bytes. [ 382.795138][T15019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2576'. [ 383.015561][T15028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2578'. [ 383.040747][T15028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2578'. [ 383.093623][T15029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2578'. [ 383.117681][T15028] gretap0: entered promiscuous mode [ 383.133819][T15029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2578'. [ 383.135220][T15032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2579'. [ 383.154695][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 383.160861][T15028] gretap0: left promiscuous mode [ 383.180332][T15033] openvswitch: netlink: Missing key (keys=40, expected=100) [ 383.236568][T15029] gretap0: entered promiscuous mode [ 383.246445][T15029] gretap0: left promiscuous mode [ 383.665497][T15050] syzkaller1: entered promiscuous mode [ 383.692701][T15050] syzkaller1: entered allmulticast mode [ 384.256251][T15067] bond0: entered promiscuous mode [ 384.277062][T15067] bond_slave_0: entered promiscuous mode [ 384.291059][T15067] bond_slave_1: entered promiscuous mode [ 384.327827][T15067] bond0: left promiscuous mode [ 384.360737][T15067] bond_slave_0: left promiscuous mode [ 384.379511][T15067] bond_slave_1: left promiscuous mode [ 384.464070][T15080] netlink: 'syz.4.2592': attribute type 14 has an invalid length. [ 384.472482][T15080] netlink: 'syz.4.2592': attribute type 13 has an invalid length. [ 384.477009][T15072] bond0: entered promiscuous mode [ 384.489226][T15072] bond_slave_0: entered promiscuous mode [ 384.501225][T15072] bond_slave_1: entered promiscuous mode [ 384.509652][T15072] bond0: left promiscuous mode [ 384.515474][T15072] bond_slave_0: left promiscuous mode [ 384.531891][T15072] bond_slave_1: left promiscuous mode [ 385.053266][T15109] netlink: 'syz.1.2602': attribute type 11 has an invalid length. [ 385.638591][T15133] netlink: 'syz.4.2609': attribute type 3 has an invalid length. [ 385.657350][T15133] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 385.678271][T15133] NCSI netlink: No device for ifindex 0 [ 385.807821][T15142] vlan2: entered promiscuous mode [ 385.835036][T15142] team0: entered promiscuous mode [ 385.859800][T15142] team_slave_0: entered promiscuous mode [ 385.882510][T15142] team_slave_1: entered promiscuous mode [ 385.954402][T15150] tipc: Enabling of bearer rejected, failed to enable media [ 386.476754][T15183] __nla_validate_parse: 17 callbacks suppressed [ 386.476778][T15183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2625'. [ 386.561209][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 386.594203][T15183] ip6gre2: entered promiscuous mode [ 386.602146][T15168] netlink: 'syz.1.2618': attribute type 10 has an invalid length. [ 386.623987][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2618'. [ 386.630660][T15183] ip6gre2: entered allmulticast mode [ 386.648713][T15190] netlink: 'syz.3.2626': attribute type 1 has an invalid length. [ 387.137386][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2628'. [ 387.172700][T15197] nbd: illegal input index 808464432 [ 387.371867][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2633'. [ 387.458107][T15220] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2634'. [ 387.606357][T15212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.013712][T15245] netlink: 'syz.1.2639': attribute type 1 has an invalid length. [ 388.026193][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 388.044402][T15212] veth3: entered promiscuous mode [ 388.049895][T15250] netlink: 'syz.3.2641': attribute type 10 has an invalid length. [ 388.056306][T15212] veth3: entered allmulticast mode [ 388.058577][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2641'. [ 388.064481][T15212] team0: Device veth3 is up. Set it down before adding it as a team port [ 388.356286][T15258] xt_hashlimit: size too large, truncated to 1048576 [ 388.492729][T15269] netlink: 'syz.1.2644': attribute type 11 has an invalid length. [ 388.515054][T15262] bridge_slave_0 (unregistering): left allmulticast mode [ 388.521611][T15269] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2644'. [ 388.561354][T15262] bridge_slave_0 (unregistering): left promiscuous mode [ 388.589188][T15262] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.112292][T15291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2650'. [ 389.229808][T15297] lo speed is unknown, defaulting to 1000 [ 389.242622][T15297] lo speed is unknown, defaulting to 1000 [ 389.252088][T15297] lo speed is unknown, defaulting to 1000 [ 389.267550][T15303] syzkaller0 speed is unknown, defaulting to 1000 [ 389.331911][T15303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.494529][T15303] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 389.501682][T15303] pim6reg0: linktype set to 774 [ 389.507293][T15306] syzkaller0: entered promiscuous mode [ 389.513315][T15306] syzkaller0: entered allmulticast mode [ 389.542167][T15306] ip6tnl2: entered promiscuous mode [ 389.703116][ T5727] lo speed is unknown, defaulting to 1000 [ 389.720637][T15297] infiniband syz1: set down [ 389.729023][T15297] infiniband syz1: added lo [ 389.788161][T15297] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 389.830642][T15297] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 389.852726][T15297] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 389.929038][T15297] RDS/IB: syz1: added [ 389.941255][T15297] smc: adding ib device syz1 with port count 1 [ 389.949366][T15297] smc: ib device syz1 port 1 has no pnetid [ 389.958869][ T5727] lo speed is unknown, defaulting to 1000 [ 389.980288][T15297] lo speed is unknown, defaulting to 1000 [ 390.224667][T15297] lo speed is unknown, defaulting to 1000 [ 390.380431][T15297] lo speed is unknown, defaulting to 1000 [ 390.532052][T15297] lo speed is unknown, defaulting to 1000 [ 390.719636][T15297] lo speed is unknown, defaulting to 1000 [ 391.851975][T15280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.112890][T15343] netlink: 'syz.2.2667': attribute type 4 has an invalid length. [ 392.172628][T15338] syzkaller1: entered promiscuous mode [ 392.189435][T15338] syzkaller1: entered allmulticast mode [ 392.972356][T15366] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.979845][T15366] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.089419][T15387] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2674'. [ 393.407660][T15366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.439112][T15366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.769660][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 393.824147][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 393.860299][T15406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.862201][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 393.900391][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 393.925499][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 393.958646][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 393.965313][T15407] syzkaller0 speed is unknown, defaulting to 1000 [ 393.978984][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 394.007269][T15399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 394.035630][T15413] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 394.064575][T15416] FAULT_INJECTION: forcing a failure. [ 394.064575][T15416] name failslab, interval 1, probability 0, space 0, times 0 [ 394.081637][T15416] CPU: 0 UID: 0 PID: 15416 Comm: syz.3.2683 Not tainted syzkaller #0 PREEMPT(full) [ 394.081669][T15416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.081681][T15416] Call Trace: [ 394.081689][T15416] [ 394.081698][T15416] dump_stack_lvl+0xe8/0x150 [ 394.081731][T15416] should_fail_ex+0x40c/0x560 [ 394.081765][T15416] should_failslab+0xa8/0x100 [ 394.081791][T15416] __kmalloc_cache_noprof+0xa8/0x660 [ 394.081824][T15416] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 394.081949][T15416] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 394.081977][T15416] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 394.082021][T15416] mptcp_sendmsg_fastopen+0x17b/0x540 [ 394.082084][T15416] mptcp_sendmsg+0x1a69/0x1d10 [ 394.082132][T15416] ? aa_sk_perm+0x6d5/0x900 [ 394.082162][T15416] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 394.082183][T15416] ? __pfx_aa_sk_perm+0x10/0x10 [ 394.082209][T15416] ? inet_sendmsg+0x298/0x320 [ 394.082307][T15416] ? __pfx_inet_sendmsg+0x10/0x10 [ 394.082336][T15416] sock_sendmsg_nosec+0x10e/0x180 [ 394.082367][T15416] ____sys_sendmsg+0x54e/0x850 [ 394.082397][T15416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.082432][T15416] ? import_iovec+0x73/0xa0 [ 394.082458][T15416] ___sys_sendmsg+0x2a5/0x360 [ 394.082479][T15416] ? __lock_acquire+0x683/0x2cf0 [ 394.082516][T15416] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.082545][T15416] ? kstrtouint+0x6e/0xe0 [ 394.082636][T15416] ? __fget_files+0x2a/0x420 [ 394.082657][T15416] ? __fget_files+0x3a2/0x420 [ 394.082688][T15416] __sys_sendmmsg+0x273/0x4d0 [ 394.082718][T15416] ? __pfx___sys_sendmmsg+0x10/0x10 [ 394.082753][T15416] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 394.082801][T15416] ? ksys_write+0x242/0x270 [ 394.082827][T15416] ? __pfx_ksys_write+0x10/0x10 [ 394.082857][T15416] __x64_sys_sendmmsg+0xa0/0xc0 [ 394.082878][T15416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.082898][T15416] do_syscall_64+0x174/0x580 [ 394.082917][T15416] ? trace_irq_disable+0x3b/0x140 [ 394.082936][T15416] ? clear_bhb_loop+0x40/0x90 [ 394.082960][T15416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.082982][T15416] RIP: 0033:0x7f2cb119ce59 [ 394.083002][T15416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.083019][T15416] RSP: 002b:00007f2cb208e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 394.083043][T15416] RAX: ffffffffffffffda RBX: 00007f2cb1415fa0 RCX: 00007f2cb119ce59 [ 394.083058][T15416] RDX: 0000000000000001 RSI: 0000200000001e80 RDI: 0000000000000003 [ 394.083071][T15416] RBP: 00007f2cb208e090 R08: 0000000000000000 R09: 0000000000000000 [ 394.083083][T15416] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 394.083094][T15416] R13: 00007f2cb1416038 R14: 00007f2cb1415fa0 R15: 00007fff09097db8 [ 394.083128][T15416] [ 394.377392][T15413] bond7: (slave lo): Enslaving as an active interface with an up link [ 394.387554][T15413] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 394.409951][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 394.461951][T15421] netlink: 'syz.1.2685': attribute type 1 has an invalid length. [ 394.502863][T15407] xfrm0 speed is unknown, defaulting to 1000 [ 394.539918][T15420] nbd: must specify at least one socket [ 394.662505][T15407] lo speed is unknown, defaulting to 1000 [ 395.003583][T15435] netlink: 'syz.0.2688': attribute type 4 has an invalid length. [ 395.031942][T15434] netlink: 'syz.0.2688': attribute type 4 has an invalid length. [ 395.084547][ T5356] lo speed is unknown, defaulting to 1000 [ 395.092066][ T5356] syz1: Port: 1 Link ACTIVE [ 395.107678][ T5356] lo speed is unknown, defaulting to 1000 [ 395.130521][T15438] netlink: 'syz.3.2690': attribute type 1 has an invalid length. [ 395.823829][T15458] netlink: 'syz.3.2696': attribute type 1 has an invalid length. [ 395.964703][T15458] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.044261][T15463] bond10: option lp_interval: invalid value (18446744073709551607) [ 396.060726][T15463] bond10: option lp_interval: allowed values 1 - 2147483647 [ 396.637716][T15485] syzkaller0 speed is unknown, defaulting to 1000 [ 396.667828][T15485] xfrm0 speed is unknown, defaulting to 1000 [ 396.696470][T15485] lo speed is unknown, defaulting to 1000 [ 397.343174][T15501] tipc: New replicast peer: 255.255.255.255 [ 397.385204][T15501] tipc: Enabled bearer , priority 10 [ 397.439631][T15506] netlink: 'syz.0.2705': attribute type 14 has an invalid length. [ 397.487902][T15506] netlink: 'syz.0.2705': attribute type 13 has an invalid length. [ 397.821809][T15518] netlink: 'syz.3.2709': attribute type 10 has an invalid length. [ 397.888265][T15522] x_tables: duplicate underflow at hook 2 [ 398.126110][T15528] __nla_validate_parse: 121 callbacks suppressed [ 398.126133][T15528] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2712'. [ 398.146795][T15534] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 398.180172][T15528] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 398.184885][T15534] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2714'. [ 398.777780][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2717'. [ 398.833911][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2719'. [ 399.013695][T15563] netlink: 'syz.0.2720': attribute type 8 has an invalid length. [ 399.056243][T15563] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2720'. [ 399.164010][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'. [ 399.188429][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'. [ 399.561788][T15581] validate_nla: 2 callbacks suppressed [ 399.561876][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.577354][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 399.588246][T15583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2724'. [ 399.598028][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.606090][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 399.636260][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.651747][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.663691][T15584] hsr0: entered promiscuous mode [ 399.675976][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.684819][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.698772][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.708478][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.721390][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.729626][T15581] netlink: 'syz.4.2723': attribute type 29 has an invalid length. [ 399.783013][T15579] hsr0: left promiscuous mode [ 400.276437][T15598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.448134][T15603] bond5: (slave veth9): Enslaving as an active interface with a down link [ 400.523067][T15605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.549776][T15605] bond5: (slave batadv0): making interface the new active one [ 400.578545][T15605] batadv0: entered promiscuous mode [ 400.585373][T15605] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 401.625544][T15663] xt_bpf: check failed: parse error [ 403.417198][T15656] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 403.430393][T15656] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 403.451044][T15656] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 403.588946][T15683] __nla_validate_parse: 21 callbacks suppressed [ 403.588968][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'. [ 403.636608][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2750'. [ 403.662527][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2750'. [ 403.855828][T15690] 8021q: adding VLAN 0 to HW filter on device bond6 [ 403.923576][T15684] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 403.997777][T15708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.264573][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2758'. [ 404.313880][T15726] bond0: entered promiscuous mode [ 404.350528][T15726] gretap0: entered promiscuous mode [ 404.384681][T15726] bond0: left promiscuous mode [ 404.423866][T15726] gretap0: left promiscuous mode [ 404.767391][T15753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2766'. [ 404.810051][T15756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2762'. [ 405.285384][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 405.315522][T15774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2772'. [ 407.747965][T15792] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.781654][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'. [ 407.796359][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 408.162418][T15801] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 408.249348][T15801] bond17: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 408.284130][T15801] bond17 (unregistering): Released all slaves [ 408.367423][ T5741] lo speed is unknown, defaulting to 1000 [ 408.374721][ T5741] syz1: Port: 1 Link DOWN [ 408.380353][ T5741] lo speed is unknown, defaulting to 1000 [ 409.242946][T15832] validate_nla: 19 callbacks suppressed [ 409.242968][T15832] netlink: 'syz.1.2786': attribute type 8 has an invalid length. [ 409.279695][T15832] __nla_validate_parse: 1 callbacks suppressed [ 409.279717][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2786'. [ 409.542246][T15840] netlink: 'syz.3.2788': attribute type 2 has an invalid length. [ 409.594244][T15845] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2789'. [ 409.642144][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 409.684566][T15845] x_tables: duplicate underflow at hook 1 [ 409.704415][T15849] nft_compat: unsupported protocol 0 [ 409.812526][T15840] : entered promiscuous mode [ 410.220034][T15873] netlink: 'syz.0.2797': attribute type 8 has an invalid length. [ 410.239581][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2797'. [ 410.361642][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 410.424245][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 410.474781][T15882] syzkaller0: entered promiscuous mode [ 410.481344][T15882] syzkaller0: entered allmulticast mode [ 410.560297][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 410.781403][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'. [ 410.791753][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2801'. [ 410.801346][T15890] netlink: 'syz.3.2801': attribute type 14 has an invalid length. [ 410.809499][T15890] netlink: 'syz.3.2801': attribute type 13 has an invalid length. [ 411.398411][T15922] netlink: 'syz.1.2808': attribute type 8 has an invalid length. [ 411.444502][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2808'. [ 411.594839][T15932] syzkaller0: entered promiscuous mode [ 411.601952][T15933] netlink: 'syz.0.2810': attribute type 1 has an invalid length. [ 411.609930][T15932] syzkaller0: entered allmulticast mode [ 411.662413][T15933] 8021q: adding VLAN 0 to HW filter on device bond17 [ 411.680474][T15936] team0: Port device dummy0 removed [ 411.726319][T15936] bond17: (slave dummy0): making interface the new active one [ 411.742295][T15936] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 411.943057][ T6124] batadv0: left promiscuous mode [ 412.187137][T15959] netlink: 'syz.3.2819': attribute type 10 has an invalid length. [ 412.214924][T15960] lo: Caught tx_queue_len zero misconfig [ 412.419391][T15968] netlink: 'syz.4.2821': attribute type 1 has an invalid length. [ 412.579807][T15977] netlink: 'syz.0.2824': attribute type 1 has an invalid length. [ 412.639324][T15978] bond9: entered promiscuous mode [ 412.645558][T15978] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.684674][T15977] 8021q: adding VLAN 0 to HW filter on device bond18 [ 412.695079][T15975] bond18: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 412.744714][T15978] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.756949][T15978] bond9: (slave sit1): The slave device specified does not support setting the MAC address [ 412.786948][T15978] bond9: (slave sit1): Error -95 calling set_mac_address [ 412.846886][T16000] [ 412.851425][T16000] ============================= [ 412.856610][T16000] WARNING: suspicious RCU usage [ 412.862959][T16000] syzkaller #0 Not tainted [ 412.867447][T16000] ----------------------------- [ 412.872747][T16000] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 412.881891][T16000] [ 412.881891][T16000] other info that might help us debug this: [ 412.881891][T16000] [ 412.892987][T16000] [ 412.892987][T16000] rcu_scheduler_active = 2, debug_locks = 1 [ 412.901586][T16000] 1 lock held by syz.2.2825/16000: [ 412.906824][T16000] #0: ffffffff8e959e18 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 412.919377][T16000] [ 412.919377][T16000] stack backtrace: [ 412.925924][T16000] CPU: 0 UID: 0 PID: 16000 Comm: syz.2.2825 Not tainted syzkaller #0 PREEMPT(full) [ 412.925954][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.925966][T16000] Call Trace: [ 412.925975][T16000] [ 412.925983][T16000] dump_stack_lvl+0xe8/0x150 [ 412.926014][T16000] lockdep_rcu_suspicious+0x13f/0x1d0 [ 412.926041][T16000] get_callchain_entry+0x2b6/0x3c0 [ 412.926095][T16000] get_perf_callchain+0xd5/0x880 [ 412.926135][T16000] ? __pfx_get_perf_callchain+0x10/0x10 [ 412.926174][T16000] __bpf_get_stack+0x3e9/0xa70 [ 412.926210][T16000] ? __pfx___bpf_get_stack+0x10/0x10 [ 412.926244][T16000] ? futex_unqueue+0x22/0x240 [ 412.926288][T16000] ? __lock_acquire+0x683/0x2cf0 [ 412.926315][T16000] bpf_get_stack+0x33/0x50 [ 412.926336][T16000] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 412.926356][T16000] bpf_get_stack_raw_tp+0x1a4/0x210 [ 412.926392][T16000] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 412.926414][T16000] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 412.926447][T16000] bpf_prog_test_run_syscall+0x324/0x4c0 [ 412.926475][T16000] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 412.926502][T16000] ? __fget_files+0x2a/0x420 [ 412.926529][T16000] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 412.926559][T16000] bpf_prog_test_run+0x2c5/0x340 [ 412.926596][T16000] __sys_bpf+0xa22/0xd90 [ 412.926624][T16000] ? cgroup1_freezing+0x20/0x350 [ 412.926648][T16000] ? __pfx___sys_bpf+0x10/0x10 [ 412.926673][T16000] ? do_futex+0x3e7/0x4e0 [ 412.926729][T16000] ? rcu_is_watching+0x15/0xb0 [ 412.926772][T16000] __x64_sys_bpf+0xba/0xd0 [ 412.926803][T16000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.926824][T16000] do_syscall_64+0x174/0x580 [ 412.926844][T16000] ? trace_irq_disable+0x3b/0x140 [ 412.926863][T16000] ? clear_bhb_loop+0x40/0x90 [ 412.926886][T16000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.926906][T16000] RIP: 0033:0x7f9eedb9ce59 [ 412.926925][T16000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.926943][T16000] RSP: 002b:00007f9eebdb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.926966][T16000] RAX: ffffffffffffffda RBX: 00007f9eede16180 RCX: 00007f9eedb9ce59 [ 412.926980][T16000] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 412.926993][T16000] RBP: 00007f9eedc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 412.927005][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.927017][T16000] R13: 00007f9eede16218 R14: 00007f9eede16180 R15: 00007ffe42384508 [ 412.927052][T16000]