last executing test programs: 3.51814451s ago: executing program 4 (id=2229): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r2, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x10081, @loopback, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x240080c0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) (async) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 3.390708246s ago: executing program 1 (id=2230): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0xd, @mcast1, 0x1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100"/71], 0x110) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000007c0f60e4319cc543ba12ff350a4d7cc08dc1c3db2577320b907f1285eb47"], 0x28}}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x53, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "120cc654accfe2f0a202dbcf5e5e26dada1ea021f8f79cc6ed58"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x24000000) r11 = socket$l2tp6(0xa, 0x2, 0x73) ppoll(&(0x7f0000000200)=[{r2, 0x88a4ba0519be3a31}, {r9}, {0xffffffffffffffff, 0x52}, {r8, 0x6b97cd0d7a8955c7}, {r4, 0x21}, {r11, 0x440}], 0x6, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x9]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)=r12}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0xfffffffc, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2.462701114s ago: executing program 1 (id=2235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1076, &(0x7f00000016c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x1, 0x22, 0x1068, 0x64, 0x0, 0x8, 0x6, 0x0, @private=0xa010100, @broadcast, {[@ssrr={0x89, 0xb, 0xbe, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1d}]}, @ssrr={0x89, 0x1b, 0xf2, [@loopback, @local, @private=0xa010100, @private=0xa010100, @loopback, @local]}, @generic={0x94, 0x8, "13f2bcc6063e"}]}}, {{0x4e21, 0x4e20, r1, 0x41424344, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0xee, {[@exp_fastopen={0xfe, 0xc, 0xf989, "b43c58ffd80081fd"}, @window={0x3, 0x3, 0x9}]}}, {"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"}}}}}}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffffe}]}]}]}, 0x38}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/204, 0xcc}], 0x1, 0xfffffff4, 0x4) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r3, &(0x7f0000000440)="a504605488a25a956e54ab5bafbe188f0bea301eba23dec13b3c3d1a4e3fc6924b2978c9f7329208162cdbf8917fc4704a2cdf719e3b65325bcc2599b1d555881525e7512b3bfd34bc478e6d759133de573dd2e9c17f487f0d24bcb0159dab9ecb507c785c22b553fc30fa07895805a608f146e64f68007f7acdfd510bc82feee8cceaa4eb718fef74d67ab2f20093380cc0744595779fdad9807add1c6b5ce8ccd0", &(0x7f00000005c0)=""/75}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r8, &(0x7f0000000880)={0x27, r10, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20094080}, 0xc00c820) 2.175633592s ago: executing program 0 (id=2238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=r0, @ANYBLOB="0600150008000000200016801c0001000002"], 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x190000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x1000c001}, 0x2408c881) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 2.152387117s ago: executing program 4 (id=2240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c0000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032abd7000ffdbdf25230000000a0001007770616e3300000005002100030000000500270003000000050023000400000005002200010000000500210006000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = socket$inet(0x2, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4ffd, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)='\b', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x884) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x18, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000000010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000006314000000110001"], 0xdc}}, 0x40000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x2, 0x80805, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x10000, @local, 0x2}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x0, {[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6f264e50, 0x80000]}}, 0x5c) recvfrom$l2tp6(r5, &(0x7f00000002c0)=""/161, 0xa1, 0x100, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, 0x20) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) unshare(0x20000) unshare(0x40200) r8 = socket$kcm(0x21, 0x0, 0x2) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) close(0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r7}, 0x10) 2.099854254s ago: executing program 1 (id=2241): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32], 0x1c}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8003}, 0xe) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fddbdf255700000008000300", @ANYRES32=r4, @ANYBLOB="0600950006000700060095000600000006009500df99000006009500070000000600950002000000"], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.985501602s ago: executing program 0 (id=2243): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x640e}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x200080c0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r3, &(0x7f00000002c0)="7bdc22227d1f526f52c983ea2ff26aa636cbbb5aff0c9c7c5b7685688ca9a90aa32358adfb86c2a44e759e86a8c0a867135b9e921b95765e6943f5a17ab9489589937d1e232bcb8e3eeac26a4784702a675b7ee9dc784024921d7c9a82b3884ba51e5bf4c4113c477759f68af9575e60e797fb2b92aed071708ee61db40179cc63d65fa8537d483ed1f65bb968fb68f56ca289921144b5deaf8b11c4b5c4803440defdb23d86c907c27862274a031fdf3c2d414d450d9cd0aba000cbe5c20bfa8ad1ca43af75cc253c61ff787c84f55dd900415da17a", &(0x7f00000003c0)=""/150}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0xffff7620, 0x3}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000600)={r5, 0x94, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0xd0bf, @loopback, 0x81}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7f}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, @in6={0xa, 0x4e23, 0x3, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}]}, &(0x7f0000000640)=0x10) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000700)={0x33, 0x12, '\x00', [@ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0xd, [0x7, 0xfffffffffffffff8, 0x800, 0x2, 0x5]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xfc, 0x9, [0x5979, 0x1, 0xef9, 0x10]}}, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0x81, [0x45c, 0x5]}}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @enc_lim={0x4, 0x1, 0x8}]}, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000a80)={&(0x7f00000007c0)=0x2dc, 0x5, &(0x7f0000000800)=[{}, {}, {}], &(0x7f0000000a40)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c00)={0xffffffffffffffff, &(0x7f0000000ac0)="38d02815eb78115d0a6246787dfbbd6a1b7fdec64e4ddf0a3e9e0e405b1f0c31915a2bad39a72cc20ba75035afff05a45af513ab6ec65565a30074e1ff0148370bee94be1c99a7dbc2d48571da398dac1293e60e788fb510699f0b3b1f5a34268995179d65102c9593", &(0x7f0000000b40)=""/152}, 0x20) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000011c0)={&(0x7f0000000cc0)=@delqdisc={0x500, 0x25, 0x904, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x7, 0x1}, {0x7, 0x3}, {0xc, 0x9}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x30, 0x8, 0x8, 0x1, 0x7fffffff, 0x0, 0x4}}, {0xc, 0x2, [0x200, 0x2, 0x6, 0x1ff]}}, {{0x1c, 0x1, {0xf1, 0x5, 0x7e, 0x2b565a29, 0x0, 0x3, 0x3, 0x1}}, {0x6, 0x2, [0xd4f]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5c, 0x5, 0x120, 0x0, 0x0, 0x9, 0xff, 0x1}}, {0x6, 0x2, [0xfff7]}}, {{0x1c, 0x1, {0x8, 0x9, 0x1, 0xc94c, 0x1, 0x5, 0xfffff000, 0x6}}, {0x10, 0x2, [0x561, 0x65a, 0x9d, 0xb, 0xfe52, 0x3]}}, {{0x1c, 0x1, {0x8, 0x10, 0xd2ff, 0x0, 0x3, 0x40, 0x5, 0x8}}, {0x14, 0x2, [0x9, 0xf2cc, 0x5, 0xb, 0x8, 0x4, 0xd, 0x9]}}, {{0x1c, 0x1, {0x4e, 0x0, 0x7, 0x6, 0x3, 0x10001, 0x8, 0x2}}, {0x8, 0x2, [0x7, 0x4]}}, {{0x1c, 0x1, {0x3f, 0x63, 0x400, 0xff, 0x1, 0x6, 0x4, 0x4}}, {0xc, 0x2, [0x6, 0xff, 0x6, 0x0]}}, {{0x1c, 0x1, {0x1, 0x5, 0x5, 0x81, 0x0, 0x7, 0x9, 0x8}}, {0x14, 0x2, [0x6, 0x5e, 0x40, 0xe144, 0x4879, 0xfffe, 0x4, 0x4]}}, {{0x1c, 0x1, {0x5, 0xa, 0x0, 0x0, 0x0, 0x10000, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xfe, 0x1, 0x18c07498, 0x1, 0x6, 0x7dd45c1a, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xf, 0x8, 0x1, 0xa, 0x0, 0x7ff, 0x10, 0x6}}, {0x10, 0x2, [0xffff, 0x6, 0x9, 0xc, 0x7e03, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}, @TCA_RATE={0x6, 0x5, {0x3, 0x29}}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7a, 0x5c, 0x9, 0xaf01, 0x1, 0x40, 0x6, 0x6}}, {0x10, 0x2, [0x3, 0x56, 0xfffd, 0xcef, 0x8000, 0x5]}}, {{0x1c, 0x1, {0x7, 0x4, 0x9, 0x0, 0x0, 0x4, 0x2, 0x4}}, {0xc, 0x2, [0x7, 0xffff, 0x1, 0xfffe]}}, {{0x1c, 0x1, {0xb3, 0x5, 0x1, 0x5, 0x0, 0x2, 0x0, 0x5}}, {0xe, 0x2, [0x5, 0x3, 0x9, 0xfff7, 0x0]}}, {{0x1c, 0x1, {0x9, 0x4, 0x9, 0x0, 0x0, 0xd589, 0x8, 0x5}}, {0xe, 0x2, [0x9, 0x7fff, 0xeb, 0xf49e, 0x3]}}, {{0x1c, 0x1, {0x0, 0x6, 0x9, 0x81, 0x0, 0xb, 0x1, 0x3}}, {0xa, 0x2, [0xd, 0x6, 0xa]}}, {{0x1c, 0x1, {0x4, 0x2, 0x101, 0x5, 0x2, 0xffff, 0x4, 0x4}}, {0xc, 0x2, [0x2, 0x2, 0x200, 0x7f]}}, {{0x1c, 0x1, {0x8, 0x7, 0x1ff, 0x7, 0x2, 0x7f8, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0x6]}}, {{0x1c, 0x1, {0x4, 0x3, 0x7, 0x81, 0x1, 0x9, 0xfffffffc, 0x1}}, {0x6, 0x2, [0x9f5b]}}, {{0x1c, 0x1, {0x7, 0x0, 0x3, 0x0, 0x2, 0x4, 0x3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x1, 0x5, 0x101, 0x1, 0x1, 0xd2, 0x8, 0x4}}, {0xc, 0x2, [0x6, 0x2, 0x3, 0xde0]}}]}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x6, 0x8000, 0x3, 0x1, 0x2, 0x9, 0x3}}, {0xa, 0x2, [0x6, 0x4, 0x7ff]}}, {{0x1c, 0x1, {0xd1, 0x8, 0x7, 0x2, 0x1, 0x10, 0x5, 0x2}}, {0x8, 0x2, [0x81, 0x8]}}, {{0x1c, 0x1, {0x5, 0x5, 0x4, 0x100, 0x2, 0x7, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0x80, 0x101]}}, {{0x1c, 0x1, {0x5, 0xa3, 0x1846, 0xe, 0x1, 0x7f, 0x9, 0x5}}, {0xe, 0x2, [0x10, 0x4000, 0x5, 0xf07, 0x1]}}, {{0x1c, 0x1, {0x44, 0x2e, 0x2, 0x1, 0x0, 0x5, 0xf2, 0x6}}, {0x10, 0x2, [0x0, 0x401, 0x3, 0xfff8, 0x1, 0x839]}}, {{0x1c, 0x1, {0x40, 0x2, 0x8, 0x6, 0x0, 0xffffffff, 0x94, 0x5}}, {0xe, 0x2, [0x6, 0x400, 0x2, 0x0, 0x9]}}, {{0x1c, 0x1, {0x1, 0x5a, 0xffc0, 0x40, 0x1, 0x4, 0x8, 0x3}}, {0xa, 0x2, [0x3, 0x3ff, 0x5]}}, {{0x1c, 0x1, {0x6e, 0x6, 0xfff9, 0x1, 0x1, 0xd57e, 0x4, 0x7}}, {0x12, 0x2, [0x6, 0x9, 0x0, 0x200, 0x7, 0x2, 0x48]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7fffffff}}]}, 0x500}}, 0x20000000) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000001240)=0xff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0x17, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xea56}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @alu={0x7, 0x0, 0x4, 0x5, 0xb, 0xfffffffffffffffc, 0x1}, @call={0x85, 0x0, 0x0, 0x4b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000001340)='syzkaller\x00', 0x27046ec8, 0x1000, &(0x7f0000001380)=""/4096, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002380)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000023c0)=[{0x2, 0x1, 0x1, 0xc}], 0x10, 0x5}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000025c0)={r8, &(0x7f00000024c0)='pfifo\x00', 0x204682, &(0x7f0000002500)={@_ha_fsid={[0x3, 0x5]}, {0x4, 0x0, 0x7, 0x2}}, 0x8bee, &(0x7f0000002540)={@_ha_fsid}, &(0x7f0000002580)=0x7}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000002800)={{0x0, 0x2, 0x401, 0x6, 0x5, 0xfffffffffffffffb, 0x8d, 0x4, 0xfffffff7, 0x4, 0x6, 0x0, 0x339, 0x5, 0x3}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003800)={r10, r11, "e7dab64666fbba97de2a44548cc4d9a4be64b9e0b5c96b2ff4a7182caedd2ba244f2fc795f7346da49efe78a10b062b0e66bef7104253baf10bb4f27821526b378da841222b11d4b63818556cec9b031f9aa7a91f851cf891b47c26ffd4eb44fbd06d3d3114da3af52a73825b48b7b22badcc7e8ea4bbf93b91b6d75d84b149fabb71110faa95d409341bcc7ac7f8ff00ef0d1301f68d1daf8e9b8e5be548f5a2817feec3668a1c482ff3c407fa9d18806767cbfac25c21e76d164efd18e488dc575b9f182fd1bcbc78c4fe9e931bf0a904f9c423bc06265e8d53f0514717f0460a1c2f747a3437805e5945f78c1979673dd37db9d91f7a2caf1d57fa9d35726", "f64df48e26944b624c751cc2a63dcf83c9810ce5dba1bff26ffe4813d1b0dc40ff4b9db321b57d4b018ecc9498352b62ced1f09049df65c3612bec43ce2ac4ea24d49448ffd3c3192638a174b114f7ad8c338197e98042fe0f9f6cc7ff0f2a748e30ff5fdc8e66c9d48d1be56ef18920a46990c0439fc37c4d84a055d197e3f08ee7312b0bd07916f5cc050e660e8ec38de1e7520fa5664b3584b1a798aae94e025562f3bdbb886c2a80fbbe6da1236b329dc644c20be1d9aef960ecefe6659df168687efb8f6ff4a61087cafd7126127d8ad16ad7e77657496b8e283b7573f51f78a1f58c288feb4f5d5fe7d9c9289317d33af472557474860eb150b73e7a970fc3269235fcebd24927e01f7b0835f9ba203ac2950afea90c532a0cd3eea9af63c5255a9e64a0ee1953a2427deb68b07ea2b6260ecfc2c4c2f109777bec0a215345c8210e1fc7ee4b5bb2f0cfbd8fede68ec6e2a7397d8fa12138a65c8bcb3e1388ee197614c5978bd379118663c90a29579b2e5483a79378b2b9be2960ed027f18af6b0932874e8dfde7513c3d8654f5b323e13cc620a0980af2b8874093a1e53eff33b6902bbc19fe35e2a143257b475324eb0f047df86a78344b7b7475f77c7f4175976944068d397582a6ccae4d873c27fb3817fde4cdf2252675b483360c27e812fe18a33d03c9fb7f372c46a31588497cee75e175a9a3edba10f0c815c98074fe777191b4f42fe03a572dba3a44348644090760daa3d8706de5f1c2277bb73c0689225ae8933d13349c238aebea23288b4374a3a5028ad2a6a31eae60f721e62f2bf463223c84889feb5824e6bee53c6bec00f547971eb3d859d7a2863adb1dec77f29cc905bee4dfe42b0e94c0206ec9ba36073595d3e74ac162a4c856c70abce4d1cfa921444652f455c2bbd370a9f94b6ff6e9797a40b57c0028ab2989fc23b400e046d9397fa3cd7fee20d467d6e8b4f98f3a5c85c635f2cbb7b3ab47b3007a76ce5286865da23c04951a600d4084155ae6928b2e8f471989bc3c35b96833cbb12df2b1d2018c3503771018f47af7b76463d9c2b470942a217b48f8787b063776e20bf5a5625b5b335bfab290c4360a584b40ae551bcf20bccaaba3acb381d478fc07eb2ba26ddf0b0340b24d2213edff79a45321664fa90f19a9638b19b4b3d35ff3036272ac70cbb2c53332165984a069e931eed43fdd66f033a9e4777267d7d33f6e783e2ee08fd05ca6759db3f7759ca81d30cbb8cd8dda725ae57b0c2d5b252088371665362913226b0ced198ca696929a2abcc13efe7716019b92b718135d41442b6a10730ced0e39ef6ca35d328f826811e0db2f99bd02a9c2814dfd79901a0ed5964c99bbd6e10b47760784220a46043f45870329071532107849b79da873907280cb84a0deb2f0599aa4f9eb51c5fda38b88ccc9a55d4f17283188e3207dd7f89612d7509cc29b1d648b0bb46f4d8329f0ddd0d12ad87af3065ba04e5fd97a23d7c29ccf0952e8cba7eb98d15dc9f911521721634210679a5f202c913d7d6d4ea19d7bf0b32f31ad07072a94480897f01c829c38e07c45a7318dca16555d1911282b6d97a134682f29807ac8b27717dee52320a3b64c13e27b26d5525d30e5316468db5778c4968270bf80d10028ab5bdeba84e48a0b44523b190defc9d21623caa81a62e436fc3e077fb70e5af560f803c4e8159228e957dce396f9fc95404cf0c4063e2d7d22178b3c8304af25eef62058af3d832ca816045bd954cb2c8b4b9139ddc6e5da85db09c4b9ae8621edd127fdcbac4b083bec7c4fa5da322aff7c475907bbe979c52500dc2a181e7d039e2d89dd8e04480a4e1dde01d907f5d4e1cc2de265ec8be5ba781bb686e1ea08096af14c580b3f0c50fe739dc6c40e9cfb9d881b99735b05e29217848f6a0032dee2cbbff738aba7adb43e7e0da03daef94c78b5f732930c0ade3be6165603b235e149e7384344e11bb1fdf976cf9ea2ba4bc52f24e3699936f669264ef6b1524b800e78f401dc50af372492e0c5038a1d074e8636a9bd3d5aabc0b977d9fac1ea63a70f0a968e1b73b06e568a4dc86d9e26e453b972389d870ad35932a119c50c04be52e1b088629d23b997a924385d055b5682c260ef39952f90026fe66657480ccf3755dce676189322d716efcb4d58e19b09b8bb85f8a890da81345c9a3ce05876f2c5bd923c4672fd55ba332c5399ebc644b46f0f8f8056a2000b200b341969cf56e97a1e9b5e0430b95efa715c88d4ee922b0afc98a6f5f85fee8cc2b227836a51c0f6c2722d131afaa50d42f8c9f0ba1b5bbad4c80b38bff3ed5b23679ed61c49e0d0ad8712667f8a45efd0268af77d18f18b2b0f89074acf5640c9aff5d16d2871344a03f95622fa64cc6400f3e9fcff2b23338a58b762b9dae85cf4a79fa48667b2ef656ee876d60ed4f20bea16d13fb13ffebe45f42a36090265a753c247870a05861b19addf25b762874a2a75e016cba5470ad35ca48b97d1cf933bc0e03a0ccda44175ae3d7fcb42fc8921f127321c8cd8257d974b30310c50c3511cc9b09be1a5dcd48b26d37dc99de72da45fb52043e0a9c882f60105df222373f29a03c8e1172593dc2ff6cc37ab56c65247953cc400faa522bdde3f80e84284859f9bde3346e815f69ad291198b3ff9808b263a3abbe873093d32182210e02652ce481fa4c423e6ea3a98fae22f0533cbb982356bb567ff2e1c066b2ff7da917c44d52431977c0dfca4109464dcc54d7ded069ccd392d9510dab26464fe43e3bea8f337d7cae03e96356f59179755411f559cb9fabffa44aace8c2d118727ec33fe0982f5211a6f43eda106a7a41ff219f26b6b739fbc1182d42e1c68b5d2cb39edd417a8f6f642f7ee84509b5ced9b894616e4ca0affed3567b458c504e7edc80032c8aba74cd5eceed67efa79efea35708223d47f2ce6a7e55875978eaaecebf74065a8a67ecd81199f263d3c277fca745c63b71bad5524de9fdd338ef463968a9d72233b198ec7fad4ce0bce41231f8f5857632bee78ef78cf2f2c556b97707351e3cd76025a705ff7664575aacbec9683b82f34457989ea46b90617486f0322a2fd5407146b30e77b00dc8c80ae800f6fe020c93e72055b939c56170449b8ceaefd5f3f6640b00b7fbfa65dc7349dda04ad0ca0d619fd8a23cb7d7f352c5e69366c6682d260c334147cfe38121e6a4cf095ae05aa22b91343e1d0579af16042639fb6769812337d38fa8068a8bcc73819f74b324eada4b1c96dad8f038d4010aec9d42f79e8640c76894bd0eefebe08b172c669ec410023f7d8e4a1ccb231bd7a88a9ef98dac6cc9cbbfce2b81fcc01c2e6acb279db710db171f6d178e85f05812908f9905c92a4a9e2dabdb0e58ac8a6294b48b8b0d9f82be01fcf1f5dedd02a3afc3fff7a9ec3f599cc138310f6259394c4763e84517264d78868e99c65f05e64d055c821a980b77e655cde9ab6995f66fe4fac36290e27fce91e10064e1ceda32708df350dd8edad28961185d5de09e8b947b3707de324a2cf87831902e6faa8712f87c053968505fa83b201e5e09fa222ce81017dc99f4474d8c98f623f70212d2a13a6c7caa7a8be95a517df67de31d9e30ca9ede5e29df9c34b6764ba6ff1c22b70e5e3140ae10402d123e2dccaa888ce7323b6f13a871072bd21fcc88aa793e1d82f2ea22a9f7c0494e5a49d28ee2865011baef5e80470cfadf20ca1196adca3f471caf65e4dcee36c022e75e94b3407e6c6c447fc6ee6c1aa79e6bd9151d0981ea59faf7725590eb954ce70f3feb92926a75ff7398d2777006e07378b3b3a4244c09ef198a114b0e8b311c254167f7eaaecff495dea0d59c07424530b82a117dd7331fddd33ca2a423095a77351ce1581ceaddc071902932d81f826c2d75ebba223cf74496918795270b0869e29dcb7a811ab9a4f8b1d43f2b62488def4a93639b2e8f8ca7cd0f4874a9ed22090ea6c9d19025a66febfc2de5de68d643e713f23bcb56da489fac0f8e84168677c9298456d6f06df87603a2f2f8d1849302a5b2f3758cb6d38c02391276eec5d38ad3d0392437284faf717f6f427083cde65c1783499e7f0696d198b742a2698659c2a51992293630bddd270ad12dc3fbe7aaeef4ad33ad0483fd4bf6881982f58babdd91ec897875bc726c0eb1248f99cee5104ec73fcb3356fe096cc70ca1d38eeb41db5ce50628e728c9847b892eb5d0f10da3d90a82b37a7bd3f4b3dcb7d57cb5ac8b76c5cdefc02e9882f00bfe17090ce902092a375d42c86a424a78bbb864d9d3ff496334cd1d20116b8610eea6f7ea5d852916218b4e8fbdda94f83eedc43556d63c110f5b39be1fbd6668c754799c9a1aaf1ef078e94d147b33bf0761e8524afa0a0d90f74107edafbcf3b11d9ab1a589804f40cd90a133c14102cba6bfeac5cac00f80fe11089b2f467de0d8b63c0e4ca5cea1b42909c2ed65c063915c2716b651a7b84e92db980f02f9a175b900d0f34ad2d74670eaef55389dc85c78deed2a63b0dc1e1bafcf6bc310b40c33993ed07c0f33604605b0b64883b372102ef6db2e15c0124051dd3a36d8a35f9dbe226e7ac2c9d3071df8ec7bda2dd2064f6d69e858d1711f951362608ce1d4defe9006766e382380bbc3e56a0f4be9a9ab775f017cb309d4b2df4ac5c33c6f5c8925ddee52ed56082bab5277ab52569ed2991d89bef4d250ea87002fd5a0690f421c99e619e44bfdedd11907dd9dd445d1a984e87f8080a22c25240dafdc7d5d928487f15e94327ed63ee8a816d65ee90532b04335380291cfdc9609cee2164a1385e45a5cb75dfd698d451c6886ef8f700d9e725c2e9db056ff91563c144aa55e52e20d2bf047eaa25a2c2599616aaf3d57b7e3a8cb5d5a23ddd836cd20db022bc252b71a94582044b2464a88f44ed003d25307a44ee2d1b564f336dc51a9ce27a240699d2c66e3d9191fdc906efd2242c7b487b0f377a02e28ca0a4fc6157cf5441aad855d556e6b9bab7be3826d80bc808c9ffee3f495ecca8519f9991acec9ea4e9eccb01a07ee1f96576796bb4aae6472b2e47bc48ec1a026db966123479c7672281c627f4e34df3adce7ab2d2ebbcd836fb3f9b46a9660d12505f4a6e12ed3a2bf1fdcd3590c6e7facb95841572191cdeb361bb1529031c50996bdce49369a6bd664b086825faa618e48bca65ba0e9b20559a7f10c1d16e3ade3bd008c299aacad62d517eac4d233505dadfc9ce0586cef9e23315fd842071fe6a70c1c44c6e7f734666c0e8de52eeb0263d0c5d7f682623818b560cb7408c43b61aa7ade508811b95877eca4a2dac39a6dbdc0d4de03e811ebbf328be82c197e16180df33602976ef774528f835157d2ac4ee46a1"}) sendmmsg$sock(r0, &(0x7f0000004b40)=[{{&(0x7f0000004800)=@xdp={0x2c, 0x8, r7, 0x7}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004880)="f358cb782e277ae2bf109687772b5065edaf98d821461a74fc7cebc8a1bceb243f197d77a603e7bdad070efae42588de52f7229b18638572432d928b4ca7d0f7010c88c13dd0de2b9706bed5ca0e244241acb471171195fda373eb1cbf8684adfcbe99595dedd262ec14bc7f2d225be731c3df387341ff8dfe32ccafb8f216859bb83c092179ec0fa1df63590115ef50a2d3f47083bdb13eefdcd18bdf44bcc40df1986162eee0090614b1af12a887cc2d4404708ceec35f906d7e5031c13c6db2fe869d6519ca80db58ad8b5556", 0xce}, {&(0x7f0000004980)="b52bc41982067ba1e88bdae7aa6bcc6d26fd1c3cdc78411e7a07ecfc9d91294a0eaa630ef6f49e9ef6a6729d0ec060ea580c5c2d994f4f4e6edf7d9773131949038f457b10b31b86bb71ee56cc6cfa3e4385efbeda01d13234a2c3d369c4b4232d59c7d672ab395c4699bbe682ca72ca1df8c219fa5cebe9bd98463533effb2549c8d0ae58d34ce4fd18f34f917646c308d4a955650543cb1e25bd", 0x9b}], 0x2, &(0x7f0000004a80)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x90}}], 0x1, 0x4000001) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000004d40)={{r8, &(0x7f0000004b80)='pfifo\x00', 0x408000, &(0x7f0000004bc0)={@_ha_fsid={[0xf0, 0x5]}, {0xb5d7, 0x8000, 0xffffff7f, 0x6}}, 0x6, &(0x7f0000004c00), &(0x7f0000004c40)=0x7fffffff}, {[0x5, 0x1, 0x7, 0x9]}, 0x7, 0x82, &(0x7f0000004c80)=""/130}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004e00), r9) sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f00000061c0)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006180)={&(0x7f0000004e40)={0x132c, r13, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a0f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7335}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x1054, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "d46c976b467cdb763f50229a152b5ba00f5a395b41e01bc18a964489bab0aeec78d00f2f4fcce524052431742ffe0c2b479283bb5869cdf579ef1338c709dbcf1e6f27e9d2697e4f12adf1593cabc2e69c2d9f582bb69fe81ae2c9d6060aca5d819de13c4716b57ce41499156769d6e0f1638f9a6bf8c9c2c767deea5188260eccc3e63089d5c2f691886339174f395fd9e9f66f8a63d58219c75e2fa6cddcfa874db9e33fbea4ae4f09c2f13b1905de98b8f73db63d73d74525a731d796c7a4a4dbbd172986b4545bdc3fc8100e1aa833e3e1cd15eb6d36e0e892ab4836bb28d1281298206983f5111aa2372803fe35383f965a85fb03d78349158e46725d94036a7ef06834da1a16baab593f55b68defec0c55130c91160f0f0bf0cdd03e25f3017a8541241759c936db06d7881a8949036b45d6ca1883f4f7643dab9178c75c853a4787865658690813f1274d86079339fcebb6482962f2e7e78883fcdc171e141a8eb1f6480df21040fe006164fb764ef65141762b69d45784e03ccb3675c20ee7d3b3608dce555841277fde567b3c061754e4306f203a7e9d24dcfa6275352213eb50c15aa6fac48a01177ef8692fc73a6438c8348dcb5d331c30b44d9fd255893c04ab6ee520e5498c96d486bdf74f5010451654215085c75ce86aaccee2bfaaa10343f0ad9a34747de87939c8ef4dbab6ea2f102e813f83bfe801bfc30254724a7d49fe2082910976d143bf17a3473eba549a79c5a12abc63e0e443dc151a048f1cd0d22a3cc4efacefd0ecafb91b2f290aa3ddbc0b17acba79a5b6b95b6e78b754f65ca7bd13d63a7c12f5234ec752546573adb0248175fd0216005a732ba4436892bf68b21482fdb4df9cec72586f5b6ecdb7d2a43699faafaf4eddcc867e451e279a318d06ccb4de49f67d0846c9403c815606bd689109315bad75ea63efe9bd627f81ce2bd7dacf9fe1ffa3d47a3fa1f0a97489c39a900be2db7a071004827aed4419a265739a8507943e0261eff534ce6d364cffd09a15bde35380de7fdae6080ce5aab4bedeab22c986b7d92e3504d9c60974f9631a4bc574c115a931f9748fdd60384431bfd9eedf587bf9922887f12044462ac2e00c99e863f3615f674109eed5a1e0f3cd71fb8c77c0f7e7197a8906b313cf6f37e2aaf9bdd7ccb450938d98efd6ae4ed5bd78dbeef9f2c8feb357cedff1d2a21cadd9a6f98eccb7ba89408dc46ad0dbb552b9a3ef468081b84ffaa8cf78bd054fcef20490eeecddb180852680097f3d7182c93897e037cb541037aa8f28f243774557105303428d50c693d9c00fd15ab856b76241afe74fa632e7c57268b5b45bd7acb6ff14bd622c35e9fd9b85c9c29bf270de52c9fd6146f9a65719712745af65bc7c574de934a356c29cc28e8e274f796c3820599732630a5529466447d89bd80e97ffa8cac47ff75f7fc0cdfffa7b98442ea3884f0d69c1a91ca9bd6b616273268db1ad053597d3f6d6412a8fb758b59356dfb24371a57e952b3e5a683ddb381ec96f366b98eb5d6a37a1e7874c57b11c72e80b92829e7fa3bb1a2f5a6d37d67d3bdd436c3c4647b2785070fa4873606cf14a41cc870c5502052eef2733bb999696b90a4b0f9e892225e493676af520baa2beac1e15e7545e423198b639b7173983940559ef204b6cde68a3fe2dc0893b7a5e1a5597f3c37343fe4185cf5ccf5612d66c542ab838f1507787eab3683b739929578319d1f9edbca1d21fc4714a404daad84743806d94d7e51f3ddb23f85c39849d16297124acc85a2b209758aa26e222844881f0c689d6f7723c22a73bb90d3ad4230a666fa0d409846890055e74bf35b38dd2885706c2bf0e3105e76908658f139dfa6a65412c2340fa2acc1599e6d6bd311d57ae8a7bd5f21946e9fd01a4804865a09dc52374ac9a4ba2981c25dd87923d8cf62d5c03f35f60194625b6d5b7d7d594c43768f7bf7a32db550c48d0e4aba034c91643d7a60ee2f4a4b6260d56b0f2648a288fd538b3029f4d9f19787a8b606ea874ed4e19e0e78bf72ff2277d86ce57a377194bd03a451bdb993034092bd21020335138aece1c3a211572465956ee0d7ab2e0c1c8348c3a815b4004871535359956206ec5211090473b83d82ee2a39b53b71823ffd863b4217a09af3cc72b67f005fe6dd82b85d9ed100d67920ad3efb3d78bfc3ead2698f953f2b821f8374f40506d3c59d2460483753cc6883315d3cb2eaf1f33e653e06ba3e65fb2784840502c0104bbb1684aa4394db9406eef9527add7d1e01dcab41ef795014c4b0de497fc44e342ab94c73bdd4bc966d7a0a74da04a05c15fc1c28d6db26882bc0c6c68bb0ea9224f318b90e8632782281d45b25f4282320e4cbd2cc37f9643c148dec1f55f31bdc0005a51691202830c0dfeee4c30087d744e1f62746bcf6be9c3149f56f069bcca83b97b478b7a75d5b3df6523387f27d501d8d3b8ab2c50a4668c969cd7c554309f815a3bfdffb1a52b1c8af89952077b5bc7a880be17dd87d2c4e6c09680c6fe05233e5cf567ca915f1e2b6448fcaf5dfbe1a84423e3d4e6358c27a527028329608fd36ded1b10a51108492d0c0f0e7897b74ec3c3e79ecf7695405f05943e71c277d9c7dc6bfdc9a2b965fdf55c2fdc48c0f5ca1b703d88f0df5cb183cf431c3f72f0d705d0d56f56745338d04e68ab3c9a25b09d807cf3a928fe53620914f264a82b95d3417b1fb777d2aae731ea1d79fea129cf3ae5b44575f33cdb17744b5535ba2e6700dfa861e5a3e46a0ccb0963997676479a94c098042c4b4f2468dd8d9444194923a7417e884c074dafe4efa6d8c5c3186f2616097cf6a9fadf8e09caa68efac501dc4308f1b52672107957cfec2173b3778a1114d4917846b232ee0752f79ba83c9eacdf763c000c66bb0b19e1bd6e91fe939da27f527c9cf7cbcc971cf71b8a7c3ac2f3af3e0866f0370f64e2ea1371743045dbab5f6a9bd1301e09def2d29bf1ca426bca4d5982056da125e3f1e2771932283092be636acd88b5b535d10232ad7b1178a3b7e7adc27d6ab438c6e29026c80dbf96c4c1742a20aeafbf10627625b392c77556ae7296f067d3d04b11f585bac36007a3d4aea3e252671d37efe30fa9d54a6d22cb0ebb353f00732c4f30b34cec8df9e2e8c8adb860d09e76c23fad713468e6a47651118329a01b02f681ccdfb4ade7435ab170fe167a36c129eb9a97435bbcdc382b2deedac7f7690e9009c22521cae615572fd179b120563375378398100220c180c426800d6ac7636b132661c17ecc2c69c8313ec4942948e907d3467c07a28afcc4cdcda46bd4a248db20a04f8a4c16cebb20d791bf1de712221a5b6265a4f8bca24d8be6b25eb1e979799d06528ae3d9480473c4643fe74a41aa91475cf60760192a83975e7af4e60694b09da049deea30ecdef988a5b3fda1ccda1509c3d0d082a3b766fe83d34a15f5292707d45b43b107b2deac97287df24f5d7dc5049930de7f2b135de85360219899b5a61fa59b51d874b1f04b32200523a261e131b3363058f4faf64e1342bca11b5c663a07806503e7d1cbb0d538fdec972b80912b8c9c8d78141c609163d04fddb94ff9b74fa07943108126d00e6fb2240bc4af51212238341328979dce0af81c9d3c4d70e5e9a1b415528311861255a4e90d861adc4eb7d7178a5841b80f1dddc372b19d6a8acd977332659aa4241e299204b0be274712efc3b233d05e9d342e30f4ddebaaee9154dede4d06ee872658134352974a94541d5481d3d0e5ddde4d1199d993fe2be5c29f8e7a047020c98860dca8afcf224050c0e49b17282ee7a78675735fa100a1ac9658d01fc4145861f475615761b0522d95d08f0e41af1a80ef3b286f66b8933561e55f1b00db32103c6c8dcc6818bc8dad78d2dc59e813e23925a2a6dd57df08b40b59c539f64e6890b314ad9e70cdd7b81ddda65bf3c14c9ecf5440ce6feff4964c0b44a00ca5994bdc1a077284df79b73cd156845b5c401eedac78fed98309d28aead74b3f3f600242b39f81691241cf174905dd66c6038c2d68378adb64320ed8b343db4f53799a9fabdcca5865948fdd41f6a4674a3ff4791908eef8c1c3101ae6a908e235443150b55eafd16f9fbea541b81a14e9e7d7df6fbc5f7bd318b27dc9bcd7b9245b55b424d557cbf88a2d7431c2df91c11812adf2766beff9d20fdecbae3a428a4a0d2b6d2f01ee8c885ff40aba983db15fb37f593aa065231792d5b8d950ec4162dce6438989913b2a93dbda4522958cd0b0864b78fd54f7b615532bd07e25c328ebfcf57229800e450737dea3db2f1f7670650f575ea523ac834f465a98ab503e12a368841f4d9a03517f9f6b6539a55a406a82b5594bf9916a036ff15ca8febe2150a0e2a857ce7eff209e2c93ec5b9bc73c4934048550e40d80ed8102cafdf2831e58f5d41753794e6e6916132b2d0dc89356fa7c439c7516b5ae4f66578c5504a3ca3b2b272cd4eba7b7b4b300fed2817fc09b47518584f142b7c8ca70b9d2f55dfa4b0a1753eaa20bbe81ccf597e8ce06518e6024636cbc930fd5e7febb531dc36b19be7ddfbd8543af294b6e71ba3eeb16181e92436b66acfbf842be96c4a20516a4cff483779865a59db72e3953fbb57941b56f53dbb90ee04b66eb1dedac59351a9a3ea4b89ab06a53fe65cd4a9d5f5c9773cb2da59ed856a3b7339014ebd1bd7008b0d3b87d135e870ab32b407a3b12cf3db382fce8b19aa047974ae2c7ce37eace16d8a70a3ddfc8da6f8a37e3c3f67e3a8860838959e6d722e154ec4fdbe9e7a4d15c0801eb264875c4179cc1d75e2664c30ceac55ab30a22b9c578e9e39ac97f5cbd54b2e80b33abc397aa42b11bc815ae30fe5ed57f03f4f2600114351e42045a93559b3a47942e917345005e9584266f4a61c3564e9ad11f6e318779e21ce7c6b9f249fd8ab43c313eafcc37cb5a117f41efd76cecb70b80b3a30af44ac6e98d320111a865160d2ba66da412c2761fa30d36f462217d57dc898e071f8bd00dadf98150ead0bfdc2804309a9fd0a1099310b496655fa49688afdb750b8e5d8600538c99a893efe169934393450c5dd62bc7658d35ecae744c150826bdc49c6079de16d7c3f7bc35d367fb681246343ec6ccedfa350d5ded9e987634d9361fff49cd67ba67fcc1064258c4525e33488dc87de0584746bef3c502293f2a5c7e73ffc75d6a65c51844c81405e26b99f31479ee275721da68dbaa81b8fae394c420e32c301ffc0212ef508e283d5e6923c7553ea1d589bc4a5f2c83f66358536a9c7ae999d02d6c62c5ff2d36c4de745f60843cd0a7f74df00bc98642539772f6813e532c978f209fb80a533523cb8f91176f112344c8703086c6fe9bcb9e5dcc8e738db041b3e4ed72efc4579458aeecf5701ab61560bfb8be987b22f306b98e1ee95095f8458faa130742edc68c23acf0ca6bb93995a1d5ae772d3548a9e9db525aa260ca33d3a4ddae9f10bea0ff790bb4559724b70e5da853c014559e2de073e37e679e65890bc3bbe836d59071a9ea2cee6c40110ab4f4965644960fcf3bf96180faf3b7cf51721f067d6452f99a31f6fbb00f04050cb08eaadbd319556809ec20f86537e9b5d765e2647cf162ce4d8066b58905d324f4443ddd0427460ef4245e408cfbd2310e76c844cec27eb72da865aff383378f1c8b77161a5fa7f3bc1dd8efb8b32af9b3a373c9f46e6087a5b23db10216921592190b676a410d94ecaac4ad5d8b5d9ec1fa0b"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5006904db50de0204bd1777595b2af6263b49f15fce9fc474859bf60cb0d60d82801e4fd"}}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d50}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5068}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc99}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x132c}, 0x1, 0x0, 0x0, 0x40c4}, 0x400c4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000062c0)={r12, &(0x7f0000006200)="6bd1e25cad04298166214149c5d464d5ea2a4c99361ad6bcca44f16e574ccbbfff2571a57d73f213b53a17e52a45d7d51aee7f0a5b029021c6703f9adfcbb5e209618c70b72284b5a67efcce1771a2697c4b461044d2cf327400f0b070a5d7ae7c0c0fd24aa7da231a45bfd200de35667d41ba4a0641ad358301cf76616cb45e", &(0x7f0000006280)=@tcp=r9, 0x4}, 0x20) socket$alg(0x26, 0x5, 0x0) 1.885321257s ago: executing program 3 (id=2244): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001a0001002cbd7000ffdbdf258180"], 0x44}, 0x1, 0x0, 0x0, 0x400c880}, 0x884) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@local, 0x6e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x200000000000001, 0xfffffffffffffffc, 0x100007ffffffc, 0x2095, 0xffffdffffffffffa, 0x2}, {0x4, 0x40, 0x5d93, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 1.877259389s ago: executing program 4 (id=2245): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000240)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x48}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048004}, 0xc010) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendto(r7, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x3c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x3}, {0x4, 0x9}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x10}]}, 0x3c}}, 0x0) 1.822651808s ago: executing program 1 (id=2246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.808481805s ago: executing program 0 (id=2247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000110018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc090000000000004509010000200000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000070100005eeaffffb702000008000000b7030000dc0000008500000006000000b7080000000000007b8af8ff00000000b7080000392200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b2000000bf9800000000000056090000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.807358813s ago: executing program 3 (id=2248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) socketpair(0x6, 0x7, 0x1, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) (async) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000000)=0x7fc, 0x4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x7}], 0x1, 0x40002122, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x7, 0xf, &(0x7f0000000140)=""/15, 0x40e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x609}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r9, &(0x7f0000000340)="a9", 0x0}, 0x20) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="000000001084000f180012800e00010069703667726574617000000004000281080025"], 0x40}}, 0x0) (async) close(0x3) sendmsg$tipc(r7, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x2000c8c0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000000180)=""/107, 0x6b}, 0x100}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40012300, 0x0) (async) close(r2) 1.661913016s ago: executing program 0 (id=2249): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0xa, 0xfa, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18, 0x10, 0x8dcdcb8420ad60b4}]}, 0x38}}, 0x20000010) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) socket$inet(0x2, 0xa, 0x8) 1.60262325s ago: executing program 1 (id=2250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) recvmsg(r2, &(0x7f0000002c00)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/64, 0x40}], 0x1, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x260, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x448, 0xffffffff, 0xffffffff, 0x448, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'geneve1\x00', 'bridge0\x00', {}, {}, 0x2f}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@srh1={{0x90}, {0x3a, 0x5, 0x2, 0x8, 0xc6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @mcast2, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 0x2140, 0x440}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x1146, 0x19a}, 0x100, 0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x8, 0x0, 0x74d2, '\x00', 'syz0\x00', {0x959}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 'gretap0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x2, 0x5, 0x0, [0x7ff, 0x7, 0x9, 0x3, 0xb, 0xfffc, 0x6, 0x6, 0x7, 0x3, 0x4, 0x9, 0x1, 0x5, 0x23, 0x7478], 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x5, 0x8, 'syz0\x00', 'syz1\x00', {0xa77}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e8) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c00028005000100"], 0x74}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYRES32=r5, @ANYRESDEC], 0x24}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff00"], 0x50}}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000580)={{}, 0x5, &(0x7f0000000380)=[0x3, 0xa650, 0x5, 0x40, 0x401], 0x2, 0x0, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000040)=""/139, 0x8b}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}, {&(0x7f0000000400)=""/33, 0x21}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xf}], 0x3, 0x40000100, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) 1.253281612s ago: executing program 0 (id=2251): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) (async) unshare(0x26020480) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r1, 0x8008b705, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x44040880) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x19, 0xe, 0x6, 0x84a, 0x2, 0x1, 0x0, 0x81, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x203, 0xfffffff0, 0xffffff40, r3}, &(0x7f0000000240)=0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000fd3c228b77f0c4061384fcb9a91254e2e6b1cb38bd27429abf635d5d0e52a91de91e292ab561b6661524df670a7ad5793e781e5f96acecd95111f6d29f3cc3ade11e26624d4268b7e0bbc487c3dbaae4c044323279a692055dd365def675d6aab39432adf3163e0f230fce26d5b03f70ff9e5da7b19bdeaff3a2bc0e159c118a9f2c4b6d32e1d26a689c54f24e01ab28b6970d60fa4937976e543d5fd732f99bdf245c77479fd0139c61f0ea65a4", @ANYRES16=r7, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000fd3c228b77f0c4061384fcb9a91254e2e6b1cb38bd27429abf635d5d0e52a91de91e292ab561b6661524df670a7ad5793e781e5f96acecd95111f6d29f3cc3ade11e26624d4268b7e0bbc487c3dbaae4c044323279a692055dd365def675d6aab39432adf3163e0f230fce26d5b03f70ff9e5da7b19bdeaff3a2bc0e159c118a9f2c4b6d32e1d26a689c54f24e01ab28b6970d60fa4937976e543d5fd732f99bdf245c77479fd0139c61f0ea65a4", @ANYRES16=r7, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000003200)={0x110c, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x10fb, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @generic="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"]}]}, 0x110c}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r6) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002900)=r10, 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002900)=r10, 0x4) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b000100627269646765000018000280090014"], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b000100627269646765000018000280090014"], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001e80)={r4, 0x7, 0x9, 0x1f9, 0x6, 0x1}, &(0x7f0000001ec0)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002240)={r3, 0x74, &(0x7f00000021c0)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x103a}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e22, 0x8001, @empty, 0xff51}, @in6={0xa, 0x4e21, 0x2, @empty, 0xa}]}, &(0x7f0000002280)=0x10) sendmmsg$inet_sctp(r12, &(0x7f00000024c0)=[{&(0x7f00000004c0)=@in6={0xa, 0x4e24, 0x800, @empty, 0x18}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="87e9969e4d3a850d0f10be511ca6c3cc949df39bbd0fed305ef24c7a98c84bdaca0050107cd970b7ac6bb22b77ffa538f798eb86bc9d5c5ae4134f8ed8beea11b854c25f36bed8683ee15116956366f917b4643ab9327ca4779033e2bf5f9b439fb11384417f9751e14d7e1d84ca23893ecc", 0x72}, {&(0x7f00000003c0)="f2ecb1ef98b6cb19df350f359d0305cb844878c723e77d2d1f7ac28da2eac5e2dd71", 0x22}], 0x2, &(0x7f0000002940)=ANY=[@ANYBLOB="18000000000000008400000006000000030000000000000018000000000000008400000006000000090000000000000020000000000000008400000002000000060000000700000009000000", @ANYRES32=r4, @ANYBLOB="180000000000000084000000000000007e000c000800090018200000000000008400000007000000ac141433c6c4d700910a000000000000840000000500009a6c5fa92ddd741500100000000000000018000000000000008400000007000000ac1414bb00000000", @ANYRES32=r11, @ANYRES8=r5, @ANYRESHEX=r2], 0xb0, 0x4800}, {&(0x7f0000000500)=@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff0000}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000540)="6c660511d779e7dbdf7cd96d08a1f818582190280a49a4e7f94679a7adddd47fa82af5cde3f31be5edae23127578e11a0c89e5fb146aad8b26b8aad06c7b76387fef55e4a209c51b72b31286abbeaa7f31822d76666773da723df1954a74043cfe166a77d6c58125120f4c98a1e015235cacfab506f4afd708badfe879fd49af", 0x80}, {&(0x7f00000005c0)="e09193944821c6b444a7dc4161a30f0eb64f7d9b50826aa52c595d65585e48cd039dc2368409d3e8ec78ab8f9661a30534e74f71f4965ef1c20e9f62aa40f3391f14e747f978bcd607369a31e08ca0357153ebaf4591fdc04b3ffebf99509b7e2577961d2bdb4515e8fc4ed12fda739e026c106b5658d279f49fc94f69dfcce2efffc8f0abe700", 0x87}, {&(0x7f0000000680)="0edf9e4d5f57fb8dc1259a40d2", 0xd}], 0x3, &(0x7f0000000700)=[@authinfo={0x18, 0x84, 0x6, {0x101}}, @sndrcv={0x30, 0x84, 0x1, {0xf10d, 0x3, 0x20c, 0x7, 0x7a2, 0x0, 0x5, 0x1, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}, @init={0x18, 0x84, 0x0, {0x6, 0x9, 0x7bd, 0x800}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}], 0xd8, 0x40840}, {&(0x7f0000000800)=@in6={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000840)="02ea5b8835c6f820993e0aaa6277d0", 0xf}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000280)="7b31be4960a88793de40fadbb9178c074fb34dec6daacc7acae15ad031ee9d181b9f21", 0x23}, {&(0x7f00000022c0)="65da6d67fe39fd895c8922f33f1a6cc00288aa9aaeca015f42d6393812002a5be2a32b0d7a2bce805a7a99f91d8033e6e0aba381b6c264fea6b4a2d50379b554049ad68a9b40093abb8379d6b596056dccb8ab2f6aef12961a9eb8854c56648edc419218249830a164814e69ca7b0f29f03127fa92c5603f5efcec96b38f0d44b5158633f8552d2040f7f40b90078c6226c8adcad66a4016", 0x98}], 0x4, 0x0, 0x0, 0xc804}, {&(0x7f00000019c0)=@in6={0xa, 0x4e20, 0x6, @private2, 0x7}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000001a00)="73f36e2f71c8756e6a4b4e94d74a8c086cb32735cb3f0c3e94a70425c5284533c36018173b19c9dec4bb382da216d1af2d6681995958fe6b7f34c063f255fe073a39c3c1921c6d0477134a1d974e2fecdaaadc7bb982bc5355df4a648bffd692d811ca1c80b67fae435cff4d971692", 0x6f}, {&(0x7f0000001a80)="fc50a3505d23f667a78ce09538241e7f65a6490dc2e5f107e7ed4584de50f201039108d9b3c5d1c12c018a8743e872a1e80827170719db3cdf9be2b16317711b5f4b8988d1fbd52a6c1f6a1e183d9c2c3e5033f0a16dc224fcd037ac3c0da3451bcbafbe17d56dcc2b4c5414e69faf93d01309210d2f6caf83d0c347dcf839c2d2a4053fed426c36792618671c4a1ad667fb09e8618b8894f8ce80ea5bd70f04c1a993dd34cfebc88e02bc0c31241920fd8ee91f9ebba50df9b616a32659095a6819efee277bacfe5658deb1617f49e5f1addb7a144519a7d4c9e9e0104eb907be6b3f5a5b9c48220b7085d3935c49004093252e3c5324", 0xf7}, {&(0x7f0000001b80)="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", 0xfc}, {&(0x7f0000001c80)="e2ba12dcff0f71350cd3326dd1fa29c795258448e6b2dcad96448ee60d19286cdacf36d44b47393f3dc2f9db4a5cc5b42b2e7985e88d8601ecb5adb36044970cd832a68ee8ab20acd5f30e5eb63eaae4172d375e358eeaa222c8e2b9fe8f26a3ffc3ae4184f40cdf3fe38f8d2bdd2418cc665636f13a7846f002661d7b7ede4ba98ae84322b7e7eae3faec41488431d846c5265725400d05114da9ff3edc272d2b65d53f3a45c24fc76ba0f2463fa91e66f87eb4ff351f", 0xb7}, {&(0x7f0000001d40)="e12cbf0bbb5121d32bce8595fd6abc0c228f13adc50e88e3fe4e012fa0f2443096dfed33244e515cda0591b321741f7142d9d74610039540092d4be2e6c255734fca56f8d5f0820f52cb5f8803d0ca0d6885b48e769974eeec37f5200c001f2c72ed12def3", 0x65}, {&(0x7f0000001dc0)="4bde51401bf59c846b0a920c6f804b8c30b61d3039e61bb7d63ff5f2308e9d0b3ec73ef04cf141471049fb834f0792acc603d8e9ebb4d2032f", 0x39}], 0x6, &(0x7f0000001f00)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x8, 0x1, 0x6, 0x8, 0xfffffffb, 0x4d7a35f5, 0x0, r13}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x8, 0x889}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x1200, 0x200, 0xa8ac, 0x5, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x120, 0x44000}, {&(0x7f0000002040)=@in6={0xa, 0x4e20, 0xec2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xa}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000002080)="5a863a1c17f45585925bc20965277c25f710d631923b31c2a588c612491ff8880470005cac20a4cba874373cfe797f59f5101f59d0a9a1af3ff72dd7326a1638d48af8145730412c0ccffe38803382c633524bdb027899f668d98194a700a84b494c128a4bac288b71725831634d05e94cd5066c4d384398f7a915c75ca8213710bfcbf294ecf9e293aebc7340e6cb1728ef6cd703681a4a4457269899c85418907bcb6ac5c3b0c8174fbcde81032b223e2ad2124eaba73e96b9604b2ae3b86fe3082897c0f4a8e2e7c0a3472e36e0c1e340304344", 0xd5}], 0x1, &(0x7f00000027c0)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @sndrcv={0x30, 0x84, 0x1, {0x4f2, 0x5, 0x201, 0x4000000, 0x33, 0xc, 0x7f, 0x5, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8000, 0x8, 0x9, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8002, 0x5, 0x5, r13}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x3b}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0xcaa, 0x200, 0x0, 0x5, r3}}], 0x138, 0x4040}, {&(0x7f0000002400)=@in6={0xa, 0x4e23, 0x6a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xeea}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000002440)="efe6ba577a0cbae05d12763cd79b3a26edddd260", 0x14}], 0x1, 0x0, 0x0, 0x4000000}], 0x6, 0x20000040) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000440), &(0x7f0000000480)=0xc) getsockname(r5, 0x0, &(0x7f00000000c0)) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) (async) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x10, 0x30, 0x605}, 0x10}], 0x1}, 0x0) 1.05109931s ago: executing program 3 (id=2253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000740)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="3730000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) ioctl$FITHAW(r0, 0xc0045878) 1.035311492s ago: executing program 0 (id=2254): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0xfff9) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000000000000000000a"], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f00000002c0), 0x0}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x200000c0, 0xfffffffa, 0x101, 0xb}, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x9, 0x0, {{0x25, 0x4, 0x1, 0x3, 0x94, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x44, 0xfa, 0x1, 0x7, [{@rand_addr=0x64010100, 0x1a4}, {@remote, 0x8}, {@empty, 0x6}, {@empty, 0x7d}, {@loopback, 0x101}, {@loopback, 0xba}, {@private=0xa010101}, {@rand_addr=0x64010102, 0x101}]}, @timestamp_addr={0x44, 0x3c, 0x71, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x3}, {@local, 0x8}, {@remote, 0x7}, {@remote, 0xffffffff}, {@broadcast, 0xc}, {@local, 0x8000}, {@broadcast, 0x2d4}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000340)={@mcast2, 0x5c, r10}) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000040), 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xe8, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x779cd6150289307d}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010029bd7000007db21cf20020000000000000200000080002007f000001"], 0x24}}, 0x0) 1.0045043s ago: executing program 2 (id=2255): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x124, 0x54, 0x1, 0x0, 0x0, {0x7}, [@typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x105, 0x68, 0x0, 0x0, @binary="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"}]}, 0x124}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x138, 0x21, 0x1, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0xe8, 0x11, [{@in=@empty, @in=@broadcast, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, @in6=@remote, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x1a}}, {@in=@empty, @in=@broadcast, @in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x3507, 0x0, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 999.884984ms ago: executing program 3 (id=2256): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000ee0c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) (async) close(r0) socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x1) (async) listen(r3, 0x1) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x20040040) recvmmsg(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/197, 0xc5}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4074, 0xfea}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001014010000000000000000000800", @ANYRES32=r7], 0x30}}, 0x94) sendmmsg(r4, 0x0, 0x0, 0x4000010) 866.845969ms ago: executing program 2 (id=2257): syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa0100000035f200182c00fe8000000000000000000000000000bbfe800000bf35ce68e77462de68eb210000000000", @ANYRES8, @ANYRES32=0x41424344, @ANYBLOB="5010ffff907800006ae0228d"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008b100000000000000000000000000000d810cc71debeeb84d5b494a04606c60fde9430a3b8093ce7ffd3a98f8c5d6ad1481cad0f633f2c741a04d7b6bd8d9bcb760a1f760bcf8ff32ef8eced96588ba17ff1d87ec007248455e6464cd8ead6eb8169352661cf8f338fa60e9d6f1f3526fba179d1e579a7393723e0ef6b09d813dca2065624b54aa10636c78a54b79e580c13cc958b52f5145712", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000", @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x50) listen(r0, 0x3) write$tun(r3, &(0x7f0000000780)={@val={0x0, 0x8847}, @void, @ipv4=@igmp={{0x8, 0x4, 0x3, 0x9, 0xa4, 0x67, 0x0, 0x0, 0x2, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x0, 0x8, "8fa697b9ab1f"}, @ra={0x94, 0x4, 0x1}]}}, {0x15, 0xf7, 0x0, @multicast1, "592697f95b4ec56a90c09bcc4636f84c8b5ba10b8bb0e4bf9d8098cafb158d18fbd8a8ad59b13a8b727860fd1e6cae81740b34b0f41764ddafd810532adb79eb12e88e1a42a15cbb60ea58fe1218030ae85d13add168c0a8f80129a205738ff49656570bebbadbb591f9fdf1038633c960d9c57ddbc587db25122d5c"}}}, 0xa8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070000000500000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00ee7b0800e900", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000e400000035337b5f4febdd2ccff38c603ef30fee6e891187a50bb57e95ef76c7789318a7a9532cf5dc4d0d63d8155a9e7467289a7d7b64178c451cda62c56b13ee6badb8db2436fb09289f5cd63ed15398fcab97c4e4475cfc2f037d8e0000478a65290b2cee303c014f3e3c159a77dee3c8411bed02ec1522dd47c0010a0407e2b2a2650f25c863e58ac1c0d138b1c77dd7587bc744b0252af941f2e458cdf23aec04dcc8a64ad45ef1df60cd431142ad211dcdf667fa893282edaa6ee2d3a2fe03cdfea855a236388a2a41823532b10d101f49c1cdcd465905c0b786ed5b3979dcb27a6ea2e8e82fd99b39"], &(0x7f0000000140)=0x108) 865.350483ms ago: executing program 4 (id=2258): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x30, 0x61]}}, &(0x7f0000000e00)=""/4096, 0x1d, 0x1000, 0x1, 0x1, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x5, 0x8, 0x8, 0x0, r0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x3c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x49}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x0, 0xb, 0x2, 0xffffffffffffffe0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcf0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x1a2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000800000000003f14000200fe80000000000000000000000000000f08000100", @ANYBLOB='#'], 0x64}}, 0x24000000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000540)={&(0x7f00000003c0)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x0, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN, @CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0xffff8001}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0x7}]}, @CTA_MARK={0x0, 0x8, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xbf49, 0x0, 0x17, 0x0, &(0x7f0000000040)="cab32af5c57d4d6e180c22e908ac87ef648c7a0c08fcf4"}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) close(0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x4}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11, 0x1}, 0xc) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100039040200"/20, @ANYRES32=r4, @ANYBLOB="40100000004104002c00128008000100677265002000028008000700ac1414aa060003008100000008000100", @ANYRES32=r4, @ANYBLOB="040c1200080004"], 0x54}}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000014000480b7060000ffffff908500000005000000bf0900000000000035090100000000009500000000000000bf9100000000000056070000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 803.452246ms ago: executing program 3 (id=2259): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc090000000000004509010000200000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000070100005eeaffffb702000008000000b7030000dc0000008500000006000000b7080000000000007b8af8ff00000000b7080000392200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b2000000bf9800000000000056090000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 667.598567ms ago: executing program 3 (id=2260): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000004140)=[{0x0}, {&(0x7f0000003ec0)=""/128, 0x80}], 0x2}, 0x7ffc}], 0x1, 0x12, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@private, @local, 0x0}, &(0x7f0000000380)=0xc) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="692ec6b11a2443c10fb752", 0xb}], 0x1, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xa1, [@loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1f, 0x67, [@empty, @remote, @empty, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0xff, @private=0xa010100}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x2e, 0x0, 0x8, [0x8]}, @lsrr={0x83, 0x1b, 0x2e, [@multicast2, @private=0xa010102, @empty, @multicast1, @multicast1, @multicast1]}, @timestamp={0x44, 0x14, 0x39, 0x0, 0x3, [0xf1, 0x8000, 0x44, 0x76]}, @ssrr={0x89, 0x1b, 0x7e, [@broadcast, @multicast1, @rand_addr=0x64010101, @loopback, @local, @multicast2]}, @rr={0x7, 0xb, 0xf1, [@loopback, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], 0x138}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002f0009002abd700000000000040000000901040000f9e05e2f000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 536.833777ms ago: executing program 2 (id=2261): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000b00)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 38.552744ms ago: executing program 1 (id=2262): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x148, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1ed7}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xcb}, {0xc, 0x90, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x50c}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x5}}]}, 0x148}, 0x1, 0x0, 0x0, 0x48040}, 0x8004000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0100040008feff"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="7b1a040000000000850000000500000079a1f8ff0000000095", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="307f87692e79d6086a5d8012fffccacabaa4e790ec1ad91628d65c3ff285cc520f5149c811960aaaeb01ba2aad6cb631bcc5282056cf65751af0d0853faf72fed84253b58fbb4dff20d240eb044f8e570ed3715ffed1b0b8cf46a58b34e896e1c9fb0aead2c1744bd8c6351881b07175aade8368fc2a838230c1764000631b529346ba565ee8cd89d1096749e32944d7b41ea76c5a6f18cee84a35fc6d88a903f1b9c070854f12f98b53f0910669e0a987466dd6", @ANYRES8=r0, @ANYBLOB="7edb28882e243d7a715e3c3f0d310c8f5d1d9ff5a364484b73c7a2ed32c58196680ed80a9396850ae5d36c873adf7e3968d3b69c0be61969d3567cfdbaeee13b5b27f1708bf950f7ed433f52420e583ca81f231cf8ac45f8e3b190aa9625741f4e1b09b16626136f4557cf623f2bdbca36801f6258f96662ccca595d42d46edb98426b1ab60ea8c4f39014782615288bc2c294dc0d3ccb75f8ff54e7080efc2b7365a88c724ef08fbb96b2e45b81a66e176f05a42e8b77f7d1d8ca5af8c5afa5", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.579516ms ago: executing program 4 (id=2263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x8d, &(0x7f0000000240)=""/141}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) (async) unshare(0x20000) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r2, 0x0) (async) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r2, 0x0) 12.004402ms ago: executing program 2 (id=2264): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r1, 0x80000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="83df0100ef000000240012800b0001006d616373656300001400028005000c000000000005000b000000000008000500", @ANYRES32=r2, @ANYRESOCT=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2004d80c}, 0x8094) 7.723084ms ago: executing program 2 (id=2265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001001fdc0000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001007461726765740000140002800800024000000002080001004c4544000900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x5, 0x7, 0xfff, 0xa8e9, 0x5, 0x10001}, [@TCA_NETEM_DELAY_DIST={0x9, 0x2, "2868fb8289"}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fff, 0x3d4c6121, 0x3, 0xff, 0x4}}]}]}}}]}, 0x74}}, 0x20040084) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_newneigh={0x38, 0x1c, 0x8, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x1, 0xa0}, [@NDA_CACHEINFO={0x14, 0x3, {0x9, 0x80000000, 0x7, 0x7}}, @NDA_PROTOCOL={0x5, 0xc, 0x2}]}, 0x38}}, 0x40000) 6.986851ms ago: executing program 4 (id=2266): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0xfffffffffffffffd, 0x400000000}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0xfffffffffffffffd, 0x400000000}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0xfffffffe, 0xc00}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) (async) 0s ago: executing program 2 (id=2267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x4, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x9, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0xc, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x40008, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x3, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.1.591'. [ 163.342720][ T8355] netlink: 96 bytes leftover after parsing attributes in process `syz.1.591'. [ 163.342747][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 163.342761][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 163.478121][ T8355] netlink: 133 bytes leftover after parsing attributes in process `syz.1.591'. [ 163.478171][ T8355] netlink: 96 bytes leftover after parsing attributes in process `syz.1.591'. [ 163.478200][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 163.478211][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 163.526455][ T8369] xt_hashlimit: max too large, truncated to 1048576 [ 163.559420][ T8355] netlink: 133 bytes leftover after parsing attributes in process `syz.1.591'. [ 163.674541][ T8361] dummy0: left promiscuous mode [ 163.758856][ T8361] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 163.922170][ T8386] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 164.162414][ T8397] xt_policy: output policy not valid in PREROUTING and INPUT [ 164.569661][ T8413] netlink: NAT attribute has 4 unknown bytes [ 164.569716][ T8413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.934424][ T8430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.342549][ T8447] syzkaller0: entered promiscuous mode [ 165.342595][ T8447] syzkaller0: entered allmulticast mode [ 165.346724][ T8447] netlink: 'syz.4.622': attribute type 10 has an invalid length. [ 165.498730][ T8453] netlink: 'syz.2.624': attribute type 4 has an invalid length. [ 165.589954][ T5749] lo speed is unknown, defaulting to 1000 [ 165.590030][ T5749] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 165.722567][ T8457] pim6reg1: entered promiscuous mode [ 165.728796][ T8457] pim6reg1: entered allmulticast mode [ 165.836438][ T8472] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 165.878779][ T8436] syz.1.618 (8436) used greatest stack depth: 18088 bytes left [ 165.909284][ T8473] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 166.137550][ T8462] macvlan3: entered promiscuous mode [ 166.143329][ T8462] macvlan3: entered allmulticast mode [ 166.149903][ T8462] bond3: entered promiscuous mode [ 166.156533][ T8462] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 166.166722][ T8462] bond3: left promiscuous mode [ 166.611757][ T8496] ip6erspan0: entered allmulticast mode [ 166.660806][ T8500] x_tables: duplicate underflow at hook 3 [ 166.681897][ T8506] x_tables: duplicate underflow at hook 3 [ 166.774265][ T8517] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 166.815921][ T8507] lo speed is unknown, defaulting to 1000 [ 166.959636][ T8517] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 166.959790][ T8517] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 166.959908][ T8517] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 166.960125][ T8517] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 166.960253][ T8517] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 167.024647][ T8525] openvswitch: netlink: Flow actions attr not present in new flow. [ 167.226739][ T8531] bond3: entered promiscuous mode [ 167.227212][ T8531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.945658][ T8574] Bluetooth: MGMT ver 1.23 [ 167.959984][ T8578] validate_nla: 28 callbacks suppressed [ 167.961003][ T8578] netlink: 'syz.1.654': attribute type 49 has an invalid length. [ 168.082837][ T8562] macsec2: entered promiscuous mode [ 168.099593][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805515b800: rx timeout, send abort [ 168.599653][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805515b800: abort rx timeout. Force session deactivation [ 168.602473][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805515ac00: rx timeout, send abort [ 168.883932][ T8610] syzkaller0: entered promiscuous mode [ 168.883970][ T8610] syzkaller0: entered allmulticast mode [ 169.103229][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805515ac00: abort rx timeout. Force session deactivation [ 170.034323][ T8660] __nla_validate_parse: 240 callbacks suppressed [ 170.041307][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 170.155371][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 170.162872][ T8663] netlink: 104 bytes leftover after parsing attributes in process `syz.1.681'. [ 170.173549][ T8663] tipc: Started in network mode [ 170.173579][ T8663] tipc: Node identity 5300000000000000005f000000000001, cluster identity 4711 [ 170.173627][ T8663] tipc: Enabling of bearer rejected, failed to enable media [ 170.220017][ T8666] bond2: Invalid ad_actor_system MAC address. [ 170.226407][ T8666] bond2: option ad_actor_system: invalid value (7) [ 170.237375][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b9e7000: rx timeout, send abort [ 170.245873][ T8666] bond2 (unregistering): Released all slaves [ 170.322881][ T8670] TCP: TCP_TX_DELAY enabled [ 170.737435][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b9e7000: abort rx timeout. Force session deactivation [ 170.738925][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b9e6800: rx timeout, send abort [ 171.119403][ T8705] netlink: 83 bytes leftover after parsing attributes in process `syz.1.697'. [ 171.135525][ T8703] netlink: 'syz.4.696': attribute type 4 has an invalid length. [ 171.156896][ T8702] lo speed is unknown, defaulting to 1000 [ 171.223056][ T8708] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 171.230556][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.238990][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b9e6800: abort rx timeout. Force session deactivation [ 171.345386][ T8708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.546490][ T8720] FAULT_INJECTION: forcing a failure. [ 171.546490][ T8720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.562636][ T8720] CPU: 1 UID: 0 PID: 8720 Comm: syz.2.702 Not tainted syzkaller #0 PREEMPT(full) [ 171.562661][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.562670][ T8720] Call Trace: [ 171.562677][ T8720] [ 171.562682][ T8720] dump_stack_lvl+0xe8/0x150 [ 171.562713][ T8720] should_fail_ex+0x410/0x560 [ 171.562754][ T8720] _copy_from_user+0x2d/0xb0 [ 171.562766][ T8720] ___sys_sendmsg+0x1c6/0x360 [ 171.562777][ T8720] ? __lock_acquire+0x6df/0x2e50 [ 171.562789][ T8720] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.562816][ T8720] ? __fget_files+0x2a/0x420 [ 171.562829][ T8720] ? __fget_files+0x3a2/0x420 [ 171.562846][ T8720] __x64_sys_sendmsg+0x1b1/0x290 [ 171.562858][ T8720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.562878][ T8720] do_syscall_64+0x166/0x520 [ 171.562892][ T8720] ? trace_irq_disable+0x3b/0x140 [ 171.562902][ T8720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.562912][ T8720] ? clear_bhb_loop+0x70/0xc0 [ 171.562923][ T8720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.562933][ T8720] RIP: 0033:0x7f08e6b9e159 [ 171.562947][ T8720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.562955][ T8720] RSP: 002b:00007f08e79e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.562969][ T8720] RAX: ffffffffffffffda RBX: 00007f08e6e25fa0 RCX: 00007f08e6b9e159 [ 171.562976][ T8720] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 171.562983][ T8720] RBP: 00007f08e79e3090 R08: 0000000000000000 R09: 0000000000000000 [ 171.562989][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.562994][ T8720] R13: 00007f08e6e26038 R14: 00007f08e6e25fa0 R15: 00007ffef41a1938 [ 171.563009][ T8720] [ 171.845976][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 171.911447][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 173.069119][ T8771] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.713'. [ 173.106337][ T8767] tipc: Enabled bearer , priority 0 [ 173.171160][ T8767] syzkaller0: entered promiscuous mode [ 173.176750][ T8767] syzkaller0: entered allmulticast mode [ 173.183341][ T8767] tipc: Resetting bearer [ 173.206911][ T8756] tipc: Resetting bearer [ 173.357377][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.713'. [ 175.429930][ T8756] tipc: Disabling bearer [ 175.443050][ T8778] ovs-s!: entered promiscuous mode [ 175.457452][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 175.854919][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 175.855689][ T8832] ip_tables: iptables: counters copy to user failed while replacing table [ 176.111604][ T8852] IPv6: Can't replace route, no match found [ 176.348792][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.732'. [ 177.047229][ T8877] pimreg1: renamed from bridge0 (while UP) [ 177.067562][ T8877] pimreg1: entered allmulticast mode [ 177.069381][ T8877] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 177.256375][ T8891] lo speed is unknown, defaulting to 1000 [ 179.113990][ T8852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.266250][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'. [ 179.296159][ T8920] netlink: 224 bytes leftover after parsing attributes in process `syz.3.744'. [ 179.370449][ T8924] netlink: NAT attribute has 4 unknown bytes [ 179.370801][ T8924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.536833][ T8939] netlink: 'syz.3.747': attribute type 2 has an invalid length. [ 179.603690][ T8924] syzkaller0: entered promiscuous mode [ 179.603735][ T8924] syzkaller0: entered allmulticast mode [ 179.625008][ T8924] netlink: 'syz.0.743': attribute type 12 has an invalid length. [ 179.625058][ T8924] netlink: 248 bytes leftover after parsing attributes in process `syz.0.743'. [ 179.637564][ T8924] netlink: 'syz.0.743': attribute type 12 has an invalid length. [ 179.637587][ T8924] netlink: 248 bytes leftover after parsing attributes in process `syz.0.743'. [ 179.856497][ T8954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'. [ 179.887491][ T8958] FAULT_INJECTION: forcing a failure. [ 179.887491][ T8958] name failslab, interval 1, probability 0, space 0, times 0 [ 179.887545][ T8958] CPU: 1 UID: 0 PID: 8958 Comm: syz.3.753 Not tainted syzkaller #0 PREEMPT(full) [ 179.887564][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.887572][ T8958] Call Trace: [ 179.887578][ T8958] [ 179.887584][ T8958] dump_stack_lvl+0xe8/0x150 [ 179.887609][ T8958] should_fail_ex+0x410/0x560 [ 179.887638][ T8958] should_failslab+0xa8/0x100 [ 179.887659][ T8958] ? skb_clone+0x212/0x3a0 [ 179.887679][ T8958] kmem_cache_alloc_noprof+0xa1/0x600 [ 179.887704][ T8958] ? skb_clone+0x212/0x3a0 [ 179.887727][ T8958] skb_clone+0x212/0x3a0 [ 179.887750][ T8958] __netlink_deliver_tap+0x413/0x860 [ 179.887782][ T8958] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.887805][ T8958] netlink_deliver_tap+0x19c/0x1b0 [ 179.887829][ T8958] netlink_unicast+0x781/0x940 [ 179.887859][ T8958] netlink_sendmsg+0x813/0xb40 [ 179.887889][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.887917][ T8958] ? apparmor_socket_sendmsg+0x98/0x360 [ 179.887946][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.887965][ T8958] sock_sendmsg_nosec+0x13a/0x180 [ 179.887991][ T8958] ____sys_sendmsg+0x54e/0x850 [ 179.888014][ T8958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.888041][ T8958] ? import_iovec+0x73/0xa0 [ 179.888064][ T8958] ___sys_sendmsg+0x2a5/0x360 [ 179.888081][ T8958] ? __lock_acquire+0x6df/0x2e50 [ 179.888103][ T8958] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.888154][ T8958] ? __fget_files+0x2a/0x420 [ 179.888176][ T8958] ? __fget_files+0x3a2/0x420 [ 179.888214][ T8958] __x64_sys_sendmsg+0x1b1/0x290 [ 179.888235][ T8958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.888275][ T8958] do_syscall_64+0x166/0x520 [ 179.888299][ T8958] ? trace_irq_disable+0x3b/0x140 [ 179.888316][ T8958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.888333][ T8958] ? clear_bhb_loop+0x70/0xc0 [ 179.888354][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.888372][ T8958] RIP: 0033:0x7f7a6b79e159 [ 179.888388][ T8958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.888402][ T8958] RSP: 002b:00007f7a6c70b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.888420][ T8958] RAX: ffffffffffffffda RBX: 00007f7a6ba26090 RCX: 00007f7a6b79e159 [ 179.888433][ T8958] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 179.888444][ T8958] RBP: 00007f7a6c70b090 R08: 0000000000000000 R09: 0000000000000000 [ 179.888454][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.888464][ T8958] R13: 00007f7a6ba26128 R14: 00007f7a6ba26090 R15: 00007ffc5357bd18 [ 179.888493][ T8958] [ 180.252881][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 180.334286][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 180.384345][ T8973] 8021q: VLANs not supported on sit0 [ 180.453881][ T8975] ipvlan2: entered allmulticast mode [ 180.459294][ T8975] macvlan1: entered allmulticast mode [ 180.466943][ T8975] veth1_vlan: entered allmulticast mode [ 180.475733][ T8975] batman_adv: batadv0: Adding interface: ipvlan2 [ 180.482360][ T8975] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.504631][ T8975] batman_adv: batadv0: Interface activated: ipvlan2 [ 180.585189][ T8975] ipvlan3: entered allmulticast mode [ 180.607739][ T8975] batman_adv: batadv0: Adding interface: ipvlan3 [ 180.607788][ T8975] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.607828][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 180.607842][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.607852][ T8975] batman_adv: batadv0: Interface activated: ipvlan3 [ 180.727369][ T8984] bridge0: port 3(erspan0) entered blocking state [ 180.727671][ T8984] bridge0: port 3(erspan0) entered disabled state [ 180.727930][ T8984] erspan0: entered allmulticast mode [ 180.737701][ T8984] erspan0: entered promiscuous mode [ 180.739982][ T8984] bridge0: port 3(erspan0) entered blocking state [ 180.741330][ T8984] bridge0: port 3(erspan0) entered forwarding state [ 180.982703][ T8995] ip6gretap0: entered promiscuous mode [ 180.988399][ T8995] macsec1: entered allmulticast mode [ 180.988418][ T8995] ip6gretap0: entered allmulticast mode [ 181.002856][ T8995] ip6gretap0: left allmulticast mode [ 181.002895][ T8995] ip6gretap0: left promiscuous mode [ 181.027655][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 181.036562][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.766'. [ 181.046988][ T9001] nbd: must specify at least one socket [ 181.056341][ T9003] netlink: 76 bytes leftover after parsing attributes in process `syz.3.766'. [ 181.056454][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.766'. [ 181.091380][ T9001] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 181.099371][ T9001] netlink: 55 bytes leftover after parsing attributes in process `syz.2.769'. [ 181.179758][ T9001] bond1: (slave macvlan1): Releasing backup interface [ 181.416477][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 181.416532][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.773'. [ 181.469620][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 181.469705][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.773'. [ 181.835817][ T9031] FAULT_INJECTION: forcing a failure. [ 181.835817][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 181.837540][ T9031] CPU: 1 UID: 0 PID: 9031 Comm: syz.1.776 Not tainted syzkaller #0 PREEMPT(full) [ 181.837564][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.837578][ T9031] Call Trace: [ 181.837585][ T9031] [ 181.837593][ T9031] dump_stack_lvl+0xe8/0x150 [ 181.837631][ T9031] should_fail_ex+0x410/0x560 [ 181.837661][ T9031] should_failslab+0xa8/0x100 [ 181.837681][ T9031] ? skb_clone+0x212/0x3a0 [ 181.837701][ T9031] kmem_cache_alloc_noprof+0xa1/0x600 [ 181.837729][ T9031] ? skb_clone+0x212/0x3a0 [ 181.837753][ T9031] skb_clone+0x212/0x3a0 [ 181.837775][ T9031] __netlink_deliver_tap+0x413/0x860 [ 181.837815][ T9031] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.837839][ T9031] netlink_deliver_tap+0x19c/0x1b0 [ 181.837862][ T9031] netlink_unicast+0x781/0x940 [ 181.837893][ T9031] netlink_sendmsg+0x813/0xb40 [ 181.837913][ T9031] ? lockdep_hardirqs_on+0x7b/0x110 [ 181.837948][ T9031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.837979][ T9031] ? apparmor_socket_sendmsg+0x98/0x360 [ 181.838007][ T9031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.838027][ T9031] sock_sendmsg_nosec+0x13a/0x180 [ 181.838053][ T9031] ____sys_sendmsg+0x54e/0x850 [ 181.838084][ T9031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.838112][ T9031] ? import_iovec+0x73/0xa0 [ 181.838134][ T9031] ___sys_sendmsg+0x2a5/0x360 [ 181.838151][ T9031] ? __lock_acquire+0x6df/0x2e50 [ 181.838171][ T9031] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.838220][ T9031] ? __fget_files+0x2a/0x420 [ 181.838240][ T9031] ? __fget_files+0x3a2/0x420 [ 181.838270][ T9031] __x64_sys_sendmsg+0x1b1/0x290 [ 181.838291][ T9031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.838327][ T9031] do_syscall_64+0x166/0x520 [ 181.838352][ T9031] ? trace_irq_disable+0x3b/0x140 [ 181.838369][ T9031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.838386][ T9031] ? clear_bhb_loop+0x70/0xc0 [ 181.838407][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.838424][ T9031] RIP: 0033:0x7f02c9f9e159 [ 181.838441][ T9031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.838455][ T9031] RSP: 002b:00007f02c81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.838473][ T9031] RAX: ffffffffffffffda RBX: 00007f02ca225fa0 RCX: 00007f02c9f9e159 [ 181.838486][ T9031] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 181.838497][ T9031] RBP: 00007f02c81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 181.838513][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.838523][ T9031] R13: 00007f02ca226038 R14: 00007f02ca225fa0 R15: 00007fffe1c54c68 [ 181.838551][ T9031] [ 182.154911][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 182.938068][ T9075] FAULT_INJECTION: forcing a failure. [ 182.938068][ T9075] name failslab, interval 1, probability 0, space 0, times 0 [ 182.938118][ T9075] CPU: 0 UID: 0 PID: 9075 Comm: syz.4.791 Not tainted syzkaller #0 PREEMPT(full) [ 182.938139][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.938150][ T9075] Call Trace: [ 182.938157][ T9075] [ 182.938165][ T9075] dump_stack_lvl+0xe8/0x150 [ 182.938194][ T9075] should_fail_ex+0x410/0x560 [ 182.938228][ T9075] should_failslab+0xa8/0x100 [ 182.938251][ T9075] __kmalloc_noprof+0xfe/0x720 [ 182.938277][ T9075] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 182.938303][ T9075] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 182.938335][ T9075] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 182.938366][ T9075] genl_family_rcv_msg_doit+0xda/0x340 [ 182.938398][ T9075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 182.938432][ T9075] ? apparmor_capable+0x126/0x170 [ 182.938457][ T9075] ? bpf_lsm_capable+0x9/0x20 [ 182.938488][ T9075] ? security_capable+0x7e/0x2c0 [ 182.938513][ T9075] genl_rcv_msg+0x614/0x7a0 [ 182.938543][ T9075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.938566][ T9075] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 182.938591][ T9075] ? __pfx_ref_tracker_free+0x10/0x10 [ 182.938607][ T9075] ? __asan_memcpy+0x40/0x70 [ 182.938629][ T9075] ? __skb_clone+0x5c/0x6c0 [ 182.938653][ T9075] netlink_rcv_skb+0x226/0x4a0 [ 182.938673][ T9075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.938699][ T9075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.938733][ T9075] ? down_read+0x2be/0x330 [ 182.938753][ T9075] genl_rcv+0x28/0x40 [ 182.938776][ T9075] netlink_unicast+0x7bd/0x940 [ 182.938809][ T9075] netlink_sendmsg+0x813/0xb40 [ 182.938839][ T9075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.938868][ T9075] ? apparmor_socket_sendmsg+0x98/0x360 [ 182.938897][ T9075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.938918][ T9075] sock_sendmsg_nosec+0x13a/0x180 [ 182.938946][ T9075] ____sys_sendmsg+0x54e/0x850 [ 182.938972][ T9075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.939000][ T9075] ? import_iovec+0x73/0xa0 [ 182.939025][ T9075] ___sys_sendmsg+0x2a5/0x360 [ 182.939043][ T9075] ? __lock_acquire+0x6df/0x2e50 [ 182.939067][ T9075] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.939121][ T9075] ? __fget_files+0x2a/0x420 [ 182.939145][ T9075] ? __fget_files+0x3a2/0x420 [ 182.939196][ T9075] __x64_sys_sendmsg+0x1b1/0x290 [ 182.939218][ T9075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.939260][ T9075] do_syscall_64+0x166/0x520 [ 182.939284][ T9075] ? trace_irq_disable+0x3b/0x140 [ 182.939301][ T9075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.939319][ T9075] ? clear_bhb_loop+0x70/0xc0 [ 182.939342][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.939359][ T9075] RIP: 0033:0x7fa48d59e159 [ 182.939376][ T9075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.939391][ T9075] RSP: 002b:00007fa48e3dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.939410][ T9075] RAX: ffffffffffffffda RBX: 00007fa48d825fa0 RCX: 00007fa48d59e159 [ 182.939422][ T9075] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 182.939432][ T9075] RBP: 00007fa48e3dd090 R08: 0000000000000000 R09: 0000000000000000 [ 182.939443][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.939453][ T9075] R13: 00007fa48d826038 R14: 00007fa48d825fa0 R15: 00007ffdb7f362a8 [ 182.939490][ T9075] [ 183.466901][ T9088] syzkaller0: entered promiscuous mode [ 183.472801][ T9088] syzkaller0: entered allmulticast mode [ 183.564809][ T9108] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 183.572963][ T9108] netlink: 'syz.3.797': attribute type 2 has an invalid length. [ 185.616826][ T9129] bond1: (slave bond_slave_1): Device is not our slave [ 185.624215][ T9129] bond1: option active_slave: invalid value (bond_slave_1) [ 185.647100][ T9129] bond1 (unregistering): Released all slaves [ 185.790611][ T9133] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 185.790654][ T9133] bridge3: entered allmulticast mode [ 186.498734][ T9177] netlink: 'syz.2.817': attribute type 12 has an invalid length. [ 186.498780][ T9177] __nla_validate_parse: 9 callbacks suppressed [ 186.498808][ T9177] netlink: 248 bytes leftover after parsing attributes in process `syz.2.817'. [ 186.505960][ T9177] netlink: 'syz.2.817': attribute type 12 has an invalid length. [ 186.505984][ T9177] netlink: 248 bytes leftover after parsing attributes in process `syz.2.817'. [ 186.550393][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 186.796823][ T9194] tipc: Enabled bearer , priority 20 [ 186.805881][ T9194] tipc: Enabling of bearer rejected, already enabled [ 186.808100][ T9194] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 186.808124][ T9194] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 186.808455][ T9194] tipc: Resetting bearer [ 186.846632][ T9193] netlink: 'syz.0.826': attribute type 6 has an invalid length. [ 186.919952][ T9193] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 186.929065][ T5749] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 186.948351][ T9199] tipc: Enabling of bearer rejected, failed to enable media [ 187.006633][ T9206] netlink: 'syz.2.830': attribute type 10 has an invalid length. [ 187.006846][ T9206] dummy0: left promiscuous mode [ 187.056223][ T9206] team0: Port device dummy0 added [ 187.092874][ T9210] veth0: entered promiscuous mode [ 187.140481][ T9210] lo speed is unknown, defaulting to 1000 [ 187.298311][ T9219] netlink: 'syz.4.832': attribute type 2 has an invalid length. [ 187.312445][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.834'. [ 187.312495][ T9221] netlink: 'syz.1.834': attribute type 7 has an invalid length. [ 187.312524][ T9221] netlink: 'syz.1.834': attribute type 8 has an invalid length. [ 187.312539][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 187.421738][ T9217] nbd: must specify a size in bytes for the device [ 187.436801][ T9221] bond0: entered promiscuous mode [ 187.436850][ T9221] bond_slave_0: entered promiscuous mode [ 187.442257][ T9221] bond_slave_1: entered promiscuous mode [ 187.462701][ T9221] gretap0: entered promiscuous mode [ 187.559188][ T9221] bond0: left promiscuous mode [ 187.559263][ T9221] bond_slave_0: left promiscuous mode [ 187.559500][ T9221] bond_slave_1: left promiscuous mode [ 187.575293][ T9221] gretap0: left promiscuous mode [ 187.737793][ T9210] veth0: left promiscuous mode [ 187.838319][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.839'. [ 187.875973][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 187.876011][ T9249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.839'. [ 188.097822][ T9264] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 188.105726][ T9264] netlink: 200 bytes leftover after parsing attributes in process `syz.2.844'. [ 188.114955][ T9264] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 188.122783][ T9264] netlink: 29 bytes leftover after parsing attributes in process `syz.2.844'. [ 188.283714][ T9268] x_tables: duplicate underflow at hook 3 [ 188.526932][ T9266] syzkaller1: entered promiscuous mode [ 188.526979][ T9266] syzkaller1: entered allmulticast mode [ 188.757860][ T9306] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 188.772504][ T9306] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 188.792582][ T9306] geneve4: entered promiscuous mode [ 188.926741][ T9300] syzkaller0: entered promiscuous mode [ 188.932517][ T9300] syzkaller0: entered allmulticast mode [ 189.138827][ T9319] openvswitch: netlink: Message has -2 unknown bytes. [ 191.460647][ T9366] sctp: [Deprecated]: syz.0.871 (pid 9366) Use of int in max_burst socket option deprecated. [ 191.460647][ T9366] Use struct sctp_assoc_value instead [ 191.487852][ T9365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.585561][ T9365] bond4: (slave gretap2): making interface the new active one [ 191.619379][ T9365] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 192.082546][ T9384] lo speed is unknown, defaulting to 1000 [ 192.082623][ T9384] lo speed is unknown, defaulting to 1000 [ 192.083490][ T9384] lo speed is unknown, defaulting to 1000 [ 192.102688][ T9384] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 192.102741][ T9384] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 192.102773][ T9384] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 192.114518][ T9384] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.165654][ T9384] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 194.276274][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.225324][ T9400] __nla_validate_parse: 11 callbacks suppressed [ 195.233408][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.882'. [ 195.282223][ T9384] lo speed is unknown, defaulting to 1000 [ 195.312520][ T9391] bridge0: entered promiscuous mode [ 195.319518][ T9391] bridge0: entered allmulticast mode [ 195.334604][ T9391] team0: Port device bridge0 added [ 195.361192][ T9392] bridge0: port 1(team0) entered blocking state [ 195.371734][ T9392] bridge0: port 1(team0) entered disabled state [ 195.381586][ T9392] team0: entered allmulticast mode [ 195.387021][ T9392] team_slave_0: entered allmulticast mode [ 195.387043][ T9392] team_slave_1: entered allmulticast mode [ 195.442899][ T9392] team0: left allmulticast mode [ 195.447210][ T9392] team_slave_0: left allmulticast mode [ 195.454210][ T9392] team_slave_1: left allmulticast mode [ 195.706452][ T9384] lo speed is unknown, defaulting to 1000 [ 195.814657][ T9401] bond3: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 195.832117][ T9401] bond3: (slave ip6tnl2): Error -95 calling set_mac_address [ 196.025190][ T9402] validate_nla: 2 callbacks suppressed [ 196.032572][ T9402] netlink: 'syz.2.882': attribute type 12 has an invalid length. [ 196.045940][ T9402] netlink: 248 bytes leftover after parsing attributes in process `syz.2.882'. [ 196.060028][ T9403] netlink: 'syz.2.882': attribute type 12 has an invalid length. [ 196.069697][ T9403] netlink: 248 bytes leftover after parsing attributes in process `syz.2.882'. [ 196.079800][ T9384] lo speed is unknown, defaulting to 1000 [ 196.096566][ T9384] lo speed is unknown, defaulting to 1000 [ 196.119733][ T9384] lo speed is unknown, defaulting to 1000 [ 196.486668][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.891'. [ 196.893103][ T9454] netlink: 'syz.2.896': attribute type 12 has an invalid length. [ 196.893141][ T9454] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 196.893168][ T9454] netlink: 148 bytes leftover after parsing attributes in process `syz.2.896'. [ 196.893189][ T9454] netlink: 'syz.2.896': attribute type 1 has an invalid length. [ 196.893203][ T9454] netlink: 'syz.2.896': attribute type 2 has an invalid length. [ 196.893217][ T9454] netlink: 11 bytes leftover after parsing attributes in process `syz.2.896'. [ 196.975636][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 197.064098][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 197.095408][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 197.164815][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 197.237165][ T9471] netlink: 'syz.1.900': attribute type 12 has an invalid length. [ 197.580864][ T9488] netlink: 'syz.4.906': attribute type 1 has an invalid length. [ 197.580910][ T9488] netlink: 'syz.4.906': attribute type 2 has an invalid length. [ 198.014893][ T9499] netlink: zone id is out of range [ 198.014934][ T9499] netlink: zone id is out of range [ 198.016749][ T9499] netlink: zone id is out of range [ 198.016761][ T9499] netlink: zone id is out of range [ 198.016768][ T9499] netlink: zone id is out of range [ 198.016775][ T9499] netlink: zone id is out of range [ 198.017009][ T9499] netlink: zone id is out of range [ 198.017017][ T9499] netlink: zone id is out of range [ 198.017024][ T9499] netlink: zone id is out of range [ 198.017030][ T9499] netlink: zone id is out of range [ 198.481577][ T9519] veth3: entered promiscuous mode [ 198.486869][ T9519] veth3: entered allmulticast mode [ 198.525330][ T9522] vxcan3: entered promiscuous mode [ 198.568964][ T9518] veth3: entered promiscuous mode [ 198.574260][ T9518] veth3: entered allmulticast mode [ 198.787107][ T9532] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 199.047396][ T9548] bond_slave_0: Caught tx_queue_len zero misconfig [ 199.056560][ T9550] syzkaller1: entered promiscuous mode [ 199.056907][ T9550] syzkaller1: entered allmulticast mode [ 199.262880][ T9561] veth0: entered promiscuous mode [ 199.433877][ T9561] geneve2: entered promiscuous mode [ 199.433918][ T9561] geneve2: entered allmulticast mode [ 199.845260][ T9578] syzkaller0: entered promiscuous mode [ 199.851384][ T9578] syzkaller0: entered allmulticast mode [ 199.859383][ T9560] veth0: left promiscuous mode [ 200.274821][ T9610] __nla_validate_parse: 29 callbacks suppressed [ 200.275087][ T9610] netlink: 14 bytes leftover after parsing attributes in process `syz.0.932'. [ 200.355807][ T9613] sctp: [Deprecated]: syz.2.934 (pid 9613) Use of int in maxseg socket option. [ 200.355807][ T9613] Use struct sctp_assoc_value instead [ 201.341983][ T9628] netlink: 'syz.2.935': attribute type 5 has an invalid length. [ 201.476398][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 201.476448][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 202.205635][ T9610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.226834][ T9610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.246659][ T9610] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 202.261894][ T9610] bond0 (unregistering): Released all slaves [ 202.303686][ T50] IPVS: starting estimator thread 0... [ 202.400692][ T9637] IPVS: using max 31 ests per chain, 74400 per kthread [ 202.748338][ T9655] syz.3.943: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.748529][ T9655] CPU: 1 UID: 0 PID: 9655 Comm: syz.3.943 Not tainted syzkaller #0 PREEMPT(full) [ 202.748551][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.748563][ T9655] Call Trace: [ 202.748571][ T9655] [ 202.748581][ T9655] dump_stack_lvl+0xe8/0x150 [ 202.748613][ T9655] warn_alloc+0x24d/0x270 [ 202.748642][ T9655] ? kasan_save_track+0x4f/0x80 [ 202.748660][ T9655] ? kasan_save_track+0x3e/0x80 [ 202.748681][ T9655] ? __pfx_warn_alloc+0x10/0x10 [ 202.748706][ T9655] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 202.748730][ T9655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.748768][ T9655] __vmalloc_node_range_noprof+0x127/0x1540 [ 202.748814][ T9655] ? rcu_is_watching+0x16/0xb0 [ 202.748842][ T9655] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.748868][ T9655] ? __kmalloc_cache_noprof+0x321/0x600 [ 202.748897][ T9655] ? __kmalloc_cache_noprof+0x14d/0x600 [ 202.748924][ T9655] ? xskq_create+0x56/0x220 [ 202.748954][ T9655] xskq_create+0x148/0x220 [ 202.748978][ T9655] ? xsk_init_queue+0x8a/0xe0 [ 202.749003][ T9655] xsk_init_queue+0x8a/0xe0 [ 202.749030][ T9655] xsk_setsockopt+0x52a/0x960 [ 202.749055][ T9655] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.749078][ T9655] ? __pfx_aa_sk_perm+0x10/0x10 [ 202.749106][ T9655] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 202.749137][ T9655] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.749161][ T9655] do_sock_setsockopt+0x17c/0x1b0 [ 202.749184][ T9655] __x64_sys_setsockopt+0x13d/0x1b0 [ 202.749209][ T9655] do_syscall_64+0x166/0x520 [ 202.749235][ T9655] ? trace_irq_disable+0x3b/0x140 [ 202.749254][ T9655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.749273][ T9655] ? clear_bhb_loop+0x70/0xc0 [ 202.749298][ T9655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.749316][ T9655] RIP: 0033:0x7f7a6b79e159 [ 202.749334][ T9655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.749350][ T9655] RSP: 002b:00007f7a6c72c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.749368][ T9655] RAX: ffffffffffffffda RBX: 00007f7a6ba25fa0 RCX: 00007f7a6b79e159 [ 202.749382][ T9655] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 202.749393][ T9655] RBP: 00007f7a6b835024 R08: 0000000000000004 R09: 0000000000000000 [ 202.749405][ T9655] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.749417][ T9655] R13: 00007f7a6ba26038 R14: 00007f7a6ba25fa0 R15: 00007ffc5357bd18 [ 202.749448][ T9655] [ 202.767102][ T9655] Mem-Info: [ 202.767127][ T9655] active_anon:6856 inactive_anon:0 isolated_anon:0 [ 202.767127][ T9655] active_file:0 inactive_file:43564 isolated_file:0 [ 202.767127][ T9655] unevictable:1425 dirty:87 writeback:0 [ 202.767127][ T9655] slab_reclaimable:10554 slab_unreclaimable:99942 [ 202.767127][ T9655] mapped:32192 shmem:3045 pagetables:1184 [ 202.767127][ T9655] sec_pagetables:0 bounce:0 [ 202.767127][ T9655] kernel_misc_reclaimable:0 [ 202.767127][ T9655] free:1324843 free_pcp:10050 free_cma:0 [ 202.767178][ T9655] Node 0 active_anon:27424kB inactive_anon:0kB active_file:0kB inactive_file:174052kB unevictable:5700kB isolated(anon):0kB isolated(file):0kB mapped:128768kB dirty:348kB writeback:0kB shmem:12180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13044kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 202.767230][ T9655] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 202.767281][ T9655] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.767334][ T9655] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 202.767368][ T9655] Node 0 DMA32 free:1343176kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27424kB inactive_anon:0kB active_file:0kB inactive_file:174052kB unevictable:5700kB writepending:348kB zspages:0kB present:3129332kB managed:2546704kB mlocked:5800kB bounce:0kB free_pcp:40200kB local_pcp:20436kB free_cma:0kB [ 202.767422][ T9655] lowmem_reserve[]: 0 0 0 0 0 [ 202.767454][ T9655] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.767502][ T9655] lowmem_reserve[]: 0 0 0 0 0 [ 202.767534][ T9655] Node 1 Normal free:3940836kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.767585][ T9655] lowmem_reserve[]: 0 0 0 0 0 [ 202.767616][ T9655] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 202.767723][ T9655] Node 0 DMA32: 7*4kB (ME) 3*8kB (UME) 34*16kB (UM) 1019*32kB (UE) 119*64kB (UE) 18*128kB (UME) 12*256kB (UM) 11*512kB (UM) 7*1024kB (UME) 5*2048kB (UM) 311*4096kB (UM) = 1343092kB [ 202.767870][ T9655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 202.767960][ T9655] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 5*16kB (UM) 4*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (M) = 3940836kB [ 202.768106][ T9655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.771466][ T9655] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.771498][ T9655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.771513][ T9655] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.771528][ T9655] 46605 total pagecache pages [ 202.771539][ T9655] 0 pages in swap cache [ 202.771546][ T9655] Free swap = 124996kB [ 202.771553][ T9655] Total swap = 124996kB [ 202.771561][ T9655] 2097051 pages RAM [ 202.771567][ T9655] 0 pages HighMem/MovableOnly [ 202.771574][ T9655] 428759 pages reserved [ 202.771580][ T9655] 0 pages cma reserved [ 202.957828][ T9655] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 203.032950][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.945'. [ 203.090313][ T9666] netlink: 'syz.0.945': attribute type 2 has an invalid length. [ 203.206472][ T9668] netlink: 'syz.0.945': attribute type 178 has an invalid length. [ 203.250247][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.298791][ T9666] : entered promiscuous mode [ 203.493571][ T9673] netlink: 'syz.0.948': attribute type 8 has an invalid length. [ 203.605070][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 203.665672][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 203.725112][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 204.028172][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.048195][ T9696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.084132][ T9698] netlink: 84 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.084783][ T9698] netlink: 84 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.112089][ T9698] netlink: 84 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.432696][ T9719] netlink: 'syz.3.957': attribute type 13 has an invalid length. [ 204.439666][ T9719] netlink: 'syz.3.957': attribute type 13 has an invalid length. [ 204.446039][ T9719] netlink: 'syz.3.957': attribute type 13 has an invalid length. [ 204.459586][ T9719] netlink: 'syz.3.957': attribute type 13 has an invalid length. [ 204.469952][ T9719] netlink: 'syz.3.957': attribute type 13 has an invalid length. [ 204.540797][ T9719] netlink: 'syz.3.957': attribute type 13 has an invalid length. [ 205.018911][ T9746] trusted_key: syz.0.961 sent an empty control message without MSG_MORE. [ 205.164352][ T9748] syzkaller0: entered promiscuous mode [ 205.164391][ T9748] syzkaller0: entered allmulticast mode [ 205.277984][ T9757] xt_hashlimit: size too large, truncated to 1048576 [ 205.366718][ T9763] __nla_validate_parse: 18 callbacks suppressed [ 205.376578][ T9763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.968'. [ 205.401880][ T9758] xt_hashlimit: size too large, truncated to 1048576 [ 205.517189][ T9763] netlink: 3 bytes leftover after parsing attributes in process `syz.1.968'. [ 205.556555][ T9763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.968'. [ 205.564902][ T9767] netlink: 224 bytes leftover after parsing attributes in process `syz.1.968'. [ 205.890266][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 206.336087][ T9799] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 206.485714][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'. [ 206.597648][ T9815] smc: net device vlan1 applied user defined pnetid SYZ2 [ 206.895895][ T9829] netlink: 32 bytes leftover after parsing attributes in process `syz.2.987'. [ 207.393352][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 207.923347][ T9885] netlink: 68 bytes leftover after parsing attributes in process `syz.2.999'. [ 208.049933][ T9879] lo speed is unknown, defaulting to 1000 [ 208.061340][ T9879] lo speed is unknown, defaulting to 1000 [ 208.357769][ T9893] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.851314][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 209.217759][ T9933] vlan3: entered allmulticast mode [ 209.217803][ T9933] bond0: entered allmulticast mode [ 209.218236][ T9933] bond_slave_0: entered allmulticast mode [ 209.218255][ T9933] bond_slave_1: entered allmulticast mode [ 209.309569][ T9939] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 209.505351][ T9952] validate_nla: 62 callbacks suppressed [ 209.511209][ T9952] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 209.646258][ T9962] ipvlan4: entered promiscuous mode [ 210.597369][T10001] netlink: 'syz.4.1033': attribute type 13 has an invalid length. [ 211.710268][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 213.812615][T10025] macvlan3: entered promiscuous mode [ 213.812655][T10025] vlan0: entered promiscuous mode [ 213.812685][T10025] gretap0: entered promiscuous mode [ 213.827325][T10025] vlan0: left promiscuous mode [ 213.896662][ T5758] gretap0: left promiscuous mode [ 214.402663][T10042] Bluetooth: MGMT ver 1.23 [ 214.471153][ T5741] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.521824][T10041] __nla_validate_parse: 4 callbacks suppressed [ 214.525992][ T5758] lo speed is unknown, defaulting to 1000 [ 214.534835][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 214.537254][ T9736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.667614][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1045'. [ 215.100393][ T5741] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.136212][T10082] x_tables: unsorted entry at hook 1 [ 215.179031][T10082] debugfs: 'netdev:syzkaller0' already exists in 'phy17' [ 215.403115][T10094] xt_CT: No such helper "snmp_trap" [ 215.801003][T10115] lo speed is unknown, defaulting to 1000 [ 215.813069][T10115] lo speed is unknown, defaulting to 1000 [ 215.846222][T10123] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 215.967772][T10123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.258034][T10134] tipc: Started in network mode [ 216.258085][T10134] tipc: Node identity 0ad330e4b9c6, cluster identity 4711 [ 216.258517][T10134] tipc: Enabled bearer , priority 20 [ 216.343433][T10137] netlink: 'syz.2.1069': attribute type 9 has an invalid length. [ 216.352481][T10131] lo speed is unknown, defaulting to 1000 [ 216.432340][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 216.432485][ T5622] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 216.526559][T10131] lo speed is unknown, defaulting to 1000 [ 216.532899][T10137] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 216.532936][T10137] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1069'. [ 216.744693][T10132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'. [ 216.796417][T10144] netlink: 'syz.1.1071': attribute type 14 has an invalid length. [ 216.878951][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 216.941716][T10151] net_ratelimit: 1705 callbacks suppressed [ 216.941765][T10151] sock: sock_set_timeout: `syz.3.1073' (pid 10151) tries to set negative timeout [ 216.947963][T10150] bond5: option broadcast_neighbor: invalid value (3) [ 216.968635][T10150] bond5 (unregistering): Released all slaves [ 217.215386][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 217.245889][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 217.383941][ T5741] tipc: Node number set to 3004510436 [ 217.525847][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1083'. [ 217.635005][T10191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1082'. [ 217.915455][T10210] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1087'. [ 218.265145][T10226] syzkaller0: entered promiscuous mode [ 218.265195][T10226] syzkaller0: entered allmulticast mode [ 218.432787][T10239] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 218.621178][T10247] netlink: 'syz.2.1098': attribute type 11 has an invalid length. [ 218.688482][T10251] lo: entered allmulticast mode [ 218.910480][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.043379][T10263] netlink: 'syz.1.1101': attribute type 1 has an invalid length. [ 219.124547][T10269] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 219.124671][T10269] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 219.125175][T10269] tipc: Resetting bearer [ 219.141577][T10250] lo: left allmulticast mode [ 219.294458][T10270] bond1: (slave geneve3): making interface the new active one [ 219.303168][T10270] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 219.827636][T10275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.840740][ T9736] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.840806][ T9736] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.840854][ T9736] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.840888][ T9736] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.368121][T10363] __nla_validate_parse: 6 callbacks suppressed [ 221.368170][T10363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1114'. [ 221.504846][T10363] syzkaller1: entered promiscuous mode [ 221.505513][T10363] syzkaller1: entered allmulticast mode [ 221.591563][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 221.661169][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 221.909317][T10395] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 222.048840][T10391] team0: Device wg1 is of different type [ 222.068350][T10391] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 222.110676][T10402] tipc: Resetting bearer [ 222.115705][T10391] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 222.126694][T10391] tipc: Enabled bearer , priority 10 [ 222.646298][T10431] ipip1: entered promiscuous mode [ 222.976534][T10448] netlink: 89 bytes leftover after parsing attributes in process `syz.0.1133'. [ 223.268530][T10456] tipc: Node number set to 1398734849 [ 224.404189][T10503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1146'. [ 224.810865][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 224.835571][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 224.843206][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1151'. [ 224.843236][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1151'. [ 224.990256][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.039040][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'. [ 225.192473][T10541] veth5: entered allmulticast mode [ 225.211432][T10541] bond2: (slave veth5): Enslaving as an active interface with an up link [ 225.212922][T10543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.275851][T10550] bond2 (unregistering): (slave veth5): Releasing backup interface [ 225.296301][T10550] bond2 (unregistering): Released all slaves [ 225.851537][T10567] 8021q: VLANs not supported on gre0 [ 226.407461][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028eacc00: rx timeout, send abort [ 226.632154][T10586] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 226.741536][T10596] __nla_validate_parse: 6 callbacks suppressed [ 226.741845][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 226.858545][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'. [ 226.907533][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028eacc00: abort rx timeout. Force session deactivation [ 226.918151][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028eac800: rx timeout, send abort [ 227.320012][T10625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1177'. [ 227.418200][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028eac800: abort rx timeout. Force session deactivation [ 227.891379][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 227.899199][ T5622] block nbd2: Receive control failed (result -1) [ 227.972470][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 227.972716][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 228.164360][T10635] tipc: Resetting bearer [ 228.200319][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.528348][T10651] ip6tnl0: Caught tx_queue_len zero misconfig [ 228.528392][T10651] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1182'. [ 228.966030][T10688] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 229.012005][T10683] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1188'. [ 229.024668][T10676] sctp: [Deprecated]: syz.3.1186 (pid 10676) Use of int in maxseg socket option. [ 229.024668][T10676] Use struct sctp_assoc_value instead [ 229.053512][T10677] syzkaller0: entered promiscuous mode [ 229.053558][T10677] syzkaller0: entered allmulticast mode [ 229.306952][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1192'. [ 229.660161][T10716] netlink: 'syz.3.1194': attribute type 2 has an invalid length. [ 229.903868][T10735] xt_hashlimit: size too large, truncated to 1048576 [ 229.969675][T10744] openvswitch: netlink: Missing key (keys=40, expected=100) [ 230.006263][T10741] @0Ù: renamed from bond_slave_1 (while UP) [ 230.524534][T10771] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 230.527998][T10765] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1204'. [ 232.055126][T10858] macsec2: entered promiscuous mode [ 232.055167][T10858] bridge0: entered promiscuous mode [ 232.195950][T10869] syzkaller0: entered promiscuous mode [ 232.195996][T10869] syzkaller0: entered allmulticast mode [ 232.319658][T10875] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 232.842013][T10903] __nla_validate_parse: 8 callbacks suppressed [ 232.842276][T10903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1234'. [ 232.869386][T10900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.024046][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1235'. [ 233.049698][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 233.314970][T10926] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 233.425807][T10934] netlink: 'syz.1.1241': attribute type 10 has an invalid length. [ 233.425848][T10934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1241'. [ 233.492054][T10934] gre1: entered promiscuous mode [ 233.511250][T10934] gre1: entered allmulticast mode [ 234.328107][T10974] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1253'. [ 234.393017][T10973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1253'. [ 234.396602][T10973] netlink: 'syz.2.1253': attribute type 17 has an invalid length. [ 234.396624][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1253'. [ 234.398710][T10973] netlink: 'syz.2.1253': attribute type 17 has an invalid length. [ 234.398729][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1253'. [ 234.449140][T10980] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 234.518290][T10980] bond2: option min_links: invalid value (18446744073709551612) [ 234.539018][T10980] bond2: option min_links: allowed values 0 - 2147483647 [ 234.552298][T10980] bond2 (unregistering): Released all slaves [ 234.946779][T10998] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 234.979070][T11006] pim6reg1: entered promiscuous mode [ 234.984894][T11006] pim6reg1: entered allmulticast mode [ 235.047936][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 235.090817][T10998] bond2: entered allmulticast mode [ 235.268174][T11022] x_tables: duplicate underflow at hook 2 [ 235.279901][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 235.365998][T11033] pimreg: entered allmulticast mode [ 235.373721][T11033] pimreg: left allmulticast mode [ 235.553220][T11042] tipc: Started in network mode [ 235.553254][T11042] tipc: Node identity 4, cluster identity 4711 [ 235.553281][T11042] tipc: Node number set to 4 [ 235.557447][T11039] xt_CT: No such helper "netbios-ns" [ 235.702018][T11052] syzkaller0: entered promiscuous mode [ 235.702063][T11052] syzkaller0: entered allmulticast mode [ 236.198750][T11037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.198796][T11037] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 236.289109][T11080] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 236.290811][T11037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.290837][T11037] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 236.341723][T11037] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.341781][T11037] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 236.364745][T11037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.374462][T11037] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 236.594654][T11089] netlink: 'syz.1.1290': attribute type 13 has an invalid length. [ 236.824452][T11094] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 236.837036][T11094] syzkaller0: entered promiscuous mode [ 236.837079][T11094] syzkaller0: entered allmulticast mode [ 236.844680][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.984514][ T5741] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.198226][T11122] team0: Port device dummy0 removed [ 237.221043][T11122] bridge_slave_0: left allmulticast mode [ 237.221093][T11122] bridge_slave_0: left promiscuous mode [ 237.223668][T11122] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.246898][T11122] bridge_slave_1: left allmulticast mode [ 237.246946][T11122] bridge_slave_1: left promiscuous mode [ 237.247200][T11122] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.292437][T11122] team0: Port device team_slave_0 removed [ 237.317141][T11122] team0: Port device team_slave_1 removed [ 237.325981][T11122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.366223][T11124] team0: Mode changed to "loadbalance" [ 237.435222][T11133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.435264][T11133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.457746][T11133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.457786][T11133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.478259][T11133] batman_adv: batadv0: Interface deactivated: gretap2 [ 237.486854][T11133] batman_adv: batadv0: Removing interface: gretap2 [ 237.619517][T11142] tc action pedit offset 34448 out of bounds [ 237.619557][T11142] tc action pedit offset 34448 out of bounds [ 237.619584][T11142] tc action pedit offset 34448 out of bounds [ 237.619599][T11142] tc action pedit offset 34448 out of bounds [ 237.619611][T11142] tc action pedit offset 34448 out of bounds [ 237.619624][T11142] tc action pedit offset 34448 out of bounds [ 237.619637][T11142] tc action pedit offset 34448 out of bounds [ 237.619651][T11142] tc action pedit offset 34448 out of bounds [ 237.619663][T11142] tc action pedit offset 34448 out of bounds [ 237.619677][T11142] tc action pedit offset 34448 out of bounds [ 237.621029][T11142] 0: reclassify loop, rule prio 0, protocol 800 [ 237.708914][T11144] ip6tnl1: entered allmulticast mode [ 237.933703][T11150] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.286262][T11180] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 238.295790][T11180] netlink: 'syz.0.1310': attribute type 4 has an invalid length. [ 238.473748][T11188] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 238.671953][ T5850] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.672181][ T5850] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.700414][ T5741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.739924][T11201] __nla_validate_parse: 10 callbacks suppressed [ 238.747114][T11201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1318'. [ 238.774724][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 238.883499][T11204] syzkaller1: entered promiscuous mode [ 238.883540][T11204] syzkaller1: entered allmulticast mode [ 239.093889][T11220] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1327'. [ 239.151632][ T5741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.424488][T11229] netlink: 'syz.1.1329': attribute type 2 has an invalid length. [ 239.435836][T11227] netlink: 'syz.1.1329': attribute type 2 has an invalid length. [ 239.446145][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 239.485813][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.502921][T11237] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1332'. [ 239.675129][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 239.685539][T11247] veth1_macvtap: left promiscuous mode [ 239.710740][ T1069] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.874546][T11255] netlink: 'syz.1.1336': attribute type 10 has an invalid length. [ 239.884184][T11255] syz_tun: entered promiscuous mode [ 239.899066][T11255] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 239.906867][T11255] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1336'. [ 239.910961][ T5850] bond0: (slave bond_slave_0): interface is now down [ 239.910990][ T5850] bond0: (slave c@0Ù): interface is now down [ 239.969518][ T5850] bond0: (slave syz_tun): interface is now down [ 239.982430][ T5850] bond0: now running without any active interface! [ 240.039393][T11259] tipc: Enabling of bearer rejected, failed to enable media [ 240.048204][T11259] gre0: Caught tx_queue_len zero misconfig [ 240.105685][T11263] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 240.139099][T11266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1338'. [ 240.152058][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 240.173597][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 240.422521][T11275] pimreg1: port 1(bridge_slave_0) entered disabled state [ 240.434024][T11275] pimreg1: port 2(bridge_slave_1) entered disabled state [ 240.527324][T11275] tipc: Resetting bearer [ 240.531707][T11275] tipc: Resetting bearer [ 240.601551][T11278] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 240.792741][ T30] audit: type=1800 audit(1788849919.597:2): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1348" name="r" dev="tmpfs" ino=1394 res=0 errno=0 [ 241.068894][T11313] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 241.156298][ T6538] tipc: Resetting bearer [ 241.164659][ T6538] tipc: Resetting bearer [ 241.410118][T11324] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 241.503652][T11324] bond5: entered promiscuous mode [ 241.513762][T11324] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.552591][T11337] netlink: 'syz.1.1359': attribute type 11 has an invalid length. [ 241.575405][T11324] bond5: (slave bridge5): making interface the new active one [ 241.586109][T11324] bridge5: entered promiscuous mode [ 241.610321][T11324] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 241.857760][T11342] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 242.215867][T11365] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 242.590628][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.674991][T11380] openvswitch: netlink: Message has 8 unknown bytes. [ 242.861638][T11380] netlink: 'syz.2.1370': attribute type 18 has an invalid length. [ 242.875946][T11396] netlink: 'syz.0.1374': attribute type 5 has an invalid length. [ 243.213817][T11407] bridge0: port 4(wlan1) entered blocking state [ 243.228998][T11407] bridge0: port 4(wlan1) entered disabled state [ 243.240936][T11407] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 243.242497][T11407] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 243.286660][T11407] mac80211_hwsim hwsim16 wlan1 (unregistering): left allmulticast mode [ 243.300396][T11407] mac80211_hwsim hwsim16 wlan1 (unregistering): left promiscuous mode [ 243.311084][T11407] bridge0: port 4(wlan1) entered disabled state [ 243.886342][T11452] __nla_validate_parse: 17 callbacks suppressed [ 243.892964][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 244.074625][T11467] netlink: 'syz.0.1394': attribute type 3 has an invalid length. [ 244.075273][T11467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1394'. [ 244.174358][T11472] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1396'. [ 244.312369][T11481] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1401'. [ 244.414710][T11477] syzkaller1: entered allmulticast mode [ 244.431576][T11481] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1401'. [ 244.448404][T11481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1401'. [ 244.452412][T11482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1401'. [ 244.452586][T11482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1401'. [ 244.452741][T11482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1401'. [ 244.452901][T11482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1401'. [ 244.849974][T11510] openvswitch: netlink: Duplicate or invalid key (type 0). [ 244.864482][T11510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.036501][T11517] vlan1: entered promiscuous mode [ 245.036558][T11517] veth1: entered promiscuous mode [ 245.349246][T11538] validate_nla: 3 callbacks suppressed [ 245.357377][T11538] netlink: 'syz.4.1417': attribute type 5 has an invalid length. [ 245.576934][T11552] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 245.615718][T11552] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.059152][T11577] netlink: 'syz.4.1427': attribute type 10 has an invalid length. [ 246.059388][T11577] vlan0: entered allmulticast mode [ 246.061326][T11577] veth0_vlan: entered allmulticast mode [ 246.093312][T11578] lo: Caught tx_queue_len zero misconfig [ 246.107988][T11581] openvswitch: netlink: Duplicate or invalid key (type 0). [ 246.721422][T11573] netlink: 'syz.3.1425': attribute type 4 has an invalid length. [ 247.096595][T11625] vlan1: Caught tx_queue_len zero misconfig [ 247.315340][T11635] xt_CT: No such helper "netbios-ns" [ 247.390563][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.781873][T11661] netlink: 'syz.1.1443': attribute type 1 has an invalid length. [ 248.129017][T11683] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 248.129084][T11683] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 248.149071][T11683] tunl0: Caught tx_queue_len zero misconfig [ 248.189331][T11679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.364056][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.199509][T11710] __nla_validate_parse: 41 callbacks suppressed [ 249.207733][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 249.294341][T11720] sch_fq: defrate 4294967293 ignored. [ 249.572564][T11721] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1458'. [ 249.572603][T11721] tc_dump_action: action bad kind [ 249.761322][T11730] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 249.793148][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 249.857263][T11729] syzkaller0: entered promiscuous mode [ 249.857309][T11729] syzkaller0: entered allmulticast mode [ 249.897096][T11735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.901444][T11735] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 250.422145][T11758] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 250.591477][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.156175][T11753] batadv_slave_0: Caught tx_queue_len zero misconfig [ 252.380432][T11778] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1476'. [ 252.531869][T11785] lo speed is unknown, defaulting to 1000 [ 252.563329][T11785] lo speed is unknown, defaulting to 1000 [ 252.864237][T11825] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 252.877424][T11825] SET target dimension over the limit! [ 252.884748][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 253.283726][T11843] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 253.327628][T11843] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.355243][T11843] bond7: (slave veth0_to_bond): making interface the new active one [ 253.356762][T11843] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 253.496032][T11843] macvlan4: entered promiscuous mode [ 253.496074][T11843] macvlan4: entered allmulticast mode [ 253.497022][T11843] bond7: entered promiscuous mode [ 253.497041][T11843] veth0_to_bond: entered promiscuous mode [ 253.516221][T11843] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 253.518067][T11843] bond7: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 253.525810][T11843] bond7: left promiscuous mode [ 253.525832][T11843] veth0_to_bond: left promiscuous mode [ 253.649179][ T9736] bond7: (slave veth0_to_bond): link status definitely down, disabling slave [ 253.677218][ T9736] bond7: now running without any active interface! [ 253.831082][T11858] netlink: 'syz.1.1491': attribute type 9 has an invalid length. [ 253.947729][T11861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1493'. [ 254.001049][T11861] ipvlan0: entered promiscuous mode [ 254.007369][T11861] ipvlan0: left promiscuous mode [ 254.248705][T11885] lo: Caught tx_queue_len zero misconfig [ 254.264769][T11876] netlink: 'syz.1.1497': attribute type 28 has an invalid length. [ 254.264800][T11876] netlink: 'syz.1.1497': attribute type 3 has an invalid length. [ 254.264823][T11876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1497'. [ 254.549438][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 254.600330][ T9735] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 254.621597][ T9736] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 254.621668][ T9736] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 254.621696][ T9736] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 254.743244][T11904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1505'. [ 254.821294][T11902] xt_CT: No such helper "netbios-ns" [ 255.697925][T11934] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 255.719569][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.043798][T11967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1520'. [ 257.055494][T11967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1520'. [ 257.065577][T11967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1520'. [ 257.298586][T11985] netlink: 'syz.0.1527': attribute type 83 has an invalid length. [ 257.378031][T11990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1528'. [ 257.420784][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 257.977252][T12022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1534'. [ 258.079225][T12026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1536'. [ 258.394718][T12052] bridge0: left promiscuous mode [ 258.419886][T12052] team0: Port device bridge0 removed [ 258.644545][T12069] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 259.564878][T12121] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.1558'. [ 259.564926][T12121] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 259.676220][T12115] nbd: must specify a size in bytes for the device [ 259.721991][T12130] netlink: 'syz.4.1561': attribute type 29 has an invalid length. [ 259.725425][T12131] netlink: 'syz.4.1561': attribute type 29 has an invalid length. [ 259.923533][T12142] netlink: 'syz.1.1562': attribute type 2 has an invalid length. [ 259.923571][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 259.945359][T12140] netlink: Setting conntrack mark requires 'commit' flag. [ 259.945589][T12140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.255415][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 260.278529][T12156] siw: device registration error -23 [ 260.324141][T12161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.957061][T12187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1578'. [ 261.176297][T12194] û: renamed from bridge_slave_0 (while UP) [ 261.446998][T12197] ipvlan1: Caught tx_queue_len zero misconfig [ 261.454196][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 261.454826][T12200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1582'. [ 261.489348][T12200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1582'. [ 261.519519][T12206] netlink: 'syz.0.1583': attribute type 9 has an invalid length. [ 261.681708][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 261.773301][T12208] nbd3: detected capacity change from 0 to 63 [ 261.822411][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 261.846775][T12217] nbd4: detected capacity change from 0 to 63 [ 261.963353][ T5620] block nbd4: Receive control failed (result -104) [ 261.968098][ T5622] block nbd3: Receive control failed (result -32) [ 262.124936][T12231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1587'. [ 262.657950][T12260] : renamed from bond0 (while UP) [ 263.000954][T12267] netlink: 'syz.4.1596': attribute type 1 has an invalid length. [ 263.234780][T12286] netlink: 'syz.1.1601': attribute type 21 has an invalid length. [ 263.235822][T12286] netlink: 'syz.1.1601': attribute type 5 has an invalid length. [ 263.375969][T12297] x_tables: duplicate underflow at hook 2 [ 263.937935][T12338] netlink: 'syz.4.1611': attribute type 4 has an invalid length. [ 263.947090][T12338] netlink: 'syz.4.1611': attribute type 4 has an invalid length. [ 263.976109][T12339] netlink: 'syz.0.1613': attribute type 4 has an invalid length. [ 264.873363][T12374] ip6gretap0: entered promiscuous mode [ 264.878293][T12376] erspan0: left allmulticast mode [ 264.878544][T12376] erspan0: left promiscuous mode [ 264.880643][T12376] bridge0: port 3(erspan0) entered disabled state [ 264.923921][T12376] : (slave syz_tun): Releasing backup interface [ 264.938764][T12374] netlink: 'syz.3.1620': attribute type 3 has an invalid length. [ 264.981545][T12376] ¾x9ÿ: left allmulticast mode [ 264.986444][T12376] ¾x9ÿ: left promiscuous mode [ 264.991706][T12376] bridge0: port 1(1¾x9ÿ) entered disabled state [ 265.006778][T12388] __nla_validate_parse: 13 callbacks suppressed [ 265.007179][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.031550][T12376] bridge_slave_1: left allmulticast mode [ 265.031594][T12376] bridge_slave_1: left promiscuous mode [ 265.031789][T12376] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.059723][T12376] : (slave bond_slave_0): Releasing backup interface [ 265.066224][T12390] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1626'. [ 265.073385][T12390] netlink: 'syz.2.1626': attribute type 10 has an invalid length. [ 265.094097][T12376] : (slave c@0Ù): Releasing backup interface [ 265.119484][T12376] team0: Port device team_slave_0 removed [ 265.145521][T12376] team0: Port device team_slave_1 removed [ 265.148276][T12376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.148297][T12376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.171606][T12376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.171645][T12376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.188713][T12376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.216599][T12381] team0: Mode changed to "activebackup" [ 265.243979][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.244177][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.244363][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.244546][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.244730][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.244926][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.245108][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.245290][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 265.378935][T12390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.397728][T12390] team0: Port device netdevsim1 added [ 265.429330][T12403] ip6erspan0: entered allmulticast mode [ 265.685815][T12414] syzkaller0: entered promiscuous mode [ 265.685851][T12414] syzkaller0: entered allmulticast mode [ 265.697612][T12414] tipc: Enabled bearer , priority 0 [ 265.709568][T12412] sctp: [Deprecated]: syz.4.1630 (pid 12412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.709568][T12412] Use struct sctp_sack_info instead [ 265.723505][T12414] tipc: Resetting bearer [ 265.824365][T12413] tipc: Resetting bearer [ 265.855496][T12413] tipc: Disabling bearer [ 265.950325][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.069187][T12433] syzkaller0: entered promiscuous mode [ 266.069241][T12433] syzkaller0: entered allmulticast mode [ 266.483928][T12447] syzkaller1: entered promiscuous mode [ 266.483981][T12447] syzkaller1: entered allmulticast mode [ 266.485934][T12447] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 266.732646][T12460] openvswitch: netlink: Duplicate or invalid key (type 0). [ 266.877055][ T5622] block nbd5: Receive control failed (result -32) [ 267.231380][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.725405][T12503] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 268.715274][ T5741] lo speed is unknown, defaulting to 1000 [ 268.716711][T12481] netlink: 'syz.1.1649': attribute type 15 has an invalid length. [ 268.731284][ T5741] syz2: Port: 1 Link DOWN [ 269.006664][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.007323][T12503] bridge0: port 1(û) entered disabled state [ 269.299701][T12503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.332405][T12503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.367704][T12507] tipc: Resetting bearer [ 270.713220][T12522] __nla_validate_parse: 68 callbacks suppressed [ 270.713272][T12522] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1661'. [ 270.745125][ T9736] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745189][ T9736] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745250][ T9736] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745284][ T9736] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745338][ T9736] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745364][ T9736] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 270.745400][ T9736] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745426][ T9736] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 270.745461][ T9736] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745493][ T9736] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 270.745529][ T9736] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745554][ T9736] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 270.745589][ T9736] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745615][ T9736] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 270.745651][ T9736] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745675][ T9736] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 270.745711][ T9736] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745736][ T9736] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 270.745772][ T9736] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.745798][ T9736] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 270.764995][T12540] vlan1: entered allmulticast mode [ 270.765018][T12540] veth0_vlan: entered allmulticast mode [ 270.959142][T12550] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 271.171764][T12550] bridge2: entered promiscuous mode [ 271.175475][T12569] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1672'. [ 271.187399][T12550] bridge2: entered allmulticast mode [ 271.198118][T12571] netlink: 'syz.0.1673': attribute type 23 has an invalid length. [ 271.198153][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 271.304179][T12573] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1672'. [ 271.369953][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'. [ 271.570958][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 271.741079][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 271.752083][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 271.815038][T12611] sctp: [Deprecated]: syz.0.1686 (pid 12611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.815038][T12611] Use struct sctp_sack_info instead [ 271.969741][T12622] bridge6: entered promiscuous mode [ 272.057406][T12628] bridge7: entered promiscuous mode [ 272.090414][T12617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.464968][T12653] netdevsim netdevsim0 €Â: renamed from netdevsim0 [ 272.868198][T12673] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 272.868242][T12673] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 272.983512][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1700'. [ 273.148953][T12682] netlink: 'syz.2.1700': attribute type 1 has an invalid length. [ 273.148994][T12682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1700'. [ 273.455479][T12699] dvmrp0: entered allmulticast mode [ 273.463160][T12699] dvmrp0: left allmulticast mode [ 273.770591][T12712] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 273.879798][T12712] bond0: entered promiscuous mode [ 273.887593][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.939218][T12715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.939590][T12715] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 273.939608][T12715] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 273.966543][T12715] bond0: (slave ip6gre1): making interface the new active one [ 273.966567][T12715] ip6gre1: entered promiscuous mode [ 273.987084][T12722] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 273.987680][T12715] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 274.012450][T12723] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 274.118180][T12723] team0 (unregistering): Port device netdevsim1 removed [ 274.278431][T12729] ipvlan0: Caught tx_queue_len zero misconfig [ 274.374321][T12740] netlink: 'syz.2.1717': attribute type 9 has an invalid length. [ 274.374363][T12740] netlink: 'syz.2.1717': attribute type 1 has an invalid length. [ 274.431666][T12744] dummy0: Caught tx_queue_len zero misconfig [ 274.454224][T12736] netlink: 'syz.4.1716': attribute type 32 has an invalid length. [ 274.818360][T12781] xt_hashlimit: size too large, truncated to 1048576 [ 274.848457][T12776] bridge0: left promiscuous mode [ 274.865802][T12776] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.886778][T12776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.001818][T12776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.004287][T12776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.011171][T12776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.011194][T12776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.012691][T12776] veth1_vlan: left promiscuous mode [ 275.014002][T12776] veth0_vlan: left promiscuous mode [ 275.015709][T12776] veth0_vlan: entered promiscuous mode [ 275.019933][T12776] veth1_vlan: entered promiscuous mode [ 275.028510][T12776] veth1_macvtap: left promiscuous mode [ 275.029843][T12776] veth0_macvtap: left promiscuous mode [ 275.031960][T12776] veth0_macvtap: entered promiscuous mode [ 275.033169][T12776] veth1_macvtap: entered promiscuous mode [ 275.034842][T12776] geneve0: left promiscuous mode [ 275.046028][T12776] 8021q: adding VLAN 0 to HW filter on device €Â [ 275.047874][T12776] netdevsim netdevsim0 €Â: left promiscuous mode [ 275.049861][T12776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.053054][T12776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.054421][T12776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.055042][T12776] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 275.078749][T12533] bridge0: port 3(vlan2) entered blocking state [ 275.078863][T12533] bridge0: port 3(vlan2) entered forwarding state [ 275.092563][ T6540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.092611][ T6540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.092644][ T6540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.092676][ T6540] netdevsim netdevsim0 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.108425][ T5849] bridge0: port 1(û) entered blocking state [ 275.108537][ T5849] bridge0: port 1(û) entered forwarding state [ 275.142994][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.143108][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.267627][T12791] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 275.713435][T12815] netlink: 'syz.2.1735': attribute type 8 has an invalid length. [ 275.743728][T12815] __nla_validate_parse: 12 callbacks suppressed [ 275.750282][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 276.050196][T12834] validate_nla: 1 callbacks suppressed [ 276.050242][T12834] netlink: 'syz.1.1741': attribute type 21 has an invalid length. [ 276.050258][T12834] netlink: 'syz.1.1741': attribute type 22 has an invalid length. [ 276.050273][T12834] netlink: 'syz.1.1741': attribute type 23 has an invalid length. [ 276.050287][T12834] netlink: 'syz.1.1741': attribute type 25 has an invalid length. [ 276.050301][T12834] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1741'. [ 276.814838][T12885] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.302159][T12915] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1759'. [ 277.413907][T12915] netlink: 'syz.0.1759': attribute type 2 has an invalid length. [ 277.464601][T12919] geneve5: entered promiscuous mode [ 277.542361][T12930] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 277.553294][ T9736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 52340 - 0 [ 277.553366][ T9736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 52340 - 0 [ 277.553406][ T9736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 52340 - 0 [ 277.553438][ T9736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 52340 - 0 [ 277.929471][T12953] tipc: Enabled bearer , priority 0 [ 277.943015][T12953] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 278.064720][T12961] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 278.168882][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'. [ 278.188503][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'. [ 278.236109][T12953] tipc: Disabling bearer [ 278.415624][T12997] ÿ: renamed from bond_slave_0 [ 278.570377][T13006] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 279.073429][T13011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.092931][T13011] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 279.111156][T12985] lo speed is unknown, defaulting to 1000 [ 279.111202][T12985] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 279.396965][T13025] syzkaller0: entered promiscuous mode [ 279.397008][T13025] syzkaller0: entered allmulticast mode [ 281.885339][ T5622] block nbd6: Receive control failed (result -32) [ 281.898113][ T5620] block nbd6: Receive control failed (result -32) [ 281.948356][T13080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.963833][T13056] lo speed is unknown, defaulting to 1000 [ 281.976698][T13056] lo speed is unknown, defaulting to 1000 [ 282.095507][T13083] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1793'. [ 282.409984][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1798'. [ 282.992595][T13109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1800'. [ 283.076937][T13114] bond0: option min_links: invalid value (18446744073709551612) [ 283.084937][T13114] bond0: option min_links: allowed values 0 - 2147483647 [ 283.102718][T13114] bond0 (unregistering): Released all slaves [ 283.528296][T13127] GUP no longer grows the stack in syz.3.1805 (13127): 200000003000-20000000a000 (200000001000) [ 283.528364][T13127] CPU: 1 UID: 0 PID: 13127 Comm: syz.3.1805 Not tainted syzkaller #0 PREEMPT(full) [ 283.528386][T13127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.528404][T13127] Call Trace: [ 283.528412][T13127] [ 283.528421][T13127] dump_stack_lvl+0xe8/0x150 [ 283.528454][T13127] __get_user_pages+0x23b6/0x2750 [ 283.528481][T13127] ? lock_acquire+0x115/0x350 [ 283.528516][T13127] ? __gup_longterm_locked+0xc3b/0x15c0 [ 283.528551][T13127] __gup_longterm_locked+0xd52/0x15c0 [ 283.528578][T13127] ? lock_acquire+0x115/0x350 [ 283.528615][T13127] gup_fast_fallback+0x1d92/0x20e0 [ 283.528672][T13127] ? __pfx_gup_fast_fallback+0x10/0x10 [ 283.528703][T13127] ? lock_acquire+0x115/0x350 [ 283.528720][T13127] ? is_valid_gup_args+0x11f/0x200 [ 283.528746][T13127] ? get_user_pages_fast+0x4d/0xb0 [ 283.528772][T13127] __iov_iter_get_pages_alloc+0x378/0xa40 [ 283.528801][T13127] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 283.528835][T13127] iov_iter_get_pages2+0x5e/0xa0 [ 283.528859][T13127] __se_sys_vmsplice+0x7b5/0x1660 [ 283.528916][T13127] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 283.528946][T13127] ? __pfx_futex_wait+0x10/0x10 [ 283.529044][T13127] do_syscall_64+0x166/0x520 [ 283.529072][T13127] ? trace_irq_disable+0x3b/0x140 [ 283.529090][T13127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.529110][T13127] ? clear_bhb_loop+0x70/0xc0 [ 283.529135][T13127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.529154][T13127] RIP: 0033:0x7f7a6b79e159 [ 283.529173][T13127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.529190][T13127] RSP: 002b:00007f7a6c72c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 283.529212][T13127] RAX: ffffffffffffffda RBX: 00007f7a6ba25fa0 RCX: 00007f7a6b79e159 [ 283.529227][T13127] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 283.529240][T13127] RBP: 00007f7a6b835024 R08: 0000000000000000 R09: 0000000000000000 [ 283.529252][T13127] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 283.529264][T13127] R13: 00007f7a6ba26038 R14: 00007f7a6ba25fa0 R15: 00007ffc5357bd18 [ 283.529298][T13127] [ 284.006346][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 284.182416][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 284.474981][T13173] 8021q: VLANs not supported on gre0 [ 284.945546][T13198] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1823'. [ 284.958073][T13205] syz.0.1827: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.958168][T13205] CPU: 1 UID: 0 PID: 13205 Comm: syz.0.1827 Not tainted syzkaller #0 PREEMPT(full) [ 284.958186][T13205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.958196][T13205] Call Trace: [ 284.958204][T13205] [ 284.958212][T13205] dump_stack_lvl+0xe8/0x150 [ 284.958244][T13205] warn_alloc+0x24d/0x270 [ 284.958271][T13205] ? kasan_save_track+0x4f/0x80 [ 284.958288][T13205] ? kasan_save_track+0x3e/0x80 [ 284.958308][T13205] ? __pfx_warn_alloc+0x10/0x10 [ 284.958332][T13205] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 284.958349][T13205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.958385][T13205] __vmalloc_node_range_noprof+0x127/0x1540 [ 284.958430][T13205] ? rcu_is_watching+0x16/0xb0 [ 284.958456][T13205] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.958480][T13205] ? __kmalloc_cache_noprof+0x321/0x600 [ 284.958507][T13205] ? __kmalloc_cache_noprof+0x14d/0x600 [ 284.958535][T13205] ? xskq_create+0x56/0x220 [ 284.958564][T13205] xskq_create+0x148/0x220 [ 284.958587][T13205] ? xsk_init_queue+0x8a/0xe0 [ 284.958613][T13205] xsk_init_queue+0x8a/0xe0 [ 284.958638][T13205] xsk_setsockopt+0x52a/0x960 [ 284.958663][T13205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.958685][T13205] ? __pfx_aa_sk_perm+0x10/0x10 [ 284.958713][T13205] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 284.958734][T13205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.958757][T13205] do_sock_setsockopt+0x17c/0x1b0 [ 284.958780][T13205] __x64_sys_setsockopt+0x13d/0x1b0 [ 284.958804][T13205] do_syscall_64+0x166/0x520 [ 284.958829][T13205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.958848][T13205] ? clear_bhb_loop+0x70/0xc0 [ 284.958869][T13205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.958886][T13205] RIP: 0033:0x7f7af5d9e159 [ 284.958903][T13205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.958918][T13205] RSP: 002b:00007f7af6ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.958936][T13205] RAX: ffffffffffffffda RBX: 00007f7af6025fa0 RCX: 00007f7af5d9e159 [ 284.958950][T13205] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 284.958961][T13205] RBP: 00007f7af5e35024 R08: 0000000000000004 R09: 0000000000000000 [ 284.958980][T13205] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.958992][T13205] R13: 00007f7af6026038 R14: 00007f7af6025fa0 R15: 00007ffee82872a8 [ 284.959022][T13205] [ 284.959045][T13205] Mem-Info: [ 284.959057][T13205] active_anon:5990 inactive_anon:0 isolated_anon:0 [ 284.959057][T13205] active_file:0 inactive_file:43598 isolated_file:0 [ 284.959057][T13205] unevictable:0 dirty:199 writeback:0 [ 284.959057][T13205] slab_reclaimable:11275 slab_unreclaimable:104798 [ 284.959057][T13205] mapped:29604 shmem:522 pagetables:1175 [ 284.959057][T13205] sec_pagetables:0 bounce:0 [ 284.959057][T13205] kernel_misc_reclaimable:0 [ 284.959057][T13205] free:1317541 free_pcp:11608 free_cma:0 [ 284.959108][T13205] Node 0 active_anon:23960kB inactive_anon:0kB active_file:0kB inactive_file:174188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118416kB dirty:792kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14500kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.959160][T13205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.959209][T13205] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.959266][T13205] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 284.959320][T13205] Node 0 DMA32 free:1314088kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23960kB inactive_anon:0kB active_file:0kB inactive_file:174188kB unevictable:0kB writepending:792kB zspages:0kB present:3129332kB managed:2546704kB mlocked:0kB bounce:0kB free_pcp:46432kB local_pcp:25156kB free_cma:0kB [ 284.959380][T13205] lowmem_reserve[]: 0 0 0 0 0 [ 284.959432][T13205] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.959486][T13205] lowmem_reserve[]: 0 0 0 [ 285.062657][T13198] tipc: Failed to remove unknown binding: 66,0,0/1240912549:1106457088/1106457090 [ 285.062688][T13198] tipc: Failed to remove unknown binding: 66,0,0/1240912549:1106457088/1106457089 [ 285.062990][T13198] tipc: Failed to remove unknown binding: 66,0,0/1240912549:1106457088/1106457090 [ 285.063012][T13198] tipc: Failed to remove unknown binding: 66,0,0/1240912549:1106457088/1106457089 [ 285.137056][T13212] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 285.142597][T13205] 0 0 [ 285.142622][T13205] Node 1 Normal free:3940716kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.142678][T13205] lowmem_reserve[]: 0 0 0 0 0 [ 285.142710][T13205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 285.142819][T13205] Node 0 DMA32: 932*4kB (UME) 1693*8kB (UME) 593*16kB (UM) 396*32kB (UME) 121*64kB (UME) 34*128kB (UME) 13*256kB (UM) 2*512kB (ME) 3*1024kB (UME) 3*2048kB (M) 305*4096kB (UM) = 1314376kB [ 285.142965][T13205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.143058][T13205] Node 1 Normal: 1*4kB (M) 1*8kB (M) 5*16kB (UM) 2*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (M) = 3940764kB [ 285.143199][T13205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.143214][T13205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.143229][T13205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.143244][T13205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.143259][T13205] 44116 total pagecache pages [ 285.143266][T13205] 0 pages in swap cache [ 285.143272][T13205] Free swap = 124996kB [ 285.143294][T13205] Total swap = 124996kB [ 285.143302][T13205] 2097051 pages RAM [ 285.143308][T13205] 0 pages HighMem/MovableOnly [ 285.143315][T13205] 428759 pages reserved [ 285.143321][T13205] 0 pages cma reserved [ 285.244937][T13224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1828'. [ 285.475035][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 285.819337][T13240] IPVS: Scheduler module ip_vs_sip not found [ 285.819551][T13239] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 285.873629][T13239] 8021q: adding VLAN 0 to HW filter on device bond9 [ 286.318417][T13285] netlink: 'syz.3.1846': attribute type 10 has an invalid length. [ 286.318457][T13285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1846'. [ 286.347678][T13287] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.831957][T13311] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1851'. [ 286.848202][T13311] syzkaller1: entered promiscuous mode [ 286.853905][T13311] syzkaller1: entered allmulticast mode [ 287.123053][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 287.468881][T13338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1857'. [ 287.814893][T13356] netlink: 'syz.3.1862': attribute type 2 has an invalid length. [ 287.933154][T13360] pim6reg99999999: entered allmulticast mode [ 288.054066][T13369] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1862'. [ 288.439790][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'. [ 288.449931][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 288.459419][T13386] netlink: 'syz.4.1873': attribute type 12 has an invalid length. [ 288.482277][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'. [ 288.493078][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 288.500476][ T5849] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.501484][ T5850] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.501519][ T5850] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.520439][T13386] netlink: 'syz.4.1873': attribute type 12 has an invalid length. [ 288.561765][T13393] nbd: must specify a size in bytes for the device [ 288.588889][T13393] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 288.632835][T13393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.666070][T13393] bond1: (slave veth7): Enslaving as an active interface with a down link [ 288.833220][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 288.999443][T13426] openvswitch: netlink: Flow key attr not present in new flow. [ 289.034611][T13428] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 289.121625][T13428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.160004][T13430] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 289.206708][T13436] bridge4: entered promiscuous mode [ 289.231721][T13444] netlink: 'syz.1.1888': attribute type 2 has an invalid length. [ 289.249163][T13444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1888'. [ 289.249840][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1888'. [ 289.256729][T13444] nbd: must specify at least one socket [ 289.256948][T13445] nbd: must specify at least one socket [ 289.318039][T13449] geneve4: entered promiscuous mode [ 289.318086][T13449] geneve4: entered allmulticast mode [ 289.671044][T13470] netlink: 'syz.2.1896': attribute type 40 has an invalid length. [ 289.740747][ T5842] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.745782][ T5850] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.762205][ T5849] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.762353][ T5849] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.806305][T13478] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 290.593249][T13518] bond6: option mode: invalid value (7) [ 290.608301][T13518] bond6 (unregistering): Released all slaves [ 290.849043][T13533] bond8 (unregistering): Released all slaves [ 291.216674][T13575] validate_nla: 3 callbacks suppressed [ 291.219036][T13575] netlink: 'syz.2.1917': attribute type 2 has an invalid length. [ 291.682928][T13596] sctp: [Deprecated]: syz.3.1926 (pid 13596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.682928][T13596] Use struct sctp_sack_info instead [ 291.699680][T13596] sctp: [Deprecated]: syz.3.1926 (pid 13596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.699680][T13596] Use struct sctp_sack_info instead [ 291.809106][T13604] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 291.979029][T13610] xt_policy: output policy not valid in PREROUTING and INPUT [ 292.190924][ T26] block nbd3: Possible stuck request ffff888026e10000: control (read@0,1024B). Runtime 30 seconds [ 292.190946][ T2354] block nbd4: Possible stuck request ffff888026e4e1c0: control (read@0,4096B). Runtime 30 seconds [ 292.195712][ T26] block nbd3: Possible stuck request ffff888026e101c0: control (read@1024,1024B). Runtime 30 seconds [ 292.195774][ T26] block nbd3: Possible stuck request ffff888026e10380: control (read@2048,1024B). Runtime 30 seconds [ 292.195813][ T26] block nbd3: Possible stuck request ffff888026e10540: control (read@3072,1024B). Runtime 30 seconds [ 292.420737][T13628] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 292.429465][T13628] syzkaller0: entered promiscuous mode [ 292.429826][T13628] syzkaller0: entered allmulticast mode [ 292.515640][T13631] __nla_validate_parse: 16 callbacks suppressed [ 292.515696][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 292.523495][T13633] tipc: Enabled bearer , priority 0 [ 292.631716][T13638] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 292.725621][T13641] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.735188][T13636] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.742909][T13641] tipc: Enabled bearer , priority 0 [ 293.007176][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 293.024942][T13661] siw: device registration error -23 [ 293.031016][T13660] netlink: 'syz.2.1947': attribute type 4 has an invalid length. [ 293.055586][ T5741] lo speed is unknown, defaulting to 1000 [ 293.055637][ T5741] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 293.105533][T13660] netlink: 'syz.2.1947': attribute type 4 has an invalid length. [ 293.117986][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1949'. [ 293.118464][T12545] lo speed is unknown, defaulting to 1000 [ 293.118485][T12545] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 293.594915][T13689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1955'. [ 293.894708][T13705] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1961'. [ 293.895179][T13706] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1961'. [ 293.959377][T13711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.839791][T13724] bond0: entered promiscuous mode [ 294.845602][T13724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.885527][T13728] netlink: 'syz.0.1967': attribute type 10 has an invalid length. [ 294.894520][T13728] syz_tun: entered promiscuous mode [ 294.943610][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1967'. [ 295.126733][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 295.185196][T13756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1976'. [ 295.187420][T13754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1976'. [ 296.134286][T13820] openvswitch: netlink: Missing valid actions attribute. [ 297.059362][T13847] batadv_slave_1: entered promiscuous mode [ 297.070132][T13845] batadv_slave_1: left promiscuous mode [ 297.363717][T13864] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 297.363831][T13864] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 297.484419][T13861] tipc: Resetting bearer [ 297.498198][T13861] 8021q: adding VLAN 0 to HW filter on device  [ 297.507542][T13861] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.518228][T13861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.608798][T13861] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 297.608890][T12545] lo speed is unknown, defaulting to 1000 [ 297.608905][T12545] syz2: Port: 1 Link ACTIVE [ 297.642396][T13877] __nla_validate_parse: 9 callbacks suppressed [ 297.642679][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2009'. [ 297.660582][T13880] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2010'. [ 297.660592][T13879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.682551][T13880] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig [ 297.684641][T13884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.722332][T13886] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2009'. [ 297.774111][T13888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2011'. [ 298.146325][T13910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2018'. [ 298.211061][T13911] netlink: 'syz.3.2018': attribute type 16 has an invalid length. [ 298.211428][T13911] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2018'. [ 298.390684][ T12] IPVS: starting estimator thread 0... [ 298.397807][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2021'. [ 298.398216][T13925] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2021'. [ 298.490698][T13927] IPVS: using max 28 ests per chain, 67200 per kthread [ 299.023455][T13960] ip_tables: iptables: counters copy to user failed while replacing table [ 299.094881][T13966] netlink: 'syz.1.2032': attribute type 2 has an invalid length. [ 299.336415][T13962] bridge0: port 3(vlan2) entered disabled state [ 299.336618][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.337041][T13962] bridge0: port 1(û) entered disabled state [ 299.745166][T13962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.781760][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 299.790842][T13962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.870429][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 300.000730][T13986] veth1_to_bond: entered allmulticast mode [ 300.003107][T13987] veth1_to_bond: entered promiscuous mode [ 300.111883][T13988] veth1_to_bond (unregistering): left promiscuous mode [ 300.111950][T13988] veth1_to_bond (unregistering): left allmulticast mode [ 300.176008][ T5850] netdevsim netdevsim0 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.176087][ T5850] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.176114][ T5850] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.176142][ T5850] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.249445][T13997] bridge0: port 3(bond0) entered blocking state [ 300.249543][T13997] bridge0: port 3(bond0) entered disabled state [ 300.298150][T13997] bond0: entered promiscuous mode [ 300.303544][T13997] bond_slave_0: entered promiscuous mode [ 300.304935][T13997] bond_slave_1: entered promiscuous mode [ 300.324171][T13997] bridge0: port 3(bond0) entered blocking state [ 300.324331][T13997] bridge0: port 3(bond0) entered forwarding state [ 300.379243][T14006] tipc: Enabling of bearer rejected, already enabled [ 300.385173][T14006] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 300.388849][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2042'. [ 300.476202][T13998] hsr_slave_1 (unregistering): left promiscuous mode [ 300.848131][T14024] smbdirect: ib_dev[syz2] removed [ 301.995549][T14070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.022979][T14070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.701272][T14116] tap0: tun_chr_ioctl cmd 1074025698 [ 302.753606][T14120] netlink: 'syz.4.2075': attribute type 1 has an invalid length. [ 303.301997][T14152] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 303.463923][T14166] __nla_validate_parse: 5 callbacks suppressed [ 303.471217][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 303.703552][T14175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2090'. [ 303.718416][T14175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2090'. [ 303.991954][T14184] netlink: Setting conntrack mark requires 'commit' flag. [ 303.992014][T14184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.197233][T14188] bond5: (slave veth0_to_bond): Releasing backup interface [ 304.302128][T14188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.963891][T14212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2101'. [ 305.261197][T14232] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2103'. [ 305.385964][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 305.501900][T14248] xfrm0: Caught tx_queue_len zero misconfig [ 305.624225][T14258] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2116'. [ 305.786290][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2119'. [ 305.786336][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2119'. [ 305.942772][T14280] ip6tnl2: entered promiscuous mode [ 305.950280][T14280] ip6tnl2: entered allmulticast mode [ 306.096489][T14290] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 306.197854][T14301] netlink: 'syz.0.2126': attribute type 4 has an invalid length. [ 306.198952][T14301] netlink: 'syz.0.2126': attribute type 4 has an invalid length. [ 306.273906][T14306] netlink: 'syz.4.2127': attribute type 13 has an invalid length. [ 306.297086][T14304] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 306.441472][ T5758] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.637678][T14318] netlink: 'syz.1.2129': attribute type 10 has an invalid length. [ 306.694957][T14320] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2129'. [ 306.921425][T14336] veth1_to_team: entered promiscuous mode [ 306.927419][T14336] veth1_to_team: left promiscuous mode [ 307.152916][ T5758] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.266909][T14361] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 307.443369][T14367] netlink: 'syz.1.2143': attribute type 11 has an invalid length. [ 307.452146][T14369] nbd: nbd64 already in use [ 307.458770][T14372] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 308.228384][T14433] IPv6: addrconf: prefix option has invalid lifetime [ 308.246434][T14431] macsec1: entered promiscuous mode [ 308.246475][T14431] macsec1: entered allmulticast mode [ 308.349157][T14445] IPVS: Scheduler module ip_vs_sip not found [ 308.636439][T14407] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 308.648302][T14407] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 308.648365][T14407] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 308.856604][T14457] __nla_validate_parse: 10 callbacks suppressed [ 308.865344][T14457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2160'. [ 308.941400][T14460] netlink: 'syz.4.2162': attribute type 9 has an invalid length. [ 308.950872][T14460] netlink: 'syz.4.2162': attribute type 6 has an invalid length. [ 308.959224][T14460] netlink: 'syz.4.2162': attribute type 7 has an invalid length. [ 308.968040][T14460] netlink: 'syz.4.2162': attribute type 8 has an invalid length. [ 309.336013][T14485] syzkaller0: entered promiscuous mode [ 309.336059][T14485] syzkaller0: entered allmulticast mode [ 309.340545][T14485] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2171'. [ 309.351519][T14486] netlink: 'syz.0.2168': attribute type 1 has an invalid length. [ 309.356922][T14485] x_tables: duplicate underflow at hook 2 [ 309.456085][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2171'. [ 309.540830][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2172'. [ 309.658299][T14499] block nbd7: server does not support multiple connections per device. [ 309.672712][T14499] block nbd7: shutting down sockets [ 309.912997][T14515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2177'. [ 310.222861][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 310.293446][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'. [ 310.349430][T14532] hsr_slave_1 (unregistering): left promiscuous mode [ 310.437792][T14537] syzkaller0: entered promiscuous mode [ 310.443567][T14537] syzkaller0: entered allmulticast mode [ 310.463548][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2189'. [ 310.463600][T14547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2189'. [ 310.463630][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2189'. [ 310.649941][T14556] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 313.353920][T14553] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 313.433158][T14567] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 313.757462][T14601] validate_nla: 3 callbacks suppressed [ 313.757512][T14601] netlink: 'syz.2.2201': attribute type 10 has an invalid length. [ 313.799537][T14607] netlink: 'syz.4.2204': attribute type 13 has an invalid length. [ 313.832970][T14605] macsec3: entered allmulticast mode [ 313.838438][T14605] veth1_macvtap: entered allmulticast mode [ 313.847557][T14605] veth1_macvtap: left allmulticast mode [ 313.981472][ T5748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 314.055227][T14620] IPv6: sit1: Disabled Multicast RS [ 314.170655][T14629] __nla_validate_parse: 7 callbacks suppressed [ 314.177038][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 314.177450][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'. [ 314.187996][T14634] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 314.207069][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 314.216269][T14629] bond0: left promiscuous mode [ 314.222148][T14629] ip6gre1: left promiscuous mode [ 314.224473][T14637] netlink: 'syz.0.2210': attribute type 4 has an invalid length. [ 314.224492][T14637] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2210'. [ 314.247182][T14629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.257104][T14629] bond2: (slave bond0): making interface the new active one [ 314.283171][T14629] bond2: (slave bond0): Enslaving as an active interface with an up link [ 314.479906][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2214'. [ 314.535748][T14650] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2216'. [ 314.600303][T12534] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.094676][T14690] netlink: NAT attribute has 5 unknown bytes [ 315.094740][T14690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.118212][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 315.463662][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2227'. [ 315.558666][T14702] only policy match revision 0 supported [ 315.558700][T14702] unable to load match [ 315.999203][T14727] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2230'. [ 316.007084][T14736] netlink: 'syz.3.2233': attribute type 9 has an invalid length. [ 316.226749][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 316.237095][T14731] tipc: Resetting bearer [ 316.627629][T14744] hsr0: entered allmulticast mode [ 316.627666][T14744] hsr_slave_0: entered allmulticast mode [ 316.635762][T14745] hsr_slave_0: left promiscuous mode [ 316.654120][T14745] hsr0 (unregistering): left allmulticast mode [ 316.680620][ T5849] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 52340 - 0 [ 316.680679][ T5849] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 52340 - 0 [ 316.680726][ T5849] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 52340 - 0 [ 316.680759][ T5849] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 52340 - 0 [ 316.847870][T14758] team_slave_1: Caught tx_queue_len zero misconfig [ 317.155394][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.268205][T14786] netlink: 'syz.2.2242': attribute type 1 has an invalid length. [ 317.347730][T14797] netlink: 'syz.4.2245': attribute type 1 has an invalid length. [ 317.571734][T14797] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.830442][T14804] bond8: (slave veth3): Enslaving as an active interface with a down link [ 317.888915][T14806] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 317.904840][T14806] bond8: (slave batadv1): making interface the new active one [ 317.913131][T14806] batadv1: entered promiscuous mode [ 317.923062][T14806] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 317.965022][T14797] bond8 (unregistering): (slave veth3): Releasing active interface [ 317.994670][T14797] bond8 (unregistering): (slave batadv1): Releasing active interface [ 317.994726][T14797] batadv1: left promiscuous mode [ 318.027564][T14797] bond8 (unregistering): Released all slaves [ 318.289372][T14846] C: renamed from veth1_to_team (while UP) [ 318.322937][T14847] ip6tnl2: entered allmulticast mode [ 318.346702][T14847] netlink: 'syz.4.2258': attribute type 1 has an invalid length. [ 318.419762][T14852] block nbd0: reconnected socket [ 318.423866][T14852] block nbd0: reconnected socket [ 318.423883][T14852] nbd: socks must be embedded in a SOCK_ITEM attr [ 318.476411][ T5622] block nbd0: Receive control failed (result -32) [ 318.477164][ T5620] block nbd0: Receive control failed (result -32) [ 319.200073][T14879] [ 319.202438][T14879] ====================================================== [ 319.210765][T14879] WARNING: possible circular locking dependency detected [ 319.217803][T14879] syzkaller #0 Not tainted [ 319.222230][T14879] ------------------------------------------------------ [ 319.229700][T14879] syz.4.2266/14879 is trying to acquire lock: [ 319.236123][T14879] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 319.246679][T14879] [ 319.246679][T14879] but task is already holding lock: [ 319.254053][T14879] ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 319.264169][T14879] [ 319.264169][T14879] which lock already depends on the new lock. [ 319.264169][T14879] [ 319.274749][T14879] [ 319.274749][T14879] the existing dependency chain (in reverse order) is: [ 319.283861][T14879] [ 319.283861][T14879] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 319.291609][T14879] cpus_read_lock+0x42/0x160 [ 319.296731][T14879] static_key_slow_inc+0x12/0x30 [ 319.302202][T14879] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 319.308452][T14879] nbd_genl_foreach_sock+0x265/0x450 [ 319.314265][T14879] nbd_genl_reconfigure+0xbbb/0x1040 [ 319.320087][T14879] genl_family_rcv_msg_doit+0x233/0x340 [ 319.326162][T14879] genl_rcv_msg+0x614/0x7a0 [ 319.331199][T14879] netlink_rcv_skb+0x226/0x4a0 [ 319.336515][T14879] genl_rcv+0x28/0x40 [ 319.341028][T14879] netlink_unicast+0x7bd/0x940 [ 319.347721][T14879] netlink_sendmsg+0x813/0xb40 [ 319.353460][T14879] sock_sendmsg_nosec+0x13a/0x180 [ 319.359099][T14879] ____sys_sendmsg+0x54e/0x850 [ 319.364379][T14879] ___sys_sendmsg+0x2a5/0x360 [ 319.369574][T14879] __x64_sys_sendmsg+0x1b1/0x290 [ 319.375050][T14879] do_syscall_64+0x166/0x520 [ 319.380500][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.386900][T14879] [ 319.386900][T14879] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 319.394537][T14879] __mutex_lock+0x19d/0x1550 [ 319.399645][T14879] nbd_queue_rq+0x373/0xff0 [ 319.404660][T14879] blk_mq_dispatch_rq_list+0x499/0x1990 [ 319.411250][T14879] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 319.418174][T14879] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 319.424666][T14879] blk_mq_run_work_fn+0x16c/0x300 [ 319.430199][T14879] process_scheduled_works+0xc3d/0x1630 [ 319.436259][T14879] worker_thread+0xa47/0xfb0 [ 319.441367][T14879] kthread+0x38b/0x480 [ 319.446034][T14879] ret_from_fork+0x514/0xb70 [ 319.451131][T14879] ret_from_fork_asm+0x1a/0x30 [ 319.456419][T14879] [ 319.456419][T14879] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 319.463613][T14879] __mutex_lock+0x19d/0x1550 [ 319.468720][T14879] nbd_queue_rq+0xc1/0xff0 [ 319.473652][T14879] blk_mq_dispatch_rq_list+0x499/0x1990 [ 319.479710][T14879] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 319.486547][T14879] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 319.493035][T14879] blk_mq_run_work_fn+0x16c/0x300 [ 319.498569][T14879] process_scheduled_works+0xc3d/0x1630 [ 319.504623][T14879] worker_thread+0xa47/0xfb0 [ 319.509726][T14879] kthread+0x38b/0x480 [ 319.514325][T14879] ret_from_fork+0x514/0xb70 [ 319.519420][T14879] ret_from_fork_asm+0x1a/0x30 [ 319.524695][T14879] [ 319.524695][T14879] -> #4 (set->srcu){.+.+}-{0:0}: [ 319.531803][T14879] __synchronize_srcu+0xc9/0x2f0 [ 319.537253][T14879] elevator_switch+0x1e8/0x7b0 [ 319.542623][T14879] elevator_change+0x2fa/0x480 [ 319.548367][T14879] elevator_set_default+0x375/0x440 [ 319.554107][T14879] blk_register_queue+0x3f3/0x4e0 [ 319.559661][T14879] __add_disk+0x6cb/0xe30 [ 319.564678][T14879] add_disk_fwnode+0x100/0x3a0 [ 319.569950][T14879] nbd_dev_add+0x733/0xb60 [ 319.574881][T14879] nbd_init+0x168/0x1f0 [ 319.579558][T14879] do_one_initcall+0x250/0x870 [ 319.584837][T14879] do_initcall_level+0x10a/0x1a0 [ 319.590290][T14879] do_initcalls+0x59/0xa0 [ 319.595131][T14879] kernel_init_freeable+0x29d/0x3e0 [ 319.600933][T14879] kernel_init+0x22/0x1d0 [ 319.605774][T14879] ret_from_fork+0x514/0xb70 [ 319.610867][T14879] ret_from_fork_asm+0x1a/0x30 [ 319.616143][T14879] [ 319.616143][T14879] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 319.623950][T14879] __mutex_lock+0x19d/0x1550 [ 319.629068][T14879] elevator_change+0x1af/0x480 [ 319.634364][T14879] elevator_set_none+0xb5/0x140 [ 319.639745][T14879] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 319.646083][T14879] nbd_start_device+0x189/0xb30 [ 319.651536][T14879] nbd_genl_connect+0x167d/0x1cd0 [ 319.657071][T14879] genl_family_rcv_msg_doit+0x233/0x340 [ 319.663130][T14879] genl_rcv_msg+0x614/0x7a0 [ 319.668155][T14879] netlink_rcv_skb+0x226/0x4a0 [ 319.673429][T14879] genl_rcv+0x28/0x40 [ 319.677921][T14879] netlink_unicast+0x7bd/0x940 [ 319.683309][T14879] netlink_sendmsg+0x813/0xb40 [ 319.689289][T14879] sock_sendmsg_nosec+0x13a/0x180 [ 319.694848][T14879] ____sys_sendmsg+0x54e/0x850 [ 319.700221][T14879] ___sys_sendmsg+0x2a5/0x360 [ 319.705409][T14879] __x64_sys_sendmsg+0x1b1/0x290 [ 319.710971][T14879] do_syscall_64+0x166/0x520 [ 319.717652][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.726841][T14879] [ 319.726841][T14879] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 319.736323][T14879] blk_alloc_queue+0x544/0x690 [ 319.742336][T14879] __blk_mq_alloc_disk+0x194/0x390 [ 319.748012][T14879] nbd_dev_add+0x494/0xb60 [ 319.756270][T14879] nbd_init+0x168/0x1f0 [ 319.761502][T14879] do_one_initcall+0x250/0x870 [ 319.767152][T14879] do_initcall_level+0x10a/0x1a0 [ 319.774615][T14879] do_initcalls+0x59/0xa0 [ 319.779708][T14879] kernel_init_freeable+0x29d/0x3e0 [ 319.786136][T14879] kernel_init+0x22/0x1d0 [ 319.793393][T14879] ret_from_fork+0x514/0xb70 [ 319.799916][T14879] ret_from_fork_asm+0x1a/0x30 [ 319.808088][T14879] [ 319.808088][T14879] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 319.815918][T14879] fs_reclaim_acquire+0x71/0x100 [ 319.821575][T14879] kmem_cache_alloc_noprof+0x5f/0x600 [ 319.827643][T14879] __kernfs_iattrs+0xdd/0x380 [ 319.833032][T14879] kernfs_iop_setattr+0xe6/0x3f0 [ 319.838688][T14879] notify_change+0xbba/0xea0 [ 319.843921][T14879] do_truncate+0x1c2/0x250 [ 319.849226][T14879] path_openat+0x15b5/0x1d60 [ 319.856033][T14879] do_file_open+0x23e/0x4a0 [ 319.861698][T14879] do_sys_openat2+0x115/0x200 [ 319.867280][T14879] __x64_sys_openat+0x138/0x170 [ 319.873199][T14879] do_syscall_64+0x166/0x520 [ 319.879331][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.886477][T14879] [ 319.886477][T14879] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 319.895287][T14879] __lock_acquire+0x15ff/0x2e50 [ 319.900927][T14879] lock_acquire+0x115/0x350 [ 319.905977][T14879] down_read+0x4a/0x330 [ 319.910652][T14879] kernfs_iop_permission+0x7f/0x430 [ 319.917958][T14879] inode_permission+0x3de/0x5f0 [ 319.923716][T14879] cgroup_attach_permissions+0x28e/0x9f0 [ 319.929895][T14879] __cgroup_procs_write+0x24b/0x320 [ 319.935990][T14879] cgroup_threads_write+0x24/0x50 [ 319.941972][T14879] cgroup_file_write+0x331/0x8f0 [ 319.947440][T14879] kernfs_fop_write_iter+0x3a4/0x540 [ 319.953351][T14879] vfs_write+0x612/0xba0 [ 319.958305][T14879] ksys_write+0x150/0x270 [ 319.963243][T14879] do_syscall_64+0x166/0x520 [ 319.968454][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.974882][T14879] [ 319.974882][T14879] other info that might help us debug this: [ 319.974882][T14879] [ 319.985114][T14879] Chain exists of: [ 319.985114][T14879] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 319.985114][T14879] [ 319.999187][T14879] Possible unsafe locking scenario: [ 319.999187][T14879] [ 320.006624][T14879] CPU0 CPU1 [ 320.011983][T14879] ---- ---- [ 320.017347][T14879] rlock(cpu_hotplug_lock); [ 320.021924][T14879] lock(&nsock->tx_lock); [ 320.028850][T14879] lock(cpu_hotplug_lock); [ 320.035858][T14879] rlock(&root->kernfs_iattr_rwsem); [ 320.041219][T14879] [ 320.041219][T14879] *** DEADLOCK *** [ 320.041219][T14879] [ 320.049487][T14879] locks held by syz.4.2266/14879: 5, last CPU#1: [ 320.055809][T14879] #0: ffff88807700feb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 320.064877][T14879] #1: ffff88807fec2460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 320.073946][T14879] #2: ffff888075a2e080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 320.083708][T14879] #3: ffffffff8ed9c560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 320.093453][T14879] #4: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 320.104065][T14879] [ 320.104065][T14879] stack backtrace: [ 320.109953][T14879] CPU: 1 UID: 0 PID: 14879 Comm: syz.4.2266 Not tainted syzkaller #0 PREEMPT(full) [ 320.119310][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.129391][T14879] Call Trace: [ 320.132663][T14879] [ 320.135598][T14879] dump_stack_lvl+0xe8/0x150 [ 320.140214][T14879] print_circular_bug+0x2e2/0x300 [ 320.145256][T14879] check_noncircular+0x12f/0x150 [ 320.150194][T14879] __lock_acquire+0x15ff/0x2e50 [ 320.155044][T14879] ? rcu_is_watching+0x16/0xb0 [ 320.159806][T14879] ? trace_sched_exit_tp+0x3a/0x130 [ 320.165017][T14879] lock_acquire+0x115/0x350 [ 320.169729][T14879] ? kernfs_iop_permission+0x7f/0x430 [ 320.175118][T14879] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 320.180936][T14879] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 320.186751][T14879] down_read+0x4a/0x330 [ 320.190973][T14879] ? kernfs_iop_permission+0x7f/0x430 [ 320.196538][T14879] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 320.202364][T14879] kernfs_iop_permission+0x7f/0x430 [ 320.207561][T14879] ? irqentry_exit+0x218/0x910 [ 320.212341][T14879] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 320.218144][T14879] inode_permission+0x3de/0x5f0 [ 320.222995][T14879] cgroup_attach_permissions+0x28e/0x9f0 [ 320.228640][T14879] __cgroup_procs_write+0x24b/0x320 [ 320.234317][T14879] cgroup_threads_write+0x24/0x50 [ 320.239339][T14879] ? __pfx_cgroup_threads_write+0x10/0x10 [ 320.245615][T14879] cgroup_file_write+0x331/0x8f0 [ 320.250753][T14879] ? __pfx_cgroup_file_write+0x10/0x10 [ 320.256672][T14879] ? __kmalloc_noprof+0x38c/0x720 [ 320.262056][T14879] ? __pfx_cgroup_file_write+0x10/0x10 [ 320.267702][T14879] kernfs_fop_write_iter+0x3a4/0x540 [ 320.273183][T14879] vfs_write+0x612/0xba0 [ 320.278576][T14879] ? __pfx_vfs_write+0x10/0x10 [ 320.284247][T14879] ? __fget_files+0x2a/0x420 [ 320.289434][T14879] ksys_write+0x150/0x270 [ 320.294131][T14879] ? __pfx_ksys_write+0x10/0x10 [ 320.299705][T14879] do_syscall_64+0x166/0x520 [ 320.304775][T14879] ? trace_irq_disable+0x3b/0x140 [ 320.310411][T14879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.316781][T14879] ? clear_bhb_loop+0x70/0xc0 [ 320.321720][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.328690][T14879] RIP: 0033:0x7fa48d59e159 [ 320.333314][T14879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.354074][T14879] RSP: 002b:00007fa48e39b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.362664][T14879] RAX: ffffffffffffffda RBX: 00007fa48d826180 RCX: 00007fa48d59e159 [ 320.371566][T14879] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000007 [ 320.379950][T14879] RBP: 00007fa48d635024 R08: 0000000000000000 R09: 0000000000000000 [ 320.388175][T14879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.396239][T14879] R13: 00007fa48d826218 R14: 00007fa48d826180 R15: 00007ffdb7f362a8 [ 320.404675][T14879] [ 322.270750][ T2354] block nbd4: Possible stuck request ffff888026e4e1c0: control (read@0,4096B). Runtime 60 seconds [ 322.282613][ T26] block nbd3: Possible stuck request ffff888026e10000: control (read@0,1024B). Runtime 60 seconds [ 322.282668][ T26] block nbd3: Possible stuck request ffff888026e101c0: control (read@1024,1024B). Runtime 60 seconds [ 322.282690][ T26] block nbd3: Possible stuck request ffff888026e10380: control (read@2048,1024B). Runtime 60 seconds [ 322.282711][ T26] block nbd3: Possible stuck request ffff888026e10540: control (read@3072,1024B). Runtime 60 seconds [ 324.730234][ T4981] udevd[4981]: worker [12227] /devices/virtual/block/nbd4 is taking a long time [ 324.730306][ T4981] udevd[4981]: worker [12099] /devices/virtual/block/nbd3 is taking a long time