last executing test programs: 4m4.264864356s ago: executing program 1 (id=777): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) unshare(0x20000400) r1 = socket(0x26, 0x5, 0x0) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x0, 0x3}, 0x20) 4m3.135010961s ago: executing program 1 (id=784): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40001) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 4m2.468904844s ago: executing program 1 (id=787): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a"], 0x34}}, 0x4040) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x123) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x49, &(0x7f0000000600), 0x2a) epoll_create1(0x80000) 4m0.796782635s ago: executing program 1 (id=803): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000b3b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000001300)=""/145, 0x41100, 0xa}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfec4, 0x5a}}}}, [@NL80211_ATTR_DURATION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0804}, 0x80) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0xfff5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}, {"6ae0228d"}}}}}}}, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x70, 0x0, [{@multicast1}, {@local}, {@multicast2}, {@loopback}, {@initdev}, {@private}, {@remote}]}}) (async) write(r4, &(0x7f00000000c0)="ec", 0x1) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) recvmmsg(r4, &(0x7f0000000240), 0x2a, 0x0, 0x0) 4m0.589359058s ago: executing program 1 (id=807): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="016f080001002700000027000000450000400000270000849078ac1e0001ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba000000b0780018fe06e2d4c3d9050a00000000000000000008d58838068b833250b7a34b22236b1a9f5df74cd88f3fa32862337bb72e3f7fd31c189a7415fd91eba7da864d46d0103db90809e0"], 0x4e) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r0, 0x89e0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x41}, 0x8080) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r3], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000600"/28], 0x5c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) r12 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x0) getsockopt$sock_timeval(r12, 0x1, 0x43, &(0x7f0000000500), &(0x7f0000000540)=0x10) r13 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r13, &(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x24}, 0x4, 0x700000000000000}, 0x48c0) 3m59.781706605s ago: executing program 1 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007100000725bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="7aec00000b0000000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x10080845}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001800835efeffffffffffffff02141004fd00fe020003000008000400", @ANYRES32=r3, @ANYBLOB="08000700640111011edb95a48239719c7244c14aa9be0247d83a6a6e475fc7ef39cf354d6e794073e4da63058f7948535f213b2b07712fa5a856d66477b7a0a4939b852ca5e2e3447202a33104ac2fddef21824a923420cf6ee962968ee98e43a3faad3784277c45bdf76b237525f03e832dfac24c27e955f8a854491e3126c8a04a12370333d2e943bd059163212f6f826f88d8a2a5e16c834206b24d6c9a1d27ba74eaf7cdc230030c2cac1111dc5962a84b6c432cde160fb6b45bc021cc5ecf22a5b56d4e8204465785ef5672aaaf9932a844e5541032e96f897f09bd754fc370c365"], 0x2c}, 0x1, 0xffffff7f}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)="666f408b39a64d8b1951f3bd890cea60a6d58e1b3facc7d44fa5709039b78a50ec274cdb46afa805498d88a2c34be980fcf53e4ca7f85846c4e676dba6d45c71e9c64992529cd3d9001f13d7ac82a8420dec701860d280f9858fef0a2d4e73a65803652b35c41046f8850bd5eb11", &(0x7f0000000700), 0xffffff0b, r5}, 0x38) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xc) r8 = accept(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x9, 0x8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r11, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="03167bb51c768a3f0029bd707ca43e0f0000000022390cb810c8a1e8aaa0fa32a1eda52674d64e41062e01006fd53a431c427a7747bec238a14f0f8cd0000000", @ANYRES32=r11, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/pid_for_children\x00') sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8}, 0x4008004) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd700005000000020000000900010073797a300000000014000200776c616e30000000000000008000c9f09a030b"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) 3m44.646271692s ago: executing program 32 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007100000725bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="7aec00000b0000000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x10080845}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001800835efeffffffffffffff02141004fd00fe020003000008000400", @ANYRES32=r3, @ANYBLOB="08000700640111011edb95a48239719c7244c14aa9be0247d83a6a6e475fc7ef39cf354d6e794073e4da63058f7948535f213b2b07712fa5a856d66477b7a0a4939b852ca5e2e3447202a33104ac2fddef21824a923420cf6ee962968ee98e43a3faad3784277c45bdf76b237525f03e832dfac24c27e955f8a854491e3126c8a04a12370333d2e943bd059163212f6f826f88d8a2a5e16c834206b24d6c9a1d27ba74eaf7cdc230030c2cac1111dc5962a84b6c432cde160fb6b45bc021cc5ecf22a5b56d4e8204465785ef5672aaaf9932a844e5541032e96f897f09bd754fc370c365"], 0x2c}, 0x1, 0xffffff7f}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)="666f408b39a64d8b1951f3bd890cea60a6d58e1b3facc7d44fa5709039b78a50ec274cdb46afa805498d88a2c34be980fcf53e4ca7f85846c4e676dba6d45c71e9c64992529cd3d9001f13d7ac82a8420dec701860d280f9858fef0a2d4e73a65803652b35c41046f8850bd5eb11", &(0x7f0000000700), 0xffffff0b, r5}, 0x38) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xc) r8 = accept(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x9, 0x8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r11, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="03167bb51c768a3f0029bd707ca43e0f0000000022390cb810c8a1e8aaa0fa32a1eda52674d64e41062e01006fd53a431c427a7747bec238a14f0f8cd0000000", @ANYRES32=r11, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/pid_for_children\x00') sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8}, 0x4008004) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd700005000000020000000900010073797a300000000014000200776c616e30000000000000008000c9f09a030b"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) 7.774861871s ago: executing program 2 (id=1876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18001, 0x0) (async, rerun: 32) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xd9, &(0x7f0000000340)=""/217, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000080), 0x12) pselect6(0x40, &(0x7f0000000140)={0xfffffffffffffff9, 0x0, 0xf, 0x6, 0x0, 0x29, 0x8000040, 0x8000}, 0x0, &(0x7f0000000240)={0x7fffffffffffffff, 0x11a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4000000000000004}, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffffffffffe71) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000001e80)={&(0x7f0000000500)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/28, 0x1c}], 0x5, 0x0, 0x0, 0x4004}, 0xd0) (async) r7 = socket(0x2a, 0x80805, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1, @private0, 0x8}}, 0x0, 0x83}, 0x90) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000e342678b378b2775e480f836c45352f85fb54b73d0970c0fc8e32b9800c38f8b5221816d01b7aeed963e66bb7042f8bd5ab3b7b5fde1225711b9bc3617fec4cc180316f90e27dff6c0c8be9ab8b048e75db011f3d22b279add150fa9335fe39d170c21f0f1fc8eb65e13dda5", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) (async) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r1, &(0x7f0000000dc0)=ANY=[], 0x14) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write(0xffffffffffffffff, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0x67) (async, rerun: 64) tee(r8, r10, 0xfffffffffffffffd, 0x0) (async, rerun: 64) close(r8) (async, rerun: 32) close(r9) (rerun: 32) socket(0x1e, 0x4, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 7.096693055s ago: executing program 2 (id=1879): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c01000019000100ffffffff21000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a000000010000003f3052c4bc28579f778dadb8a91ec95398ff5f04bf220587de970dd540840d4c0fab6c4165632117d1a8b01a607d61c3bf458cb0ce18907b7106517d6f6bb3133149701e87f77ed483f418bea0ea58237331cea66a86bff5937316dd77d24319302bbbc33d0da7ce1f29", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000320000000000c4000500ff020000000000000000000000000001000000003c00000000000000ffffffff000000000000000000000000000000000002080002000000000000001f0d0000fe8000000000000000000000000000bb000000002b0000000a000000fe8000000000000000000000000000ff00000000000000000000000000000000ff0300007f000001000000000000000000000000000000006c0000000000000000000000000000000000000000000001023500000100"/308], 0x17c}}, 0x816) 6.621843707s ago: executing program 2 (id=1880): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5], 0x0, [0x1, 0xffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000080) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000440)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r11) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000002f78ba0bfec69a6f21189fe5c315513f4bbeb369c0a4bd9920d24e133e8769e4d853fddf59c498434863249bb7ac0ac8c0b4546e4eea6c9cd5b780f0db30e67bf541bffabefaabfed7cca77e257c45ae43c2e374227708c03003cbbe35b4b49cf4ad04b37e801b2a7eaaf3ad08be", @ANYRES16=r12, @ANYBLOB="010028bd7000ffdbdf2508000000"], 0x14}}, 0x44000) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0702000200000014000180060001000200000008180300ac2e000000000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004886}, 0x20000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400100001800db8d0000000000000000022000000000fe010000000008000400", @ANYRES32, @ANYBLOB="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"], 0x140}}, 0x60800) 5.285794662s ago: executing program 2 (id=1889): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x200000, {{@in=@multicast2, @in=@remote, 0xffff, 0x3ffe, 0x4e21, 0x8001, 0x0, 0x20}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x32}, @in=@remote, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7efffffe}, {0x0, 0x0, 0x4}, {0x3, 0x0, 0x2}, 0x70bd29, 0x3500, 0xa, 0x4, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}}}]}, 0x170}}, 0x24008800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x200, r2, 0x800, 0x0, 0x80000, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1d4, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ae144ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c28878d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b7a0850}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13a1c52d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18c15da4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67c54db8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x699a12c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c0c86f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91a2ff5}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33586058}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x599f7954}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b43ad8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x221d2d40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cc8268c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x661d7dc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b823969}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x790bcacf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26322383}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43b55269}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ce73cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14f2077c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1515466}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24554f6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a5fee5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67499e58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46c9a2ee}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x200}}, 0x0) 4.900578335s ago: executing program 2 (id=1894): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="2c305abdccd597b68b83775c8c41725c41081c336e1534f3", 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0002c7", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.681875548s ago: executing program 0 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000ff83000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4.288187799s ago: executing program 3 (id=1898): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='p', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.149780672s ago: executing program 2 (id=1899): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}]}, 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000020c0), 0x2, 0x0) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000037c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003800)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000003900)=0xe8) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003940)={0x0, 0x0, 0x0}, &(0x7f0000003980)=0xc) sendmsg$netlink(r4, &(0x7f0000003a00)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x450010}, 0xc, &(0x7f0000003780)=[{&(0x7f0000000a40)={0x1644, 0x2c, 0x408, 0x6, 0x25dfdbff, "", [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}, @generic="19cba017a8b07b7e5e4b1dde523ec8fbb324500eec1c34966816d6010a8d60d160fa2f179d2ab53df431a705dbde33ade2b904e629908aef09aca823babc701e935c6c59e1eb70ed4701a490dac009cb23df5a266b257b9a5d2a8fd14aa8831a196b4d36f1acff2ce4710e7177caa009abe560a2027201518021caa0240fb44e36d891f4f08fb07965247045f4b4a800cf809f36148641ed0bd7290f70e312ff16cf34a99192d3d0cb829f9686732ddb28fc439bcefe3e006752a17ec58aa7e66e04ed332e608063188e1605fe0bdd0cbf53ec2beabb426d19fdb04e2b624b3026a2d4a4b5edf9272a2d39666c1cd0536227", @generic="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", @nested={0x1a6, 0x133, 0x0, 0x1, [@nested={0x4, 0x15f}, @nested={0x4, 0x74}, @typed={0x8, 0x2c, 0x0, 0x0, @fd=r3}, @generic, @generic="0dfb4f9920c05e23fc23e447beba167bf401523d17fe111d929ebc2b2323896da2488e1c54cb191749e4efbd6b5c308d94387ac22ad2164f52cfb0f20d9c8f82716a422c982c36d9b00dcab74d4781d93769d77fbddb3e0d42150a87cbea626dceaa0c4498350a541f8d55418b05ad75073a8675da14d1a172f00c59e4d8043cf4c3e856a3b2ece648cf9aef2733ef5c45ad2877491f84b442d0492a497746243f4111ce60c78752d7c21d232c131714ba319c6d49210a5fef1b05bbbe6758f9639fa8f970f8c93b8faec7de9de1dfbb98894c2e32bc5e8da0896f40a5", @nested={0x4, 0x49}, @generic="cb2dce7d09d9b7d0bc69ebaa3599a4662f219d2a430862ffac898a693345970977f672089086f555000ac3411b42697540f7baa4242c320bf0f1006358c28e35ef8995e08b8b7445170793c3c14541d7d639d89e37197f1bc3e9fa20a242caba45de0e008a3b1166cf9950b47ad86c8cb4996584cdac6bb790153e6354f902e3d6b33310c1c9abf7ca59abbb1a0d140ddba8b38b170962f7d5f328db38", @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}]}, @nested={0x27e, 0x14f, 0x0, 0x1, [@nested={0x4, 0x119}, @generic="a83d6deb030d1321d8a7e19d9c17cc5a2d302cc8ac0830e10da1ff2ee9a235caf12405cd02d576465205a7988dc62b486a702d513e0e0671179dabec1b4662da18b5a4f933335153a3", @generic="26489cb49ae74d768ce8c2288f4fe4fd194e288b45d1844ef2056088db8f48286b441c4fb2c9237d01b3821b8b0c4214c779dd139df9d362269f7e8093d8138fb3b1eed2a50205e1f08247b72fc8c9f9d7a4a2f5bef05c70c9371cfff4ddde98376000ef5aafd776fb50d373537b00c2aebef4a8145081e698bf0ffad6bc7e63113a141f25c5d364f104ca4705e418ab42dcb9ffc53e2a8b50f9f1cf550c87c2685a0e94b884ae25e7dd7729fbb9724daec37c70979380013e786f5b1071b3fc", @nested={0x4, 0xe0}, @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0xd}, @generic="794161ed46b53e7468ef246f21883850e85dc2ea2d2c14c2a1a0077cbc51567e66badf90f2c2b5e6d6a5463c9291a4818fe749489dc14898840f0d13fdbae3fe6abb4ae1b1b7734f0b1156c40771f3281ff2cf9d6098c52cd51f251dfff2cc4cfd9cb2cb5f701ada7cda9baa471fa3e5e273d02cf9832d2c5ff235f47a412e8f078563d3ed376bc33176f140ec3b488e1878a732cd9faff50c6d12101b", @generic="da6248f2a82942a7e2e70a143bc83ea3e53cfd98c705c5b41f6781f54596d7ffd0e047992937f45e48325c1ab19c76dcaec866dd053fd9bbd4ec8c83e4142ba26cd23a5ef4934e7e9e99bfa59a5400022b3f8f7fe1ad16b582a87f1b9e7a72de1a0a0ff6d5ed5d46adf1b81e0e784ffc368f864de9f97192e727179257b2ae4796167ba9787775bdff0f8b0a8acf722f2548587ca8be1de216026df344c273b2228f1633", @nested={0x4, 0xd2}, @typed={0xc, 0x4d, 0x0, 0x0, @u64}]}, @generic="eae4c372dde17a19595151466f17d35dd813fc24b5c1ca5128930a473334c670e97a210f73fee34128fadac90a1e50adce1809861e8c54f3f3f36f57d49a5a8d6fabaab34ceedfcf39af9908db7dedf2fca397fbe7aae8c8fa96837f6d6caf36d43c6afb84a57cd84a2c6195ccddae787efa29274e0d1fa9586b850fca57ae8a149bf9e7ed0b56d22542f30e025fea354b9908b2734371fdb0a9659b06e743ead15c9baddcf4ac33d0148f4ac7eaa1cd7850e38116ca5b17a0fb85a24bb6a8dd3411656909256829550ac60dbfb84912449e4b5af36f909c0363d96e9ab5", @generic="9f35658de1e9a225aca6d72dc400830805e4aa0818c8d77aabae11797864fe9a8de65168cde4a9851e0b5ecb6888b50c16"]}, 0x1644}, {&(0x7f0000002100)={0x270, 0x1f, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@generic="f73fe3ded934c569315f86", @typed={0x8, 0x12c, 0x0, 0x0, @fd=r5}, @generic="772fb9526cbe", @generic="4693101a396861e13ddb30586a965a77da70528b5bf19d51408166b666ec58c5ff609694b4132743ffe058b44beef35a1e66eead8a98e865a7ddde74dbb0955a4e853978e7098142e5dcb2d7214fcc4475a17866ec8f1aa8323bf6b04441c9492776c93c726150131c86e273ea203df5b2eb0d6a36697991f2a806d7eccaf98c2e36365764dc99d944c213deb5ebe735610441a01e84f138d4f658f5632b58fad0e6e6f3fbab4709feb2e893fe783990e4760037cd53f4e1e4312e838bb6852308", @generic="1dd7f5f583740c0eb9abf9fdc7fb4aa62ee9ae6630b2fae036fc771d601be0b3e414dc461941d93b856918cb9379eb0947f25d42a553dcb17a4eb803856c4f2072ebfedad508cc4f90743342126e261a626c9d285227565167dd953eb9036b2d55650fedfe0f9a703c8479acb9f25305eb88ae81d16e8c026798dcd32a571588b66615d658a3817570c35a7d23491cbdf855753079b9191cd3a6f4491cbfcedafcb86cc9", @nested={0xe0, 0xe4, 0x0, 0x1, [@nested={0x4, 0x156}, @generic="d82c93c8d82e017839c864c73d410f8a600e6a8adfe09cf36ac4ddc4161eae8c91e094683219d1eae66f93054c463b777af5b31271e26b954661f0e733c34efd079ea2b93a81c7458c0b3df428d07ade7f2516c00b575c13b78d37", @generic, @generic="8de2a0eda8f07d5baeaee939b7df8a3f1540f4dac68ec45e8c4145b3cebf8dee36fc741898f767125be5f7b169d6378fcca1fb5a16f7f01f16f53f25a495318bce3b48f6295da6", @typed={0xc, 0x101, 0x0, 0x0, @u64}, @generic="781e5d9525c9cfb45dc5b4573b9c634e177abf76fddaf004f0d1f884916fbdde458faa0f3fe7e884a011"]}]}, 0x270}, {&(0x7f00000025c0)={0x1198, 0x27, 0x10, 0x70bd28, 0x25dfdbfb, "", [@generic="637480b8dff6e46dca4f324afab785b99a619e7041a5b21dbf1fbb5cf0c357c8a574ada9ba76ee3ffe59d55535e0980561058ea1cefbfd8b7d41c31d29dcad54cde65a7d76c9a7ae6f3afc518ec7a4b830bf1efee6fb00bd44d80b544df763bb39ad90d1f93b93c82e5c7cefe7e28ec6756e9382a4422e1b0ae33ae526dacec2390b688bf42d47cd38c77e1b73754f654a5cf43f17", @nested={0xe4, 0xa9, 0x0, 0x1, [@typed={0xc, 0x144, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0x6}, @typed={0xd0, 0x113, 0x0, 0x0, @binary="5de3cf43baf8991b8fe19a47d7b1bd9f2dfaa5f36b5670f14c92f4895c2019f67d6d97b34e5cf9a0b41b2b970f374ec5c2c38189d962fb7a60486cd7d3259ba08eda8609bde5f7a42086dd12419d8eff1e11f651276cf94c06a7225ca210403b1faf38f614c31b22e01a9ddea50c80501d1aa42663d392c1e6f2a2f21503ba94bececeaf53041bd51fcd2ab59c0b2bfa9286e6f8ae98a603869bcec529bcc91df1f923e53c270a8a1d524295332d935625fd8b54e817ea1f5a0ef0e42100b379ade40299cfeb7ea69500964c"}]}, @typed={0xa, 0x55, 0x0, 0x0, @str=':&]]^\x00'}, @generic="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"]}, 0x1198}], 0x3, &(0x7f00000039c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x48000}, 0x200008c1) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x20, r0, 0x1, 0x70bd26, 0x25dfdc04, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0xc4) 4.142471604s ago: executing program 0 (id=1900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x2}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES64=0x0, @ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x24008850) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="10000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x25a, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x224, 0x11, 0x0, @remote, @local, {[@routing={0x21, 0x2, 0x2, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @routing={0x5e, 0x4, 0x2, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}, @hopopts={0x3c, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x1d}, @generic={0x7f, 0x31, "89c0825eb5a5c8c723df66df047d026488a47677773af6dea45edfd687f1b1b672869a93851899b325e02ca4f6cbfb1c3ad96fa90dba506de0b67d7fd62ca913ec08c3d0d97989808d77bec9774c54842bf9e10780a1cc9406ee5b9da624f4fbd00dd442600f494d2ac8ec753bddff000eb13af8bdfe96a68abff716db8a014175c4e126dd7f6dcb4ac41e2274bf9d062283f4c355b1bc6f2aa35a7a9acf4ca7237c3c580042562a12896867c3b58524fb7ca7b2c4caab3ae6996b213fd9"}, @jumbo={0xc2, 0x4, 0x183d}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @pad1]}, @routing={0x0, 0x12, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3e}, @rand_addr=' \x01\x00', @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote]}], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "09000960f6d6d3feee6d6b84b345dcf7c680000000526f707833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"d6a300", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.934727454s ago: executing program 4 (id=1902): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="69d5dfc7b723acd16193b5a055e6f4e7907cc9d879a0b33865ab598aa4b8cace6d7ae03f92c787b044f1410aa9e2928d", 0x30}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x88}, 0x4004050) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a140200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a77007a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000002a235fb000000a20000208000c400400008914"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000008c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa8, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x36}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x800) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073113800000000008510000002000000850000000900000095000000000000009500a505000000002437757aec8486fdb44b7d7efbbc34ed29e5067a17f03ade1b5d8179c506dc544fd701f59d3070527d17ef0e3b39caed9c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.79782421s ago: executing program 3 (id=1903): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008001800080584"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.670612987s ago: executing program 0 (id=1904): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="611578000000000061133c0000000000bfa000000000000007000000ee0000052d03010000000000250500000000000069163e0000000000bf07200000000000350507000fff0720670500003f000000140300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f16d1d39cd82b19033aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190de000000003cc3aa39642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000d7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a01000000a1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6e15e1417058ba11671295d20ba906d4331ce87573d2472371ac6369744a569da6c90f0e8ecba9ee68be2691922073d177bdffd5f1aa96173286f7d66f6c3e6b5eff01ed91681bbddcc66544b42a3d68c129798f2ae62b0fc690c9df12ef0dee69bdbe446322a18155e6662c13708d73aa49f1d8fd2cf86754065bfed808d0c76caaca1e0fc8a6baf185b58a1541911688f4a055bc49ed73c5bfb556c7c7bb62a8594e0aef56a374f4bf910a60d9cd751c3a14f94a3be70dbc9211d754ca9023e1efeef81c775664c3f348d000000000000000000000076d4b94b8d33469cdf2aba94c6e871fcd122f18409ee01620e45ab01c4af441373c1e6234b631ea4bb41e344"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) splice(r1, &(0x7f0000000340)=0xb940, r1, &(0x7f00000003c0)=0x9, 0x6, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000100100000000000200050000000002000000"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={0xffffffffffffffff, r4, 0x11, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3}, 0x16) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)=@ethtool_eeprom={0x4f, 0xcd, 0x7}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000640)={r0, &(0x7f0000000440)='\x00', 0x210000, &(0x7f00000004c0)={@_ha_fsid, {0x45b, 0xfffa, 0x7465, 0x80}}, 0x4, &(0x7f00000005c0), &(0x7f0000000600)}) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000840)={@generic={0xa, "ce737d11ab2ab9e2e87495b761e0601dec2742bf6f385b2358d05b6a4763c49146991939f7dbc9f2f23b6aa6155e71dccf636af19047871c9217cde81c304b1d9fb9c8254f3f09b85c19e7ecd21f99f0afec90b3c943ffc0066a34448dbe15e690d7d9bbcb1566bb153f6942a135fb26950999c7e1178daf2b92d5c4e4c2"}, {&(0x7f0000000740)=""/31, 0x1f}, &(0x7f0000000780), 0x68}, 0xa0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x24000840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f0000000240)=0x7f) 3.422126799s ago: executing program 4 (id=1905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44004000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000011c0)=ANY=[@ANYBLOB="8400000003080500000000000000000000000006050003003a000010000003000600000005000300210000000900010073797a300000000006000240ed660000440004800800084000000000080004407fffffff0a000140fffffff8080006400000000608000940000059bf08000840000000d808000340fffffffd0800094000000002e62796f01570f0a24aed0ea09cde69cc3da4118fdee56f0928a3d6b54ec25ddccc70f811f1831854bc53f977cf49072f10cc394451dbe207b1380e3a0be354f6ee0f35ff1d97ad39b0"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x20004010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x10, &(0x7f0000001380)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db00300010010000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x112}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100080000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1b00e0db248d03530d674b15e900000000a5080066e7dee825f57d05bd1c52542f627b096f954aaad3e74efb4be0561cae9cf4d8f45f04f0a13cc990cf53e3f54a2118155b2b424a22db12d8a9e40b004e95df6565d76dd14e753bb3a8c0b38ee3e9c77ea7d22ef4acc077410bf424d0c5f85d4ec049804e37dc0b2accda820342c611949111fe3176ba0441f40f5f384b687e0db759a36dc6a654014446eaa98a80f80a4ce53b346a5bee0d0d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x7fffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1, 0x4, &(0x7f0000001000)=ANY=[@ANYRES16=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40ff8, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbc0fa63cdec590806000108000604"], 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3.3854955s ago: executing program 3 (id=1906): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x8, 0x200}) (async) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) (async, rerun: 32) write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, &(0x7f0000000080), 0xc0000) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40020000", @ANYRES16=r10, @ANYRES32=r7, @ANYRESOCT=r11], 0x240}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.323653823s ago: executing program 5 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x14, 0x22, 0x723, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.965981607s ago: executing program 4 (id=1908): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_linger(r0, 0x1, 0x3d, 0x0, 0x0) 2.96306022s ago: executing program 0 (id=1909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="060000000e000000e60000000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000040000000000000000"], 0x50) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, r3, 0x30d, 0x0, 0xfffffffe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.857660878s ago: executing program 3 (id=1910): bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000ff84000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.857033151s ago: executing program 5 (id=1911): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x17, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0x4d, 0x0, "e8eb94e33628290046228c8db144b8974951c8357aa975414eacd02afb6c0bd70e1d2b12f90e4aed00ac34713c534c814626d9fafd1e198c36aa24ecc1595e19bf9ebf5e34227a0655e74e27e1c35eea"}, 0xd8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 2.598627479s ago: executing program 5 (id=1912): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000181000", @ANYRESDEC=r1, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x1, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="1100000005000000"], 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES8=r2, @ANYRES16=r3], 0x10) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) (async) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e03, 0x3ff, @mcast2, 0xfffffffa}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000300)={r1, &(0x7f0000000000)='geneve1\x00', 0x2c0, &(0x7f0000000240)={@align=0x4, {0x99e7, 0x1, 0x9, 0xdf6f}}, 0x10001, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}) (async) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) (async) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003d8004002280080003004700000008000b00a7c3432a66f400e32fe4fa535e7f03399424b3fac8bab63448aef39eb736b26bbf745bd127c955d1de326dea2533600385f893124d6b27542f97274f0a7670359ed646df77f902612c5368e9bb7788037bffed2e54a8f612acf582a7555c8abdfe2050a018762b1d", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10000957}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0001000000500000240012800b00010067656e65766500001400028005000800000000000500096dd1f279d624aa39bccae57bbbb886120000000000d7972af36868fe37d3ae50ec78d035803770c123e7cf4ac5fd957c09ae181edff16eba9ea12ff1f252e80d59ed0b805d9f3649260d9c9be64455462be1d25f39b7f25fd287ed"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4020058) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) (rerun: 32) 2.586707198s ago: executing program 0 (id=1913): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000100000000020000008500000027000000850000007d00000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 2.261468517s ago: executing program 3 (id=1914): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r3, 0x601, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2da68b2d04f7e5af}, 0x200000c0) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="21412f345c00c5614cf4e808ede527a4c13064d92adc78e4ce23fc124d89c6582a697f445fcec4960df19b971e9c4cf8bdeeacdba8681f71d0877a5717ed08ea7530b6639ede6d1fae4a783c6f24db7aa14d2548bba3cbf2ca7e47384b565928d974d8e18945cf6f65468561213b6fb54cb1032bde39a93831e5dbaa48600d4303e8e1f5e664cc610cdb95df7228782e580d0afff112ba88be3f90e43a26fe5065e1df7dcc975a59963f00af2227db87f15c0b9528072adbf1adb37ec3763db00a28bb3d48c2cb7231426d18cdaa763442f0ed79b943d4ff0ffb427a1d9fb42e7a90d0bd0771afd152d2532380e8b25f62b65806b22449b607df777232199b", @ANYRES64, @ANYRESDEC=r1], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100002b3, 0x4) (async) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f00000008c0)="5c4d445d8ae29bc1d5b8ad6d8a98459487277ef223bd736900000000baf60280d3d967f1484ac995a4ef9a1a109ea94c36a001ee049132902cfbdaec64e27bda184c5e4c46685d9bb62996e1691b61c4094a66eb6ec09611261b34c2432c0618cc", 0x0}, 0x50) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000000), 0xff8a) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.140499452s ago: executing program 5 (id=1915): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x200, 0x14}, 0xc) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x7, 0x7}, 0x100, './file0\x00'}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"aedc215273e89488798fbbd2e140c434", 0x0, 0x0, {0x7ff, 0x9}, {0x1000, 0x6}, 0x4, [0xf2e, 0xc, 0x4, 0xa, 0xe1, 0x0, 0x7fffffff, 0x1, 0xffffffffffff159f, 0x160, 0x4f, 0xae8b, 0x10000, 0xff, 0x6, 0x1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000300)={{r0}, r1, 0xa, @inherit={0x58, &(0x7f0000000280)={0x0, 0x2, 0x3, 0xa7, {0x5, 0xfffffffffffffe01, 0x80000, 0x10001, 0xfffffffffffffffa}, [0xff, 0x7]}}, @name="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"}) r2 = socket$inet6(0xa, 0x3, 0x10001) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000001300)=""/101, &(0x7f0000001380)=0x65) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000013c0)) (async) setsockopt$inet6_buf(r2, 0x29, 0x6f, &(0x7f0000001400)="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", 0x1000) (async) pipe(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000002440)={@loopback, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3f, 0x2, 0xee0d, 0x0, 0x180a, 0x6}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000002580)={0x3, 0x7, 0xb3, &(0x7f00000024c0)=""/179}) (async) r7 = accept$inet(r4, &(0x7f00000025c0)={0x2, 0x0, @broadcast}, &(0x7f0000002600)=0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000002740)={r7, &(0x7f0000002640)='\x00', 0x4000, &(0x7f0000002680)={@_ha_fsid, {0x7, 0x2, 0xe0, 0x10001}}, 0x2, &(0x7f00000026c0), &(0x7f0000002700)=0x1}) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000027c0), r5) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x1c, r10, 0x8, 0x9, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x815) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000028c0), 0x4) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002940)=@o_path={&(0x7f0000002900)='./file0\x00', 0x0, 0x8, r8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002980)={r11}, 0x4) r12 = socket$inet6(0xa, 0x5, 0x3) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f00000029c0)={0x3, 0x2b, 0x8, 0x0, 0x0, [{{r9}, 0xfffffffffffffffa}, {{r12}, 0x100000001}, {{r5}, 0x4}, {{r6}, 0x1}, {{r3}, 0x2}, {{r0}, 0xbae}, {{r4}, 0x1fa1}, {{r5}, 0x20}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000002b00), 0x181102, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000002b80)) (async) r13 = syz_genetlink_get_family_id$team(&(0x7f0000002c00), r6) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002f00)={r5, 0xe0, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000002c80)=[0x0, 0x0, 0x0], &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000002d00)=[{}, {}], 0x10, 0x10, &(0x7f0000002d40), &(0x7f0000002d80), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000002dc0)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000003fc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003800)={0x778, r13, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r14}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x5, 0x7, 0x7b0}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfb}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xa6, 0x4, 0x8, 0x1}, {0x23b3, 0x4, 0x7, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0xa8, 0x9, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6e4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x778}}, 0x804) 1.965199301s ago: executing program 0 (id=1916): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x54, 0x10, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x281f, 0x4a420}, [@IFLA_LINK_NETNSID={0x0, 0x25, 0x1}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.886747309s ago: executing program 3 (id=1917): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000240), 0x4) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x2a}, 0x60) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r4, &(0x7f0000000a80)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}, {&(0x7f00000004c0)="7c2cbe025ee9322704f45bcead62e3a1a53117e0", 0x14}], 0x2, 0x4739, 0x1) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) epoll_create(0x400) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4000000400007012bbd7000fedbdf25027c00150400c280b6000180b00010"], 0xd4}, 0x1, 0x0, 0x0, 0x4805}, 0xc000) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 1.885780426s ago: executing program 4 (id=1918): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000b8c9ba3126bd7013ff"], 0x24}, 0x1, 0x0, 0x0, 0x34048055}, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) (async) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) 1.615050257s ago: executing program 5 (id=1919): syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "da7120", 0x18, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x8b5, 0x7ff}}}}}}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x0, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0xffff}, {0x8, 0xffff}, {0xa, 0xffff}}, [@filter_kind_options=@f_cgroup={{}, {0x0, 0x2, [@TCA_CGROUP_EMATCHES={0x0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x4}}]}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_TBF={0x0, 0x1, {0x3, 0x7, 0xffff8000, 0x5, 0x9, {0x5, 0x0, 0x2203, 0x2, 0x18, 0x6}, {0x2, 0x0, 0x2, 0x1, 0x6, 0x8}, 0x10001, 0x1, 0x7}}, @TCA_POLICE_TBF={0x0, 0x1, {0x5, 0x5, 0x6, 0x6, 0x3, {0x9b, 0x2, 0x2, 0x7c34, 0x4, 0x13f}, {0x7, 0x2, 0xc861, 0x619, 0x0, 0x2231}, 0xf89, 0x9, 0x3ff}}, @TCA_POLICE_RATE={0x0, 0x2, [0x8, 0x2, 0xe, 0x5, 0x7, 0x1, 0x0, 0x4, 0x10000, 0x9, 0x10, 0x8, 0x2, 0x0, 0x6, 0xfffffff8, 0x6, 0x1, 0xe, 0x2d, 0x2de41568, 0x10001, 0x52, 0x9, 0x4, 0x4, 0x1, 0x4, 0x3, 0x3, 0x7, 0x4, 0xffffffff, 0x7, 0xfffffffb, 0x2, 0x18d, 0x3, 0xfffffffd, 0x6, 0x0, 0x2, 0x4, 0x3, 0x1, 0x8, 0x4, 0x3, 0xebc0, 0x2, 0x80000001, 0x8, 0x1, 0x8, 0x1ff, 0x0, 0x4, 0x2, 0x9, 0x7, 0xa2a4, 0x10, 0x6, 0xb, 0x7fffffff, 0x5b5, 0x81, 0x3, 0xff, 0x8, 0x3, 0x4, 0x0, 0x4, 0x9, 0x5, 0x7, 0x5, 0xb, 0x8, 0x10000, 0x1000, 0x8, 0x10, 0x5, 0xdf, 0xffffffff, 0x1d385e4d, 0x9, 0x2, 0x1, 0x9, 0x1, 0x9e99, 0x3, 0x5, 0xac, 0x4, 0x1, 0x7, 0x4c00, 0x5, 0x4, 0x4, 0xfff, 0x2, 0x1c, 0x0, 0x3, 0x7fffffff, 0x8a2d, 0x10001, 0x80000000, 0x2, 0x5, 0x6, 0x1, 0x80, 0xd, 0x3, 0x1000, 0x5, 0x4, 0x9, 0x1, 0xffffffff, 0xdeab, 0x5, 0x5, 0xff, 0x8000, 0x7f, 0xfffffff4, 0x352, 0x9, 0x5, 0xffffffff, 0x3, 0x8, 0x0, 0x0, 0x1d4, 0x6, 0x10, 0x4e4, 0x0, 0x0, 0xd, 0xee, 0x7, 0x1, 0xfffffffd, 0x10000000, 0x9, 0x9, 0x8, 0xd2, 0x5, 0xf, 0x10001, 0x2, 0x2430, 0x6, 0xffff, 0x1, 0x3, 0x10001, 0x6, 0x2, 0x101, 0x6, 0x0, 0x100, 0xa949, 0xd0, 0x7, 0x8, 0x3, 0x8, 0x8001, 0xe, 0x9c, 0x401, 0x81, 0x5, 0x1, 0x4, 0xffff, 0xe0000, 0x8, 0x2, 0x9, 0x7, 0x7fff, 0x5, 0xffffb85d, 0x401, 0x24, 0x4, 0x6, 0x9, 0x7, 0x6, 0x0, 0x6, 0x200, 0x67, 0x1000, 0x2, 0x40000000, 0x4, 0x8001, 0x8, 0x3, 0x1, 0x1ff, 0x9, 0x131f, 0x6, 0x7, 0x7, 0x3, 0x1, 0xf0, 0x5cb4, 0x10000, 0x4, 0x7f, 0xeb5, 0x4, 0x7, 0x1, 0x89d, 0x1ff, 0x3, 0x81, 0x0, 0x6, 0xb, 0x4, 0x4, 0x0, 0x8000, 0xfbcd, 0xfffff000, 0xffff, 0x1000, 0x3, 0x80000000, 0x3, 0x9, 0x3, 0x9, 0x4, 0x10001, 0x6]}]}]}}, @filter_kind_options=@f_fw={{}, {0x0, 0x2, [@TCA_FW_INDEV={0x0, 0x3, 'geneve1\x00'}, @TCA_FW_ACT={0x0, 0x4, [@m_skbedit={0x0, 0x9, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x5}]}, {0x0, 0x6, "674833d70a2b7540d004c917009930337432e0d5acefceee8c46a778adcd00c577a6e1e8d295cd89a8da"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_gact={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x0, 0x2, {0xa4, 0x0, 0x6, 0x7, 0x873}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0x1178, 0x5}}, @TCA_GACT_PROB={0x0, 0x3, {0x0, 0x26dd, 0x8}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0x2df}}]}, {0x0, 0x6, "82f8953b5de95420406c7cb52cc02afe904bac329572d552e62b21bd09d7e8385e1cb892c9e9dea42b36c5cbdd0b186a93be12680c12c7799dabe89cd915a5a075e8438c67364f655dd7e2b77c2b9166e06fba77617128cfcec7b1c200a1ffd8bfb842d4abd2f1605d493cdbedf53531cb990b92661e642e3c3a2b96d35f5718421b06d1f9dacf3a97d59ed5ba8798a31485cbb796e614a18f016aab665e16d0c1cbaac8d101314ac2d29214204b01876dabd9e6"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x376c99b187ed0cb4}}}}, @m_simple={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, '-%\'}\x00'}, @TCA_DEF_DATA={0x0, 0x3, ':}\x00'}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_DATA={0x0, 0x3, '$,\x00'}, @TCA_DEF_DATA={0x0, 0x3, '--\'\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x7, 0x7, 0x1, 0x3, 0xa}}, @TCA_DEF_DATA={0x0, 0x3, '\xcf%H:\x00'}]}, {0x0, 0x6, "ebf04915e4055b37e63eb702f34cf422cf201f9f549e63e2fc6a46b9384e4c1cd378de262f484a717dfddaee21f0d5965cccee4e52df8d06b847"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1}}}}, @m_xt={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x9}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}]}, {0x0, 0x6, "938b19085fc673fee3dfdd03445588d7c8cae61dc96ecfefb0b08881719d8a59106fa4add826bdfa48ffc90ae3715a3a12f48060fbf764416ccd69a39ff6c1b7cd71476e597bef5067b74bb949af28672d99b2533490e3d5e18f459d50525d72130777109387824912809cf8d78551dc286e97cbcdd837fc878de7eac5716b0eb836514443958d14c02a99410b7ba5402ea0457e30130fa264e98194c2179ace0d3824e223b155cc0a087f3c58e6684cc0a1967c7f04"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_csum={0x0, 0xd, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x39, 0x5, 0x5, 0x3, 0x60}, 0x50}}]}, {0x0, 0x6, "f363cefceb6eec6a5ae78874d52d058172542c3a6e8b8b5a31763fec4608fccf6c74e3c9c2825737e061deb3bae135dd49ab7ac95ad589e47b7cf49de0a0cba4389caea4bb3dba4696cc683266248e648c5bc17a339319638680f38aea51616bd5e9cf13398b9431c61a000724b178801d63fbf240f82107fe0081878654c4e7e692ce75c2d4"}, {}, {0x0, 0x8, {0x0, 0x3}}}}, @m_sample={0x0, 0x19, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x6, 0x8, 0x8, 0x1, 0x4}}]}, {0x0, 0x6, "d143ae6941597ae8020da08a613b6404ba8e799965c9983039e2104bdcb1671a6943e0b8fb59350497046a9292783d9526ea3b33220d78e145aea56ad8ed63ca82ee313f5d1ad3f5e97bea3fbf667d7bed5bbc6a6aeeb3e83ae8cce083fa0a6b5e20856cb7c9b6d8e7deb388071f4280ed60a3ecda42689bc47fa9a87df1377b8408a1645f3b372117d417e6fdf84cd44302bd10"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x0, 0x1b, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x6}, @TCA_CTINFO_ZONE={0x0, 0x4, 0xeef}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x9}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x3}]}, {0x0, 0x6, "ebe328cc8d2afd962c17e1738bff822c0e699bc57ffcc629e6660ee603177fcc55706f1b038f1dc7a10a67908df2af46f30a8cdce248a4b0c55b24f6186af6f06577efac837406c4535fde668fb8232040"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_POLICE={0x0, 0x2, [@TCA_POLICE_RATE64={0x0, 0x8, 0x1}, @TCA_POLICE_RATE64={0x0, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x0, 0x4, 0xfffffffc}, @TCA_POLICE_TBF={0x0, 0x1, {0x6, 0x7, 0x0, 0x2, 0x1, {0x3, 0x2, 0x29fc, 0x2, 0x10, 0x63d5a347}, {0xc, 0x2, 0x6, 0x3, 0x10, 0x4}, 0xef8, 0x2, 0x8}}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x5, 0x7, 0x7, 0xb7, 0x10001, 0x9, 0x81, 0x5, 0x9, 0x8001, 0x3, 0x7, 0xbd6, 0x6, 0x7, 0x0, 0x9, 0x5, 0x3, 0x3, 0x0, 0x1, 0x21e, 0x8e, 0x0, 0x3, 0x2, 0x401, 0x4, 0x1, 0x8000, 0x9, 0x8, 0x7, 0x9, 0x200, 0x5, 0x2, 0x400, 0x4, 0x7, 0x1, 0x1, 0x5, 0x4, 0x2, 0x0, 0xb9, 0xffffff9b, 0x4a2, 0x5d7f809e, 0x68, 0x100, 0x7a6e, 0x2b88, 0xa, 0xffff0000, 0x101, 0x0, 0x2, 0x9f, 0xfffffffa, 0xffffffff, 0x5d, 0x70, 0x1, 0x7b5, 0xffff, 0x2, 0x6, 0x1, 0x6, 0x4, 0x49239da8, 0x6, 0x637, 0x8dd9cb5b, 0xf81, 0xfffffff8, 0xcd, 0xffffff63, 0x9, 0x8, 0x7, 0x1a37, 0x7ff, 0xd, 0x43ba, 0x8, 0x5, 0x3, 0x3, 0xb, 0xfffffff9, 0x9, 0x4, 0xc1c, 0x7, 0x8, 0x3, 0x0, 0x558, 0x9, 0xc74e, 0xfd, 0x5c, 0x8, 0xe, 0xe, 0x1, 0xc9800000, 0x1004, 0x2, 0x8, 0x4, 0x3, 0x5d, 0x368cad1c, 0x1, 0x3, 0xf, 0x4, 0x1fc625c5, 0x9, 0x800, 0xb, 0x7, 0x6, 0x9, 0x50db, 0x5, 0x0, 0xd4b, 0x5, 0x1, 0x9, 0x80000001, 0x8, 0xdb0, 0xb, 0x8, 0x0, 0x80000000, 0xfffffffa, 0xa, 0x1, 0x20000, 0x0, 0xdd, 0x7ff, 0xfffffff9, 0x7, 0x40, 0xcca, 0x2, 0xfffffff4, 0x6, 0x1, 0x6, 0x0, 0x5, 0xfffffff2, 0x5, 0x100, 0xac0, 0xa, 0x0, 0x0, 0x100, 0x0, 0x3, 0x9, 0xb, 0x2, 0xe7a, 0x4, 0x7, 0x8, 0x3318, 0x1a, 0x6, 0x8, 0x4, 0x1, 0x7b, 0x7386, 0x5, 0x5, 0xfffffff8, 0x1, 0x1, 0xffffff81, 0x8, 0x7, 0x1, 0x80000001, 0x1000, 0x7ff, 0x8, 0x10001, 0x0, 0x1, 0x5, 0x1c5, 0x9, 0x101, 0x5d, 0xa6, 0x9, 0x5, 0x7, 0x6, 0x1, 0x7, 0x87, 0x4, 0x7, 0x1, 0x0, 0x7, 0x101, 0xe, 0x5, 0x4, 0x81, 0x3ff, 0x88, 0x4, 0x9674, 0x4, 0x8, 0x8, 0x6, 0x8, 0x340, 0x7ff, 0xa0ce, 0xd17c, 0x0, 0x7, 0x3ff, 0x3, 0x6, 0x7fffffff, 0x734, 0x9, 0x8, 0xfffffffb, 0x401, 0x1, 0x200, 0x1fcf, 0x7, 0xef, 0x0, 0x3ff]}]}, @TCA_FW_POLICE={0x0, 0x2, [@TCA_POLICE_RESULT, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x9}]}]}}, @TCA_CHAIN={0x0, 0xb, 0x6}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x26}, @broadcast, 0x1f, 0x13}}) 1.09593416s ago: executing program 4 (id=1920): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, &(0x7f0000000100)="f3f4a3aeb22f92", 0x7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100181208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x5, 0x2, 0x101, 0x3, 0x2, 0x2, 0x6, 0x8}, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x7f, 0x5, 0x91, 0x63cf, 0xb680000}, &(0x7f0000000200)={0x40, 0x1, 0x9, 0x2, 0x2, 0x5, 0x7, 0x8}, &(0x7f0000000280)={r3, r4+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x5]}, 0x8}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800000019000100000001090004000f80"], 0x18}}, 0x0) 546.782847ms ago: executing program 4 (id=1921): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000937fed)=""/3, &(0x7f0000000040)=0x3) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}, 0x80, 0x0}, 0x4000891) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x9d6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}]}, &(0x7f0000000400)=0x10) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0xfe33) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000005000048018000180080001006f7366000c000280080001400000000424000180090001006d65746100000000140002800800024000000013080003"], 0xa4}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c"], 0x80}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {}, {0x7, 0xffff}}}, 0x24}}, 0x4800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) connect$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r9, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 5 (id=1922): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r1, 0x0, 0xffffffff000) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0x6, 0x1, 0x3626d2e7, 0xff, 0xcd], 0x7, &(0x7f0000000340)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) kernel console output (not intermixed with test programs): de [ 151.879967][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.895524][ T7442] bond0: (slave bond_slave_0): Releasing backup interface [ 151.907422][ T7442] bond0: (slave bond_slave_1): Releasing backup interface [ 151.928608][ T7442] team0: Port device team_slave_0 removed [ 151.941293][ T7442] team0: Port device team_slave_1 removed [ 151.951436][ T7442] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.165374][ T7454] netlink: 'syz.3.392': attribute type 6 has an invalid length. [ 152.415646][ T7462] lo speed is unknown, defaulting to 1000 [ 152.428913][ T7462] lo speed is unknown, defaulting to 1000 [ 152.439607][ T7462] lo speed is unknown, defaulting to 1000 [ 152.530906][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 152.541032][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 152.910981][ T7474] syzkaller0: entered promiscuous mode [ 152.924333][ T7474] syzkaller0: entered allmulticast mode [ 152.953264][ T7462] infiniband syz1: set active [ 152.959767][ T5745] lo speed is unknown, defaulting to 1000 [ 152.968363][ T7462] infiniband syz1: added lo [ 153.045022][ T7462] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 153.068023][ T7462] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 153.087256][ T7462] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 153.101374][ T7479] netlink: 228 bytes leftover after parsing attributes in process `syz.4.401'. [ 153.238241][ T7462] RDS/IB: syz1: added [ 153.247269][ T7462] smc: adding ib device syz1 with port count 1 [ 153.255249][ T7462] smc: ib device syz1 port 1 has no pnetid [ 153.290125][ T5632] lo speed is unknown, defaulting to 1000 [ 153.327210][ T7462] lo speed is unknown, defaulting to 1000 [ 153.514181][ T7486] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 153.687062][ T7486] bond3: option lacp_rate: invalid value (128) [ 153.713915][ T7486] bond3 (unregistering): Released all slaves [ 153.785408][ T7504] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 153.800807][ T7504] netlink: 228 bytes leftover after parsing attributes in process `syz.2.407'. [ 153.812348][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 153.829905][ T7507] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 153.838896][ T7507] netlink: 228 bytes leftover after parsing attributes in process `syz.2.407'. [ 153.848072][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 154.107155][ T7510] xt_hashlimit: size too large, truncated to 1048576 [ 154.167156][ T7462] lo speed is unknown, defaulting to 1000 [ 154.409260][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 154.861220][ T7462] lo speed is unknown, defaulting to 1000 [ 154.890896][ T7533] syzkaller0: entered promiscuous mode [ 154.916756][ T7533] syzkaller0: entered allmulticast mode [ 155.101422][ T7539] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 155.121112][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 155.375610][ T7545] vlan2: entered promiscuous mode [ 155.387683][ T7545] erspan0: entered promiscuous mode [ 155.767279][ T7462] lo speed is unknown, defaulting to 1000 [ 156.060092][ T7571] ip6gre1: entered promiscuous mode [ 156.087177][ T7571] ip6gre1: entered allmulticast mode [ 156.370869][ T7462] lo speed is unknown, defaulting to 1000 [ 156.979972][ T7590] netlink: 'syz.4.431': attribute type 1 has an invalid length. [ 157.036647][ T7592] __nla_validate_parse: 4 callbacks suppressed [ 157.036670][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 157.091022][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 157.146284][ T7596] ÿ: renamed from bond_slave_0 (while UP) [ 157.465139][ T29] audit: type=1800 audit(1781697935.215:2): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.436" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=520 res=0 errno=0 [ 158.110425][ T7623] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 158.288291][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 159.135992][ T7650] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 159.155854][ T7650] netlink: 228 bytes leftover after parsing attributes in process `syz.1.446'. [ 160.452584][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 160.506367][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 160.667342][ T7667] netlink: 104 bytes leftover after parsing attributes in process `syz.0.451'. [ 160.865852][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 161.474211][ T7688] ip6gre1: left promiscuous mode [ 161.479450][ T7688] ip6gre1: left allmulticast mode [ 162.058331][ T7651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.304472][ T7690] macvtap0: entered promiscuous mode [ 162.311062][ T7694] netlink: 'syz.3.460': attribute type 11 has an invalid length. [ 162.348153][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 162.402592][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 162.736070][ T7711] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.466'. [ 162.855130][ T7711] macvtap1: entered allmulticast mode [ 162.862353][ T7711] dummy0: entered allmulticast mode [ 162.868873][ T7711] dummy0: entered promiscuous mode [ 162.899976][ T7711] dummy0: left allmulticast mode [ 162.934126][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 162.990374][ T5745] dummy0: left promiscuous mode [ 163.221175][ T7728] openvswitch: netlink: Actions may not be safe on all matching packets [ 163.532167][ T7739] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 163.552968][ T7741] macvtap0: entered promiscuous mode [ 163.673283][ T7739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.713946][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 163.786042][ T7745] veth3: entered allmulticast mode [ 163.804729][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 163.860789][ T7745] bond2: (slave veth3): Enslaving as an active interface with an up link [ 163.946038][ T7748] bond2 (unregistering): (slave veth3): Releasing backup interface [ 163.971965][ T7748] bond2 (unregistering): Released all slaves [ 164.519125][ T7779] syzkaller0: refused to change device tx_queue_len [ 164.548445][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 164.615780][ T7786] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 164.667481][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 164.883528][ T7800] xt_l2tp: invalid flags combination: 8 [ 165.379097][ T7800] gre0: entered promiscuous mode [ 165.396088][ T7800] gre0: entered allmulticast mode [ 165.534133][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 165.627701][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 165.788649][ T7824] macsec1: entered promiscuous mode [ 165.814990][ T7824] veth1: entered promiscuous mode [ 165.820710][ T7824] macsec1: entered allmulticast mode [ 165.829145][ T7824] veth1: entered allmulticast mode [ 165.838568][ T7824] veth1: left allmulticast mode [ 165.844389][ T7824] veth1: left promiscuous mode [ 166.030047][ T7837] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 166.417038][ T7858] pimreg: entered allmulticast mode [ 166.425648][ T7857] pimreg: left allmulticast mode [ 166.637175][ T7867] syzkaller1: entered promiscuous mode [ 166.649750][ T7867] syzkaller1: entered allmulticast mode [ 167.460757][ T7894] netlink: 'syz.3.510': attribute type 6 has an invalid length. [ 167.731793][ T7902] x_tables: duplicate underflow at hook 2 [ 168.020792][ T7914] __nla_validate_parse: 6 callbacks suppressed [ 168.020813][ T7914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.517'. [ 168.057608][ T7914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.517'. [ 168.426682][ T7926] openvswitch: netlink: IP tunnel dst address not specified [ 168.501631][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 168.811992][ T7931] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 168.832147][ T7931] netlink: 224 bytes leftover after parsing attributes in process `syz.2.522'. [ 168.930658][ T7939] netlink: 'syz.2.522': attribute type 10 has an invalid length. [ 169.035102][ T7944] netlink: 'syz.2.522': attribute type 10 has an invalid length. [ 169.376939][ T7939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.441913][ T7939] team0: Port device netdevsim1 added [ 169.492294][ T7944] team0: Port device netdevsim1 removed [ 169.526519][ T7944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.537160][ T7944] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 169.931561][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 169.973346][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'. [ 170.121514][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 170.180484][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 170.183316][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 170.245034][ T5291] veth1_vlan: left promiscuous mode [ 170.442540][ T7981] syzkaller1: entered promiscuous mode [ 170.478154][ T7981] syzkaller1: entered allmulticast mode [ 170.530722][ T8003] netlink: 11 bytes leftover after parsing attributes in process `syz.3.536'. [ 171.009353][ T8028] netlink: 'syz.1.543': attribute type 29 has an invalid length. [ 171.059179][ T8027] ip6gre1: entered promiscuous mode [ 171.080947][ T8027] ip6gre1: entered allmulticast mode [ 172.030887][ T8057] block nbd4: not configured, cannot reconfigure [ 172.139833][ T8067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.002166][ T8103] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 173.250632][ T8110] __nla_validate_parse: 1 callbacks suppressed [ 173.250655][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 173.297051][ T8110] tipc: Can't bind to reserved service type 1 [ 173.700997][ T8125] FAULT_INJECTION: forcing a failure. [ 173.700997][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.752204][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: syz.0.568 Not tainted syzkaller #0 PREEMPT(full) [ 173.752236][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.752251][ T8125] Call Trace: [ 173.752260][ T8125] [ 173.752270][ T8125] dump_stack_lvl+0xe8/0x150 [ 173.752315][ T8125] should_fail_ex+0x40c/0x560 [ 173.752361][ T8125] _copy_to_user+0x31/0xb0 [ 173.752391][ T8125] simple_read_from_buffer+0xe1/0x170 [ 173.752428][ T8125] proc_fail_nth_read+0x1bb/0x230 [ 173.752463][ T8125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.752498][ T8125] ? rw_verify_area+0x24a/0x4c0 [ 173.752534][ T8125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.752564][ T8125] vfs_read+0x213/0xa80 [ 173.752622][ T8125] ? __pfx___mutex_lock+0x10/0x10 [ 173.752650][ T8125] ? __pfx_vfs_read+0x10/0x10 [ 173.752685][ T8125] ? __fget_files+0x2a/0x420 [ 173.752728][ T8125] ? __fget_files+0x3a2/0x420 [ 173.752756][ T8125] ? __fget_files+0x2a/0x420 [ 173.752797][ T8125] ksys_read+0x150/0x270 [ 173.752835][ T8125] ? __pfx_ksys_read+0x10/0x10 [ 173.752880][ T8125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.752906][ T8125] do_syscall_64+0x174/0x580 [ 173.752928][ T8125] ? trace_irq_disable+0x3b/0x140 [ 173.752963][ T8125] ? clear_bhb_loop+0x40/0x90 [ 173.752993][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.753018][ T8125] RIP: 0033:0x7fc00355d68e [ 173.753049][ T8125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.753069][ T8125] RSP: 002b:00007fc00452dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.753099][ T8125] RAX: ffffffffffffffda RBX: 00007fc00452e6c0 RCX: 00007fc00355d68e [ 173.753117][ T8125] RDX: 000000000000000f RSI: 00007fc00452e0a0 RDI: 0000000000000004 [ 173.753131][ T8125] RBP: 00007fc00452e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.753146][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.753160][ T8125] R13: 00007fc003816038 R14: 00007fc003815fa0 R15: 00007fff978899f8 [ 173.753199][ T8125] [ 174.664152][ T8154] netlink: 'syz.1.574': attribute type 83 has an invalid length. [ 174.767006][ T8157] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 174.834581][ T8157] bond0: entered promiscuous mode [ 174.840223][ T8157] bond0: entered allmulticast mode [ 174.847819][ T8157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.927577][ T8157] syz.4.575 (8157) used obsolete PPPIOCDETACH ioctl [ 175.139370][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 175.577089][ T8192] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 175.644566][ T8192] netlink: 256 bytes leftover after parsing attributes in process `syz.3.579'. [ 176.036052][ T8207] bridge0: port 1(vlan2) entered blocking state [ 176.082848][ T8207] bridge0: port 1(vlan2) entered disabled state [ 176.114817][ T8207] vlan2: entered allmulticast mode [ 176.148460][ T8207] geneve0: entered allmulticast mode [ 177.741642][ T8258] netlink: 60 bytes leftover after parsing attributes in process `syz.4.596'. [ 178.092811][ T8269] netlink: 'syz.1.600': attribute type 58 has an invalid length. [ 178.123841][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 178.924682][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 182.386201][ T8296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.607'. [ 182.430822][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.607'. [ 182.464732][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.607'. [ 182.924600][ T8314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.613'. [ 182.953782][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 182.981411][ T8294] netlink: 'syz.3.606': attribute type 62 has an invalid length. [ 183.081228][ T8294] netlink: 2 bytes leftover after parsing attributes in process `syz.3.606'. [ 183.192617][ T8320] syzkaller0: entered promiscuous mode [ 183.199477][ T8320] syzkaller0: entered allmulticast mode [ 183.376292][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 183.399462][ T8322] gre0: left promiscuous mode [ 183.413898][ T8322] gre0: left allmulticast mode [ 183.498306][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.507678][ T8322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.547078][ T8322] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 183.582673][ T5745] lo speed is unknown, defaulting to 1000 [ 183.688318][ T8335] xt_connbytes: Forcing CT accounting to be enabled [ 183.698054][ T8335] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 183.878934][ T8339] ipip0: entered promiscuous mode [ 184.250972][ T8350] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 184.433972][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.624'. [ 184.457598][ T8350] bond2: entered promiscuous mode [ 184.464059][ T8350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.694124][ T8369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.289870][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 185.422796][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 186.272049][ T8426] trusted_key: syz.3.640 sent an empty control message without MSG_MORE. [ 186.370253][ T29] audit: type=1800 audit(1781697964.135:3): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.640" name="memory.events" dev="tmpfs" ino=776 res=0 errno=0 [ 187.269705][ T8455] geneve2: entered promiscuous mode [ 187.343762][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.383468][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.423288][ T8455] sctp: [Deprecated]: syz.4.649 (pid 8455) Use of int in maxseg socket option. [ 187.423288][ T8455] Use struct sctp_assoc_value instead [ 187.441412][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.466778][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.547223][ T8466] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 187.644195][ T8458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.985264][ T8480] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 188.198280][ T8480] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 188.584781][ T8502] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 188.629206][ T8512] netlink: 48 bytes leftover after parsing attributes in process `syz.4.661'. [ 188.660954][ T8502] bond1 (unregistering): Released all slaves [ 188.729495][ T8513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.661'. [ 189.009158][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 189.027514][ T8505] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 189.049583][ T8505] bond2 (unregistering): Released all slaves [ 190.333839][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 190.377398][ T8565] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 190.398131][ T5764] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 190.528477][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 190.562510][ T8569] tipc: Enabling of bearer rejected, failed to enable media [ 190.591672][ T8569] syzkaller0: entered promiscuous mode [ 190.603971][ T8569] syzkaller0: entered allmulticast mode [ 190.785417][ T8582] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 190.808043][ T8582] netlink: 'syz.3.678': attribute type 2 has an invalid length. [ 190.833134][ T8582] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 190.883557][ T8582] netlink: 'syz.3.678': attribute type 3 has an invalid length. [ 190.941011][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 191.052492][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 191.258526][ T8594] netlink: 56 bytes leftover after parsing attributes in process `syz.4.679'. [ 191.357751][ T8604] netlink: 'syz.0.681': attribute type 1 has an invalid length. [ 191.396223][ T8596] block nbd0: Unsupported socket: should be TCP or UNIX. [ 191.544815][ T8612] tipc: Enabling of bearer rejected, failed to enable media [ 191.565402][ T8609] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.683'. [ 191.583529][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 191.602111][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 191.681105][ T8599] lo speed is unknown, defaulting to 1000 [ 192.299610][ T8644] tipc: Enabling of bearer rejected, failed to enable media [ 192.322879][ T8644] syzkaller0: entered promiscuous mode [ 192.343222][ T8644] syzkaller0: entered allmulticast mode [ 192.617553][ T8655] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 193.552337][ T8691] netlink: 'syz.3.700': attribute type 4 has an invalid length. [ 193.671326][ T8694] netlink: 'syz.3.700': attribute type 3 has an invalid length. [ 193.710871][ T8694] netlink: 3 bytes leftover after parsing attributes in process `syz.3.700'. [ 194.113962][ T8712] tipc: Enabling of bearer rejected, failed to enable media [ 194.231522][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 194.360357][ T8715] geneve0: entered promiscuous mode [ 194.395167][ T8715] geneve0: left promiscuous mode [ 194.472306][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.393329][ T8757] x_tables: unsorted entry at hook 3 [ 195.470985][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 195.507508][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 195.661706][ T8768] tipc: Enabling of bearer rejected, failed to enable media [ 195.691821][ T8768] syzkaller0: entered promiscuous mode [ 195.715992][ T8768] syzkaller0: entered allmulticast mode [ 195.856097][ T8779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 195.890080][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 196.262144][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.723'. [ 196.296558][ T8798] netlink: 59 bytes leftover after parsing attributes in process `syz.4.723'. [ 196.500839][ T8796] syzkaller0: entered promiscuous mode [ 196.511495][ T8812] netlink: 'syz.1.727': attribute type 13 has an invalid length. [ 196.529274][ T8796] syzkaller0: entered allmulticast mode [ 196.598403][ T5745] IPVS: starting estimator thread 0... [ 196.699819][ T8818] IPVS: using max 29 ests per chain, 69600 per kthread [ 196.876827][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 197.472617][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.732'. [ 197.845971][ T8851] netlink: 'syz.1.736': attribute type 4 has an invalid length. [ 197.879359][ T8851] netlink: 'syz.1.736': attribute type 4 has an invalid length. [ 197.910460][ T5764] lo speed is unknown, defaulting to 1000 [ 197.945867][ T5764] lo speed is unknown, defaulting to 1000 [ 197.970627][ T5745] lo speed is unknown, defaulting to 1000 [ 198.282300][ T8890] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 198.290628][ T8890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.741'. [ 198.333948][ T8892] openvswitch: netlink: Message has 4 unknown bytes. [ 199.004084][ T8922] lo speed is unknown, defaulting to 1000 [ 200.056327][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 200.269840][ T8951] netlink: 'syz.0.759': attribute type 21 has an invalid length. [ 200.448002][ T8951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.759'. [ 200.520105][ T8954] tipc: Enabled bearer , priority 0 [ 200.730377][ T8954] syzkaller0: entered promiscuous mode [ 200.738406][ T8954] syzkaller0: entered allmulticast mode [ 200.747257][ T8954] tipc: Resetting bearer [ 200.769249][ T8953] tipc: Resetting bearer [ 204.558960][ T8953] tipc: Disabling bearer [ 204.603884][ T8976] batadv0: entered promiscuous mode [ 204.626577][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.767'. [ 204.669011][ T8976] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 204.738611][ T7211] IPVS: starting estimator thread 0... [ 204.835800][ T8992] IPVS: using max 24 ests per chain, 57600 per kthread [ 204.839878][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 204.887782][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 205.391097][ T9013] netlink: 204 bytes leftover after parsing attributes in process `syz.3.776'. [ 205.429652][ T9013] netlink: 84 bytes leftover after parsing attributes in process `syz.3.776'. [ 205.493442][ T9013] rdma_rxe: rxe_newlink: failed to add lo [ 205.598725][ T9015] vlan0: entered promiscuous mode [ 205.625238][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 205.674926][ T9015] hsr0: entered promiscuous mode [ 205.690260][ T9015] vlan0: entered allmulticast mode [ 205.716630][ T9015] hsr0: entered allmulticast mode [ 205.743972][ T9015] hsr_slave_0: entered allmulticast mode [ 205.765846][ T9015] hsr_slave_1: entered allmulticast mode [ 205.840203][ T9029] netlink: 216 bytes leftover after parsing attributes in process `syz.3.778'. [ 205.861859][ T9029] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 205.924126][ T9019] hsr_slave_0: left promiscuous mode [ 205.943877][ T9019] hsr_slave_1: left promiscuous mode [ 206.291763][ T9037] vlan2: entered promiscuous mode [ 206.321650][ T9037] bridge0: entered promiscuous mode [ 206.381111][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.781'. [ 206.720457][ T9050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.781'. [ 206.851943][ T9059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.785'. [ 207.818264][ T9081] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 208.028547][ T9083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.485111][ T9102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.240358][ T9129] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 209.262254][ T9129] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 209.280647][ T9129] netlink: 'syz.1.807': attribute type 2 has an invalid length. [ 209.320695][ T9129] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 209.763888][ T9147] tipc: New replicast peer: 255.255.255.255 [ 209.789670][ T9147] tipc: Enabled bearer , priority 10 [ 209.884885][ T9147] __nla_validate_parse: 6 callbacks suppressed [ 209.884910][ T9147] netlink: 256 bytes leftover after parsing attributes in process `syz.4.813'. [ 209.936004][ T9147] netlink: 256 bytes leftover after parsing attributes in process `syz.4.813'. [ 210.302822][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.818'. [ 211.401529][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 211.432231][ T7210] IPVS: starting estimator thread 0... [ 211.461409][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 211.497166][ T8183] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.532949][ T8183] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.536519][ T9198] IPVS: using max 26 ests per chain, 62400 per kthread [ 211.562355][ T8183] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.594843][ T8183] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.646828][ T9201] netlink: 92 bytes leftover after parsing attributes in process `syz.4.828'. [ 211.786233][ T9202] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 211.925422][ T5648] Bluetooth: hci1: command 0x0406 tx timeout [ 211.931669][ T5650] Bluetooth: hci2: command 0x0406 tx timeout [ 211.932714][ T4946] Bluetooth: hci3: command 0x0406 tx timeout [ 212.381949][ T9220] dvmrp0: entered allmulticast mode [ 213.072446][ T9239] netlink: 208 bytes leftover after parsing attributes in process `syz.2.840'. [ 213.110334][ T9239] netlink: 'syz.2.840': attribute type 2 has an invalid length. [ 213.225495][ T9239] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.840'. [ 213.254500][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 213.259267][ T9239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.636278][ T9251] bond2: entered allmulticast mode [ 213.685819][ T9251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.826742][ T9253] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 213.862966][ T9253] netlink: 2096 bytes leftover after parsing attributes in process `syz.3.845'. [ 213.957337][ T9271] netlink: 'syz.4.850': attribute type 6 has an invalid length. [ 213.979752][ T9271] netlink: 'syz.4.850': attribute type 5 has an invalid length. [ 214.220531][ T9281] netlink: 'syz.0.852': attribute type 13 has an invalid length. [ 214.967851][ T9297] Bluetooth: MGMT ver 1.23 [ 215.088938][ T9300] __nla_validate_parse: 5 callbacks suppressed [ 215.088962][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 215.947653][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 216.141672][ T9337] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 216.187552][ T9337] tc action pedit 'at' offset 6 out of bounds [ 216.934386][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 217.004783][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 217.094709][ T9368] netlink: 'syz.3.876': attribute type 3 has an invalid length. [ 217.168031][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 217.459730][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.879'. [ 217.784905][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.880'. [ 217.814336][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.880'. [ 218.032311][ T9393] sctp: [Deprecated]: syz.3.884 (pid 9393) Use of int in max_burst socket option. [ 218.032311][ T9393] Use struct sctp_assoc_value instead [ 218.496120][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 218.542981][ T9407] veth0_macvtap: left promiscuous mode [ 218.751665][ T9412] netlink: 'syz.2.888': attribute type 13 has an invalid length. [ 219.122559][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 219.222919][ T253] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.265794][ T253] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.295859][ T253] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.326743][ T9412] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 219.346091][ T9412] syzkaller1: linktype set to 1 [ 219.385434][ T253] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.528272][ T9443] veth1_to_bond: entered allmulticast mode [ 219.657617][ T9448] veth1_to_bond (unregistering): left allmulticast mode [ 219.913776][ T9454] netlink: zone id is out of range [ 219.937677][ T9454] netlink: zone id is out of range [ 219.963857][ T9454] netlink: zone id is out of range [ 219.998533][ T9454] netlink: zone id is out of range [ 220.024487][ T9454] netlink: zone id is out of range [ 220.050910][ T9454] netlink: zone id is out of range [ 220.086286][ T9454] netlink: zone id is out of range [ 220.107841][ T9454] netlink: zone id is out of range [ 220.122992][ T9454] netlink: zone id is out of range [ 220.156195][ T9454] netlink: zone id is out of range [ 220.623627][ T9468] __nla_validate_parse: 8 callbacks suppressed [ 220.623655][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.900'. [ 221.494269][ T9483] tun0: tun_chr_ioctl cmd 1074025680 [ 221.862167][ T9500] macvtap0: entered promiscuous mode [ 223.147619][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 223.187909][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 225.272613][ T9513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.819629][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.847081][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.858552][ T9611] netlink: 'syz.3.920': attribute type 22 has an invalid length. [ 225.871402][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 225.883444][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.916062][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.933491][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.129636][ T9611] netlink: 'syz.3.920': attribute type 22 has an invalid length. [ 226.156497][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 226.849379][ T9632] netlink: 'syz.3.925': attribute type 1 has an invalid length. [ 227.082270][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.925'. [ 227.347611][ T9636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.461241][ T9636] bond3: (slave bond4): making interface the new active one [ 227.491638][ T9636] bond3: (slave bond4): Enslaving as an active interface with an up link [ 227.629165][ T9638] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 227.707333][ T9640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.065986][ T5633] Bluetooth: hci5: command tx timeout [ 228.339707][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 228.450909][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 228.842814][ T9601] lo speed is unknown, defaulting to 1000 [ 228.998435][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 229.381669][ T9685] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 229.459324][ T9685] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.539452][ T9685] bond0: (slave team0): Enslaving as an active interface with an up link [ 230.082457][ T9705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.938'. [ 230.148427][ T5633] Bluetooth: hci5: command tx timeout [ 230.150663][ T9705] lo: Caught tx_queue_len zero misconfig [ 230.500352][ T9714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.939'. [ 230.796457][ T9717] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 231.043043][ T9717] bond4: entered promiscuous mode [ 231.089899][ T9717] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.548401][ T7211] hid-generic 0005:0004:0004.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 231.762539][ T9736] syzkaller0: entered promiscuous mode [ 231.811802][ T9736] syzkaller0: entered allmulticast mode [ 231.959067][ T9740] tipc: Started in network mode [ 231.967049][ T9740] tipc: Node identity eebe049cf462, cluster identity 4711 [ 231.985342][ T9740] tipc: Enabled bearer , priority 0 [ 232.012802][ T9744] tipc: Resetting bearer [ 232.183066][ T9735] tipc: Resetting bearer [ 232.240632][ T5633] Bluetooth: hci5: command tx timeout [ 232.279249][ T9735] tipc: Disabling bearer [ 232.327045][ T9748] C: renamed from veth1_to_team [ 232.353678][ T9748] netlink: 'syz.4.947': attribute type 2 has an invalid length. [ 232.375936][ T9748] netlink: 116 bytes leftover after parsing attributes in process `syz.4.947'. [ 232.390650][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 232.405831][ T9748] net_ratelimit: 339 callbacks suppressed [ 232.405855][ T9748] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 233.304830][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 233.410195][ T9786] FAULT_INJECTION: forcing a failure. [ 233.410195][ T9786] name failslab, interval 1, probability 0, space 0, times 1 [ 233.444000][ T9786] CPU: 1 UID: 0 PID: 9786 Comm: syz.2.954 Not tainted syzkaller #0 PREEMPT(full) [ 233.444035][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.444049][ T9786] Call Trace: [ 233.444058][ T9786] [ 233.444068][ T9786] dump_stack_lvl+0xe8/0x150 [ 233.444102][ T9786] should_fail_ex+0x40c/0x560 [ 233.444146][ T9786] should_failslab+0xa8/0x100 [ 233.444182][ T9786] ? skb_clone+0x212/0x3a0 [ 233.444209][ T9786] kmem_cache_alloc_noprof+0x87/0x650 [ 233.444252][ T9786] skb_clone+0x212/0x3a0 [ 233.444283][ T9786] __netlink_deliver_tap+0x413/0x860 [ 233.444325][ T9786] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.444351][ T9786] netlink_deliver_tap+0x19c/0x1b0 [ 233.444379][ T9786] netlink_unicast+0x77f/0x940 [ 233.444421][ T9786] netlink_sendmsg+0x813/0xb40 [ 233.444458][ T9786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.444488][ T9786] ? aa_sock_msg_perm+0xf1/0x1b0 [ 233.444525][ T9786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.444555][ T9786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.444583][ T9786] ____sys_sendmsg+0x9b9/0xa20 [ 233.444608][ T9786] ? __might_fault+0xaf/0x130 [ 233.444646][ T9786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.444690][ T9786] ? import_iovec+0x73/0xa0 [ 233.444722][ T9786] ___sys_sendmsg+0x2a5/0x360 [ 233.444745][ T9786] ? __lock_acquire+0x683/0x2cd0 [ 233.444775][ T9786] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.444797][ T9786] ? __lock_acquire+0x683/0x2cd0 [ 233.444827][ T9786] ? kstrtouint+0x6e/0xe0 [ 233.444923][ T9786] __sys_sendmmsg+0x27c/0x4e0 [ 233.444956][ T9786] ? __pfx___sys_sendmmsg+0x10/0x10 [ 233.444978][ T9786] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 233.445037][ T9786] ? ksys_write+0x242/0x270 [ 233.445074][ T9786] ? __pfx_ksys_write+0x10/0x10 [ 233.445117][ T9786] __x64_sys_sendmmsg+0xa0/0xc0 [ 233.445141][ T9786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.445202][ T9786] do_syscall_64+0x174/0x580 [ 233.445222][ T9786] ? trace_irq_disable+0x3b/0x140 [ 233.445255][ T9786] ? clear_bhb_loop+0x40/0x90 [ 233.445283][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.445306][ T9786] RIP: 0033:0x7f38c939ce59 [ 233.445328][ T9786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.445357][ T9786] RSP: 002b:00007f38ca2ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.445382][ T9786] RAX: ffffffffffffffda RBX: 00007f38c9616090 RCX: 00007f38c939ce59 [ 233.445399][ T9786] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 233.445414][ T9786] RBP: 00007f38ca2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 233.445428][ T9786] R10: e000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.445442][ T9786] R13: 00007f38c9616128 R14: 00007f38c9616090 R15: 00007ffde2ec6cb8 [ 233.445481][ T9786] [ 233.822622][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 233.857613][ T8870] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.868222][ T8870] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.878393][ T8870] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.890849][ T8870] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.937672][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.947715][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.978920][ T9601] bridge_slave_0: entered allmulticast mode [ 233.998168][ T9601] bridge_slave_0: entered promiscuous mode [ 234.019988][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.029918][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.040154][ T9601] bridge_slave_1: entered allmulticast mode [ 234.191927][ T9601] bridge_slave_1: entered promiscuous mode [ 234.307701][ T5633] Bluetooth: hci5: command tx timeout [ 234.355945][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 234.773534][ T9799] IPVS: persistence engine module ip_vs_pe_À not found [ 234.783486][ T9812] veth1_macvtap: renamed from vlan0 [ 234.831575][ T9601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.913456][ T9601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.982929][ T9815] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 235.010398][ T9815] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 235.020980][ T9815] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.962'. [ 235.038626][ T9815] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 235.078936][ T9815] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 235.109895][ T9815] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.962'. [ 235.169825][ T8876] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.217128][ T8876] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.339402][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 235.403649][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 235.472482][ T9601] team0: Port device team_slave_0 added [ 235.514014][ T9601] team0: Port device team_slave_1 added [ 235.548034][ T9825] FAULT_INJECTION: forcing a failure. [ 235.548034][ T9825] name failslab, interval 1, probability 0, space 0, times 0 [ 235.591185][ T9825] CPU: 1 UID: 0 PID: 9825 Comm: syz.3.965 Not tainted syzkaller #0 PREEMPT(full) [ 235.591219][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.591233][ T9825] Call Trace: [ 235.591241][ T9825] [ 235.591250][ T9825] dump_stack_lvl+0xe8/0x150 [ 235.591282][ T9825] should_fail_ex+0x40c/0x560 [ 235.591321][ T9825] ? __d_alloc+0x37/0x6e0 [ 235.591352][ T9825] should_failslab+0xa8/0x100 [ 235.591391][ T9825] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 235.591424][ T9825] ? __d_lookup+0x66/0x790 [ 235.591461][ T9825] __d_alloc+0x37/0x6e0 [ 235.591498][ T9825] d_alloc+0x4b/0x190 [ 235.591526][ T9825] ? lookup_one_qstr_excl+0xc4/0x360 [ 235.591562][ T9825] lookup_one_qstr_excl+0xd8/0x360 [ 235.591593][ T9825] ? lookup_noperm_common+0x245/0x430 [ 235.591626][ T9825] start_dirop+0x5c/0x90 [ 235.591656][ T9825] simple_start_creating+0xcc/0x110 [ 235.591687][ T9825] ? __pfx_simple_start_creating+0x10/0x10 [ 235.591719][ T9825] ? do_raw_spin_unlock+0xf5/0x210 [ 235.591761][ T9825] ? mntput+0x65/0xc0 [ 235.591800][ T9825] debugfs_start_creating+0xdb/0x1a0 [ 235.591828][ T9825] __debugfs_create_file+0x6f/0x400 [ 235.591863][ T9825] debugfs_create_file_full+0x3f/0x60 [ 235.591893][ T9825] ref_tracker_dir_debugfs+0x197/0x360 [ 235.591918][ T9825] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 235.591973][ T9825] ? __kvmalloc_node_noprof+0x53d/0x890 [ 235.592007][ T9825] ? alloc_netdev_mqs+0xa9/0x1270 [ 235.592038][ T9825] ? __raw_spin_lock_init+0x45/0x100 [ 235.592087][ T9825] alloc_netdev_mqs+0x275/0x1270 [ 235.592127][ T9825] ? __pfx_vxlan_setup+0x10/0x10 [ 235.592157][ T9825] rtnl_create_link+0x321/0xd70 [ 235.592194][ T9825] rtnl_newlink_create+0x25f/0xb00 [ 235.592224][ T9825] ? __mutex_lock+0x5c5/0x1590 [ 235.592249][ T9825] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 235.592278][ T9825] ? __pfx___mutex_lock+0x10/0x10 [ 235.592311][ T9825] ? full_name_hash+0x92/0xe0 [ 235.592344][ T9825] rtnl_newlink+0x167f/0x1bd0 [ 235.592398][ T9825] ? __pfx_rtnl_newlink+0x10/0x10 [ 235.592429][ T9825] ? do_syscall_64+0x174/0x580 [ 235.592494][ T9825] ? kasan_quarantine_put+0xbb/0x1f0 [ 235.592525][ T9825] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.592552][ T9825] ? nlmon_xmit+0xb0/0x100 [ 235.592571][ T9825] ? kmem_cache_free+0x182/0x650 [ 235.592613][ T9825] ? __lock_acquire+0x683/0x2cd0 [ 235.592638][ T9825] ? __dev_queue_xmit+0x29b/0x37f0 [ 235.592669][ T9825] ? __local_bh_enable_ip+0xd0/0x130 [ 235.592692][ T9825] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.592713][ T9825] ? __dev_queue_xmit+0x29b/0x37f0 [ 235.592737][ T9825] ? __local_bh_enable_ip+0xd0/0x130 [ 235.592758][ T9825] ? __dev_queue_xmit+0x29b/0x37f0 [ 235.592793][ T9825] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 235.592846][ T9825] ? __pfx_rtnl_newlink+0x10/0x10 [ 235.592878][ T9825] rtnetlink_rcv_msg+0x802/0xc00 [ 235.592916][ T9825] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 235.592949][ T9825] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.592981][ T9825] ? ref_tracker_free+0x689/0x830 [ 235.593008][ T9825] ? __pfx_ref_tracker_free+0x10/0x10 [ 235.593045][ T9825] netlink_rcv_skb+0x226/0x4a0 [ 235.593072][ T9825] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 235.593119][ T9825] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.593153][ T9825] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.593173][ T9825] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.593198][ T9825] netlink_unicast+0x7bb/0x940 [ 235.593238][ T9825] netlink_sendmsg+0x813/0xb40 [ 235.593268][ T9825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.593291][ T9825] ? aa_sock_msg_perm+0xf1/0x1b0 [ 235.593321][ T9825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.593345][ T9825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.593367][ T9825] ____sys_sendmsg+0x9b9/0xa20 [ 235.593386][ T9825] ? __might_fault+0xaf/0x130 [ 235.593417][ T9825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.593445][ T9825] ? import_iovec+0x73/0xa0 [ 235.593470][ T9825] ___sys_sendmsg+0x2a5/0x360 [ 235.593488][ T9825] ? __lock_acquire+0x683/0x2cd0 [ 235.593511][ T9825] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.593529][ T9825] ? __lock_acquire+0x683/0x2cd0 [ 235.593552][ T9825] ? kstrtouint+0x6e/0xe0 [ 235.593619][ T9825] __sys_sendmmsg+0x27c/0x4e0 [ 235.593645][ T9825] ? __pfx___sys_sendmmsg+0x10/0x10 [ 235.593662][ T9825] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 235.593705][ T9825] ? ksys_write+0x242/0x270 [ 235.593735][ T9825] ? __pfx_ksys_write+0x10/0x10 [ 235.593770][ T9825] __x64_sys_sendmmsg+0xa0/0xc0 [ 235.593789][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.593809][ T9825] do_syscall_64+0x174/0x580 [ 235.593825][ T9825] ? trace_irq_disable+0x3b/0x140 [ 235.593853][ T9825] ? clear_bhb_loop+0x40/0x90 [ 235.593876][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.593896][ T9825] RIP: 0033:0x7f142099ce59 [ 235.593915][ T9825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.593931][ T9825] RSP: 002b:00007f1421774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 235.593953][ T9825] RAX: ffffffffffffffda RBX: 00007f1420c16090 RCX: 00007f142099ce59 [ 235.593968][ T9825] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 235.593980][ T9825] RBP: 00007f1421774090 R08: 0000000000000000 R09: 0000000000000000 [ 235.593991][ T9825] R10: e000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.594002][ T9825] R13: 00007f1420c16128 R14: 00007f1420c16090 R15: 00007ffe11ce9c98 [ 235.594032][ T9825] [ 236.527023][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.534447][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.564724][ T9601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.583493][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.591789][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.634506][ T9601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.692104][ T8876] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.714680][ T8876] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.038592][ T9851] vti0: entered promiscuous mode [ 237.045368][ T9851] vti0: entered allmulticast mode [ 237.457606][ T8876] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.485930][ T8876] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.634580][ T9601] hsr_slave_0: entered promiscuous mode [ 237.660513][ T9601] hsr_slave_1: entered promiscuous mode [ 237.830844][ T8876] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.869978][ T8876] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.728954][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 239.353469][ T9925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 239.543799][ T3324] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 239.679864][ T9933] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 239.752981][ T3324] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 239.798465][ T9946] netlink: 'syz.4.990': attribute type 2 has an invalid length. [ 239.911752][ T9948] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 239.960894][ T3324] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 240.008045][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 240.018726][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.991'. [ 240.059673][ T8860] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 240.190972][ T9951] netlink: 52 bytes leftover after parsing attributes in process `syz.4.992'. [ 240.215179][ T9949] netlink: 'syz.3.991': attribute type 3 has an invalid length. [ 240.255475][ T8876] bridge_slave_1: left allmulticast mode [ 240.268963][ T8876] bridge_slave_1: left promiscuous mode [ 240.282912][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.324793][ T8876] bridge_slave_0: left allmulticast mode [ 240.334934][ T8876] bridge_slave_0: left promiscuous mode [ 240.360517][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.589168][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 240.620314][ T9960] xt_TCPMSS: Only works on TCP SYN packets [ 241.288912][ T8876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.305074][ T8876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.326432][ T8876] bond0 (unregistering): Released all slaves [ 241.341119][ T8876] bond1 (unregistering): Released all slaves [ 241.363251][ T8876] bond2 (unregistering): Released all slaves [ 241.558300][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 241.591506][ T9977] hmó3)ó€: entered promiscuous mode [ 241.695515][ T8876] tipc: Left network mode [ 241.818582][ T9953] lo speed is unknown, defaulting to 1000 [ 242.157923][ T9601] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.250364][ T9601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.284954][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 242.302250][ T9601] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.373177][ T9601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.638745][ T9601] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.687853][ T9601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.772846][T10001] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.864877][T10010] tipc: Enabling of bearer rejected, already enabled [ 242.902267][ T9601] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.947892][ T9601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.033440][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 243.883746][T10033] lo speed is unknown, defaulting to 1000 [ 243.892988][T10043] syzkaller0: entered allmulticast mode [ 243.920413][ T8876] hsr_slave_0: left promiscuous mode [ 243.932595][ T8876] hsr_slave_1: left promiscuous mode [ 243.949446][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.958108][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.969499][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.981384][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.050940][ T8876] batadv0: left promiscuous mode [ 244.077462][ T8876] veth1_macvtap: left promiscuous mode [ 244.086347][ T8876] veth0_macvtap: left promiscuous mode [ 244.092967][ T8876] veth1_vlan: left promiscuous mode [ 244.118104][ T8876] veth0_vlan: left promiscuous mode [ 244.764087][ T8876] team0 (unregistering): Port device team_slave_1 removed [ 244.791524][ T8876] team0 (unregistering): Port device team_slave_0 removed [ 245.041475][ T12] smc: removing ib device syz1 [ 245.060226][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 245.150485][T10047] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 245.305150][ T7211] lo speed is unknown, defaulting to 1000 [ 245.349756][ T7211] syz1: Port: 1 Link DOWN [ 245.447112][ T12] smbdirect: ib_dev[syz1] removed [ 246.429806][ T9601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.515130][ T9601] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.582248][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.592853][ T8874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.715247][ T8868] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.725190][ T8868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.569615][T10092] tipc: Enabled bearer , priority 0 [ 247.599231][T10092] syzkaller0: entered promiscuous mode [ 247.637829][T10092] syzkaller0: entered allmulticast mode [ 247.736210][T10092] tipc: Resetting bearer [ 247.780847][T10091] tipc: Resetting bearer [ 247.829898][T10091] tipc: Disabling bearer [ 248.623383][T10120] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 249.132227][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.943921][T10168] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 250.043879][T10162] tipc: Enabled bearer , priority 0 [ 250.063852][T10167] syzkaller0: entered promiscuous mode [ 250.090249][T10167] syzkaller0: entered allmulticast mode [ 250.217978][T10162] tipc: Resetting bearer [ 250.242281][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 250.263574][T10160] tipc: Resetting bearer [ 250.305534][T10160] tipc: Disabling bearer [ 250.379734][ T9601] veth0_vlan: entered promiscuous mode [ 250.495872][ T9601] veth1_vlan: entered promiscuous mode [ 250.573912][ T8876] IPVS: stop unused estimator thread 0... [ 250.703614][ T9601] veth0_macvtap: entered promiscuous mode [ 250.743179][ T9601] veth1_macvtap: entered promiscuous mode [ 250.817452][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.898782][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.962989][ T253] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.009453][ T253] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.044779][ T253] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.069945][ T253] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.672783][ T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.712379][ T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.841169][ T253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.853804][T10214] tipc: Enabling of bearer rejected, already enabled [ 251.873644][ T253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.208568][T10222] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1041'. [ 252.272029][T10225] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1042'. [ 252.355925][T10222] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1041'. [ 252.523786][T10222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.549282][T10201] netlink: 'syz.4.1035': attribute type 2 has an invalid length. [ 252.603766][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.918'. [ 252.699108][T10243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1045'. [ 252.728220][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 252.748729][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 252.827511][T10233] batadv0: entered promiscuous mode [ 252.848435][T10233] vlan2: entered promiscuous mode [ 253.169548][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1046'. [ 253.649768][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 254.177127][T10308] xt_hashlimit: size too large, truncated to 1048576 [ 254.226464][T10308] xt_hashlimit: max too large, truncated to 1048576 [ 254.853243][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'. [ 255.908602][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058795][T10379] FAULT_INJECTION: forcing a failure. [ 256.058795][T10379] name failslab, interval 1, probability 0, space 0, times 0 [ 256.081536][T10379] CPU: 1 UID: 0 PID: 10379 Comm: syz.3.1060 Not tainted syzkaller #0 PREEMPT(full) [ 256.081570][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.081593][T10379] Call Trace: [ 256.081602][T10379] [ 256.081612][T10379] dump_stack_lvl+0xe8/0x150 [ 256.081646][T10379] should_fail_ex+0x40c/0x560 [ 256.081693][T10379] should_failslab+0xa8/0x100 [ 256.081741][T10379] ? skb_clone+0x212/0x3a0 [ 256.081767][T10379] kmem_cache_alloc_noprof+0x87/0x650 [ 256.081797][T10379] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 256.081838][T10379] skb_clone+0x212/0x3a0 [ 256.081863][T10379] ? ip6_finish_output2+0xedd/0x13c0 [ 256.081902][T10379] ip6_finish_output2+0xeeb/0x13c0 [ 256.081940][T10379] ? ip6_mtu+0x38c/0x490 [ 256.081978][T10379] ? ip6_output+0x11e/0x540 [ 256.082008][T10379] ip6_output+0x337/0x540 [ 256.082044][T10379] ip6_mr_output+0x53e/0x1170 [ 256.082075][T10379] ? __pfx_ip6t_do_table+0x10/0x10 [ 256.082108][T10379] ? ip6_mr_output+0x1f3/0x1170 [ 256.082143][T10379] ? __pfx_ip6_mr_output+0x10/0x10 [ 256.082181][T10379] ? __ip6_local_out+0x15c/0x940 [ 256.082223][T10379] ? __ip6_local_out+0x8f8/0x940 [ 256.082259][T10379] ? __ip6_local_out+0x15c/0x940 [ 256.082317][T10379] ? ip6_make_skb+0x2f8/0x320 [ 256.082354][T10379] ? ip6_local_out+0x16e/0x190 [ 256.082386][T10379] ? ip6_send_skb+0x10a/0x380 [ 256.082421][T10379] ip6_send_skb+0x1cd/0x380 [ 256.082459][T10379] udp_v6_send_skb+0xaa8/0x1380 [ 256.082516][T10379] udpv6_sendmsg+0x1e44/0x2610 [ 256.082571][T10379] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 256.082598][T10379] ? __lock_acquire+0x683/0x2cd0 [ 256.082692][T10379] ? inet_send_prepare+0x5b/0x260 [ 256.082743][T10379] ? inet6_sendmsg+0xe4/0x120 [ 256.082765][T10379] ? __pfx_inet6_sendmsg+0x10/0x10 [ 256.082794][T10379] ____sys_sendmsg+0x61f/0xa20 [ 256.082820][T10379] ? __might_fault+0xaf/0x130 [ 256.082862][T10379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.082902][T10379] ? import_iovec+0x73/0xa0 [ 256.082935][T10379] ___sys_sendmsg+0x2a5/0x360 [ 256.082959][T10379] ? __lock_acquire+0x683/0x2cd0 [ 256.082992][T10379] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.083027][T10379] ? kstrtouint+0x6e/0xe0 [ 256.083105][T10379] ? __fget_files+0x2a/0x420 [ 256.083134][T10379] ? __fget_files+0x3a2/0x420 [ 256.083181][T10379] __sys_sendmmsg+0x27c/0x4e0 [ 256.083216][T10379] ? __pfx___sys_sendmmsg+0x10/0x10 [ 256.083240][T10379] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 256.083308][T10379] ? ksys_write+0x242/0x270 [ 256.083349][T10379] ? __pfx_ksys_write+0x10/0x10 [ 256.083398][T10379] __x64_sys_sendmmsg+0xa0/0xc0 [ 256.083425][T10379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.083452][T10379] do_syscall_64+0x174/0x580 [ 256.083474][T10379] ? trace_irq_disable+0x3b/0x140 [ 256.083510][T10379] ? clear_bhb_loop+0x40/0x90 [ 256.083543][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.083567][T10379] RIP: 0033:0x7f142099ce59 [ 256.083590][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.083611][T10379] RSP: 002b:00007f1421795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 256.083637][T10379] RAX: ffffffffffffffda RBX: 00007f1420c15fa0 RCX: 00007f142099ce59 [ 256.083654][T10379] RDX: 0000000000000001 RSI: 0000200000004800 RDI: 0000000000000003 [ 256.083669][T10379] RBP: 00007f1421795090 R08: 0000000000000000 R09: 0000000000000000 [ 256.083684][T10379] R10: 0000000024001c00 R11: 0000000000000246 R12: 0000000000000001 [ 256.083698][T10379] R13: 00007f1420c16038 R14: 00007f1420c15fa0 R15: 00007ffe11ce9c98 [ 256.083752][T10379] [ 256.541439][T10261] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 256.766613][T10388] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 256.905720][T10388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1063'. [ 257.419036][T10404] __nla_validate_parse: 1 callbacks suppressed [ 257.419057][T10404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1067'. [ 257.603226][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 258.604387][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'. [ 258.674273][T10438] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1074'. [ 258.686452][T10443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 259.070634][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1077'. [ 259.416278][T10466] netlink: zone id is out of range [ 259.425355][T10466] netlink: zone id is out of range [ 259.462503][T10466] netlink: zone id is out of range [ 259.479348][T10466] netlink: zone id is out of range [ 259.529401][T10466] netlink: zone id is out of range [ 259.604868][T10466] netlink: zone id is out of range [ 259.660674][T10466] netlink: zone id is out of range [ 259.720389][T10466] netlink: zone id is out of range [ 259.746293][T10466] netlink: zone id is out of range [ 259.776314][T10469] netlink: 'syz.2.1079': attribute type 21 has an invalid length. [ 259.786805][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'. [ 259.807979][T10466] netlink: zone id is out of range [ 259.814283][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'. [ 259.847691][T10469] netlink: 'syz.2.1079': attribute type 6 has an invalid length. [ 259.937863][T10469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1079'. [ 260.011898][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 260.124957][T10488] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 260.214153][T10485] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 260.294058][T10485] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 261.488178][T10540] xt_hashlimit: size too large, truncated to 1048576 [ 261.809937][T10541] xt_hashlimit: size too large, truncated to 1048576 [ 261.877670][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 261.942949][T10551] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 262.086196][T10561] FAULT_INJECTION: forcing a failure. [ 262.086196][T10561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.146461][T10561] CPU: 1 UID: 0 PID: 10561 Comm: syz.3.1101 Not tainted syzkaller #0 PREEMPT(full) [ 262.146496][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.146512][T10561] Call Trace: [ 262.146521][T10561] [ 262.146531][T10561] dump_stack_lvl+0xe8/0x150 [ 262.146563][T10561] should_fail_ex+0x40c/0x560 [ 262.146605][T10561] _copy_from_user+0x2d/0xb0 [ 262.146632][T10561] ___sys_sendmsg+0x1c6/0x360 [ 262.146655][T10561] ? __lock_acquire+0x683/0x2cd0 [ 262.146683][T10561] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.146712][T10561] ? kstrtouint+0x6e/0xe0 [ 262.146770][T10561] ? __fget_files+0x2a/0x420 [ 262.146797][T10561] ? __fget_files+0x3a2/0x420 [ 262.146835][T10561] __sys_sendmmsg+0x27c/0x4e0 [ 262.146866][T10561] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.146895][T10561] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 262.146958][T10561] ? ksys_write+0x242/0x270 [ 262.146993][T10561] ? __pfx_ksys_write+0x10/0x10 [ 262.147030][T10561] __x64_sys_sendmmsg+0xa0/0xc0 [ 262.147054][T10561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.147078][T10561] do_syscall_64+0x174/0x580 [ 262.147100][T10561] ? clear_bhb_loop+0x40/0x90 [ 262.147134][T10561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.147156][T10561] RIP: 0033:0x7f142099ce59 [ 262.147176][T10561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.147194][T10561] RSP: 002b:00007f1421795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.147217][T10561] RAX: ffffffffffffffda RBX: 00007f1420c15fa0 RCX: 00007f142099ce59 [ 262.147233][T10561] RDX: 0000000000000002 RSI: 0000200000004800 RDI: 0000000000000003 [ 262.147247][T10561] RBP: 00007f1421795090 R08: 0000000000000000 R09: 0000000000000000 [ 262.147259][T10561] R10: 0000000024001c00 R11: 0000000000000246 R12: 0000000000000001 [ 262.147272][T10561] R13: 00007f1420c16038 R14: 00007f1420c15fa0 R15: 00007ffe11ce9c98 [ 262.147308][T10561] [ 262.383140][T10551] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 262.619783][T10565] netlink: 'syz.5.1102': attribute type 8 has an invalid length. [ 262.874137][T10583] __nla_validate_parse: 5 callbacks suppressed [ 262.874188][T10583] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1103'. [ 262.927052][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 263.009513][T10558] bond5: (slave veth3): Enslaving as an active interface with a down link [ 263.051782][T10562] bond5: (slave veth5): Enslaving as an active interface with a down link [ 263.814743][T10607] batman_adv: batadv0: Adding interface: dummy0 [ 263.859056][T10607] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 263.935404][T10607] batman_adv: batadv0: Interface activated: dummy0 [ 264.536658][T10634] FAULT_INJECTION: forcing a failure. [ 264.536658][T10634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.598151][T10634] CPU: 1 UID: 0 PID: 10634 Comm: syz.4.1115 Not tainted syzkaller #0 PREEMPT(full) [ 264.598183][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.598197][T10634] Call Trace: [ 264.598206][T10634] [ 264.598216][T10634] dump_stack_lvl+0xe8/0x150 [ 264.598250][T10634] should_fail_ex+0x40c/0x560 [ 264.598295][T10634] _copy_to_user+0x31/0xb0 [ 264.598325][T10634] simple_read_from_buffer+0xe1/0x170 [ 264.598361][T10634] proc_fail_nth_read+0x1bb/0x230 [ 264.598396][T10634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.598439][T10634] ? rw_verify_area+0x24a/0x4c0 [ 264.598476][T10634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.598504][T10634] vfs_read+0x213/0xa80 [ 264.598543][T10634] ? __pfx___mutex_lock+0x10/0x10 [ 264.598569][T10634] ? __pfx_vfs_read+0x10/0x10 [ 264.598604][T10634] ? __fget_files+0x2a/0x420 [ 264.598637][T10634] ? __fget_files+0x3a2/0x420 [ 264.598664][T10634] ? __fget_files+0x2a/0x420 [ 264.598702][T10634] ksys_read+0x150/0x270 [ 264.598737][T10634] ? __pfx_ksys_read+0x10/0x10 [ 264.598779][T10634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.598804][T10634] do_syscall_64+0x174/0x580 [ 264.598833][T10634] ? trace_irq_disable+0x3b/0x140 [ 264.598867][T10634] ? clear_bhb_loop+0x40/0x90 [ 264.598897][T10634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.598919][T10634] RIP: 0033:0x7fe7af15d68e [ 264.599097][T10634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.599207][T10634] RSP: 002b:00007fe7b0017fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.599231][T10634] RAX: ffffffffffffffda RBX: 00007fe7b00186c0 RCX: 00007fe7af15d68e [ 264.599245][T10634] RDX: 000000000000000f RSI: 00007fe7b00180a0 RDI: 0000000000000004 [ 264.599257][T10634] RBP: 00007fe7b0018090 R08: 0000000000000000 R09: 0000000000000000 [ 264.599270][T10634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.599281][T10634] R13: 00007fe7af416038 R14: 00007fe7af415fa0 R15: 00007ffd0a366ce8 [ 264.599315][T10634] [ 264.896974][T10592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1109'. [ 264.942678][T10592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1109'. [ 265.019176][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 265.263980][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 265.284213][T10640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.523503][ T5291] netdevsim netdevsim0 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.566930][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.704629][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 265.776020][T10661] 8021q: VLANs not supported on nlmon0 [ 265.797628][T10668] tipc: Enabling of bearer rejected, already enabled [ 265.913352][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1125'. [ 266.353484][T10685] bridge3: entered promiscuous mode [ 266.378891][T10683] can: request_module (can-proto-0) failed. [ 266.389219][T10685] bridge3: entered allmulticast mode [ 266.448235][T10685] team0: Port device bridge3 added [ 266.899874][T10706] netlink: 'syz.5.1134': attribute type 10 has an invalid length. [ 266.952200][T10706] team0: Device vxcan1 is of different type [ 267.346359][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 267.727561][T10739] netlink: 'syz.0.1143': attribute type 10 has an invalid length. [ 267.769318][T10739] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1143'. [ 271.796600][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 272.229907][T10834] netlink: 'syz.5.1160': attribute type 1 has an invalid length. [ 272.668135][T10838] net_ratelimit: 390 callbacks suppressed [ 272.668160][T10838] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 272.883478][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1162'. [ 273.971994][T10876] SET target dimension over the limit! [ 274.909583][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 275.065193][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1174'. [ 275.232984][T10890] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.381746][ T5633] block nbd0: Receive control failed (result -1) [ 275.791944][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 275.922756][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1175'. [ 277.008497][T10945] netlink: 'syz.5.1182': attribute type 6 has an invalid length. [ 277.115082][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 277.256754][ T5633] Bluetooth: hci5: link tx timeout [ 277.269520][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.197770][T10966] syzkaller0: entered promiscuous mode [ 278.250383][T10966] syzkaller0: entered allmulticast mode [ 278.480739][T10907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.855191][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1185'. [ 278.967317][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 279.139935][T10988] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.349451][ T5633] Bluetooth: hci5: command 0x0406 tx timeout [ 280.738035][T11027] Bluetooth: MGMT ver 1.23 [ 281.123053][T11018] syzkaller1: entered promiscuous mode [ 281.144244][T11018] syzkaller1: entered allmulticast mode [ 281.945683][T11035] tipc: Started in network mode [ 281.980522][T11035] tipc: Node identity ca6cc86941bf, cluster identity 4711 [ 281.998349][T11035] tipc: Enabled bearer , priority 0 [ 282.062255][T11040] syzkaller0: entered promiscuous mode [ 282.108296][T11040] syzkaller0: entered allmulticast mode [ 282.384322][T11043] netlink: 'syz.2.1200': attribute type 14 has an invalid length. [ 282.756265][T11040] tipc: Resetting bearer [ 282.790107][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 282.797009][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 282.849554][T11032] tipc: Resetting bearer [ 282.964312][T11032] tipc: Disabling bearer [ 283.339634][T11082] netlink: 'syz.3.1208': attribute type 21 has an invalid length. [ 283.408016][T11082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1208'. [ 283.523630][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 283.564541][T11090] vlan0: entered promiscuous mode [ 283.589711][T11090] batadv0: entered promiscuous mode [ 284.073976][T11103] ip6gretap0: entered promiscuous mode [ 284.500966][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 285.385571][T11137] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1219'. [ 285.756760][T11145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.810131][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 286.367367][T11170] tipc: Resetting bearer [ 286.888949][T11187] tipc: Enabled bearer , priority 0 [ 286.918365][T11190] syzkaller0: entered promiscuous mode [ 286.931732][T11190] syzkaller0: entered allmulticast mode [ 286.982397][T11193] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 287.218188][T11187] tipc: Resetting bearer [ 287.282111][T11182] tipc: Resetting bearer [ 287.394403][T11182] tipc: Disabling bearer [ 287.527570][T11216] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 287.610351][T11216] bridge0: port 2(netdevsim1) entered blocking state [ 287.676126][T11216] bridge0: port 2(netdevsim1) entered disabled state [ 287.737952][T11216] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 287.837052][T11216] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 287.913844][T11216] vlan2: entered promiscuous mode [ 287.939441][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1234'. [ 287.987463][T11216] geneve0: entered promiscuous mode [ 288.016445][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 288.412631][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 288.459531][T11245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1238'. [ 288.539255][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 288.650759][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 288.722448][T11246] bond1: entered promiscuous mode [ 289.131094][T11260] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1242'. [ 290.278793][T11299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1249'. [ 290.343753][T11305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.574406][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 292.043722][T11260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.494910][T11351] macvtap0: entered promiscuous mode [ 292.610956][T11360] syzkaller0: entered promiscuous mode [ 292.646230][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 292.664476][T11360] syzkaller0: entered allmulticast mode [ 292.854512][T11370] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 293.696901][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 293.747261][T11397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.954991][T11392] vlan0: entered promiscuous mode [ 294.061372][T11397] team0: Mode changed to "activebackup" [ 294.142740][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 295.308754][T11438] : entered promiscuous mode [ 296.178499][T11458] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1279'. [ 296.556957][T11480] : option downdelay: invalid value (18446744073709547007) [ 296.581775][T11480] : option downdelay: allowed values 0 - 2147483647 [ 296.653136][T11480]  (unregistering): Released all slaves [ 297.293274][T11489] tipc: Enabled bearer , priority 0 [ 297.370618][T11498] syzkaller0: entered promiscuous mode [ 297.424611][T11498] syzkaller0: entered allmulticast mode [ 297.639479][T11514] tipc: Resetting bearer [ 297.681063][T11477] tipc: Resetting bearer [ 297.768470][T11477] tipc: Disabling bearer [ 298.498064][T11560] syzkaller1: entered promiscuous mode [ 298.529240][T11565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.550356][T11560] syzkaller1: entered allmulticast mode [ 299.119249][T11585] IPVS: length: 609091586 != 8 [ 299.382864][T11596] tipc: Enabled bearer , priority 0 [ 299.423053][T11600] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1305'. [ 299.441581][T11596] syzkaller0: entered promiscuous mode [ 299.459072][T11596] syzkaller0: entered allmulticast mode [ 299.521954][T11604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1306'. [ 299.589846][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1306'. [ 299.879575][T11623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1308'. [ 299.945879][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 299.974097][T11628] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 300.378554][T11610] tipc: Resetting bearer [ 300.480810][T11595] tipc: Resetting bearer [ 300.573590][T11595] tipc: Disabling bearer [ 300.660536][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1310'. [ 300.698155][ T5737] tipc: Node number set to 450626716 [ 300.709644][T11637] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 300.850809][T11597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1303'. [ 300.957149][T11597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1303'. [ 301.058890][T11646] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 301.087485][T11646] netlink: 'syz.4.1313': attribute type 4 has an invalid length. [ 301.103903][T11646] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1313'. [ 301.127246][T11646] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 301.174851][T11646] netlink: 'syz.4.1313': attribute type 4 has an invalid length. [ 301.222177][T11646] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1313'. [ 301.241150][T11656] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 301.294749][T11635] bond6: entered promiscuous mode [ 301.338689][T11597] geneve3: entered promiscuous mode [ 301.373138][T11656] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 301.760200][T11675] sctp: [Deprecated]: syz.4.1321 (pid 11675) Use of int in maxseg socket option. [ 301.760200][T11675] Use struct sctp_assoc_value instead [ 302.085510][T11685] x_tables: duplicate underflow at hook 1 [ 302.093888][T11689] tipc: Enabling of bearer rejected, already enabled [ 302.746877][T11713] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 302.901638][T11723] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 302.993441][T11713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.232811][T11715] bond2: (slave veth3): Enslaving as an active interface with a down link [ 303.256947][T11721] batman_adv: batadv0: Interface deactivated: dummy0 [ 303.341321][T11721] batman_adv: batadv0: Removing interface: dummy0 [ 303.795235][T11721] bond2: (slave dummy0): making interface the new active one [ 303.830174][T11721] dummy0: entered promiscuous mode [ 303.858580][T11721] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 303.894189][T11723] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 303.948376][T11730] bond2: (slave dummy0): Releasing active interface [ 304.001251][T11730] dummy0 (unregistering): left promiscuous mode [ 304.178959][T11747] tipc: Enabled bearer , priority 0 [ 304.364006][T11744] tipc: Resetting bearer [ 304.386198][T11750] syzkaller0: entered promiscuous mode [ 304.443795][T11750] syzkaller0: entered allmulticast mode [ 304.512575][T11740] tipc: Resetting bearer [ 304.631065][T11740] tipc: Disabling bearer [ 304.806768][ T7213] IPVS: starting estimator thread 0... [ 304.935040][T11776] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 304.968997][T11783] IPVS: using max 27 ests per chain, 64800 per kthread [ 304.975503][T11776] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 305.015291][T11776] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 305.053037][T11776] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 305.395457][T11765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.874109][T11809] xt_hashlimit: size too large, truncated to 1048576 [ 306.123930][T11816] __nla_validate_parse: 3 callbacks suppressed [ 306.123957][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 306.199096][T11816] 8021q: VLANs not supported on nlmon0 [ 306.558128][T11832] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 306.578328][T11830] tipc: Enabled bearer , priority 0 [ 306.654528][T11830] syzkaller0: entered promiscuous mode [ 306.684688][T11830] syzkaller0: entered allmulticast mode [ 306.849087][T11830] tipc: Resetting bearer [ 306.905996][T11828] tipc: Resetting bearer [ 307.024201][T11828] tipc: Disabling bearer [ 307.080676][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1358'. [ 307.368197][T11843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1358'. [ 307.406186][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 307.420344][ T8860] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.460144][ T8860] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.487920][ T8860] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.531158][ T8860] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.684784][T11859] netlink: 'syz.4.1362': attribute type 4 has an invalid length. [ 307.712540][T11860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.722594][T11860] IPv6: NLM_F_CREATE should be set when creating new route [ 307.730476][T11860] IPv6: NLM_F_CREATE should be set when creating new route [ 307.736564][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1362'. [ 307.738064][T11860] IPv6: NLM_F_CREATE should be set when creating new route [ 307.794607][T11860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.883098][T11867] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 307.893031][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1365'. [ 307.924316][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 307.938120][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 307.956280][T11865] 8021q: VLANs not supported on nlmon0 [ 308.209222][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 308.724179][T11906] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 308.749691][T11906] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1375'. [ 309.161086][T11919] 8021q: VLANs not supported on nlmon0 [ 311.558156][T11968] bond6: Removing last arp target with arp_interval on [ 311.600850][T11954] netlink: 'syz.5.1387': attribute type 11 has an invalid length. [ 311.616176][T11954] __nla_validate_parse: 1 callbacks suppressed [ 311.616200][T11954] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1387'. [ 311.803681][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 311.894454][T11949] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 312.101804][T11996] bond7: entered promiscuous mode [ 312.122767][T11996] bond7: entered allmulticast mode [ 312.136544][T11996] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.623969][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1403'. [ 313.261027][T12045] netlink: 'syz.2.1408': attribute type 2 has an invalid length. [ 313.397260][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 313.954629][T12064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1412'. [ 314.710902][T12084] netlink: 'syz.4.1419': attribute type 11 has an invalid length. [ 314.873213][T12090] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 315.048928][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 315.255081][T12102] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.288418][T12102] bond8: (slave bond9): making interface the new active one [ 315.297263][T12102] bond8: (slave bond9): Enslaving as an active interface with an up link [ 315.459710][T12115] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1425'. [ 315.489605][T12116] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1425'. [ 317.347451][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.426244][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 355.394469][ T50] Bluetooth: hci5: link tx timeout [ 355.399896][ T50] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 357.425879][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 365.213007][T12252] ip6gre2: entered allmulticast mode [ 365.252439][T12252] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1428'. [ 365.270884][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1428'. [ 365.293107][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 365.324399][T12252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1428'. [ 365.567833][T12267] netlink: 'syz.3.1434': attribute type 32 has an invalid length. [ 365.622052][T12271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1434'. [ 365.756745][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'. [ 365.784774][T12273] nbd: couldn't find a device at index 65546 [ 365.851547][T12276] syzkaller0: entered promiscuous mode [ 365.873345][T12276] syzkaller0: entered allmulticast mode [ 366.526693][T12304] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1442'. [ 366.634854][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1446'. [ 366.641541][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1445'. [ 366.958056][T12318] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 367.250827][T12336] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 367.433076][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 367.892216][T12369] pim6reg1: entered promiscuous mode [ 367.898416][T12369] pim6reg1: entered allmulticast mode [ 368.095243][T12373] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 368.424704][T12349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.620061][T12381] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 368.908477][ T8873] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 369.291125][T12410] netlink: 'syz.0.1473': attribute type 2 has an invalid length. [ 369.360511][T12415] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20001 [ 369.381656][T12414] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20001 [ 369.540058][T12425] bridge_slave_0: left allmulticast mode [ 369.579458][T12425] bridge_slave_0: left promiscuous mode [ 369.602583][T12425] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.624517][T12425] bridge_slave_1: left allmulticast mode [ 369.636467][T12425] bridge_slave_1: left promiscuous mode [ 369.648487][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.664901][T12425] team0: Port device team_slave_0 removed [ 369.680772][T12425] team0: Port device team_slave_1 removed [ 369.688158][T12425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 369.708367][T12436] xt_policy: output policy not valid in PREROUTING and INPUT [ 370.637177][T12465] __nla_validate_parse: 6 callbacks suppressed [ 370.637198][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1488'. [ 370.721621][T12470] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1488'. [ 370.865241][T12472] netlink: 'syz.3.1491': attribute type 5 has an invalid length. [ 371.481750][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'. [ 371.816505][T12503] xfrm1: entered allmulticast mode [ 371.939422][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 372.058349][T12518] netlink: 'syz.2.1502': attribute type 10 has an invalid length. [ 372.092511][T12518] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1502'. [ 372.166717][T12521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1505'. [ 372.197567][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1505'. [ 372.269647][T12521] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 372.355466][T12521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 372.381630][T12524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 372.411221][T12526] netlink: 616 bytes leftover after parsing attributes in process `syz.3.1507'. [ 372.618171][T12537] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1510'. [ 372.658732][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'. [ 373.164180][T12554] x_tables: duplicate underflow at hook 1 [ 373.805975][T12568] syzkaller1: entered promiscuous mode [ 373.850079][T12568] syzkaller1: entered allmulticast mode [ 373.858927][T12576] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 373.925526][T12574] syzkaller0: entered promiscuous mode [ 373.966233][T12574] syzkaller0: entered allmulticast mode [ 375.982789][T12615] __nla_validate_parse: 2 callbacks suppressed [ 375.982816][T12615] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1530'. [ 376.015685][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 376.026975][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 376.046760][ T42] IPVS: starting estimator thread 0... [ 376.053494][T12615] netlink: 'syz.2.1530': attribute type 1 has an invalid length. [ 376.087510][T12617] netlink: 'syz.5.1531': attribute type 58 has an invalid length. [ 376.126476][T12617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1531'. [ 376.147078][T12621] IPVS: using max 25 ests per chain, 60000 per kthread [ 376.461514][T12634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1536'. [ 376.522250][T12639] netlink: 'syz.3.1536': attribute type 3 has an invalid length. [ 376.702249][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1540'. [ 376.886984][T12650] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1541'. [ 376.999816][T12654] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1542'. [ 377.320781][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1546'. [ 377.397208][T12665] syzkaller0: entered promiscuous mode [ 377.428444][T12665] syzkaller0: entered allmulticast mode [ 377.529784][T12668] Cannot find set identified by id 0 to match [ 378.090179][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 378.731057][T12704] netlink: 'syz.4.1558': attribute type 11 has an invalid length. [ 378.767607][T12704] netlink: 'syz.4.1558': attribute type 4 has an invalid length. [ 378.791515][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.296438][T12710] can: request_module (can-proto-3) failed. [ 379.531716][T12731] netlink: 'syz.0.1564': attribute type 29 has an invalid length. [ 379.878503][T12740] IPv6: sit1: Disabled Multicast RS [ 381.693171][T12806] dummy0: entered allmulticast mode [ 381.814368][T12807] bridge_slave_0: left allmulticast mode [ 381.842059][T12807] bridge_slave_0: left promiscuous mode [ 381.860503][T12807] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.914168][T12807] bridge_slave_1: left allmulticast mode [ 381.925353][T12807] bridge_slave_1: left promiscuous mode [ 381.945167][T12807] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.045831][T12807] bond0: (slave bond_slave_0): Releasing backup interface [ 382.139725][T12807] bond0: (slave bond_slave_1): Releasing backup interface [ 382.189422][T12807] team0: Port device team_slave_0 removed [ 382.230397][T12807] team0: Port device team_slave_1 removed [ 382.249857][T12807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.269615][T12807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.306848][T12807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.331212][T12807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.365351][T12807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.585144][T12813] 5Ò: entered promiscuous mode [ 382.712675][T12807] dummy0: left allmulticast mode [ 383.009236][T12834] __nla_validate_parse: 3 callbacks suppressed [ 383.009257][T12834] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1587'. [ 383.038813][T12834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1587'. [ 383.900998][T12847] tipc: Enabled bearer , priority 0 [ 384.041968][T12852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1593'. [ 384.146907][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 384.194487][T12842] tipc: Disabling bearer [ 384.220753][T12861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1594'. [ 384.232735][T12856] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1595'. [ 384.253818][T12861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1594'. [ 385.106860][T12885] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 385.407697][T12885] bond2: entered promiscuous mode [ 385.418845][T12885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.624804][ T5633] block nbd1: Receive control failed (result -32) [ 385.946733][T12902] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1605'. [ 386.071517][T12902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1605'. [ 386.629732][T12923] ip6t_srh: unknown srh match flags 4000 [ 386.677049][T12924] ip6t_srh: unknown srh match flags 4000 [ 386.949854][T12934] netlink: 'syz.5.1615': attribute type 3 has an invalid length. [ 386.964442][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1615'. [ 387.353244][T12940] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 387.517256][T12946] sctp: [Deprecated]: syz.5.1618 (pid 12946) Use of int in max_burst socket option. [ 387.517256][T12946] Use struct sctp_assoc_value instead [ 387.675455][T12940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.721426][T12948] bond3: entered promiscuous mode [ 387.732510][T12948] bond3: entered allmulticast mode [ 387.881277][T12939] macvlan2: entered promiscuous mode [ 387.921960][T12939] macvlan2: entered allmulticast mode [ 387.958565][T12939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.082688][T12959] __nla_validate_parse: 1 callbacks suppressed [ 388.082714][T12959] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1621'. [ 388.262702][T12959] nbd2: detected capacity change from 0 to 1 [ 388.351228][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.381451][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.404415][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.423470][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.442610][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.463412][T12262] ldm_validate_partition_table(): Disk read failed. [ 388.484827][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.507936][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.532181][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.551921][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.570944][T12262] Dev nbd2: unable to read RDB block 0 [ 388.596933][T12262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.615274][T12262] nbd2: unable to read partition table [ 388.626042][T12262] nbd2: partition table beyond EOD, truncated [ 388.840602][T12968] nbd: must specify at least one socket [ 388.843902][ T5633] block nbd2: Receive control failed (result -32) [ 389.008080][T12971] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1623'. [ 389.181740][T12975] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 389.199214][T12975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.792986][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 395.538493][T12982] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1626'. [ 395.560161][T12987] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 396.229867][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1632'. [ 396.263845][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1632'. [ 396.274011][T13014] netlink: 58 bytes leftover after parsing attributes in process `syz.5.1632'. [ 396.321255][T13019] sctp: [Deprecated]: syz.0.1634 (pid 13019) Use of int in maxseg socket option. [ 396.321255][T13019] Use struct sctp_assoc_value instead [ 396.352985][T13021] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1635'. [ 396.703287][T13028] syzkaller0: renamed from batadv_slave_1 (while UP) [ 396.735027][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1636'. [ 396.760378][T13030] tunl0: entered allmulticast mode [ 397.251457][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 397.261831][T13040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1640'. [ 398.767432][T12997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.207765][T13070] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1643'. [ 399.915123][T13089] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1651'. [ 400.148034][T13099] 8021q: VLANs not supported on nlmon0 [ 400.397746][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.427182][T13104] ip6tnl0: Caught tx_queue_len zero misconfig [ 400.453126][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.460209][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.467225][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.474670][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.481927][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.489517][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.497465][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.504732][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.512084][T13101] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 400.565852][T13111] __nla_validate_parse: 131 callbacks suppressed [ 400.565894][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.625541][T13114] netlink: 'syz.2.1655': attribute type 14 has an invalid length. [ 400.634543][T13114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.688752][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.717070][T13115] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.763944][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.796200][T13115] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.815483][T13118] netlink: 'syz.5.1659': attribute type 1 has an invalid length. [ 400.853360][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.933458][T13116] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1655'. [ 401.543309][T13122] macvtap0: entered promiscuous mode [ 401.698425][T13131] netlink: 'syz.4.1662': attribute type 10 has an invalid length. [ 401.739407][T13131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1662'. [ 401.815189][T13131] team0: entered promiscuous mode [ 401.873923][T13131] team0: entered allmulticast mode [ 401.916388][T13131] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.994022][T13131] bridge0: port 1(team0) entered blocking state [ 402.032305][T13131] bridge0: port 1(team0) entered disabled state [ 402.061308][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 402.133170][T13144] 8021q: VLANs not supported on nlmon0 [ 402.440854][T13151] xt_hashlimit: overflow, rate too high: 0 [ 402.762760][T13168] netlink: 'syz.0.1674': attribute type 13 has an invalid length. [ 402.811682][T13168] netlink: 'syz.0.1674': attribute type 17 has an invalid length. [ 402.866271][T13168] netlink: 'syz.0.1674': attribute type 27 has an invalid length. [ 403.160375][T13174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.429665][ T8871] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.463230][ T8871] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.561741][ T8871] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.913250][T13197] 8021q: VLANs not supported on nlmon0 [ 404.309665][T13211] syzkaller1: entered promiscuous mode [ 404.328950][T13211] syzkaller1: entered allmulticast mode [ 404.888572][T13232] netlink: 'syz.2.1688': attribute type 15 has an invalid length. [ 404.899448][T13232] netlink: 'syz.2.1688': attribute type 25 has an invalid length. [ 405.061221][T13228] bond2: Unable to set up delay as MII monitoring is disabled [ 405.102360][T13228] bond2 (unregistering): Released all slaves [ 405.773537][T13247] : entered promiscuous mode [ 405.841861][T13247] syzkaller0: entered promiscuous mode [ 405.876891][T13247] syzkaller0: entered allmulticast mode [ 406.760987][T13279] __nla_validate_parse: 5 callbacks suppressed [ 406.761072][T13279] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1698'. [ 406.817065][T13281] batadv_slave_1: entered promiscuous mode [ 406.993682][T13286] net_ratelimit: 1656 callbacks suppressed [ 406.993703][T13286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.733147][T13303] sctp: [Deprecated]: syz.5.1704 (pid 13303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.733147][T13303] Use struct sctp_sack_info instead [ 407.798337][T13305] netlink: 'syz.2.1706': attribute type 23 has an invalid length. [ 407.819689][T13303] sctp: [Deprecated]: syz.5.1704 (pid 13303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.819689][T13303] Use struct sctp_sack_info instead [ 407.851688][T13305] netlink: 'syz.2.1706': attribute type 21 has an invalid length. [ 407.851968][T13307] netlink: 'syz.2.1706': attribute type 23 has an invalid length. [ 407.967911][T13307] netlink: 'syz.2.1706': attribute type 21 has an invalid length. [ 408.165370][T13316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 408.313295][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1699'. [ 408.410801][T13319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1699'. [ 408.510535][T13278] batadv_slave_1: left promiscuous mode [ 408.793208][T13330] tipc: Failed to remove unknown binding: 66,1,1/0:1957282672/1957282674 [ 409.400128][T13349] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 410.671886][T13368] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 410.875739][T13379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.723482][T13366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.791017][T13366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.777927][T13366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.841215][T13366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.334355][T13413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1730'. [ 413.734531][T13366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.799145][T13366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.375266][T13366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.442916][T13366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.566691][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 414.719812][T13427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1734'. [ 415.308854][T13432] syzkaller0: entered promiscuous mode [ 415.350799][T13432] syzkaller0: entered allmulticast mode [ 415.563000][ T8183] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.606457][ T8183] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.194201][ T7404] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.244243][ T7404] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.336424][ T8183] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.374495][ T8183] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.492610][ T8183] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.548637][ T8183] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.698449][T13448] netlink: 'syz.0.1738': attribute type 6 has an invalid length. [ 417.303940][T13457] x_tables: duplicate underflow at hook 1 [ 417.412167][ T29] audit: type=1804 audit(1781698195.175:4): pid=13457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1742" name="/newroot/355/cgroup.controllers" dev="tmpfs" ino=1837 res=1 errno=0 [ 417.509098][T13459] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 417.535341][ T29] audit: type=1800 audit(1781698195.215:5): pid=13457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1742" name="cgroup.controllers" dev="tmpfs" ino=1837 res=0 errno=0 [ 417.663766][T13459] netlink: 'syz.0.1741': attribute type 12 has an invalid length. [ 417.746412][T13459] netlink: 'syz.0.1741': attribute type 29 has an invalid length. [ 417.888312][T13459] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1741'. [ 417.904912][T13464] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 417.946282][T13459] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1741'. [ 419.129394][T13478] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1746'. [ 419.847066][T13493] syzkaller0: entered promiscuous mode [ 419.853093][T13493] syzkaller0: entered allmulticast mode [ 420.204066][T13500] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 420.234671][T13500] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 420.519691][T13509] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 420.858919][T13509] 8021q: adding VLAN 0 to HW filter on device bond10 [ 420.959781][T13505] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 421.000382][T13523] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1758'. [ 421.024524][T13517] bond10: entered promiscuous mode [ 421.035964][T13517] bond10: entered allmulticast mode [ 421.061067][T13522] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 421.102195][T13522] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.046491][T13573] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 423.056211][T13571] syzkaller0: entered promiscuous mode [ 423.079277][T13571] syzkaller0: entered allmulticast mode [ 423.103011][T13573] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1772'. [ 423.205744][T13573] netlink: 658 bytes leftover after parsing attributes in process `syz.5.1772'. [ 423.291652][T13573] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1772'. [ 423.378926][T13573] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 423.422880][T13573] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1772'. [ 423.478800][T13573] netlink: 658 bytes leftover after parsing attributes in process `syz.5.1772'. [ 423.528642][T13573] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1772'. [ 423.590555][T13578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.605766][T13573] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 423.659851][T13573] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1772'. [ 423.738865][T13573] netlink: 658 bytes leftover after parsing attributes in process `syz.5.1772'. [ 423.803453][T13573] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 425.446123][T13614] openvswitch: netlink: IPv4 tun info is not correct [ 426.037826][T13622] __nla_validate_parse: 4 callbacks suppressed [ 426.037847][T13622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 426.640181][T13622] bond0: (slave 07ÿ): Releasing backup interface [ 426.710997][T13631] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1787'. [ 426.817828][T13622] ÿ: entered promiscuous mode [ 426.834475][T13633] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1788'. [ 426.845180][T13622] ÿ: entered allmulticast mode [ 426.879465][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1788'. [ 427.243729][T13639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1789'. [ 427.397487][T13644] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1790'. [ 427.459017][T13644] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1790'. [ 427.733533][T13651] sctp: [Deprecated]: syz.3.1793 (pid 13651) Use of int in max_burst socket option. [ 427.733533][T13651] Use struct sctp_assoc_value instead [ 428.143412][T13671] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 428.277043][T13671] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 428.350720][T13671] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 428.597414][T13685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1800'. [ 429.725065][T13720] SET target dimension over the limit! [ 429.933612][T13719] Bluetooth: MGMT ver 1.23 [ 430.047020][T13719] only policy match revision 0 supported [ 430.047048][T13719] unable to load match [ 430.438540][T13736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.539101][T13740] tbf_change: 23 callbacks suppressed [ 430.539128][T13740] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 431.116268][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 431.191492][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 431.580149][T13768] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 431.693598][T13768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.754772][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 431.833860][T13780] netlink: 'syz.4.1822': attribute type 1 has an invalid length. [ 432.920205][T13798] xt_hashlimit: size too large, truncated to 1048576 [ 435.113534][T13839] tipc: Enabling of bearer rejected, already enabled [ 435.241599][T13839] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 435.340043][T13839] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 436.089836][T13860] netlink: 'syz.5.1840': attribute type 11 has an invalid length. [ 437.232205][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 437.585003][T13888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1848'. [ 437.649174][T13886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1847'. [ 437.656539][T13888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1848'. [ 437.726458][T13891] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 437.787766][T13888] gretap0: entered promiscuous mode [ 437.794391][T13891] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1850'. [ 437.846681][T13888] gretap0: left promiscuous mode [ 437.879072][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 437.900244][T13891] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 437.926216][T13891] netlink: 638 bytes leftover after parsing attributes in process `syz.3.1850'. [ 437.952967][T13891] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1850'. [ 438.045322][T13896] veth1_to_batadv: entered promiscuous mode [ 438.071268][T13898] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 438.087487][T13898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 438.099640][T13892] netlink: 'syz.2.1849': attribute type 1 has an invalid length. [ 438.130991][T13892] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1849'. [ 440.059392][T13935] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 440.130416][T13935] bond7 (unregistering): Released all slaves [ 440.239276][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.368157][T13936] dvmrp0: entered allmulticast mode [ 440.398290][T13947] tipc: Invalid UDP bearer configuration [ 440.398517][T13947] tipc: Enabling of bearer rejected, failed to enable media [ 441.086442][T13962] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 441.174806][T13963] netlink: 'syz.0.1869': attribute type 1 has an invalid length. [ 441.865390][T13985] xt_hashlimit: size too large, truncated to 1048576 [ 442.399813][T14003] __nla_validate_parse: 10 callbacks suppressed [ 442.399841][T14003] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1877'. [ 442.658326][T14004] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 442.710693][T14006] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1879'. [ 442.755365][T14004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 443.436046][ T50] block nbd3: Receive control failed (result -32) [ 443.454149][ T5633] block nbd3: Receive control failed (result -32) [ 443.890518][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 444.182946][T14037] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1885'. [ 444.216080][T14037] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1885'. [ 444.244223][T14037] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1885'. [ 444.473379][T14043] netlink: 'syz.2.1889': attribute type 32 has an invalid length. [ 444.798833][T14050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1893'. [ 444.818266][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 444.884303][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1895'. [ 444.945434][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1895'. [ 445.560277][T14072] sctp: [Deprecated]: syz.3.1898 (pid 14072) Use of int in max_burst socket option deprecated. [ 445.560277][T14072] Use struct sctp_assoc_value instead [ 445.859538][T14081] netlink: Unknown conntrack attr (type=2304, max=9) [ 447.773202][T14132] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 447.927667][T14143] syz.3.1917: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 448.047405][T14143] CPU: 0 UID: 0 PID: 14143 Comm: syz.3.1917 Not tainted syzkaller #0 PREEMPT(full) [ 448.047441][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.047461][T14143] Call Trace: [ 448.047470][T14143] [ 448.047486][T14143] dump_stack_lvl+0xe8/0x150 [ 448.047524][T14143] warn_alloc+0x249/0x340 [ 448.047561][T14143] ? __pfx_stack_trace_save+0x10/0x10 [ 448.047604][T14143] ? __pfx_warn_alloc+0x10/0x10 [ 448.047644][T14143] ? __kasan_kmalloc+0x93/0xb0 [ 448.047689][T14143] ? __kmalloc_cache_noprof+0x318/0x660 [ 448.047723][T14143] ? xskq_create+0x56/0x170 [ 448.047873][T14143] ? xsk_init_queue+0x8a/0xe0 [ 448.047902][T14143] ? xsk_setsockopt+0x52a/0x960 [ 448.047931][T14143] ? do_sock_setsockopt+0x17c/0x1b0 [ 448.048014][T14143] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 448.048038][T14143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.048073][T14143] __vmalloc_node_range_noprof+0x12c/0x1730 [ 448.048144][T14143] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 448.048187][T14143] ? __kasan_kmalloc+0x93/0xb0 [ 448.048230][T14143] vmalloc_user_noprof+0xad/0xe0 [ 448.048263][T14143] ? xskq_create+0xbf/0x170 [ 448.048298][T14143] xskq_create+0xbf/0x170 [ 448.048335][T14143] xsk_init_queue+0x8a/0xe0 [ 448.048370][T14143] xsk_setsockopt+0x52a/0x960 [ 448.048400][T14143] ? __fget_files+0x2a/0x420 [ 448.048431][T14143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 448.048463][T14143] ? __pfx_aa_sk_perm+0x10/0x10 [ 448.048505][T14143] ? aa_sock_opt_perm+0xff/0x1a0 [ 448.048545][T14143] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 448.048577][T14143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 448.048610][T14143] do_sock_setsockopt+0x17c/0x1b0 [ 448.048638][T14143] __x64_sys_setsockopt+0x13d/0x1b0 [ 448.048665][T14143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.048701][T14143] do_syscall_64+0x174/0x580 [ 448.048775][T14143] ? trace_irq_disable+0x3b/0x140 [ 448.048818][T14143] ? clear_bhb_loop+0x40/0x90 [ 448.048849][T14143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.048873][T14143] RIP: 0033:0x7f142099ce59 [ 448.048904][T14143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.048925][T14143] RSP: 002b:00007f1421795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 448.048952][T14143] RAX: ffffffffffffffda RBX: 00007f1420c15fa0 RCX: 00007f142099ce59 [ 448.048970][T14143] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 448.048985][T14143] RBP: 00007f1420a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 448.049000][T14143] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.049014][T14143] R13: 00007f1420c16038 R14: 00007f1420c15fa0 R15: 00007ffe11ce9c98 [ 448.049055][T14143] [ 448.525500][T14143] Mem-Info: [ 448.598641][T14143] active_anon:6638 inactive_anon:0 isolated_anon:0 [ 448.598641][T14143] active_file:3531 inactive_file:40124 isolated_file:0 [ 448.598641][T14143] unevictable:768 dirty:219 writeback:0 [ 448.598641][T14143] slab_reclaimable:12648 slab_unreclaimable:102619 [ 448.598641][T14143] mapped:29579 shmem:1298 pagetables:1723 [ 448.598641][T14143] sec_pagetables:0 bounce:0 [ 448.598641][T14143] kernel_misc_reclaimable:0 [ 448.598641][T14143] free:1299753 free_pcp:8245 free_cma:0 [ 448.895790][T14143] Node 0 active_anon:26752kB inactive_anon:0kB active_file:14124kB inactive_file:160300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118316kB dirty:872kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13880kB pagetables:6816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 449.139919][T14149] netlink: 'syz.3.1917': attribute type 10 has an invalid length. [ 449.182964][T14143] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 449.341833][T14161] netlink: 'syz.3.1917': attribute type 10 has an invalid length. [ 449.401725][T14143] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.512281][T14143] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 449.585200][T14143] Node 0 DMA32 free:1253672kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26864kB inactive_anon:0kB active_file:14124kB inactive_file:160300kB unevictable:1536kB writepending:872kB zspages:0kB present:3129332kB managed:2552980kB mlocked:0kB bounce:0kB free_pcp:45596kB local_pcp:20612kB free_cma:0kB [ 449.704922][T14149] [ 449.709454][T14149] ============================================ [ 449.709480][T14143] lowmem_reserve[]: [ 449.719255][T14149] WARNING: possible recursive locking detected [ 449.719294][T14149] syzkaller #0 Not tainted [ 449.719308][T14149] -------------------------------------------- [ 449.719318][T14149] syz.3.1917/14149 is trying to acquire lock: [ 449.719333][T14149] ffff888034700e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 449.775877][T14149] [ 449.775877][T14149] but task is already holding lock: [ 449.789459][T14149] ffff888034700e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_open+0xeb/0x220 [ 449.799521][T14143] 0 [ 449.807322][T14149] and the lock comparison function returns 0: [ 449.807348][T14149] [ 449.807348][T14149] other info that might help us debug this: [ 449.807360][T14149] Possible unsafe locking scenario: [ 449.807360][T14149] [ 449.807371][T14149] CPU0 [ 449.807393][T14149] ---- [ 449.807402][T14149] lock(&dev_instance_lock_key#3); [ 449.807470][T14149] lock(&dev_instance_lock_key#3); [ 449.807497][T14149] [ 449.807497][T14149] *** DEADLOCK *** [ 449.807497][T14149] [ 449.807503][T14149] May be due to missing lock nesting notation [ 449.807503][T14149] [ 449.807513][T14149] 2 locks held by syz.3.1917/14149: [ 449.807528][T14149] #0: ffffffff8fdbd640 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 449.906993][T14149] #1: ffff888034700e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_open+0xeb/0x220 [ 449.919990][T14149] [ 449.919990][T14149] stack backtrace: [ 449.926653][T14149] CPU: 0 UID: 0 PID: 14149 Comm: syz.3.1917 Not tainted syzkaller #0 PREEMPT(full) [ 449.926682][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.926696][T14149] Call Trace: [ 449.926707][T14149] [ 449.926717][T14149] dump_stack_lvl+0xe8/0x150 [ 449.926744][T14149] print_deadlock_bug+0x279/0x290 [ 449.926779][T14149] __lock_acquire+0x24bf/0x2cd0 [ 449.927136][T14149] ? __lock_acquire+0x683/0x2cd0 [ 449.927157][T14149] ? do_set_master+0x563/0x720 [ 449.927179][T14149] ? do_setlink+0xe7b/0x4670 [ 449.927197][T14149] ? rtnl_newlink+0x15c2/0x1bd0 [ 449.927228][T14149] ? rtnetlink_rcv_msg+0x802/0xc00 [ 449.927257][T14149] ? netlink_rcv_skb+0x226/0x4a0 [ 449.927428][T14149] ? netlink_unicast+0x7bb/0x940 [ 449.927457][T14149] ? netlink_sendmsg+0x813/0xb40 [ 449.927477][T14149] ? ____sys_sendmsg+0x9b9/0xa20 [ 449.927497][T14149] ? ___sys_sendmsg+0x2a5/0x360 [ 449.927516][T14149] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 449.927535][T14149] ? do_syscall_64+0x174/0x580 [ 449.927552][T14149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.927575][T14149] ? __ethtool_get_link_ksettings+0x109/0x250 [ 449.927602][T14149] lock_acquire+0x106/0x350 [ 449.927627][T14149] ? __ethtool_get_link_ksettings+0x109/0x250 [ 449.927658][T14149] __mutex_lock+0x19d/0x1590 [ 449.927717][T14149] ? __ethtool_get_link_ksettings+0x109/0x250 [ 449.927744][T14149] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.927801][T14149] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 449.927862][T14149] ? __wake_up_common_lock+0x195/0x1f0 [ 449.927906][T14149] ? __ethtool_get_link_ksettings+0x109/0x250 [ 449.927936][T14149] ? __pfx___mutex_lock+0x10/0x10 [ 449.927961][T14149] ? igmp_group_added+0x238/0x910 [ 449.928015][T14149] ? igmpv3_del_delrec+0x204/0x710 [ 449.928054][T14149] __ethtool_get_link_ksettings+0x109/0x250 [ 449.928087][T14149] bond_netdev_event+0x643/0xf80 [ 449.928117][T14149] ? __pfx_bond_netdev_event+0x10/0x10 [ 449.928152][T14149] ? ipmr_device_event+0x1f6/0x220 [ 449.928209][T14149] notifier_call_chain+0x1a5/0x3d0 [ 449.928238][T14149] __dev_notify_flags+0x1aa/0x310 [ 449.928261][T14149] ? __pfx___dev_notify_flags+0x10/0x10 [ 449.928277][T14149] ? __dev_change_flags+0x5f1/0x820 [ 449.928297][T14149] ? __pfx___dev_change_flags+0x10/0x10 [ 449.928319][T14149] netif_change_flags+0xde/0x1b0 [ 449.928401][T14149] dev_change_flags+0x128/0x260 [ 449.928436][T14149] vlan_device_event+0x1b4e/0x1f00 [ 449.928533][T14149] ? packet_notifier+0xf1b/0xf70 [ 449.928591][T14149] ? br_device_event+0x282/0x9c0 [ 449.928638][T14149] ? __pfx_phonet_device_notify+0x10/0x10 [ 449.928694][T14149] ? __pfx_vlan_device_event+0x10/0x10 [ 449.928726][T14149] ? bcm_notifier+0xa9/0x890 [ 449.928913][T14149] ? raw_notifier+0x9d/0x7d0 [ 449.929147][T14149] ? cgw_notifier+0x314/0x380 [ 449.929171][T14149] notifier_call_chain+0x1a5/0x3d0 [ 449.929202][T14149] netif_open+0x10f/0x190 [ 449.929294][T14149] ? __pfx_netif_open+0x10/0x10 [ 449.929328][T14149] dev_open+0x101/0x220 [ 449.929359][T14149] team_add_slave+0x6d5/0x28c0 [ 449.929391][T14149] ? __pfx_team_add_slave+0x10/0x10 [ 449.929406][T14149] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 449.929429][T14149] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 449.929484][T14149] ? __dev_change_flags+0x5f1/0x820 [ 449.929508][T14149] ? mutex_is_locked+0x17/0x50 [ 449.929534][T14149] do_set_master+0x563/0x720 [ 449.929559][T14149] do_setlink+0xe7b/0x4670 [ 449.929578][T14149] ? __wake_up_klogd+0xe6/0x120 [ 449.929609][T14149] ? __pfx_vprintk_emit+0x10/0x10 [ 449.929638][T14149] ? __pfx_do_setlink+0x10/0x10 [ 449.929657][T14149] ? __lock_acquire+0x683/0x2cd0 [ 449.929679][T14149] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.929702][T14149] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 449.929729][T14149] ? ___ratelimit+0x584/0x8e0 [ 449.929820][T14149] ? __mutex_trylock_common+0x15f/0x270 [ 449.929846][T14149] ? __pfx___mutex_trylock_common+0x10/0x10 [ 449.929874][T14149] ? rcu_is_watching+0x15/0xb0 [ 449.929897][T14149] ? trace_contention_end+0x3d/0x140 [ 449.929923][T14149] ? __mutex_lock+0x30f/0x1590 [ 449.929948][T14149] ? rtnl_newlink+0x8a3/0x1bd0 [ 449.929986][T14149] ? __pfx___mutex_lock+0x10/0x10 [ 449.930012][T14149] ? ns_capable+0x89/0xe0 [ 449.930032][T14149] ? rtnl_link_get_net_capable+0xd3/0x310 [ 449.930055][T14149] rtnl_newlink+0x15c2/0x1bd0 [ 449.930093][T14149] ? __pfx_rtnl_newlink+0x10/0x10 [ 449.930122][T14149] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.930165][T14149] ? rcu_is_watching+0x15/0xb0 [ 449.930207][T14149] ? trace_sched_exit_tp+0x3a/0x130 [ 449.930240][T14149] ? __schedule+0x1856/0x57a0 [ 449.930300][T14149] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.930334][T14149] ? __pfx___schedule+0x10/0x10 [ 449.930363][T14149] ? nlmon_xmit+0xb0/0x100 [ 449.930388][T14149] ? __lock_acquire+0x683/0x2cd0 [ 449.930409][T14149] ? preempt_schedule_common+0x82/0xd0 [ 449.930460][T14149] ? __dev_queue_xmit+0x29b/0x37f0 [ 449.930483][T14149] ? preempt_schedule_thunk+0x16/0x30 [ 449.930514][T14149] ? __local_bh_enable_ip+0xe1/0x130 [ 449.930533][T14149] ? __dev_queue_xmit+0x29b/0x37f0 [ 449.930558][T14149] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 449.930593][T14149] ? __pfx_rtnl_newlink+0x10/0x10 [ 449.930629][T14149] ? __pfx_rtnl_newlink+0x10/0x10 [ 449.930659][T14149] rtnetlink_rcv_msg+0x802/0xc00 [ 449.930689][T14149] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 449.930718][T14149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 449.930747][T14149] ? ref_tracker_free+0x689/0x830 [ 449.930768][T14149] ? __pfx_ref_tracker_free+0x10/0x10 [ 449.930792][T14149] netlink_rcv_skb+0x226/0x4a0 [ 449.930812][T14149] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 449.930842][T14149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.930860][T14149] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.930894][T14149] netlink_unicast+0x7bb/0x940 [ 449.930930][T14149] netlink_sendmsg+0x813/0xb40 [ 449.931235][T14149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.931263][T14149] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.931293][T14149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.931320][T14149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.931343][T14149] ____sys_sendmsg+0x9b9/0xa20 [ 449.931362][T14149] ? __might_fault+0xaf/0x130 [ 449.931389][T14149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.931411][T14149] ? import_iovec+0x73/0xa0 [ 449.931436][T14149] ___sys_sendmsg+0x2a5/0x360 [ 449.931454][T14149] ? __lock_acquire+0x683/0x2cd0 [ 449.931522][T14149] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.931547][T14149] ? futex_wait+0x2a2/0x390 [ 449.931595][T14149] ? __fget_files+0x2a/0x420 [ 449.931623][T14149] ? __fget_files+0x3a2/0x420 [ 449.931652][T14149] __x64_sys_sendmsg+0x1bd/0x2a0 [ 449.931674][T14149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.931697][T14149] ? rcu_is_watching+0x15/0xb0 [ 449.931722][T14149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.931741][T14149] do_syscall_64+0x174/0x580 [ 449.931759][T14149] ? trace_irq_disable+0x3b/0x140 [ 449.931788][T14149] ? clear_bhb_loop+0x40/0x90 [ 449.931810][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.931830][T14149] RIP: 0033:0x7f142099ce59 [ 449.931849][T14149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.931867][T14149] RSP: 002b:00007f1421774028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.931888][T14149] RAX: ffffffffffffffda RBX: 00007f1420c16090 RCX: 00007f142099ce59 [ 449.931904][T14149] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000b [ 449.931918][T14149] RBP: 00007f1420a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 449.931936][T14149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.931947][T14149] R13: 00007f1420c16128 R14: 00007f1420c16090 R15: 00007ffe11ce9c98 [ 449.931971][T14149] [ 449.994662][T14143] 0 0 0 0 [ 451.056714][T14143] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 451.185205][T14143] lowmem_reserve[]: 0 0 0 0 0 [ 451.211763][T14143] Node 1 Normal free:3943060kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 451.280488][T14143] lowmem_reserve[]: 0 0 0 0 0 [ 451.295678][T14143] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 451.349016][T14143] Node 0 DMA32: 6795*4kB (UME) 4129*8kB (UME) 2192*16kB (UME) 1345*32kB (UME) 928*64kB (UME) 1004*128kB (UM) 659*256kB (UME) 387*512kB (UME) 250*1024kB (UME) 145*2048kB (UME) 11*4096kB (UM) = 1291092kB [ 451.450144][T14143] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 451.482668][T14143] Node 1 Normal: 5*4kB (U) 6*8kB (UM) 7*16kB (UM) 7*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3943060kB [ 451.504775][T14143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.519757][T14143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.534009][T14143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.549644][T14143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 451.569289][T14143] 44966 total pagecache pages [ 451.577845][T14143] 0 pages in swap cache [ 451.584841][T14143] Free swap = 124996kB [ 451.591817][T14143] Total swap = 124996kB [ 451.600255][T14143] 2097051 pages RAM [ 451.604875][T14143] 0 pages HighMem/MovableOnly [ 451.612485][T14143] 427020 pages reserved [ 451.622490][T14143] 0 pages cma reserved