last executing test programs: 34.471251395s ago: executing program 0 (id=2150): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000181600002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="26f00eed315f86ef0edf6032206861c981be6c805f8f0bde337bea17c9bd0fabe209de7cf8f651e2fa0390dd7a21bbfce0e1a5d79d50a37eb0a67477ded0d2eb2bea2e57d7fd95dd008a06dd647837d61153a8c357db94e3364de59b3f901c236353ab466e6f77d116868421207e157b048724ba4af6893d91f5a2ebf222ba1977faf99b9f19d00fc4fc2401581acc733a6f80d0958e11bc6dead465f9b9d40dde673123e60f1797810d11ace78b7fb49bf71c27f8b608856e1440bb6338", @ANYRESHEX=r2], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x1010, r1, 0xd067d000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x3f00, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x0, 0xfffe, 0x0, 0x2f, 0x0, @empty, @remote}}}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x7) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffc6, 0x0, 0x0, 0x0, 0x4951}, [@map_val={0x18, 0x9, 0x2, 0x0, r4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8d}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x65, &(0x7f0000000340)=""/101, 0x41000, 0x2c, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x5, 0xffff, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r2, r2], &(0x7f00000004c0)=[{0x5, 0x1, 0x0, 0xa}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, r5, 0x4, 0x4, 0x4}, 0x50) 34.182539429s ago: executing program 0 (id=2154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r1, 0x0) (async) r2 = accept(r1, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf8c2, 0xa}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40080) (async) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 4.976978732s ago: executing program 0 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x4, 0x1000, 0x8, 0x1, 0xa84, 0xe0, 0xa, 0xfffffffa}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000000)=""/193, 0xc1}, {0x0}], 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 4.970736122s ago: executing program 0 (id=2165): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000700)={{0x0, 0x2, 0x9, 0x7fff, 0xfd9, 0x5, 0x3c, 0x8, 0x9, 0x4, 0x9, 0x4b5, 0x5, 0x1, 0x2}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000118b00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "7fc27c7dfa4ed5"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000119b00)={{0x0, 0x10, 0x8, 0xa90d, 0x35, 0x7, 0x9, 0x10, 0x4, 0x1, 0x0, 0x6, 0x7, 0x3, 0x2}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000119bc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r8}, {r16}], 0x3, "c1650c01f470c2"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000bba40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000bca40)={0x2d70, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x4, "e7dc32628bf7cc"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pptp(r19, &(0x7f0000000580)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r18, @ANYBLOB="8304050000000000280012800900010076657468000000001800028014000100000000", @ANYRES32=r18], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) r20 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000afeffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000064030000020000001d44000000000000620a20ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32) r21 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0xa, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) (async) r23 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r23, r20, 0x1e, 0x5, r21, @void, @value=r20, @void, @void, r22}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@getqdisc={0x44, 0x26, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r18, {0xc, 0x5}, {0x1, 0x6}, {0x0, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r24, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)="66a865a037113cf37262aab59c6d", 0xe}], 0x1, &(0x7f0000000840)=[{0x10, 0x10c, 0xecc0}], 0x10}}, {{&(0x7f0000000f00)=@l2tp6={0xa, 0x0, 0xc3e, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xfffffffe, 0x2}, 0x80, 0x0}}], 0x2, 0x4800) r25 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r25, 0x89f0, &(0x7f0000008780)={'sit0\x00', &(0x7f0000008640)={'sit0\x00', 0x0, 0x8, 0x10, 0x7fffffff, 0xd103, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x4, 0x2b, 0x0, @empty, @empty}}}}) (async) r26 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r26, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.58296101s ago: executing program 0 (id=2170): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000002400)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x3, 0x1, 0x9, 0x7, 0x4, 0x9, 0x400009, 0xf9, 0xfffffffe, 0x7fffffff, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080), 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b502000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) r7 = socket$kcm(0x2, 0x0, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000080000", 0x1c) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.942784324s ago: executing program 2 (id=2175): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) unshare(0x2e060600) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x82d2}, {r1, 0xc122}], 0x2, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 3.794236808s ago: executing program 2 (id=2178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x290, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x60, 0xc, 0x5, 0x46, 0x48, 0xb, 0x1b, 0x24, 0x18, 0x24, 0xb, 0x36, 0x48, 0x94fa77557b5423f, 0x2, 0x47, 0x3, 0x48, 0x12, 0xb, 0x48, 0x1, 0x0, 0x5, 0x30, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb772, 0x8, 0x16e, 0xfdd7, 0x1, 0x8, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x36, 0x9, 0x2, 0x5, 0x9, 0x36, 0x2, 0x12, 0x1, 0x9, 0x36, 0x2, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x9, 0x8, 0x4, 0x3, 0x10, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x942829de4289aa07}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xdd, 0xdcf, 0x1ff, 0xcf6, 0x2, 0x6]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x5, 0xbcd4, 0xd935, 0x7, 0x2, 0xec1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1000, 0x1, 0xfff, 0x40, 0xfe21, 0xca9]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x2, 0x1ff, 0x6, 0x7, 0x0, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2bb, 0x2000, 0x69f, 0x8000, 0x3, 0x2, 0x101, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0xb, 0x2, 0xb, 0x36, 0x6, 0x60, 0x57, 0xb, 0x1b, 0x30, 0x24, 0x36, 0x18, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x9, 0x2, 0x9, 0x4, 0x4, 0x5]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x12, 0xd531beb77d7f5e97, 0x60, 0x24, 0x1, 0x5, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x80, 0x2, 0x7, 0x5, 0xe, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa6a5, 0x2, 0x3, 0x3, 0x7, 0x100, 0xe780, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x4}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x2, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x6, 0x1}, {0x7, 0x5}, {0x4, 0x1d}, {0x6, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x2}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x2}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x4}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x4, 0x1}, {0x4, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x1}, {0x4, 0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7d, 0x9, 0x7, 0x10, 0x0, 0x7000, 0xe, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x9, 0xab1, 0xa14c, 0x1, 0x8, 0xae]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x0, 0xb, 0x12, 0x30, 0x24, 0x6, 0x1b, 0x6c, 0xb, 0x1b, 0xb, 0x16, 0x9, 0x6c, 0x1, 0x4, 0x1, 0x6, 0x1b, 0x6, 0x4, 0x24]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x18, 0x3, 0x16, 0x6c, 0x1, 0x9, 0x12, 0x46, 0x4, 0x3, 0x2, 0x12, 0x24, 0x5, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x8, 0x10, 0xde19, 0x2, 0x4, 0xfffa, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x54, 0x3ff, 0x1, 0x7ff, 0x7, 0x4, 0x1, 0x2]}}]}]}]}, 0x290}}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d433fffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 3.416775878s ago: executing program 2 (id=2181): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x0, 0xb9, 0x25, @empty, @mcast2, 0x80, 0x40, 0x401, 0x3}}) sendmsg(r5, 0x0, 0x4) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)=0x2000000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c33cedcbd0007007f0000010a000100aa"], 0x48}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "968798012642150a", "fee93e08a10d816cea7a6d5b155bddb4", "1499a964", "f6f7d197d37735b8"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/15, 0xf}, {0x0}], 0x2}, 0x1800000}], 0x2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1140000004000000040000f7ffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a80000012", 0x2d}], 0x1}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.398579598s ago: executing program 1 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x1000, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008890}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.394406622s ago: executing program 2 (id=2190): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ff97"], 0x50}}], 0x2, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r3, 0x0, 0x2, 0xe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'bridge_slave_0\x00', @local}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x92, 0x5, 0x7, 0xc1}, 0x50) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xaffa9c0077a76a7d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, &(0x7f0000000340), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x6, 0x4, 0x9, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x5, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x1, 0xfffffcbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x2200c0c4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) 2.21494047s ago: executing program 3 (id=2191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x800) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) unshare(0x8000400) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xdb, "e3cda62575986ac5765f9958f77c35f1bd6806a8c4af8bcaad1646bdb5f9949177deca634c566fde57e8df1b161e42f4aa08552149af559385ece5d10bac3e1dff14df6446ce27a735627d1fb3864ebbadee29931b0d8cae0b1ff6c67e20767b322f4cd6fae2cc7ca3587ff30033ec2df5cdf610459b4301dc9db6b7eddd9256071ea9eb0c931cab4abb9b503501eda820bf1d06a2cec16135b17fceae04bd24f703a6c6272495efaf074931e106470d8c525aa69be833d28a8cb8a4324c046d621f7e30c62002aab736c2404addc23a782bb942c74f240544485b"}, &(0x7f0000000240)=0xe3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x5, 0x0, 0x2, 0x15aa9886, 0xcd}, &(0x7f0000000380)=0x98) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 2.212799013s ago: executing program 1 (id=2192): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 32) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 32) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x6) (rerun: 32) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) (async) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001a1d81c45165e3d55eca5329e5fb78955f933c1c3204d80570c31a8042b020000005a412e8fe4ead33169b276f87216a9a6e5b2185004199c37e670c27333f6fe1ec996151e57bb54729eb637be8b2197", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000c90780000fe0cf9894870669d7821c47113126171cffc515318c1c852cc0ce8dbc955050e0000000100000000fffffffa13129829e5b8831b669841f72541c6efc9102206c6592e7d"], 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000fcff00020000200900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 64) bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010105}}, 0x24) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYRESDEC=r6, @ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r8 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) (async) sendto$inet(r8, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x8010, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) (async) recvfrom$l2tp6(r8, 0x0, 0x0, 0x2022, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@private0}, &(0x7f0000000580)=0x14) 1.928933361s ago: executing program 3 (id=2193): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000080)=""/186, 0xba}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 32) unshare(0x6a040000) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002bbd000000"], 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff0100"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) 1.914047971s ago: executing program 1 (id=2194): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb190018"], &(0x7f0000000340)=""/250, 0x2b, 0xfa, 0x9}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)=@tcp6, 0x1}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$unix(0x1, 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x40106183, &(0x7f0000000280)={{r0, 0x0, 0x101040, 0x0, 0x1000100, 0x0, 0x0}, 0x4d, 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800fb001900010027bd7000fbdbdf25", @ANYRES32=0x0, @ANYBLOB="0c000900ff070021", @ANYRES32=0x0, @ANYBLOB="0800100005000000"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}}, 0x0) sendto$packet(r4, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x2}, 0x6d}, 0x10) 1.695016754s ago: executing program 4 (id=2195): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c0008000070000000700000000000093090000000500000000000010100000000100000000000002040000000f000000050000930800000006000000040000007f0000000c0000000400000006000000080000000600000007000000040000000a00000005000000090000000100000004000000050000000000000b010000000f00000000000008020000000700000004000004050000000500000001000000010000000800000002000000010000000400000003000000750000000c0000000400000001000000003030002e6100"], &(0x7f0000000100)=""/110, 0xdf, 0x6e, 0x1, 0x1000, 0x10000}, 0x28) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x441, 0x12}, 0x5c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:'], 0xa) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x10041}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x3}}, 0x10) r7 = socket(0x2b, 0x1, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x11e, 0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf030000000000008500000088000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 1.689254125s ago: executing program 3 (id=2196): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r4, &(0x7f00000000c0)="0c2ed4", 0x3, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100), 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{r6, &(0x7f0000000540)='@^\x00', 0x10800, 0x0, 0x4, 0x0, 0x0}, 0x1, &(0x7f0000000b00)=[{0x3, 0x4, 0x0, &(0x7f0000000940), 0x0, 0x8}]}) socket$kcm(0x10, 0x2, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1d, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x240000c0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 1.522974607s ago: executing program 4 (id=2197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="600000000206010100000000000000000100000014000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f727400000029e35b4d5c88ea47868d3bd42251fa6e3bed2682147a38bb24ec9241b6181c9af0fe"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x200088d0) r2 = accept4(r1, &(0x7f0000000280)=@generic, &(0x7f0000000300)=0x80, 0x80000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept4$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x9f4a182ddd3adfab) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000a40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000b80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = getpid() ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000200)=r10) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000f00)={'filter\x00', 0x7e, "286b87c8150866a9570ec1cd373bf12c26c4525c9a753282bf177ff5e68085a0946ad75bdee7800b5ba60dafa4f5fc6f2727efc8012fab855657e83622d4f0ddac21d339dc8a5bb62ac6bc76dbc4dfb57a2e620fa05e7d34824591e5d725df60f07cf929e015962ea8d27fb809e5ae97911c90d3c919bbcb18a8cf0620a8"}, &(0x7f0000000fc0)=0xa2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r11, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="00000000140000a2ee9200000000000100000001198b2fbc17ff8b58348a336c449b9156aa687f74307c8e62cdc8b59f7bfd89b174b60c5cd4114d30da4c275e72022f262ec7c0e07fc9d27be5358dbed03ba2005e19e7143a304af9e02b5f5c59e414ebb5fbb963b7f40385bc7763697107ac8808c6688e", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40044}}], 0x1, 0x4) r15 = gettid() r16 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r15}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000d40)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0, 0x0}, &(0x7f0000000dc0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)="2abbe402a06241a19ef7bd4be1bdb05a3d6a730176590e04bedf41b4054bdf64feee8e17207dcf7eac831c4ee54c9fcf6181d89de370d0a02fb97c872f8a052076044742b3661f2f4eec55cc81a1ef64cbb64310f01e873bd8c9c18fc4", 0x5d}, {&(0x7f00000001c0)="aa41076e5fb098e2fed308a7a0fa090d39a79ced99a5f7401e22b5c59416e9654180e1a4349227b986040cb5c8d596c76a2b069fa993bf96df343064e3f491775f", 0x41}], 0x2, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r1, r2]}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r0, r0, r1, r3, r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}], 0x90, 0x4000000}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000540)="da460063bdb79495f8317fcb2547cc12fb7cf8fc74ccb91500559fadc74b014300a824b22195857893b82662bc1ee8bf1ed37528f18ca91dccaf266c096df35613e2c931292bc5736b38dc9235ddcee68e29faa1deeef470db64b22776554edd36cc3a5c7b61398d471c431fd55875352069fb1f2dbe3459fea040347771e1d847c5b87c6502a18b4add8f9a1750", 0x8e}, {&(0x7f0000000600)="74f69aa520ed6fb40930b65fd83ae62037f52a2713d21f59f8281939f94544672a9078efd8cef2e36417f7618be443c4bff503e485e21d8e31f720dda3f5a99e4a38f7108c6bfe2c3077666071b395de7d6b91e85fda8a82882eca861847acb9d5f4b95c95d7f544b2bbbaa07a8fe14fc13ca24d6f755c8506a12b858c9f8ce0e1f706d7e046e1b48a4b3503c0355126153eb9197042536f289056d2104fd278c54e97e4d1654f5e12d16ed62f984147976ad6b495bb127bf7", 0xb9}, {&(0x7f00000006c0)="aacf35f7b1d9877c0be876cea9a35094ac37ddeb4c093b55e439d3d5da53403e97d31d5ce24f56ab61aed85da99e1bbcb8c846d64f2377a65c48397975a487772ad7010795b10e49e6a491ef1594d3ab086f7f42913eb829698c6db05f4a3725bf89d3c81e0bfdd1c70ddb2d92a0c4", 0x6f}, {&(0x7f0000000740)="3d85864d463e84eeb85725e5f89b961e0cfd4bc301b8ad5a79e5f85cfebf8737b5407e7e695cf381fc768cd24b8bab70f64e571ff6804dda0809f02719845bff4dc94e889841484254c2df5a1a0292f19b4cf1c63b20f9cd3d08bacea7f570bb54cec2302e1cf07bd41c0c39b3f95d23355305103172d90db70eb75575e18ac1fa985b544b32225c9e12c93f11aa7eeaf00aaa72063b8fa07cc882e45fc36d", 0x9f}, {&(0x7f0000000800)="f714973f11a0e1a74d74c89761bf3259e3497e080ff9392874871a8b3fdad3c6809471eb30da4191830b5b3aa578e6194b781404507a15e8a0e1adf56a81ebe3d0c7db390f5910c9cca8cab17aeffda93c321da61dda68d26286c18d749dbf9f027b875f0a5555f871b2751d7c09bfa681a57a0473dded5897595c", 0x7b}, {&(0x7f0000000880)="65d1b5c828045938a5577593744eb78ef0293618248949633505a6433223c592912e4381460a526c330032096113c99f67785ac778700f3a25b9dad6bca5e7d6b65a42f5abc003165c6e00dbac4beb195a9e07ba41ba88efa80494729925adf301b3be96f8914c648f403d81dc8d", 0x6e}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}], 0x60, 0x4}}], 0x2, 0x4000) 1.314931s ago: executing program 4 (id=2198): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001540)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="781020fc386fe096dfc27e675fc1b52c60b83348e0e511", 0x17}], 0x1, 0x0, 0x0, 0x24000010}], 0x1, 0x40001) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x203, @loopback, 0x101}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x67, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x3}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x700, 0x7, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x67, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x3}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x700, 0x7, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) (async) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) close(r5) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{}, {0x0, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x2, 0x8000, 0x5ce}}}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xd, 0xb}, {0xe, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xd, 0xb}, {0xe, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 1.222375457s ago: executing program 2 (id=2199): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x410) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000800)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000d00)={0xa, 0x4e23, 0xc2, @local, 0x5}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r7 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r7], 0x14) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) unshare(0x20040600) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7235f1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a49bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r9, 0xffffffffffffffff, 0x2c, 0x0, 0x4}, 0x20) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r12, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002000000060012004e24000008000700000100000500060007000000"], 0x5c}}, 0xeb64d656001b2f26) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0xd4, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x94, 0xa9, @random="339b874f8295276e6757c0688af55373a028e5adac42dbba6acbc7a7bb798fe9786ced0f516e30bb0d8fccaa4266c5dcfb5ee1c3e6484567b49a9b91a459d520f2fd02d1d3772622a0d4795d67624bbb210798224965202cd8da3137e61b6085b0108bd11c27575214e714956548c6036fbe3ebf511e1abee0dda5100938dc9af52c1ad60f9394ecf4d0c48cf9ad8a2e"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 1.132753732s ago: executing program 3 (id=2200): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000035da0102000000000000000007000006050001000700000005000300"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c8013000c800ca348800800000000000000080003806400"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_emit_ethernet(0xda, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000a42b00fc01000000000000000000"], 0x0) syz_extract_tcp_res(&(0x7f0000000400)={0x41424344, 0x41424344}, 0x10001, 0x40) syz_emit_ethernet(0x66, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080041000058000000000006907864010100ac1414aa441c0701e000000100000000e000000100800000ac14141b00000003071219ca8120eb6a033b73e1bf8c9ff44012000000000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="5d00220090780020"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000280)={&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f00000030c0)=""/4092, 0xffc}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000004100)=""/9, 0xfffffffffffffd08}, {&(0x7f0000004140)=""/24, 0x18}], 0x5, &(0x7f0000004200)=""/122, 0x7a}, 0x100) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c082) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000800}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000600)={0x4, 0x0, 0x6, 0xb6, 0x200, 0x6}) socket$unix(0x1, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)=ANY=[@ANYBLOB="ec070000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="fc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040001000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff01000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400b40b000008000100", @ANYRES32=0x0, @ANYBLOB="740002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004004c050000080007004000000008000100", @ANYRES32=0x0, @ANYBLOB="580202803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040081ffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040068ffffff08000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400050001ff10000000fe00030dee0f0000080008060500000008000e02070000000000020340000000ff03e5098000000010000f00020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c656400000f12b5beb57c5249000000000000000000000000000000050003000600000004e15b738334cf9989697c62a2f5faa62c3f58ccb28ceb14b04574a2d51f6611d365a954f5642d9e08ff07aed5af73aac243b50316103e4763d599af958931c4ab48cfe9679591d7ae1632d9bdd4fa9be9aa5659a0f1fe658f1cc2791e28fb9e20a6e5d4aa5a9b2062f8b40b7d0feb65feff39b3127c61e246ea309cb9bbd1ccfbd58112bcbc85bb2c59c62101", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b40002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="500102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400001000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000800fe04020000000700818146b400000300ce090000000001000b400800000007000605f900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x7ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x20050804) 1.075000397s ago: executing program 4 (id=2201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002280)={{r2, 0x9, 0x3, 0x800, 0x8, 0x6, 0x1, 0x74c4, 0xfff, 0x6, 0xafe, 0x9, 0x1, 0x2, 0xff}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x0, 0x6, 0x4, 0x6}, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r8, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xa, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b40d5343379f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xcd}, 0x50) 896.303936ms ago: executing program 1 (id=2202): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x2, 0xf7, 0xfffff03c}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRES64=r1], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x11, 0x18}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_SIOCADDRT(r8, 0xff08, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r9, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r9, 0x604a6000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x6}], 0x1) 609.378854ms ago: executing program 4 (id=2203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x303}, "007af18000", "dc6d2f5693b6189af68be46e10295782", "902f8298"}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES8=0x0], 0x28}, 0x1, 0x0, 0x0, 0x20044890}, 0x20088041) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e, 0x80800) accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x800) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0xffefd000) socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0xfffffffffffffed7}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r7}, 0x20) connect$unix(r6, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r8, &(0x7f00000000c0)}, 0x20) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040)=0x80, 0x4) 459.129849ms ago: executing program 1 (id=2204): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x114, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@local}, {@in=@local, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x114, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@local}, {@in=@local, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000010000126bf000000000000000700000a6c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a310000000004000580140000001100010000000000000000000100000a"], 0x94}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) r2 = socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f00000000c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) (async) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/280], 0x118) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f00000002c0)) listen(r2, 0xfffffffd) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xaf4, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r11, 0x1, 0x10, &(0x7f0000000440)=""/103, &(0x7f00000004c0)=0x67) (async) getsockopt$sock_buf(r11, 0x1, 0x10, &(0x7f0000000440)=""/103, &(0x7f00000004c0)=0x67) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x9, 0x1, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x9, 0x1, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) pipe(&(0x7f0000000200)) socket$inet6(0xa, 0x3, 0x3a) (async) r12 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r12, 0x29, 0x20, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x4d) (async) getsockopt$inet6_buf(r12, 0x29, 0x20, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x4d) 444.761598ms ago: executing program 3 (id=2205): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb0}}, 0x0) unshare(0x20400) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000840), &(0x7f00000000c0)}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a0000000000000000000000000000000000ffffac14144400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00fffc00000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd001829fffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x110, r3, 0x41922000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000380)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x11, 0xfd, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0xfd}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000003c0)={r8, 0x1ff, 0xa, [0x2, 0x9, 0x1, 0x800, 0xd4d, 0x100, 0x5, 0x5, 0x84, 0x3]}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={r8, 0xad}, &(0x7f0000000100)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000340)=r8, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) 365.596263ms ago: executing program 4 (id=2206): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="ba8745", 0x3}], 0x1}}], 0x2, 0x24040800) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r7}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={r7, 0x2}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x98dc, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0x8, 0x7f, 0x27, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x1, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x3, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0xb78b, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 281.038674ms ago: executing program 0 (id=2207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f0000000540)="65a2d910b3849ce489bff7ac54112431a8805ca077201dd1890bec49dacf3792a1c98e71f68a95e59a0a41e62fb2aa71d43e39c3866837df1399180434d39c58a79edc619506d077e7f380296f7dede78fca7f9de68d3147b478072b4de2188fdeb5aca91f8b7825cf20e3f06cd38b830d8dbeab820a666ef799cb6841d3d24866d837e9d046d5e3a298854a347d230337b32d09f2e0c11a9ef8820000000000000000", 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=r8, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r4], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 183.983379ms ago: executing program 2 (id=2208): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000b827981cf5b8c9598eb4000000000000000000d4be0000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) unshare(0x28000600) close(0x3) unshare(0x400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r7, r6, 0x0, 0x10000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, 0x0, 0x0}, 0x20) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x3, 0x4, 0x100, 0xffffffffffffffff, 0x7f}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r6, &(0x7f00000003c0)=0x7, 0x12) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000500)={r9, &(0x7f0000000400)='{\x00', 0x100, &(0x7f0000000440)={@_ha_fsid={[0xfffffff8, 0x7f]}, {0x2, 0x7f, 0x9, 0x6}}, 0x4, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x4de5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="996a0c000000007a0000000000ef565b164066a76f64b7e0b6c746be9f5ca95ce1521be9907848860905c5977d950df3a15c63902f8cf4dcf79531c7f64e0f46429c5dd160e0b3a1102f7dc1a338a010d567b66d04e2148ef9bd213248521e0266181909ee64988aefc56a81cd97f69d761938364b365b1c934a3e77413e0000000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x80, 0x9b, &(0x7f0000000740)=""/155, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, r6, 0x8, &(0x7f0000000800)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r13, r12, 0x2, &(0x7f00000009c0)=[r7, r7, r8, r1, r6], &(0x7f0000000a00)=[{0x5, 0x3, 0x1}, {0x4, 0x2, 0x2, 0x9}], 0x10, 0x2a76}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xcc, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4080}, 0x20000010) 46.486451ms ago: executing program 3 (id=2209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x24020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0x6e) 0s ago: executing program 1 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x2b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x16}}]}, 0x3c}}, 0x20040011) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x6, 0x0) write(r8, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt(r7, 0x111, 0x2, 0x0, &(0x7f0000000080)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x3b, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): .797': attribute type 1 has an invalid length. [ 175.433800][ T9287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 175.493832][ T9283] bond5: entered promiscuous mode [ 175.499428][ T9283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.897936][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.804'. [ 175.943979][ T9314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.806'. [ 176.133536][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.371395][ T9303] ip6erspan0: entered allmulticast mode [ 176.463775][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 176.483918][ T9340] net_ratelimit: 391 callbacks suppressed [ 176.483935][ T9340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.526808][ T9340] netlink: 44 bytes leftover after parsing attributes in process `syz.4.814'. [ 176.780264][ T9348] syz_tun: entered allmulticast mode [ 176.826348][ T9348] bond0: entered promiscuous mode [ 176.854341][ T9348] bond_slave_0: entered promiscuous mode [ 176.880507][ T9348] bond_slave_1: entered promiscuous mode [ 176.901105][ T9354] openvswitch: netlink: Key 22 has unexpected len 16 expected 4 [ 176.956368][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'. [ 177.260481][ T9365] sctp: [Deprecated]: syz.1.822 (pid 9365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.260481][ T9365] Use struct sctp_sack_info instead [ 177.289860][ T7905] hsr0: entered promiscuous mode [ 177.304866][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 177.918760][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'. [ 177.968974][ T9414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.006968][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.837'. [ 178.504311][ T7697] IPVS: starting estimator thread 0... [ 178.597650][ T9442] IPVS: using max 34 ests per chain, 81600 per kthread [ 179.132400][ T9472] 5Ò: entered promiscuous mode [ 179.557442][ T9495] syzkaller0: entered promiscuous mode [ 179.563118][ T9495] syzkaller0: entered allmulticast mode [ 179.860014][ T9507] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 179.888340][ T9507] netlink: 'syz.4.861': attribute type 10 has an invalid length. [ 179.907617][ T9507] netlink: 'syz.4.861': attribute type 10 has an invalid length. [ 180.236585][ T9522] __nla_validate_parse: 9 callbacks suppressed [ 180.236604][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 180.261756][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 180.655597][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 180.665477][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 180.676747][ T9535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 180.687180][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 180.698067][ T9535] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 180.704065][ T9535] syzkaller1: Refused to change device type [ 180.819193][ T9539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.871'. [ 180.855253][ T9539] netlink: 80 bytes leftover after parsing attributes in process `syz.2.871'. [ 180.869423][ T9539] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 180.877281][ T9539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.871'. [ 180.890838][ T9539] dummy0: entered promiscuous mode [ 181.488348][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 183.218341][ T9524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.924510][ T9587] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 183.947103][ T9587] netlink: 'syz.2.885': attribute type 2 has an invalid length. [ 184.014092][ T9587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.065825][ T9587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.087559][ T9587] bond0 (unregistering): Released all slaves [ 184.467426][ T9610] netlink: 'syz.1.894': attribute type 5 has an invalid length. [ 185.457832][ T9640] __nla_validate_parse: 14 callbacks suppressed [ 185.457851][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 185.493484][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 186.010505][ T9670] batadv0: entered promiscuous mode [ 186.027548][ T9670] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 186.201870][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 186.211343][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 186.220988][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'. [ 186.233021][ T9678] syzkaller0: entered promiscuous mode [ 186.240202][ T9678] syzkaller0: entered allmulticast mode [ 186.459046][ T9692] netlink: 'syz.4.920': attribute type 13 has an invalid length. [ 186.492114][ T9692] netlink: 'syz.4.920': attribute type 17 has an invalid length. [ 186.519369][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 186.834376][ T9707] netlink: 'syz.2.926': attribute type 3 has an invalid length. [ 186.852081][ T9707] netlink: 772 bytes leftover after parsing attributes in process `syz.2.926'. [ 186.861975][ T9707] netlink: 'syz.2.926': attribute type 3 has an invalid length. [ 186.869851][ T9707] netlink: 772 bytes leftover after parsing attributes in process `syz.2.926'. [ 186.963490][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.927'. [ 186.990231][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.927'. [ 187.995458][ T9748] netlink: 'syz.3.935': attribute type 1 has an invalid length. [ 188.131651][ T9750] žÿ: renamed from team_slave_1 [ 188.173900][ T9750] netlink: 'syz.4.937': attribute type 10 has an invalid length. [ 188.222662][ T9754] netlink: 'syz.0.938': attribute type 21 has an invalid length. [ 188.299527][ T9754] netlink: 'syz.0.938': attribute type 4 has an invalid length. [ 188.312470][ T9754] netlink: 'syz.0.938': attribute type 3 has an invalid length. [ 188.594336][ T9763] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 189.645895][ T9784] bond6: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 189.666013][ T9784] bond6: entered promiscuous mode [ 189.709672][ T9784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.119504][ T9824] __nla_validate_parse: 17 callbacks suppressed [ 191.119525][ T9824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.957'. [ 191.202136][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 191.316938][ T9830] netlink: 14 bytes leftover after parsing attributes in process `syz.2.958'. [ 191.318759][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.956'. [ 191.425452][ T9830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.958'. [ 191.804037][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.963'. [ 192.033012][ T9855] netlink: 'syz.4.966': attribute type 13 has an invalid length. [ 192.053565][ T9855] netlink: 'syz.4.966': attribute type 17 has an invalid length. [ 192.267433][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 192.450890][ T9855] bond0: left promiscuous mode [ 192.460474][ T9855] bond_slave_0: left promiscuous mode [ 192.475408][ T9855] bond_slave_1: left promiscuous mode [ 192.496497][ T9855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.508824][ T9855] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.541082][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.639390][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.694238][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.733981][ T9855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.757877][ T9855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.817303][ T9855] veth1_macvtap: left promiscuous mode [ 192.851205][ T9855] veth0_macvtap: left promiscuous mode [ 192.901672][ T9855] veth0_macvtap: entered promiscuous mode [ 192.975013][ T9855] veth1_macvtap: entered promiscuous mode [ 193.026191][ T9855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 193.102241][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.109577][ T8118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.178437][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.185629][ T8118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.361807][ T153] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.450792][ T153] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.466618][ T153] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.495916][ T153] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.728272][ T9889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.974'. [ 193.754559][ T9887] macsec1: entered promiscuous mode [ 193.784875][ T9887] macsec1: entered allmulticast mode [ 193.945030][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.974'. [ 194.177118][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.192190][ T9907] : renamed from bond0 (while UP) [ 194.249533][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 194.262053][ T9909] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 194.409393][ T9907] team1: entered promiscuous mode [ 194.440753][ T9907] team1: entered allmulticast mode [ 194.507735][ T9924] openvswitch: netlink: IP tunnel TTL not specified. [ 194.516814][ T9907] 8021q: adding VLAN 0 to HW filter on device team1 [ 194.576764][ T9915] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 194.615937][ T9915] team2: entered promiscuous mode [ 194.621355][ T9915] team2: entered allmulticast mode [ 194.627226][ T9915] 8021q: adding VLAN 0 to HW filter on device team2 [ 194.642791][ T9917] gretap2: entered allmulticast mode [ 194.652879][ T9917] bond7: (slave gretap2): making interface the new active one [ 194.661467][ T9917] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 194.842898][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.850319][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.882302][ T9933] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 194.968023][ T9928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.998159][ T9928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.097544][ T9928] bond1: left promiscuous mode [ 195.102975][ T9928] vlan2: left promiscuous mode [ 195.108041][ T9928] gretap0: left promiscuous mode [ 195.113335][ T9928] vlan2: left allmulticast mode [ 195.120453][ T9928] gretap0: left allmulticast mode [ 195.142005][ T9928] vlan0: left promiscuous mode [ 195.152045][ T9928] geneve1: left promiscuous mode [ 195.157606][ T9928] vlan0: left allmulticast mode [ 195.162796][ T9928] geneve1: left allmulticast mode [ 195.182037][ T8118] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.194680][ T8118] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.203807][ T8118] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.226724][ T8118] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.713235][ T9957] netlink: zone id is out of range [ 195.735490][ T9957] netlink: zone id is out of range [ 195.765323][ T9957] netlink: zone id is out of range [ 195.813742][ T9957] netlink: zone id is out of range [ 195.848274][ T9957] netlink: zone id is out of range [ 195.880294][ T9957] netlink: zone id is out of range [ 195.914961][ T9957] netlink: zone id is out of range [ 195.948546][ T9957] netlink: zone id is out of range [ 196.216483][ T9977] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 196.242596][ T9977] netlink: 'syz.3.996': attribute type 2 has an invalid length. [ 196.624324][ T9985] __nla_validate_parse: 10 callbacks suppressed [ 196.624343][ T9985] netlink: 210656 bytes leftover after parsing attributes in process `syz.4.998'. [ 196.763797][ T9989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 196.848737][ T9991] netlink: 'syz.1.999': attribute type 27 has an invalid length. [ 197.235784][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1000'. [ 198.353085][T10050] netlink: 'syz.0.1010': attribute type 1 has an invalid length. [ 198.368091][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 198.743147][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.702855][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 199.913088][T10115] net_ratelimit: 1183 callbacks suppressed [ 199.913105][T10115] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 199.971991][T10127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.080709][T10123] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 200.652738][T10155] syzkaller0: entered promiscuous mode [ 200.689096][T10155] syzkaller0: entered allmulticast mode [ 201.525783][T10184] syzkaller0: entered promiscuous mode [ 201.536179][T10184] syzkaller0: entered allmulticast mode [ 201.908756][T10206] netlink: 'syz.2.1038': attribute type 13 has an invalid length. [ 202.531788][T10206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.587077][T10206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.038764][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 203.327239][ T8116] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.364093][ T8116] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.468404][T10236] geneve2: entered promiscuous mode [ 203.520989][ T8116] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.542906][T10241] netlink: 'syz.2.1045': attribute type 58 has an invalid length. [ 203.553452][ T8116] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.576522][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1045'. [ 203.821058][T10247] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 204.042169][T10252] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 204.086067][T10252] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 204.282122][T10247] bond0: (slave gretap2): making interface the new active one [ 204.316199][T10247] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 204.439605][T10259] bond0: (slave bridge3): Enslaving as an active interface with a down link [ 204.457395][T10252] macvlan2: entered promiscuous mode [ 204.462983][T10252] macvlan2: entered allmulticast mode [ 204.469526][T10252] bond0: entered promiscuous mode [ 204.474752][T10252] gretap2: entered promiscuous mode [ 204.486478][T10252] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.532726][T10252] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 204.587143][T10252] bond0: left promiscuous mode [ 204.609227][T10252] gretap2: left promiscuous mode [ 204.667977][T10262] syzkaller0: entered promiscuous mode [ 204.678234][T10262] syzkaller0: entered allmulticast mode [ 204.799240][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1053'. [ 204.808981][T10283] netlink: 'syz.1.1053': attribute type 7 has an invalid length. [ 204.819230][T10283] netlink: 'syz.1.1053': attribute type 8 has an invalid length. [ 204.842860][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 205.105931][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1054'. [ 205.146924][T10285] syzkaller0: entered promiscuous mode [ 205.154048][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1054'. [ 205.173612][T10285] syzkaller0: entered allmulticast mode [ 205.513575][T10314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1059'. [ 206.493070][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 206.494485][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 206.505648][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 206.506546][ T5642] Bluetooth: hci3: command 0x0406 tx timeout [ 207.105096][ T8116] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.149528][ T8116] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.170846][ T8116] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.198827][ T8116] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.271673][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 207.348112][T10324] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1063'. [ 207.542621][T10328] syzkaller0: entered promiscuous mode [ 207.558605][T10328] syzkaller0: entered allmulticast mode [ 208.128298][T10362] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1071'. [ 208.147577][T10362] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1071'. [ 208.280886][T10369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'. [ 208.924146][T10386] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 209.050890][T10397] syzkaller0: entered promiscuous mode [ 209.059386][T10397] syzkaller0: entered allmulticast mode [ 209.290162][ T5755] IPVS: starting estimator thread 0... [ 209.303579][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 209.325305][T10407] netlink: 'syz.2.1085': attribute type 2 has an invalid length. [ 209.385292][T10408] IPVS: using max 31 ests per chain, 74400 per kthread [ 209.521934][T10415] netlink: 'syz.1.1089': attribute type 13 has an invalid length. [ 209.880876][T10434] netlink: 'syz.4.1091': attribute type 32 has an invalid length. [ 209.911626][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1091'. [ 210.209098][T10432] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1090'. [ 210.885414][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 212.831885][T10466] syzkaller0: entered promiscuous mode [ 212.855205][T10466] syzkaller0: entered allmulticast mode [ 212.919073][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.999090][T10474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.072129][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 213.080358][T10478] tipc: Enabling of bearer rejected, failed to enable media [ 213.387612][T10488] bond6: option mode: invalid value (254) [ 213.403147][T10488] bond6 (unregistering): Released all slaves [ 213.690946][T10504] netlink: 'syz.3.1107': attribute type 5 has an invalid length. [ 213.873057][T10512] veth1_to_batadv: entered promiscuous mode [ 213.994261][T10518] netlink: 'syz.4.1111': attribute type 4 has an invalid length. [ 214.099953][T10525] syzkaller0: entered promiscuous mode [ 214.118339][T10525] syzkaller0: entered allmulticast mode [ 214.322770][T10529] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 214.511350][T10542] netlink: 'syz.0.1118': attribute type 1 has an invalid length. [ 214.524748][T10542] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1118'. [ 214.548806][T10542] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1118'. [ 214.569832][T10542] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1118'. [ 215.633599][T10568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1123'. [ 216.312519][T10594] dvmrp0: entered allmulticast mode [ 216.587763][T10602] syzkaller0: entered promiscuous mode [ 216.603709][T10602] syzkaller0: entered allmulticast mode [ 217.490867][T10650] syzkaller1: entered promiscuous mode [ 217.636688][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 218.044264][T10663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1138'. [ 218.073546][T10663] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 218.220444][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'. [ 218.256984][T10663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.669713][T10679] syzkaller0: entered promiscuous mode [ 218.687721][T10679] syzkaller0: entered allmulticast mode [ 219.313691][T10699] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.346584][T10703] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 219.358650][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 219.492072][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1147'. [ 219.615206][ T50] block nbd5: Receive control failed (result -32) [ 219.963271][T10724] tipc: Enabling of bearer rejected, failed to enable media [ 220.092473][T10726] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1153'. [ 220.124283][T10728] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 220.130792][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 220.177478][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 220.215307][T10726] netlink: 'syz.4.1153': attribute type 14 has an invalid length. [ 220.234559][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 220.253483][T10726] netlink: 'syz.4.1153': attribute type 13 has an invalid length. [ 220.381513][T10734] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1155'. [ 220.410523][T10734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1155'. [ 220.473623][T10738] syzkaller0: entered promiscuous mode [ 220.501181][T10738] syzkaller0: entered allmulticast mode [ 220.543850][T10742] syzkaller0: entered promiscuous mode [ 220.555824][T10742] syzkaller0: entered allmulticast mode [ 220.578654][T10742] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1157'. [ 221.076934][T10760] sch_fq: defrate 0 ignored. [ 221.173659][ T50] block nbd6: Receive control failed (result -32) [ 221.230737][T10766] lo speed is unknown, defaulting to 1000 [ 221.358354][T10770] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 221.466728][T10772] bond0: entered promiscuous mode [ 221.484455][T10772] bond_slave_0: entered promiscuous mode [ 221.510104][T10772] bond_slave_1: entered promiscuous mode [ 221.584022][T10772] debugfs: 'hsr1' already exists in 'hsr' [ 221.621214][T10772] Cannot create hsr debugfs directory [ 221.635433][T10772] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 221.646460][T10772] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 221.694323][T10766] lo speed is unknown, defaulting to 1000 [ 221.716656][T10766] lo speed is unknown, defaulting to 1000 [ 221.956955][T10806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1172'. [ 222.195070][T10812] syzkaller0: entered promiscuous mode [ 222.222453][T10812] syzkaller0: entered allmulticast mode [ 222.604569][T10820] bond6 (unregistering): Released all slaves [ 222.618948][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1178'. [ 222.745682][T10766] infiniband sqz0: set active [ 222.753622][ T7680] lo speed is unknown, defaulting to 1000 [ 222.764594][T10766] infiniband sqz0: added lo [ 222.819716][T10766] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 222.835390][T10766] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 222.905050][T10766] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 223.020413][T10766] RDS/IB: sqz0: added [ 223.038509][T10766] smc: adding ib device sqz0 with port count 1 [ 223.074248][T10836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1180'. [ 223.086184][T10766] smc: ib device sqz0 port 1 has no pnetid [ 223.091686][T10836] netlink: 'syz.1.1180': attribute type 17 has an invalid length. [ 223.106392][ T7693] lo speed is unknown, defaulting to 1000 [ 223.118174][T10837] netlink: 'syz.1.1180': attribute type 17 has an invalid length. [ 223.138509][T10766] lo speed is unknown, defaulting to 1000 [ 223.212422][T10836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.351957][T10836] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 223.482335][T10837] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 224.050450][T10766] lo speed is unknown, defaulting to 1000 [ 224.310521][T10877] netlink: 'syz.4.1192': attribute type 3 has an invalid length. [ 224.678494][ T50] block nbd7: Receive control failed (result -32) [ 224.748230][T10889] tipc: Enabled bearer , priority 16 [ 224.802835][T10888] tipc: Enabling of bearer rejected, already enabled [ 224.957341][T10766] lo speed is unknown, defaulting to 1000 [ 225.063332][T10903] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 225.083279][T10905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.115751][T10903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.175957][T10905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.280254][T10909] __nla_validate_parse: 9 callbacks suppressed [ 225.280271][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 225.451280][T10914] xt_l2tp: missing protocol rule (udp|l2tpip) [ 225.487790][T10914] netlink: 'syz.1.1203': attribute type 21 has an invalid length. [ 225.516755][T10914] netlink: 'syz.1.1203': attribute type 6 has an invalid length. [ 225.539038][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 225.568389][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1203'. [ 225.663953][ T50] block nbd8: Receive control failed (result -32) [ 225.847169][ T7697] tipc: Node number set to 3406641936 [ 225.870787][T10766] lo speed is unknown, defaulting to 1000 [ 225.938104][T10938] netlink: 'syz.2.1207': attribute type 22 has an invalid length. [ 225.986905][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 226.124368][ T8126] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.167925][ T8126] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.194712][ T8126] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.217648][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1211'. [ 226.348231][ T8126] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.579973][T10961] SET target dimension over the limit! [ 226.610893][T10970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1212'. [ 226.717949][T10969] syzkaller0: entered promiscuous mode [ 226.740609][T10969] syzkaller0: entered allmulticast mode [ 226.790548][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1212'. [ 226.903605][T10766] lo speed is unknown, defaulting to 1000 [ 226.912541][T10974] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1217'. [ 226.939937][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1217'. [ 227.130365][T10980] syzkaller0: entered promiscuous mode [ 227.142169][T10980] syzkaller0: entered allmulticast mode [ 227.154370][T10980] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1220'. [ 227.367956][T10989] xt_hashlimit: size too large, truncated to 1048576 [ 227.891142][T11011] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.988565][T11009] netlink: 'syz.3.1227': attribute type 2 has an invalid length. [ 228.627812][T11052] netlink: 'syz.2.1238': attribute type 18 has an invalid length. [ 228.744450][T11054] batadv_slave_0: entered allmulticast mode [ 228.765734][T11054] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 228.999835][T11049] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.068368][T11054] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 229.330609][T11072] tipc: Enabled bearer , priority 0 [ 229.348205][T11072] syzkaller0: entered promiscuous mode [ 229.358807][T11072] syzkaller0: entered allmulticast mode [ 229.428175][T11072] tipc: Resetting bearer [ 229.510018][T11077] netlink: 'syz.3.1244': attribute type 3 has an invalid length. [ 229.548027][T11077] netlink: 'syz.3.1244': attribute type 1 has an invalid length. [ 230.091530][T11096] netlink: 'syz.3.1250': attribute type 28 has an invalid length. [ 230.113066][T11096] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 230.153330][T11096] netlink: 'syz.3.1250': attribute type 2 has an invalid length. [ 230.183432][T11069] tipc: Resetting bearer [ 230.227360][T11069] tipc: Disabling bearer [ 230.264367][T11098] nbd: must specify a size in bytes for the device [ 230.723841][T11109] __nla_validate_parse: 13 callbacks suppressed [ 230.723859][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1256'. [ 230.872396][T11109] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.880129][T11113] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 231.018141][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 231.362895][T11134] bridge0: port 3(dummy0) entered disabled state [ 231.369630][T11134] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.377291][T11134] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.427882][T11134] bridge0: entered allmulticast mode [ 231.546449][T11138] bridge0: port 3(dummy0) entered disabled state [ 231.623410][T11138] bridge_slave_1: left allmulticast mode [ 231.656752][T11138] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.702416][T11138] bridge_slave_0: left allmulticast mode [ 231.716241][T11138] bridge_slave_0: left promiscuous mode [ 231.732136][T11138] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.975964][T11146] bond6: option tlb_dynamic_lb: invalid value (5) [ 232.008171][T11146] bond6 (unregistering): Released all slaves [ 232.043168][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1268'. [ 232.524739][T11180] geneve3: entered promiscuous mode [ 232.618942][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 232.929504][ T50] Bluetooth: hci4: link tx timeout [ 232.947802][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.213767][T11205] syzkaller0: entered promiscuous mode [ 233.237582][T11205] syzkaller0: entered allmulticast mode [ 233.258805][T11210] bond0: Device is already in use. [ 233.403346][T11212] validate_nla: 1 callbacks suppressed [ 233.403365][T11212] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 233.544790][T11212] bond6: entered promiscuous mode [ 233.572625][T11212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.608234][T11214] No such timeout policy "syz1" [ 233.714806][T11212] bond6: (slave bridge2): making interface the new active one [ 233.748269][T11212] bridge2: entered promiscuous mode [ 233.770115][T11212] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 233.810673][T11226] tipc: Enabling of bearer rejected, failed to enable media [ 233.883396][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 233.963395][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 234.020058][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 234.070218][T11235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.339858][T11252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 234.409951][T11255] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1297'. [ 234.966976][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 234.976682][T11263] syzkaller0: entered promiscuous mode [ 234.996607][T11263] syzkaller0: entered allmulticast mode [ 235.188616][T11283] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1302'. [ 235.217262][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 235.437700][T11296] syzkaller0: entered promiscuous mode [ 235.460471][T11296] syzkaller0: entered allmulticast mode [ 235.812219][T11295] lo speed is unknown, defaulting to 1000 [ 235.844616][T11310] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 236.144385][T11327] __nla_validate_parse: 2 callbacks suppressed [ 236.144402][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 236.233826][T11328] syzkaller0: entered promiscuous mode [ 236.259578][T11328] syzkaller0: entered allmulticast mode [ 236.321069][T11330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1316'. [ 236.334138][T11325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1314'. [ 236.355408][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1316'. [ 236.382342][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 236.611912][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 236.869243][T11338] dummy0: left promiscuous mode [ 236.881004][T11344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.937081][T11338] batadv_slave_1: left promiscuous mode [ 236.943903][T11338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.035902][T11350] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1319'. [ 237.079768][T11338] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 237.776076][T11373] netlink: 'syz.3.1327': attribute type 11 has an invalid length. [ 237.817027][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 238.064973][T11386] vti0: entered promiscuous mode [ 238.469677][T11410] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1339'. [ 238.510485][T11410] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.517853][T11410] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.567903][T11414] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1339'. [ 238.608722][T11414] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.615960][T11414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.623513][T11414] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.630706][T11414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.717428][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.724751][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.196727][ T7680] lo speed is unknown, defaulting to 1000 [ 239.213542][ T7680] sqz0: Port: 1 Link DOWN [ 239.234360][ T5755] lo speed is unknown, defaulting to 1000 [ 239.655970][T11447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.854368][T11458] SET target dimension over the limit! [ 239.862103][T11458] netlink: 'syz.0.1354': attribute type 1 has an invalid length. [ 239.887404][T11458] xt_ecn: cannot match TCP bits for non-tcp packets [ 239.903555][T11459] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 240.069641][T11465] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.079209][T11465] bond7: (slave bond8): making interface the new active one [ 240.087529][T11465] bond7: (slave bond8): Enslaving as an active interface with an up link [ 240.112954][T11459] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 240.163211][T11464] syzkaller0: entered promiscuous mode [ 240.175279][T11464] syzkaller0: entered allmulticast mode [ 240.622755][T11502] tipc: Started in network mode [ 240.636014][T11502] tipc: Node identity ac141441, cluster identity 4711 [ 240.653065][T11502] tipc: Enabled bearer , priority 10 [ 240.817849][T11516] netlink: 'syz.3.1369': attribute type 10 has an invalid length. [ 240.838971][T11518] netlink: 'syz.1.1368': attribute type 2 has an invalid length. [ 240.857582][T11518] netlink: 'syz.1.1368': attribute type 2 has an invalid length. [ 240.892830][T11520] nbd: must specify a size in bytes for the device [ 241.063736][T11523] ipvlan2: entered promiscuous mode [ 241.210754][T11531] __nla_validate_parse: 6 callbacks suppressed [ 241.210773][T11531] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1376'. [ 241.227518][T11531] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1376'. [ 241.244319][T11531] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1376'. [ 241.318134][T11535] netlink: 'syz.3.1375': attribute type 2 has an invalid length. [ 241.416316][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 241.620546][T11549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1381'. [ 241.656767][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1382'. [ 241.666096][T11549] netlink: 'syz.0.1381': attribute type 4 has an invalid length. [ 241.707517][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1381'. [ 241.754939][T11556] x_tables: duplicate underflow at hook 1 [ 241.818353][T11554] vlan3: entered allmulticast mode [ 241.823784][T11554] bond3: entered allmulticast mode [ 241.847937][ T7680] tipc: Node number set to 2886997057 [ 241.911961][ T50] block nbd9: Receive control failed (result -32) [ 241.925863][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 242.099208][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 242.310312][T11577] xt_hashlimit: max too large, truncated to 1048576 [ 242.346654][T11577] xt_ecn: cannot match TCP bits for non-tcp packets [ 242.583903][ T50] block nbd10: Receive control failed (result -32) [ 242.758565][T11609] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 242.770424][T11609] dummy0: left allmulticast mode [ 242.800704][T11609] team0: Failed to send options change via netlink (err -105) [ 242.838429][T11609] team0: Port device dummy0 added [ 242.863137][T11609] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 242.947556][T11609] team0: Port device dummy0 removed [ 242.999859][T11622] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 243.030833][T11609] dummy0: entered allmulticast mode [ 243.043499][T11609] : (slave dummy0): Enslaving as an active interface with an up link [ 243.260019][T11639] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 243.267413][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 243.286538][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 243.287969][T11639] syzkaller1: Refused to change device type [ 243.403391][T11626] bond0: (slave vxcan7): The slave device specified does not support setting the MAC address [ 243.432099][T11626] bond0: (slave vxcan7): Error -95 calling set_mac_address [ 243.470558][T11615] bond0: (slave gretap1): making interface the new active one [ 243.481220][T11615] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 243.539064][T11642] vlan0: entered allmulticast mode [ 243.546376][T11642] bond9: entered allmulticast mode [ 243.588309][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.689117][ T8128] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.713144][ T8128] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.738697][ T8128] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.757966][ T8114] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.894648][T11655] xt_hashlimit: size too large, truncated to 1048576 [ 244.307019][ T8116] nci: nci_ntf_packet: unknown ntf opcode 0x5 [ 244.739678][T11694] xt_hashlimit: size too large, truncated to 1048576 [ 245.025819][T11673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.219545][T11706] geneve1: entered promiscuous mode [ 245.687907][T11731] validate_nla: 2 callbacks suppressed [ 245.687924][T11731] netlink: 'syz.1.1429': attribute type 2 has an invalid length. [ 245.723959][T11731] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 245.936467][T11741] FAULT_INJECTION: forcing a failure. [ 245.936467][T11741] name failslab, interval 1, probability 0, space 0, times 0 [ 245.979111][T11741] CPU: 0 UID: 0 PID: 11741 Comm: syz.0.1431 Not tainted syzkaller #0 PREEMPT(full) [ 245.979137][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.979148][T11741] Call Trace: [ 245.979155][T11741] [ 245.979163][T11741] dump_stack_lvl+0xe8/0x150 [ 245.979190][T11741] should_fail_ex+0x412/0x560 [ 245.979221][T11741] should_failslab+0xa8/0x100 [ 245.979251][T11741] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 245.979276][T11741] ? __alloc_skb+0x186/0x7d0 [ 245.979292][T11741] ? __alloc_skb+0x1d0/0x7d0 [ 245.979307][T11741] ? __local_bh_enable_ip+0xd0/0x130 [ 245.979330][T11741] __alloc_skb+0x1d0/0x7d0 [ 245.979347][T11741] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 245.979377][T11741] netlink_sendmsg+0x5d4/0xb40 [ 245.979407][T11741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.979432][T11741] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.979458][T11741] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.979485][T11741] ____sys_sendmsg+0x972/0x9f0 [ 245.979505][T11741] ? __might_fault+0xaf/0x130 [ 245.979533][T11741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.979562][T11741] ? import_iovec+0x73/0xa0 [ 245.979595][T11741] ___sys_sendmsg+0x2a5/0x360 [ 245.979614][T11741] ? __lock_acquire+0x6b5/0x2cf0 [ 245.979638][T11741] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.979691][T11741] ? __fget_files+0x2a/0x420 [ 245.979712][T11741] ? __fget_files+0x3a0/0x420 [ 245.979743][T11741] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.979766][T11741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.979795][T11741] ? __pfx_ksys_write+0x10/0x10 [ 245.979829][T11741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.979849][T11741] do_syscall_64+0x15f/0xf80 [ 245.979867][T11741] ? trace_irq_disable+0x3b/0x140 [ 245.979894][T11741] ? clear_bhb_loop+0x40/0x90 [ 245.979916][T11741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.979934][T11741] RIP: 0033:0x7ff1e8b9ce59 [ 245.979951][T11741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.979971][T11741] RSP: 002b:00007ff1e9b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.979991][T11741] RAX: ffffffffffffffda RBX: 00007ff1e8e15fa0 RCX: 00007ff1e8b9ce59 [ 245.980004][T11741] RDX: 0000000000000802 RSI: 00002000000035c0 RDI: 0000000000000004 [ 245.980016][T11741] RBP: 00007ff1e9b28090 R08: 0000000000000000 R09: 0000000000000000 [ 245.980027][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.980038][T11741] R13: 00007ff1e8e16038 R14: 00007ff1e8e15fa0 R15: 00007ffc89d5e558 [ 245.980068][T11741] [ 246.685859][T11757] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 246.721375][T11757] __nla_validate_parse: 12 callbacks suppressed [ 246.721394][T11757] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1437'. [ 246.890486][T11764] sctp: [Deprecated]: syz.3.1439 (pid 11764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.890486][T11764] Use struct sctp_sack_info instead [ 247.017523][T11764] sctp: [Deprecated]: syz.3.1439 (pid 11764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.017523][T11764] Use struct sctp_sack_info instead [ 247.109240][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.118603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.142172][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.150594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.168770][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.177265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.198509][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.206820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.221928][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.230293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.571183][T11781] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 247.596770][T11781] netlink: 'syz.4.1446': attribute type 2 has an invalid length. [ 247.616020][T11781] netlink: 'syz.4.1446': attribute type 2 has an invalid length. [ 247.624021][T11781] netlink: 'syz.4.1446': attribute type 2 has an invalid length. [ 247.634421][T11781] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 247.642753][T11781] netlink: 'syz.4.1446': attribute type 2 has an invalid length. [ 247.952158][T11790] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1448'. [ 248.038486][T11793] lo speed is unknown, defaulting to 1000 [ 248.425544][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 248.434491][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'. [ 248.473346][T11805] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 248.566344][T11805] bond9 (unregistering): Released all slaves [ 248.638159][T11810] netlink: 'syz.0.1453': attribute type 13 has an invalid length. [ 248.804899][T11810] gretap0: refused to change device tx_queue_len [ 249.089166][T11820] FAULT_INJECTION: forcing a failure. [ 249.089166][T11820] name failslab, interval 1, probability 0, space 0, times 0 [ 249.123778][T11818] 8021q: adding VLAN 0 to HW filter on device bond9 [ 249.135219][T11820] CPU: 1 UID: 0 PID: 11820 Comm: syz.0.1456 Not tainted syzkaller #0 PREEMPT(full) [ 249.135246][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.135258][T11820] Call Trace: [ 249.135266][T11820] [ 249.135275][T11820] dump_stack_lvl+0xe8/0x150 [ 249.135306][T11820] should_fail_ex+0x412/0x560 [ 249.135342][T11820] should_failslab+0xa8/0x100 [ 249.135379][T11820] __kmalloc_noprof+0xe8/0x760 [ 249.135410][T11820] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 249.135451][T11820] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 249.135492][T11820] ? kernel_text_address+0xa5/0xe0 [ 249.135530][T11820] genl_family_rcv_msg_doit+0xd9/0x330 [ 249.135562][T11820] ? __asan_memcpy+0x40/0x70 [ 249.135594][T11820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 249.135635][T11820] ? apparmor_capable+0x126/0x170 [ 249.135660][T11820] ? bpf_lsm_capable+0x9/0x20 [ 249.135681][T11820] ? security_capable+0x7e/0x2c0 [ 249.135717][T11820] genl_rcv_msg+0x61c/0x7a0 [ 249.135756][T11820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.135785][T11820] ? __pfx_nfc_genl_start_poll+0x10/0x10 [ 249.135826][T11820] netlink_rcv_skb+0x232/0x4b0 [ 249.135851][T11820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.135883][T11820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.135926][T11820] ? down_read+0x270/0x2e0 [ 249.135949][T11820] ? genl_rcv+0xd/0x40 [ 249.135978][T11820] genl_rcv+0x28/0x40 [ 249.136005][T11820] netlink_unicast+0x75c/0x8e0 [ 249.136039][T11820] netlink_sendmsg+0x813/0xb40 [ 249.136076][T11820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.136105][T11820] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.136136][T11820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.136170][T11820] ____sys_sendmsg+0x972/0x9f0 [ 249.136193][T11820] ? __might_fault+0xaf/0x130 [ 249.136229][T11820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.136263][T11820] ? import_iovec+0x73/0xa0 [ 249.136305][T11820] ___sys_sendmsg+0x2a5/0x360 [ 249.136333][T11820] ? __lock_acquire+0x6b5/0x2cf0 [ 249.136363][T11820] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.136429][T11820] ? __fget_files+0x2a/0x420 [ 249.136466][T11820] ? __fget_files+0x3a0/0x420 [ 249.136505][T11820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 249.136532][T11820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.136568][T11820] ? __pfx_ksys_write+0x10/0x10 [ 249.136610][T11820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.136639][T11820] do_syscall_64+0x15f/0xf80 [ 249.136660][T11820] ? trace_irq_disable+0x3b/0x140 [ 249.136692][T11820] ? clear_bhb_loop+0x40/0x90 [ 249.136720][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.136742][T11820] RIP: 0033:0x7ff1e8b9ce59 [ 249.136761][T11820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.136778][T11820] RSP: 002b:00007ff1e9b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.136799][T11820] RAX: ffffffffffffffda RBX: 00007ff1e8e15fa0 RCX: 00007ff1e8b9ce59 [ 249.136814][T11820] RDX: 0000000000000802 RSI: 00002000000035c0 RDI: 0000000000000004 [ 249.136828][T11820] RBP: 00007ff1e9b28090 R08: 0000000000000000 R09: 0000000000000000 [ 249.136840][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.136852][T11820] R13: 00007ff1e8e16038 R14: 00007ff1e8e15fa0 R15: 00007ffc89d5e558 [ 249.136889][T11820] [ 249.752710][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1458'. [ 250.160734][T11844] syzkaller1: entered promiscuous mode [ 250.175582][T11844] syzkaller1: entered allmulticast mode [ 250.684751][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 250.816985][T11868] nbd11: detected capacity change from 0 to 4398046674944 [ 250.830321][ T50] block nbd11: Receive control failed (result -32) [ 250.888180][T10006] block nbd11: Dead connection, failed to find a fallback [ 250.928404][T10006] block nbd11: shutting down sockets [ 250.984994][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.027365][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.052968][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.084126][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.117145][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.160200][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 251.178586][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.215264][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.248383][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.282484][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.306792][T11891] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1470'. [ 251.338684][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.355040][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 251.370032][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.390723][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 251.408571][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.429933][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.463461][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.476964][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.488710][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.498352][T10006] ldm_validate_partition_table(): Disk read failed. [ 251.505439][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.514697][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.524338][T10006] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.538627][T10006] Buffer I/O error on dev nbd11, logical block 0, async page read [ 251.547374][T10006] Dev nbd11: unable to read RDB block 0 [ 251.555015][T10006] nbd11: unable to read partition table [ 251.566682][T10006] ldm_validate_partition_table(): Disk read failed. [ 251.574053][T10006] Dev nbd11: unable to read RDB block 0 [ 251.580550][T10006] nbd11: unable to read partition table [ 251.829189][T11901] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1473'. [ 251.838981][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 251.860385][T11907] validate_nla: 1 callbacks suppressed [ 251.860400][T11907] netlink: 'syz.3.1476': attribute type 21 has an invalid length. [ 251.874183][T11907] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1476'. [ 251.883573][T11907] netlink: 'syz.3.1476': attribute type 5 has an invalid length. [ 251.897364][T11907] netlink: 'syz.3.1476': attribute type 6 has an invalid length. [ 251.905411][T11907] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1476'. [ 251.919534][T11907] netlink: 'syz.3.1476': attribute type 1 has an invalid length. [ 251.927602][T11907] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1476'. [ 252.200105][T11919] Bluetooth: MGMT ver 1.23 [ 252.281432][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 252.757835][T11947] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1483'. [ 252.819354][T11948] lo speed is unknown, defaulting to 1000 [ 252.951243][T11952] netlink: 'syz.0.1485': attribute type 4 has an invalid length. [ 252.991590][ T7680] lo speed is unknown, defaulting to 1000 [ 253.013512][ T7680] sqz0: Port: 1 Link ACTIVE [ 253.029024][ T7697] lo speed is unknown, defaulting to 1000 [ 253.076975][T11958] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'. [ 253.340400][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 253.521775][T11982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.762769][T11987] : entered promiscuous mode [ 254.285661][T11999] net_ratelimit: 6 callbacks suppressed [ 254.285680][T11999] netlink: zone id is out of range [ 254.338685][T11999] netlink: zone id is out of range [ 254.371457][T11999] netlink: zone id is out of range [ 254.384435][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 254.402098][T11999] netlink: zone id is out of range [ 254.415449][T11999] netlink: zone id is out of range [ 254.426463][T11999] netlink: zone id is out of range [ 254.439239][T11999] netlink: zone id is out of range [ 254.444608][T11999] netlink: zone id is out of range [ 254.450665][T11999] netlink: zone id is out of range [ 254.456186][T11999] netlink: zone id is out of range [ 254.698009][T12004] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 255.210172][T12004] bond6 (unregistering): Released all slaves [ 255.374222][T12029] pim6reg: entered allmulticast mode [ 255.532166][T12032] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 256.396531][T12088] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 257.084828][T12119] IPVS: set_ctl: invalid protocol: 22 172.20.20.46:20000 [ 257.087937][T12114] __nla_validate_parse: 12 callbacks suppressed [ 257.087979][T12114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1519'. [ 257.304591][T12131] Only authenc() type AEADs are supported by ESSIV [ 259.513810][T12100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.525593][T12116] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 259.717746][T12139] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 259.735403][T12139] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 260.009920][T12153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1526'. [ 260.283718][T12152] syzkaller1: entered promiscuous mode [ 260.289481][T12152] syzkaller1: entered allmulticast mode [ 260.324071][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 260.334329][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 260.343469][T12162] netlink: 'syz.1.1528': attribute type 18 has an invalid length. [ 260.460296][T12159] syzkaller1: entered promiscuous mode [ 260.471690][T12159] syzkaller1: entered allmulticast mode [ 260.548963][T12157] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 260.619939][T12169] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1531'. [ 260.816862][T12178] sctp: [Deprecated]: syz.0.1532 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.816862][T12178] Use struct sctp_sack_info instead [ 261.278051][T12200] bridge_slave_1: invalid flags given to default FDB implementation [ 261.286465][T12199] netlink: 'syz.0.1538': attribute type 10 has an invalid length. [ 261.330602][T12204] netlink: 'syz.4.1540': attribute type 24 has an invalid length. [ 261.344257][T12209] netlink: 'syz.0.1538': attribute type 10 has an invalid length. [ 261.374154][T12199] team0: Failed to send options change via netlink (err -105) [ 261.404043][T12199] team0: Port device dummy0 added [ 261.425309][T12209] dummy0: entered promiscuous mode [ 261.441655][T12209] dummy0: entered allmulticast mode [ 261.466586][T12209] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 261.561303][T12209] team0: Failed to send options change via netlink (err -105) [ 261.639067][T12209] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 261.693597][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'. [ 261.715797][T12209] team0: Port device dummy0 removed [ 261.716469][T12218] nbd: must specify a size in bytes for the device [ 261.764545][T12209] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 261.893570][T12221] lo speed is unknown, defaulting to 1000 [ 262.305303][T12240] nbd13: detected capacity change from 0 to 127 [ 262.341181][ T50] block nbd13: Receive control failed (result -104) [ 262.392095][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 262.492788][T12252] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1553'. [ 262.562221][T12252] bond0 (unregistering): left promiscuous mode [ 262.598999][T12252] bond_slave_0: left promiscuous mode [ 262.614674][T12256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1553'. [ 262.625821][T12257] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 262.625834][T12252] bond_slave_1: left promiscuous mode [ 262.649211][T12252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.684184][T12252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.703726][T12252] bond0 (unregistering): Released all slaves [ 262.704595][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1554'. [ 262.724376][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1554'. [ 262.933084][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 262.979915][T12264] nbd: must specify a size in bytes for the device [ 263.700625][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1561'. [ 264.591039][T12301] netlink: 'syz.3.1566': attribute type 14 has an invalid length. [ 264.614300][T12301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'. [ 264.703628][T12304] block nbd0: Unsupported socket: should be TCP or UNIX. [ 264.899769][T12307] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 264.952014][T12307] bond4: entered promiscuous mode [ 264.957610][T12307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.995010][T12317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1569'. [ 265.051139][T12307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.059910][T12321] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1572'. [ 265.085875][T12307] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 265.123983][T12307] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 265.171209][T12307] bond4: (slave vti1): making interface the new active one [ 265.197200][T12307] vti1: entered promiscuous mode [ 265.253039][T12307] bond4: (slave vti1): Enslaving as an active interface with an up link [ 265.599944][T12324] bond0 (unregistering): Released all slaves [ 265.618904][ T1709] block nbd13: Connection timed out, retrying (0/1 alive) [ 265.626743][ T1709] block nbd13: Connection timed out, retrying (0/1 alive) [ 265.636839][ T1709] block nbd13: Connection timed out, retrying (0/1 alive) [ 265.645129][ T1709] block nbd13: Connection timed out, retrying (0/1 alive) [ 265.652562][ T1709] block nbd13: Dead connection, failed to find a fallback [ 265.660061][ T1709] block nbd13: shutting down sockets [ 265.665597][ T1709] blk_print_req_error: 24 callbacks suppressed [ 265.665612][ T1709] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.682447][ T1709] buffer_io_error: 23 callbacks suppressed [ 265.682463][ T1709] Buffer I/O error on dev nbd13, logical block 3, async page read [ 265.696533][ T1709] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.705731][ T1709] Buffer I/O error on dev nbd13, logical block 2, async page read [ 265.713666][ T1709] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.722863][ T1709] Buffer I/O error on dev nbd13, logical block 1, async page read [ 265.730774][ T1709] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.739950][ T1709] Buffer I/O error on dev nbd13, logical block 0, async page read [ 265.751432][T10006] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.762876][T10006] Buffer I/O error on dev nbd13, logical block 0, async page read [ 265.771404][T10006] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.794490][T10006] Buffer I/O error on dev nbd13, logical block 1, async page read [ 265.803400][T10006] I/O error, dev nbd13, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.812634][T10006] Buffer I/O error on dev nbd13, logical block 2, async page read [ 265.820635][T10006] I/O error, dev nbd13, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.829852][T10006] Buffer I/O error on dev nbd13, logical block 3, async page read [ 265.837861][T10006] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.855207][T10006] Buffer I/O error on dev nbd13, logical block 0, async page read [ 265.869441][T10006] I/O error, dev nbd13, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.878665][T10006] Buffer I/O error on dev nbd13, logical block 1, async page read [ 265.890862][T10006] ldm_validate_partition_table(): Disk read failed. [ 265.899454][T10006] Dev nbd13: unable to read RDB block 0 [ 265.906952][T10006] nbd13: unable to read partition table [ 265.929121][T10006] ldm_validate_partition_table(): Disk read failed. [ 265.947545][T10006] Dev nbd13: unable to read RDB block 0 [ 265.954943][T10006] nbd13: unable to read partition table [ 266.746638][T12380] dummy0: entered allmulticast mode [ 266.850713][T12382] tipc: Enabling of bearer rejected, failed to enable media [ 266.976995][T12393] netlink: 'syz.1.1591': attribute type 39 has an invalid length. [ 267.104756][T12399] xt_hashlimit: size too large, truncated to 1048576 [ 267.209333][T12406] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 267.773443][T12433] __nla_validate_parse: 12 callbacks suppressed [ 267.773463][T12433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1599'. [ 267.809918][T12433] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1599'. [ 267.890824][T12440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1601'. [ 268.055556][T12433] bridge0: port 3(ipvlan2) entered blocking state [ 268.114517][T12433] bridge0: port 3(ipvlan2) entered disabled state [ 268.232709][T12433] ipvlan2: entered allmulticast mode [ 268.315267][T12433] bridge0: entered allmulticast mode [ 268.429559][T12433] ipvlan2: left allmulticast mode [ 268.502512][T12433] bridge0: left allmulticast mode [ 269.008550][T12432] tipc: Enabling of bearer rejected, failed to enable media [ 269.051775][T12432] syzkaller0: entered promiscuous mode [ 269.088293][T12432] syzkaller0: entered allmulticast mode [ 269.124110][T12493] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1604'. [ 269.204984][T12493] netlink: 'syz.3.1604': attribute type 2 has an invalid length. [ 269.374110][ T57] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.410937][ T57] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.457348][ T57] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.495264][ T57] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.775721][T12512] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1610'. [ 269.980144][T12522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1614'. [ 270.167005][T12531] netlink: 'syz.1.1617': attribute type 3 has an invalid length. [ 270.197774][T12531] netlink: 'syz.1.1617': attribute type 3 has an invalid length. [ 270.249935][T12531] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1617'. [ 270.259929][T12542] netlink: 'syz.0.1620': attribute type 1 has an invalid length. [ 270.463486][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 270.478148][T12554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1623'. [ 270.499342][T12554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1623'. [ 271.698360][T12600] bridge4: port 1(veth5) entered blocking state [ 271.721747][T12600] bridge4: port 1(veth5) entered disabled state [ 271.741477][T12600] veth5: entered allmulticast mode [ 271.765788][T12600] veth5: entered promiscuous mode [ 271.807179][T12606] bridge4: port 2(veth0_to_bond) entered blocking state [ 271.846003][T12606] bridge4: port 2(veth0_to_bond) entered disabled state [ 271.869568][T12606] veth0_to_bond: entered allmulticast mode [ 271.895772][T12606] veth0_to_bond: entered promiscuous mode [ 271.976137][T12612] bridge4: port 3(veth7) entered blocking state [ 271.982753][T12612] bridge4: port 3(veth7) entered disabled state [ 271.989608][T12612] veth7: entered allmulticast mode [ 272.000496][T12612] veth7: entered promiscuous mode [ 272.073891][T12611] lo speed is unknown, defaulting to 1000 [ 272.610869][T12637] ÿ: renamed from bond_slave_0 (while UP) [ 273.043369][T12616] dvmrp0: entered allmulticast mode [ 273.205651][T12650] SET target dimension over the limit! [ 273.229358][T12647] __nla_validate_parse: 6 callbacks suppressed [ 273.229376][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1650'. [ 273.379608][T12647] ip6gre1: entered promiscuous mode [ 273.393120][T12647] ip6gre1: entered allmulticast mode [ 273.741451][T12655] syzkaller0: entered promiscuous mode [ 273.756040][T12655] syzkaller0: entered allmulticast mode [ 274.032778][T12678] sqz0: rxe_newlink: already configured on lo [ 274.138944][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.146247][T12679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.155905][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.163080][T12679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.236148][T12679] net_ratelimit: 46 callbacks suppressed [ 274.236164][T12679] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 274.584526][T12697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1659'. [ 274.624157][T12694] nbd: couldn't find a device at index 4 [ 274.694360][T12697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.068960][T12700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.105905][T12700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.126814][T12702] sit0: entered promiscuous mode [ 276.141543][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 276.398674][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'. [ 276.541318][T12721] netlink: 840 bytes leftover after parsing attributes in process `syz.3.1665'. [ 276.627601][T12719] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 276.704235][T12724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.838494][T12713] pimreg9: entered allmulticast mode [ 277.036676][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 277.081090][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 277.497196][T12754] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 277.580761][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 277.674866][T12768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1675'. [ 277.745546][T12767] bond7: (slave geneve6): making interface the new active one [ 277.784593][T12767] bond7: (slave geneve6): Enslaving as an active interface with an up link [ 277.836505][T12766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.889134][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1681'. [ 277.939218][T12768] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.964279][ T6483] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.128645][ T6483] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.169189][ T6483] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.203352][ T6483] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.403138][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'. [ 278.611046][T12811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1689'. [ 278.713946][T12815] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.763511][T12815] bond0: (slave lo): Enslaving as an active interface with an up link [ 278.780709][T12815] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 278.991686][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1692'. [ 279.714214][T12848] netlink: 'syz.2.1700': attribute type 1 has an invalid length. [ 281.776286][T12848] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 282.076589][T12862] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 282.112317][T12867] hsr0: entered promiscuous mode [ 282.850127][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1712'. [ 282.859339][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1712'. [ 282.878548][T12892] netlink: 'syz.1.1712': attribute type 3 has an invalid length. [ 282.888109][T12892] openvswitch: netlink: Flow actions attr not present in new flow. [ 283.057597][T12897] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 283.853076][T12934] netlink: zone id is out of range [ 283.875925][T12934] netlink: zone id is out of range [ 283.891277][T12934] netlink: zone id is out of range [ 283.910541][T12934] netlink: zone id is out of range [ 283.940911][T12942] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1722'. [ 283.962654][T12934] netlink: zone id is out of range [ 283.975854][T12934] netlink: zone id is out of range [ 284.008839][T12934] netlink: zone id is out of range [ 284.042115][T12934] netlink: zone id is out of range [ 284.079100][T12934] netlink: zone id is out of range [ 284.128509][T12938] tipc: Enabling of bearer rejected, failed to enable media [ 284.257254][T12954] lo speed is unknown, defaulting to 1000 [ 284.304190][T12949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.575546][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 284.618285][T12959] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1732'. [ 284.789264][T12964] FAULT_INJECTION: forcing a failure. [ 284.789264][T12964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.843391][T12964] CPU: 0 UID: 0 PID: 12964 Comm: syz.0.1734 Not tainted syzkaller #0 PREEMPT(full) [ 284.843415][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.843426][T12964] Call Trace: [ 284.843434][T12964] [ 284.843442][T12964] dump_stack_lvl+0xe8/0x150 [ 284.843469][T12964] should_fail_ex+0x412/0x560 [ 284.843498][T12964] _copy_from_user+0x2d/0xb0 [ 284.843527][T12964] ___sys_sendmsg+0x1c6/0x360 [ 284.843546][T12964] ? __lock_acquire+0x6b5/0x2cf0 [ 284.843570][T12964] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.843629][T12964] ? __fget_files+0x2a/0x420 [ 284.843650][T12964] ? __fget_files+0x3a0/0x420 [ 284.843679][T12964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.843702][T12964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.843730][T12964] ? __pfx_ksys_write+0x10/0x10 [ 284.843764][T12964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.843783][T12964] do_syscall_64+0x15f/0xf80 [ 284.843801][T12964] ? trace_irq_disable+0x3b/0x140 [ 284.843829][T12964] ? clear_bhb_loop+0x40/0x90 [ 284.843852][T12964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.843871][T12964] RIP: 0033:0x7ff1e8b9ce59 [ 284.843888][T12964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.843903][T12964] RSP: 002b:00007ff1e9b28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.843922][T12964] RAX: ffffffffffffffda RBX: 00007ff1e8e15fa0 RCX: 00007ff1e8b9ce59 [ 284.843935][T12964] RDX: 0000000000040040 RSI: 0000200000000080 RDI: 0000000000000003 [ 284.843947][T12964] RBP: 00007ff1e9b28090 R08: 0000000000000000 R09: 0000000000000000 [ 284.843958][T12964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.843969][T12964] R13: 00007ff1e8e16038 R14: 00007ff1e8e15fa0 R15: 00007ffc89d5e558 [ 284.843998][T12964] [ 285.243129][T12970] netlink: 'syz.0.1736': attribute type 8 has an invalid length. [ 285.273399][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'. [ 285.284755][T12975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1737'. [ 285.302816][T12974] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 285.671395][T12987] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 286.085715][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1746'. [ 286.514225][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 287.309510][T13041] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1755'. [ 287.453315][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'. [ 287.539995][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 287.605322][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 288.433046][T13091] siw: device registration error -23 [ 288.693620][T13095] net_ratelimit: 16 callbacks suppressed [ 288.693640][T13095] openvswitch: netlink: Flow actions attr not present in new flow. [ 291.643324][T13102] ipvlan2: entered promiscuous mode [ 291.900897][T13116] hsr0: left promiscuous mode [ 291.934460][T13116] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 292.055302][T13120] veth11: entered allmulticast mode [ 292.079849][T13126] __nla_validate_parse: 4 callbacks suppressed [ 292.079865][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1783'. [ 292.106331][T13121] bridge_slave_0: left allmulticast mode [ 292.112169][T13121] bridge_slave_0: left promiscuous mode [ 292.119651][T13121] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.129366][T13121] bridge_slave_1: left allmulticast mode [ 292.135872][T13121] bridge_slave_1: left promiscuous mode [ 292.141859][T13121] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.155489][T13121] bond0: (slave bond_slave_0): Releasing backup interface [ 292.167972][T13121] bond0: (slave bond_slave_1): Releasing backup interface [ 292.181003][T13121] team0: Port device team_slave_0 removed [ 292.188890][T13121] team0: Port device 76žÿ removed [ 292.194356][T13121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.202865][T13121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.656069][T13124] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 292.691200][T13124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.171499][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1795'. [ 293.458730][T13185] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1796'. [ 293.660908][T13189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1797'. [ 293.683360][T13190] block nbd0: NBD_DISCONNECT [ 293.695878][T13190] block nbd0: Send disconnect failed -32 [ 293.716954][T13190] block nbd0: shutting down sockets [ 293.780653][T13191] dvmrp0: left allmulticast mode [ 294.032762][T13206] netlink: 'syz.0.1802': attribute type 2 has an invalid length. [ 294.140290][T13207] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1801'. [ 294.349027][T13224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1804'. [ 294.364960][T13224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1804'. [ 294.564023][T13233] syzkaller0: entered promiscuous mode [ 294.597159][T13233] syzkaller0: entered allmulticast mode [ 294.685453][T13248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1808'. [ 294.875014][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1811'. [ 295.117516][T13268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1817'. [ 295.284929][T13284] netlink: 'syz.2.1821': attribute type 22 has an invalid length. [ 295.844897][T13309] syzkaller0: entered promiscuous mode [ 295.879471][T13309] syzkaller0: entered allmulticast mode [ 296.403199][T13340] syzkaller0: entered promiscuous mode [ 296.425295][T13340] syzkaller0: entered allmulticast mode [ 296.507220][T13346] netlink: 'syz.1.1840': attribute type 11 has an invalid length. [ 297.008926][T13377] x_tables: duplicate entry at hook 2 [ 297.022977][T13379] netlink: 'syz.2.1848': attribute type 1 has an invalid length. [ 297.184363][T13388] __nla_validate_parse: 10 callbacks suppressed [ 297.184382][T13388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1851'. [ 297.336768][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'. [ 297.415938][T13397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1853'. [ 297.482207][T13402] syzkaller0: entered promiscuous mode [ 297.496298][T13402] syzkaller0: entered allmulticast mode [ 297.563160][T12022] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.578856][T12022] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.635039][T13405] bond0: (slave lo): Releasing backup interface [ 297.645958][T13405] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 297.672832][T13405] team0: Port device syz_tun removed [ 297.681991][T13405] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 317.046440][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.989787][T13436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1863'. [ 320.171080][T13438] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1864'. [ 320.190085][T13438] dummy0 (unregistering): left allmulticast mode [ 320.304580][T13445] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1867'. [ 320.469491][T13451] syzkaller0: entered promiscuous mode [ 320.475329][T13451] syzkaller0: entered allmulticast mode [ 320.870882][ T7905] syzkaller0: tun_net_xmit 76 [ 320.889449][T13460] syzkaller0: create flow: hash 1194617088 index 1 [ 321.018087][T13469] syzkaller0: delete flow: hash 1194617088 index 1 [ 321.189727][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.244894][T13481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1876'. [ 321.330664][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'. [ 322.805984][T13483] tipc: Enabled bearer , priority 6 [ 323.189962][T13514] syzkaller0: entered promiscuous mode [ 323.221732][T13514] syzkaller0: entered allmulticast mode [ 323.289168][T13517] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1884'. [ 323.299117][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 323.541456][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1887'. [ 323.574405][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1887'. [ 323.597574][T13529] syzkaller0: entered promiscuous mode [ 323.615203][T13529] syzkaller0: entered allmulticast mode [ 323.644732][T13538] FAULT_INJECTION: forcing a failure. [ 323.644732][T13538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.659437][T13537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1889'. [ 323.672256][T13538] CPU: 1 UID: 0 PID: 13538 Comm: syz.0.1890 Not tainted syzkaller #0 PREEMPT(full) [ 323.672283][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.672316][T13538] Call Trace: [ 323.672324][T13538] [ 323.672334][T13538] dump_stack_lvl+0xe8/0x150 [ 323.672364][T13538] should_fail_ex+0x412/0x560 [ 323.672399][T13538] _copy_from_user+0x2d/0xb0 [ 323.672433][T13538] ___sys_sendmsg+0x1c6/0x360 [ 323.672457][T13538] ? __lock_acquire+0x6b5/0x2cf0 [ 323.672486][T13538] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.672507][T13538] ? __lock_acquire+0x6b5/0x2cf0 [ 323.672535][T13538] ? kstrtouint+0x6e/0xe0 [ 323.672605][T13538] __sys_sendmmsg+0x27c/0x4e0 [ 323.672636][T13538] ? __pfx___sys_sendmmsg+0x10/0x10 [ 323.672658][T13538] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 323.672708][T13538] ? ksys_write+0x242/0x270 [ 323.672754][T13538] ? __pfx_ksys_write+0x10/0x10 [ 323.672802][T13538] __x64_sys_sendmmsg+0xa0/0xc0 [ 323.672822][T13538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.672843][T13538] do_syscall_64+0x15f/0xf80 [ 323.672861][T13538] ? trace_irq_disable+0x3b/0x140 [ 323.672889][T13538] ? clear_bhb_loop+0x40/0x90 [ 323.672913][T13538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.672931][T13538] RIP: 0033:0x7ff1e8b9ce59 [ 323.672949][T13538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.672966][T13538] RSP: 002b:00007ff1e9b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.672986][T13538] RAX: ffffffffffffffda RBX: 00007ff1e8e15fa0 RCX: 00007ff1e8b9ce59 [ 323.673000][T13538] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 323.673012][T13538] RBP: 00007ff1e9b28090 R08: 0000000000000000 R09: 0000000000000000 [ 323.673024][T13538] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000001 [ 323.673036][T13538] R13: 00007ff1e8e16038 R14: 00007ff1e8e15fa0 R15: 00007ffc89d5e558 [ 323.673067][T13538] [ 323.934664][ T7680] tipc: Node number set to 3758096385 [ 324.477120][T13564] netlink: 'syz.0.1897': attribute type 8 has an invalid length. [ 324.802350][T13582] FAULT_INJECTION: forcing a failure. [ 324.802350][T13582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.828882][T13582] CPU: 1 UID: 0 PID: 13582 Comm: syz.2.1901 Not tainted syzkaller #0 PREEMPT(full) [ 324.828911][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.828924][T13582] Call Trace: [ 324.828931][T13582] [ 324.828939][T13582] dump_stack_lvl+0xe8/0x150 [ 324.828966][T13582] should_fail_ex+0x412/0x560 [ 324.828996][T13582] _copy_from_user+0x2d/0xb0 [ 324.829024][T13582] ___sys_sendmsg+0x1c6/0x360 [ 324.829044][T13582] ? __lock_acquire+0x6b5/0x2cf0 [ 324.829069][T13582] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.829087][T13582] ? __lock_acquire+0x6b5/0x2cf0 [ 324.829111][T13582] ? kstrtouint+0x6e/0xe0 [ 324.829170][T13582] __sys_sendmmsg+0x27c/0x4e0 [ 324.829196][T13582] ? __pfx___sys_sendmmsg+0x10/0x10 [ 324.829214][T13582] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 324.829257][T13582] ? ksys_write+0x242/0x270 [ 324.829285][T13582] ? __pfx_ksys_write+0x10/0x10 [ 324.829318][T13582] __x64_sys_sendmmsg+0xa0/0xc0 [ 324.829337][T13582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.829357][T13582] do_syscall_64+0x15f/0xf80 [ 324.829373][T13582] ? trace_irq_disable+0x3b/0x140 [ 324.829400][T13582] ? clear_bhb_loop+0x40/0x90 [ 324.829422][T13582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.829440][T13582] RIP: 0033:0x7fae8db9ce59 [ 324.829457][T13582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.829480][T13582] RSP: 002b:00007fae8ea8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 324.829499][T13582] RAX: ffffffffffffffda RBX: 00007fae8de15fa0 RCX: 00007fae8db9ce59 [ 324.829513][T13582] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 324.829524][T13582] RBP: 00007fae8ea8a090 R08: 0000000000000000 R09: 0000000000000000 [ 324.829535][T13582] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000002 [ 324.829546][T13582] R13: 00007fae8de16038 R14: 00007fae8de15fa0 R15: 00007fff8fc31d48 [ 324.829575][T13582] [ 325.181138][T13591] __nla_validate_parse: 2 callbacks suppressed [ 325.181157][T13591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1902'. [ 325.262269][T13566] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.269782][T13566] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.488245][T13566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.664166][T13566] tipc: Resetting bearer [ 325.893835][T12024] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.935560][T12024] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.966590][T12024] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.984252][T12024] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.019895][T12024] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.048843][T12024] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.144255][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1906'. [ 326.254537][T13607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1906'. [ 326.437787][T13620] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1909'. [ 326.478724][T13620] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1909'. [ 326.500464][T13620] policy can only be matched on NF_INET_PRE_ROUTING [ 326.500481][T13620] unable to load match [ 326.621428][T13628] FAULT_INJECTION: forcing a failure. [ 326.621428][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 326.634716][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.2.1912 Not tainted syzkaller #0 PREEMPT(full) [ 326.634740][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.634752][T13628] Call Trace: [ 326.634760][T13628] [ 326.634767][T13628] dump_stack_lvl+0xe8/0x150 [ 326.634794][T13628] should_fail_ex+0x412/0x560 [ 326.634825][T13628] should_failslab+0xa8/0x100 [ 326.634853][T13628] ? dst_alloc+0x105/0x170 [ 326.634876][T13628] kmem_cache_alloc_noprof+0x87/0x650 [ 326.634900][T13628] ? __pfx_find_exception+0x10/0x10 [ 326.634926][T13628] ? fib_lookup+0x76/0x440 [ 326.634954][T13628] dst_alloc+0x105/0x170 [ 326.634980][T13628] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 326.635017][T13628] ? ip_route_output_key_hash+0xd8/0x2a0 [ 326.635049][T13628] ip_route_output_key_hash+0x18d/0x2a0 [ 326.635088][T13628] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 326.635131][T13628] ip_route_output_flow+0x2a/0x150 [ 326.635154][T13628] ? security_sk_classify_flow+0x6d/0x150 [ 326.635177][T13628] raw_sendmsg+0x1199/0x1a50 [ 326.635217][T13628] ? __pfx_raw_sendmsg+0x10/0x10 [ 326.635258][T13628] ? aa_sk_perm+0x6d5/0x900 [ 326.635278][T13628] ? unwind_next_frame+0xa6/0x2550 [ 326.635309][T13628] ? __pfx_aa_sk_perm+0x10/0x10 [ 326.635332][T13628] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 326.635362][T13628] ? sock_rps_record_flow+0x19/0x350 [ 326.635391][T13628] ? inet_sendmsg+0x2f4/0x370 [ 326.635415][T13628] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.635443][T13628] ____sys_sendmsg+0x80a/0x9f0 [ 326.635463][T13628] ? __might_fault+0xaf/0x130 [ 326.635493][T13628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.635522][T13628] ? import_iovec+0x73/0xa0 [ 326.635553][T13628] ___sys_sendmsg+0x2a5/0x360 [ 326.635572][T13628] ? __lock_acquire+0x6b5/0x2cf0 [ 326.635596][T13628] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.635614][T13628] ? __lock_acquire+0x6b5/0x2cf0 [ 326.635638][T13628] ? kstrtouint+0x6e/0xe0 [ 326.635699][T13628] __sys_sendmmsg+0x27c/0x4e0 [ 326.635725][T13628] ? __pfx___sys_sendmmsg+0x10/0x10 [ 326.635743][T13628] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 326.635787][T13628] ? ksys_write+0x242/0x270 [ 326.635816][T13628] ? __pfx_ksys_write+0x10/0x10 [ 326.635848][T13628] __x64_sys_sendmmsg+0xa0/0xc0 [ 326.635868][T13628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.635888][T13628] do_syscall_64+0x15f/0xf80 [ 326.635904][T13628] ? trace_irq_disable+0x3b/0x140 [ 326.635931][T13628] ? clear_bhb_loop+0x40/0x90 [ 326.635970][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.635989][T13628] RIP: 0033:0x7fae8db9ce59 [ 326.636006][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.636022][T13628] RSP: 002b:00007fae8ea8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 326.636042][T13628] RAX: ffffffffffffffda RBX: 00007fae8de15fa0 RCX: 00007fae8db9ce59 [ 326.636055][T13628] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 326.636072][T13628] RBP: 00007fae8ea8a090 R08: 0000000000000000 R09: 0000000000000000 [ 326.636083][T13628] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000002 [ 326.636094][T13628] R13: 00007fae8de16038 R14: 00007fae8de15fa0 R15: 00007fff8fc31d48 [ 326.636125][T13628] [ 327.108368][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'. [ 327.123307][T13634] syzkaller0: entered promiscuous mode [ 327.145455][T13634] syzkaller0: entered allmulticast mode [ 327.502167][T13650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.681876][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 327.699912][T13661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1921'. [ 327.744748][T13661] netlink: 81 bytes leftover after parsing attributes in process `syz.4.1921'. [ 327.863083][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 327.903730][T13673] FAULT_INJECTION: forcing a failure. [ 327.903730][T13673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.911585][T13671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.934540][T13673] CPU: 1 UID: 0 PID: 13673 Comm: syz.0.1925 Not tainted syzkaller #0 PREEMPT(full) [ 327.934565][T13673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.934577][T13673] Call Trace: [ 327.934584][T13673] [ 327.934591][T13673] dump_stack_lvl+0xe8/0x150 [ 327.934618][T13673] should_fail_ex+0x412/0x560 [ 327.934648][T13673] _copy_from_user+0x2d/0xb0 [ 327.934676][T13673] ___sys_sendmsg+0x1c6/0x360 [ 327.934697][T13673] ? __lock_acquire+0x6b5/0x2cf0 [ 327.934721][T13673] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.934739][T13673] ? __lock_acquire+0x6b5/0x2cf0 [ 327.934763][T13673] ? kstrtouint+0x6e/0xe0 [ 327.934822][T13673] __sys_sendmmsg+0x27c/0x4e0 [ 327.934847][T13673] ? __pfx___sys_sendmmsg+0x10/0x10 [ 327.934865][T13673] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 327.934913][T13673] ? ksys_write+0x242/0x270 [ 327.934942][T13673] ? __pfx_ksys_write+0x10/0x10 [ 327.934974][T13673] __x64_sys_sendmmsg+0xa0/0xc0 [ 327.934994][T13673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.935013][T13673] do_syscall_64+0x15f/0xf80 [ 327.935030][T13673] ? trace_irq_disable+0x3b/0x140 [ 327.935056][T13673] ? clear_bhb_loop+0x40/0x90 [ 327.935078][T13673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.935095][T13673] RIP: 0033:0x7ff1e8b9ce59 [ 327.935111][T13673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.935127][T13673] RSP: 002b:00007ff1e9b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.935146][T13673] RAX: ffffffffffffffda RBX: 00007ff1e8e15fa0 RCX: 00007ff1e8b9ce59 [ 327.935160][T13673] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 327.935172][T13673] RBP: 00007ff1e9b28090 R08: 0000000000000000 R09: 0000000000000000 [ 327.935183][T13673] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000002 [ 327.935194][T13673] R13: 00007ff1e8e16038 R14: 00007ff1e8e15fa0 R15: 00007ffc89d5e558 [ 327.935230][T13673] [ 328.140520][T13676] syzkaller0: entered promiscuous mode [ 328.146092][T13676] syzkaller0: entered allmulticast mode [ 328.247161][T13683] sctp: [Deprecated]: syz.1.1929 (pid 13683) Use of int in max_burst socket option. [ 328.247161][T13683] Use struct sctp_assoc_value instead [ 328.270875][T13678] sch_tbf: burst 1023 is lower than device lo mtu (527073295) ! [ 328.309261][T13683] syz.1.1929: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 328.361522][T13683] CPU: 1 UID: 0 PID: 13683 Comm: syz.1.1929 Not tainted syzkaller #0 PREEMPT(full) [ 328.361568][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.361582][T13683] Call Trace: [ 328.361590][T13683] [ 328.361600][T13683] dump_stack_lvl+0xe8/0x150 [ 328.361632][T13683] warn_alloc+0x249/0x340 [ 328.361666][T13683] ? stack_trace_save+0xa9/0x100 [ 328.361703][T13683] ? __pfx_warn_alloc+0x10/0x10 [ 328.361744][T13683] ? kasan_save_track+0x4f/0x80 [ 328.361772][T13683] ? kasan_save_track+0x3e/0x80 [ 328.361799][T13683] ? __kasan_kmalloc+0x93/0xb0 [ 328.361829][T13683] ? __kmalloc_cache_noprof+0x31c/0x660 [ 328.361858][T13683] ? xskq_create+0x56/0x170 [ 328.361887][T13683] ? xsk_setsockopt+0x54c/0x990 [ 328.361913][T13683] ? do_sock_setsockopt+0x17c/0x1b0 [ 328.361933][T13683] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 328.361954][T13683] ? do_syscall_64+0x15f/0xf80 [ 328.361980][T13683] __vmalloc_node_range_noprof+0x132/0x1750 [ 328.362047][T13683] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.362087][T13683] ? __kasan_kmalloc+0x93/0xb0 [ 328.362123][T13683] vmalloc_user_noprof+0xad/0xe0 [ 328.362153][T13683] ? xskq_create+0xbf/0x170 [ 328.362201][T13683] xskq_create+0xbf/0x170 [ 328.362237][T13683] xsk_init_queue+0x8a/0xe0 [ 328.362271][T13683] xsk_setsockopt+0x54c/0x990 [ 328.362304][T13683] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.362333][T13683] ? __pfx_aa_sk_perm+0x10/0x10 [ 328.362365][T13683] ? aa_sock_opt_perm+0xff/0x1a0 [ 328.362398][T13683] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 328.362433][T13683] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.362464][T13683] do_sock_setsockopt+0x17c/0x1b0 [ 328.362493][T13683] __x64_sys_setsockopt+0x13d/0x1b0 [ 328.362520][T13683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.362544][T13683] do_syscall_64+0x15f/0xf80 [ 328.362564][T13683] ? trace_irq_disable+0x3b/0x140 [ 328.362600][T13683] ? clear_bhb_loop+0x40/0x90 [ 328.362628][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.362650][T13683] RIP: 0033:0x7f480c39ce59 [ 328.362671][T13683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.362703][T13683] RSP: 002b:00007f480d25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.362727][T13683] RAX: ffffffffffffffda RBX: 00007f480c615fa0 RCX: 00007f480c39ce59 [ 328.362755][T13683] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 328.362765][T13683] RBP: 00007f480c432d6f R08: 0000000000000004 R09: 0000000000000000 [ 328.362777][T13683] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.362789][T13683] R13: 00007f480c616038 R14: 00007f480c615fa0 R15: 00007ffef5009648 [ 328.362820][T13683] [ 328.363270][T13683] Mem-Info: [ 328.678079][T13683] active_anon:5873 inactive_anon:0 isolated_anon:0 [ 328.678079][T13683] active_file:3209 inactive_file:40054 isolated_file:0 [ 328.678079][T13683] unevictable:785 dirty:105 writeback:0 [ 328.678079][T13683] slab_reclaimable:11403 slab_unreclaimable:179740 [ 328.678079][T13683] mapped:29475 shmem:1319 pagetables:1424 [ 328.678079][T13683] sec_pagetables:0 bounce:0 [ 328.678079][T13683] kernel_misc_reclaimable:0 [ 328.678079][T13683] free:1239024 free_pcp:12736 free_cma:0 [ 328.726132][T13683] Node 0 active_anon:23460kB inactive_anon:0kB active_file:12836kB inactive_file:160004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117900kB dirty:420kB writeback:0kB shmem:3692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15476kB pagetables:5528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 328.762411][T13683] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 328.799365][T13683] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.834030][T13683] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 328.840367][T13683] Node 0 DMA32 free:1012992kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23364kB inactive_anon:0kB active_file:12836kB inactive_file:160004kB unevictable:1536kB writepending:512kB zspages:0kB present:3129332kB managed:2552360kB mlocked:0kB bounce:0kB free_pcp:47512kB local_pcp:25172kB free_cma:0kB [ 328.878258][T13683] lowmem_reserve[]: 0 0 0 0 0 [ 328.883180][T13683] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 328.913579][T13683] lowmem_reserve[]: 0 0 0 0 0 [ 328.920725][T13683] Node 1 Normal free:3932168kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.016738][T13683] lowmem_reserve[]: 0 0 0 0 0 [ 329.023442][T13683] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.043288][T13683] Node 0 DMA32: 2614*4kB (UME) 3028*8kB (UME) 1141*16kB (UME) 588*32kB (UME) 452*64kB (UME) 699*128kB (UME) 466*256kB (UME) 247*512kB (UE) 156*1024kB (UME) 92*2048kB (UM) 56*4096kB (UM) = 1013448kB [ 329.112145][T13683] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 329.138368][T13683] Node 1 Normal: 2*4kB (UM) 10*8kB (UM) 7*16kB (UM) 12*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3932168kB [ 329.176178][T13697] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 329.197524][T13683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.236303][T13697] tipc: Enabled bearer , priority 10 [ 329.250345][T13683] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.261245][T13683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.271557][T13683] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.281391][T13683] 44550 total pagecache pages [ 329.310391][T13683] 0 pages in swap cache [ 329.315486][T13683] Free swap = 124996kB [ 329.319911][T13683] Total swap = 124996kB [ 329.324616][T13683] 2097051 pages RAM [ 329.331841][T13683] 0 pages HighMem/MovableOnly [ 329.338298][T13683] 427181 pages reserved [ 329.342569][T13683] 0 pages cma reserved [ 329.787953][T13726] syzkaller0: entered promiscuous mode [ 329.801162][T13726] syzkaller0: entered allmulticast mode [ 330.046617][T13732] bond8 (unregistering): Released all slaves [ 330.198998][T13748] netlink: 'syz.4.1949': attribute type 58 has an invalid length. [ 330.213730][T13748] __nla_validate_parse: 4 callbacks suppressed [ 330.213746][T13748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 330.400137][ T7905] tipc: Node number set to 2874407525 [ 330.535384][T13756] macsec2: entered promiscuous mode [ 330.585356][T13766] sctp: [Deprecated]: syz.0.1953 (pid 13766) Use of int in max_burst socket option deprecated. [ 330.585356][T13766] Use struct sctp_assoc_value instead [ 330.619406][T13770] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1508 [ 330.689613][T13770] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 330.729179][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 330.894571][T13783] tipc: Enabled bearer , priority 6 [ 331.096410][T13786] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1957'. [ 331.304261][T13796] gre2: entered promiscuous mode [ 331.346461][T13796] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 331.375715][T13797] syzkaller0: entered promiscuous mode [ 331.392408][T13797] syzkaller0: entered allmulticast mode [ 331.399557][T13796] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 331.412237][T13796] sctp: [Deprecated]: syz.4.1960 (pid 13796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.412237][T13796] Use struct sctp_sack_info instead [ 331.484943][T13801] netlink: 'syz.4.1960': attribute type 83 has an invalid length. [ 332.044981][T13835] netlink: 'syz.0.1966': attribute type 1 has an invalid length. [ 332.079358][ T29] tipc: Node number set to 1199910478 [ 332.241062][T13835] 8021q: adding VLAN 0 to HW filter on device bond12 [ 332.467002][T13856] syzkaller0: entered promiscuous mode [ 332.482519][T13856] syzkaller0: entered allmulticast mode [ 333.130034][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 333.387250][T13877] lo speed is unknown, defaulting to 1000 [ 333.893281][ T29] IPVS: starting estimator thread 0... [ 333.915898][T13896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.926118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.015259][T13901] lo speed is unknown, defaulting to 1000 [ 334.035300][T13909] IPVS: using max 33 ests per chain, 79200 per kthread [ 334.266255][T13916] xt_hashlimit: size too large, truncated to 1048576 [ 334.386062][T13924] netlink: 'syz.0.1986': attribute type 1 has an invalid length. [ 334.418146][T13924] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1986'. [ 334.538309][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.824212][T13919] bridge_slave_0 (unregistering): left allmulticast mode [ 334.882395][T13919] bridge_slave_0 (unregistering): left promiscuous mode [ 334.948979][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.029736][T13928] syzkaller0: entered promiscuous mode [ 335.043090][T13928] syzkaller0: entered allmulticast mode [ 335.602716][T13980] x_tables: duplicate underflow at hook 1 [ 335.823788][T13989] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1997'. [ 336.006955][T13995] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 336.039398][T13995] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 336.107077][T13998] syzkaller0: entered promiscuous mode [ 336.144154][T13998] syzkaller0: entered allmulticast mode [ 336.149352][T14000] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2000'. [ 336.643054][T14011] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.2004'. [ 337.054861][T14022] lo speed is unknown, defaulting to 1000 [ 337.134094][T14028] syzkaller0: entered promiscuous mode [ 337.151451][T14028] syzkaller0: entered allmulticast mode [ 337.168698][T14032] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 337.287661][T14025] Cannot find add_set index 2 as target [ 337.627532][T14041] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 337.690276][T14044] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 337.761577][T14044] 8021q: adding VLAN 0 to HW filter on device bond8 [ 337.769900][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 337.838752][T14047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.872977][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 337.888714][T14049] bond8 (unregistering): Released all slaves [ 337.998071][T14051] tipc: Enabling of bearer rejected, failed to enable media [ 338.107355][T14059] netlink: set zone limit has 8 unknown bytes [ 338.240024][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2014'. [ 338.297759][T14062] tipc: Enabled bearer , priority 0 [ 338.324271][T14062] syzkaller0: entered promiscuous mode [ 338.346384][T14062] syzkaller0: entered allmulticast mode [ 339.066000][T14061] tipc: Resetting bearer [ 340.692379][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2020'. [ 341.296266][T14061] tipc: Disabling bearer [ 341.378929][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'. [ 341.481502][T14089] syzkaller0: entered promiscuous mode [ 341.501840][T14089] syzkaller0: entered allmulticast mode [ 342.311812][T14132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'. [ 342.536967][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 342.595272][T14142] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.660420][T14145] syzkaller0: entered promiscuous mode [ 342.683844][T14145] syzkaller0: entered allmulticast mode [ 342.739959][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 342.768121][T14151] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 342.928358][T14159] syzkaller0: entered promiscuous mode [ 342.936735][T14159] syzkaller0: entered allmulticast mode [ 343.226781][T14172] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2044'. [ 345.296321][T14137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.541008][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 345.555677][T14197] xt_connbytes: Forcing CT accounting to be enabled [ 345.576551][T14197] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 345.668338][T14205] syzkaller0: entered promiscuous mode [ 345.685342][T14205] syzkaller0: entered allmulticast mode [ 345.840087][T14208] netlink: 'syz.0.2055': attribute type 1 has an invalid length. [ 346.009249][T14217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.047905][T14219] netlink: 'syz.0.2055': attribute type 10 has an invalid length. [ 346.064373][T14219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2055'. [ 346.137420][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 346.159907][T14208] 8021q: adding VLAN 0 to HW filter on device bond13 [ 346.167890][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'. [ 346.223890][T14216] dummy0: left allmulticast mode [ 346.257635][T14216] bond0: (slave dummy0): Releasing backup interface [ 346.264996][T14216] dummy0: left promiscuous mode [ 346.282072][T14216] bond13: (slave dummy0): making interface the new active one [ 346.297200][T14216] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 346.308316][T14219] dummy0: entered promiscuous mode [ 346.332484][T14219] bond13: (slave dummy0): Releasing active interface [ 346.461135][T14241] netlink: 'syz.2.2064': attribute type 3 has an invalid length. [ 346.676359][T14253] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2066'. [ 347.591988][T14274] netlink: 'syz.2.2073': attribute type 2 has an invalid length. [ 347.677917][T14273] syzkaller0: entered promiscuous mode [ 347.700895][T14273] syzkaller0: entered allmulticast mode [ 347.885800][T14300] sctp: [Deprecated]: syz.2.2077 (pid 14300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.885800][T14300] Use struct sctp_sack_info instead [ 348.029506][T14310] hsr0: entered promiscuous mode [ 348.113643][T14315] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2080'. [ 348.131081][T14315] hsr_slave_0: left promiscuous mode [ 348.140088][T14315] hsr_slave_1: left promiscuous mode [ 348.149563][T14315] hsr0 (unregistering): left promiscuous mode [ 348.695756][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 348.704875][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 348.720758][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2083'. [ 350.831122][T14294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.042478][T14331] netlink: 'syz.2.2087': attribute type 1 has an invalid length. [ 351.289734][T14331] bond7: entered promiscuous mode [ 351.311145][T14331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.363588][T14341] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.381005][T14341] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 351.397720][T14341] bond7: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 351.426340][T14341] bond7: (slave ipip0): making interface the new active one [ 351.440406][T14341] ipip0: entered promiscuous mode [ 351.454169][T14341] bond7: (slave ipip0): Enslaving as an active interface with an up link [ 351.572935][T14355] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.690621][T14360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2092'. [ 351.774721][T14355] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.832941][T14364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2092'. [ 351.951844][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 351.961766][T14372] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 351.969878][T14372] netlink: 'syz.1.2095': attribute type 2 has an invalid length. [ 352.572803][T14389] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 352.621263][T14389] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2098'. [ 352.782744][T14395] FAULT_INJECTION: forcing a failure. [ 352.782744][T14395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.810311][T14395] CPU: 1 UID: 0 PID: 14395 Comm: syz.3.2100 Not tainted syzkaller #0 PREEMPT(full) [ 352.810336][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.810348][T14395] Call Trace: [ 352.810356][T14395] [ 352.810363][T14395] dump_stack_lvl+0xe8/0x150 [ 352.810390][T14395] should_fail_ex+0x412/0x560 [ 352.810420][T14395] _copy_from_user+0x2d/0xb0 [ 352.810449][T14395] ___sys_sendmsg+0x1c6/0x360 [ 352.810470][T14395] ? __lock_acquire+0x6b5/0x2cf0 [ 352.810494][T14395] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.810512][T14395] ? __lock_acquire+0x6b5/0x2cf0 [ 352.810536][T14395] ? kstrtouint+0x6e/0xe0 [ 352.810596][T14395] __sys_sendmmsg+0x27c/0x4e0 [ 352.810623][T14395] ? __pfx___sys_sendmmsg+0x10/0x10 [ 352.810641][T14395] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 352.810684][T14395] ? ksys_write+0x242/0x270 [ 352.810711][T14395] ? __pfx_ksys_write+0x10/0x10 [ 352.810761][T14395] __x64_sys_sendmmsg+0xa0/0xc0 [ 352.810783][T14395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.810803][T14395] do_syscall_64+0x15f/0xf80 [ 352.810822][T14395] ? trace_irq_disable+0x3b/0x140 [ 352.810851][T14395] ? clear_bhb_loop+0x40/0x90 [ 352.810875][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.810895][T14395] RIP: 0033:0x7f03b7f9ce59 [ 352.810912][T14395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.810938][T14395] RSP: 002b:00007f03b8e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 352.810959][T14395] RAX: ffffffffffffffda RBX: 00007f03b8215fa0 RCX: 00007f03b7f9ce59 [ 352.810973][T14395] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 352.810986][T14395] RBP: 00007f03b8e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 352.810998][T14395] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000002 [ 352.811009][T14395] R13: 00007f03b8216038 R14: 00007f03b8215fa0 R15: 00007ffe51003d88 [ 352.811041][T14395] [ 353.049222][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'. [ 353.438163][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 354.691241][T14355] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.791258][T14355] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.947116][T14421] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 354.959553][T14421] netlink: 'syz.2.2107': attribute type 4 has an invalid length. [ 354.974806][T14426] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 354.995187][T14421] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2107'. [ 355.016523][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2107'. [ 355.111880][T14426] 8021q: adding VLAN 0 to HW filter on device bond10 [ 355.130466][ T6481] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.220971][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2109'. [ 355.255996][T14430] bond10: (slave gretap4): making interface the new active one [ 355.291007][T14430] bond10: (slave gretap4): Enslaving as an active interface with an up link [ 355.303343][T14434] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 355.311682][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.352259][T14431] bond10 (unregistering): (slave gretap4): Releasing active interface [ 355.395960][T14431] bond10 (unregistering): Released all slaves [ 355.468801][T12022] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.638728][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.963017][T14453] syzkaller1: entered promiscuous mode [ 355.970093][T14453] syzkaller1: entered allmulticast mode [ 356.069629][T14464] netlink: 'syz.0.2118': attribute type 49 has an invalid length. [ 356.122380][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2118'. [ 356.586552][T14496] netlink: 'syz.0.2124': attribute type 25 has an invalid length. [ 356.594609][T14496] netlink: 'syz.0.2124': attribute type 3 has an invalid length. [ 357.934357][T14499] netlink: 'syz.4.2125': attribute type 4 has an invalid length. [ 358.190394][T14511] __nla_validate_parse: 1 callbacks suppressed [ 358.190413][T14511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2127'. [ 358.493063][T14533] xt_hashlimit: max too large, truncated to 1048576 [ 358.644982][T14535] lo speed is unknown, defaulting to 1000 [ 358.768210][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 358.815969][T14547] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2138'. [ 359.999445][T14576] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2145'. [ 360.222448][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 360.244845][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2149'. [ 360.687866][T14614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2155'. [ 360.888200][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 361.073893][T14629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2160'. [ 361.160467][T14632] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 361.203608][T14632] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 361.234328][T14632] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 361.261009][T14632] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2158'. [ 361.283365][T14632] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 361.292734][T14632] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 378.496042][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.829388][T14656] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 389.884035][T14664] __nla_validate_parse: 4 callbacks suppressed [ 389.884065][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'. [ 389.890431][T14656] bond6: (slave dummy0): making interface the new active one [ 389.908114][T14656] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 389.922091][T14656] bond6: entered promiscuous mode [ 389.927399][T14656] dummy0: entered promiscuous mode [ 389.941293][T14656] bond6: (slave dummy0): Releasing active interface [ 389.948199][T14656] dummy0: left promiscuous mode [ 389.956476][T14656] bond4: (slave vti1): Releasing backup interface [ 389.963032][T14656] vti1: left promiscuous mode [ 390.034547][ T30] audit: type=1804 audit(1779813824.178:2): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2166" name="/newroot/420/cgroup.controllers" dev="tmpfs" ino=2175 res=1 errno=0 [ 390.075206][ T30] audit: type=1800 audit(1779813824.208:3): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2166" name="cgroup.controllers" dev="tmpfs" ino=2175 res=0 errno=0 [ 390.109026][T14664] 8021q: adding VLAN 0 to HW filter on device bond10 [ 390.230687][T14655] bond6: left promiscuous mode [ 390.260439][T14681] smc: removing ib device sqz0 [ 390.297687][T14671] bond10: (slave wireguard0): refused to change device type [ 390.376837][T14681] smbdirect: ib_dev[sqz0] removed [ 390.473649][T14692] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2172'. [ 390.484887][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 390.516372][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2172'. [ 391.228742][T14723] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 391.378520][T14730] SET target dimension over the limit! [ 391.387779][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2180'. [ 391.518359][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 391.567641][T14739] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 391.727565][T14726] bond7: (slave bridge4): making interface the new active one [ 391.768047][T14726] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 391.857995][T14730] bond7: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 392.219647][T14764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 392.638068][T14781] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 392.664232][T14781] netlink: 'syz.3.2191': attribute type 2 has an invalid length. [ 392.708437][T14780] netlink: 'syz.2.2190': attribute type 9 has an invalid length. [ 393.238151][T14808] tipc: Enabled bearer , priority 0 [ 393.453844][T14806] tipc: Disabling bearer [ 394.026207][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2202'. [ 394.130851][T14843] team0: No ports can be present during mode change [ 394.372103][T14850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2204'. [ 394.404296][T14849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2204'. [ 394.572354][T14855] netlink: 'syz.4.2206': attribute type 1 has an invalid length. [ 394.602511][T14857] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 394.610544][T14855] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2206'. [ 394.723106][T14857] bond14: entered promiscuous mode [ 394.728671][T14857] bond14: entered allmulticast mode [ 394.736559][T14857] 8021q: adding VLAN 0 to HW filter on device bond14 [ 394.777041][T14861] erspan1: entered allmulticast mode [ 394.800089][T14861] bond14: (slave erspan1): making interface the new active one [ 394.842725][T14861] erspan1: entered promiscuous mode [ 394.858748][T14861] [ 394.861128][T14861] ============================================ [ 394.867290][T14861] WARNING: possible recursive locking detected [ 394.873468][T14861] syzkaller #0 Not tainted [ 394.877896][T14861] -------------------------------------------- [ 394.884058][T14861] syz.0.2207/14861 is trying to acquire lock: [ 394.890135][T14861] ffff888078fa9158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 394.900019][T14861] [ 394.900019][T14861] but task is already holding lock: [ 394.907395][T14861] ffff888079af5958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 394.917264][T14861] [ 394.917264][T14861] other info that might help us debug this: [ 394.925331][T14861] Possible unsafe locking scenario: [ 394.925331][T14861] [ 394.932800][T14861] CPU0 [ 394.936091][T14861] ---- [ 394.939383][T14861] lock(&qdisc_xmit_lock_key#4); [ 394.944446][T14861] lock(&qdisc_xmit_lock_key#4); [ 394.949505][T14861] [ 394.949505][T14861] *** DEADLOCK *** [ 394.949505][T14861] [ 394.957663][T14861] May be due to missing lock nesting notation [ 394.957663][T14861] [ 394.965999][T14861] 9 locks held by syz.0.2207/14861: [ 394.971212][T14861] #0: ffffffff9032e588 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 394.980766][T14861] #1: ffffffff8fdd2400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 394.989852][T14861] #2: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 394.999810][T14861] #3: ffff888032c99228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 395.012471][T14861] #4: ffff888079af5958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 395.022826][T14861] #5: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 395.031773][T14861] #6: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 395.041603][T14861] #7: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 395.051598][T14861] #8: ffff88801afa8228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 395.064289][T14861] [ 395.064289][T14861] stack backtrace: [ 395.070212][T14861] CPU: 0 UID: 0 PID: 14861 Comm: syz.0.2207 Not tainted syzkaller #0 PREEMPT(full) [ 395.070236][T14861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 395.070252][T14861] Call Trace: [ 395.070263][T14861] [ 395.070270][T14861] dump_stack_lvl+0xe8/0x150 [ 395.070294][T14861] print_deadlock_bug+0x279/0x290 [ 395.070334][T14861] __lock_acquire+0x253f/0x2cf0 [ 395.070377][T14861] ? fib_table_lookup+0x11ba/0x16e0 [ 395.070411][T14861] ? sch_direct_xmit+0x15f/0x4c0 [ 395.070443][T14861] lock_acquire+0x106/0x350 [ 395.070465][T14861] ? sch_direct_xmit+0x15f/0x4c0 [ 395.070499][T14861] ? __inet_dev_addr_type+0x424/0x500 [ 395.070532][T14861] _raw_spin_lock+0x2e/0x40 [ 395.070562][T14861] ? sch_direct_xmit+0x15f/0x4c0 [ 395.070593][T14861] sch_direct_xmit+0x15f/0x4c0 [ 395.070628][T14861] ? __pfx_sch_direct_xmit+0x10/0x10 [ 395.070659][T14861] ? __bfs+0x80/0x290 [ 395.070694][T14861] __dev_queue_xmit+0x180f/0x3950 [ 395.070725][T14861] ? __dev_queue_xmit+0x2b6/0x3950 [ 395.070758][T14861] ? __pfx___dev_queue_xmit+0x10/0x10 [ 395.070784][T14861] ? neigh_resolve_output+0x438/0x750 [ 395.070818][T14861] ? eth_header+0x11b/0x200 [ 395.070842][T14861] ? __asan_memcpy+0x40/0x70 [ 395.070883][T14861] ? ip_finish_output2+0x3c2/0x1070 [ 395.070917][T14861] ip_finish_output2+0xca9/0x1070 [ 395.070950][T14861] ? ip_skb_dst_mtu+0x80b/0xa50 [ 395.070983][T14861] ? ip_finish_output+0x40e/0x530 [ 395.071015][T14861] ip_output+0x29f/0x450 [ 395.071045][T14861] ? ip_output+0x5b/0x450 [ 395.071076][T14861] iptunnel_xmit+0x621/0xd10 [ 395.071105][T14861] ip_tunnel_xmit+0x193a/0x1f20 [ 395.071148][T14861] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 395.071184][T14861] ? __pfx_gre_build_header+0x10/0x10 [ 395.071213][T14861] ? kfree+0x1c5/0x640 [ 395.071237][T14861] ? pskb_expand_head+0x458/0x1390 [ 395.071264][T14861] __gre_xmit+0x19e/0x240 [ 395.071290][T14861] ? __pfx___gre_xmit+0x10/0x10 [ 395.071321][T14861] erspan_xmit+0xa41/0x14d0 [ 395.071356][T14861] ? __pfx_erspan_xmit+0x10/0x10 [ 395.071388][T14861] dev_hard_start_xmit+0x2cd/0x830 [ 395.071420][T14861] sch_direct_xmit+0x251/0x4c0 [ 395.071455][T14861] ? __pfx_sch_direct_xmit+0x10/0x10 [ 395.071487][T14861] ? bond_select_active_slave+0x860/0xd40 [ 395.071522][T14861] __dev_queue_xmit+0x180f/0x3950 [ 395.071552][T14861] ? __dev_queue_xmit+0x2b6/0x3950 [ 395.071585][T14861] ? __pfx___dev_queue_xmit+0x10/0x10 [ 395.071611][T14861] ? rcu_is_watching+0x15/0xb0 [ 395.071636][T14861] ? trace_kmem_cache_alloc+0x29/0xe0 [ 395.071665][T14861] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 395.071712][T14861] ? alb_send_lp_vid+0x14e/0x550 [ 395.071745][T14861] alb_send_lp_vid+0x348/0x550 [ 395.071780][T14861] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 395.071815][T14861] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 395.071850][T14861] alb_send_learning_packets+0x12c/0x300 [ 395.071882][T14861] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 395.071917][T14861] ? alb_swap_mac_addr+0x230/0x340 [ 395.071951][T14861] alb_fasten_mac_swap+0x639/0xf60 [ 395.071982][T14861] ? dev_addr_mod+0x1ba/0x350 [ 395.072007][T14861] bond_alb_handle_active_change+0xc6d/0xf30 [ 395.072043][T14861] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 395.072076][T14861] ? __hw_addr_add_ex+0x43d/0x520 [ 395.072110][T14861] ? __local_bh_enable_ip+0xd0/0x130 [ 395.072135][T14861] bond_change_active_slave+0x106e/0x35f0 [ 395.072164][T14861] ? __pfx_do_sync_core+0x10/0x10 [ 395.072197][T14861] ? lockdep_hardirqs_on+0x7a/0x110 [ 395.072217][T14861] ? smp_call_function_many_cond+0x1051/0x13d0 [ 395.072240][T14861] ? __pfx_bond_change_active_slave+0x10/0x10 [ 395.072269][T14861] ? __pfx_do_sync_core+0x10/0x10 [ 395.072302][T14861] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 395.072324][T14861] ? bond_start_xmit+0x92/0x1900 [ 395.072345][T14861] ? __pfx___text_poke+0x10/0x10 [ 395.072378][T14861] ? static_key_slow_inc_cpuslocked+0xba/0xf0 [ 395.072409][T14861] bond_select_active_slave+0x909/0xd40 [ 395.072442][T14861] ? __pfx_bond_select_active_slave+0x10/0x10 [ 395.072478][T14861] bond_enslave+0x2299/0x3c10 [ 395.072522][T14861] ? __pfx_bond_enslave+0x10/0x10 [ 395.072559][T14861] ? __pfx___dev_notify_flags+0x10/0x10 [ 395.072580][T14861] ? __dev_change_flags+0x5fe/0x7e0 [ 395.072602][T14861] ? mutex_is_locked+0x17/0x50 [ 395.072631][T14861] do_set_master+0x533/0x6d0 [ 395.072658][T14861] rtnl_newlink_create+0x6af/0xb70 [ 395.072697][T14861] ? __pfx___nla_validate_parse+0x10/0x10 [ 395.072731][T14861] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 395.072752][T14861] ? __pfx___mutex_lock+0x10/0x10 [ 395.072775][T14861] ? ns_capable+0x89/0xe0 [ 395.072795][T14861] rtnl_newlink+0x166a/0x1bb0 [ 395.072819][T14861] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.072846][T14861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.072882][T14861] ? kasan_quarantine_put+0xbb/0x1f0 [ 395.072905][T14861] ? lockdep_hardirqs_on+0x7a/0x110 [ 395.072924][T14861] ? nlmon_xmit+0xb0/0x100 [ 395.072948][T14861] ? kmem_cache_free+0x182/0x650 [ 395.072980][T14861] ? __lock_acquire+0x6b5/0x2cf0 [ 395.073000][T14861] ? __dev_queue_xmit+0x2b6/0x3950 [ 395.073022][T14861] ? __local_bh_enable_ip+0xd0/0x130 [ 395.073041][T14861] ? lockdep_hardirqs_on+0x7a/0x110 [ 395.073056][T14861] ? __dev_queue_xmit+0x2b6/0x3950 [ 395.073076][T14861] ? __local_bh_enable_ip+0xd0/0x130 [ 395.073093][T14861] ? __dev_queue_xmit+0x2b6/0x3950 [ 395.073118][T14861] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 395.073152][T14861] ? __pfx_rtnl_newlink+0x10/0x10 [ 395.073179][T14861] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 395.073209][T14861] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 395.073235][T14861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.073262][T14861] ? ref_tracker_free+0x693/0x840 [ 395.073288][T14861] ? __pfx_ref_tracker_free+0x10/0x10 [ 395.073318][T14861] netlink_rcv_skb+0x232/0x4b0 [ 395.073337][T14861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 395.073366][T14861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.073390][T14861] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.073409][T14861] ? netlink_deliver_tap+0x2e/0x1b0 [ 395.073431][T14861] netlink_unicast+0x75c/0x8e0 [ 395.073453][T14861] netlink_sendmsg+0x813/0xb40 [ 395.073478][T14861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.073499][T14861] ? __se_sys_ioctl+0x47/0x170 [ 395.073524][T14861] ? do_syscall_64+0x15f/0xf80 [ 395.073540][T14861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 395.073565][T14861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.073591][T14861] ____sys_sendmsg+0x972/0x9f0 [ 395.073610][T14861] ? __might_fault+0xaf/0x130 [ 395.073636][T14861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.073659][T14861] ? import_iovec+0x73/0xa0 [ 395.073695][T14861] ___sys_sendmsg+0x2a5/0x360 [ 395.073716][T14861] ? __lock_acquire+0x6b5/0x2cf0 [ 395.073737][T14861] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.073759][T14861] ? tomoyo_path_number_perm+0x219/0x630 [ 395.073793][T14861] ? __fget_files+0x2a/0x420 [ 395.073813][T14861] ? __fget_files+0x3a0/0x420 [ 395.073839][T14861] __x64_sys_sendmsg+0x1bd/0x2a0 [ 395.073860][T14861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.073879][T14861] ? rcu_is_watching+0x15/0xb0 [ 395.073906][T14861] ? __pfx_kcov_ioctl+0x10/0x10 [ 395.073936][T14861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.073957][T14861] do_syscall_64+0x15f/0xf80 [ 395.073974][T14861] ? trace_irq_disable+0x3b/0x140 [ 395.074004][T14861] ? clear_bhb_loop+0x40/0x90 [ 395.074025][T14861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.074044][T14861] RIP: 0033:0x7ff1e8b9ce59 [ 395.074061][T14861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.074079][T14861] RSP: 002b:00007ff1e9b07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.074098][T14861] RAX: ffffffffffffffda RBX: 00007ff1e8e16090 RCX: 00007ff1e8b9ce59 [ 395.074113][T14861] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 395.074125][T14861] RBP: 00007ff1e8c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 395.074138][T14861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.074149][T14861] R13: 00007ff1e8e16128 R14: 00007ff1e8e16090 R15: 00007ffc89d5e558 [ 395.074172][T14861] [ 395.609831][T14877] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2207'. [ 395.898269][T14861] bond14: (slave erspan1): Enslaving as an active interface with an up link [ 396.038722][T14861] syz.0.2207 (14861) used greatest stack depth: 17704 bytes left