last executing test programs: 13.484039485s ago: executing program 2 (id=3266): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) close(0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x0, @mcast1}}, 0x0, 0x0, 0x24, 0x0, "2c004a46dc15b929250d4ac91f4f1fb55e5961fe20187d3f548a717f53c4c278903462d20a1536d3e0dbebbed8a4146dfa98c60d4175e09fb5855304905f35f5789457049d1eb4f48635594016249d12"}, 0xd8) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 5.592045721s ago: executing program 1 (id=3312): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 5.364327384s ago: executing program 1 (id=3315): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10) (async) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a01010000000000000000020000070900010073797a300000000008000740000000030c00054000000000000000025c000540000000000000000208000740000000000c000540000000000000000308000740000000022c000000030a01010000000000000000050000000900010073797a30000000000900030073797a310000000014000000060a0104000000000000000005000000140000001100010000000000000000000000000a8b9bb7b8df94756da8a08e89b06a8380172f752eedac783544960734bb8970c3e90d20f8"], 0xc4}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r5 = accept4(r2, 0x0, 0x0, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000125bd7000fbdbdf256ee6ed34131879b863e018de09d1dcea9b04000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x488402, 0x0) socket(0x400000000010, 0x3, 0x4) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window={0x3, 0x0, 0x1c6}], 0x6) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a15001000300000008001b00000800000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000f00)={{r1}, r9, 0x14, @unused=[0x0, 0xfffffffffffffffb, 0x7f, 0xffffffffffffb377], @name="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"}) (async) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.907349595s ago: executing program 0 (id=3320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0xc4, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write$tun(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952f"], 0x1d7) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r11) sendmsg$NLBL_MGMT_C_LISTALL(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r12, 0x5170c560dce29b81, 0x8, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r12, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/net/tun\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x25f81ff88a53f3d}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x80080) sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newae={0x70, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@multicast1, 0x4d5, 0x0, 0x2b}, @in6=@remote, 0x2, 0x34fb}, [@mark={0xc, 0x15, {0x35075a, 0x8}}, @lifetime_val={0x24, 0x9, {0xfc0, 0x1, 0x6, 0xff}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810) 4.531583004s ago: executing program 0 (id=3323): r0 = socket$unix(0x1, 0x5, 0x0) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x50, r1, 0x4fb7000) r2 = socket$inet(0x2, 0xa, 0x400) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x1b5, @mcast1, 0x5}}, 0x7}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={r4, 0x1}, 0x8) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000240)='westwood\x00', 0x9) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, r1}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000300)={r1, r6}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000340)=0x3, 0x2) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000380)=0x2a6, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x4, 0xee, [0x1000, 0x6, 0x5aa, 0x9, 0xfed8, 0x54e6], 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=""/238}, &(0x7f0000000580)=0x78) accept(r3, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000640)=0x80) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044000}, 0x4040010) connect$inet(r2, &(0x7f0000000780)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000007c0)={{r3}, "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"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000017c0)={r4, 0xb5, "d5af1611e1a259336c09789e6fec6271d4196f5cec6976565aec5ab63ec5df31bf02b41718c66299cb67be5a6df043fba0a7e7e35f859ad4becbb959ae5f64b340b15c06041799f70ae969b42b43e57211aa682ec7c854655938186b6637aa9f6bcbb41fdc8ed7e7daea86a28492eb8aca42173772241ee732a2fc814194e73403d8d5dbfc1e7ff7cc62849ca57eab072844168c22f834ace3920522ea003d2927c9c188ac26026ac2be2d5623c163ae20ccfc68fe"}, &(0x7f0000001880)=0xbd) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f00000018c0), &(0x7f0000001900)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x2, 0x5, 0x8, 0x7, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bb7, 0x2, {0x6, 0x0, 0x3, 0xb, 0x0, 0x4, 0x0, @in6=@remote, @in=@loopback}}]}, 0x80}}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a40)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000001a80)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001b00)="a707d7608f278b01d5ad2601c665d2e4aea8a4f9653a2ce1de8518dd01a130c9da0189e4d1cf6a65281079c9075ee56e299f3491f0e7a1ed780d2713d2dfd2b2e041e420eaccb8c3556b37dcff8aac93533654e7f4fdb1ac90b1c9d476bacb8804f37d4bc3fb031b7c82abc3530218076345ea192846fd4236eb1b6dcd21b6f2b6d2f89fdd2ed9bd081d5a6567331abe42b8640d10f1e6ce279ff4f0ebbbfa1a2251ca46839c6c2faa0528c03bbaa505bff0fb983bcf3b2b17ca177954632ebb2a7237b8c61055ed021539ba3cd01146949de9e281de0c500219e027f7316a681b60591b8e3affefb469aa78ddeb5dc5ea", 0xf1}, {&(0x7f0000001c00)="c649322fdca2cf329322c574fefdfcbe8b703ae9e185e764cb65aa114b5e469c3fc0e78db5edc5ed635f303aa30815953c61dbd4c8c2e49d77d560fc8334b0e94884101cc12e149063ff69cfd7ddca777762f84b56a7d5f06738380acb4ca71cca8a3883787547c5b4e7659619f5bae7d37fc8f4c3c723edf35dec6d8586341232f8ffdcf0577fca424bce7b8b00ea69c4306e4259c30e14a17a0449f7d8bcf8dc0756a37e90c98067d2f6d8eb98dc2671bf12b3cb8f9d0a629a5c98fb9e341dbba80ed76a7e84ccfcddae7c22cdb51a54e4908f1f78f8b90a3ed6034f2e54a1719115e75f7ce9b7436e85495ebd5624597c47ea909c83bfbc8a3667d930382882e98d10e75e70f46f3599cebcd1cb59bc6232b7becd9244fda3300e03a9283df2e424db2d0fb842d7e24c6980bb9f18825113c2cdaa5e9fec874214142ce5d17d4011ccf5cd40e0140149705cd1014445c94ba109516803e9cd85c85ca907cadd48d5214652fbe43f8c29df12a2ac3644558b0e309e760e2b86cb133ebeef20220060a679dba4248f2427c76f0e6a06e19d5d27ec6a21862928b9f81bbf92da50651ee64f80d6e1f3732ce58adcf8a6c594cbac0fb66dc90b1365490f4080d024226ba264946414c42e23608b79e9f718bfc38a591641d7ce14e412c10de7de605227c77a3be6c5dac0308dd648cd32d04b4e1e04b9e151ea5e2cc701c2ca6715404b6e89848c6e7bb6a558b9a377bcc4ee183715101eacae143b59bfb86a0728f88e4982d546e6a72c5e5a803b62ee4e47d127f067caf512e928e1076a9e21f68fa115dbaed256d156ef5e746e47740b7c2fc535a0461dcb72c63455a23ec88d77f82743d983fb26af4284c55867923b1732b7a72eb6c749ea9e743e583fecf72be340fbf68bda6e5cc16f1c54532c81fdd529695e781cfaef20aafc20f7b38af2b91f5600fa848592f890d5e637093d48b0748d25703e192b7ef73132f8c331fe184321577b22b070aa7f3fc927544fec162e6a88825772b19ca8e6c08b1cf0189bb4e2d8e084229d907012ac76ab0ecf94808a894f873fdf0928669240aa3927efccafce3a4923e1371860dde83b2627f316fe278fee09d74ea1f6edc13364d3c583b699dc1a895d915d2774d2bfebb987aec27a8f50247e2fad88d5ddd47f632e30a4da1e0e639732869e5d8ef89e3e7932b15f6e8ee107bec98fad96c95e988c1724a694b5536441830621fbfb2bbf2fb7f5d61d809f56bd462eee95597660f260c660708ea996531f30de71c23e0aedb1ea5a957861b070d59b0225d06c92c9caf7a93e8d1d44607c7cfd643d7cd693c370be04e4520b5a5439dcb01452126af7c7890ab0cb420b919add693c18bc0c49e19865a7a87c84e93e2fea4a54b093900a0ead127b99780cb751c66db94d3f881e045f09acdb95ab2fa486c6102db6e400616a42fa6cc494045f39063f04d3fe831d97465d882b4659e1ae0d5e91c958ab623c531d2c38da1ae0e5daf2275d1f99f771aa2f6e6f536a0e523311128002e9a8406a11550b06f65607ad20cd8133ea862b096c905f334969c4a438e9ad03b63ecee9448760776d06695ab876d0a227425242ca8fbd003b702824f4b909b18d3bbcc4adfdb03e8190dce3a14887e3c891568277d2785b89cfff6751e020c95fbdb166ce510ee543e376304d9c58ff6a3dc70a00e478b51fbbc6f1b574fdd79cf4ba2a94958f20ada16fec2c85c911267e50549a69b749e9d9ca6068fbfd073f6d72d30369eba03e915c6c472adafcee822ba7029c43742caf04515f736d95891989e59ba46c6b9267aec40ec1a2430971a0836d7864f5c7fd226a045747f455ff3f48b707086b108135fef975c033e02dbaae05b9d51f9aa5fcd5f28edc40f7797b9347bfde82ffe1b96103a6920a8b38307f491b7d7298360041d5109a310125cf4eeba3a8c01131a4ebcb2c00ab2b452dd7c1932857652e39cd2d7efa863b035ddc9f5bece4750e2f13dd7b67cc2c1c8ce142ddab39135f655c47cf792bbde69fb91aa95816b818c79ea5cb12d128ce4b926d8d1b9e92daadd4c9dab37ca5fff21b6e41677ed61bb6f1b0e52bf3adb974598151dbbd0e42fbe64c1fe59072960cfaeaee89e8275a9c096b56ade761d4e5d383733f87a26362c8fe11f4d1a62d1048eb6219c07290ec8027f336dd548dfedcf0f5f9a548427c01d778b969cd14216bc6790afed3313a3b2710a1298dbba6e8c43bf1469afacb8aae8d05ca428d3f36477dc58c706013b5233216fa445783286fdd6b0e2686a7ca8eb98a936cf67b2aec0eb081d1d13d3f45a80e1d4e996b2dd616e902a1bf3f037c9584ac0e67994a04f96d42374a082cf58b9d937eadae8c4a0fae57f3c74241265d7e51746c869e364ee3a18f1b0d862ac90363b1e8f00c4979dda1807dbd008853cec810f7b79019cd0588a5fb35664b9a7cdbbff741bcaa2c42a3effe3faaaab996b92e697e215631905d4eeb269c2ed302ad22c81983cc634913b727c2ede98b1f0da5123bb4259258836b1994b06557115f0e6d37102c6417387b3881a2f425cad3d10eb892718016a647b72fa886a18adfe71e68bcd57dc2f3d89e91a2372417e097ff8ea952b0dc2fd8f76713b58889f44c6e3541d28bf2f13c74b1732890c79f14ce3c1ecddc48fd75d54ab68c30fd94040c7ae9a35004777ef43c41978d9d641c8de22335df81fa83d7bd38783cc965d9c8159e03da1908e8331ffabbd1cc950dfa40f64c2991ae39ac2945e7b968098aa5ecd0bab3c07bd8905ce296c4fa05898136dbaff239efd32468882c89fef90e3dcf792442246ab6dfc963e54620b8df1cd4e1189711b7b21f121d261285c3d5bb4bc0ff026ba3bcb4476e6ba7ffbf94c282332d257a022b7fc568b8fb5d48dbf0a5a8424031eb5d19ee5e8a19d4b65e0088a65294e3ee54312932872018778c466839e34d3d25e9429e7bc86c31fd76f31852aa5e65e94e74a7fdf8e40c79b57cd2121d91387e933abf6525a95930225db621a3eb4b658128f5d9665f6e1c2d12aa2d14c6829040f2d7212e4599caa826784062ae4fd8a9b82f635238b72a20c376a65e26251cf54f626cc67e060cf219ff5c1cc9678a68fce9422cd1cc10ed9022b0d3b837b834e077b7ff724cd50005d0d8df6a34924d15cfa18ba5e2489ef5ae0df199f5dbaf1228e41eb1350d60a887d37391855cb5be0bbeef82da9f658ea91ef0c7ef047ff461387ba463fa2f5b5a810ee2a3fabfc93a71376f0bb1a885ceccad0bc7fa7fe9804ebb87c46d409381bf7647c8d6e693803af807f493aea0bd33d39438d3ed94dcd4ec1ed947e10a68be6b73aa8c1010decd4fca1a53c68f77e5b6f3711d111162908818f1b18cf031f8a57615a49827eb25bd3609689e596ee386bb24c69d03cbeafe3032402be5a41bad2a6dc9486f9a5dc2b92581e810e24dbd24a127763a5b678869194e29af6cc8573a55fd135c6217f45073537a285bd1e70fbaa3fe1a6f11d3f471e0df29afef8c1bb5ad8d7e9603e8fc0751e27aee7428e3e2b3878a57662f290affd68118e4ec739479b36c4ba021e7160ed576478bae8c996d8fd4b9c690bb18e799a684f548817528b1a83a49f2e4aeeda01b2c1434cf5d7b8a1bacd03632749532de607ebfe7fb9b1fe771acd7ba80d3aa0f0ca5019bb27fb5b0f6658019c0d4b08282d5cae44ceaf2ffb103e672e1af022ccb67c0d6176740587e4a754e8aaf1648c3a50a30f69d9cd7791b8ce661cca232997338d66173be8786763e92ec68692700c07869a978f8c736520a16a7bf87931f8868eb4f560ce6eb63c9f4b79b7501638cac230ef09c1e38544b94e3cecbfcc2895a90b9e838d3c287c14e8095b1304affbd33743cccf3f4d57141109ff28957c3b60eacf6a064a0c54981c7b0775abb512278bc8b6cb6eda99ee6542ac24c28770a128f89c815d8121f28f30928d4d36454151602697817e6985dcc0578bb5758ad8039a908286039bb3fb9aff370f30b7f6961ab915abd3775187a138be1ec5217b4c3aaae47cc8f5d0cc7e17b32e2803786f7673ec16fe5e85ab8266259a1729cb9e9ccdf54382da84a6d100b5cadda4a64d1d6317ac9b6b981003334e41470b1d22a75861c2535a25053a26023f10fbb01ad48063ec17e7d33259b08265ad355b03c960cd49b2270e45e89caef528afc13786067eab43a2ee4487d2aece61a801d401f02feaec16d3d4570bffcf567006f34521023f87fbecab61eef1f14d0bae1f9124097def205a3813c8597a504ee24d8f4663bc2637f6e03b0c159a87975c3a033c6c71d7613b8347dd92f157fb1600fa3e52a2ccd62937c6d3183a6ba730fb8151dd88aeada0a3dab2f27abe474632ec7289f2c4836c3909b29e2e41cef611ce835e8c0ec607f185194a3c5d9c6ab2d7616fae8ed77741b9d57c3bd900cd1f4863cf78700a0004251cce64ee9f412e19b75199d2a1157380d2b3771e2a9a7e05bf2dd4b00e82d1632119562d358ac6d495df8c9fcef2224feb16cc8f3aa6d8062f8fca342973e07d61d8afc24b8a29a2f96bed88295519460b595571360147bb8b8e5352989b8935ec5ee92f14a76bbddf67c1a3ba7cf09e7a2596f2d3e61e2f2d9969a3711ab331f45f0df8c39645af1d976e9e909ad6208cfa41f0ef03e7ae4db519e8c58360a78b125e6549c84b43c51ff1b690af687ff7a9bb96f0f6b494876a7b2ee1ce3292d9e7b8263ede84b840911aefb2ceba9303586ea62f3205ace2cc96575cafd7308f6e4330694abed899f23915fd3b4a9da9ebc1ad0eb5635f58bef0c07166a7d44722a2712a623d35eff53dd205d6c06ba0d233efc692dbbeac4d5535969cb062b7d1f42f04b0b5371b6af14c0196341a114fee87a881b561b9029882709b604a03094ecff79a1d4bf2367e28c9d5064692fbffd99dea26e7a83ceec80cc02629fbd636fa17731eaac33829cefaa89ecc843da5e43c375ec41fa1cb1bc8cfb716a0b93682a2feba9e8319b15176a37463b46a0c3353d76fb67c675985ace67362cf8212f1b22689ee2cf8f8bcc70a1b43465983f6671dda4b73b00c089a64f6746fc7003b9df44bd5a6c6f2770b8d201184cb34b3d45e7fa8c1ce704b39fad272fc7da8bd986cb15c009ee2de4e4cdad35619e5da9ca34dfb450bd99a41808328309b43ccc30fbf91a20b8bd6e9a92d8aec718e59b215e39f136893eb82b9b1836e2b908b36097f5e48af01d891cfa67300d613b315268f4885a769c754031b4d545d9d7ae26b5916d157917ff9b24535c63ee25f9d06e2811b6ab67828cdfa230507ea9f1abbf3de39321f8fed7040f8dd62f451949578ddd897e82841dc1bcfe5da5aeb6ef30be493ac318a0dfb0f922d7d4861398b04ea2e5d5ddad55710e64c642c47bd7d8a691269ef72dac62c8ebc250348f2f9d2157c805b8158503ff7922f78a89dd2dba9b33553b6758b037099f6c9e411ac13796f106a6391bebf247092c4085a2a0d8d40205d10e6001b6f7d3e7e97b1701b0f012a77a851bee455f5a47f2fa2d7f7131b36c27a39b9f07ad1ec2234b37794370c2d3a6d951c3c0762a4a7cd3836de34303e4856aa4d5cc4dbdcc1bfbd3ba6621adef65e88790025d154068d0dd40f193acebd66f29ea0c539160a9c2055bab1c5d21802d6a1868c5878b00cb1da4cc276494ccc5ef939aaf548e7b121f67aa01b9e77a62cade2f8dad191f91259cc9438c9e3f9ce75e63d0fc461f36d1454c4f72c2eb22", 0x1000}, {&(0x7f0000002c00)="2ab6c4d300b56d6f710ac7617bfdb9da3d23c4dca21d46522a60121ec4300e01864e32f2acc11a4954d964f4639e71cc4254813a4dfec96fb5b7e411c763c91a439d0896cd2dc4aa6931061e10716227", 0x50}, {&(0x7f0000002c80)="617dfc9e079e4a9b609f76972eaf1802030be4b6e37f809e74eb26cf23aaf799ae64d7d136ad3173f5cdf302e6041d217b0290f4d4afe0ea445fac53dc0d2a7688c1bb7ef9ff2b08982418cc04932748a6a2c6e87b6f0fdad349b534c563fc73e93205bdf442514590ee775c6d1507ce2cdabdff76cbd51a901bc042c730de6d26212a579603b1a34df76007ca7c685c42dbaa144b34f1d771965c310f3defe84b72f9192523ba281480cd9c34a8aad3f545ec63b361c88ac18646aa3fb419dbbda46fde7e261d724aee5a9f", 0xcc}], 0x4, &(0x7f0000002dc0)=[{0x108, 0x102, 0xfffffff9, "c8409cd8b6944b3c044ff7d3d35ce812245a6f29e802382a7ebd12a978d085f0785cebf117231c2f7d7b66903e0fb374827fc6ee7aac483955a2302e3c41c90c013f82f0004d9233a8050dab8439b3f9ef264946a282238b91926c69026ddb4d7e2b0c8670bb6396c4c88bc5b68624604b9e9be5396afb2b619353fb05fc16f925cfc3d87b11c4bda376d98d178a5fee38fb9420abee6d17b176eea8af78e92c8e7f0a8cd82b196454016f399f7cf4e2de80b9f27b5a40aa8f0d9b99e8360ef1cc2c548749845715961036f82357bff8275e8f247e57b929b2ebadd10f91983e6adaf0c6085396faa19780108349b72b9faf70c74019"}, {0x50, 0x0, 0x2, "82f54e3fb937dfd5ee0d5ce3cdc6bbdbd5f8cd49f2d52571d8cd92847213f8d070882b6b7007380a70ca0d856b64f2dcd4c987a1b5eb24d19c"}], 0x158}, 0x800) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r9, &(0x7f0000002f80)="1a03c6d122f2f9544df25ae60f799c526bbb699dc7ddd022550048244e14353e17996ea98e0788905a6e31bccbd49795c273d683b29be7f8c969319d96659b8c90547fdbdb7e1ca87387f6592c8b7586bd5ba68cba595345e9e7231f1ca446dd2f748327ae542eaa5828b05023e3dba036bb8de368041cfc29880dc6a1805b27bdd0c07ccfef261efe128046d2f7a1752dedc28b976889bee6a72eff179f80109ad8f0f894352e53f91763552a1364786e67e04e34663bd033e03fb78608e198404c72b79bfb138aea39414eba3e5d180de435bd323d481f8afef04dad8693c66ca430d53f654d246d232cd50f2cea3987147da07d739094af", 0xf9) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000003080)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000030c0)=@base={0x3, 0x7, 0x5, 0x5, 0x4010, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003a00)={0x6, 0x19, &(0x7f0000003180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x1, 0x4, 0x9, 0x4, 0xfffffffffffffefe, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}], &(0x7f0000003280)='GPL\x00', 0x2, 0xff, &(0x7f00000032c0)=""/255, 0x41000, 0x92, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003700)={0x1, 0x0, 0x9, 0x7ff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000003940)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000003980)=[{0x4, 0x5, 0x7, 0xa}, {0x4, 0x1, 0xf, 0x1}, {0x4, 0x2, 0x4, 0x3}, {0x5, 0x1, 0x9, 0x9}, {0x2, 0x1, 0x1, 0xb}, {0x2, 0x1, 0x1}], 0x10, 0x6}, 0x94) 4.407534654s ago: executing program 1 (id=3326): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x7, 0x1}, {0x34, 0x29, 0x0, 0xfffff00d}, {0x6, 0x80}]}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3}, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e622002d00200000240002800b000100627269646765000014000280060009000100000005002d0000000000"], 0x44}, 0x1, 0xba01}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000088be00000000"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x6, 0x19, &(0x7f00000004c0)=""/25, 0x40f00, 0x8, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x10, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{0x2, 0x2, 0x10, 0xa}, {0x0, 0x1, 0xc, 0x9}], 0x10, 0x9}, 0x94) 4.311965024s ago: executing program 0 (id=3327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x9, 0x0, [@remote]}}}], 0x28}, 0x810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc53502", 0x39}, {&(0x7f0000001880)="371f6caa2f6c27730337ec033b032851897cee7054e7e1e0702321a402356d2f7728fc212abddf577e94277f3d9ceea00b26d2cd0dc790b14423d5766bfd60897fa6b4a3e5bec0e118bc0934219dc3b4a8dce9c5223696b152635e6ca4761490d5832d84c80176a3b48e27cb64d7498ce458ec00afb5ceb41e55ee19e6ecdf", 0x7f}], 0x4}], 0x1, 0x840) recvmsg(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000300)=""/149, 0x95}], 0x2}, 0x10001) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000040)=0x7, 0x4) 3.048825099s ago: executing program 0 (id=3331): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a310000000009000200"], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.703063214s ago: executing program 0 (id=3333): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x6, 0x8) getsockname$packet(r1, 0x0, 0x0) 1.857664964s ago: executing program 3 (id=3341): socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000540)="0011b40b004f00"/21, 0x15) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fb000005000200000000000000800000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmmsg(r0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r6, 0x311, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'veth0\x00', {}, 0x7}) recvmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d030000000000000000130000000c0009"], 0x20}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x9, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000240)) 1.627976566s ago: executing program 3 (id=3343): socket$inet_sctp(0x2, 0x4, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x2c}, 0xfffffffffffffe7f) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000f4220800000000007b0af8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x26, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x3, r8, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8=r7], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0209fa000400e6f0c0474078712ef2c3e024bd7000fedb5aa120c1cf7f32a23c1694fbabbc533b4e5f77bade49b0c9"], 0x20}}, 0x24000800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 1.383136894s ago: executing program 2 (id=3270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0xef, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1.320643355s ago: executing program 1 (id=3344): r0 = epoll_create1(0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xca0}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000240)=""/35) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000280)={0x100, 0x4, 0x0, 0xb, 0x1, [0x5, 0x800, 0x5a800000, 0x8f6]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x812, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48010) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) getsockopt$inet6_buf(r3, 0x29, 0x45, &(0x7f0000000440)=""/197, &(0x7f0000000540)=0xc5) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000700)="19f001f23add5cdf9f1f493a86942b69774c52e6329de98047a7c73eb4d5d546ae1fe4825d7bd02760aeb6e8ba1cf511aa17245cf31be8555e4e2efd4890bdee56556d76b20e30dbba25e37a87b0708dead33e78685b98bf408d228c149e8b", 0x5f}, {&(0x7f0000000780)="2b07174af1f4bd65993e052e808678d47e6ddc0b81cbd73e441efe79a5fc6b80d50cfd622b84a83ea3ec79918bcebed5729298dfab09bfbda14f7d4fa45424a45cda46a4f36bc93abb698866e80085fdf30a17594d7c0e6d2aa9a3c9d5620956e4dc9c70069dfc27e024fa3738fb3c15bd04ed4ca2ebdbefeb68e55db188bcfb338190f3c2ac4c6ce75e", 0x8a}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f00000008c0)={0x248, 0x3e, 0x10, 0x70bd2b, 0x25dfdbfc, {0xe}, [@generic="1ee1a39b0968f49533cb1b6d11cc", @generic="18caf8f55fbeed7415c20adc0b8390d192fff07798bdfbedc6f420c2d82d860dd65cc5b9889ee4022cc169a62ed278b6ddd7212075fd0641cbee6a6992c3c6f30b0b569e00f3f1bbda5f36114e30c0ea0f4aef4ba2f6021662722e116b9af04d5e7cfb0bff4f1ba649ce9ec34d72c8e760b3f734a92953ea3b7aa57c968efb7ed555df", @typed={0x4, 0x15a}, @nested={0x199, 0x47, 0x0, 0x1, [@typed={0xc, 0xb6, 0x0, 0x0, @u64}, @generic="6a143a3a539f44d58592d50be0a269e173b47912c8d5660dc844c8c9af0017afd4332195f8bd07e663cab50a89af56550223e144d9b704ae3f05a8fe2fb4d2a36e34d4bf06c6c1c7f1120073a0a657a80f79cac061d0ee7ae8c64759d62b8f8ff4494588ab66088b7e435eb24bf7302b4c8f1281fb22796ab0655f692efbd8484b3746770ec897a315673e044c6748fed2984ac409c30abe09f644ae0909a23f3ed972e5d78d69d16f28", @nested={0x4, 0x137}, @nested={0x4, 0x35}, @generic="d52f0a3bda0a418ac3564f33da5c9c25d81b53cd696ae10dc78e4308e3d886a9dc6c294704499c3b993d939dcf65591c088cde1e6514528605c4aca83eb2452b1ac910293faf4721e9950d3639d20fade63724818f5292ad3020b886c7d81e6ea31c0b01340d028418897d98d4b81e8903d56033e0d8233532531f2b652c3829b55375b4dc01cfde54af09db6971e97c0bb40e6adceef05f098bb45a9736c6f3e360e13c9412b3403413497b4863d0bc501de41a37ea679a254e20", @typed={0x11, 0x15b, 0x0, 0x0, @str='/dev/net/tun\x00'}, @nested={0x4, 0x79}, @nested={0x4, 0x140}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40008c1}, 0x200008c5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) recvmsg(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/59, 0x3b}], 0x1, &(0x7f0000000ec0)=""/22, 0x16}, 0x10060) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, r9, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup/syz0\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001140)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x25}, r10}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000001180), &(0x7f00000011c0)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @random="f29e66cea559", {0x1, 0x4}}, 0x0, 0x2, 0x20, @val={0x10, 0x1, 0x4a}, [{0xdd, 0xef, "f3c4614732d83aad863c9a4b1f0e0dc7c7b8ddb70c46b826f7135e3bf3fd81c875a8da8080a0886327f0308d4e170f8d046f48bbf6ed85fe86bd9d84700399ef054d947af105d084ae06422f5b471b99b08a0ee150275f5cdade5a77602bf80c7a97472133231a3a9563e8347423e8f6c5a233374582dfe8ac68c9f20cef65679be6fe29349c42cc0e10419a2e8889c301d2c3b38344dddfdbfe78966faa12dea84dcd2f5bc6ed40ae2505daeed5e5749b82807ba1d7f03d352bf9eb621af4efec865d60a70c639018361e1e3579e11d90904b467a6b6b9b89fff772645c06cef99bd824a5c02b83426728bf1b2390"}, {0xdd, 0x3f, "5cff5aff8284fcd09a49beec942f5e7e2ab49ab0e1a5326a99781f62f61ddaf4d24f561b39cc5572f282654d9f5e315cf30550205dd7d465dd91086a8cbbec"}, {0xdd, 0xb0, "a5aa3ed255640e9cfee9148d9207f6de3dab2df7b6f6b817381f7394c1f0e3045222ede74861f3e2652329fdaf38b0395411fddfd0c0699156a712ea3ddb3ab1a7a3e086497621c5cfba2fc7eeacedeceeccd77a7e6202e9fafb7946dfdd18e0fe479fbc4ae0b21210bde4e4fdc1a6744d2b088bf3bad292cd55ffe0c5859bf934d6af6ea8e379f6004080a65afe4c744d37d7a2bfa6f13bdd7cbcad56dde491688ae6a16695f353d99cd94443fbf1d1"}, {0xdd, 0x11, "d5ac30b467806b5145206b9da0258b6f36"}, {0xdd, 0x5d, "391cceded78b9011655dcf4aae141489b5a154e8f067bac77563d3e43047b4c2b6cb78bb05ba502ccaa5002ae87ff2f80e9e5789167023fb59d3f57ae460214a518fe4eb07fd7d5f86a34ee9ee870e82e234d828dd7f4ca9a68489d787"}]}, 0x277) 1.056203647s ago: executing program 3 (id=3345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000000214010029bd7000fcdbdf250800010000000000080001000100000008004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40100) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.002281087s ago: executing program 3 (id=3346): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{r0, &(0x7f0000000000)='\x00', 0x80000, &(0x7f0000000080)={@align=0x6, {0x5, 0x56ad, 0x2, 0x9}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8}, 0x6, &(0x7f00000007c0)=[{0x1, 0x2, &(0x7f0000000140)='\\[\xd9+,^{\x00', &(0x7f0000000180)="9ed1c2e85c16942b1e61e61c378219f6516962485543906cfd09e6f20cde4ac67ab76ec5de46338b2a653f95275da24a859e3cea5528bd8859fba3308f4af3d1844f58dc5e09087acb2a1152", 0x4c}, {0x3, 0x7f, &(0x7f0000000200)='%\\\x00', &(0x7f0000000240)="55ee73d5b1bc98fd6812ce8978e647c413fad69778b8ecb69c226a0aa66cd5b6ba3ce201e89b759c937dd7e910df5ef2ff2d8cfae996c7ac914f925bc9b650c727b778a23ed357a3207a1e1279cd26051430ebb8b235fae85612bb9b6b526bd2383e2ebc6557f2aa4a19d068e0bb946dbe5220636c7cb190d952a322fd7d1a3cca411f5dcb2d8573521976b74e6ea76da2a8f93b8fd7c1624a26dd6725cf4f946aa5f4f6fb73ceb9fb270285c9406e7842b03799e4", 0xb5, 0x28}, {0x3, 0x4, &(0x7f0000000300)='}\x00', &(0x7f0000000340)="3f9955a0ce1e1fa14537e23cd6164d1e6ea89b94f03eab1c482ece606819a5c367c8f386ec195260a5183170f716ecb5176fe11851885e349608f4ce2d558adda425ac6a956c60faaaca6011f5603a06c3289b108103499c56f1e490313efe7ed5ca4f5f42a2fdc63b6498f20295e405e12cd224948bcb6535838aa1ff0b2a36e09821b9589e8dee2b2eeec11b2b3ae1f1a3df5dc6a2e766ff15b3d93e5f729016044bfae0bc4153848e07ac029d03bbce0799141a8fa27601f10bc5e2dbb18a032ca64796d1b58f40ee355051883e58e202ba4197219ca6839f81f544aed52d4bfe86c6d4d55f9117fa", 0xea, 0xa}, {0x3, 0x5cd7, &(0x7f0000000440)='!#-+\x00', &(0x7f0000000480)="140f68e6009049c42f39ef852adaa3239b6c56f68194b84d5a7c211479c70b5e67a8fa11bf62930c9bbd69ce8bebffbcc9034530689dfc4a88f88e1d243f41104e3c6eda413d6d904807f9a1f561b13c891686d8680ae312c73f16068a2cb017230e70548740f7ee7effe89c311f226a6c16661176b3d51502d25aaa9096fae80df20c6ceb6a947b417379b279e88e5d942a6364edfaab3029fda464ce46a56a22fe3fb842d3ec9a5454c8d6834a6811efc8080d143b658273f70a17fda298aadc3711d60a532d82dc9292a3f13110eea6c872d38fdebcf658e63c0e5d299d8adc05ed12", 0xe4, 0x8}, {0x1, 0x3000, &(0x7f0000000580)='[.+&-%,}*--[/}\x9f\x00', &(0x7f00000005c0)="9a3042db6185c89744c0614d13ef3e86f6db57be6f590a1f5d0f3b276d3fb34969f7a12ab2147eec2c966b3c3aa9561253afd0ec27e17a049c2e2fb8496020cfc7deaef81fdcb40e4bba166522b49681cc22249406c78b826417e1c7236b140f1bc6fbf5bb1299438563e3f1fc1ca992f9173dc911bc8b8c24cf8ffc56f08f8f360a2a768963d171cf5781ca5a42de17d134edea8fdbe8f5ff1af6f7cf2f67a064659bea75c3457f11dc4dc5b048b29f13f396de9ed2ed52412a56797f91", 0xbe, 0x31}, {0x3, 0x5b6, &(0x7f0000000680)='!\x00', &(0x7f00000006c0)="3dbbc93fd294698c13eccdcf71aa1200fe9549a6f8b055c98e75b7d81c7ca039c2eef310fb3790775a808e404028f5421888ddd793398f5359fe75509b35be41d84e8d512712aa94fec6bce1f9f893fc957d6ccc846e864c4235fac7cb051570f325b14c01ad7a4be9f327c02a3b1cb746cbd6c7b5c1313f35f1af7f06835586aa484a641fb69d07aae41f34fc23e780f33d252f69acf19af2b8322ac3f814a3aba8f7063a0356ce4d11b5a3397af57f3fab090a51305d16b9d11e09b145550c662c6daba4456972be102c8070ac52721e48382f44c3f4138ca510c62c2f827da58f44742ac2a5bd568bbc1cc9e2db3e409639ccc481fa40a8", 0xf9, 0x2a}]}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9) socket(0x400000000010, 0x3, 0x0) (async) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{r0, &(0x7f0000000000)='\x00', 0x80000, &(0x7f0000000080)={@align=0x6, {0x5, 0x56ad, 0x2, 0x9}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8}, 0x6, &(0x7f00000007c0)=[{0x1, 0x2, &(0x7f0000000140)='\\[\xd9+,^{\x00', &(0x7f0000000180)="9ed1c2e85c16942b1e61e61c378219f6516962485543906cfd09e6f20cde4ac67ab76ec5de46338b2a653f95275da24a859e3cea5528bd8859fba3308f4af3d1844f58dc5e09087acb2a1152", 0x4c}, {0x3, 0x7f, &(0x7f0000000200)='%\\\x00', &(0x7f0000000240)="55ee73d5b1bc98fd6812ce8978e647c413fad69778b8ecb69c226a0aa66cd5b6ba3ce201e89b759c937dd7e910df5ef2ff2d8cfae996c7ac914f925bc9b650c727b778a23ed357a3207a1e1279cd26051430ebb8b235fae85612bb9b6b526bd2383e2ebc6557f2aa4a19d068e0bb946dbe5220636c7cb190d952a322fd7d1a3cca411f5dcb2d8573521976b74e6ea76da2a8f93b8fd7c1624a26dd6725cf4f946aa5f4f6fb73ceb9fb270285c9406e7842b03799e4", 0xb5, 0x28}, {0x3, 0x4, &(0x7f0000000300)='}\x00', &(0x7f0000000340)="3f9955a0ce1e1fa14537e23cd6164d1e6ea89b94f03eab1c482ece606819a5c367c8f386ec195260a5183170f716ecb5176fe11851885e349608f4ce2d558adda425ac6a956c60faaaca6011f5603a06c3289b108103499c56f1e490313efe7ed5ca4f5f42a2fdc63b6498f20295e405e12cd224948bcb6535838aa1ff0b2a36e09821b9589e8dee2b2eeec11b2b3ae1f1a3df5dc6a2e766ff15b3d93e5f729016044bfae0bc4153848e07ac029d03bbce0799141a8fa27601f10bc5e2dbb18a032ca64796d1b58f40ee355051883e58e202ba4197219ca6839f81f544aed52d4bfe86c6d4d55f9117fa", 0xea, 0xa}, {0x3, 0x5cd7, &(0x7f0000000440)='!#-+\x00', &(0x7f0000000480)="140f68e6009049c42f39ef852adaa3239b6c56f68194b84d5a7c211479c70b5e67a8fa11bf62930c9bbd69ce8bebffbcc9034530689dfc4a88f88e1d243f41104e3c6eda413d6d904807f9a1f561b13c891686d8680ae312c73f16068a2cb017230e70548740f7ee7effe89c311f226a6c16661176b3d51502d25aaa9096fae80df20c6ceb6a947b417379b279e88e5d942a6364edfaab3029fda464ce46a56a22fe3fb842d3ec9a5454c8d6834a6811efc8080d143b658273f70a17fda298aadc3711d60a532d82dc9292a3f13110eea6c872d38fdebcf658e63c0e5d299d8adc05ed12", 0xe4, 0x8}, {0x1, 0x3000, &(0x7f0000000580)='[.+&-%,}*--[/}\x9f\x00', &(0x7f00000005c0)="9a3042db6185c89744c0614d13ef3e86f6db57be6f590a1f5d0f3b276d3fb34969f7a12ab2147eec2c966b3c3aa9561253afd0ec27e17a049c2e2fb8496020cfc7deaef81fdcb40e4bba166522b49681cc22249406c78b826417e1c7236b140f1bc6fbf5bb1299438563e3f1fc1ca992f9173dc911bc8b8c24cf8ffc56f08f8f360a2a768963d171cf5781ca5a42de17d134edea8fdbe8f5ff1af6f7cf2f67a064659bea75c3457f11dc4dc5b048b29f13f396de9ed2ed52412a56797f91", 0xbe, 0x31}, {0x3, 0x5b6, &(0x7f0000000680)='!\x00', &(0x7f00000006c0)="3dbbc93fd294698c13eccdcf71aa1200fe9549a6f8b055c98e75b7d81c7ca039c2eef310fb3790775a808e404028f5421888ddd793398f5359fe75509b35be41d84e8d512712aa94fec6bce1f9f893fc957d6ccc846e864c4235fac7cb051570f325b14c01ad7a4be9f327c02a3b1cb746cbd6c7b5c1313f35f1af7f06835586aa484a641fb69d07aae41f34fc23e780f33d252f69acf19af2b8322ac3f814a3aba8f7063a0356ce4d11b5a3397af57f3fab090a51305d16b9d11e09b145550c662c6daba4456972be102c8070ac52721e48382f44c3f4138ca510c62c2f827da58f44742ac2a5bd568bbc1cc9e2db3e409639ccc481fa40a8", 0xf9, 0x2a}]}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9) (async) 897.407989ms ago: executing program 3 (id=3347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000ffff28bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a05002308000024801280090001007866726d00000000a807140002800800020001000000080001000200"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x8044) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x7, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000540)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0xe) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r8, 0xfffffffffffffe36, &(0x7f0000000100)}, 0xd) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000580)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="3bd26c6a9fec", {0x5, 0x2}, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xa5}, @val={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x9, 0x1c}}, @val={0x72, 0x6}, [{0xdd, 0x3c, "dc4ab2972c05f72af09ecd2f75909b41d4974fba5c88ce271911a3ca9c53b09f1ad7b3b7d5c50853c0a45a6f497d5872def960e742893cd93402adb5"}, {0xdd, 0xb5, "f3e1239157c25536566c9d53ea5d8735e4b30e06e64dc955d426a19056f837d8eb6ce90927c76e677d0ef9e629b2f3e18fca032db504db7122007df359eb013a3b2874c27393187a6cb1d72c5776ca875e27735c60d949b7deab3ca147e99f3a3f9137bbef3d4ac1e4f81773b31497bb1e004d45686b60b07a056d8061a7892d3c157f62a9dff73ff6eed6e63a0b08a1799672b55044f76a5858b6a3729d36d2a58f62990959f886e1b358434761efa812d5b53cb4"}, {0xdd, 0x3c, "701ca0a2c9f13cb469439c0f0aecb6c57c4573545216fcf377948d36be2880ea9049880bdc731d8857da84742b7b2a9829a9028e81406c954c774fb6"}, {0xdd, 0xde, "13a959c3dfc1c5abd77dd27749cadd94805795c2fa094415cd969acae749551122519b14ee8514676343f4bdf6ee49bb8df8b5097e6ae9747a7d8c44df5c57c544c7018836c780d7cae64714b916913f027d9edfeb94df63431b875bf35bdaf5841bdff2b65f77bdd0e9fc178ea31e5464a4dc215aef063179596c33df56af3edb6aec3d82abf24648137b3afef4c601dbe178434ef4a314616addb73f8728f722c8fa113041f1bb585cb803162f4fd01ed86e95cf4eda08a1d7b017997c0355774df17230b4b38d1138851087a91f6ff9930ff602584f5e688ababda8db"}]}, 0x25e) 882.238839ms ago: executing program 4 (id=3348): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040)=0x5, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x4, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, 0x0}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r1, r0, r0, r1, r1, r1, r0], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) r9 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0xb}}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x4, 0x1, 0x9, 0x6, 0x7, 0x30, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xd5a, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x9, &(0x7f0000000b40)=[r0, r0, r1, r1, r1], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x2000003, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x10002, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000007b1c2db9f0f744dc00"/28], 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r11, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r6, r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000e00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x4}, @generic={0x4, 0x2, 0x3, 0xc1, 0x10000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x4, 0x1, 0xa, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x29}], &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509000004000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 776.466229ms ago: executing program 2 (id=3349): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r7, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00408f35f3204493d29005dbe642000000000200000000001567ce47e74627d63d4246411107af3e0cfe5731a9102935efe70b566d4d62e27470e484b1d0c53fe999f3cd1195152f4efffe2e231c78a407378f07c4396c36263cf58025e96f5d536c10672b7df3902706b14dd707f13732f4ba8870c819000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 772.44957ms ago: executing program 0 (id=3350): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x40106183, &(0x7f0000001940)={{r0, 0x0, 0x101040, 0x0, 0x4, &(0x7f0000000080)={@_ha_fsid}, 0x0}, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000001980)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@generic={{0x7, 0x4, 0x1, 0x31, 0xfc0, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x5, "7ee226"}]}}, "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"}}}, 0xfce) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0b1600000000000000004a0000000800b800000000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004) 750.587749ms ago: executing program 4 (id=3351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) close(0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = socket(0x2, 0x3, 0x100000001) setsockopt(r8, 0xff, 0xffffffc0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) 500.061365ms ago: executing program 2 (id=3352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000061128000000000009500000000000000e27b60ce3113967c2a76918c9e8973e98b10f88ab96a0b6d8ee1bc65f195b480b8f468f941095625550055dd94a54a9b2dfc9b7bfabc24e150f214096437b3789aafaf9d1f8f232379"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 497.814886ms ago: executing program 4 (id=3353): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7c}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xda6}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f00000000c0)="510003000000", 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7c}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xda6}, 0x50) (async) 426.92637ms ago: executing program 1 (id=3354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000003240)=ANY=[@ANYBLOB="080008000200f6ffb5746c920cd46395fc7cba00680000030690780a010100e00000014e204e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5110000790780008"], 0x36) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$l2tp6(0xa, 0x2, 0x73) r11 = accept4$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800) ppoll(&(0x7f0000000180)=[{r9, 0x8400}, {r10, 0x80}, {r4, 0x8000}, {r11, 0x1050}, {r6, 0x260}, {r7, 0x1}, {r3, 0x100}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0xfffffffffffffffb]}, 0x8) write$cgroup_int(r5, &(0x7f0000000480)=0xfffffffffffffff7, 0x12) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000024000000000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x2f, 0xe, 0x0, &(0x7f0000000000)="d686a98a12501d53eef9016937ed", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000020000800000000000000020850000002800000018010000646c6c2500000010000000207b1af8ff0000b57f722b23c35f84871a009893a1000000000000070100b458f29ccb165fbce9347d00f8ffffffb702000008000000b70300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8680d85ff978276a16114", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 386.635025ms ago: executing program 2 (id=3355): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x11}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a70700", 0x7}], 0x1, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b3b20000000000000300000085100000010000009516000200000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8e, &(0x7f0000001300)=""/142, 0x0, 0xa}, 0x94) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x1e, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100001080000000000000000000000009bebcd7a68e269b613d20369a7ddd661334d8666cf117349914ebb71b1042c4fd55facee17b2ae76e3ce4da870cebba1e13b83fee8bd96b6df21f7b9f89c8b8816852937f4b70ef0a21da79f031a64acb6ba537e2206e127bdd0af1008a50626f08081f8cd48d510150dab0fe9f3691ce9345a61894fddaf538a5699b19b8ef19e4ba8", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 307.967639ms ago: executing program 4 (id=3356): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0x4000003, 0x4) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x804) 210.452355ms ago: executing program 3 (id=3357): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) 204.672633ms ago: executing program 4 (id=3358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) (async) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x12, 0x0, &(0x7f0000001600)) (async, rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x4}, 0x20) (rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (rerun: 64) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000380)=""/129, &(0x7f0000000480)=0x81) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x1}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x81133573713dfe30}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000000)=0xe00, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r8, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x2000c804) (async, rerun: 32) sendmmsg$inet_sctp(r2, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500"], 0x48}], 0x1, 0x40) (rerun: 32) 19.412998ms ago: executing program 1 (id=3359): syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8947e4e408004500d5d59595f0edca46907864010100ac1414aa05039078ac1e0001400100070067006b03320007ac1414bb64010100442463317f00000100010001ac1e000100000008ac1414aa00000004a0000001000001008345aa4cdc0000000965e87db03b64e4c0efa6c8aad8675ea4829892c2434ec75f43783255c52d9581dacfa729ad3a73350d4a2442f128a4ec4d40a977efd8b512029522d12a82353ae935"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)="03", 0x1) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @local, @private}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @local, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r3, 0x20, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x40, r7, 0x637, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0xb) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000004) socket$nl_rdma(0x10, 0x3, 0x14) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xda, &(0x7f0000003e40)=""/218, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)=ANY=[@ANYBLOB="18000000041401002cbd9b00fbdbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)=ANY=[@ANYBLOB="18000000041401002cbd9b00fbdbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) (async) r11 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) (async) sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$tipc(r11, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004050}, 0x60040804) sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r10, @ANYRES16=r4, @ANYRES64=r10, @ANYBLOB='t', @ANYRES16=r10], 0x20}, 0x1, 0x0, 0x0, 0x80c1}, 0x20000080) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140c, 0x20, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c045) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) 17.698561ms ago: executing program 2 (id=3360): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = accept(r2, 0x0, &(0x7f0000000100)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="002408346d442dc169c324012cbd7000fddbdf250500000006001b004e2100000c000f000800004000000002000000000000006959027b8e61a9507e3aefeb920270c1d54d46e7245702dcf12d9f08bafab5454e52cbf475ab61d2df34333b17452681b758cefa25895ea17ceb252d962c8507d79906f67c054df93b813f63cf97114bbd638f92c21a40af1b974f9d9f2fe9bee9d85897905a4f83b9fea8fad37170f9537b87662c743e1fefcd43785fa45d653507ac30eed54643e7546b3398ab886300aada6c65254a983c3353058ff278675a77bd8a7525759646f2b1282f21420927ee45a0bb65c0e5f95e30cd905b65e65d39"], 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001000ffff2cbd700e00dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="42000000212000004c0012800c0001006d6163766c616e003c000280080003000300000008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r3, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0xa4d1, 0x7fffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000000240)=[0x5, 0x10000]) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 0s ago: executing program 4 (id=3361): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000e2b20022bbd70010001000000080001000100000008000100010000000800010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40055}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000180000000000000000000000711203000000000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000008201", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0xc00000, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x9, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0xdd, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): e: [ 343.658351][T15874] [ 343.658359][T15874] dump_stack_lvl+0xe8/0x150 [ 343.658386][T15874] should_fail_ex+0x412/0x560 [ 343.658444][T15874] should_failslab+0xa8/0x100 [ 343.658473][T15874] __kmalloc_noprof+0xe8/0x760 [ 343.658497][T15874] ? sock_kmalloc+0xd6/0x160 [ 343.658521][T15874] ? af_alg_sendmsg+0x489/0x2650 [ 343.658549][T15874] sock_kmalloc+0xd6/0x160 [ 343.658569][T15874] af_alg_sendmsg+0x1177/0x2650 [ 343.658613][T15874] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 343.658635][T15874] ? __pfx_aa_sk_perm+0x10/0x10 [ 343.658655][T15874] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 343.658689][T15874] ? aa_sock_msg_perm+0xf1/0x1b0 [ 343.658714][T15874] ? skcipher_sendmsg+0x26/0xf0 [ 343.658735][T15874] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 343.658760][T15874] __sys_sendto+0x672/0x710 [ 343.658787][T15874] ? __pfx___sys_sendto+0x10/0x10 [ 343.658837][T15874] ? exc_page_fault+0x6a/0xc0 [ 343.658867][T15874] ? do_user_addr_fault+0xc6f/0x1340 [ 343.658892][T15874] __x64_sys_sendto+0xde/0x100 [ 343.658916][T15874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.658937][T15874] do_syscall_64+0x15f/0xf80 [ 343.658953][T15874] ? trace_irq_disable+0x3b/0x140 [ 343.658978][T15874] ? clear_bhb_loop+0x40/0x90 [ 343.659000][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.659018][T15874] RIP: 0033:0x7f70f515d68e [ 343.659036][T15874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 343.659049][T15874] RSP: 002b:00007f70f60bde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.659066][T15874] RAX: ffffffffffffffda RBX: 00007f70f60bf6c0 RCX: 00007f70f515d68e [ 343.659079][T15874] RDX: 0000000000000020 RSI: 00007f70f60be000 RDI: 0000000000000004 [ 343.659096][T15874] RBP: 0000000000000000 R08: 00007f70f60bdf04 R09: 000000000000000c [ 343.659107][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 343.659117][T15874] R13: 00007f70f60bdf58 R14: 00007f70f60be000 R15: 0000000000000000 [ 343.659146][T15874] [ 344.204753][T15869] nbd: nbd64 already in use [ 344.745720][T15927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.843444][ T5635] udevd[5635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 345.059000][T15936] netlink: 'syz.1.2490': attribute type 3 has an invalid length. [ 345.059750][T15934] netlink: 'syz.1.2490': attribute type 3 has an invalid length. [ 345.085951][T15937] __nla_validate_parse: 4 callbacks suppressed [ 345.085972][T15937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2491'. [ 345.121504][T15937] ip6gre3: entered promiscuous mode [ 345.127233][T15937] ip6gre3: entered allmulticast mode [ 345.149277][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 345.303681][T15946] wg1 speed is unknown, defaulting to 1000 [ 346.140778][T15966] dummy0: left allmulticast mode [ 346.152001][T15966] dummy0: left promiscuous mode [ 346.165733][T15966] bridge3: port 2(dummy0) entered disabled state [ 346.192623][T15966] batman_adv: batadv0: Adding interface: dummy0 [ 346.206226][T15966] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.234917][T15966] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 346.881805][T15994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.886881][T15990] bond12: entered promiscuous mode [ 346.891073][T15994] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 346.938338][T15990] 8021q: adding VLAN 0 to HW filter on device bond12 [ 346.963014][T15994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.115710][T15999] wg1 speed is unknown, defaulting to 1000 [ 349.424582][T16006] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2508'. [ 349.530402][T16008] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2508'. [ 349.585358][T16011] FAULT_INJECTION: forcing a failure. [ 349.585358][T16011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.600859][T16011] CPU: 1 UID: 0 PID: 16011 Comm: syz.2.2509 Not tainted syzkaller #0 PREEMPT(full) [ 349.600885][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.600895][T16011] Call Trace: [ 349.600903][T16011] [ 349.600910][T16011] dump_stack_lvl+0xe8/0x150 [ 349.600946][T16011] should_fail_ex+0x412/0x560 [ 349.600975][T16011] _copy_from_iter+0x1d3/0x1670 [ 349.600998][T16011] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.601029][T16011] ? __pfx_policy_nodemask+0x10/0x10 [ 349.601055][T16011] ? trace_kmalloc+0x2a/0xf0 [ 349.601078][T16011] ? __pfx__copy_from_iter+0x10/0x10 [ 349.601105][T16011] ? alloc_pages_mpol+0x3c0/0x490 [ 349.601139][T16011] af_alg_sendmsg+0x1552/0x2650 [ 349.601182][T16011] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 349.601204][T16011] ? __pfx_aa_sk_perm+0x10/0x10 [ 349.601224][T16011] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 349.601259][T16011] ? aa_sock_msg_perm+0xf1/0x1b0 [ 349.601283][T16011] ? skcipher_sendmsg+0x26/0xf0 [ 349.601306][T16011] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 349.601330][T16011] __sys_sendto+0x672/0x710 [ 349.601358][T16011] ? __pfx___sys_sendto+0x10/0x10 [ 349.601407][T16011] ? exc_page_fault+0x6a/0xc0 [ 349.601443][T16011] __x64_sys_sendto+0xde/0x100 [ 349.601468][T16011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.601487][T16011] do_syscall_64+0x15f/0xf80 [ 349.601503][T16011] ? trace_irq_disable+0x3b/0x140 [ 349.601528][T16011] ? clear_bhb_loop+0x40/0x90 [ 349.601551][T16011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.601569][T16011] RIP: 0033:0x7f39a515d68e [ 349.601585][T16011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.601601][T16011] RSP: 002b:00007f39a6128e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 349.601620][T16011] RAX: ffffffffffffffda RBX: 00007f39a612a6c0 RCX: 00007f39a515d68e [ 349.601633][T16011] RDX: 0000000000000020 RSI: 00007f39a6129000 RDI: 0000000000000004 [ 349.601644][T16011] RBP: 0000000000000000 R08: 00007f39a6128f04 R09: 000000000000000c [ 349.601655][T16011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 349.601666][T16011] R13: 00007f39a6128f58 R14: 00007f39a6129000 R15: 0000000000000000 [ 349.601695][T16011] [ 350.118477][T16017] 8021q: VLANs not supported on gre0 [ 350.268391][T16023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.300423][T16025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2513'. [ 350.336950][T16024] vti0: entered promiscuous mode [ 350.346431][T16025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2513'. [ 350.375436][T16024] vti0: entered allmulticast mode [ 350.487309][T16032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2516'. [ 350.653551][T16031] bond11: option mode: invalid value (254) [ 350.664162][T16031] bond11 (unregistering): Released all slaves [ 350.681216][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 350.730326][T16045] bond15: entered allmulticast mode [ 350.738643][T16045] 8021q: adding VLAN 0 to HW filter on device bond15 [ 350.795404][T16031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2515'. [ 350.813905][T16049] wg1 speed is unknown, defaulting to 1000 [ 350.938550][T16052] FAULT_INJECTION: forcing a failure. [ 350.938550][T16052] name failslab, interval 1, probability 0, space 0, times 0 [ 350.953762][T16052] CPU: 0 UID: 0 PID: 16052 Comm: syz.1.2520 Not tainted syzkaller #0 PREEMPT(full) [ 350.953787][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.953797][T16052] Call Trace: [ 350.953805][T16052] [ 350.953812][T16052] dump_stack_lvl+0xe8/0x150 [ 350.953839][T16052] should_fail_ex+0x412/0x560 [ 350.953874][T16052] should_failslab+0xa8/0x100 [ 350.953903][T16052] __kmalloc_noprof+0xe8/0x760 [ 350.953927][T16052] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 350.953951][T16052] ? sock_kmalloc+0xd6/0x160 [ 350.953974][T16052] sock_kmalloc+0xd6/0x160 [ 350.953995][T16052] af_alg_alloc_areq+0x99/0x200 [ 350.954020][T16052] skcipher_recvmsg+0x321/0x1140 [ 350.954063][T16052] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 350.954087][T16052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 350.954112][T16052] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 350.954134][T16052] ? security_socket_recvmsg+0x7e/0x2c0 [ 350.954160][T16052] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 350.954185][T16052] sock_recvmsg+0x172/0x1b0 [ 350.954210][T16052] __sys_recvfrom+0x240/0x3c0 [ 350.954240][T16052] ? __pfx___sys_recvfrom+0x10/0x10 [ 350.954289][T16052] ? exc_page_fault+0x6a/0xc0 [ 350.954320][T16052] ? do_user_addr_fault+0xc6f/0x1340 [ 350.954345][T16052] __x64_sys_recvfrom+0xde/0x100 [ 350.954369][T16052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.954389][T16052] do_syscall_64+0x15f/0xf80 [ 350.954405][T16052] ? trace_irq_disable+0x3b/0x140 [ 350.954430][T16052] ? clear_bhb_loop+0x40/0x90 [ 350.954451][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.954468][T16052] RIP: 0033:0x7f7e7395d68e [ 350.954485][T16052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.954500][T16052] RSP: 002b:00007f7e748e4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 350.954518][T16052] RAX: ffffffffffffffda RBX: 00007f7e748e66c0 RCX: 00007f7e7395d68e [ 350.954531][T16052] RDX: 0000000000001000 RSI: 00007f7e748e5000 RDI: 0000000000000004 [ 350.954542][T16052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.954552][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 350.954563][T16052] R13: 00007f7e748e4f58 R14: 00007f7e748e5000 R15: 0000000000000000 [ 350.954593][T16052] [ 351.813886][T16079] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2525'. [ 351.915326][T16081] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2527'. [ 352.344830][T16100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2533'. [ 353.190605][T16111] netlink: 'syz.0.2536': attribute type 13 has an invalid length. [ 353.209034][T16112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2537'. [ 353.221273][T16111] netlink: 'syz.0.2536': attribute type 17 has an invalid length. [ 353.241238][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 353.385358][T16120] Cannot find add_set index 4 as target [ 353.407342][T16111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.421956][T16111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.575235][T16111] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 353.593322][T16114] openvswitch: : Dropping previously announced user features [ 353.601339][T10668] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.648160][T10668] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.675537][T10668] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.692544][T16117] openvswitch: : Dropping previously announced user features [ 353.693051][T10668] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.838967][T16138] raw_sendmsg: syz.4.2546 forgot to set AF_INET. Fix it! [ 354.359970][T16170] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 354.412693][T16173] netlink: 'syz.3.2555': attribute type 30 has an invalid length. [ 354.793711][T16191] bond0: left allmulticast mode [ 354.795137][T16193] netlink: del zone limit has 8 unknown bytes [ 354.812159][T16191] bond_slave_0: left allmulticast mode [ 354.826171][T16191] bond_slave_1: left allmulticast mode [ 354.838179][T16191] bridge0: port 3(bond0) entered disabled state [ 354.889044][T16191] bridge_slave_0: left allmulticast mode [ 354.916746][T16191] bridge_slave_0: left promiscuous mode [ 354.934428][T16191] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.001280][T16191] bridge_slave_1: left allmulticast mode [ 355.008642][T16191] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.079091][T16191] bond0: (slave bond_slave_0): Releasing backup interface [ 355.093673][T16191] bond_slave_0: left promiscuous mode [ 355.114816][T16191] bond0: (slave bond_slave_1): Releasing backup interface [ 355.142282][T16209] netlink: 'syz.4.2565': attribute type 4 has an invalid length. [ 355.143705][T16191] bond_slave_1: left promiscuous mode [ 355.191368][T16191] `: Port device team_slave_0 removed [ 355.217288][T16205] netlink: 'syz.4.2565': attribute type 4 has an invalid length. [ 355.249446][T16191] `: Port device team_slave_1 removed [ 355.271375][T16191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.278981][T16191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.300608][T16191] batman_adv: batadv0: Interface deactivated: vlan4 [ 355.327552][T16191] batman_adv: batadv0: Removing interface: vlan4 [ 355.337908][T16191] bond4: (slave geneve2): Releasing active interface [ 355.833407][T16235] __nla_validate_parse: 6 callbacks suppressed [ 355.833425][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'. [ 355.911669][T16239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2573'. [ 356.023208][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2576'. [ 356.058894][T16250] tipc: Enabled bearer , priority 0 [ 356.066523][T16249] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2576'. [ 356.114473][T16255] netlink: 'syz.2.2578': attribute type 1 has an invalid length. [ 356.287366][T16255] 8021q: adding VLAN 0 to HW filter on device bond12 [ 356.304318][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2580'. [ 356.326770][T16257] 8021q: adding VLAN 0 to HW filter on device bond12 [ 356.345896][T16257] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 356.377230][T16257] bond12: (slave vcan1): Error -95 calling set_mac_address [ 356.714865][T16280] wg1 speed is unknown, defaulting to 1000 [ 357.076580][ T7810] tipc: Node number set to 2006846734 [ 357.154313][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2589'. [ 357.487930][T16311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.652482][T16317] xt_bpf: check failed: parse error [ 357.664564][T16318] xt_bpf: check failed: parse error [ 357.881257][T16284] wg1 speed is unknown, defaulting to 1000 [ 357.980568][T16328] netlink: 'syz.0.2596': attribute type 1 has an invalid length. [ 358.398294][T16312] bond0: (slave netdevsim0): Releasing backup interface [ 358.527034][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2601'. [ 359.116683][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 359.353345][T16354] netlink: 'syz.0.2602': attribute type 11 has an invalid length. [ 359.391084][T16353] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2603'. [ 359.403721][T16353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2603'. [ 359.821515][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'. [ 360.052439][T16376] netlink: 'syz.0.2604': attribute type 39 has an invalid length. [ 360.937786][T16356] wg1 speed is unknown, defaulting to 1000 [ 361.072409][T16394] __nla_validate_parse: 2 callbacks suppressed [ 361.072446][T16394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2613'. [ 361.404867][ T6565] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.418415][ T6565] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.427533][T16380] wg1 speed is unknown, defaulting to 1000 [ 361.465951][T10668] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.478539][T16403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2615'. [ 361.497311][T10668] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.724885][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'. [ 361.849260][T16421] FAULT_INJECTION: forcing a failure. [ 361.849260][T16421] name failslab, interval 1, probability 0, space 0, times 0 [ 361.891271][T16421] CPU: 1 UID: 0 PID: 16421 Comm: syz.1.2619 Not tainted syzkaller #0 PREEMPT(full) [ 361.891298][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 361.891312][T16421] Call Trace: [ 361.891322][T16421] [ 361.891330][T16421] dump_stack_lvl+0xe8/0x150 [ 361.891356][T16421] should_fail_ex+0x412/0x560 [ 361.891384][T16421] should_failslab+0xa8/0x100 [ 361.891410][T16421] ? mas_alloc_nodes+0x291/0x350 [ 361.891435][T16421] kmem_cache_alloc_noprof+0x87/0x650 [ 361.891467][T16421] mas_alloc_nodes+0x291/0x350 [ 361.891493][T16421] mas_preallocate+0x2d6/0x640 [ 361.891516][T16421] ? rcu_is_watching+0x15/0xb0 [ 361.891538][T16421] ? __pfx_mas_preallocate+0x10/0x10 [ 361.891574][T16421] ? __mas_set_range+0x12f/0x3c0 [ 361.891599][T16421] __split_vma+0x318/0xa40 [ 361.891632][T16421] ? __pfx___split_vma+0x10/0x10 [ 361.891662][T16421] ? mas_find+0xb0e/0xd30 [ 361.891693][T16421] vms_gather_munmap_vmas+0x4fa/0x1380 [ 361.891731][T16421] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 361.891749][T16421] ? rcu_is_watching+0x15/0xb0 [ 361.891770][T16421] ? vm_unmapped_area+0xde/0x230 [ 361.891807][T16421] do_vmi_align_munmap+0x2b4/0x4b0 [ 361.891844][T16421] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 361.891902][T16421] do_vmi_munmap+0x252/0x2d0 [ 361.891927][T16421] __vm_munmap+0x22c/0x3d0 [ 361.891949][T16421] ? __pfx___vm_munmap+0x10/0x10 [ 361.891966][T16421] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 361.892006][T16421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.892026][T16421] __x64_sys_munmap+0x60/0x70 [ 361.892050][T16421] do_syscall_64+0x15f/0xf80 [ 361.892066][T16421] ? trace_irq_disable+0x3b/0x140 [ 361.892092][T16421] ? clear_bhb_loop+0x40/0x90 [ 361.892114][T16421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.892131][T16421] RIP: 0033:0x7f7e7399cc87 [ 361.892147][T16421] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.892162][T16421] RSP: 002b:00007f7e748e4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 361.892181][T16421] RAX: ffffffffffffffda RBX: 00007f7e6c000000 RCX: 00007f7e7399cc87 [ 361.892194][T16421] RDX: 0000000000000000 RSI: 0000000002600000 RDI: 00007f7e69a00000 [ 361.892205][T16421] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 361.892217][T16421] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 361.892228][T16421] R13: 0000000000001000 R14: 00007f7e70000000 R15: 0000000002600000 [ 361.892256][T16421] [ 362.422171][T16438] xt_NFQUEUE: number of total queues is 0 [ 362.641597][T16448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2627'. [ 362.870410][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 362.923353][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 363.057018][T16465] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2632'. [ 363.174806][T16470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2632'. [ 363.315660][T16479] xt_hashlimit: size too large, truncated to 1048576 [ 363.481994][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 363.557580][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2634'. [ 364.028806][T16480] openvswitch: : Dropping previously announced user features [ 364.053495][T16490] syzkaller0: entered promiscuous mode [ 364.071037][T16490] syzkaller0: entered allmulticast mode [ 364.097927][T16486] openvswitch: : Dropping previously announced user features [ 364.283017][T16494] wg1 speed is unknown, defaulting to 1000 [ 364.739962][T16523] netlink: 'syz.0.2643': attribute type 64 has an invalid length. [ 365.549286][T16547] batadv_slave_0: entered promiscuous mode [ 365.573123][T16547] netlink: 'syz.3.2648': attribute type 1 has an invalid length. [ 365.604889][T16547] netlink: 'syz.3.2648': attribute type 2 has an invalid length. [ 365.674234][T16546] batadv_slave_0: left promiscuous mode [ 365.806829][T16553] macsec1: entered promiscuous mode [ 366.059782][T16560] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 366.110165][T16561] __nla_validate_parse: 7 callbacks suppressed [ 366.110184][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2652'. [ 366.287096][T16565] wg1 speed is unknown, defaulting to 1000 [ 366.322423][ T30] audit: type=1804 audit(1778743855.990:10): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2652" name="/newroot/533/cgroup.controllers" dev="tmpfs" ino=2757 res=1 errno=0 [ 366.396535][ T30] audit: type=1800 audit(1778743856.010:11): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2652" name="cgroup.controllers" dev="tmpfs" ino=2757 res=0 errno=0 [ 366.453348][T16571] xt_SECMARK: invalid mode: 4 [ 366.591662][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2655'. [ 366.945015][T16594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2662'. [ 367.138557][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2664'. [ 367.173388][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2664'. [ 367.250800][T16614] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2667'. [ 367.324309][T16619] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2667'. [ 367.374911][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 367.386370][T16622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2669'. [ 367.401720][T16624] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 367.528953][T16629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2666'. [ 367.579994][T16624] 8021q: adding VLAN 0 to HW filter on device bond13 [ 368.581471][T16679] bond0: left promiscuous mode [ 368.625090][T16688] netlink: 'syz.3.2690': attribute type 2 has an invalid length. [ 368.709904][T16679] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 368.719081][T16679] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 368.728120][T16679] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 368.831039][T16691] syzkaller1: entered allmulticast mode [ 369.088188][T16714] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 369.862093][T16757] netlink: 'syz.0.2707': attribute type 1 has an invalid length. [ 370.273480][T16766] tipc: Enabled bearer , priority 0 [ 370.380478][T16766] tipc: Disabling bearer [ 370.460768][T16778] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.739828][T16784] wg1 speed is unknown, defaulting to 1000 [ 371.584360][T16813] __nla_validate_parse: 13 callbacks suppressed [ 371.584379][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2725'. [ 371.650978][T16815] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2726'. [ 371.891063][T16826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2730'. [ 371.930025][T16826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2730'. [ 372.129401][T16834] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2732'. [ 372.243798][T16844] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 372.281664][T16845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2732'. [ 372.309447][T16844] netlink: 'syz.3.2735': attribute type 3 has an invalid length. [ 372.313889][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2736'. [ 372.339759][T16844] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2735'. [ 372.339805][T16834] bond0 (unregistering): Released all slaves [ 372.356460][T16851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2736'. [ 372.373704][T16849] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2732'. [ 372.999589][T16873] wg1 speed is unknown, defaulting to 1000 [ 373.023433][T16868] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma? [ 374.052175][T16908] bond13: option lacp_active: invalid value (8) [ 374.063923][T16908] bond13 (unregistering): Released all slaves [ 374.591491][T16933] wg1 speed is unknown, defaulting to 1000 [ 374.642793][T16938] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 374.819714][T16938] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 375.090175][T16941] wg1 speed is unknown, defaulting to 1000 [ 375.222327][T16955] lo: entered allmulticast mode [ 375.274876][T16955] tunl0: entered allmulticast mode [ 375.279087][T16953] netlink: Conntrack attr has 4 unknown bytes [ 375.308078][T16955] gre0: entered allmulticast mode [ 375.329461][T16953] netlink: 'syz.4.2765': attribute type 178 has an invalid length. [ 375.345801][T16955] gretap0: entered allmulticast mode [ 375.416596][T16955] erspan0: entered allmulticast mode [ 375.435198][T16955] ip_vti0: entered allmulticast mode [ 375.456826][T16955] ip6_vti0: entered allmulticast mode [ 375.472122][T16955] sit0: entered allmulticast mode [ 375.494488][T16955] ip6tnl0: entered allmulticast mode [ 375.593868][T16955] ip6gre0: entered allmulticast mode [ 375.636374][T16955] ip6gretap0: entered allmulticast mode [ 375.658278][T16955] bridge0: entered allmulticast mode [ 375.691029][T16955] vcan0: entered allmulticast mode [ 375.718101][T16955] bond0: entered allmulticast mode [ 375.733753][T16955] `: entered allmulticast mode [ 375.751274][T16955] dummy0: entered allmulticast mode [ 375.772418][T16955] nlmon0: entered allmulticast mode [ 375.785409][T16955] batadv0: entered allmulticast mode [ 375.800727][T16955] vxcan0: entered allmulticast mode [ 375.817680][T16955] vxcan1: entered allmulticast mode [ 376.579048][T16955] veth0: entered allmulticast mode [ 376.612710][T16955] veth1: entered allmulticast mode [ 376.633551][T16955] wg0: entered allmulticast mode [ 376.654248][T16955] wg1: entered allmulticast mode [ 376.667541][T16955] wg2: entered allmulticast mode [ 376.678501][T16955] veth1_to_bridge: entered allmulticast mode [ 376.696813][T16955] bridge_slave_1: entered allmulticast mode [ 376.705795][T16955] veth0_to_bond: entered allmulticast mode [ 376.724027][T16955] bond_slave_0: entered allmulticast mode [ 376.749696][T16955] veth1_to_bond: entered allmulticast mode [ 376.765783][T16955] bond_slave_1: entered allmulticast mode [ 376.784447][T16955] veth0_to_team: entered allmulticast mode [ 376.811276][T16955] team_slave_0: entered allmulticast mode [ 376.830136][T16955] veth1_to_team: entered allmulticast mode [ 376.844204][T16955] team_slave_1: entered allmulticast mode [ 376.859872][T16955] veth0_to_batadv: entered allmulticast mode [ 376.875099][T16955] batadv_slave_0: entered allmulticast mode [ 376.890099][T16955] xfrm0: entered allmulticast mode [ 376.906210][T16955] veth0_to_hsr: entered allmulticast mode [ 376.923023][T16955] hsr_slave_0: entered allmulticast mode [ 376.946262][T16955] veth1_to_hsr: entered allmulticast mode [ 376.954482][T16955] hsr_slave_1: entered allmulticast mode [ 376.980035][T16955] veth1_macvtap: entered allmulticast mode [ 376.994682][T16955] veth0_macvtap: entered allmulticast mode [ 377.006490][T16955] macvtap0: entered allmulticast mode [ 377.018015][T16955] macsec0: entered allmulticast mode [ 377.031656][T16955] geneve0: entered allmulticast mode [ 377.049129][T16955] geneve1: entered allmulticast mode [ 377.070499][T16955] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 377.084837][T16955] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 377.092575][T16955] vxlan0: entered allmulticast mode [ 377.097978][T16955] vlan2: left promiscuous mode [ 377.102750][T16955] bridge0: left promiscuous mode [ 377.107910][T16955] vlan2: entered allmulticast mode [ 377.113192][T16955] vxcan2: entered allmulticast mode [ 377.118642][T16955] vxcan3: entered allmulticast mode [ 377.124106][T16955] bond1: entered allmulticast mode [ 377.129407][T16955] ipvlan2: entered allmulticast mode [ 377.134833][T16955] macsec1: entered allmulticast mode [ 377.140425][T16955] vlan3: entered allmulticast mode [ 377.145734][T16955] vlan4: entered allmulticast mode [ 377.161385][T16955] syztnl0: entered allmulticast mode [ 377.171652][T16955] veth2: entered allmulticast mode [ 377.177030][T16955] veth3: entered allmulticast mode [ 377.182430][T16955] batadv1: entered allmulticast mode [ 377.187930][T16955] : entered allmulticast mode [ 377.193310][T16955] bond2: entered allmulticast mode [ 377.200588][T16955] batadv2: entered allmulticast mode [ 377.208485][T16955] veth4: entered allmulticast mode [ 377.213733][T16955] veth5: entered allmulticast mode [ 377.219331][T16955] gtp0: entered allmulticast mode [ 377.229483][T16955] vxlan1: entered allmulticast mode [ 377.243439][T16955] bond3: left promiscuous mode [ 377.251896][T16955] bond3: entered allmulticast mode [ 377.262844][T16955] bond4: entered allmulticast mode [ 377.275308][T16955] geneve2: entered allmulticast mode [ 377.285485][T16955] gtp1: left promiscuous mode [ 377.290275][T16955] gtp1: entered allmulticast mode [ 377.297739][T16955] bond5: entered allmulticast mode [ 377.309436][T16955] bond6: left promiscuous mode [ 377.314227][T16955] bond6: entered allmulticast mode [ 377.320078][T16955] hmac(sha2: entered allmulticast mode [ 377.329247][T16955] netdevsim netdevsim2 eth0: entered allmulticast mode [ 377.336446][T16955] netdevsim netdevsim2 eth1: entered allmulticast mode [ 377.343451][T16955] netdevsim netdevsim2 eth2: entered allmulticast mode [ 377.350530][T16955] netdevsim netdevsim2 eth3: entered allmulticast mode [ 377.365303][T16955] vxcan4: entered allmulticast mode [ 377.371460][T16955] vxcan5: entered allmulticast mode [ 377.379453][T16955] gre1: entered allmulticast mode [ 377.386955][T16955] bridge1: entered allmulticast mode [ 377.392401][T16955] bridge2: entered allmulticast mode [ 377.398341][T16955] geneve3: left promiscuous mode [ 377.408953][T16955] bond7: entered allmulticast mode [ 377.425038][T16955] veth6: entered allmulticast mode [ 377.433468][T16955] veth7: entered allmulticast mode [ 377.440802][T16955] bridge3: entered allmulticast mode [ 377.450714][T16955] veth8: entered allmulticast mode [ 377.460743][T16955] veth9: entered allmulticast mode [ 377.466806][T16955] mac80211_hwsim hwsim25 wlan2: entered allmulticast mode [ 377.474272][T16955] 7: entered allmulticast mode [ 377.479300][T16955] bond8: entered allmulticast mode [ 377.492109][T16955] vlan0: left promiscuous mode [ 377.499254][T16955] bond9: left promiscuous mode [ 377.504692][T16955] bridge4: entered allmulticast mode [ 377.515191][T16955] bond10: entered allmulticast mode [ 377.526855][T16955] sit1: entered allmulticast mode [ 377.543437][T16955] bond11: entered allmulticast mode [ 377.555038][T16955] ip6_vti1: entered allmulticast mode [ 377.564403][T16955] ipvlan0: left promiscuous mode [ 377.569527][T16955] ipvlan0: entered allmulticast mode [ 377.579237][T16955] ip6gre1: entered allmulticast mode [ 377.584674][T16955] bond12: entered allmulticast mode [ 377.590208][T16955] veth10: entered allmulticast mode [ 377.595568][T16955] veth11: entered allmulticast mode [ 377.601103][T16955] syztnl1: entered allmulticast mode [ 377.606978][T16955] bridge5: entered allmulticast mode [ 377.616922][T16955] bond13: entered allmulticast mode [ 377.628690][T16955] : entered allmulticast mode [ 377.713359][ T7810] wg1 speed is unknown, defaulting to 1000 [ 377.714088][ T6565] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.728397][ T7810] syz0: Port: 1 Link DOWN [ 377.741637][ T6565] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.750347][ T6565] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 377.766940][ T6565] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.795264][ T6565] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.813644][ T6565] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 377.835385][ T7810] wg1 speed is unknown, defaulting to 1000 [ 377.837976][ T6565] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.889391][ T6565] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.913073][ T6565] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 377.928354][T16986] __nla_validate_parse: 7 callbacks suppressed [ 377.928372][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2772'. [ 378.005916][ T6565] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.038864][ T6565] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.062146][ T6565] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 378.178631][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'. [ 378.400044][T17004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2778'. [ 378.436647][T17006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2779'. [ 378.487712][T17000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.502430][T17000] 8021q: adding VLAN 0 to HW filter on device ` [ 378.517306][T17000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.581059][T17000] veth1_macvtap: left promiscuous mode [ 378.589517][T17000] veth0_macvtap: left promiscuous mode [ 378.596976][T17000] veth0_macvtap: entered promiscuous mode [ 378.613956][T17000] veth1_macvtap: entered promiscuous mode [ 378.629691][T17000] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 378.648730][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.724955][T17008] bond0: (slave syz_tun): Releasing backup interface [ 378.765880][T17008] batman_adv: batadv0: Removing interface: dummy0 [ 378.795109][T17008] bridge_slave_0: left allmulticast mode [ 378.804210][T17008] bridge_slave_0: left promiscuous mode [ 378.813053][T17008] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.838011][T17008] bridge_slave_1: left allmulticast mode [ 378.854001][T17008] bridge_slave_1: left promiscuous mode [ 378.870009][T17008] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.935772][T17008] bond0: (slave bond_slave_0): Releasing backup interface [ 378.948638][T17008] bond0: (slave bond_slave_1): Releasing backup interface [ 378.958589][T17008] team0: Port device team_slave_0 removed [ 378.966352][T17008] team0: Port device team_slave_1 removed [ 378.973204][T17008] bond1: (slave veth3): Releasing active interface [ 378.981998][T17008] bond4: (slave veth7): Releasing backup interface [ 378.988718][T17008] bond4: (slave veth7): the permanent HWaddr of slave - de:b0:76:54:b8:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 379.008004][T17008] bond4: (slave bridge1): Releasing backup interface [ 379.017337][T17008] bond7: (slave batadv1): Releasing active interface [ 379.026779][T17008] bond8: (slave veth11): Releasing backup interface [ 379.035043][T17008] bond9: (slave gretap3): Releasing active interface [ 379.053179][T17008] veth13: left allmulticast mode [ 379.059140][T17008] veth13: left promiscuous mode [ 379.064297][T17008] bridge3: port 1(veth13) entered disabled state [ 379.075766][T17008] bond11: (slave bridge4): Removing an active aggregator [ 379.086533][T17008] bond11: (slave bridge4): Releasing backup interface [ 379.093463][T17008] bond11: (slave bridge4): the permanent HWaddr of slave - 8e:8a:32:56:3f:f0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 379.115474][T17008] bond11: (slave bridge5): Releasing backup interface [ 379.133561][T17008] bond12: (slave erspan1): Releasing active interface [ 379.175586][ T5788] wg1 speed is unknown, defaulting to 1000 [ 379.181796][ T7093] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.182307][ T5788] syz0: Port: 1 Link ACTIVE [ 379.228716][ T7821] wg1 speed is unknown, defaulting to 1000 [ 379.234661][ T7093] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.259456][ T7093] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.283524][T17027] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 379.283841][ T7093] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.298173][T17027] netlink: 'syz.1.2782': attribute type 1 has an invalid length. [ 379.417069][T17027] 8021q: adding VLAN 0 to HW filter on device bond13 [ 379.482467][T17029] bond13: (slave gretap2): making interface the new active one [ 379.495972][T17029] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 379.556827][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'. [ 379.783878][T17038] bond14: Invalid ad_actor_system MAC address. [ 379.827470][T17038] bond14: option ad_actor_system: invalid value (7) [ 379.891218][T17038] bond14 (unregistering): Released all slaves [ 380.093386][T17057] syzkaller0: entered promiscuous mode [ 380.117761][T17057] syzkaller0: entered allmulticast mode [ 380.443172][T17070] geneve3: left promiscuous mode [ 380.484885][T17070] ip6gretap0: left promiscuous mode [ 380.497760][T17070] ip6gre3: left promiscuous mode [ 380.502784][T17070] ip6gre3: left allmulticast mode [ 380.630928][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.671118][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.735123][T17081] syzkaller0: entered promiscuous mode [ 380.735758][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.762625][T17081] syzkaller0: entered allmulticast mode [ 380.777971][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.806468][T17078] wg1 speed is unknown, defaulting to 1000 [ 380.828818][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.868212][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.880151][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.893703][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.929196][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.943365][T17082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.163446][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2800'. [ 381.814461][T17083] wg1 speed is unknown, defaulting to 1000 [ 381.949874][T17118] xt_l2tp: missing protocol rule (udp|l2tpip) [ 382.149411][T17107] wg1 speed is unknown, defaulting to 1000 [ 382.340225][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2812'. [ 382.552210][T17146] block nbd2: Unsupported socket: should be TCP or UNIX. [ 382.925768][T17151] geneve4: entered promiscuous mode [ 383.228927][T17164] netlink: 'syz.3.2821': attribute type 2 has an invalid length. [ 383.287884][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2821'. [ 383.293672][T17165] ip6erspan0: entered allmulticast mode [ 383.303694][T17167] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 383.317986][T17167] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 383.326219][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2821'. [ 383.335692][T17167] veth1_virt_wifi: entered allmulticast mode [ 383.351376][T17167] veth1_virt_wifi: left allmulticast mode [ 383.504032][T17173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2824'. [ 383.583254][T17179] Cannot find map_set index 17 as target [ 384.439034][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 384.546756][T17225] netlink: 384 bytes leftover after parsing attributes in process `syz.4.2835'. [ 384.555107][T17226] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2837'. [ 384.856906][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2839'. [ 384.921452][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 385.044098][T17235] 8021q: adding VLAN 0 to HW filter on device bond14 [ 385.100079][T17244] bond14: (slave batadv3): Opening slave failed [ 385.593821][T17273] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.2846'. [ 386.140356][T17266] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 386.147992][T17266] macsec4: left promiscuous mode [ 386.165127][T17266] bond12: left promiscuous mode [ 386.176265][T17266] bond12: left allmulticast mode [ 386.209073][T17281] bridge0: entered allmulticast mode [ 386.289492][T17279] bridge0: left allmulticast mode [ 386.368139][T17283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2851'. [ 386.852596][T17311] netlink: 'syz.3.2858': attribute type 1 has an invalid length. [ 387.203118][T17313] netlink: 'syz.3.2858': attribute type 1 has an invalid length. [ 387.274632][T17319] bridge8: port 1(veth25) entered blocking state [ 387.301128][T17319] bridge8: port 1(veth25) entered disabled state [ 387.315643][T17319] veth25: entered allmulticast mode [ 387.341036][T17319] veth25: entered promiscuous mode [ 387.431803][T17331] netlink: 'syz.0.2862': attribute type 11 has an invalid length. [ 387.471827][T17323] tipc: Resetting bearer [ 387.491798][T17323] syzkaller0: left promiscuous mode [ 387.519361][T17323] syzkaller0: left allmulticast mode [ 387.717909][T17323] bridge9: left allmulticast mode [ 387.749579][T17323] vti0: left promiscuous mode [ 387.779693][T17323] vti0: left allmulticast mode [ 387.805363][T17323] bond15: left allmulticast mode [ 387.821257][T17353] xt_hashlimit: max too large, truncated to 1048576 [ 387.829140][T17353] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 387.836959][T17323] macsec1: left promiscuous mode [ 388.395021][T17378] netlink: 'syz.4.2873': attribute type 32 has an invalid length. [ 388.426247][T17378] __nla_validate_parse: 5 callbacks suppressed [ 388.426264][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 388.510806][T17387] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2875'. [ 388.531616][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'. [ 388.537782][T17378] bond16: option coupled_control: invalid value (71) [ 388.548994][T17378] bond16 (unregistering): Released all slaves [ 388.555918][T17389] netlink: 'syz.2.2876': attribute type 10 has an invalid length. [ 388.606176][T17387] syzkaller1: entered promiscuous mode [ 388.612305][T17387] syzkaller1: entered allmulticast mode [ 388.873463][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 389.143007][T17418] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2886'. [ 389.221469][T17417] bridge12: entered promiscuous mode [ 389.266394][T17417] bridge12: entered allmulticast mode [ 389.329985][T17417] team0: Port device bridge12 added [ 389.435605][T17433] bridge13: entered promiscuous mode [ 389.468447][T17433] bridge13: entered allmulticast mode [ 389.510916][T17433] team0: Port device bridge13 added [ 389.548912][T17417] bridge0: port 1(team0) entered blocking state [ 389.592076][T17417] bridge0: port 1(team0) entered disabled state [ 389.610228][T17417] team0: entered allmulticast mode [ 389.642266][T17417] team0: left allmulticast mode [ 389.686442][T17440] wg1 speed is unknown, defaulting to 1000 [ 390.011294][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2892'. [ 390.122629][T17463] net_ratelimit: 1014 callbacks suppressed [ 390.122647][T17463] netlink: zone id is out of range [ 390.138289][T17463] netlink: get zone limit has 4 unknown bytes [ 390.138759][T17459] 8021q: adding VLAN 0 to HW filter on device bond16 [ 390.246541][T17461] bond16: (slave batadv2): Opening slave failed [ 390.353716][T17467] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2894'. [ 390.483220][T17477] netlink: 'syz.1.2897': attribute type 1 has an invalid length. [ 390.532367][T17479] syzkaller0: entered promiscuous mode [ 390.538294][T17479] syzkaller0: entered allmulticast mode [ 390.573626][T17477] bond14: entered promiscuous mode [ 390.579486][T17477] 8021q: adding VLAN 0 to HW filter on device bond14 [ 390.680922][T17482] bond14: (slave veth27): making interface the new active one [ 390.689095][T17482] veth27: entered promiscuous mode [ 390.695425][T17482] bond14: (slave veth27): Enslaving as an active interface with an up link [ 390.700151][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2900'. [ 390.903243][T17488] syzkaller0: entered promiscuous mode [ 390.952180][T17488] syzkaller0: entered allmulticast mode [ 391.181294][T17500] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2904'. [ 391.239631][T17500] netlink: 'syz.1.2904': attribute type 1 has an invalid length. [ 391.364260][T17504] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 391.477588][T17500] 8021q: adding VLAN 0 to HW filter on device bond15 [ 391.507528][T17502] bond15: option tlb_dynamic_lb: unable to set because the bond device is up [ 391.549755][T17504] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 391.786373][T17517] macvtap1: entered promiscuous mode [ 391.861025][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.877692][T17517] syz_tun: entered promiscuous mode [ 391.880099][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.893628][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.913982][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.929807][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.981387][T17517] syz_tun: left promiscuous mode [ 392.133837][T17538] wg1 speed is unknown, defaulting to 1000 [ 392.376571][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 392.615471][T17526] wg1 speed is unknown, defaulting to 1000 [ 393.584541][T17580] __nla_validate_parse: 1 callbacks suppressed [ 393.584560][T17580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2921'. [ 393.614971][T17578] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 394.000360][ T5629] Bluetooth: hci3: command tx timeout [ 394.665510][T17526] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.684060][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.697103][T17526] bridge_slave_0: entered allmulticast mode [ 394.715036][T17526] bridge_slave_0: entered promiscuous mode [ 394.752592][T17526] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.787146][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.804574][T17628] netlink: 'syz.3.2931': attribute type 1 has an invalid length. [ 394.808036][T17526] bridge_slave_1: entered allmulticast mode [ 394.837125][T17628] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2931'. [ 394.847547][T17526] bridge_slave_1: entered promiscuous mode [ 394.887349][T17632] siw: device registration error -23 [ 394.973686][T17616] wg1 speed is unknown, defaulting to 1000 [ 395.045379][T17526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.175243][T17526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.227733][T17642] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2933'. [ 395.256597][T17642] veth0_to_bond: default FDB implementation only supports local addresses [ 395.360964][T17526] team0: Port device team_slave_0 added [ 395.383614][T17526] team0: Port device team_slave_1 added [ 395.505468][T17526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.513840][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.589032][T17655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2937'. [ 395.591472][T17526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.697107][T17655] 8021q: adding VLAN 0 to HW filter on device bond15 [ 395.723250][T17658] bond15: (slave batadv3): Opening slave failed [ 395.830378][T17526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.841266][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.870376][T17526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.060819][T17676] netlink: 4968 bytes leftover after parsing attributes in process `syz.2.2943'. [ 396.080718][ T5629] Bluetooth: hci3: command tx timeout [ 396.088059][T17526] hsr_slave_0: entered promiscuous mode [ 396.103414][T17526] hsr_slave_1: entered promiscuous mode [ 396.163955][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2945'. [ 396.177101][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2944'. [ 396.263349][T17684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2944'. [ 396.482806][T17680] 8021q: adding VLAN 0 to HW filter on device bond16 [ 396.880284][T17687] bond16: (slave batadv0): Opening slave failed [ 397.558625][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'. [ 397.593063][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2953'. [ 397.656240][T17720] tipc: Resetting bearer [ 397.799526][T17725] 8021q: adding VLAN 0 to HW filter on device bond16 [ 397.888802][T17725] bond16: (slave batadv3): Opening slave failed [ 397.930907][T17728] netlink: 'syz.4.2958': attribute type 1 has an invalid length. [ 398.037744][T17728] 8021q: adding VLAN 0 to HW filter on device bond17 [ 398.066876][T17732] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 398.105391][T17730] bond17: (slave dummy0): making interface the new active one [ 398.152161][T17730] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 398.161236][ T5629] Bluetooth: hci3: command tx timeout [ 398.172004][T17732] dummy0: entered promiscuous mode [ 398.196605][T17732] bond17: (slave dummy0): Releasing active interface [ 398.278533][T17739] netlink: 'syz.3.2960': attribute type 1 has an invalid length. [ 398.561608][T17741] 8021q: adding VLAN 0 to HW filter on device bond12 [ 398.599100][T17742] macvlan4: entered promiscuous mode [ 398.604425][T17742] macvlan4: entered allmulticast mode [ 398.613601][T17742] bond12: entered promiscuous mode [ 398.622755][T17742] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 398.645516][T17742] bond12: left promiscuous mode [ 398.898391][T17526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.919076][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.014155][T17526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 399.014782][T17765] __nla_validate_parse: 7 callbacks suppressed [ 399.014808][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'. [ 399.059265][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.080876][T17526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 399.141330][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.150147][T17526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 399.167561][T17526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.418184][T17784] pim6reg: entered allmulticast mode [ 399.527836][T17792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2972'. [ 399.567198][T17526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.585801][T17795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2973'. [ 399.618982][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2973'. [ 399.666968][T17526] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.697788][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.705053][ T7094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.771690][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.779059][ T7094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.890132][T17811] netlink: 'syz.1.2976': attribute type 2 has an invalid length. [ 399.903944][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'. [ 399.963778][T17815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2977'. [ 400.028629][T17810] 8021q: adding VLAN 0 to HW filter on device bond13 [ 400.071587][T17817] bond13: (slave batadv3): Opening slave failed [ 400.246243][ T5629] Bluetooth: hci3: command tx timeout [ 400.448468][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'. [ 400.832855][T17526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.915282][T17526] veth0_vlan: entered promiscuous mode [ 400.934282][T17526] veth1_vlan: entered promiscuous mode [ 400.991280][T17526] veth0_macvtap: entered promiscuous mode [ 401.002439][T17526] veth1_macvtap: entered promiscuous mode [ 401.054369][T17526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.095644][T17526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.112433][ T7092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.143554][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.164322][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.180163][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.367784][T17808] Set syz1 is full, maxelem 65536 reached [ 402.630835][T17798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.832296][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.886164][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.991555][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.011534][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.233370][T17858] netlink: 'syz.3.2985': attribute type 1 has an invalid length. [ 403.344810][T17860] tipc: Failed to remove unknown binding: 66,0,0/0:2631431250/2631431252 [ 403.346524][T17862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2986'. [ 403.388016][T17860] tipc: Failed to remove unknown binding: 66,0,0/0:2631431250/2631431251 [ 403.400753][T17864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2987'. [ 403.430443][T17860] tipc: Failed to remove unknown binding: 66,0,0/0:2631431250/2631431252 [ 403.457771][T17864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2987'. [ 403.477686][T17860] tipc: Failed to remove unknown binding: 66,0,0/0:2631431250/2631431251 [ 403.514172][T17860] syzkaller1: entered promiscuous mode [ 403.563948][T17860] syzkaller1: entered allmulticast mode [ 403.679181][T17871] netlink: 'syz.4.2989': attribute type 1 has an invalid length. [ 403.768799][T17871] nbd0: detected capacity change from 63 to 339754496 [ 403.812973][ T5642] blk_print_req_error: 138 callbacks suppressed [ 403.812991][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.875953][T17876] ip6erspan0: entered allmulticast mode [ 403.876268][ T5642] buffer_io_error: 138 callbacks suppressed [ 403.876282][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 403.903879][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.913098][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 403.961690][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.979690][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 404.007314][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.046423][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 404.089961][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.141698][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 404.153904][T17888] __nla_validate_parse: 1 callbacks suppressed [ 404.153922][T17888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2994'. [ 404.196097][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.219899][T17888] unsupported nlmsg_type 40 [ 404.226879][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 404.264563][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.378624][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 404.437934][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.444723][ T5646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.465410][ T5646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.471699][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 404.484024][ T5646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.515750][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.525096][ T5642] ldm_validate_partition_table(): Disk read failed. [ 404.536221][ T5646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.558923][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.626090][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 404.637435][ T5642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.662299][ T5642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 404.670848][ T5642] Dev nbd0: unable to read RDB block 0 [ 404.689452][ T5642] nbd0: unable to read partition table [ 404.705581][ T5642] ldm_validate_partition_table(): Disk read failed. [ 404.713385][ T5642] Dev nbd0: unable to read RDB block 0 [ 404.720076][ T5642] nbd0: unable to read partition table [ 405.250840][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 405.924416][T17925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2998'. [ 406.101792][T17928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2999'. [ 406.175432][T17929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2999'. [ 406.653760][ T5629] Bluetooth: hci2: command tx timeout [ 408.716761][ T5629] Bluetooth: hci2: command tx timeout [ 408.732323][T17913] bond0: left allmulticast mode [ 409.152186][T17935] wg1 speed is unknown, defaulting to 1000 [ 409.227137][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 409.230901][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 409.662223][ T5788] IPVS: starting estimator thread 0... [ 409.770042][T17971] IPVS: using max 40 ests per chain, 96000 per kthread [ 409.990054][T17979] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3007'. [ 410.023901][T17979] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3007'. [ 410.196087][ T13] bridge_slave_1: left allmulticast mode [ 410.208480][ T13] bridge_slave_1: left promiscuous mode [ 410.220881][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.320418][ T13] dvmrp0: left allmulticast mode [ 410.796178][ T5629] Bluetooth: hci2: command tx timeout [ 410.960748][ T13] bond8 (unregistering): (slave gretap1): Releasing active interface [ 411.583356][ T13] team0: Port device geneve1 removed [ 412.062727][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.072945][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.082589][ T13] bond0 (unregistering): Released all slaves [ 412.095074][ T13] bond1 (unregistering): (slave veth3): Releasing backup interface [ 412.104748][ T13] bond1 (unregistering): Released all slaves [ 412.118914][ T13] bond2 (unregistering): Released all slaves [ 412.136866][ T13] bond3 (unregistering): Released all slaves [ 412.151726][ T13] bond4 (unregistering): Released all slaves [ 412.172337][ T13] bond5 (unregistering): Released all slaves [ 412.191761][ T13] bond6 (unregistering): Released all slaves [ 412.211793][ T13] bond7 (unregistering): Released all slaves [ 412.230712][ T13] bond8 (unregistering): Released all slaves [ 412.249783][ T13] bond9 (unregistering): Released all slaves [ 412.263654][ T13] bond10 (unregistering): Released all slaves [ 412.284338][ T13] bond11 (unregistering): Released all slaves [ 412.299091][ T13] bond12 (unregistering): Released all slaves [ 412.315187][ T13] bond13 (unregistering): Released all slaves [ 412.333036][T17895] wg1 speed is unknown, defaulting to 1000 [ 412.339364][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 412.351290][T17982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.554462][ T13] : left promiscuous mode [ 412.776675][T17969] wg1 speed is unknown, defaulting to 1000 [ 412.812132][T17982] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.877030][ T5629] Bluetooth: hci2: command tx timeout [ 412.945254][ T13] tipc: Left network mode [ 412.954700][T17982] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.166318][ T13] IPVS: stopping backup sync thread 8814 ... [ 413.204615][T17982] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.285720][T17973] wg1 speed is unknown, defaulting to 1000 [ 413.631829][T10668] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.852912][ T7094] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.133527][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 414.151293][T10671] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.160785][T10671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.666075][T18025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3011'. [ 414.747493][T18029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3011'. [ 415.119137][T17895] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.152432][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.168818][T17895] bridge_slave_0: entered allmulticast mode [ 415.192517][T17895] bridge_slave_0: entered promiscuous mode [ 415.218919][T17895] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.236943][T17895] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.244286][T17895] bridge_slave_1: entered allmulticast mode [ 415.260554][T17895] bridge_slave_1: entered promiscuous mode [ 415.369019][T17895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.409963][T17895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.476107][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'. [ 415.514804][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 415.540417][T18048] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3015'. [ 415.598171][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3014'. [ 415.828737][T18049] 8021q: adding VLAN 0 to HW filter on device bond17 [ 415.927228][T18055] bond17: (slave batadv3): Opening slave failed [ 415.979150][T17895] team0: Port device team_slave_0 added [ 415.990766][T17895] team0: Port device team_slave_1 added [ 416.025090][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 416.229451][T18077] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3021'. [ 416.244172][T18080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3022'. [ 416.301795][T18074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3022'. [ 416.340225][T18077] gretap0: entered promiscuous mode [ 416.364262][T18082] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3021'. [ 416.403225][T17895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.422616][T17895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.467913][T17895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.481787][T18082] 0ªî{X¹¦: renamed from gretap0 [ 416.493898][T18082] 0ªî{X¹¦: left promiscuous mode [ 416.507902][T18082] 0ªî{X¹¦: entered allmulticast mode [ 416.525104][T18082] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 416.597834][T17895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.613291][T17895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.641003][T17895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.725296][ T13] hsr_slave_0: left promiscuous mode [ 416.736520][ T13] hsr_slave_1: left promiscuous mode [ 416.749433][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.761796][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.208857][ T13] team0 (unregistering): Port device team_slave_1 removed [ 417.227079][ T13] team0 (unregistering): Port device team_slave_0 removed [ 417.287437][ T7094] smbdirect: ib_dev[syz1] removed [ 417.343003][ T13] team0 (unregistering): Port device dummy0 removed [ 417.575348][T17895] hsr_slave_0: entered promiscuous mode [ 417.607436][T17895] hsr_slave_1: entered promiscuous mode [ 417.613800][T17895] debugfs: 'hsr0' already exists in 'hsr' [ 417.672531][T17895] Cannot create hsr debugfs directory [ 417.704366][T18120] netlink: 'syz.2.3031': attribute type 2 has an invalid length. [ 417.739475][T18120] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 418.810614][ T13] IPVS: stop unused estimator thread 0... [ 418.852641][T18165] netlink: 'syz.1.3040': attribute type 1 has an invalid length. [ 419.315301][T18165] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 420.109592][T18224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.201399][T18226] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 420.498561][T18226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.552293][T18226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.808024][T17895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.881173][T17895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.902848][T17895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.947963][T17895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.991052][T17895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.065492][T17895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.109917][T17895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.145679][T17895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.380992][T18275] __nla_validate_parse: 10 callbacks suppressed [ 421.381015][T18275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3057'. [ 421.435257][T18275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3057'. [ 421.506624][T17895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.561537][T17895] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.613372][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.620664][ T7093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.649926][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'. [ 421.699179][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.706420][ T7093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.708092][T18288] IPVS: set_ctl: invalid protocol: 115 100.1.1.2:20003 [ 421.914135][T18291] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 421.932861][T18291] syzkaller1: linktype set to 769 [ 422.561273][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 422.798200][T18324] syzkaller0: entered promiscuous mode [ 422.826523][T18324] syzkaller0: entered allmulticast mode [ 422.862700][T18324] netlink: 'syz.0.3064': attribute type 13 has an invalid length. [ 422.894674][T18324] netlink: 'syz.0.3064': attribute type 17 has an invalid length. [ 422.934572][T18324] 0ªî{X¹¦: left allmulticast mode [ 423.850508][T18324] syzkaller0: left promiscuous mode [ 423.870290][T18324] syzkaller0: left allmulticast mode [ 424.088870][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3066'. [ 424.110417][T18355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 424.133577][T17895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.209335][T18355] vlan2: entered promiscuous mode [ 424.244661][T18355] gretap0: entered promiscuous mode [ 424.277297][T18355] vlan2: entered allmulticast mode [ 424.286096][T18355] gretap0: entered allmulticast mode [ 424.378519][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3067'. [ 424.440986][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 424.634085][T17895] veth0_vlan: entered promiscuous mode [ 424.706601][T17895] veth1_vlan: entered promiscuous mode [ 424.751838][T18363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3068'. [ 424.790846][T18363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3068'. [ 424.858952][T17895] veth0_macvtap: entered promiscuous mode [ 424.906546][T17895] veth1_macvtap: entered promiscuous mode [ 425.020170][T17895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.075066][T17895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.151126][ T7095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.195875][ T7095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.244736][ T7095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.289897][ T7095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.535043][T18209] syz.4.3048 (18209) used greatest stack depth: 16344 bytes left [ 425.715057][ T7095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.762953][ T7095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.962475][T10671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.007783][T10671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.355463][T18406] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 426.786291][T18418] __nla_validate_parse: 5 callbacks suppressed [ 426.786311][T18418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2988'. [ 426.955880][T18435] netlink: 'syz.2.3082': attribute type 1 has an invalid length. [ 427.284154][T18435] 8021q: adding VLAN 0 to HW filter on device bond18 [ 427.363349][T18436] netem: incorrect ge model size [ 427.407876][T18436] netem: change failed [ 427.434432][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.450597][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.461527][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.479383][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.487725][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.617350][T18434] wg1 speed is unknown, defaulting to 1000 [ 428.018581][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 428.073529][T18466] vxcan2: entered allmulticast mode [ 428.086429][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 428.353145][ T5625] bond2: (slave syz_tun): Removing an active aggregator [ 428.375822][ T5625] bond2: (slave syz_tun): Releasing backup interface [ 428.861206][T18443] wg1 speed is unknown, defaulting to 1000 [ 428.910283][T18492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3092'. [ 428.975131][T18492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3092'. [ 429.274288][T18499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.363413][T18499] netlink: 'syz.2.3094': attribute type 4 has an invalid length. [ 429.411979][T18499] netlink: 'syz.2.3094': attribute type 4 has an invalid length. [ 429.597016][ T5629] Bluetooth: hci5: command tx timeout [ 430.112025][T18534] netlink: 'syz.3.3100': attribute type 1 has an invalid length. [ 430.143958][T18534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.574192][T18524] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 430.949421][T18556] openvswitch: netlink: Key type 89 is out of range max 32 [ 430.978325][T18556] openvswitch: netlink: Actions may not be safe on all matching packets [ 431.276351][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 431.535367][T18577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3107'. [ 431.560795][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 431.676561][ T5629] Bluetooth: hci5: command tx timeout [ 431.940344][T18443] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.971832][T18443] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.000042][T18443] bridge_slave_0: entered allmulticast mode [ 432.027749][T18443] bridge_slave_0: entered promiscuous mode [ 432.034520][T18588] Bluetooth: MGMT ver 1.23 [ 432.056444][T18443] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.084983][T18443] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.124495][T18443] bridge_slave_1: entered allmulticast mode [ 432.148799][T18443] bridge_slave_1: entered promiscuous mode [ 432.320990][T18443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.325896][T18577] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 432.381047][T18443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.416172][T18577] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 432.529481][T18577] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 432.590756][T18621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3116'. [ 432.611557][T18577] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 432.702170][T18616] wg1 speed is unknown, defaulting to 1000 [ 432.712110][T18443] team0: Port device team_slave_0 added [ 432.774170][T18443] team0: Port device team_slave_1 added [ 432.829548][T18621] ip6gre2: entered allmulticast mode [ 432.941539][T18443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.960360][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.016545][T18443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.075908][T18443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.101106][T18443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.154306][T18443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.381689][T18443] hsr_slave_0: entered promiscuous mode [ 433.425230][T18443] hsr_slave_1: entered promiscuous mode [ 433.448632][T18443] debugfs: 'hsr0' already exists in 'hsr' [ 433.470682][T18443] Cannot create hsr debugfs directory [ 433.622194][T18652] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3121'. [ 433.738565][T18657] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 433.757687][ T5629] Bluetooth: hci5: command tx timeout [ 434.092714][T18667] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3125'. [ 434.120102][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'. [ 434.505513][T18674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.597112][T18664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3124'. [ 434.861313][T18686] netlink: 'syz.0.3127': attribute type 61 has an invalid length. [ 434.869548][T18686] netlink: 'syz.0.3127': attribute type 62 has an invalid length. [ 435.156722][T18443] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.186830][T18443] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.458185][T18443] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.473871][T18443] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.605899][T18443] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.621988][T18443] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.645806][T18709] wg1 speed is unknown, defaulting to 1000 [ 435.723817][T18443] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.739878][T18443] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.836564][ T5629] Bluetooth: hci5: command tx timeout [ 436.110657][T18727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3134'. [ 436.741495][T18443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.776875][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.802511][T18443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.841449][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.902651][T18443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.947225][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.968263][T18443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.006226][T18443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.135504][T18754] netlink: 'syz.3.3136': attribute type 9 has an invalid length. [ 437.150723][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 437.179169][T18754] netlink: 'syz.3.3136': attribute type 9 has an invalid length. [ 437.215576][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 437.391083][T18443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.443322][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.454097][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3138'. [ 437.482215][T18443] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.513958][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.521191][ T6565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.683551][T18758] __nla_validate_parse: 7 callbacks suppressed [ 437.683587][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.708115][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.715380][ T6565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.757495][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.799545][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.828744][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.852152][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.907793][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.931040][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.953187][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 437.988704][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 438.015411][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3137'. [ 438.513831][T18801] block nbd4: not configured, cannot reconfigure [ 438.783895][T18810] 8021q: adding VLAN 0 to HW filter on device bond18 [ 438.848105][T18816] FAULT_INJECTION: forcing a failure. [ 438.848105][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 438.880314][T18810] bond18: (slave veth27): Enslaving as an active interface with an up link [ 438.891374][T18816] CPU: 1 UID: 0 PID: 18816 Comm: syz.4.3148 Not tainted syzkaller #0 PREEMPT(full) [ 438.891405][T18816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 438.891419][T18816] Call Trace: [ 438.891430][T18816] [ 438.891438][T18816] dump_stack_lvl+0xe8/0x150 [ 438.891466][T18816] should_fail_ex+0x412/0x560 [ 438.891494][T18816] should_failslab+0xa8/0x100 [ 438.891522][T18816] __kmalloc_cache_noprof+0x88/0x660 [ 438.891547][T18816] ? rtnl_newlink+0x136/0x1bb0 [ 438.891576][T18816] rtnl_newlink+0x136/0x1bb0 [ 438.891614][T18816] ? __pfx_rtnl_newlink+0x10/0x10 [ 438.891641][T18816] ? __lock_acquire+0x6b5/0x2cf0 [ 438.891663][T18816] ? __lock_acquire+0x6b5/0x2cf0 [ 438.891688][T18816] ? unwind_next_frame+0xa6/0x2550 [ 438.891713][T18816] ? unwind_next_frame+0xa6/0x2550 [ 438.891734][T18816] ? is_bpf_text_address+0x26/0x2b0 [ 438.891760][T18816] ? is_bpf_text_address+0x26/0x2b0 [ 438.891782][T18816] ? __lock_acquire+0x6b5/0x2cf0 [ 438.891802][T18816] ? kernel_text_address+0xa5/0xe0 [ 438.891825][T18816] ? __kernel_text_address+0xd/0x30 [ 438.891844][T18816] ? unwind_get_return_address+0x4d/0x90 [ 438.891862][T18816] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.891886][T18816] ? arch_stack_walk+0xfb/0x150 [ 438.891916][T18816] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 438.891950][T18816] ? __pfx_rtnl_newlink+0x10/0x10 [ 438.891971][T18816] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 438.891991][T18816] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 438.892014][T18816] ? netlink_sendmsg+0x5d4/0xb40 [ 438.892039][T18816] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 438.892069][T18816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.892093][T18816] ? __lock_acquire+0x6b5/0x2cf0 [ 438.892123][T18816] netlink_rcv_skb+0x232/0x4b0 [ 438.892148][T18816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.892173][T18816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.892208][T18816] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.892232][T18816] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.892260][T18816] netlink_unicast+0x75c/0x8e0 [ 438.892291][T18816] netlink_sendmsg+0x813/0xb40 [ 438.892322][T18816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.892347][T18816] ? aa_sock_msg_perm+0xf1/0x1b0 [ 438.892370][T18816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.892397][T18816] ____sys_sendmsg+0x972/0x9f0 [ 438.892422][T18816] ? __might_fault+0xaf/0x130 [ 438.892447][T18816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.892480][T18816] ? import_iovec+0x73/0xa0 [ 438.892512][T18816] ___sys_sendmsg+0x2a5/0x360 [ 438.892534][T18816] ? __lock_acquire+0x6b5/0x2cf0 [ 438.892554][T18816] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.892608][T18816] ? __fget_files+0x2a/0x420 [ 438.892627][T18816] ? __fget_files+0x3a0/0x420 [ 438.892655][T18816] __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.892683][T18816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.892715][T18816] ? __pfx_ksys_write+0x10/0x10 [ 438.892747][T18816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.892765][T18816] do_syscall_64+0x15f/0xf80 [ 438.892782][T18816] ? trace_irq_disable+0x3b/0x140 [ 438.892806][T18816] ? clear_bhb_loop+0x40/0x90 [ 438.892826][T18816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.892840][T18816] RIP: 0033:0x7f70f519ce59 [ 438.892858][T18816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.892872][T18816] RSP: 002b:00007f70f609e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.892891][T18816] RAX: ffffffffffffffda RBX: 00007f70f5416090 RCX: 00007f70f519ce59 [ 438.892904][T18816] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 438.892915][T18816] RBP: 00007f70f609e090 R08: 0000000000000000 R09: 0000000000000000 [ 438.892925][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.892936][T18816] R13: 00007f70f5416128 R14: 00007f70f5416090 R15: 00007fff50680eb8 [ 438.892961][T18816] [ 439.669806][T18807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.081115][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.150599][T18807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.246722][ T5646] Bluetooth: hci5: command 0x0405 tx timeout [ 440.290206][T18443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.389510][T18807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.614220][T18807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.669368][T18869] netlink: 'syz.2.3156': attribute type 4 has an invalid length. [ 440.774996][T18443] veth0_vlan: entered promiscuous mode [ 440.831725][T18443] veth1_vlan: entered promiscuous mode [ 440.941445][T18443] veth0_macvtap: entered promiscuous mode [ 440.968255][T18443] veth1_macvtap: entered promiscuous mode [ 441.033704][T18876] netlink: 'syz.2.3158': attribute type 1 has an invalid length. [ 441.046883][T18443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.191397][T10668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.248144][T18443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.340068][ T199] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.378062][ T7095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.409268][ T7095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.466918][ T7095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.486281][ T7095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.534990][T18887] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.619881][ T7095] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.694497][T18888] veth13: entered promiscuous mode [ 441.727317][ T7095] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.874002][T18887] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.967529][T18904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.194816][T18906] bond1: (slave veth5): Enslaving as an active interface with an up link [ 442.240677][T18904] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 442.259031][T18904] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 442.322342][T18887] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.379361][T18900] wg1 speed is unknown, defaulting to 1000 [ 442.428753][T18887] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.522268][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.543348][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.755835][T18918] __nla_validate_parse: 23 callbacks suppressed [ 442.755855][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 442.776818][ T199] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.832129][ T6565] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.841458][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.851162][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.943242][T18922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3169'. [ 442.953891][ T7094] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.988373][T10671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.197686][T18925] x_tables: ip_tables: ah match: only valid for protocol 51 [ 443.488718][T18937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.750348][T18947] bridge1: entered promiscuous mode [ 443.774215][T18947] bridge1: entered allmulticast mode [ 443.856864][T18947] team0: Port device bridge1 added [ 443.872541][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'. [ 443.956353][T18951] bridge0: port 3(team0) entered blocking state [ 443.985035][T18951] bridge0: port 3(team0) entered disabled state [ 443.999627][T18951] team0: entered allmulticast mode [ 444.011061][T18951] team_slave_0: entered allmulticast mode [ 444.026663][T18951] team_slave_1: entered allmulticast mode [ 444.058466][T18951] team0: entered promiscuous mode [ 444.063555][T18951] team_slave_0: entered promiscuous mode [ 444.078187][T18951] team_slave_1: entered promiscuous mode [ 444.085466][T18951] bridge0: port 3(team0) entered blocking state [ 444.091973][T18951] bridge0: port 3(team0) entered forwarding state [ 444.152391][T18952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.171602][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 444.185838][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 444.194986][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 444.204302][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 444.219201][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.323661][T18953] bond2: (slave veth7): Enslaving as an active interface with an up link [ 444.383379][T18954] FAULT_INJECTION: forcing a failure. [ 444.383379][T18954] name failslab, interval 1, probability 0, space 0, times 0 [ 444.401941][T18954] CPU: 0 UID: 0 PID: 18954 Comm: syz.0.3176 Not tainted syzkaller #0 PREEMPT(full) [ 444.401967][T18954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.401978][T18954] Call Trace: [ 444.401985][T18954] [ 444.401993][T18954] dump_stack_lvl+0xe8/0x150 [ 444.402020][T18954] should_fail_ex+0x412/0x560 [ 444.402047][T18954] ? __d_alloc+0x37/0x6f0 [ 444.402071][T18954] should_failslab+0xa8/0x100 [ 444.402098][T18954] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 444.402130][T18954] __d_alloc+0x37/0x6f0 [ 444.402158][T18954] d_alloc+0x4b/0x190 [ 444.402178][T18954] ? lookup_one_qstr_excl+0xc4/0x360 [ 444.402205][T18954] lookup_one_qstr_excl+0xd8/0x360 [ 444.402232][T18954] ? lookup_noperm_common+0x245/0x430 [ 444.402256][T18954] start_dirop+0x5c/0x90 [ 444.402279][T18954] simple_start_creating+0xcc/0x110 [ 444.402303][T18954] ? __pfx_simple_start_creating+0x10/0x10 [ 444.402324][T18954] ? do_raw_spin_unlock+0xf5/0x210 [ 444.402348][T18954] ? mntput+0x65/0xc0 [ 444.402369][T18954] debugfs_start_creating+0xdb/0x1a0 [ 444.402388][T18954] __debugfs_create_file+0x6f/0x400 [ 444.402407][T18954] debugfs_create_file_full+0x3f/0x60 [ 444.402426][T18954] ref_tracker_dir_debugfs+0x197/0x360 [ 444.402451][T18954] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 444.402495][T18954] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 444.402519][T18954] ? alloc_netdev_mqs+0xa8/0x1210 [ 444.402542][T18954] ? __raw_spin_lock_init+0x45/0x100 [ 444.402566][T18954] alloc_netdev_mqs+0x274/0x1210 [ 444.402583][T18954] ? __pfx_batadv_meshif_init_early+0x10/0x10 [ 444.402619][T18954] rtnl_create_link+0x31f/0xd70 [ 444.402646][T18954] rtnl_newlink_create+0x277/0xb70 [ 444.402673][T18954] ? __pfx___nla_validate_parse+0x10/0x10 [ 444.402704][T18954] ? __mutex_lock+0x608/0x1550 [ 444.402725][T18954] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 444.402754][T18954] ? __pfx___mutex_lock+0x10/0x10 [ 444.402782][T18954] ? ns_capable+0x89/0xe0 [ 444.402804][T18954] rtnl_newlink+0x166a/0x1bb0 [ 444.402841][T18954] ? __pfx_rtnl_newlink+0x10/0x10 [ 444.402861][T18954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.402916][T18954] ? kasan_quarantine_put+0xbb/0x1f0 [ 444.402938][T18954] ? lockdep_hardirqs_on+0x7a/0x110 [ 444.402968][T18954] ? nlmon_xmit+0xb0/0x100 [ 444.402989][T18954] ? kmem_cache_free+0x182/0x650 [ 444.403024][T18954] ? __lock_acquire+0x6b5/0x2cf0 [ 444.403048][T18954] ? __dev_queue_xmit+0x2b6/0x3950 [ 444.403069][T18954] ? __local_bh_enable_ip+0xd0/0x130 [ 444.403088][T18954] ? lockdep_hardirqs_on+0x7a/0x110 [ 444.403113][T18954] ? __dev_queue_xmit+0x2b6/0x3950 [ 444.403129][T18954] ? __local_bh_enable_ip+0xd0/0x130 [ 444.403146][T18954] ? __dev_queue_xmit+0x2b6/0x3950 [ 444.403171][T18954] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 444.403208][T18954] ? __pfx_rtnl_newlink+0x10/0x10 [ 444.403230][T18954] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 444.403256][T18954] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 444.403278][T18954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.403299][T18954] ? ref_tracker_free+0x693/0x840 [ 444.403324][T18954] ? __pfx_ref_tracker_free+0x10/0x10 [ 444.403359][T18954] netlink_rcv_skb+0x232/0x4b0 [ 444.403385][T18954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.403411][T18954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.403448][T18954] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.403472][T18954] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.403502][T18954] netlink_unicast+0x75c/0x8e0 [ 444.403536][T18954] netlink_sendmsg+0x813/0xb40 [ 444.403571][T18954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.403606][T18954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 444.403631][T18954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.403659][T18954] ____sys_sendmsg+0x972/0x9f0 [ 444.403684][T18954] ? __might_fault+0xaf/0x130 [ 444.403710][T18954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.403743][T18954] ? import_iovec+0x73/0xa0 [ 444.403769][T18954] ___sys_sendmsg+0x2a5/0x360 [ 444.403793][T18954] ? __lock_acquire+0x6b5/0x2cf0 [ 444.403816][T18954] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.403878][T18954] ? __fget_files+0x2a/0x420 [ 444.403899][T18954] ? __fget_files+0x3a0/0x420 [ 444.403930][T18954] __x64_sys_sendmsg+0x1bd/0x2a0 [ 444.403959][T18954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.403997][T18954] ? __pfx_ksys_write+0x10/0x10 [ 444.404031][T18954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.404050][T18954] do_syscall_64+0x15f/0xf80 [ 444.404066][T18954] ? trace_irq_disable+0x3b/0x140 [ 444.404092][T18954] ? clear_bhb_loop+0x40/0x90 [ 444.404115][T18954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.404132][T18954] RIP: 0033:0x7f3759d9ce59 [ 444.404149][T18954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.404164][T18954] RSP: 002b:00007f375ac0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.404183][T18954] RAX: ffffffffffffffda RBX: 00007f375a016180 RCX: 00007f3759d9ce59 [ 444.404196][T18954] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 444.404206][T18954] RBP: 00007f375ac0a090 R08: 0000000000000000 R09: 0000000000000000 [ 444.404215][T18954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.404224][T18954] R13: 00007f375a016218 R14: 00007f375a016180 R15: 00007ffce7d58ef8 [ 444.404252][T18954] [ 444.985318][T18954] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 444.993592][T18954] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 445.036433][T18965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3179'. [ 445.166799][T18971] xt_TCPMSS: Only works on TCP SYN packets [ 445.353758][T18957] wg1 speed is unknown, defaulting to 1000 [ 445.695204][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'. [ 445.887927][T18994] wg1 speed is unknown, defaulting to 1000 [ 446.222019][T18957] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.239383][T18957] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.256624][T18957] bridge_slave_0: entered allmulticast mode [ 446.265067][T18957] bridge_slave_0: entered promiscuous mode [ 446.279138][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.287399][T18957] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.294843][T18957] bridge_slave_1: entered allmulticast mode [ 446.304340][T18957] bridge_slave_1: entered promiscuous mode [ 446.316289][ T5629] Bluetooth: hci1: command tx timeout [ 446.361410][T18957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.381130][T18957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.433804][T18957] team0: Port device team_slave_0 added [ 446.459342][T18957] team0: Port device team_slave_1 added [ 446.543770][T18957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.557554][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.589990][T18957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.669431][T18957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.677808][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.705029][T18957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.804799][T19001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.072148][T18957] hsr_slave_0: entered promiscuous mode [ 447.099688][T18957] hsr_slave_1: entered promiscuous mode [ 447.130995][T18957] debugfs: 'hsr0' already exists in 'hsr' [ 447.146122][T18957] Cannot create hsr debugfs directory [ 447.300326][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 447.460954][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3198'. [ 447.775398][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 447.785712][T19064] netlink: 'syz.2.3201': attribute type 30 has an invalid length. [ 447.825389][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 447.832886][T10671] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.835595][T19064] netlink: 'syz.2.3201': attribute type 30 has an invalid length. [ 447.861039][T10671] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.967556][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 447.978582][T19069] netlink: 'syz.2.3201': attribute type 30 has an invalid length. [ 447.988015][T10671] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.077545][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 448.083355][T10671] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.087199][T19069] netlink: 'syz.2.3201': attribute type 30 has an invalid length. [ 448.171898][T19078] syzkaller0: entered promiscuous mode [ 448.184459][T19078] syzkaller0: entered allmulticast mode [ 448.244019][T19076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3203'. [ 448.398211][ T5629] Bluetooth: hci1: command tx timeout [ 448.556592][T19096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3207'. [ 448.649020][T19096] bond0: entered promiscuous mode [ 448.669599][T19096] bond_slave_0: entered promiscuous mode [ 448.682371][T19096] bond_slave_1: entered promiscuous mode [ 448.703883][T19096] bond0: left promiscuous mode [ 448.709188][T19096] bond_slave_0: left promiscuous mode [ 448.715195][T19096] bond_slave_1: left promiscuous mode [ 448.775695][T19093] wg1 speed is unknown, defaulting to 1000 [ 448.792598][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 449.102396][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 449.135718][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 450.486195][ T5629] Bluetooth: hci1: command tx timeout [ 452.559188][ T5629] Bluetooth: hci1: command tx timeout [ 453.741936][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 453.782206][T18957] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.829575][T18957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.866842][T18957] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.928379][T18957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.981295][T19171] bridge0: port 3(team0) entered disabled state [ 453.989717][T19171] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 454.006805][T18957] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.021017][T18957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.040743][T18957] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.107334][T18957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.422782][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 454.518455][T19164] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 454.637226][T19198] netlink: 'syz.0.3230': attribute type 4 has an invalid length. [ 454.669502][T19198] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3230'. [ 454.722802][T18957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.791683][T18957] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.837680][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 454.842561][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.853929][ T6565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.891673][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 454.963319][T19210] team1: entered promiscuous mode [ 454.999270][T19210] team1: entered allmulticast mode [ 455.025444][T19210] 8021q: adding VLAN 0 to HW filter on device team1 [ 455.059681][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 455.074159][T19216] team2: entered promiscuous mode [ 455.080953][T19216] team2: entered allmulticast mode [ 455.088769][T19216] 8021q: adding VLAN 0 to HW filter on device team2 [ 455.114832][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.122064][ T7094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.186442][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 455.390404][T19241] netlink: 'syz.0.3240': attribute type 1 has an invalid length. [ 455.491640][T19239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3240'. [ 455.537535][T19241] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.681605][T19246] bond3: (slave dummy0): making interface the new active one [ 455.746482][T19246] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 455.759433][ T5629] Bluetooth: hci3: command 0x0401 tx timeout [ 456.112450][T19267] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 456.198277][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 456.302237][T19267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.313821][T19259] wg1 speed is unknown, defaulting to 1000 [ 456.324743][ T5743] IPVS: starting estimator thread 0... [ 456.426169][T19276] IPVS: using max 34 ests per chain, 81600 per kthread [ 456.538968][T19280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3247'. [ 456.711171][T18957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.727569][ T5743] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 457.294601][T19300] "syz.1.3250" (19300) uses obsolete ecb(arc4) skcipher [ 457.344683][T19274] wg1 speed is unknown, defaulting to 1000 [ 457.519678][ T5743] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 457.520501][T19314] netlink: 'syz.0.3252': attribute type 21 has an invalid length. [ 457.574480][T19314] netlink: 'syz.0.3252': attribute type 6 has an invalid length. [ 457.665433][ T7093] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 457.831525][T18957] veth0_vlan: entered promiscuous mode [ 457.905710][T18957] veth1_vlan: entered promiscuous mode [ 458.214889][T18957] veth0_macvtap: entered promiscuous mode [ 458.270636][T18957] veth1_macvtap: entered promiscuous mode [ 458.331868][T18957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.379080][T18957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.440883][T10668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.450751][T10668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.471184][T10668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.500370][T10668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.592813][T19336] syzkaller0: port 1(veth3) entered blocking state [ 458.609521][T19336] syzkaller0: port 1(veth3) entered disabled state [ 458.619826][T19336] veth3: entered allmulticast mode [ 458.661196][T19336] veth3: entered promiscuous mode [ 458.713356][T19339] syzkaller0: port 2(batadv1) entered blocking state [ 458.744497][T19339] syzkaller0: port 2(batadv1) entered disabled state [ 458.752419][T19339] batadv1: entered allmulticast mode [ 458.759944][T19339] batadv1: entered promiscuous mode [ 458.836892][T10668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 458.909055][T10668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 458.980376][T19352] __nla_validate_parse: 4 callbacks suppressed [ 458.980398][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3261'. [ 459.022585][ T6565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.056349][T19352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 459.058376][ T6565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.137745][T10671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.155202][T10671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.199216][ T6565] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 459.209893][ T6565] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 459.380065][T19373] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 459.403502][T19373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3268'. [ 459.453254][T19373] netlink: 'syz.1.3268': attribute type 11 has an invalid length. [ 459.492944][T19373] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3268'. [ 459.510034][T19381] pimreg: entered allmulticast mode [ 459.757153][ T7808] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 459.812822][T19387] geneve2: entered promiscuous mode [ 459.820158][ T5646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.840320][ T5646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.851223][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.863120][ T5646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.872453][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 460.693722][T19391] wg1 speed is unknown, defaulting to 1000 [ 460.932705][T19430] netlink: 'syz.0.3282': attribute type 13 has an invalid length. [ 460.957194][T19430] netlink: 'syz.0.3282': attribute type 17 has an invalid length. [ 461.610099][T19429] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.617527][T19429] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.926377][ T5646] Bluetooth: hci0: command tx timeout [ 461.955015][T19429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.984856][T19429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.443238][T19430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.452589][T19430] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.464386][T19430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.501745][T19430] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.509083][T19430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.519270][T19430] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.526937][T19430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.544983][T19430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.555046][T19430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.571744][T19430] veth1_vlan: left promiscuous mode [ 462.578852][T19430] veth0_vlan: left promiscuous mode [ 462.585477][T19430] veth0_vlan: entered promiscuous mode [ 462.595633][T19430] veth1_vlan: entered promiscuous mode [ 462.607285][T19430] veth1_macvtap: left promiscuous mode [ 462.613754][T19430] veth0_macvtap: left promiscuous mode [ 462.621719][T19430] veth0_macvtap: entered promiscuous mode [ 462.628993][T19430] veth1_macvtap: entered promiscuous mode [ 462.650480][T19430] 8021q: adding VLAN 0 to HW filter on device eth0 [ 462.667032][T19430] 8021q: adding VLAN 0 to HW filter on device eth1 [ 462.680747][T19430] 8021q: adding VLAN 0 to HW filter on device eth2 [ 462.693201][T19430] 8021q: adding VLAN 0 to HW filter on device eth3 [ 462.705022][T19430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.714450][T19430] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 462.727891][T19430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.737730][T19430] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 462.747140][T19430] team1: left promiscuous mode [ 462.751967][T19430] team1: left allmulticast mode [ 462.757293][T19430] 8021q: adding VLAN 0 to HW filter on device team1 [ 462.765102][T19430] team2: left promiscuous mode [ 462.770012][T19430] team2: left allmulticast mode [ 462.775322][T19430] 8021q: adding VLAN 0 to HW filter on device team2 [ 462.784083][T19430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.793048][T19430] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.808518][T19433] netlink: 'syz.3.3283': attribute type 4 has an invalid length. [ 462.965773][T19439] wg1 speed is unknown, defaulting to 1000 [ 463.053414][T19450] xt_hashlimit: size too large, truncated to 1048576 [ 463.255861][T19461] netlink: 'syz.3.3289': attribute type 1 has an invalid length. [ 463.339032][T19461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.407706][T19463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.427220][T19463] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 463.439006][T19463] bond1: (slave vcan1): Error -95 calling set_mac_address [ 463.541623][ T7093] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 463.607064][T19465] netlink: 'syz.3.3290': attribute type 1 has an invalid length. [ 463.996750][ T5646] Bluetooth: hci0: command 0x041b tx timeout [ 464.175427][T19483] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3294'. [ 464.178251][T19391] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.193657][T19391] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.201165][T19391] bridge_slave_0: entered allmulticast mode [ 464.209332][T19391] bridge_slave_0: entered promiscuous mode [ 464.249133][T19482] wg1 speed is unknown, defaulting to 1000 [ 464.255806][T19391] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.263368][T19391] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.271593][T19391] bridge_slave_1: entered allmulticast mode [ 464.279778][T19391] bridge_slave_1: entered promiscuous mode [ 464.371785][T19391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.389674][T19391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.493713][T19391] team0: Port device team_slave_0 added [ 464.521367][T19391] team0: Port device team_slave_1 added [ 464.586120][T19391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.593482][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.619900][T19391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.638474][T19391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.646161][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.672434][T19391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.735221][T19476] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 464.872466][T19391] hsr_slave_0: entered promiscuous mode [ 464.915335][T19391] hsr_slave_1: entered promiscuous mode [ 464.951709][T19391] debugfs: 'hsr0' already exists in 'hsr' [ 464.968096][T19391] Cannot create hsr debugfs directory [ 465.231186][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 465.277450][T19499] wg1 speed is unknown, defaulting to 1000 [ 465.350110][T19506] team0: left allmulticast mode [ 465.361369][T19506] team_slave_0: left allmulticast mode [ 465.380435][T19506] team_slave_1: left allmulticast mode [ 465.392160][T19506] bridge0: port 3(team0) entered disabled state [ 465.519875][T19506] bridge_slave_0: left allmulticast mode [ 465.525713][T19506] bridge_slave_0: left promiscuous mode [ 465.532379][T19506] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.544213][T19506] bridge_slave_1: left allmulticast mode [ 465.554518][T19506] bridge_slave_1: left promiscuous mode [ 465.564303][T19506] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.585104][T19506] bond0: (slave bond_slave_0): Releasing backup interface [ 465.614432][T19506] bond0: (slave bond_slave_1): Releasing backup interface [ 465.630524][T19506] team_slave_0: left promiscuous mode [ 465.643568][T19506] team0: Port device team_slave_0 removed [ 465.651819][T19506] team_slave_1: left promiscuous mode [ 465.671711][T19506] team0: Port device team_slave_1 removed [ 465.683851][T19506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.703000][T19506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.728251][T19506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.737057][T19506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.749094][T19506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.938343][T19511] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 465.950413][T19511] bond2 (unregistering): Released all slaves [ 466.025326][T19391] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.060476][T19391] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.081251][ T5629] Bluetooth: hci0: command 0x041b tx timeout [ 466.150219][T19391] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.161075][T19391] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.183879][T19511] netlink: 'syz.1.3300': attribute type 1 has an invalid length. [ 466.308305][T19391] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.356135][T19391] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.578364][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'. [ 466.600986][T19391] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.632740][T19391] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.765765][T19533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3307'. [ 466.768139][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 466.901782][T19533] bond2 (unregistering): Released all slaves [ 467.171386][T19544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3311'. [ 467.247273][T19391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 467.289785][T19391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.319666][T19391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.354878][T19391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.356154][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 467.373528][T19391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.402310][T19391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.423742][T19391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.440155][T19556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3315'. [ 467.467906][T19560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3316'. [ 467.469576][T19391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.479311][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 467.494859][T19559] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3314'. [ 467.524419][T19560] netlink: 'syz.4.3316': attribute type 6 has an invalid length. [ 467.675395][T19391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.725792][T19391] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.751880][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.759226][T10672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.803241][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.810577][T10672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.969087][T19580] netlink: 'syz.0.3320': attribute type 1 has an invalid length. [ 468.157496][ T5629] Bluetooth: hci0: command 0x041b tx timeout [ 468.159701][T19584] netlink: 'syz.3.3322': attribute type 8 has an invalid length. [ 468.479819][T19598] bond2: option arp_interval: invalid value (18446744073709551615) [ 468.504142][T19598] bond2: option arp_interval: allowed values 0 - 2147483647 [ 468.522141][T19598] bond2 (unregistering): Released all slaves [ 468.554688][T19605] bond1: (slave bond_slave_1): Device is not our slave [ 468.562684][T19605] bond1: option active_slave: invalid value (bond_slave_1) [ 468.590616][T19605] bond1 (unregistering): Released all slaves [ 468.856014][T19606] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.863443][T19606] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.225828][T19606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.258134][T19606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.530883][T19609] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 469.566721][ T7092] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.587511][ T7092] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.611398][ T7092] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.632538][ T7092] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.667256][T19623] __nla_validate_parse: 4 callbacks suppressed [ 469.667276][T19623] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3330'. [ 469.805642][T19629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3331'. [ 469.860370][T19631] netlink: 'syz.0.3331': attribute type 1 has an invalid length. [ 469.928742][T19631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.992830][T19629] bond5: (slave gretap1): making interface the new active one [ 470.002930][T19629] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 470.013166][T19633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3332'. [ 470.130876][T19391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.246321][ T5629] Bluetooth: hci0: command 0x041b tx timeout [ 470.299443][T19644] wg1 speed is unknown, defaulting to 1000 [ 470.335265][T19391] veth0_vlan: entered promiscuous mode [ 470.380692][T19391] veth1_vlan: entered promiscuous mode [ 470.455239][T19391] veth0_macvtap: entered promiscuous mode [ 470.474760][T19391] veth1_macvtap: entered promiscuous mode [ 470.532887][T19391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.578432][T19391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.612155][ T7092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.644194][ T7092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.679314][ T7092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.694760][ T7092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.915210][T19662] openvswitch: netlink: Flow key attr not present in new flow. [ 471.009729][ T7092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.030112][ T7092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.221883][T10672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.241949][T10672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.254420][T19669] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3342'. [ 471.272306][T19669] openvswitch: netlink: Message has 3 unknown bytes. [ 471.303142][T19666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3343'. [ 471.359578][T19669] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 471.450370][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3270'. [ 471.792654][T19683] netlink: 'syz.3.3346': attribute type 3 has an invalid length. [ 471.801151][T19683] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3346'. [ 471.812454][T19684] netlink: 'syz.3.3346': attribute type 3 has an invalid length. [ 471.820527][T19684] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3346'. [ 471.916643][T19687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3347'. [ 471.942757][T19689] netlink: 'syz.4.3348': attribute type 1 has an invalid length. [ 472.012594][T19691] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 472.097682][T19691] veth3: entered allmulticast mode [ 472.196869][T19695] wg1 speed is unknown, defaulting to 1000 [ 472.508535][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3355'. [ 472.936266][T19724] ================================================================== [ 472.944386][T19724] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x36/0x50 [ 472.952139][T19724] Read of size 1 at addr ffff8880357392e8 by task syz.1.3359/19724 [ 472.960022][T19724] [ 472.962338][T19724] CPU: 0 UID: 0 PID: 19724 Comm: syz.1.3359 Not tainted syzkaller #0 PREEMPT(full) [ 472.962355][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 472.962370][T19724] Call Trace: [ 472.962376][T19724] [ 472.962383][T19724] dump_stack_lvl+0xe8/0x150 [ 472.962401][T19724] print_address_description+0x55/0x1e0 [ 472.962417][T19724] ? _raw_spin_lock_bh+0x36/0x50 [ 472.962436][T19724] print_report+0x58/0x70 [ 472.962448][T19724] kasan_report+0x117/0x150 [ 472.962470][T19724] ? _raw_spin_lock_bh+0x36/0x50 [ 472.962490][T19724] ? lock_sock_nested+0x6a/0x100 [ 472.962506][T19724] __kasan_check_byte+0x2a/0x40 [ 472.962525][T19724] lock_acquire+0x84/0x350 [ 472.962544][T19724] ? lock_sock_nested+0x6a/0x100 [ 472.962559][T19724] _raw_spin_lock_bh+0x36/0x50 [ 472.962577][T19724] ? lock_sock_nested+0x6a/0x100 [ 472.962592][T19724] lock_sock_nested+0x6a/0x100 [ 472.962608][T19724] inet_shutdown+0x6a/0x390 [ 472.962624][T19724] udp_tunnel_sock_release+0x6d/0x80 [ 472.962640][T19724] rxe_net_del+0xfb/0x280 [ 472.962659][T19724] rxe_dellink+0x15/0x20 [ 472.962673][T19724] nldev_dellink+0x304/0x3d0 [ 472.962692][T19724] ? __pfx_nldev_dellink+0x10/0x10 [ 472.962741][T19724] ? apparmor_capable+0x126/0x170 [ 472.962755][T19724] ? bpf_lsm_capable+0x9/0x20 [ 472.962769][T19724] ? security_capable+0x7e/0x2c0 [ 472.962787][T19724] ? __pfx_nldev_dellink+0x10/0x10 [ 472.962803][T19724] rdma_nl_rcv+0x6d1/0xa10 [ 472.962824][T19724] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 472.962848][T19724] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.962869][T19724] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.962889][T19724] netlink_unicast+0x75c/0x8e0 [ 472.962910][T19724] netlink_sendmsg+0x813/0xb40 [ 472.962933][T19724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.962954][T19724] ? aa_sock_msg_perm+0xf1/0x1b0 [ 472.962972][T19724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.962992][T19724] ____sys_sendmsg+0x972/0x9f0 [ 472.963012][T19724] ? __might_fault+0xaf/0x130 [ 472.963032][T19724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.963055][T19724] ? import_iovec+0x73/0xa0 [ 472.963076][T19724] ___sys_sendmsg+0x2a5/0x360 [ 472.963095][T19724] ? __lock_acquire+0x6b5/0x2cf0 [ 472.963111][T19724] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.963134][T19724] ? futex_wait+0x2a2/0x390 [ 472.963162][T19724] ? __fget_files+0x2a/0x420 [ 472.963178][T19724] ? __fget_files+0x3a0/0x420 [ 472.963197][T19724] __x64_sys_sendmsg+0x1bd/0x2a0 [ 472.963218][T19724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.963242][T19724] ? rcu_is_watching+0x15/0xb0 [ 472.963261][T19724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.963276][T19724] do_syscall_64+0x15f/0xf80 [ 472.963289][T19724] ? trace_irq_disable+0x3b/0x140 [ 472.963309][T19724] ? clear_bhb_loop+0x40/0x90 [ 472.963325][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.963338][T19724] RIP: 0033:0x7f3b1bd9ce59 [ 472.963352][T19724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.963370][T19724] RSP: 002b:00007f3b1cd00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.963386][T19724] RAX: ffffffffffffffda RBX: 00007f3b1c015fa0 RCX: 00007f3b1bd9ce59 [ 472.963396][T19724] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000011 [ 472.963406][T19724] RBP: 00007f3b1be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 472.963415][T19724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.963423][T19724] R13: 00007f3b1c016038 R14: 00007f3b1c015fa0 R15: 00007ffda4ce1538 [ 472.963440][T19724] [ 472.963446][T19724] [ 473.309308][T19724] Allocated by task 11900: [ 473.313709][T19724] kasan_save_track+0x3e/0x80 [ 473.318379][T19724] __kasan_slab_alloc+0x6c/0x80 [ 473.323227][T19724] kmem_cache_alloc_noprof+0x2bc/0x650 [ 473.328673][T19724] sk_prot_alloc+0x57/0x210 [ 473.333177][T19724] sk_alloc+0x3a/0x390 [ 473.337237][T19724] inet_create+0x7a0/0x1000 [ 473.341732][T19724] __sock_create+0x4b2/0x9d0 [ 473.346312][T19724] udp_sock_create4+0xca/0x480 [ 473.351069][T19724] rxe_setup_udp_tunnel+0x151/0x7b0 [ 473.356257][T19724] rxe_net_init+0xaf/0x300 [ 473.360662][T19724] rxe_newlink+0xd3/0x1c0 [ 473.364979][T19724] nldev_newlink+0x5bc/0x650 [ 473.369644][T19724] rdma_nl_rcv+0x6d1/0xa10 [ 473.374052][T19724] netlink_unicast+0x75c/0x8e0 [ 473.378811][T19724] netlink_sendmsg+0x813/0xb40 [ 473.383567][T19724] ____sys_sendmsg+0x972/0x9f0 [ 473.388337][T19724] ___sys_sendmsg+0x2a5/0x360 [ 473.393022][T19724] __x64_sys_sendmsg+0x1bd/0x2a0 [ 473.397955][T19724] do_syscall_64+0x15f/0xf80 [ 473.402534][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.408414][T19724] [ 473.410724][T19724] Freed by task 19733: [ 473.414771][T19724] kasan_save_track+0x3e/0x80 [ 473.419439][T19724] kasan_save_free_info+0x46/0x50 [ 473.424458][T19724] __kasan_slab_free+0x5c/0x80 [ 473.429214][T19724] kmem_cache_free+0x182/0x650 [ 473.434086][T19724] __sk_destruct+0x739/0x9d0 [ 473.438669][T19724] rcu_core+0x7cd/0x1070 [ 473.442908][T19724] handle_softirqs+0x22a/0x840 [ 473.447663][T19724] __irq_exit_rcu+0xca/0x220 [ 473.452241][T19724] irq_exit_rcu+0x9/0x30 [ 473.456468][T19724] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 473.462094][T19724] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 473.468061][T19724] [ 473.470373][T19724] Last potentially related work creation: [ 473.476067][T19724] kasan_save_stack+0x3e/0x60 [ 473.480737][T19724] kasan_record_aux_stack+0xbd/0xd0 [ 473.485924][T19724] call_rcu+0xee/0x890 [ 473.489995][T19724] inet_release+0x143/0x190 [ 473.494513][T19724] sock_release+0x85/0x150 [ 473.498933][T19724] rxe_net_del+0xfb/0x280 [ 473.503253][T19724] rxe_dellink+0x15/0x20 [ 473.507484][T19724] nldev_dellink+0x304/0x3d0 [ 473.512062][T19724] rdma_nl_rcv+0x6d1/0xa10 [ 473.516473][T19724] netlink_unicast+0x75c/0x8e0 [ 473.521224][T19724] netlink_sendmsg+0x813/0xb40 [ 473.525981][T19724] ____sys_sendmsg+0x972/0x9f0 [ 473.530740][T19724] ___sys_sendmsg+0x2a5/0x360 [ 473.535412][T19724] __x64_sys_sendmsg+0x1bd/0x2a0 [ 473.540346][T19724] do_syscall_64+0x15f/0xf80 [ 473.544928][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.550810][T19724] [ 473.553121][T19724] The buggy address belongs to the object at ffff888035739100 [ 473.553121][T19724] which belongs to the cache UDP of size 2048 [ 473.566554][T19724] The buggy address is located 488 bytes inside of [ 473.566554][T19724] freed 2048-byte region [ffff888035739100, ffff888035739900) [ 473.580423][T19724] [ 473.582734][T19724] The buggy address belongs to the physical page: [ 473.589147][T19724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35738 [ 473.597891][T19724] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 473.606386][T19724] memcg:ffff88803573ff81 [ 473.610611][T19724] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 473.618146][T19724] page_type: f5(slab) [ 473.622124][T19724] raw: 00fff00000000040 ffff888140afddc0 dead000000000100 dead000000000122 [ 473.630694][T19724] raw: 0000000000000000 00000008000f000f 00000000f5000000 ffff88803573ff81 [ 473.639268][T19724] head: 00fff00000000040 ffff888140afddc0 dead000000000100 dead000000000122 [ 473.647935][T19724] head: 0000000000000000 00000008000f000f 00000000f5000000 ffff88803573ff81 [ 473.656597][T19724] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 473.665256][T19724] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 473.673924][T19724] page dumped because: kasan: bad access detected [ 473.680335][T19724] page_owner tracks the page as allocated [ 473.686122][T19724] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10775, tgid 10774 (syz.1.1256), ts 217015355026, free_ts 216990052518 [ 473.707653][T19724] post_alloc_hook+0x231/0x280 [ 473.712417][T19724] get_page_from_freelist+0x24ba/0x2540 [ 473.717956][T19724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 473.723761][T19724] allocate_slab+0x77/0x660 [ 473.728252][T19724] refill_objects+0x339/0x3d0 [ 473.732915][T19724] __pcs_replace_empty_main+0x321/0x720 [ 473.738448][T19724] kmem_cache_alloc_noprof+0x37d/0x650 [ 473.743907][T19724] sk_prot_alloc+0x57/0x210 [ 473.748423][T19724] sk_alloc+0x3a/0x390 [ 473.752506][T19724] inet_create+0x7a0/0x1000 [ 473.757004][T19724] __sock_create+0x4b2/0x9d0 [ 473.761675][T19724] udp_sock_create4+0xca/0x480 [ 473.766428][T19724] wg_socket_init+0x679/0xf80 [ 473.771094][T19724] wg_open+0x24f/0x420 [ 473.775154][T19724] __dev_open+0x44d/0x830 [ 473.779484][T19724] __dev_change_flags+0x2fa/0x7e0 [ 473.784526][T19724] page last free pid 10779 tgid 10776 stack trace: [ 473.791021][T19724] __free_frozen_pages+0xbc7/0xd30 [ 473.796146][T19724] __slab_free+0x274/0x2c0 [ 473.800573][T19724] qlist_free_all+0x99/0x100 [ 473.805194][T19724] kasan_quarantine_reduce+0x148/0x160 [ 473.810650][T19724] __kasan_slab_alloc+0x22/0x80 [ 473.815493][T19724] __kmalloc_cache_noprof+0x2ba/0x660 [ 473.820956][T19724] dev_ethtool+0x132/0x1ae0 [ 473.825620][T19724] dev_ioctl+0x392/0x1150 [ 473.829940][T19724] sock_do_ioctl+0x23e/0x320 [ 473.834789][T19724] sock_ioctl+0x5c6/0x7f0 [ 473.839161][T19724] __se_sys_ioctl+0xfc/0x170 [ 473.843762][T19724] do_syscall_64+0x15f/0xf80 [ 473.848350][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.854240][T19724] [ 473.856552][T19724] Memory state around the buggy address: [ 473.862288][T19724] ffff888035739180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 473.870355][T19724] ffff888035739200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 473.878416][T19724] >ffff888035739280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 473.886463][T19724] ^ [ 473.893905][T19724] ffff888035739300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 473.902039][T19724] ffff888035739380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 473.910080][T19724] ================================================================== [ 473.918373][T19724] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 473.925585][T19724] CPU: 0 UID: 0 PID: 19724 Comm: syz.1.3359 Not tainted syzkaller #0 PREEMPT(full) [ 473.934963][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.945019][T19724] Call Trace: [ 473.948292][T19724] [ 473.951225][T19724] vpanic+0x56c/0xa60 [ 473.955218][T19724] ? __pfx_vpanic+0x10/0x10 [ 473.959723][T19724] panic+0xc5/0xd0 [ 473.963436][T19724] ? __pfx_panic+0x10/0x10 [ 473.967842][T19724] ? _raw_spin_lock_bh+0x36/0x50 [ 473.972785][T19724] ? _raw_spin_lock_bh+0x36/0x50 [ 473.977716][T19724] check_panic_on_warn+0x89/0xb0 [ 473.982649][T19724] ? _raw_spin_lock_bh+0x36/0x50 [ 473.987583][T19724] end_report+0x73/0x170 [ 473.991833][T19724] ? _raw_spin_lock_bh+0x36/0x50 [ 473.996769][T19724] kasan_report+0x128/0x150 [ 474.001273][T19724] ? _raw_spin_lock_bh+0x36/0x50 [ 474.006206][T19724] ? lock_sock_nested+0x6a/0x100 [ 474.011166][T19724] __kasan_check_byte+0x2a/0x40 [ 474.016013][T19724] lock_acquire+0x84/0x350 [ 474.020434][T19724] ? lock_sock_nested+0x6a/0x100 [ 474.025360][T19724] _raw_spin_lock_bh+0x36/0x50 [ 474.030212][T19724] ? lock_sock_nested+0x6a/0x100 [ 474.035160][T19724] lock_sock_nested+0x6a/0x100 [ 474.039919][T19724] inet_shutdown+0x6a/0x390 [ 474.044504][T19724] udp_tunnel_sock_release+0x6d/0x80 [ 474.049786][T19724] rxe_net_del+0xfb/0x280 [ 474.054112][T19724] rxe_dellink+0x15/0x20 [ 474.058346][T19724] nldev_dellink+0x304/0x3d0 [ 474.062932][T19724] ? __pfx_nldev_dellink+0x10/0x10 [ 474.068155][T19724] ? apparmor_capable+0x126/0x170 [ 474.073166][T19724] ? bpf_lsm_capable+0x9/0x20 [ 474.077832][T19724] ? security_capable+0x7e/0x2c0 [ 474.082772][T19724] ? __pfx_nldev_dellink+0x10/0x10 [ 474.087880][T19724] rdma_nl_rcv+0x6d1/0xa10 [ 474.092300][T19724] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 474.097323][T19724] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.102610][T19724] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.107803][T19724] netlink_unicast+0x75c/0x8e0 [ 474.112564][T19724] netlink_sendmsg+0x813/0xb40 [ 474.117329][T19724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.122613][T19724] ? aa_sock_msg_perm+0xf1/0x1b0 [ 474.127542][T19724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.132822][T19724] ____sys_sendmsg+0x972/0x9f0 [ 474.137584][T19724] ? __might_fault+0xaf/0x130 [ 474.142290][T19724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.147582][T19724] ? import_iovec+0x73/0xa0 [ 474.152078][T19724] ___sys_sendmsg+0x2a5/0x360 [ 474.156747][T19724] ? __lock_acquire+0x6b5/0x2cf0 [ 474.161675][T19724] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.166872][T19724] ? futex_wait+0x2a2/0x390 [ 474.171400][T19724] ? __fget_files+0x2a/0x420 [ 474.175991][T19724] ? __fget_files+0x3a0/0x420 [ 474.180672][T19724] __x64_sys_sendmsg+0x1bd/0x2a0 [ 474.185611][T19724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.191067][T19724] ? rcu_is_watching+0x15/0xb0 [ 474.195826][T19724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.201887][T19724] do_syscall_64+0x15f/0xf80 [ 474.206555][T19724] ? trace_irq_disable+0x3b/0x140 [ 474.211572][T19724] ? clear_bhb_loop+0x40/0x90 [ 474.216251][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.222139][T19724] RIP: 0033:0x7f3b1bd9ce59 [ 474.226546][T19724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.246143][T19724] RSP: 002b:00007f3b1cd00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.254547][T19724] RAX: ffffffffffffffda RBX: 00007f3b1c015fa0 RCX: 00007f3b1bd9ce59 [ 474.262513][T19724] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000011 [ 474.270474][T19724] RBP: 00007f3b1be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 474.278438][T19724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.286419][T19724] R13: 00007f3b1c016038 R14: 00007f3b1c015fa0 R15: 00007ffda4ce1538 [ 474.294392][T19724] [ 474.298005][T19724] Kernel Offset: disabled [ 474.302315][T19724] Rebooting in 86400 seconds..