last executing test programs: 3.356105833s ago: executing program 0 (id=2777): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="136e", 0x2}], 0x1}}], 0x1, 0x800) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={r9, 0x2}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x54, 0x66, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0x19}, {0x7, 0x3}, {0x2, 0x6}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x80000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x400002, 0xb) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x8, 0x0, 0x80000}}, @TCA_CT_MARK={0x8, 0x10, 0x10000004}, @TCA_CT_LABELS={0x14, 0x7, "7b7de7663cc8980c0bdfffdecc07a823"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x30004850) 2.81568576s ago: executing program 0 (id=2783): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001740)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r4, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, 0x3e9, 0x2, 0x70bd26, 0x25dfdbfb, {0x30, 0x0, 0x1, r4, 0xb, 0x8, 0x4, 0x9, 0x0, 0x2, 0x4}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x40000) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) accept4(r5, &(0x7f0000001680)=@xdp, &(0x7f0000001700)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x74ad3233ae3fe54b}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r8}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) r12 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x1, 0x12, r12, 0xbd3d9000) writev(r10, &(0x7f0000002600)=[{&(0x7f0000000040)="0c210fb85a17eddec4703077f6bf5835174c2a8639d04856f2c588bb009ddf3a20c27d951e6e1c65a256d596f9041acc7d52f92addea9019cd2adbc40d94f8e5a0843ee8473eeb83c819b73ec2efef5a4ec7099c6eaf05cf3f48a5b518b2d16c51dfd30047e073e299b89648", 0x6c}, {&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000240)="66bb2cc131911811db94916caa09a2d1c947c25456d9db25f4167028deec0e4d69339f4ad1e02bed71faa66a5a6b5a307daf5a155410236329a67cb508b2da5c60d33687989b50385cd22d4ee5", 0x4d}, {&(0x7f0000000440)="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", 0xde1}], 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) 2.136865626s ago: executing program 4 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000002000085000000ad000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}, 0x94) 2.057539706s ago: executing program 3 (id=2788): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000001340)=""/4096, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd27, 0x3, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {0xffff, 0xffff}, {0xffff, 0xc}}}, 0x24}}, 0x0) 1.97588997s ago: executing program 1 (id=2789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1014, &(0x7f0000002500)=""/4116, 0x0, 0xc}, 0x94) (async) listen(r4, 0x8) (async) r8 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async) sendmmsg$inet6(r8, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040), 0x8) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x9, 0xfff2}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', r12, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1000, 0x7fffffff}, 0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x9, 0x2, @mcast2, 0xc3}}, 0x3, 0x2, 0x81, 0x6, 0x34, 0xfffffffd, 0xed}, 0x9c) 1.938125706s ago: executing program 4 (id=2790): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000100), &(0x7f00000002c0)=r1}, 0x20) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000f6d0904496bfa83afdb10848c56391c8837716c70900b59c197b1dccf3311c7dff879f8dd43d5242b39b223dd4e79bdbe6763859dad2b60092cc083f0bb6d44b944a6f88ebd81f387f03cb26eb547634cc7d724ea465ee641999e9d2fed232", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf2503000000050002000a000000060001004e230000"], 0x24}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x8}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.791619655s ago: executing program 3 (id=2791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000010000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$netlink(0x10, 0x3, 0xf) (async) unshare(0x22020600) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$inet6(0xa, 0x7, 0x7) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r10}, 0x50) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000004c0)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.661545536s ago: executing program 2 (id=2792): r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4800) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="02000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4800) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x700, 0x700, 0x100, 0x5, {{0x21, 0x4, 0x3, 0x23, 0x84, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x1b, 0x3, [{0x2, 0x4, "7288"}, {0x7, 0xa, "1ce840ee296cf79b"}, {0x5, 0x7, "245b34f257"}]}, @cipso={0x86, 0x44, 0x1, [{0x0, 0xe, "9682c0d0315d0c8ac8d58983"}, {0x2, 0x9, "5fa17fa058ccfe"}, {0x5, 0xc, "4eedfe4fab9b282b7387"}, {0x5, 0x7, "2e61f5e01a"}, {0x5, 0x11, "7b0aa4b313c9988ca0dc87ee2951a0"}, {0x5, 0x3, "97"}]}, @timestamp={0x44, 0x10, 0x68, 0x0, 0x3, [0x54, 0x9, 0x8]}]}}}}}) (async) socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000200)=@delchain={0xb18, 0x65, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {0x6, 0xc}, {0x9, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x420, 0x2, [@TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x9c, 0x8, 0x0, 0x7, 0x80000000, 0x7, 0x8, 0x2, 0x401, 0x1, 0xfffffb23, 0x6, 0xba2, 0x9, 0x0, 0x7ff, 0x101, 0x0, 0x50f, 0x40, 0x5, 0x5, 0xfffff000, 0x81, 0x0, 0x0, 0x3, 0x4, 0x4, 0x10, 0x80000000, 0x6, 0xfffffff9, 0xe, 0x0, 0x5, 0x2, 0x7fffffff, 0x10, 0xfff, 0x2, 0x40, 0x4, 0x0, 0x5, 0x371f5ee5, 0xfffffffa, 0x2, 0x0, 0x3, 0x5, 0x9, 0x800, 0x5, 0xffffff01, 0xff, 0x5, 0x1000, 0xd8a2, 0x3ff, 0x0, 0x7fffffff, 0x0, 0xc, 0x7, 0x1000, 0x9, 0x2, 0x298, 0x4b1, 0x2, 0xb, 0x9, 0x7, 0x36c, 0xfff0, 0x80000001, 0x1, 0x0, 0x6, 0xffc0, 0x6, 0xc7, 0xbed, 0xfffeffff, 0xfffffff9, 0x381, 0x4, 0x4, 0x1, 0x5, 0x2, 0x0, 0x2, 0x5d48, 0x1, 0xfffffff9, 0x3, 0xec32, 0x6, 0x2, 0x9, 0x9, 0x8, 0x2, 0x800000, 0x6, 0x40, 0x1, 0x6, 0x7, 0x7, 0x0, 0x101, 0x8000, 0xf45e, 0x1, 0x2, 0x3, 0x8, 0xe, 0xb8, 0x101, 0x6, 0x8a, 0x6, 0xc7, 0xaf, 0xfffff800, 0x9, 0x0, 0xfff, 0x8, 0x35, 0x6, 0x5, 0x2, 0x3226, 0xd, 0x7, 0x8, 0x4, 0x7fffffff, 0x7e, 0x6584, 0x1, 0x2, 0x100, 0x400, 0x8, 0x100, 0x8, 0x10, 0x3, 0x3800, 0x31f, 0x9, 0x1ff, 0x5, 0xffffffdf, 0x0, 0x20, 0x8001, 0xeec6, 0x3, 0x101, 0x0, 0x0, 0x2, 0xa, 0x0, 0x364, 0x0, 0x85f7, 0x7, 0x1, 0x7, 0xa2a, 0x8, 0x8, 0x8001, 0x1, 0x2, 0x21, 0xf, 0x6, 0x9, 0x8c, 0x8000, 0xe, 0x0, 0x9, 0xc48, 0x7fffffff, 0x1, 0x9, 0xc8, 0x80000001, 0x68d7, 0x1, 0x8, 0x6, 0xa39, 0x4000, 0x4, 0x4, 0x0, 0x7, 0x2, 0xdf98, 0x3, 0x1, 0x3, 0x80000000, 0x9, 0x0, 0xe66, 0x1, 0x7, 0x4, 0xf, 0xab, 0x8, 0xf996, 0x13e6a1b1, 0xfffffe27, 0x9, 0x1, 0x135, 0x7a7, 0x8cba, 0x4d1, 0x5, 0x9, 0x5, 0x3, 0xac, 0xfffffffb, 0x7, 0x7, 0xc1b2, 0x41, 0x6, 0x0, 0x100, 0x3, 0x7ff, 0x10000, 0xb8d, 0x3, 0x80000001, 0x99ce, 0x7800, 0xd, 0x5d, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x6c0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_HASH={0x8, 0x2, 0x1}, @TCA_U32_SEL={0x4f4, 0x5, {0xe, 0x2, 0x2, 0x9, 0x3, 0xfff8, 0xc1c4, 0x4, [{0xb, 0xffffff30, 0x23, 0x1000}, {0x101, 0x10000, 0x1, 0x8000}, {0x40a, 0x5, 0xbefa, 0x3}, {0x4, 0xcc5, 0x1, 0x27}, {0x6, 0x72, 0x8, 0xfffffffc}, {0x10001, 0x1, 0x0, 0xaa3}, {0x800, 0x8, 0x1, 0x9}, {0x7ff, 0x1000, 0x87, 0x1}, {0x4, 0x1, 0xea, 0x80000001}, {0x100, 0x1e, 0x2, 0x4}, {0xfb97, 0x7, 0x6, 0x100}, {0x3, 0x0, 0x3, 0x400}, {0x9, 0x3, 0x8, 0x9}, {0x63ca, 0x4, 0x2, 0xb}, {0x1, 0x5, 0x6, 0xa}, {0x81, 0x2, 0x8000, 0x7}, {0x7a92, 0xd7f5, 0x2, 0x100}, {0xfffffff7, 0x0, 0x4, 0x5eec0908}, {0x8001, 0x1, 0x7, 0x1}, {0x401, 0x7fffffff, 0x3a7a, 0x8}, {0xffff, 0x3, 0x6, 0x400}, {0x7, 0x3, 0x9, 0x24}, {0x5, 0x10000, 0x5, 0x4}, {0x40, 0x1ff, 0x9, 0x50}, {0x10000, 0x2, 0x7, 0x7fff}, {0xb97a, 0x3, 0x2, 0x8}, {0x45a6, 0x0, 0x1e2c, 0x1}, {0x3, 0xa4, 0x9, 0x2}, {0x7, 0x4, 0x6, 0x8001}, {0x1, 0x44d, 0x7, 0x5}, {0x4, 0x3, 0x6, 0xffff}, {0x0, 0x0, 0x4, 0x3}, {0xdf7, 0x6f0, 0xf}, {0x5, 0x80000001, 0x9, 0x8}, {0x7, 0x1, 0xf234, 0x3}, {0x1, 0x4, 0xcb, 0x3cb}, {0xa3c, 0x3, 0xffffffff, 0x800}, {0x5, 0x7ff, 0xcee6, 0xad07}, {0x8001, 0x7, 0x3, 0x4}, {0x7, 0x1, 0x8001, 0x4}, {0x2, 0x1, 0x2, 0x6a}, {0xe, 0xfffffffc, 0x4, 0xfffffe8d}, {0x80000000, 0xb, 0x6, 0x369e}, {0x1, 0x8, 0x3ff, 0x8}, {0x870, 0x7, 0x7, 0x2}, {0x9, 0x2, 0x2, 0x7cfc}, {0x6, 0x5, 0x5, 0x7ff}, {0x0, 0x7, 0x10000, 0x10000}, {0x5, 0x1, 0x5, 0x4d37}, {0x9, 0xfffffffb, 0x3b09, 0x5}, {0x8, 0x0, 0x6, 0x67}, {0x7, 0x6, 0x1, 0x3}, {0xfffffff6, 0x6, 0x5, 0x61f}, {0x1, 0x1, 0xbfdc, 0x9}, {0xc04c, 0x8, 0x15f, 0xffffffff}, {0x80, 0x1, 0x200, 0x4}, {0xc9f0000, 0x3, 0x1, 0x2}, {0x800, 0x7ff, 0x7, 0x3}, {0xc, 0x9, 0x3, 0x9}, {0x6, 0x80000001, 0x8, 0x9}, {0x80, 0x5, 0x7, 0xfffffffb}, {0x8, 0x0, 0x7f, 0x2}, {0x0, 0x6, 0x8, 0x4}, {0x8, 0x7, 0x2000000, 0x8}, {0x80, 0x70, 0x7a, 0x1}, {0x6, 0x2, 0x47d729bd, 0x9}, {0x4b0, 0xd6, 0x1, 0x7}, {0x38d, 0x9, 0x200, 0x8}, {0x7, 0x8, 0x9, 0x3}, {0x400, 0xf, 0x0, 0x7}, {0x6, 0xb, 0x7, 0x70000000}, {0x9, 0x2, 0x70, 0x5}, {0x6, 0x80000001, 0x0, 0x5}, {0x5, 0x8, 0x5, 0x8}, {0x7, 0x1, 0x8}, {0xe3, 0x9, 0x2, 0x54}, {0xfffffff8, 0x8, 0x2, 0x3}, {0x4, 0x1, 0x415, 0x7f}]}}, @TCA_U32_ACT={0x1a0, 0x7, [@m_ct={0x78, 0x6, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0xd}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2d89e1e53a9f8ae85d1f309608c13c7a"}, @TCA_CT_LABELS={0x14, 0x7, "9e602a9660bb4d4e5c2efc911e760d3c"}, @TCA_CT_ACTION={0x6, 0x3, 0x32}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x124, 0xd, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0xffffffffffffffff, 0x1, 0x7}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x7, 0xe, 0x7, 0x10001}, {0x2, 0xde, 0xf7, 0xff}, {0x1, 0x8}, {0xfff3, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x92, 0x401}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xe, 0x9, 0xd, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x47c, 0x7, 0x3, 0x4}, {0x6, 0x2, 0xf8, 0xb}, {0xfffa, 0x1, 0x1, 0xffffffff}, {0x76, 0x2, 0x3, 0x6}, {0xff, 0x1, 0xda, 0x9}]}]}, {0x78, 0x6, "dd23e626fc406c97e8b2d3a6b723219088c66113e09007d63d0ed45416ca0cfcad50fc3d43e448c136c9e7f792a979581baa52427cd067ea502cd9c259bd6a56f7e2cea13a9ddb63b9aee8985b90c6409a6da19aff87ec5cace711ad33eb106eda93ecd47d7967f37603cd6d618a1a0307815e4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x80000000}, @TCA_U32_MARK={0x10, 0xa, {0xb17, 0x5}}]}}]}, 0xb18}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) 1.660773311s ago: executing program 4 (id=2793): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0xf, 0x2, 0x8000, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7, 0x700, 0x9, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x18, 0x3, 0x3, 0x5, 0x82, 0x1, 0xf, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000540)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@loopback, 0x4e20, 0x6, 0x4e20, 0x3, 0x0, 0xa0, 0xefcc7cec8ce7498b, 0x0, r3, r7}, {0x200, 0x9, 0x8, 0x1000, 0x7, 0x5, 0x4, 0x5}, {0x7fff, 0x9, 0x9, 0x8}, 0x459, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x0, 0x1, 0x6, 0x5, 0x4, 0xffffffff}}, 0xe8) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd250}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x20000084) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) close(r2) (async) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xd, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000000000001d711879000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 1.393572836s ago: executing program 3 (id=2794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x80040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 1.390974269s ago: executing program 4 (id=2795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x1}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x25, 0x319, 0x70bd2d, 0x8000, {0x5}, [@typed={0x8, 0x105, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc844}, 0x24044004) r4 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{}, r7, 0x2, @inherit={0x58, &(0x7f0000000300)={0x0, 0x2, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0xb]}}, @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000b00)={{}, r7, 0x6, @unused=[0xffffffffffff0f0c, 0x2, 0x8, 0x6], @name="59d0d7adb30e50a4f9fde3c7edeede132b1367e8081137a1fa6a20816ea5d490b2dbc3227ae4d002a514c5fa01bf544f9d46150b79f5dcceeacd4a922c9239eb656ff2b1d6bd37cb4e0025e156ffc646a1ba6fe3e45fb2a84ea92f136c47445d3ee40b8dac3e3ed7067f9ce7a80a44d161260f2ab1f2b6bebf64d80c85c655ad0de0d743c1aef3495ec9ed999c156ac0358d5aa0602afa093e943cfac45b6568f8dc827682289080a21704a57507ccb7ed15227ebbc6878210ac8e801d4abd1408389ed2db7d981370d1267effcd33d4e56e90a6bd9a0cb85dad162f47fea4e2f432f0e125456bf8e73da06d536f0862275fad07f9dc918085d649cf57590df52f0ed7ab9103ecd2035eca6965782cf10b6fc1608cbee6fc9b6d82da9b08b27f95ccf057aefac653eba1894fd355cbeef7e965acb0887056756fd4bf72be7900e40b63a15b33fd4a99d535526e1809a11104610415e6b7842ae6e6d957c78453ae254879a305710f214dcb472508d4c9a5e6c24eed43180b85ea9ab217e8b69c819dba609e33ee23586606d3912cb9b7ccc07dc2c2685b59ff2945bc18df445ca57b47f1e4d913227e24c07a0b91219850465e4318d2b09e54441dda24f7c534230b5a8f7695f005fff8d2952aa9070a86850a5af78b869c19610cda8f30835dd633550ba64ad6b7e5ddeb06cf213382e7d5da7a573c42f3345f4c22cecf2ab526c311ee50d81c3f5b3ab8b7a7e39aab17c4e193560a4a5d7fdb7186a8851f09ff35dd7c9d6a0e2651a48e0d384768f2a28bcd56914fa4bc45d2cd867d188569ea4207777ab995cafeb1007da53597b9f3c9a1f1e0169cbc86a8c72e426ab26271e9b11513668ab0810eaed3c736dab067150e518adba76b7a41cf39ecfa9986a568093d32be46be204be49c726b3853e296a934567a01d8f1a3f93366cb171f27bf715380fa33a959240b9cbcdf26e516145f2b50978162ccad382dc150ee607c5cd30b8157a9b61df12cc5e569c9275b33360c822c54b069d805585b7f5615eb5ec8cb08ebd5e56607fba9eff9f1b8ea31d4b535a154144c21d8af6135892c5f694b5ca3e7bde40b3905c22a9a8717ca4841ccb4d75a2ceceabbd50264f8a3e4b696bd11ef1ebb2ea5597054dc5a057790db9b17aa236cd468d4d50cdc2a5d24926cf29bfd488bfae53f20f6857badc8974901540b3a1ba0488158d7b22ac7c7cb7433f5cce9a01b51112da76e5cbed233493dd3f962261d04e949db7ab5707c576cbc4b512e920c0391a28fb8e890700b14bac5a314bb2df40a575aeb6b1c5f4638046853c59aae26f6674b6f6c282488c3863a377e5e903ffe63634133d50b5f8d0231c2a7a3af97f45d35961a93473faac04e99622fa0b8a443ae9b054ac51693d53f7050ad1770ac9785153723d568218b346344d50fabc31389345597333223b98e49c4d2380d9ce44083cdda72bdad642f5385112928132ab9f0cfaa2325d8b862a5dc5a25bf7fe57f0a6f7f28ee108e49978c381d3b80e9a1d7393038cd9b82e6ed610949c06ea3f6405f1132ff0dc42eddf17deb47080ef0203aa170d98599d9704b965659ff283c725e428ba85ecb3e402a687c8dd7bab3c6785cf3afafe6a8e220b4cbac122191446d58fb4aaefe0cef0e7365da8a0ebb1522d2d377838f735b6d136d2e71b08df2a45ee60137191b05104c42765538d2fed2de11d69ed6edc4e8006c3e13c69a3ef19aea19b118ded92d21e57ed1e158ce1cc0fb507cdd7e9558827a855416aee6efe8e16e4aea4f4149415010a312639d345ee247bca285670d9efa1a4880f3b0196cab935d745110ab9080703a5d342fe4493745c82ebcd90aa30255eef89382172add59315ae5b65646332a17db64d6205bdef0ba18791e7df23f18e56fe3938f24620d82d1233a01ae2b226fd0d9806cbe7b7e5cb1abebc2fcb6f10932a8773805e9b2a53a71349c3780112e028d341542f822666fba5dfb590ed6fe2b960dccf0ecce4ac790cc4ef41ca0811efebba191eb683c49fc547b0858a5fa809336c2ea6a1c79d79aad770e5bee874962b8b96c2a5a352ce505a52c9e54a4fca62ebca4115a1371cf50eb06045588ee404faf6ef257d5fc6a0c6c3a257621619a405f8dcb100a42809351867785ddaf0119034f2f1973b23d15dbf8684677ef82d0c558e7a5cef7da04c69ddef87eacc1268524cc39958f36f8b35b2775ce70f44fc22b89e10617c81e09aa5ca6989c9499cddc40712e71cb35636db6dfc29df09cf9f6c4ff7bee7cbdf48c9e032c6ea4382ac35685c6111be70d39bbc806b053a65bdf7c28e38b0431fdeb24c91bc32277225b2ac16a08df4e8fc2f600f6ae0dfdb43d3108b0af07469519948ebf9f03d03e04bd885131b4f2d698b58a43785e5dcdd491f82c6b27edd1674f60b3eba1ced732c4f0b65248e543cd675b17c3bbc0fa45148826736c106d22b9750e57c31e8baf54c141bc54f004b6b216771932ada8aab8a055e2ec787fd114af84dd76bc1332044e9f7e9deea7beb4e9356aa2a678e95166328fb74e621e6fbd7e49ee55aed72e867cbbbcc20433dcf1be18ebb2c16f3e7d527468641998daf857263f100fbe7c05bf85ad20a18330b0bc46838482ae4b8b5b7eb21576b47d5af2253a25fbdb3d80a20156895ceea7e7841f1ebda5d656b4f91721c7778daaf6263bdf37f0922544579f640fd4ff4012c2af453aa200b55b1c4fbe3594c2ec0edb5b852d58922eeb2129ce8539d5317afea23392f4a0123f59746bb5a002ba245a1cf9cb1c4953edaad757eae9875959935b62d9d3c1e56a2b2887e51cc4de965ea4f8d103f2677bf8e0d168697bf8b7a1a5658f0e777e9f88d289a2e52156343476d4d33f9312f4ea51366881d8760f30181338a67e4f7e263a2b14fd02ad3c3297225c12a344869318945d7a007213ba2578aafac03242f74c0ca7c9088964dffe689a21b3c6147abc80d59e3f0ffc59f1669e9ddbce86483f18fea618090d60bd6086d3b1c7bf3d99948e0ddefbf54a74f5007ee3810b777c051c273ae626934546a3e27210ec432f10d4229f0378661a8ba26379742b5c1fbe6eba30a5d9ae57491217e271e4cde78422a24ba1afabccf77f231c92a9d99ee7c212d7d95ee8a2db5e554b25d850755c78ef5ccac1d5aec355aa98723679af0854d60d51751cb6d38535fe8250720a7616a713c4d5456ba1ac0e34fb182a00276782fd09b757a476a394ccffcfd03dc4603a9aac9aad93d3a2a8d08c3f60123e07cfd03929fad1e7ea6b6b6e05d06f1f6fe2655ec5ffee581da1272b6afa0028027f3476816b7d44035a4e8274ff4b3c115e7b1f007d12ac1045d9541cf66635ffa6b3ee93d9cfae7ad0a2296e05e52ebfbd5b023e780364d96f2518fa4ff5e8f7ad7d9b793f38caa4d7ad69fdc7343e094f032ca53e7ff8071321f06360ac93296dfd975b9ea52b9a60df7f33b1093f60f1eae1621f32dbcbc1626dcd637ffcfbd620a693d5e5f2f25a609d34ab2f2844b0b9be5d7e07608135abff1ff0713cd4069a52f0fdb5e6b3e7d0ddc9d6debedd53161f142462f07585ea599f9f30400bd99421a030ca98fa3f3d1f1d42f885603cb378075a8a376a43a60b59443bf26562f5bf07b7a75ff0ebfbbe3616b7fc288f282acc855daabaac50d5992d58543c33c1fcbc69f8bf5c0f09a2244bcc69917d78eb1827d00d537bd9ed0b4689ee2132b4b0547652e6eba457cd3e6e2cceb6d81dc21facec0855f81f204fa830fa2bc26b9734d69b5f767cb3acac12e45362f72090559fb7e3c4650af0614ad4db0712d8680ca4a71919bbda356a20e08132697cf9f14c0544c9752e66c773ca08e678fbf842207fb8af7c8822ab67f80e0ad9d115f108cbe570d6dc6c14b0b04c4f7e97df52a3c4ab42f34697434e00465f730912b90a8857492d5bfb39e8944c780df9efce6b6d750758f7cf26862453e3577a44cc6d2749bb16d1e6f9bb29bb9738161261a936e98cb6697f5ccfa0b4e2c12cb794b57afc09885d3137e51f0bd235e19d468259e2e0b92fa048a4a46ffc4ff89642270ba4ce900b21cc247233eb8f863042bd9d73a11f7aa9bd480be929bbde4f5de74af58ebc31972e51ad349e871147bcf093d774c06625f1bec7a0dd91203097222fb8019da81ea7ac3be6d3976ea1fbd3e3bb3d12e77eefad86e5398331d9e51e50b75ef20ff62bd155e028e5570fd2c0fb7f156b9f9d6bada189c5417b397045845928d4948372a14fefbb87754b5429d370bd1e3fda3448efba9b53ab3d1ed19ccbbf64e4a9f7f0e22ab35c0a64b15f3523b728ac8fad4328f43e62ef5c0f014739366ac5c533a6831f2a03fd0e19b25f1aa41cb3059229e36d6c51f774906809b71e38b58870ce0b74ba7c131db4499b2ee3da66270815a4fc5fe955f5c2a873cf68cb13ce4079e4af48917198c60cc006e40bb02864c5aad36f9f078e8acdf408b7482bd4edf93a704b1e7ae50704473ae0897b68ade54dd5c4c6b1ddcd1a9b4e83c49600524a1304d49e8ddc9a8fe28bc80b3fcc697316cd644b8286c9cbe0363617fff2c5799ba817ee33854f38043c5cb6c04e65589f0bb846a777bbbfc95078348cef459ca7cd4c30d9af100ba5fad5dc80419657f4b2e6db18cbea0c0c97d5c70ea0240824f6cc74bbb7e1c5ebb68699994ec9d87114932f56fbb1b7a3fe98e68f7402774b0f6d395a317c8fb9f6b5bf8d712d2bb58ef9fb19ee17e597d0f08189c8b6427533ec03314a1754144cab65cff8d771156be7c48fcd273da1e55b3fd6a0109c611c0a59d92461301d7b27609a395465ccc806c3d53e05ee567b1cb5f2a9e48d80420c86b16938c0b780be20c788a38ead1d3178d60f9b810051c33ebbb24ecdf11f0aa564f76026fd7b07b365dea5f7b91054cc34cf04a634b01cd32d0cf1dca6025deb7bc543673f8256b0c0bd3ad062c464f63e906d9a2d92f98e4def9f128c3d92c98d64684f973d10de5a7eae0d3c855e6d6170d23fc3a7987efa27eed13dc749557d139ecdc74aaabd46fe4dabed5e7afd4da0d5327d4aa89590c41f1eb99af9eb3f28bcac37b86a3784fa21a3011151e873cb7701e8e1cb4a4200127c1a70156f476d18ea5555ee305bbd11a5fc108698414f1cb41fd3b18f0ec7e8b99bc8c7f229412c5d60590e08ce83e338919f7ffab5e825a86954e6ed26cde0d885f6cb04d2eff06509fb98cfbb84d2c8fbec9303fa41d14278d6b974a93756af03689945958b5937b0e42b2a65c3c8f2c951085f9a27a0d4f666471a81a6578aa602a1c565fbdcc4ac18bbcdfc91d19caf15a1657906933770f6ca8185adb67541aee3dedc4595b4d50e1c74f6fbd4ece7500443a75a7e039d1a02a7dfadc9c1121123ec4afb00b4cb8bb2d74a649a049fa213ccdb47df7f04fd61aaaf0c77e953054cad839dd9d96fda0069e4f51dbf2a71e0a163fbe785fcafedf727c997c9714d412a9883d61cfbbebe4b8bd857072f014c2d3a317925822a1dfdd080c5359bc884414f2215076aa56d4aded8a05acd2ff81deedaf8cf5cf9409d7cd0fa2f48ffd9d92b3277de9e1f13735f53f995667ef2e5f3e9d48836f97d219871c647fce8f0c54e1296e68f243b886c80a86c1aea2c2912bdc8fa1c0b2301ca75602a0fd4abe284fb57be4f1dc7e154d60b2352adc57703"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000ec0)={{r6}, r7, 0x0, @inherit={0x60, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000000000003000000000000ea05560000000000000002000000000000002a0000000000000032cc503f000000000600008000000074714a941ac6354600830700000000000002000000000000000104000001000000000000000000000005f51026d2f5fb347b85dd9259c0d6cb538e99c432f89370a0b8345df381f30815f071094bd64d8f14c3ac4784217698101a27b59c4d85c8be50f523027da0"]}, @subvolid=0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "bbb406ebc2fdf5e5d50380d46fe763f2"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001500)={{r4}, r7, 0x2, @inherit={0x68, &(0x7f0000000200)={0x0, 0x4, 0x6, 0x6, {0x4, 0x80, 0x8, 0x8000, 0x9}, [0x5, 0x7, 0x2, 0x4]}}, @devid=r8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan0\x00'}) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000000000001d711872000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.388605226s ago: executing program 1 (id=2796): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000200)=0x9, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) (async) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x3, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000500)='batadv0\x00', 0x10) (async) sendto$inet6(r3, &(0x7f0000000140)="62b73a5d96a46f78a7fa362e1dfee34d1dc5f27cb95caa13bf894218f907c8e2f0d747f5fcfee87431e459056381fa8cf23809275c52a027518bf6020552b17439beb1d3cd0e6581a7c06c7dea17d934cb4b", 0x52, 0x3b04, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0xa, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={r6, 0x34}, &(0x7f00000001c0)=0x8) 1.339431917s ago: executing program 2 (id=2797): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x801, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @mcast1}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r4], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200f19}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x8) (async) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="62f1201a2a20776d00"], 0x9) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@RTM_NEWNSID={0x2c, 0x58, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40412}, 0x100000000000000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESOCT=r9], 0x1c}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) (async) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"/7000], 0x1b58}}, 0x0) 1.17350408s ago: executing program 2 (id=2798): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000d20b06000500", @ANYRES16], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = epoll_create1(0x0) r9 = socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000080)={0x90000004}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001140)=ANY=[@ANYBLOB="6903573cccb5f9d62d7c6c4fd342675dbf9c90ad57beb2a5b242b623a1a805b4d038d13e17b02642", @ANYBLOB="ae1618c2f3a1ecec89390ca7775cba6bc1f15c7948485df4ba43f859e798b7083b6f4e43940b67aaf32b9bdd512a3a", @ANYBLOB="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", @ANYRESHEX=r7, @ANYBLOB="ea941cf14edad409ee6346a266fe829c5283e7c3d46a6876f4639d61a1"], 0xd40}}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r10, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x4b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404a044}, 0x80) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.140637108s ago: executing program 4 (id=2799): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) recvmmsg$unix(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000001ec0)}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001f00)=""/12, 0xc}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002440)=""/7, 0x7}, {&(0x7f0000002480)=""/3, 0x3}], 0x2}}], 0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xea5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x801670806bbf220e}, 0x4810) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x5, &(0x7f0000000600)=[{0x1010, 0x0, 0x0, "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"}, {0x28, 0x0, 0x0, "8192fbea2c061381413fc28cb06b4e988dc486c74cfc"}, {0x18, 0x0, 0x0, "4fdf1ab71595"}, {0x18, 0x0, 0x0, "f47d"}, {0xe0, 0x0, 0x0, "06435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca0"}], 0x1148}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000001d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8801}, 0x20000810) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) writev(r8, &(0x7f0000000380)=[{0x0}, {&(0x7f0000002ac0)='l', 0x1}], 0x2) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 1.126989543s ago: executing program 0 (id=2800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000002000085000000ad000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 1.073632823s ago: executing program 1 (id=2801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x1, 0x20, 0x80000000, 0x6a4, {{0x5, 0x4, 0x3, 0x3, 0x14, 0x66, 0x0, 0x10, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}}}}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="997425bd7000fbdbdf25150000004c00e1d70d0001007564703a73797a3200000000380004001400010600000024000007740000000000000000200002000a004e24000000060000000000000000000000000000000140000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="997425bd7000fbdbdf25150000004c00e1d70d0001007564703a73797a3200000000380004001400010600000024000007740000000000000000200002000a004e24000000060000000000000000000000000000000140000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 953.080764ms ago: executing program 0 (id=2802): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x448, 0x20a, 0x278, 0x448, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0xe}, 0x0, 0x220, 0x288, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x2, 0x5, 0xd3, 0x8, 0xb01, 0x1988}}, @common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e24, 0x4e23], [0x0, 0x0, 0x684, 0x8, 0x8000, 0x1, 0x1, 0x80, 0x8, 0x10001, 0xd, 0xd979, 0x8, 0x3, 0xcb, 0x8, 0x2040, 0x8, 0x2, 0x8, 0xafa, 0x8, 0x9, 0x2, 0x2, 0x8, 0x3ff, 0x2, 0xe7b, 0x8, 0x9, 0x80000001, 0x3, 0x4e41, 0x8, 0x8, 0x2, 0x1000, 0x6, 0x200, 0x3, 0x7f, 0x7, 0x6, 0x0, 0x2, 0x4, 0x7, 0x8000, 0x9, 0x6, 0x9, 0x7, 0xb, 0x565, 0x8001, 0x4, 0x6, 0xc72, 0x81, 0xffff, 0x3ff, 0x6, 0x7fff], 0x4, [{0x9, 0x3, 0x6}, {0xa0, 0x40, 0xe}, {0x8, 0xff, 0x5}, {0x5, 0x1, 0x10}], 0x4, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r2, &(0x7f0000000700), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 878.017145ms ago: executing program 2 (id=2803): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x28, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001002500000008000a00", @ANYRES32=r2], 0x24}}, 0x40850) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r2) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7080000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990041000000600000000800270002000000080026009a03"], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x2, 0x8}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000091) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000040)={r10, 0xf}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000800000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09000000000000550901000201000095000000000000002500feff0800000018140000", @ANYRES32=r7, @ANYBLOB="0000000000000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 797.399279ms ago: executing program 1 (id=2804): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x7, 0x4, 0x1002}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x2, 0x0}, 0x8) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x3, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0xc, 0x5, 0xe, 0x18, 0xfffffffffffffff0}], &(0x7f00000003c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x3, 0x3}, 0x10, r4, r5, 0x8, 0x0, &(0x7f0000000540)=[{0x2, 0x4, 0xc, 0x1}, {0x1, 0x5, 0x2, 0x9}, {0x5, 0x2, 0x1, 0x4}, {0x4, 0x1, 0x5, 0x5}, {0x3, 0x3, 0xf, 0x4}, {0x3, 0x3, 0x10, 0x1}, {0x1, 0x1, 0x0, 0x2}, {0x0, 0x2, 0xb, 0x7}], 0x10, 0x4503}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010027bd7000fbdbdfa500000000", @ANYRES32=r3, @ANYBLOB="104e0600016201002c001280110001bccb72696467655f736c617665000000001400058006001f0001000000080022"], 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x2c, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1c0000, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r10, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000300)={r7, &(0x7f0000000040)='bond\x00', 0x619000, &(0x7f0000000200)={@align=0x4, {0x1, 0x4, 0x8, 0x4}}, 0x100, &(0x7f0000000240), &(0x7f00000002c0)=0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x14, 0x2, 0x3, 0x5, 0x1100, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000004800000226bd3000fbdbdf250a007800", @ANYRES32=r11, @ANYBLOB="ff01000014000100fc00000000000000000000000000000014ee0000fe8800000000000000000000fc010000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x10) 795.703457ms ago: executing program 0 (id=2805): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0xf4, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xe0, 0x1, [@m_simple={0x34, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x7, 0x6, "e5875d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xa8, 0xf, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xcf2, 0x10000004, 0x0, 0x7}, 0xffffffffffffffff}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x400, 0x2, 0xffffffffffffffff, 0x0, 0x8}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf4}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) unshare(0x400) socket(0x40000000015, 0x5, 0x0) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 630.815536ms ago: executing program 2 (id=2806): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a9", 0x24}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x8, 0x0, &(0x7f0000000680)) write$cgroup_devices(r4, 0x0, 0xffdd) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x24000803}, 0x24000804) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2002, 0x40000002, 0x4, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) 607.687336ms ago: executing program 1 (id=2807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x17}, 0x94) 404.47116ms ago: executing program 1 (id=2808): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @local, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r8, 0x84}, 0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r8, 0x84}, 0x8) 404.25248ms ago: executing program 3 (id=2809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x10000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x10000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) 369.047263ms ago: executing program 2 (id=2810): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001740)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r4, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, 0x3e9, 0x2, 0x70bd26, 0x25dfdbfb, {0x30, 0x0, 0x1, r4, 0xb, 0x8, 0x4, 0x9, 0x0, 0x2, 0x4}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x40000) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) accept4(r5, &(0x7f0000001680)=@xdp, &(0x7f0000001700)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x74ad3233ae3fe54b}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r8}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) r12 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x1, 0x12, r12, 0xbd3d9000) writev(r10, &(0x7f0000002600)=[{&(0x7f0000000040)="0c210fb85a17eddec4703077f6bf5835174c2a8639d04856f2c588bb009ddf3a20c27d951e6e1c65a256d596f9041acc7d52f92addea9019cd2adbc40d94f8e5a0843ee8473eeb83c819b73ec2efef5a4ec7099c6eaf05cf3f48a5b518b2d16c51dfd30047e073e299b89648", 0x6c}, {&(0x7f0000000140)="ee25f1897b1c18fed7e4ef4f026b7c872d0c591f170f4b4246257ae96734d45321c5780c6a44878c11dab712867b978ae848a8f9e4eaed93bb46eba103510a79d5de1c5dd6d788cd2e02da813ac840404651530892934cf7da5510f70548b26abd2cd93be315516d2f5a79117a36cb806eb0c24acebe4ba1ff9599b07ef2ffebd7b9334b2266a0145c597c5eb810fd8c8d5ce341ca5ee72a721f58b4dec7531f4f5ed120cc121bdbc6a3d62df08bac9f041f9c9ee24ffb266afca1fa3a3fa2531a6b476a619824b0be0606574121b1eb01116bf29c0726d748da2e9c15d99546416269cd330a91f2a6e9011c8b16c60ccd21df3fb7c9827bb242", 0xfa}, {&(0x7f0000000240)="66bb2cc131911811db94916caa09a2d1c947c25456d9db25f4167028deec0e4d69339f4ad1e02bed71faa66a5a6b5a307daf5a155410236329a67cb508b2da5c60d33687989b50385cd22d4ee5", 0x4d}, {&(0x7f0000000440)="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", 0xde1}], 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) 208.132042ms ago: executing program 4 (id=2811): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x80000000a, 0xffffffb4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 160.11876ms ago: executing program 3 (id=2812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000002000085000000ad000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010000}, 0x94) 1.427245ms ago: executing program 0 (id=2813): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'wlan0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x50, 0x1, 0x0, 0x1, [@generic="18d9f2f12c5619044e94652b820c9033f881f341cefc2a49d63635f3b79e440fd9ed44c08213a15c6593c2fd8b89fe757712a7406172bdcba90fe0765c4e0e4e165639cdeb6732f1d7f80b81"]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@typed={0xc, 0xe2, 0x0, 0x0, @u64=0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x50, 0x1, 0x0, 0x1, [@generic="18d9f2f12c5619044e94652b820c9033f881f341cefc2a49d63635f3b79e440fd9ed44c08213a15c6593c2fd8b89fe757712a7406172bdcba90fe0765c4e0e4e165639cdeb6732f1d7f80b81"]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@typed={0xc, 0xe2, 0x0, 0x0, @u64=0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 0s ago: executing program 3 (id=2814): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000, 0x1}}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004500090000000000000100f102000000080002"], 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ': attribute type 1 has an invalid length. [ 253.661962][T10136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1156'. [ 253.732433][T10121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.824045][T10144] FAULT_INJECTION: forcing a failure. [ 253.824045][T10144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.846431][T10144] CPU: 1 UID: 0 PID: 10144 Comm: syz.0.1158 Not tainted syzkaller #0 PREEMPT(full) [ 253.846463][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.846473][T10144] Call Trace: [ 253.846481][T10144] [ 253.846488][T10144] dump_stack_lvl+0xe8/0x150 [ 253.846514][T10144] should_fail_ex+0x412/0x560 [ 253.846540][T10144] _copy_from_user+0x2d/0xb0 [ 253.846564][T10144] generic_map_update_batch+0x648/0x990 [ 253.846594][T10144] ? __pfx_generic_map_update_batch+0x10/0x10 [ 253.846616][T10144] ? __fget_files+0x2a/0x420 [ 253.846642][T10144] ? __pfx_generic_map_update_batch+0x10/0x10 [ 253.846663][T10144] bpf_map_do_batch+0x39b/0x630 [ 253.846687][T10144] __sys_bpf+0x7c1/0x950 [ 253.846713][T10144] ? __pfx___sys_bpf+0x10/0x10 [ 253.846750][T10144] ? ksys_write+0x242/0x270 [ 253.846784][T10144] ? __pfx_ksys_write+0x10/0x10 [ 253.846812][T10144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.846829][T10144] __x64_sys_bpf+0x7c/0x90 [ 253.846853][T10144] do_syscall_64+0x15f/0xf80 [ 253.846873][T10144] ? trace_irq_disable+0x3b/0x140 [ 253.846898][T10144] ? clear_bhb_loop+0x40/0x90 [ 253.846919][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.846935][T10144] RIP: 0033:0x7f993599cdd9 [ 253.846952][T10144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.846967][T10144] RSP: 002b:00007f99368db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.846987][T10144] RAX: ffffffffffffffda RBX: 00007f9935c16090 RCX: 00007f993599cdd9 [ 253.846999][T10144] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 253.847011][T10144] RBP: 00007f99368db090 R08: 0000000000000000 R09: 0000000000000000 [ 253.847026][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.847036][T10144] R13: 00007f9935c16128 R14: 00007f9935c16090 R15: 00007ffd7540ab68 [ 253.847064][T10144] [ 253.940993][T10149] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1157'. [ 254.678042][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1164'. [ 254.869096][T10184] tipc: Enabled bearer , priority 0 [ 254.888949][T10192] tipc: Enabling of bearer rejected, already enabled [ 254.897346][T10184] syzkaller0: entered promiscuous mode [ 254.908088][T10184] syzkaller0: entered allmulticast mode [ 254.977590][T10187] FAULT_INJECTION: forcing a failure. [ 254.977590][T10187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.998726][T10187] CPU: 1 UID: 0 PID: 10187 Comm: syz.3.1165 Not tainted syzkaller #0 PREEMPT(full) [ 254.998752][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.998762][T10187] Call Trace: [ 254.998769][T10187] [ 254.998777][T10187] dump_stack_lvl+0xe8/0x150 [ 254.998803][T10187] should_fail_ex+0x412/0x560 [ 254.998829][T10187] _copy_from_user+0x2d/0xb0 [ 254.998854][T10187] sock_do_ioctl+0x195/0x320 [ 254.998883][T10187] ? __pfx_sock_do_ioctl+0x10/0x10 [ 254.998904][T10187] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 254.998941][T10187] sock_ioctl+0x5c6/0x7f0 [ 254.998967][T10187] ? __pfx_sock_ioctl+0x10/0x10 [ 254.998991][T10187] ? __fget_files+0x2a/0x420 [ 254.999011][T10187] ? __fget_files+0x3a0/0x420 [ 254.999029][T10187] ? __fget_files+0x2a/0x420 [ 254.999051][T10187] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.999076][T10187] ? __pfx_sock_ioctl+0x10/0x10 [ 254.999101][T10187] __se_sys_ioctl+0xfc/0x170 [ 254.999126][T10187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.999147][T10187] do_syscall_64+0x15f/0xf80 [ 254.999165][T10187] ? trace_irq_disable+0x3b/0x140 [ 254.999190][T10187] ? clear_bhb_loop+0x40/0x90 [ 254.999212][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.999230][T10187] RIP: 0033:0x7f2dee99cdd9 [ 254.999247][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.999274][T10187] RSP: 002b:00007f2def8b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.999294][T10187] RAX: ffffffffffffffda RBX: 00007f2deec16090 RCX: 00007f2dee99cdd9 [ 254.999306][T10187] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 254.999317][T10187] RBP: 00007f2def8b2090 R08: 0000000000000000 R09: 0000000000000000 [ 254.999328][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.999338][T10187] R13: 00007f2deec16128 R14: 00007f2deec16090 R15: 00007ffed9cb3528 [ 254.999371][T10187] [ 255.385229][T10202] netlink: 560 bytes leftover after parsing attributes in process `syz.1.1168'. [ 255.468359][T10192] lo speed is unknown, defaulting to 1000 [ 255.475958][T10183] tipc: Resetting bearer [ 255.517990][T10183] tipc: Disabling bearer [ 255.602377][T10192] lo speed is unknown, defaulting to 1000 [ 255.693985][T10192] lo speed is unknown, defaulting to 1000 [ 255.722234][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.196479][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 256.223720][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1174'. [ 256.563887][T10248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'. [ 256.582301][T10251] net_ratelimit: 19 callbacks suppressed [ 256.582321][T10251] IPVS: sed: FWM 3 0x00000003 - no destination available [ 256.583820][T10192] infiniband sqz0: set down [ 256.612542][ T24] lo speed is unknown, defaulting to 1000 [ 256.620099][T10192] infiniband sqz0: added lo [ 256.651536][T10192] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 256.663114][T10192] infiniband sqz0: Couldn't open port 1 [ 256.695912][T10192] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 256.712884][T10192] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 256.741929][T10192] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 256.896669][T10192] RDS/IB: sqz0: added [ 256.907301][T10192] smc: adding ib device sqz0 with port count 1 [ 256.928948][T10192] smc: ib device sqz0 port 1 has no pnetid [ 256.953447][ T24] lo speed is unknown, defaulting to 1000 [ 256.980753][T10192] lo speed is unknown, defaulting to 1000 [ 257.342397][T10267] FAULT_INJECTION: forcing a failure. [ 257.342397][T10267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.387158][T10267] CPU: 1 UID: 0 PID: 10267 Comm: syz.0.1182 Not tainted syzkaller #0 PREEMPT(full) [ 257.387182][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.387193][T10267] Call Trace: [ 257.387200][T10267] [ 257.387208][T10267] dump_stack_lvl+0xe8/0x150 [ 257.387231][T10267] should_fail_ex+0x412/0x560 [ 257.387256][T10267] _copy_from_user+0x2d/0xb0 [ 257.387280][T10267] generic_map_update_batch+0x648/0x990 [ 257.387312][T10267] ? __pfx_generic_map_update_batch+0x10/0x10 [ 257.387342][T10267] ? __fget_files+0x2a/0x420 [ 257.387370][T10267] ? __pfx_generic_map_update_batch+0x10/0x10 [ 257.387391][T10267] bpf_map_do_batch+0x39b/0x630 [ 257.387414][T10267] __sys_bpf+0x7c1/0x950 [ 257.387441][T10267] ? __pfx___sys_bpf+0x10/0x10 [ 257.387481][T10267] ? ksys_write+0x242/0x270 [ 257.387508][T10267] ? __pfx_ksys_write+0x10/0x10 [ 257.387535][T10267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.387554][T10267] __x64_sys_bpf+0x7c/0x90 [ 257.387579][T10267] do_syscall_64+0x15f/0xf80 [ 257.387598][T10267] ? trace_irq_disable+0x3b/0x140 [ 257.387622][T10267] ? clear_bhb_loop+0x40/0x90 [ 257.387644][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.387662][T10267] RIP: 0033:0x7f993599cdd9 [ 257.387679][T10267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.387694][T10267] RSP: 002b:00007f99368fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.387714][T10267] RAX: ffffffffffffffda RBX: 00007f9935c15fa0 RCX: 00007f993599cdd9 [ 257.387727][T10267] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 257.387738][T10267] RBP: 00007f99368fc090 R08: 0000000000000000 R09: 0000000000000000 [ 257.387749][T10267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.387759][T10267] R13: 00007f9935c16038 R14: 00007f9935c15fa0 R15: 00007ffd7540ab68 [ 257.387789][T10267] [ 257.710342][T10192] lo speed is unknown, defaulting to 1000 [ 257.727617][T10276] netlink: 'syz.1.1183': attribute type 12 has an invalid length. [ 258.177222][T10192] lo speed is unknown, defaulting to 1000 [ 258.569814][T10301] __nla_validate_parse: 2 callbacks suppressed [ 258.569833][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1192'. [ 258.586536][T10303] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 258.594364][T10303] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 258.629413][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1192'. [ 258.725627][T10192] lo speed is unknown, defaulting to 1000 [ 258.788389][T10316] netlink: 'syz.1.1195': attribute type 4 has an invalid length. [ 258.873146][T10319] FAULT_INJECTION: forcing a failure. [ 258.873146][T10319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.921704][T10319] CPU: 1 UID: 0 PID: 10319 Comm: syz.2.1196 Not tainted syzkaller #0 PREEMPT(full) [ 258.921726][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.921735][T10319] Call Trace: [ 258.921744][T10319] [ 258.921750][T10319] dump_stack_lvl+0xe8/0x150 [ 258.921774][T10319] should_fail_ex+0x412/0x560 [ 258.921794][T10319] _copy_from_user+0x2d/0xb0 [ 258.921814][T10319] generic_map_update_batch+0x69a/0x990 [ 258.921839][T10319] ? __pfx_generic_map_update_batch+0x10/0x10 [ 258.921855][T10319] ? __fget_files+0x2a/0x420 [ 258.921876][T10319] ? __pfx_generic_map_update_batch+0x10/0x10 [ 258.921892][T10319] bpf_map_do_batch+0x39b/0x630 [ 258.921909][T10319] __sys_bpf+0x7c1/0x950 [ 258.921930][T10319] ? __pfx___sys_bpf+0x10/0x10 [ 258.921964][T10319] ? rcu_is_watching+0x15/0xb0 [ 258.921984][T10319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.922000][T10319] __x64_sys_bpf+0x7c/0x90 [ 258.922027][T10319] do_syscall_64+0x15f/0xf80 [ 258.922042][T10319] ? trace_irq_disable+0x3b/0x140 [ 258.922062][T10319] ? clear_bhb_loop+0x40/0x90 [ 258.922079][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.922093][T10319] RIP: 0033:0x7fbb7959cdd9 [ 258.922107][T10319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.922120][T10319] RSP: 002b:00007fbb7a408028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.922136][T10319] RAX: ffffffffffffffda RBX: 00007fbb79815fa0 RCX: 00007fbb7959cdd9 [ 258.922146][T10319] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 258.922154][T10319] RBP: 00007fbb7a408090 R08: 0000000000000000 R09: 0000000000000000 [ 258.922163][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.922171][T10319] R13: 00007fbb79816038 R14: 00007fbb79815fa0 R15: 00007ffd6292cb08 [ 258.922192][T10319] [ 259.266237][T10328] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 259.296853][T10329] erspan1: entered allmulticast mode [ 259.525337][T10335] netlink: 'syz.2.1202': attribute type 21 has an invalid length. [ 259.537826][T10328] bond2: entered promiscuous mode [ 259.543281][T10328] bond2: entered allmulticast mode [ 259.548886][T10328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.554111][T10335] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1202'. [ 259.557268][T10192] lo speed is unknown, defaulting to 1000 [ 259.603935][T10335] netlink: 'syz.2.1202': attribute type 4 has an invalid length. [ 259.625222][T10335] netlink: 'syz.2.1202': attribute type 5 has an invalid length. [ 259.651368][T10335] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1202'. [ 259.753601][T10350] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 259.859836][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 259.919256][T10350] bond3: entered promiscuous mode [ 259.946092][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 259.981500][T10350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.094901][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1204'. [ 260.114625][T10350] bond3: (slave bridge7): making interface the new active one [ 260.115378][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 260.126453][T10350] bridge7: entered promiscuous mode [ 260.140726][T10350] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 260.368142][T10382] FAULT_INJECTION: forcing a failure. [ 260.368142][T10382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.403150][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 260.408133][T10382] CPU: 1 UID: 0 PID: 10382 Comm: syz.2.1212 Not tainted syzkaller #0 PREEMPT(full) [ 260.408164][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.408175][T10382] Call Trace: [ 260.408182][T10382] [ 260.408189][T10382] dump_stack_lvl+0xe8/0x150 [ 260.408215][T10382] should_fail_ex+0x412/0x560 [ 260.408242][T10382] _copy_from_user+0x2d/0xb0 [ 260.408266][T10382] generic_map_update_batch+0x648/0x990 [ 260.408297][T10382] ? __pfx_generic_map_update_batch+0x10/0x10 [ 260.408318][T10382] ? __fget_files+0x2a/0x420 [ 260.408344][T10382] ? __pfx_generic_map_update_batch+0x10/0x10 [ 260.408365][T10382] bpf_map_do_batch+0x39b/0x630 [ 260.408389][T10382] __sys_bpf+0x7c1/0x950 [ 260.408414][T10382] ? __pfx___sys_bpf+0x10/0x10 [ 260.408456][T10382] ? ksys_write+0x242/0x270 [ 260.408482][T10382] ? __pfx_ksys_write+0x10/0x10 [ 260.408509][T10382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.408528][T10382] __x64_sys_bpf+0x7c/0x90 [ 260.408551][T10382] do_syscall_64+0x15f/0xf80 [ 260.408569][T10382] ? trace_irq_disable+0x3b/0x140 [ 260.408594][T10382] ? clear_bhb_loop+0x40/0x90 [ 260.408614][T10382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.408631][T10382] RIP: 0033:0x7fbb7959cdd9 [ 260.408648][T10382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.408662][T10382] RSP: 002b:00007fbb7a3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.408682][T10382] RAX: ffffffffffffffda RBX: 00007fbb79816090 RCX: 00007fbb7959cdd9 [ 260.408694][T10382] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 260.408705][T10382] RBP: 00007fbb7a3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.408716][T10382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.408726][T10382] R13: 00007fbb79816128 R14: 00007fbb79816090 R15: 00007ffd6292cb08 [ 260.408753][T10382] [ 260.445263][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 260.904619][T10406] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 260.936294][T10406] block nbd1: not configured, cannot reconfigure [ 261.982100][T10450] FAULT_INJECTION: forcing a failure. [ 261.982100][T10450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.005133][T10450] CPU: 1 UID: 0 PID: 10450 Comm: syz.4.1228 Not tainted syzkaller #0 PREEMPT(full) [ 262.005159][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.005169][T10450] Call Trace: [ 262.005175][T10450] [ 262.005183][T10450] dump_stack_lvl+0xe8/0x150 [ 262.005208][T10450] should_fail_ex+0x412/0x560 [ 262.005233][T10450] _copy_from_user+0x2d/0xb0 [ 262.005258][T10450] generic_map_update_batch+0x69a/0x990 [ 262.005288][T10450] ? __pfx_generic_map_update_batch+0x10/0x10 [ 262.005308][T10450] ? __fget_files+0x2a/0x420 [ 262.005335][T10450] ? __pfx_generic_map_update_batch+0x10/0x10 [ 262.005356][T10450] bpf_map_do_batch+0x39b/0x630 [ 262.005378][T10450] __sys_bpf+0x7c1/0x950 [ 262.005403][T10450] ? __pfx___sys_bpf+0x10/0x10 [ 262.005442][T10450] ? ksys_write+0x242/0x270 [ 262.005467][T10450] ? __pfx_ksys_write+0x10/0x10 [ 262.005487][T10450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.005498][T10450] __x64_sys_bpf+0x7c/0x90 [ 262.005512][T10450] do_syscall_64+0x15f/0xf80 [ 262.005523][T10450] ? trace_irq_disable+0x3b/0x140 [ 262.005537][T10450] ? clear_bhb_loop+0x40/0x90 [ 262.005549][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.005559][T10450] RIP: 0033:0x7fd200f9cdd9 [ 262.005569][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.005578][T10450] RSP: 002b:00007fd201d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.005590][T10450] RAX: ffffffffffffffda RBX: 00007fd201215fa0 RCX: 00007fd200f9cdd9 [ 262.005597][T10450] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 262.005603][T10450] RBP: 00007fd201d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 262.005609][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.005615][T10450] R13: 00007fd201216038 R14: 00007fd201215fa0 R15: 00007fff3c3874b8 [ 262.005630][T10450] [ 262.206031][T10451] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 262.250211][T10451] bond4 (unregistering): Released all slaves [ 262.390047][T10453] ip6_vti0: left promiscuous mode [ 262.427239][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.549530][T10472] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 262.609165][T10453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.715370][T10453] macvtap0: left promiscuous mode [ 262.854553][T10453] geneve2: left promiscuous mode [ 262.875350][T10453] vxlan0: left promiscuous mode [ 262.931840][T10472] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 263.086340][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.104071][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.113240][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.122422][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.133193][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.138148][T10446] lo speed is unknown, defaulting to 1000 [ 263.149246][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.170501][T10496] tipc: Enabling of bearer rejected, failed to enable media [ 263.200278][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.224086][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.292443][T10505] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 263.460357][T10505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.512578][T10516] xt_l2tp: v2 doesn't support IP mode [ 263.606302][T10510] veth5: entered promiscuous mode [ 263.834083][T10527] __nla_validate_parse: 6 callbacks suppressed [ 263.834101][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'. [ 263.880853][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'. [ 263.926606][T10527] erspan0: entered promiscuous mode [ 263.980459][T10527] erspan0: left promiscuous mode [ 264.714115][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'. [ 264.762284][T10556] nbd: illegal input index -1113835520 [ 265.214578][T10581] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1257'. [ 265.525601][T10596] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 265.692277][T10596] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.850516][T10612] netlink: 'syz.1.1266': attribute type 13 has an invalid length. [ 265.871266][T10600] bond5: (slave geneve3): making interface the new active one [ 265.882744][T10600] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 266.011246][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.019977][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.072773][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.087399][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.209875][ T139] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.250899][ T139] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.357192][ T139] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.381090][ T139] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.413904][ T139] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.434973][ T139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.445025][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1272'. [ 266.456196][ T139] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.472719][ T139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.533752][ T139] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.544886][ T139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.557950][ T139] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.567692][ T139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.635167][T10598] team0: Failed to send options change via netlink (err -105) [ 266.660363][T10598] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 266.672519][T10598] team0: Port device netdevsim1 removed [ 266.768256][T10643] netlink: 'syz.3.1274': attribute type 4 has an invalid length. [ 266.929373][T10647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.038340][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 268.993503][T10618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.193468][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1287'. [ 269.347568][T10702] netlink: 'syz.1.1291': attribute type 10 has an invalid length. [ 269.358410][T10705] netlink: 'syz.0.1290': attribute type 23 has an invalid length. [ 269.401949][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 269.416228][T10702] team_slave_0: left promiscuous mode [ 269.442345][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 269.456756][T10702] ` (unregistering): Port device team_slave_0 removed [ 269.464430][T10702] team_slave_1: left promiscuous mode [ 269.478055][T10714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.490073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.519507][T10702] ` (unregistering): Port device team_slave_1 removed [ 269.687071][T10714] IPVS: sh: FWM 3 0x00000003 - no destination available [ 269.701501][T10727] lo speed is unknown, defaulting to 1000 [ 269.708077][T10714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.717851][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 269.726323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.132244][T10700] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 270.152980][T10700] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 270.631158][T10772] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 270.707631][T10766] bond3: option min_links: invalid value (18446744073709551612) [ 270.727161][T10766] bond3: option min_links: allowed values 0 - 2147483647 [ 270.741439][T10766] bond3 (unregistering): Released all slaves [ 270.779971][T10755] syzkaller0: entered promiscuous mode [ 270.786617][T10755] syzkaller0: entered allmulticast mode [ 270.906118][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 271.570630][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.609710][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.639831][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.845335][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 272.256775][T10814] net_ratelimit: 2 callbacks suppressed [ 272.256794][T10814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.456202][T10834] syzkaller0: entered promiscuous mode [ 272.473120][T10834] syzkaller0: entered allmulticast mode [ 272.485491][T10838] netlink: 'syz.2.1327': attribute type 4 has an invalid length. [ 272.512781][T10834] tipc: Started in network mode [ 272.515936][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 272.520442][T10834] tipc: Node identity fff, cluster identity 10 [ 272.533718][T10834] tipc: Node number set to 4095 [ 272.540204][T10834] tipc: Cannot configure node identity twice [ 272.770405][T10850] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 272.836113][T10850] bond4 (unregistering): Released all slaves [ 272.878056][T10860] pim6reg1: entered promiscuous mode [ 272.887432][T10860] pim6reg1: entered allmulticast mode [ 272.955729][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1334'. [ 273.363090][T10890] geneve2: entered promiscuous mode [ 273.457049][T10894] netlink: 'syz.0.1343': attribute type 4 has an invalid length. [ 273.465761][T10895] netlink: 'syz.0.1343': attribute type 4 has an invalid length. [ 273.558018][T10899] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 273.574403][T10899] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1344'. [ 273.584117][T10899] NCSI netlink: No device for ifindex 0 [ 273.649629][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.658033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.803869][T10911] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1350'. [ 273.839811][T10912] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1349'. [ 274.105555][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.115728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.125989][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.135043][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.148692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.325693][T10933] __nla_validate_parse: 1 callbacks suppressed [ 274.325773][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 274.348242][T10933] netlink: 550 bytes leftover after parsing attributes in process `syz.3.1357'. [ 274.358406][T10933] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1357'. [ 274.368341][T10933] veth0_to_bond: default FDB implementation only supports local addresses [ 274.379737][T10933] netlink: 'syz.3.1357': attribute type 21 has an invalid length. [ 274.387687][T10933] netlink: 'syz.3.1357': attribute type 22 has an invalid length. [ 274.396174][T10933] netlink: 'syz.3.1357': attribute type 23 has an invalid length. [ 274.404224][T10933] netlink: 'syz.3.1357': attribute type 25 has an invalid length. [ 274.412426][T10933] netlink: 'syz.3.1357': attribute type 26 has an invalid length. [ 274.421181][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1357'. [ 274.523818][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'. [ 274.636974][T10937] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1359'. [ 274.646749][T10937] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1359'. [ 274.950275][T10959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1366'. [ 274.994959][T10921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.006028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.052586][T10963] netlink: 'syz.3.1369': attribute type 2 has an invalid length. [ 275.084295][T10963] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1369'. [ 275.148369][T10953] lo speed is unknown, defaulting to 1000 [ 275.594005][T10983] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1373'. [ 276.784412][ T57] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.826775][ T57] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.847228][ T57] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.870961][ T57] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.549197][T11063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.190102][T11105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.442434][T11121] syzkaller0: entered promiscuous mode [ 278.557052][T11131] netlink: 'syz.0.1410': attribute type 21 has an invalid length. [ 278.565242][T11131] netlink: 'syz.0.1410': attribute type 20 has an invalid length. [ 279.481448][T11168] tipc: Enabled bearer , priority 0 [ 279.495139][T11168] syzkaller0: entered promiscuous mode [ 279.508528][T11168] syzkaller0: entered allmulticast mode [ 279.540926][T11167] tipc: Resetting bearer [ 279.601484][T11167] tipc: Disabling bearer [ 279.774331][T11179] __nla_validate_parse: 215 callbacks suppressed [ 279.774352][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 279.796726][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 280.007322][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'. [ 280.200883][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1435'. [ 280.375848][T11206] tipc: Enabled bearer , priority 0 [ 280.385546][ T29] audit: type=1800 audit(1777527517.085:4): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1437" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1447 res=0 errno=0 [ 280.523330][T11206] syzkaller0: entered promiscuous mode [ 280.529742][T11206] syzkaller0: entered allmulticast mode [ 280.535994][T11206] tipc: Resetting bearer [ 280.552123][T11205] tipc: Resetting bearer [ 281.093838][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 281.157968][T11233] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1443'. [ 282.463719][T11205] tipc: Disabling bearer [ 282.575009][T11243] netlink: 632 bytes leftover after parsing attributes in process `syz.4.1444'. [ 282.689298][T11245] netlink: 'syz.0.1447': attribute type 2 has an invalid length. [ 282.736650][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 282.774210][T11249] geneve2: entered promiscuous mode [ 282.816079][ T1130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 282.836355][ T1130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 282.871810][ T1130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 282.904323][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 282.985022][T11264] netlink: 'syz.3.1451': attribute type 3 has an invalid length. [ 283.008791][T11264] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1451'. [ 283.102571][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 283.371431][T11283] netlink: ct family unspecified [ 283.391978][T11283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.455008][ T12] nci: nci_rx_work: unknown MT 0x1 [ 283.496269][T11285] bond3: up delay (1168) is not a multiple of miimon (3), value rounded to 1167 ms [ 284.120634][T11277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.454451][T11304] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 284.621397][T11304] bond5: entered promiscuous mode [ 284.627191][T11304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.682241][T11315] bond5: (slave bridge8): making interface the new active one [ 284.691138][T11315] bridge8: entered promiscuous mode [ 284.700344][T11315] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 284.904230][T11328] TCP: TCP_TX_DELAY enabled [ 285.043449][T11345] __nla_validate_parse: 2 callbacks suppressed [ 285.043467][T11345] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1471'. [ 285.060877][T11345] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1471'. [ 285.072037][T11345] netlink: 'syz.0.1471': attribute type 5 has an invalid length. [ 285.080508][T11345] netlink: 'syz.0.1471': attribute type 6 has an invalid length. [ 285.088396][T11345] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1471'. [ 285.240938][T11356] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 285.253393][T11356] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 285.314938][T11359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.407977][T11361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'. [ 285.992774][T11399] openvswitch: netlink: IP tunnel dst address not specified [ 286.324506][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 286.338082][T11424] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1497'. [ 286.390559][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1496'. [ 286.412222][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1496'. [ 286.531545][T11433] netlink: 1712 bytes leftover after parsing attributes in process `syz.3.1499'. [ 286.552481][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 286.563583][T11433] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 286.936553][T11447] bond3: entered promiscuous mode [ 286.942191][T11447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.996813][T11447] bond3 (unregistering): Released all slaves [ 287.744567][T11082] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.811862][T11082] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.855995][T11082] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.897005][T11518] netlink: 'syz.3.1517': attribute type 21 has an invalid length. [ 287.916888][T11082] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.457444][T11551] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.663750][T11551] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.907765][T11551] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.401577][T11592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.774857][T11551] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.871233][T11597] block nbd0: server does not support multiple connections per device. [ 289.882077][T11579] hsr0: entered promiscuous mode [ 289.904219][T11597] block nbd0: shutting down sockets [ 289.915108][T11580] hsr_slave_0: left promiscuous mode [ 289.939811][T11580] hsr_slave_1: left promiscuous mode [ 289.962284][T11580] hsr0 (unregistering): left promiscuous mode [ 290.037112][T11082] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.082323][T11082] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.126495][T11604] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.154308][T11604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.161805][T11604] IPv6: NLM_F_CREATE should be set when creating new route [ 290.169106][T11604] IPv6: NLM_F_CREATE should be set when creating new route [ 290.176333][T11604] IPv6: NLM_F_CREATE should be set when creating new route [ 290.205790][T11604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.251709][T11082] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.263709][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.275110][T11082] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.294901][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.300257][T11608] __nla_validate_parse: 11 callbacks suppressed [ 290.300274][T11608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1541'. [ 290.332351][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.355333][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.355458][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'. [ 290.363729][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.385172][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.396493][T11613] xt_ecn: cannot match TCP bits for non-tcp packets [ 290.416044][T11615] x_tables: duplicate underflow at hook 2 [ 290.428016][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.454178][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.483830][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.516585][T11607] netlink: 'syz.1.1542': attribute type 27 has an invalid length. [ 290.543523][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 290.577385][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 290.588690][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 290.653328][T11617] syzkaller0: entered promiscuous mode [ 290.668595][T11617] syzkaller0: entered allmulticast mode [ 290.965605][T11636] syzkaller0: entered promiscuous mode [ 290.975204][T11636] syzkaller0: entered allmulticast mode [ 291.627897][T10466] IPVS: starting estimator thread 0... [ 291.645100][T11676] lo speed is unknown, defaulting to 1000 [ 291.729287][T11679] IPVS: using max 33 ests per chain, 79200 per kthread [ 292.081082][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 292.250479][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1568'. [ 292.363614][T11714] sctp: [Deprecated]: syz.3.1570 (pid 11714) Use of int in max_burst socket option. [ 292.363614][T11714] Use struct sctp_assoc_value instead [ 292.389941][T11716] netlink: 'syz.1.1571': attribute type 11 has an invalid length. [ 292.530009][T11718] tipc: Enabled bearer , priority 0 [ 292.549402][T11718] syzkaller0: entered promiscuous mode [ 292.561531][T11718] syzkaller0: entered allmulticast mode [ 292.699989][T11719] tipc: Resetting bearer [ 292.742267][T11733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.757552][T11717] tipc: Resetting bearer [ 292.803842][T11717] tipc: Disabling bearer [ 292.836211][T11737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1578'. [ 292.858287][T11737] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1578'. [ 292.909764][T11737] tipc: Invalid UDP bearer configuration [ 292.909822][T11737] tipc: Enabling of bearer rejected, failed to enable media [ 292.925184][T11738] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 293.031767][T11748] lo: left allmulticast mode [ 293.058836][T11748] tunl0: left allmulticast mode [ 293.068743][T11748] gre0: left allmulticast mode [ 293.079187][T11748] gretap0: left allmulticast mode [ 293.088776][T11748] erspan0: left allmulticast mode [ 293.104826][T11748] ip_vti0: left allmulticast mode [ 293.117584][T11748] ip6_vti0: left allmulticast mode [ 293.123220][T11748] sit0: left allmulticast mode [ 293.128351][T11748] ip6tnl0: left allmulticast mode [ 293.134253][T11748] ip6gre0: left allmulticast mode [ 293.139573][T11748] syz_tun: left allmulticast mode [ 293.145292][T11748] ip6gretap0: left allmulticast mode [ 293.155517][T11748] bridge0: left allmulticast mode [ 293.166467][T11748] vcan0: left allmulticast mode [ 293.172400][T11748] bond0: left allmulticast mode [ 293.177534][T11748] team0: left allmulticast mode [ 293.183017][T11748] dummy0: left allmulticast mode [ 293.190749][T11748] nlmon0: left allmulticast mode [ 293.196010][T11748] batadv0: left allmulticast mode [ 293.201744][T11748] vxcan0: left allmulticast mode [ 293.207006][T11748] vxcan1: left allmulticast mode [ 293.212735][T11748] veth0: left allmulticast mode [ 293.217998][T11748] veth1: left allmulticast mode [ 293.223750][T11748] wg0: left allmulticast mode [ 293.229176][T11748] wg1: left allmulticast mode [ 293.234157][T11748] wg2: left allmulticast mode [ 293.239568][T11748] veth0_to_bridge: left allmulticast mode [ 293.245851][T11748] veth1_to_bridge: left allmulticast mode [ 293.252237][T11748] bridge_slave_1: left allmulticast mode [ 293.258180][T11748] veth0_to_bond: left allmulticast mode [ 293.264677][T11748] bond_slave_0: left allmulticast mode [ 293.271347][T11748] veth1_to_bond: left allmulticast mode [ 293.277213][T11748] bond_slave_1: left allmulticast mode [ 293.284241][T11748] veth0_to_team: left allmulticast mode [ 293.290537][T11748] team_slave_0: left allmulticast mode [ 293.296298][T11748] veth1_to_team: left allmulticast mode [ 293.302602][T11748] team_slave_1: left allmulticast mode [ 293.308369][T11748] veth0_to_batadv: left allmulticast mode [ 293.315053][T11748] batadv_slave_0: left allmulticast mode [ 293.321300][T11748] veth1_to_batadv: left allmulticast mode [ 293.327333][T11748] batadv_slave_1: left allmulticast mode [ 293.333798][T11748] xfrm0: left allmulticast mode [ 293.339356][T11748] veth0_to_hsr: left allmulticast mode [ 293.345145][T11748] hsr_slave_0: left allmulticast mode [ 293.351227][T11748] veth1_to_hsr: left allmulticast mode [ 293.357084][T11748] hsr_slave_1: left allmulticast mode [ 293.367497][T11748] veth1_vlan: left allmulticast mode [ 293.373547][T11748] vlan0: left allmulticast mode [ 293.379019][T11748] vlan1: left allmulticast mode [ 293.384273][T11748] macvlan0: left allmulticast mode [ 293.390153][T11748] macvlan1: left allmulticast mode [ 293.395697][T11748] ipvlan0: left allmulticast mode [ 293.401425][T11748] ipvlan1: left allmulticast mode [ 293.406725][T11748] veth0_vlan: left allmulticast mode [ 293.412713][T11748] veth1_macvtap: left allmulticast mode [ 293.418997][T11748] veth0_macvtap: left allmulticast mode [ 293.424859][T11748] macvtap0: left allmulticast mode [ 293.430774][T11748] macsec0: left allmulticast mode [ 293.436117][T11748] geneve0: left allmulticast mode [ 293.441804][T11748] geneve1: left allmulticast mode [ 293.447179][T11748] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 293.454815][T11748] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 293.462614][T11748] bridge1: entered promiscuous mode [ 293.468157][T11748] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 293.476690][T11748] bond1: entered promiscuous mode [ 293.482396][T11748] mac80211_hwsim hwsim18 wlan3: entered promiscuous mode [ 293.490062][T11748] netdevsim netdevsim3 eth0: entered promiscuous mode [ 293.497161][T11748] netdevsim netdevsim3 eth1: entered promiscuous mode [ 293.504577][T11748] netdevsim netdevsim3 eth2: entered promiscuous mode [ 293.513206][T11748] netdevsim netdevsim3 eth3: entered promiscuous mode [ 293.535119][T11748] ip6tnl1: entered promiscuous mode [ 293.548730][T11748] bridge2: entered promiscuous mode [ 293.561874][T11748] ipip0: entered promiscuous mode [ 293.575717][T11748] bond2: entered promiscuous mode [ 293.590636][T11748] vlan3: entered promiscuous mode [ 293.605578][T11748] veth2: entered promiscuous mode [ 293.616588][T11748] veth3: entered promiscuous mode [ 293.628805][T11748] vti60: entered promiscuous mode [ 293.641406][T11748] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 293.659026][T11748] mac80211_hwsim hwsim24 wlan4: entered promiscuous mode [ 293.680127][T11748] bridge3: entered promiscuous mode [ 293.846429][T11765] team0: left allmulticast mode [ 293.875213][T11765] team_slave_0: left allmulticast mode [ 293.903322][T11765] team_slave_1: left allmulticast mode [ 293.913133][T11771] sctp: [Deprecated]: syz.1.1588 (pid 11771) Use of int in max_burst socket option. [ 293.913133][T11771] Use struct sctp_assoc_value instead [ 293.930749][T11765] team0: left promiscuous mode [ 293.952961][T11765] team_slave_0: left promiscuous mode [ 293.960259][T11765] team_slave_1: left promiscuous mode [ 293.966147][T11765] bridge0: port 4(team0) entered disabled state [ 293.983292][T11765] bridge_slave_0: left allmulticast mode [ 293.989560][T11765] bridge_slave_0: left promiscuous mode [ 293.995416][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.007146][T11762] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1584'. [ 294.017212][T11765] bridge_slave_1: left allmulticast mode [ 294.023148][T11765] bridge_slave_1: left promiscuous mode [ 294.031728][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.045811][T11765] .`: (slave bond_slave_0): Releasing backup interface [ 294.057844][T11765] .`: (slave bond_slave_1): Releasing backup interface [ 294.070200][T11765] team0: Port device team_slave_0 removed [ 294.079899][T11765] team0: Port device team_slave_1 removed [ 294.086312][T11765] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.107168][T11782] tipc: Enabled bearer , priority 0 [ 294.154241][T11774] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 294.231047][T11774] tipc: Resetting bearer [ 294.775461][T11819] syzkaller0: entered promiscuous mode [ 294.791037][T11819] syzkaller0: entered allmulticast mode [ 294.944595][T11836] lo speed is unknown, defaulting to 1000 [ 295.155578][T11844] tipc: Enabling of bearer rejected, already enabled [ 295.186861][T11844] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 295.341318][T11847] lo speed is unknown, defaulting to 1000 [ 295.361291][T11847] lo speed is unknown, defaulting to 1000 [ 295.379381][T11847] lo speed is unknown, defaulting to 1000 [ 295.386353][T11847] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 295.418678][T11847] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 295.436481][T11847] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 295.458949][T11847] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 295.493111][T11847] lo speed is unknown, defaulting to 1000 [ 295.505611][T11847] lo speed is unknown, defaulting to 1000 [ 295.513530][T11847] lo speed is unknown, defaulting to 1000 [ 295.521786][T11847] lo speed is unknown, defaulting to 1000 [ 295.531685][T11847] lo speed is unknown, defaulting to 1000 [ 295.540523][T11847] lo speed is unknown, defaulting to 1000 [ 295.943149][T11870] __nla_validate_parse: 7 callbacks suppressed [ 295.943170][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 296.084126][T11870] vlan2: entered promiscuous mode [ 296.103594][T11870] veth1: entered promiscuous mode [ 296.303461][T11883] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.1616'. [ 296.396408][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 296.409170][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1617'. [ 296.429643][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 296.441298][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1617'. [ 296.544171][T11895] tipc: Enabled bearer , priority 0 [ 296.576130][T11888] syzkaller0: entered promiscuous mode [ 296.595865][T11899] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1621'. [ 296.611422][T11888] syzkaller0: entered allmulticast mode [ 296.862070][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 296.886148][T11907] can: request_module (can-proto-0) failed. [ 297.121910][T11892] tipc: Resetting bearer [ 297.182925][T11886] tipc: Resetting bearer [ 297.281479][T11886] tipc: Disabling bearer [ 297.316276][T11918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1625'. [ 297.523809][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1628'. [ 298.300356][T11955] lo speed is unknown, defaulting to 1000 [ 298.557301][T11963] tipc: Enabled bearer , priority 0 [ 298.605489][T11963] syzkaller0: entered promiscuous mode [ 298.628612][T11963] syzkaller0: entered allmulticast mode [ 299.203067][T11963] tipc: Resetting bearer [ 299.217642][T11955] lo speed is unknown, defaulting to 1000 [ 299.341587][T11977] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 299.426529][T11958] tipc: Resetting bearer [ 299.484070][T11958] tipc: Disabling bearer [ 299.944504][T12011] syzkaller0: entered promiscuous mode [ 299.957928][T12011] syzkaller0: entered allmulticast mode [ 300.351628][T12023] IPVS: sh: FWM 3 0x00000003 - no destination available [ 300.371336][T12019] lo speed is unknown, defaulting to 1000 [ 300.760707][T12048] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 300.969148][T12059] __nla_validate_parse: 6 callbacks suppressed [ 300.969166][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1666'. [ 301.011194][T12019] lo speed is unknown, defaulting to 1000 [ 301.018407][T12052] lo speed is unknown, defaulting to 1000 [ 301.347035][T12072] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1672'. [ 301.375491][T12072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.464738][T12061] lo speed is unknown, defaulting to 1000 [ 301.714538][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 301.717187][T12061] lo speed is unknown, defaulting to 1000 [ 301.751975][T12052] lo speed is unknown, defaulting to 1000 [ 301.958361][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 302.314189][T12101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1680'. [ 302.523862][T12116] validate_nla: 31 callbacks suppressed [ 302.523882][T12116] netlink: 'syz.2.1686': attribute type 3 has an invalid length. [ 302.667152][T12120] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 302.742158][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 302.751452][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 302.766087][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 302.775742][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 303.357200][T12146] openvswitch: netlink: Missing valid actions attribute. [ 303.392830][T12146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.752756][T12164] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1700'. [ 304.391003][T12190] xfrm0: left promiscuous mode [ 304.405659][T12190] xfrm0: left allmulticast mode [ 304.433657][T12190] veth3: left promiscuous mode [ 304.451444][T12190] hsr1: left promiscuous mode [ 304.467902][T12190] ip6tnl2: left allmulticast mode [ 304.484673][T12190] bond1: left promiscuous mode [ 304.501332][T12190] erspan2: left promiscuous mode [ 304.521070][T12190] bond1: left allmulticast mode [ 304.541817][T12190] erspan2: left allmulticast mode [ 304.565053][T12190] geneve2: left promiscuous mode [ 304.609239][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 304.636864][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 304.642814][T12204] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 304.658704][T12194] lo speed is unknown, defaulting to 1000 [ 304.659162][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 304.677511][T12204] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 304.695662][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.177998][T12225] xt_TCPMSS: Only works on TCP SYN packets [ 305.475943][T12194] lo speed is unknown, defaulting to 1000 [ 305.476022][T12225] bridge_slave_1: left allmulticast mode [ 305.513497][T12225] bridge_slave_1: left promiscuous mode [ 305.529318][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.568833][T12225] bridge_slave_0: left allmulticast mode [ 305.595205][T12225] bridge_slave_0: left promiscuous mode [ 305.620370][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.504635][T12253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.527543][T12253] __nla_validate_parse: 6 callbacks suppressed [ 306.527562][T12253] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1720'. [ 306.594066][T12252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.630998][T12257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.924570][T12268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1724'. [ 308.055587][T12319] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1735'. [ 308.095353][T12319] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 308.441677][T12325] xt_HMARK: proto mask must be zero with L3 mode [ 308.907441][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 308.946439][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'. [ 308.986832][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'. [ 309.101433][T12357] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 309.125133][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1747'. [ 309.133301][T12362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1749'. [ 309.378171][T12379] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 309.387533][T12379] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 309.396525][T12379] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 312.102268][T12358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.215900][T12390] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1754'. [ 312.238949][T12391] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1754'. [ 312.290492][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 312.342967][T12391] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 312.370751][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 312.420318][T12400] syzkaller1: entered promiscuous mode [ 312.427987][T12400] syzkaller1: entered allmulticast mode [ 312.480746][T12403] bridge0: port 2(vlan4) entered blocking state [ 312.491621][T12403] bridge0: port 2(vlan4) entered disabled state [ 312.498790][T12403] vlan4: entered allmulticast mode [ 312.504300][T12403] geneve0: entered allmulticast mode [ 312.517722][T12408] netlink: 884 bytes leftover after parsing attributes in process `syz.0.1760'. [ 312.519199][T12403] vlan4: entered promiscuous mode [ 312.673773][T12416] tipc: Enabling of bearer rejected, already enabled [ 312.797867][T12422] netlink: 'syz.1.1765': attribute type 10 has an invalid length. [ 312.836604][T12418] xt_CT: No such helper "syz0" [ 313.044330][T12430] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1766'. [ 313.466427][T12459] netlink: 'syz.0.1773': attribute type 4 has an invalid length. [ 313.491206][T12461] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 313.663768][T12468] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 313.676388][T12468] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 313.863609][T12474] gretap0: Device is already in use. [ 313.896647][T12476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.183417][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1784'. [ 314.236061][T12494] lo: left promiscuous mode [ 314.262222][T12494] tunl0: left promiscuous mode [ 314.271154][T12494] gre0: left promiscuous mode [ 314.281548][T12494] gretap0: left promiscuous mode [ 314.289281][T12494] erspan0: left promiscuous mode [ 314.296692][T12494] ip_vti0: left promiscuous mode [ 314.303623][T12494] ip6_vti0: left promiscuous mode [ 314.311078][T12494] sit0: left promiscuous mode [ 314.323073][T12494] ip6tnl0: left promiscuous mode [ 314.330624][T12494] ip6gre0: left promiscuous mode [ 314.339818][T12494] syz_tun: left promiscuous mode [ 314.347175][T12494] ip6gretap0: left promiscuous mode [ 314.364208][T12494] bridge0: left promiscuous mode [ 314.378357][T12494] vcan0: left promiscuous mode [ 314.386986][T12494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.398082][T12494] team0: left promiscuous mode [ 314.417670][T12494] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.432017][T12494] dummy0: left promiscuous mode [ 314.441017][T12494] nlmon0: left promiscuous mode [ 314.449885][T12494] batadv0: left promiscuous mode [ 314.470833][T12494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.494288][T12494] vxcan0: left promiscuous mode [ 314.498626][T12509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1787'. [ 314.509680][T12494] vxcan1: left promiscuous mode [ 314.516158][T12494] veth0: left promiscuous mode [ 314.522945][T12494] veth1: left promiscuous mode [ 314.630293][T12494] wg0: left promiscuous mode [ 314.638805][T12494] wg1: left promiscuous mode [ 314.652246][T12494] wg2: left promiscuous mode [ 314.660044][T12494] veth0_to_bridge: left promiscuous mode [ 314.674300][T12494] veth1_to_bridge: left promiscuous mode [ 314.681828][T12494] bridge_slave_1: left promiscuous mode [ 314.688014][T12494] veth0_to_bond: left promiscuous mode [ 314.694680][T12494] bond_slave_0: left promiscuous mode [ 314.700853][T12494] veth1_to_bond: left promiscuous mode [ 314.707340][T12494] bond_slave_1: left promiscuous mode [ 314.713644][T12494] veth0_to_team: left promiscuous mode [ 314.720205][T12494] team_slave_0: left promiscuous mode [ 314.726726][T12494] veth1_to_team: left promiscuous mode [ 314.733556][T12494] team_slave_1: left promiscuous mode [ 314.739749][T12494] veth0_to_batadv: left promiscuous mode [ 314.746512][T12494] batadv_slave_0: left promiscuous mode [ 314.753725][T12494] veth1_to_batadv: left promiscuous mode [ 314.760959][T12494] batadv_slave_1: left promiscuous mode [ 314.767527][T12494] xfrm0: left promiscuous mode [ 314.773726][T12494] veth0_to_hsr: left promiscuous mode [ 314.780276][T12494] hsr_slave_0: left promiscuous mode [ 314.786056][T12494] veth1_to_hsr: left promiscuous mode [ 314.792726][T12494] hsr_slave_1: left promiscuous mode [ 314.798812][T12494] veth1_vlan: left promiscuous mode [ 314.806617][T12494] vlan0: left promiscuous mode [ 314.812298][T12494] vlan1: left promiscuous mode [ 314.818047][T12494] veth1_vlan: entered promiscuous mode [ 314.824038][T12494] macvlan0: left promiscuous mode [ 314.830426][T12494] macvlan1: left promiscuous mode [ 314.836500][T12494] ipvlan0: left promiscuous mode [ 314.843307][T12494] ipvlan1: left promiscuous mode [ 314.849786][T12494] veth1_macvtap: left promiscuous mode [ 314.856879][T12494] veth0_macvtap: left promiscuous mode [ 314.863526][T12494] veth0_macvtap: entered promiscuous mode [ 314.869735][T12494] macvtap0: left promiscuous mode [ 314.876029][T12494] veth1_macvtap: entered promiscuous mode [ 314.882303][T12494] macsec0: left promiscuous mode [ 314.891211][T12494] bridge0: port 2(vlan4) entered blocking state [ 314.897678][T12494] bridge0: port 2(vlan4) entered forwarding state [ 314.905609][T12494] geneve1: left promiscuous mode [ 314.912018][T12494] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 314.919788][T12494] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 314.935609][T12492] tap0: tun_chr_ioctl cmd 1074025677 [ 314.941695][T12492] tap0: linktype set to 778 [ 314.962908][ T12] bridge0: port 1(vlan2) entered blocking state [ 314.969492][ T12] bridge0: port 1(vlan2) entered forwarding state [ 314.997961][T12483] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 315.021195][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.039690][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.048037][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.144969][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.380456][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1789'. [ 315.494795][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 316.023320][T12543] lo speed is unknown, defaulting to 1000 [ 316.483869][T12544] lo speed is unknown, defaulting to 1000 [ 316.501369][T12543] lo speed is unknown, defaulting to 1000 [ 316.695514][T12573] netlink: 'syz.0.1804': attribute type 6 has an invalid length. [ 316.922921][ T139] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.944693][ T139] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.962588][ T139] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.972004][ T139] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.075361][T12544] lo speed is unknown, defaulting to 1000 [ 317.160312][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.317533][T12591] IPv6: sit2: Disabled Multicast RS [ 317.530503][T12614] __nla_validate_parse: 9 callbacks suppressed [ 317.530517][T12614] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1814'. [ 317.547536][T12614] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1814'. [ 317.556876][T12614] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1814'. [ 317.911284][T12624] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 317.922688][T12624] bridge9: entered allmulticast mode [ 317.995715][T12627] netlink: 'syz.2.1818': attribute type 4 has an invalid length. [ 318.030976][T12625] netlink: 'syz.2.1818': attribute type 4 has an invalid length. [ 318.265797][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1820'. [ 318.530171][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 318.621781][T12649] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.634544][T12649] bond4: (slave bond5): Enslaving as an active interface with an up link [ 318.882428][T12665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1829'. [ 318.883876][T12663] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 318.914631][T12663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1828'. [ 319.196437][T12679] xt_hashlimit: max too large, truncated to 1048576 [ 319.435718][T12686] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 319.732199][T12705] netlink: 'syz.4.1843': attribute type 39 has an invalid length. [ 319.999566][T12716] syzkaller0: entered promiscuous mode [ 320.005178][T12716] syzkaller0: entered allmulticast mode [ 320.029009][T12723] geneve2: entered promiscuous mode [ 320.042640][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1847'. [ 320.149075][T12717] veth5: entered allmulticast mode [ 320.176584][T12717] bond6: (slave veth5): Enslaving as an active interface with an up link [ 320.206725][T12732] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 320.458742][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1855'. [ 320.514761][T12747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1856'. [ 320.579255][T12747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.382507][T12767] xt_CT: No such helper "syz1" [ 323.280111][T12792] __nla_validate_parse: 3 callbacks suppressed [ 323.280129][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1867'. [ 323.414229][T12795] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 323.503777][T12795] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.651120][T12803] bond6: (slave veth9): Enslaving as an active interface with a down link [ 323.753575][T12795] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.775540][T12795] bond6: (slave batadv1): making interface the new active one [ 323.799981][T12795] batadv1: entered promiscuous mode [ 323.809894][T12795] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 324.071487][T12826] rdma_op ffff888037b699f0 conn xmit_rdma 0000000000000000 [ 324.090606][T12807] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 324.124516][T12807] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 324.308391][T12838] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1881'. [ 324.388355][T12839] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 324.388355][T12839] 3UH5rBn [ 324.501460][T12849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.725675][T12859] FAULT_INJECTION: forcing a failure. [ 324.725675][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 324.755746][T12859] CPU: 0 UID: 0 PID: 12859 Comm: syz.1.1888 Not tainted syzkaller #0 PREEMPT(full) [ 324.755772][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.755783][T12859] Call Trace: [ 324.755790][T12859] [ 324.755798][T12859] dump_stack_lvl+0xe8/0x150 [ 324.755825][T12859] should_fail_ex+0x412/0x560 [ 324.755853][T12859] should_failslab+0xa8/0x100 [ 324.755881][T12859] __kmalloc_noprof+0xe8/0x760 [ 324.755909][T12859] ? security_sk_alloc+0x52/0x360 [ 324.755941][T12859] security_sk_alloc+0x52/0x360 [ 324.755969][T12859] sk_prot_alloc+0x101/0x210 [ 324.755989][T12859] ? sk_alloc+0x27/0x390 [ 324.756011][T12859] sk_alloc+0x3a/0x390 [ 324.756035][T12859] bpf_prog_test_run_skb+0x415/0x2260 [ 324.756077][T12859] ? __fget_files+0x3a0/0x420 [ 324.756098][T12859] ? __fget_files+0x2a/0x420 [ 324.756123][T12859] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 324.756144][T12859] bpf_prog_test_run+0x2c7/0x340 [ 324.756165][T12859] __sys_bpf+0x643/0x950 [ 324.756191][T12859] ? __pfx___sys_bpf+0x10/0x10 [ 324.756231][T12859] ? ksys_write+0x242/0x270 [ 324.756258][T12859] ? __pfx_ksys_write+0x10/0x10 [ 324.756286][T12859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.756306][T12859] __x64_sys_bpf+0x7c/0x90 [ 324.756356][T12859] do_syscall_64+0x15f/0xf80 [ 324.756376][T12859] ? trace_irq_disable+0x3b/0x140 [ 324.756400][T12859] ? clear_bhb_loop+0x40/0x90 [ 324.756423][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.756440][T12859] RIP: 0033:0x7f2fe959cdd9 [ 324.756458][T12859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.756473][T12859] RSP: 002b:00007f2fea382028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.756493][T12859] RAX: ffffffffffffffda RBX: 00007f2fe9815fa0 RCX: 00007f2fe959cdd9 [ 324.756506][T12859] RDX: 000000000000002c RSI: 0000200000000000 RDI: 000000000000000a [ 324.756517][T12859] RBP: 00007f2fea382090 R08: 0000000000000000 R09: 0000000000000000 [ 324.756528][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.756537][T12859] R13: 00007f2fe9816038 R14: 00007f2fe9815fa0 R15: 00007ffc36610618 [ 324.756567][T12859] [ 325.032815][T12858] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1889'. [ 325.113402][T12863] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 325.140522][T12863] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 326.003803][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1906'. [ 326.525784][T12913] syzkaller0: entered promiscuous mode [ 326.553012][T12913] syzkaller0: entered allmulticast mode [ 326.675389][T12945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1912'. [ 326.980127][T12947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 327.129025][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 329.386667][T12955] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 329.554767][T12964] bond3: entered allmulticast mode [ 329.581721][T12964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.650138][T12975] dvmrp9: entered allmulticast mode [ 329.752131][T12981] netlink: 'syz.4.1922': attribute type 4 has an invalid length. [ 329.835782][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'. [ 329.998246][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 330.104364][T13006] veth0: entered promiscuous mode [ 330.173851][T12999] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1928'. [ 330.221363][T12997] veth0: left promiscuous mode [ 330.498542][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 330.543861][T13037] netlink: 'syz.3.1938': attribute type 16 has an invalid length. [ 330.561026][T13037] netlink: 3044 bytes leftover after parsing attributes in process `syz.3.1938'. [ 330.926531][T13050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.045445][T13057] openvswitch: netlink: Tunnel attr 63 out of range max 16 [ 331.157301][T13070] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 331.191571][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 331.261943][T13070] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 331.326668][T13074] netlink: 'syz.2.1947': attribute type 39 has an invalid length. [ 331.538957][T13091] ipt_ECN: cannot use operation on non-tcp rule [ 331.561250][T13090] ipt_ECN: cannot use operation on non-tcp rule [ 331.731682][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 331.813069][T13103] ip6erspan0: left allmulticast mode [ 331.819496][T13103] ip6gretap2: left allmulticast mode [ 331.822603][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 331.825505][T13103] bond0: left allmulticast mode [ 331.851040][T13103] bridge2: left allmulticast mode [ 331.860465][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 331.864305][T13103] bond3: left allmulticast mode [ 331.883394][T13105] netlink: 'syz.1.1954': attribute type 13 has an invalid length. [ 331.902446][T13103] veth5: left allmulticast mode [ 331.945349][ T1049] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.964514][ T1049] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.024181][T13117] netlink: 'syz.0.1962': attribute type 1 has an invalid length. [ 332.035483][ T1049] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.060117][T13113] tipc: Enabling of bearer rejected, already enabled [ 332.068254][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 332.237972][ T1049] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.268291][T13118] bond7: (slave gretap3): making interface the new active one [ 332.278421][T13118] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 332.290204][T13128] xt_TPROXY: Can be used only with -p tcp or -p udp [ 332.510018][T13141] netlink: 'syz.4.1966': attribute type 1 has an invalid length. [ 332.553684][T13141] nbd: couldn't find device at index -427251215 [ 333.154702][T13161] : renamed from bond_slave_0 (while UP) [ 333.168752][T13164] netlink: 'syz.1.1976': attribute type 1 has an invalid length. [ 333.359908][T13169] netlink: 'syz.1.1977': attribute type 7 has an invalid length. [ 333.394494][T13172] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 333.581328][T13184] netlink: 'syz.1.1983': attribute type 1 has an invalid length. [ 333.598332][T13186] tipc: Enabling of bearer rejected, already enabled [ 334.200853][T13203] ip6gre1: entered promiscuous mode [ 334.218643][T13203] ip6gre1: entered allmulticast mode [ 334.346343][T13203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.499075][T13210] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.752790][T13222] bond4: option lacp_rate: invalid value (128) [ 334.770052][T13222] bond4 (unregistering): Released all slaves [ 334.837913][T13230] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 334.862677][T13231] __nla_validate_parse: 21 callbacks suppressed [ 334.862706][T13231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1993'. [ 335.098851][T11082] batadv1: left promiscuous mode [ 335.260792][T13246] tipc: New replicast peer: 255.255.255.255 [ 335.276942][T13246] tipc: Enabled bearer , priority 10 [ 335.518529][T13253] validate_nla: 2 callbacks suppressed [ 335.518546][T13253] netlink: 'syz.4.2003': attribute type 61 has an invalid length. [ 335.569560][T13253] netlink: 992 bytes leftover after parsing attributes in process `syz.4.2003'. [ 335.939592][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 335.988602][T13257] xt_hashlimit: size too large, truncated to 1048576 [ 336.090260][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 336.942937][T13296] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 337.007499][T13273] syzkaller1: entered promiscuous mode [ 337.020671][T13273] syzkaller1: entered allmulticast mode [ 337.348163][T13316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2020'. [ 337.454686][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'. [ 337.679442][T13334] tipc: Enabling of bearer rejected, already enabled [ 337.843915][T13342] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2025'. [ 337.944728][T13345] netlink: 'syz.3.2028': attribute type 12 has an invalid length. [ 337.972447][T13347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2027'. [ 338.088934][T13345] block nbd1: server does not support multiple connections per device. [ 338.132150][T13345] block nbd1: shutting down sockets [ 338.157017][T13351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2029'. [ 338.208089][T13356] bond8: entered promiscuous mode [ 338.214518][T13356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 338.291183][T13361] netlink: 'syz.3.2031': attribute type 28 has an invalid length. [ 338.395415][T13365] netlink: 'syz.4.2032': attribute type 21 has an invalid length. [ 338.404287][T13365] netlink: 'syz.4.2032': attribute type 6 has an invalid length. [ 338.413542][T13365] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2032'. [ 338.433078][T13365] netlink: 'syz.4.2032': attribute type 1 has an invalid length. [ 338.515005][T13367] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 338.516310][T13365] bond9: entered promiscuous mode [ 338.552776][T13365] 8021q: adding VLAN 0 to HW filter on device bond9 [ 338.564091][T13372] netlink: 'syz.3.2035': attribute type 10 has an invalid length. [ 338.925464][T13388] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 338.941053][T13386] lo speed is unknown, defaulting to 1000 [ 339.313508][T13386] lo speed is unknown, defaulting to 1000 [ 339.313520][T13397] lo speed is unknown, defaulting to 1000 [ 339.571505][T13414] tipc: Enabling of bearer rejected, already enabled [ 339.758324][T13397] lo speed is unknown, defaulting to 1000 [ 340.440785][T13434] netlink: 'syz.3.2058': attribute type 1 has an invalid length. [ 340.509620][T13436] __nla_validate_parse: 6 callbacks suppressed [ 340.509639][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 340.525764][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 340.535895][T13436] netlink: 'syz.0.2059': attribute type 13 has an invalid length. [ 340.545449][T13436] netlink: 'syz.0.2059': attribute type 11 has an invalid length. [ 340.688930][T13443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2060'. [ 340.704376][T13438] lo speed is unknown, defaulting to 1000 [ 341.093401][T13472] netlink: 'syz.2.2069': attribute type 30 has an invalid length. [ 341.116276][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'. [ 341.136719][T13472] bond0: option arp_missed_max: invalid value (0) [ 341.151239][T13472] bond0: option arp_missed_max: allowed values 1 - 255 [ 341.170173][T13448] lo speed is unknown, defaulting to 1000 [ 341.177709][T13472] netlink: 'syz.2.2069': attribute type 10 has an invalid length. [ 341.186290][T13438] lo speed is unknown, defaulting to 1000 [ 341.208048][T13472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2069'. [ 341.358220][T13479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2071'. [ 341.574596][T13484] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 341.626008][T13448] lo speed is unknown, defaulting to 1000 [ 341.768764][T13486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2074'. [ 341.820442][T13488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2074'. [ 341.991928][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 342.035249][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2077'. [ 342.048990][T13494] lo speed is unknown, defaulting to 1000 [ 342.819219][T13527] xt_hashlimit: size too large, truncated to 1048576 [ 342.886755][T13534] IPVS: sh: FWM 3 0x00000003 - no destination available [ 342.903816][T13533] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 342.917458][T13534] IPVS: sh: FWM 3 0x00000003 - no destination available [ 343.023517][T13525] lo speed is unknown, defaulting to 1000 [ 343.023551][T13494] lo speed is unknown, defaulting to 1000 [ 343.057164][T13540] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 343.202388][T13542] xt_TCPMSS: Only works on TCP SYN packets [ 343.380467][T13542] veth0_virt_wifi: left allmulticast mode [ 343.386508][T13542] veth0_virt_wifi: left promiscuous mode [ 343.393377][T13542] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 343.480256][T13525] lo speed is unknown, defaulting to 1000 [ 343.583931][T13551] openvswitch: netlink: Flow key attr not present in new flow. [ 343.997239][T13573] xt_hashlimit: size too large, truncated to 1048576 [ 344.338895][T13583] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 344.515678][T13587] bond0: (slave team0): Releasing backup interface [ 344.528938][T13587] bond0: (slave dummy0): Releasing backup interface [ 344.542244][T13587] bond0: (slave bond_slave_0): Releasing backup interface [ 344.552978][T13587] bond0: (slave bond_slave_1): Releasing backup interface [ 344.566444][T13587] team0: Port device team_slave_0 removed [ 344.573990][T13587] team0: Port device team_slave_1 removed [ 344.580525][T13587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.588567][T13587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.616559][T10490] syz1: Port: 1 Link DOWN [ 344.958150][T13614] netlink: 'syz.1.2106': attribute type 1 has an invalid length. [ 345.118154][T13621] vlan2: entered promiscuous mode [ 345.123297][T13621] gretap0: entered promiscuous mode [ 345.149171][T13627] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 345.521835][T13651] __nla_validate_parse: 6 callbacks suppressed [ 345.521854][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 345.555496][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2117'. [ 345.577199][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 345.587716][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2117'. [ 345.618855][T13653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2118'. [ 345.771926][T13658] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 345.787808][T13661] netlink: 'syz.0.2120': attribute type 1 has an invalid length. [ 345.823624][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'. [ 345.916330][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'. [ 346.010179][T13670] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 346.209433][T13681] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 346.290099][T13689] gretap4: entered allmulticast mode [ 346.299159][T13689] bond8: (slave gretap4): making interface the new active one [ 346.307772][T13689] bond8: (slave gretap4): Enslaving as an active interface with an up link [ 346.475771][T13694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2133'. [ 346.498593][T13694] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2133'. [ 346.744037][T13560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.034567][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 347.076631][T13703] bond10: option downdelay: invalid value (18446744073709551371) [ 347.120853][T13703] bond10: option downdelay: allowed values 0 - 2147483647 [ 347.157708][T13703] bond10 (unregistering): Released all slaves [ 347.329823][T13716] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 347.952892][T13738] lo speed is unknown, defaulting to 1000 [ 348.546437][T13738] lo speed is unknown, defaulting to 1000 [ 348.546646][T13740] lo speed is unknown, defaulting to 1000 [ 348.559628][T13758] netlink: 'syz.1.2152': attribute type 8 has an invalid length. [ 349.084001][T13740] lo speed is unknown, defaulting to 1000 [ 349.255201][T13766] rdma_rxe: rxe_newlink: failed to add gre0 [ 349.491987][T13772] syzkaller0: entered promiscuous mode [ 349.498121][T13772] syzkaller0: entered allmulticast mode [ 349.792331][T13777] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 351.068863][T13812] __nla_validate_parse: 3 callbacks suppressed [ 351.068881][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 353.166643][T13826] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2169'. [ 353.424981][ T29] audit: type=1800 audit(1777527590.125:5): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2173" name="r" dev="tmpfs" ino=2167 res=0 errno=0 [ 353.725460][T13848] netlink: 'syz.1.2178': attribute type 4 has an invalid length. [ 353.737753][T13848] netlink: 'syz.1.2178': attribute type 4 has an invalid length. [ 353.750971][ T5750] lo speed is unknown, defaulting to 1000 [ 353.761831][T13848] netlink: 'syz.1.2178': attribute type 4 has an invalid length. [ 353.770041][ T5750] syz2: Port: 1 Link ACTIVE [ 353.804418][ T5750] lo speed is unknown, defaulting to 1000 [ 353.821893][ T5750] syz2: Port: 1 Link DOWN [ 353.925045][T13852] netlink: 'syz.3.2179': attribute type 39 has an invalid length. [ 354.147865][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2181'. [ 354.148157][T13859] lo speed is unknown, defaulting to 1000 [ 354.182744][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 354.237377][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'. [ 354.237380][T13865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2185'. [ 354.246026][T13862] netem: incorrect ge model size [ 354.263876][T13862] netem: change failed [ 354.472271][ T29] audit: type=1800 audit(1777527591.175:6): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2189" name="memory.events" dev="tmpfs" ino=2186 res=0 errno=0 [ 354.496259][T13817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.807442][T13859] lo speed is unknown, defaulting to 1000 [ 355.079979][T13904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2197'. [ 355.121576][T13907] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2198'. [ 355.203758][T13908] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2198'. [ 355.345596][T13910] SET target dimension over the limit! [ 355.397365][T13912] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 355.411250][T13913] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 355.705959][T13932] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2204'. [ 355.717105][T13932] netlink: 'syz.1.2204': attribute type 5 has an invalid length. [ 355.725045][T13932] netlink: 'syz.1.2204': attribute type 6 has an invalid length. [ 355.851531][ T29] audit: type=1107 audit(1777527592.555:7): pid=13939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 356.241563][ T29] audit: type=1804 audit(1777527592.945:8): pid=13962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2211" name="/newroot/429/cgroup.controllers" dev="tmpfs" ino=2216 res=1 errno=0 [ 356.282287][ T29] audit: type=1800 audit(1777527592.965:9): pid=13962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2211" name="cgroup.controllers" dev="tmpfs" ino=2216 res=0 errno=0 [ 356.307159][T13964] __nla_validate_parse: 2 callbacks suppressed [ 356.307179][T13964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2214'. [ 356.343329][ T29] audit: type=1804 audit(1777527592.985:10): pid=13962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2211" name="/newroot/429/cgroup.controllers" dev="tmpfs" ino=2216 res=1 errno=0 [ 356.352414][T13968] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 356.415951][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 356.476381][T13976] bond5: (slave macvlan1): making interface the new active one [ 356.486755][T13979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2219'. [ 356.510659][T13976] bond5: (slave macvlan1): Enslaving as an active interface with an up link [ 356.565763][T13968] bond5 (unregistering): (slave macvlan1): Releasing active interface [ 356.587380][T13968] bond5 (unregistering): Released all slaves [ 356.608608][T13983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.619381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.643965][T13979] pim6reg1: entered promiscuous mode [ 356.659495][T13979] pim6reg1: entered allmulticast mode [ 356.790906][T13991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.830757][T13994] netlink: 'syz.4.2221': attribute type 1 has an invalid length. [ 357.092645][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2227'. [ 357.146096][T14015] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2230'. [ 357.175698][T14015] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2230'. [ 357.454919][T14029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.490667][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2237'. [ 357.572856][T14039] syzkaller0: entered promiscuous mode [ 357.594570][T14039] syzkaller0: entered allmulticast mode [ 357.887555][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2243'. [ 357.908187][T14049] bond5: option lacp_active: invalid value (8) [ 357.917574][T14049] bond5 (unregistering): Released all slaves [ 358.165371][T14077] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 358.181968][T14080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2249'. [ 358.191040][T14077] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 358.217303][T14082] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2251'. [ 358.476321][T14094] bond5: (slave veth7): Enslaving as an active interface with a down link [ 358.541763][T14087] bond5: (slave veth9): Enslaving as an active interface with a down link [ 358.590153][T14094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.133557][T14149] validate_nla: 3 callbacks suppressed [ 359.133576][T14149] netlink: 'syz.4.2267': attribute type 1 has an invalid length. [ 359.388313][T14157] bond10: (slave macvlan1): Enslaving as an active interface with a down link [ 360.068701][T14180] 8021q: adding VLAN 0 to HW filter on device bond5 [ 360.496461][T14214] netlink: 'syz.1.2278': attribute type 13 has an invalid length. [ 360.521540][T14214] netlink: 'syz.1.2278': attribute type 17 has an invalid length. [ 360.826173][T14214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.853436][T14214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.902809][T14214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.915517][T14214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.963817][T14214] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 360.996595][ T5750] lo speed is unknown, defaulting to 1000 [ 361.004653][ T5750] syz2: Port: 1 Link ACTIVE [ 361.010234][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.017921][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.051212][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.058412][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.106045][T14240] team0: entered promiscuous mode [ 361.199166][T14246] netlink: 'syz.2.2289': attribute type 1 has an invalid length. [ 361.330064][T14246] __nla_validate_parse: 7 callbacks suppressed [ 361.330082][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 361.516256][T14264] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2293'. [ 361.527295][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'. [ 361.537434][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2293'. [ 361.657928][T14268] tipc: Enabling of bearer rejected, failed to enable media [ 361.783112][T14281] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2300'. [ 361.831766][T14283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2299'. [ 361.889869][ T29] audit: type=1804 audit(1777527598.595:11): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2301" name="/newroot/444/cgroup.controllers" dev="tmpfs" ino=2295 res=1 errno=0 [ 361.957634][ T29] audit: type=1800 audit(1777527598.595:12): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2301" name="cgroup.controllers" dev="tmpfs" ino=2295 res=0 errno=0 [ 362.012235][ T29] audit: type=1800 audit(1777527598.615:13): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2301" name="cgroup.controllers" dev="tmpfs" ino=2295 res=0 errno=0 [ 362.115069][T14295] netlink: 'syz.1.2304': attribute type 1 has an invalid length. [ 362.342121][T14308] syzkaller1: entered promiscuous mode [ 362.353917][T14308] syzkaller1: entered allmulticast mode [ 362.365064][T14317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.403352][T14318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.465464][T14324] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 362.483767][T14324] netlink: 'syz.0.2312': attribute type 10 has an invalid length. [ 362.496029][T14324] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.516005][T14324] bond0: (slave team0): Enslaving as an active interface with an up link [ 362.560326][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 362.560610][T14322] team0: left promiscuous mode [ 362.582568][T14326] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2313'. [ 362.626862][ T35] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.696102][T14329] 8021q: adding VLAN 0 to HW filter on device .` [ 362.716666][T14329] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.890164][T14329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.901773][T14329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.917614][T14329] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 362.936090][T10466] lo speed is unknown, defaulting to 1000 [ 362.942006][ T35] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.951814][T10466] sqz0: Port: 1 Link ACTIVE [ 362.956584][ T35] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.968813][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 363.042958][T10466] lo speed is unknown, defaulting to 1000 [ 363.043009][ T35] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.077721][T14346] gtp1: entered promiscuous mode [ 363.090740][T14346] gtp1: entered allmulticast mode [ 363.207366][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 363.690696][T14386] netlink: 'syz.2.2329': attribute type 3 has an invalid length. [ 363.836245][T14385] lo speed is unknown, defaulting to 1000 [ 363.997840][T14394] netlink: 'syz.3.2332': attribute type 6 has an invalid length. [ 364.109346][T14403] netlink: 'syz.0.2334': attribute type 21 has an invalid length. [ 364.128691][T14403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.136008][T14403] IPv6: NLM_F_CREATE should be set when creating new route [ 364.143341][T14403] IPv6: NLM_F_CREATE should be set when creating new route [ 364.150621][T14403] IPv6: NLM_F_CREATE should be set when creating new route [ 364.173086][T14405] netlink: 'syz.0.2334': attribute type 21 has an invalid length. [ 364.181796][T14405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.226871][T14409] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 364.479179][T14385] lo speed is unknown, defaulting to 1000 [ 364.593574][T14386] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 364.632135][T14386] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 364.650179][T14386] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 364.705359][T14386] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 364.851090][T14428] lo speed is unknown, defaulting to 1000 [ 364.903292][T14438] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 365.009965][T14438] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 365.412312][T14453] syzkaller1: entered promiscuous mode [ 365.417905][T14453] syzkaller1: entered allmulticast mode [ 365.636096][T14428] lo speed is unknown, defaulting to 1000 [ 366.295901][T14505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.354851][T14509] __nla_validate_parse: 10 callbacks suppressed [ 366.354874][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 366.610618][T14519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2360'. [ 366.805880][T14524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.826362][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 366.835902][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 366.846295][T14524] netlink: 'syz.4.2362': attribute type 11 has an invalid length. [ 366.865998][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 366.876218][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 366.892339][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.894213][T14524] netlink: 'syz.4.2362': attribute type 11 has an invalid length. [ 366.912741][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.944355][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.983934][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.174991][T14542] netlink: 'syz.4.2365': attribute type 21 has an invalid length. [ 368.041104][T14590] lo speed is unknown, defaulting to 1000 [ 368.402120][T14606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'. [ 368.412082][T14604] bond9: Unable to set down delay as MII monitoring is disabled [ 368.427071][T14604] bond9 (unregistering): Released all slaves [ 368.462845][T14602] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2383'. [ 368.562474][T14616] syzkaller0: entered promiscuous mode [ 368.598781][T14616] syzkaller0: entered allmulticast mode [ 368.626665][T14615] tipc: Can't bind to reserved service type 2 [ 368.655572][T14608] lo speed is unknown, defaulting to 1000 [ 368.656049][T14590] lo speed is unknown, defaulting to 1000 [ 369.355669][T14606] lo speed is unknown, defaulting to 1000 [ 369.419925][T14643] netlink: 'syz.0.2389': attribute type 4 has an invalid length. [ 369.436026][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 369.454653][T14643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2389'. [ 369.621847][T14646] unsupported nla_type 216 [ 369.700476][T14653] No such timeout policy "syz1" [ 369.727374][T14608] lo speed is unknown, defaulting to 1000 [ 369.787841][T14606] lo speed is unknown, defaulting to 1000 [ 370.755005][T14672] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.106220][T14700] netlink: 'syz.1.2404': attribute type 4 has an invalid length. [ 371.126554][T14703] netlink: 'syz.1.2404': attribute type 4 has an invalid length. [ 371.140483][ T10] lo speed is unknown, defaulting to 1000 [ 371.157356][ T806] lo speed is unknown, defaulting to 1000 [ 371.429876][T14721] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 371.560635][T14730] openvswitch: netlink: IP tunnel dst address not specified [ 371.582409][T14721] syzkaller0: entered promiscuous mode [ 371.590682][T14721] syzkaller0: entered allmulticast mode [ 371.609332][T14731] tipc: Enabling of bearer rejected, already enabled [ 371.929320][T14743] __nla_validate_parse: 7 callbacks suppressed [ 371.929340][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2417'. [ 373.201723][T14763] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.208228][T14763] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.351874][T14765] netlink: 'syz.0.2422': attribute type 89 has an invalid length. [ 374.618984][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 374.648596][T14777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2426'. [ 374.802958][T14789] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 374.827416][T14789] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 375.109287][T14801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 375.466404][T14809] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.474000][T14809] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.746495][T14809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.776861][T14809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.850822][ T806] lo speed is unknown, defaulting to 1000 [ 375.871520][ T806] syz2: Port: 1 Link DOWN [ 375.899849][T14831] lo speed is unknown, defaulting to 1000 [ 376.147374][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2448'. [ 376.183625][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2448'. [ 376.194555][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2448'. [ 376.211895][T14844] netlink: 'syz.3.2448': attribute type 10 has an invalid length. [ 376.299191][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2450'. [ 376.629681][T14831] lo speed is unknown, defaulting to 1000 [ 376.716042][T14872] lo speed is unknown, defaulting to 1000 [ 377.168620][T14872] lo speed is unknown, defaulting to 1000 [ 377.944712][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2475'. [ 378.085056][T14925] lo speed is unknown, defaulting to 1000 [ 378.259380][T14940] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 378.603097][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.619837][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.673178][T14925] lo speed is unknown, defaulting to 1000 [ 378.702833][T14951] IPVS: sh: FWM 3 0x00000003 - no destination available [ 378.803744][T14963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2484'. [ 378.828129][T14954] lo speed is unknown, defaulting to 1000 [ 379.461289][T14999] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2492'. [ 379.532329][T14954] lo speed is unknown, defaulting to 1000 [ 379.849111][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'. [ 380.426457][ T1130] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 380.444508][ T1130] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 380.454668][ T5750] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 380.540142][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2498'. [ 380.598710][ T5750] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 380.757729][T15057] netlink: 'syz.1.2501': attribute type 8 has an invalid length. [ 380.778589][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 380.995165][T15066] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2503'. [ 381.028185][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2503'. [ 381.161759][ T5750] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 381.211874][T15077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.414586][T15087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2507'. [ 381.885336][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2511'. [ 382.810848][T15157] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 382.836260][T15145] netlink: 'syz.1.2520': attribute type 39 has an invalid length. [ 382.887568][T15157] CPU: 0 UID: 0 PID: 15157 Comm: syz.3.2522 Not tainted syzkaller #0 PREEMPT(full) [ 382.887617][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.887629][T15157] Call Trace: [ 382.887637][T15157] [ 382.887646][T15157] dump_stack_lvl+0xe8/0x150 [ 382.887677][T15157] sysfs_warn_dup+0x8e/0xa0 [ 382.887704][T15157] sysfs_do_create_link_sd+0xc0/0x110 [ 382.887731][T15157] device_add_class_symlinks+0x1cf/0x240 [ 382.887758][T15157] device_add+0x475/0xbb0 [ 382.887785][T15157] wiphy_register+0x1dc5/0x2dc0 [ 382.887829][T15157] ? __pfx_wiphy_register+0x10/0x10 [ 382.887854][T15157] ? __pfx_netdev_run_todo+0x10/0x10 [ 382.887880][T15157] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 382.887916][T15157] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 382.887944][T15157] ieee80211_register_hw+0x3d82/0x4a70 [ 382.887985][T15157] ? ieee80211_register_hw+0x19a1/0x4a70 [ 382.888035][T15157] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 382.888065][T15157] ? __asan_memset+0x22/0x50 [ 382.888089][T15157] ? __hrtimer_setup+0x1b7/0x260 [ 382.888113][T15157] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 382.888143][T15157] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 382.888195][T15157] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 382.888216][T15157] ? kstrndup+0xbf/0x160 [ 382.888297][T15157] hwsim_new_radio_nl+0xf6a/0x1c00 [ 382.888345][T15157] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 382.888377][T15157] ? rcu_is_watching+0x15/0xb0 [ 382.888402][T15157] ? trace_kmalloc+0x2a/0xf0 [ 382.888436][T15157] ? __nla_parse+0x40/0x60 [ 382.888464][T15157] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 382.888492][T15157] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 382.888528][T15157] genl_family_rcv_msg_doit+0x22a/0x330 [ 382.888565][T15157] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.888610][T15157] ? bpf_lsm_capable+0x9/0x20 [ 382.888630][T15157] ? security_capable+0x7e/0x2c0 [ 382.888662][T15157] genl_rcv_msg+0x61c/0x7a0 [ 382.888696][T15157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.888725][T15157] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 382.888764][T15157] netlink_rcv_skb+0x232/0x4b0 [ 382.888789][T15157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.888821][T15157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.888865][T15157] ? down_read+0x270/0x2e0 [ 382.888887][T15157] ? genl_rcv+0xd/0x40 [ 382.888917][T15157] genl_rcv+0x28/0x40 [ 382.888945][T15157] netlink_unicast+0x75c/0x8e0 [ 382.888979][T15157] netlink_sendmsg+0x813/0xb40 [ 382.889013][T15157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.889042][T15157] ? aa_sock_msg_perm+0xf1/0x1b0 [ 382.889071][T15157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 382.889102][T15157] ____sys_sendmsg+0x972/0x9f0 [ 382.889129][T15157] ? __might_fault+0xaf/0x130 [ 382.889163][T15157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.889196][T15157] ? import_iovec+0x73/0xa0 [ 382.889229][T15157] ___sys_sendmsg+0x2a5/0x360 [ 382.889261][T15157] ? __lock_acquire+0x6b5/0x2cf0 [ 382.889288][T15157] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.889321][T15157] ? futex_wait+0x2a2/0x390 [ 382.889379][T15157] ? __fget_files+0x2a/0x420 [ 382.889403][T15157] ? __fget_files+0x3a0/0x420 [ 382.889439][T15157] __x64_sys_sendmsg+0x1bd/0x2a0 [ 382.889469][T15157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.889504][T15157] ? rcu_is_watching+0x15/0xb0 [ 382.889540][T15157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.889563][T15157] do_syscall_64+0x15f/0xf80 [ 382.889585][T15157] ? trace_irq_disable+0x3b/0x140 [ 382.889615][T15157] ? clear_bhb_loop+0x40/0x90 [ 382.889641][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.889661][T15157] RIP: 0033:0x7f2dee99cdd9 [ 382.889681][T15157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.889699][T15157] RSP: 002b:00007f2def8b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.889721][T15157] RAX: ffffffffffffffda RBX: 00007f2deec16090 RCX: 00007f2dee99cdd9 [ 382.889737][T15157] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 382.889749][T15157] RBP: 00007f2deea32d69 R08: 0000000000000000 R09: 0000000000000000 [ 382.889762][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.889774][T15157] R13: 00007f2deec16128 R14: 00007f2deec16090 R15: 00007ffed9cb3528 [ 382.889810][T15157] [ 383.456708][T15145] syz_tun (unregistering): left allmulticast mode [ 383.557994][T15178] openvswitch: netlink: Message has 8 unknown bytes. [ 383.595483][T15178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.673264][T15183] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 383.827627][T15189] __nla_validate_parse: 2 callbacks suppressed [ 383.827645][T15189] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2528'. [ 384.251610][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2536'. [ 384.412968][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 384.461996][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 384.501488][T15230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2541'. [ 384.525311][T15224] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 384.575534][ T1049] smbdirect: ib_dev[syz0] removed [ 384.598958][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 384.694971][T15237] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 385.700473][T15294] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2556'. [ 385.795459][T15298] tipc: Enabled bearer , priority 0 [ 385.812236][T15298] syzkaller0: entered promiscuous mode [ 385.825043][T15298] syzkaller0: entered allmulticast mode [ 385.961610][T15298] tipc: Resetting bearer [ 385.990766][T15297] tipc: Resetting bearer [ 385.998719][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2560'. [ 386.042953][T15297] tipc: Disabling bearer [ 386.546956][ T806] lo speed is unknown, defaulting to 1000 [ 386.561630][T15344] netlink: 160760 bytes leftover after parsing attributes in process `syz.2.2566'. [ 386.570366][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2567'. [ 386.589067][ T806] sqz0: Port: 1 Link DOWN [ 386.604626][ T806] lo speed is unknown, defaulting to 1000 [ 386.608916][T15344] netlink: Unknown conntrack attr (type=1543, max=9) [ 387.592975][T15400] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2580'. [ 388.097381][T15429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.208020][T15444] netlink: set zone limit has 4 unknown bytes [ 388.499639][ T806] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 388.589310][ T806] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 389.165873][T15496] sctp: [Deprecated]: syz.1.2607 (pid 15496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.165873][T15496] Use struct sctp_sack_info instead [ 389.243680][T15492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.270631][T15492] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.304554][T15492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.378252][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.475751][T15492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.507323][T15492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.547783][T15492] veth1_vlan: left promiscuous mode [ 389.573403][T15521] __nla_validate_parse: 36 callbacks suppressed [ 389.573423][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 389.590446][T15492] veth0_vlan: left promiscuous mode [ 389.596862][T15492] veth0_vlan: entered promiscuous mode [ 389.607736][T15492] veth1_vlan: entered promiscuous mode [ 389.693180][T15492] veth1_macvtap: left promiscuous mode [ 389.720282][T15492] veth1_macvtap: entered promiscuous mode [ 389.743443][T15492] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 389.912811][T15515] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 389.925778][T15515] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 389.958170][ T43] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.091476][ T43] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.153051][T15507] lo speed is unknown, defaulting to 1000 [ 390.159872][ T43] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.201034][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 390.210834][ T43] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.296603][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2626'. [ 391.515245][T15562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.555553][T15562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.715252][T15562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.729909][T15562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.732877][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'. [ 391.754973][T15562] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 391.772014][ T42] lo speed is unknown, defaulting to 1000 [ 391.779093][T15507] lo speed is unknown, defaulting to 1000 [ 391.785574][ T42] syz2: Port: 1 Link ACTIVE [ 391.787344][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.797385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.815095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.823339][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.858541][T15606] vxcan1: entered promiscuous mode [ 392.881793][T15606] vxcan1: entered allmulticast mode [ 393.238241][T15624] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 393.318772][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 393.494879][T15634] lo speed is unknown, defaulting to 1000 [ 393.564047][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2646'. [ 393.644366][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 394.083974][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'. [ 394.111529][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'. [ 394.160154][T15654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.180587][T15654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.414651][T15660] tipc: Enabled bearer , priority 0 [ 394.453079][T15660] syzkaller0: entered promiscuous mode [ 394.465631][T15660] syzkaller0: entered allmulticast mode [ 394.484012][T15634] lo speed is unknown, defaulting to 1000 [ 394.589191][T15660] tipc: Resetting bearer [ 394.630254][T15664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2654'. [ 394.669411][T15659] tipc: Resetting bearer [ 394.693173][T15659] tipc: Disabling bearer [ 394.823793][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 394.847872][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 394.861167][T15675] netlink: 'syz.0.2657': attribute type 10 has an invalid length. [ 394.869825][T15675] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2657'. [ 394.882746][T15675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2657'. [ 394.897725][T15675] netlink: 'syz.0.2657': attribute type 1 has an invalid length. [ 395.362007][T15694] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2662'. [ 395.412393][T15694] netlink: 'syz.2.2662': attribute type 1 has an invalid length. [ 395.461732][T15694] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2662'. [ 395.922060][T15713] netlink: 'syz.0.2669': attribute type 2 has an invalid length. [ 396.181181][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 396.204546][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2671'. [ 396.222104][T15724] macsec0: entered promiscuous mode [ 396.228228][T15724] macsec0: entered allmulticast mode [ 396.241768][T15724] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 396.421020][T15738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2675'. [ 396.753004][T15754] netlink: 'syz.0.2680': attribute type 3 has an invalid length. [ 397.152397][T15763] syzkaller1: entered promiscuous mode [ 397.158041][T15763] syzkaller1: entered allmulticast mode [ 397.238409][T15759] nbd0: detected capacity change from 0 to 63 [ 397.287696][T15762] nbd: must specify a device to reconfigure [ 397.424867][T15772] netlink: 'syz.4.2686': attribute type 1 has an invalid length. [ 397.445281][T15772] netlink: 'syz.4.2686': attribute type 6 has an invalid length. [ 397.527476][ T5625] block nbd0: Receive control failed (result -104) [ 397.854391][T15791] netlink: 'syz.2.2693': attribute type 7 has an invalid length. [ 397.912547][T15792] netlink: 'syz.2.2693': attribute type 7 has an invalid length. [ 397.992221][T15800] netlink: 'syz.3.2695': attribute type 1 has an invalid length. [ 398.297504][T15800] bond6: entered promiscuous mode [ 398.333512][T15800] 8021q: adding VLAN 0 to HW filter on device bond6 [ 398.495619][T15816] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 399.153228][T15834] lo speed is unknown, defaulting to 1000 [ 399.273449][T15841] bond7: entered promiscuous mode [ 399.789251][T15834] lo speed is unknown, defaulting to 1000 [ 399.817860][T15856] lo speed is unknown, defaulting to 1000 [ 400.205606][T15879] xt_TCPMSS: Only works on TCP SYN packets [ 400.370121][T15885] __nla_validate_parse: 13 callbacks suppressed [ 400.370142][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 400.905686][T15896] vlan3: entered promiscuous mode [ 401.158369][T15856] lo speed is unknown, defaulting to 1000 [ 401.180834][T15892] lo speed is unknown, defaulting to 1000 [ 401.829277][T15916] validate_nla: 4 callbacks suppressed [ 401.829295][T15916] netlink: 'syz.4.2729': attribute type 82 has an invalid length. [ 401.942541][T15920] SET target dimension over the limit! [ 402.227780][T15929] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2732'. [ 402.319630][T15892] lo speed is unknown, defaulting to 1000 [ 403.391771][T15963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2740'. [ 404.089325][T15981] netlink: 'syz.4.2745': attribute type 2 has an invalid length. [ 404.113250][T15981] netlink: 'syz.4.2745': attribute type 2 has an invalid length. [ 404.171515][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'. [ 404.295282][T15989] netlink: 876 bytes leftover after parsing attributes in process `syz.4.2745'. [ 404.337266][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 404.591622][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'. [ 404.634451][T15995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2749'. [ 404.675429][T15999] xt_hashlimit: size too large, truncated to 1048576 [ 404.742358][T16006] netlink: 'syz.4.2751': attribute type 4 has an invalid length. [ 404.801427][T15999] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 404.811624][T16006] netlink: 'syz.4.2751': attribute type 4 has an invalid length. [ 404.890464][ T806] lo speed is unknown, defaulting to 1000 [ 404.910418][ T806] sqz0: Port: 1 Link ACTIVE [ 404.937385][ T806] lo speed is unknown, defaulting to 1000 [ 405.009733][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2754'. [ 405.213235][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 405.278417][T16027] IPVS: set_ctl: invalid protocol: 63195 255.255.255.255:20004 [ 405.495116][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2763'. [ 407.606033][T16002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.910765][T16080] netlink: 'syz.4.2772': attribute type 5 has an invalid length. [ 407.925432][T16069] syzkaller0: entered promiscuous mode [ 407.942461][T16069] syzkaller0: entered allmulticast mode [ 408.135294][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'. [ 408.414526][T16089] veth13: entered promiscuous mode [ 408.642072][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 408.684527][T16113] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 408.838768][T16113] 8021q: adding VLAN 0 to HW filter on device bond7 [ 408.871178][T16122] tipc: Enabling of bearer rejected, already enabled [ 409.046027][T16124] netlink: 'syz.1.2784': attribute type 1 has an invalid length. [ 409.211394][T16124] bond8: (slave bridge4): making interface the new active one [ 409.221738][T16124] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 409.318831][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 409.343336][T16130] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 409.394652][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 409.430973][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 409.465305][T16124] macvlan0: entered promiscuous mode [ 409.495747][T16124] macvlan0: entered allmulticast mode [ 409.579114][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2788'. [ 410.093523][T16161] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 410.147215][T16167] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 410.189560][T16167] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 410.636272][T16190] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2799'. [ 410.887494][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 411.058203][T16210] pim6reg1: entered promiscuous mode [ 411.091278][T16210] pim6reg1: entered allmulticast mode [ 411.104971][T16205] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2799'. [ 411.128068][T16211] netlink: 'syz.0.2805': attribute type 6 has an invalid length. [ 411.149169][T16211] netlink: 'syz.0.2805': attribute type 7 has an invalid length. [ 411.168816][T16211] netlink: 'syz.0.2805': attribute type 8 has an invalid length. [ 411.199737][T16211] netlink: 'syz.0.2805': attribute type 15 has an invalid length. [ 411.299352][T16220] tipc: Enabling of bearer rejected, already enabled [ 411.739331][T16240] ------------[ cut here ]------------ [ 411.739341][T16237] ------------[ cut here ]------------ [ 411.739351][T16237] n > v || v > page_size(head) [ 411.744861][T16240] n > v || v > page_size(head) [ 411.744880][T16240] WARNING: lib/iov_iter.c:356 at copy_page_to_iter+0x2df/0x340, CPU#0: syz.0.2813/16240 [ 411.744920][T16240] Modules linked in: [ 411.744939][T16240] CPU: 0 UID: 0 PID: 16240 Comm: syz.0.2813 Not tainted syzkaller #0 PREEMPT(full) [ 411.744960][T16240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.744972][T16240] RIP: 0010:copy_page_to_iter+0x2df/0x340 [ 411.745014][T16240] Code: 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 06 d9 fa 06 cc e8 10 d5 15 fd 90 0f 0b 90 45 31 ed eb db e8 02 d5 15 fd 90 <0f> 0b 90 45 31 ed eb cd 44 89 e9 80 e1 07 38 c1 0f 8c af fe ff ff [ 411.745032][T16240] RSP: 0018:ffffc9000cfcf560 EFLAGS: 00010293 [ 411.745050][T16240] RAX: ffffffff84afceae RBX: 000000000000022e RCX: ffff8880291d8000 [ 411.745065][T16240] RDX: 0000000000000000 RSI: 000000000000022e RDI: ffffffffffffff6c [ 411.745078][T16240] RBP: ffffea00026c4340 R08: ffffffff903096f7 R09: 1ffffffff20612de [ 411.745093][T16240] R10: dffffc0000000000 R11: fffffbfff20612df R12: ffffea00026c4340 [ 411.745107][T16240] R13: 000000000000022e R14: ffffffffffffff6c R15: 00000000000002c2 [ 411.745121][T16240] FS: 00007f99368ba6c0(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 411.745137][T16240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.745151][T16240] CR2: 00007f99368b9ff8 CR3: 000000005bb22000 CR4: 00000000003526f0 [ 411.745168][T16240] Call Trace: [ 411.745178][T16240] [ 411.745193][T16240] __sk_msg_recvmsg+0x33b/0xfc0 [ 411.745242][T16240] udp_bpf_recvmsg+0x196/0xac0 [ 411.745278][T16240] ? aa_sk_perm+0x6d5/0x900 [ 411.745310][T16240] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 411.745339][T16240] ? __lock_acquire+0x6b5/0x2cf0 [ 411.745360][T16240] ? sock_rps_record_flow+0x19/0x350 [ 411.745388][T16240] ? inet_recvmsg+0x101/0x120 [ 411.751434][T16237] WARNING: lib/iov_iter.c:356 at copy_page_to_iter+0x2df/0x340, CPU#1: syz.0.2813/16237 [ 411.755753][T16240] ? __pfx_inet_recvmsg+0x10/0x10 [ 411.755782][T16240] sock_recvmsg+0x155/0x1b0 [ 411.755815][T16240] ____sys_recvmsg+0x1e6/0x4a0 [ 411.755837][T16240] ? __folio_batch_add_and_move+0x11a/0xc50 [ 411.755874][T16240] ? __pfx_____sys_recvmsg+0x10/0x10 [ 411.755913][T16240] ? import_iovec+0x73/0xa0 [ 411.755942][T16240] ___sys_recvmsg+0x215/0x590 [ 411.755965][T16240] ? page_table_check_set+0x126/0x510 [ 411.755997][T16240] ? __pfx____sys_recvmsg+0x10/0x10 [ 411.756020][T16240] ? css_rstat_updated+0x23a/0x530 [ 411.756045][T16240] ? __fget_files+0x2a/0x420 [ 411.756085][T16240] ? __fget_files+0x3a0/0x420 [ 411.756118][T16240] do_recvmmsg+0x334/0x800 [ 411.756148][T16240] ? cgroup1_freezing+0x20/0x350 [ 411.756172][T16240] ? __pfx_do_recvmmsg+0x10/0x10 [ 411.761430][T16237] Modules linked in: [ 411.771013][T16240] ? cgroup1_freezing+0x29a/0x350 [ 411.771063][T16240] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.771093][T16240] __x64_sys_recvmmsg+0x198/0x250 [ 411.771123][T16240] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 411.771157][T16240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.771179][T16240] do_syscall_64+0x15f/0xf80 [ 411.771200][T16240] ? trace_irq_disable+0x3b/0x140 [ 411.771227][T16240] ? clear_bhb_loop+0x40/0x90 [ 411.771251][T16240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.771272][T16240] RIP: 0033:0x7f993599cdd9 [ 411.771292][T16240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.771309][T16240] RSP: 002b:00007f99368ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 411.771331][T16240] RAX: ffffffffffffffda RBX: 00007f9935c16180 RCX: 00007f993599cdd9 [ 411.771346][T16240] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000003 [ 411.771358][T16240] RBP: 00007f9935a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 411.771371][T16240] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000 [ 411.771384][T16240] R13: 00007f9935c16218 R14: 00007f9935c16180 R15: 00007ffd7540ab68 [ 411.771416][T16240] [ 411.771427][T16240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 411.771441][T16240] CPU: 0 UID: 0 PID: 16240 Comm: syz.0.2813 Not tainted syzkaller #0 PREEMPT(full) [ 411.771461][T16240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.771473][T16240] Call Trace: [ 411.771482][T16240] [ 411.771490][T16240] vpanic+0x56c/0xa60 [ 411.771518][T16240] ? __pfx__printk+0x10/0x10 [ 411.771542][T16240] ? __pfx_vpanic+0x10/0x10 [ 411.771561][T16240] ? is_bpf_text_address+0x292/0x2b0 [ 411.771578][T16240] ? is_bpf_text_address+0x26/0x2b0 [ 411.771603][T16240] panic+0xc5/0xd0 [ 411.771621][T16240] ? __pfx_panic+0x10/0x10 [ 411.771656][T16240] __warn+0x315/0x4c0 [ 411.771675][T16240] ? copy_page_to_iter+0x2df/0x340 [ 411.771697][T16240] ? copy_page_to_iter+0x2df/0x340 [ 411.771718][T16240] __report_bug+0x29a/0x540 [ 411.771741][T16240] ? copy_page_to_iter+0x2df/0x340 [ 411.771763][T16240] ? __pfx___report_bug+0x10/0x10 [ 411.771780][T16240] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.771800][T16240] ? irqentry_exit+0x218/0x730 [ 411.771820][T16240] ? trace_irq_disable+0x3b/0x140 [ 411.771851][T16240] ? copy_page_to_iter+0x2e1/0x340 [ 411.771875][T16240] ? copy_page_to_iter+0x2df/0x340 [ 411.771895][T16240] report_bug+0x16a/0x220 [ 411.771915][T16240] ? copy_page_to_iter+0x2df/0x340 [ 411.771935][T16240] ? copy_page_to_iter+0x2e1/0x340 [ 411.771956][T16240] handle_bug+0x9c/0x200 [ 411.771978][T16240] exc_invalid_op+0x1a/0x50 [ 411.771999][T16240] asm_exc_invalid_op+0x1a/0x20 [ 411.772016][T16240] RIP: 0010:copy_page_to_iter+0x2df/0x340 [ 411.772039][T16240] Code: 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 06 d9 fa 06 cc e8 10 d5 15 fd 90 0f 0b 90 45 31 ed eb db e8 02 d5 15 fd 90 <0f> 0b 90 45 31 ed eb cd 44 89 e9 80 e1 07 38 c1 0f 8c af fe ff ff [ 411.772053][T16240] RSP: 0018:ffffc9000cfcf560 EFLAGS: 00010293 [ 411.772069][T16240] RAX: ffffffff84afceae RBX: 000000000000022e RCX: ffff8880291d8000 [ 411.772082][T16240] RDX: 0000000000000000 RSI: 000000000000022e RDI: ffffffffffffff6c [ 411.772095][T16240] RBP: ffffea00026c4340 R08: ffffffff903096f7 R09: 1ffffffff20612de [ 411.772108][T16240] R10: dffffc0000000000 R11: fffffbfff20612df R12: ffffea00026c4340 [ 411.772121][T16240] R13: 000000000000022e R14: ffffffffffffff6c R15: 00000000000002c2 [ 411.772144][T16240] ? copy_page_to_iter+0x2de/0x340 [ 411.772177][T16240] __sk_msg_recvmsg+0x33b/0xfc0 [ 411.772220][T16240] udp_bpf_recvmsg+0x196/0xac0 [ 411.772252][T16240] ? aa_sk_perm+0x6d5/0x900 [ 411.772280][T16240] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 411.772305][T16240] ? __lock_acquire+0x6b5/0x2cf0 [ 411.772324][T16240] ? sock_rps_record_flow+0x19/0x350 [ 411.772351][T16240] ? inet_recvmsg+0x101/0x120 [ 411.772373][T16240] ? __pfx_inet_recvmsg+0x10/0x10 [ 411.772396][T16240] sock_recvmsg+0x155/0x1b0 [ 411.772425][T16240] ____sys_recvmsg+0x1e6/0x4a0 [ 411.772446][T16240] ? __folio_batch_add_and_move+0x11a/0xc50 [ 411.772480][T16240] ? __pfx_____sys_recvmsg+0x10/0x10 [ 411.772522][T16240] ? import_iovec+0x73/0xa0 [ 411.772548][T16240] ___sys_recvmsg+0x215/0x590 [ 411.772569][T16240] ? page_table_check_set+0x126/0x510 [ 411.772598][T16240] ? __pfx____sys_recvmsg+0x10/0x10 [ 411.772618][T16240] ? css_rstat_updated+0x23a/0x530 [ 411.772640][T16240] ? __fget_files+0x2a/0x420 [ 411.772677][T16240] ? __fget_files+0x3a0/0x420 [ 411.772707][T16240] do_recvmmsg+0x334/0x800 [ 411.772734][T16240] ? cgroup1_freezing+0x20/0x350 [ 411.772755][T16240] ? __pfx_do_recvmmsg+0x10/0x10 [ 411.772777][T16240] ? cgroup1_freezing+0x29a/0x350 [ 411.772816][T16240] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.772842][T16240] __x64_sys_recvmmsg+0x198/0x250 [ 411.772868][T16240] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 411.772899][T16240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.772918][T16240] do_syscall_64+0x15f/0xf80 [ 411.772936][T16240] ? trace_irq_disable+0x3b/0x140 [ 411.772961][T16240] ? clear_bhb_loop+0x40/0x90 [ 411.772982][T16240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.773000][T16240] RIP: 0033:0x7f993599cdd9 [ 411.773015][T16240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.773030][T16240] RSP: 002b:00007f99368ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 411.773047][T16240] RAX: ffffffffffffffda RBX: 00007f9935c16180 RCX: 00007f993599cdd9 [ 411.773060][T16240] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000003 [ 411.773072][T16240] RBP: 00007f9935a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 411.773084][T16240] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000 [ 411.773095][T16240] R13: 00007f9935c16218 R14: 00007f9935c16180 R15: 00007ffd7540ab68 [ 411.773123][T16240] [ 411.776557][T16240] Kernel Offset: disabled