last executing test programs: 5.703910334s ago: executing program 0 (id=2916): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000140)='H', 0x206c}], 0x1) (async) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000140)='H', 0x206c}], 0x1) socket(0x2a, 0x2, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x7, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4000000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x7, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x800, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0xc001) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$rfkill(r7, &(0x7f0000000140), 0x8) (async) read$rfkill(r7, &(0x7f0000000140), 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xbf2}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xbf2}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) 5.422093282s ago: executing program 0 (id=2917): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc31820c4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4b, 0xc}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x3}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3469efde6ee91d07770e7aee71"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8004) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000003c0)={0x3, 0x10001, 0xaa, &(0x7f0000000300)=""/170}) r4 = socket(0xf, 0x5, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2e11c454}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x24005004) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x40, 0x0, [{@multicast2}, {}, {@broadcast}, {}]}}) ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f0000000600)=0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r5) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff36}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4b4b}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000100}, 0x24000001) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x148, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xa6}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6}, {0x5}, {0x6, 0x11, 0x9cd}, {0x8, 0xb, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xb477}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x76}, {0x6, 0x16, 0x8000}, {0x5}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x6}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r2, 0xd, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x3e}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x30004884}, 0x53962ff66a39afb) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000bc0)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c40)={0x18, 0xb, {0x7fffffff, @struct={0x3, 0x58}, 0x0, 0x81, 0x7, 0x8000000000000000, 0x5, 0x7, 0xc, @struct={0x7, 0x10}, 0x9, 0xfffffffd, [0x1, 0x4, 0xd0b1, 0xb80, 0xfffffffffffffff8, 0x2]}, {0x8, @struct={0x3, 0x8}, 0x0, 0x9, 0x5, 0x5, 0x6, 0x207ced7b, 0x12, @struct={0x1000, 0x2}, 0xfffffff2, 0xfffffff7, [0x1, 0xa8fd, 0xe, 0x5, 0x8000, 0x1]}, {0x2, @struct={0x6, 0x3}, 0x0, 0x1, 0x9, 0x7, 0x0, 0x0, 0x2, @struct={0x0, 0xa7}, 0xf6e7, 0x1, [0x1, 0xb, 0x9, 0x1ff, 0x7f]}, {0xe25, 0x4b, 0x5483}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001040)={r11, 0x4, 0x6, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r12, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r13, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004880) 5.165404999s ago: executing program 0 (id=2920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) splice(r2, 0x0, r3, &(0x7f00000002c0), 0x6, 0x0) (async) write$cgroup_devices(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="61202a3a2a2072690025d2fa4d03d8e0a9758c0600dd23c5a337ced936e5e60a59f7000000000000000000"], 0x9) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async, rerun: 32) r5 = socket$kcm(0x29, 0x5, 0x0) (rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) sendfile(r5, r6, 0x0, 0xffffffff000) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0xcbe7b1f001613ed, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x50}}, 0x400c040) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.898827358s ago: executing program 0 (id=2923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0x64f2b3277155f64}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r9, 0x0) ppoll(&(0x7f00000002c0)=[{r9, 0x5}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x368, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0x9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x338, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0xfd5a, 0x1000000, 0x1e, 0x1b, 0x1d, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xff3e, 0x2, 0x18e2, 0x18, 0x2, 0x1c, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40) 4.376138487s ago: executing program 0 (id=2926): r0 = socket(0x2, 0x80805, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, 0x0, 0x123) shutdown(r4, 0x1) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0xfff1, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {0x8}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x5, 0xfff, 0x8}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x6, r3, 0xffffffff}, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 3.948433118s ago: executing program 0 (id=2929): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001300050027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000010604001400030076657468305f766c616e0000000000001c001680180001"], 0x50}}, 0x20048800) (async) write(r0, &(0x7f0000000140)="576b8ed33bf28958a899b1edd6f4d6a1ecd5fe2928c54a49f9ba5729d9636bab0b6696cce1f0284cd82fb4099c224db2dea0a4dcbc65a38fc4c7792a46433137184dad0ebac3770489d22dd39908111459fe4d058160815e692958cc0fd8c6e769fb19695be98449b0ee8b7b18dbcf13", 0x70) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 3.767704791s ago: executing program 1 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x14050101) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x3, 0x4, 0x1, [0x9]}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9e64}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0x40c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f00000003c0)={0x6b0, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x200}, @ETHTOOL_A_EEE_MODES_OURS={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '&^#-*:[&\\^{]@^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^\'{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\':^!%,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "7fc08dd6f3a3fa17da5b26e001346c7a93c91cf80523741600e8e90252c6c35fed3f10479f4a4f183887140fadd719a2ba72c16ff3cfc83f7ca700177ce8cf7c3185e60a923fabfbca88444c1c0084ff5ef706e32caacec26b0751ef411087b69abbabbf79040aeeeda17b0cacf49505dd3f15af324bf4c12ebeae7c7325b7"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x4c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x158, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78c5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc198}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^&@})[)\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x769}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '%#}}-):/\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x10, 0x4, "3fc207c0cc4cf06843d24337"}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe997}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "2de5f037450cfabe1fc81d98c380f6321550c97cda5f3b8931ed8420a5aa10ad3a0d53aac7a37eae4068ed39525c7dab07d8df32c09977b5c8db9bbc90d4d8be763960401b8927cb3e122832b1c79bfc8b0b328971b39ef8ff37d3a17cdde1e21b9b87e910c219288f950dba8da9a039d6bba2dbc2963599455fc5d8430f00bf2f940e59d45a21760f53c9960f93c9c49ba6215ae6eef1a76cd6d297fc11be"}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "5bddee80f988b349ac8550b0f6594e9df7b4db8ba2e0b5aa63525aaf43b626f6b0dbf77781d4717d3f0644cc83674c5d91e9c6d385ad4acbc994befe75a4736a096a785a11a8c2533cfeec446bb7e6eb181b237bb0a7f53a5d98388ccfd348c949a8381ecfb6d4bf2e8cef594b6ea4a6e639ec3957a1186d66755fc0cfe0f760ab59c21ba362ce07cdebb5a49b7cacf48949b34b2c2fce1354af95ba9b08b884c371ed87cbd51b4cf468745b43069b135366027afb32008d"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/1[\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "36686f6c75afb33efa157123f3313e2fe13c1b9a0b81a1a9284be66e7d3e393d9a68e258944c5577c9e3a24c4957713fb0187a08ebac4bd1d2a992195efc6d3ca98fe5fbc1701cd276c95f5a98de9e936e8bb3dbba77cdc2e1468c68d876b80012b70b9492b0a1f88c5dcb875fcf7b72ee5d47357b45a488b47da8fe8d75a44daa8c431eca3fab5e36ca9886fd05e44bfc8c0fd81c128f0a01c1968870e3f5359df3dd8ce8e350a0045e6e02e8c8f35d7b31892fac9fa27ace9496594c7b4ca80d1285cb9793f5818369afce168e6759d867f9e6ea42c7d30836"}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000b00), 0x800) bind$tipc(r4, &(0x7f0000000b40)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r2, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x414) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000c80)={0x1, 'hsr0\x00', {}, 0x8}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000cc0), 0x8) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000fc0)=@broute={'broute\x00', 0x20, 0x2, 0x254, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000d40], 0x0, &(0x7f0000000d00), &(0x7f0000000d40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x20, 0x7, 'veth0_to_bridge\x00', 'gretap0\x00', 'macvlan1\x00', 'batadv_slave_0\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x11, 0x20, 0xd, 'sit0\x00', 'batadv_slave_0\x00', 'xfrm0\x00', 'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@log={'log\x00', 0x28, {{0x4, "78f957e1c55c55013fd5d6aa0b04c54a0d51a3809b4de9cc9e8a0a134eaf", 0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x2cc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000011c0)={'ip6tnl0\x00', &(0x7f0000001140)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x7, 0x2, 0x39, @loopback, @dev={0xfe, 0x80, '\x00', 0x42}, 0x20, 0x1, 0x7, 0x38000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x12, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0xeee33718875e9b28, 0x3, 0x3, 0x0, 0x5, 0x4, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x20680, 0x6, '\x00', r6, 0x0, r5, 0x8, &(0x7f0000001200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001240)={0x5, 0x1, 0x5, 0x975}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001280)=[r5, 0xffffffffffffffff, r5], &(0x7f00000012c0)=[{0x0, 0x2, 0x10, 0x2}, {0x3, 0x1, 0x10, 0xa}, {0x3, 0x4, 0x4, 0xa}, {0x0, 0x3, 0x2, 0xc}, {0x0, 0x3, 0xc, 0x4}], 0x10, 0xc}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) sendmsg$SOCK_DESTROY(r5, &(0x7f0000001980)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0xdf0c2bdba8f9e3c7}, 0xc, &(0x7f0000001940)={&(0x7f0000001480)={0x4a4, 0x15, 0x10, 0x70bd26, 0x25dfdbfc, {0x1d, 0x68}, [@INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "1b7fda156b3ac3a515df049508bec40fc46e7ab39549c3ba"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "fcbb1e4004f76ca46691ab3f29cd13a8cc527d4f885d9cd1f878b2287b44205db763913bcf81f986f8cb2e1c6ca2101d8f061bd56ecfd692b7ef9e747281f555ad4f20484118d6a549959c249f2380ff2b0409735afc4c6477db75319978fb657a4e1b12cdc90f290a59b4b215e6c1bf1d2fb43db1fd667b28e4b9d9223e52858de02bc8d1ad2faa3f0e92b1f2b17649f72d717da94ffd8f0c3bd45b869da1ac37c3f311182c7ee1456014c927c3469b212be9dfccbd1f6bf54549194c441caa22f5c4dbdd6b6164693a4c91625206623c96e52f1a40fbfd6a21278bb7d8ceca51ce8c1be58c36967efa3dd378800c868d75e9cb4d9b"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "228ec5406bc03353660e2fbde632511676be80d123ce156ca00e27b1732768e6b9cfe38c6257d69a8a0b20110e7d8d6737d50d0ad8c27cab415b2b065500d6f865077d32afa71a1fa6414dc7f92806922ed3f08f61452b439e6abb4ce368848150c5b1812c1aa09d0b4e7c5bc5febe6ab1af1dc89fd7a5a2b472fc"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "896ac315a8913270c3190930d0b8b0c4649df2e95acbd760ab38a02e4d919e23bab7ece94205dc71222616909e2474939ec29b81fdba9801288a39fd9c2025c2ce3f52a85c5d09aa468d88146583f9d32bf0f3f2450f1a7dfdeac95857675488ee28db17d3b670c6433eea7a46d934f14d248d475d5113a2b8ee491f778fc6c3ad80bc3bdf4efe73f0dd2cc799ce62360fe5dcbb8bf8ce6eacb46fb67e4386f11133f289c84cfecb93311b93ff58aaa3cbdd3d077721bcc3cd0719124218d2235e179b23f34256c0ad96eeac6be0da8e6ec64141741595d33b8a11824e5b92dca6caec4a80852f3a0b0f21de"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "7ed4a96a29faa82075d377273aafd10dd42b31127423aef8f44b3042f424fda7f9ca307eff024755d1f8ce452a31b9ba4a420aa30df036518235cb7130c2a4b9e3f0f2b560d9be869ef206d0beed8e033dea9d10876210529593b14f360c848e5d825d9a0e0711c1b66cce3fa537"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "e1c7ada82ad8ea095a06ff371f09"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "4a264fa160d293fa5b513b6e6a40209a34aa3441b7890949a1e824bf1bbc925cd27110b31aa653ba08d18066d63acf111daa030fa6d9f8736f896ff7663ec7919c3dba8a0f8372962f0c94930749f9648613501591522fe5a5110cbf90f2a0f0b3782be6036854af310275c77ba302f97043d465d2515d78edba60ec263e62bc82494775617d31f0d0d6aa43f4351bba2ef261df5f0fbcdce697a8dd54d04fb54ef52129a8fba13056a1e5502441500f4ff9ff6073fe21481c8f6e4d4177ab8334eaba4cc2f67426e5fd9190c1ae551a4c9db1"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "148f40c4fa5e8f54bb1a333cbf7648a40513900bd2211af287257e030ad5199ad89ff46e8c004dd6776a892d14bdeb20620e65c182e6da63e84ac435ff942e7c590cd47092cb5997d0ca590486c95cf1fe452d69614a1b7038f40a86469746ac4de19ae3d3259969751158989401d38b4240dfbda97cb10ce217ef7c5da700dd8c5ea735bf374383fea317d83ed2ec2084600a3381d0cdb84c468d1d124e316abdfb43"}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a80), r0) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x880) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001b80)={'veth1_macvtap\x00', 0x1000}) bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter={0x1e, 0x39fa, 0x2, 0xfffffff9, 0x100, r5, 0x7, '\x00', r6, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x3}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x0, 0x211, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000001) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001d40)={0x0, 0x2}, &(0x7f0000001d80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000001dc0)={0x6, 0x2, 0x3, 0x800, r11}, &(0x7f0000001e00)=0x10) 3.225935824s ago: executing program 1 (id=2933): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000004c0)=0x79, 0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x4020010, r0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0xdc, "0c1f2b311a377d36d5c62a92455dba5f459ca532a6f0ebed9c912ba5d81a1dff4b7c2e696a0196277c1438696673adc3a5a602505d39e2dbb8144a3022a690ca76daf2938bae23d31ed510e448c8794af1d6bdff18fc84a06e755469fbdb0f6eeb95a60ae3029df435c61562aa3f5b1c74e95e3ba7d67d20266477ec02a4e450b79bad17d29ce1ec12ef9a5d948480badac3d2ff51d4f8a1ca51aaa01df9e9ffd27c87b6d877b5aae559fb442ef424910696fe4b119e9393ce69d251ef36ab02086b82ed1533da0c2028666fa7e8fd099484b9ebbe7f6d8c41226d3c"}, &(0x7f0000000100)=0x100) listen(r2, 0xc) connect$x25(r2, &(0x7f0000000a80), 0x12) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x3, 0x4}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xfffffffb, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r6}, {0x0, 0x659, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8105}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @alu={0x7, 0x0, 0xb, 0xa, 0x0, 0x40, 0x4}, @ldst={0x1, 0x1, 0x3, 0x5, 0x4, 0xfffffffffffffffc, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x67, '\x00', r6, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x4, 0xade}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x4, 0x3, 0x10, 0x7}], 0x10, 0xa}, 0x94) 2.875803866s ago: executing program 1 (id=2934): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r2, &(0x7f0000000440)=@generic={0xa, "8e5eb80a1c57c3e2d22d74bfa8a2c944b36abf0bf9e55af66abad4c1a9b09f67f6e64aafa227e07fe253a9676fda0acf9c56de390deea6389a320cbb849fede3a9b3aceed0867ae99b9a2130564c9ed42d84a51a71b6664211d9464ec608b3c8184fc6726f08a1556fd13c479442306b3619e35a48de95e2f1872f2663ca"}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0x30, 0x4, 0x53, 0xfffff03c}, {0x6, 0x14, 0x6, 0x147c97ea}]}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000006c0)="3b000000010006", 0x7) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000007c0)={{}, "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"}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.590979166s ago: executing program 2 (id=2935): unshare(0x2a020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380"], 0xbc}}, 0xc0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r1, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a1401082cbd7000fddbdf250900020073797a300000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x3, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf25070000000500130081000000140008000000000000020000000000000b0000000000000005000000"], 0x38}}, 0x4817) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0, 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000200000009"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r6], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000900)}, 0x20) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r9}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) 2.1934571s ago: executing program 3 (id=2938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="670871ec40f1ffff1f0e0000000000001687", @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r4 = socket$inet6(0xa, 0x80003, 0xff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5, @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14004080}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c086e98db9ce6e3880900000009000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2516000000050003000000000005000400000000000c0001800800030003000000050003000000000005000200010000000500020000000000"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x4005) sendmsg$inet6(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x30}, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000440)={'raw\x00', 0x0, [0x7, 0x4, 0x3, 0x400, 0x7]}, &(0x7f00000001c0)=0x54) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000840)=0x100, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0xbf22, 0x20044}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="300077570c758619b1585680001800356a00000000000000000a800000ff030006000000001400000000000000000000000000000000006e0fb23a63f1e8472b4a1e13801b98c5df88300cbbfa03bdeaa46d477d35656d5c04d0dd6cd284208e68b4efd3e5d5385ea61867bb9c1ceeb51c6c4e2914fa16c1c88ec58253a56d8b575e13f383aa208df2ac90d256d9a37127fe13594d1bfa1d2170211bd8d950ebc088a166a60b39000b5f056254995b44a492bae8791a62bde50d2e45584cb27a9d"], 0x30}, 0x1, 0x0, 0x0, 0x24056}, 0x0) 2.179609602s ago: executing program 2 (id=2940): syz_emit_ethernet(0x51, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "24a2e1", 0x6, 0x11, 0x1, @empty, @mcast2, {[], {0x0, 0xe22, 0x1b, 0x0, @opaque="2389c9816358f5fbe63966c2d8050f4bdb76cb"}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x10003, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x28, 0x1, 0x1, [r1, r0, r0, r0, r0, r0]}}], 0x28}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1.964497672s ago: executing program 2 (id=2941): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7deab3ce7dd08a9d5a2748ae50400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast2, @mcast1, @remote, 0x1, 0x3, 0x7904, 0x500, 0x0, 0x40000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000009, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x20, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000004040)={0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r0, r2, 0x0, 0xffffffff004) getsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.875578759s ago: executing program 3 (id=2943): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001f00)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="b942782e11e878a6bf36cf8edb8bcf7bc04f6ee721da51a1790426a71ea604563e03cda220a7bedbd94157807f21ba911f897794cf319a26ade5b89e5eebae6d08f2f476fa207d05c8e9ed1db400f4fb518d71f722e84df6821944eb6c73b189d332b29e16455cbbd11a76eb227795fe08e7ce4fbcf956a6e26901820823aa53592f16eb5f0c7e51644e237624b5d76abf01ab4c08f302134162", 0x9a}, {&(0x7f00000006c0)="232de30d95ed98e3382b6d5b0fd313977873a28da299b4594a3c38d75022a8736ce84950859e56ca8607b3c8c8099fd8831f2191b0757a3a1e5ad0d262af8194c96549fff072dd46d68ce5e964744845aa4fb0b85ccce245b4ccadeee15b80ab4787cf937472706931bef99e17e449d6b055a55b1358e6ba390c30bc304c21e10c612e19404f7f9cfffcdf8e76d5c89cbd4d5c639a68f598dceeaebd842553681d2d93d808dce11560ddf6c1f141747ec2a65a4e31919dac713e7d2fb7918fa438f63cca619a1c7dbd96369e79e1b59c222dc3074e", 0xd5}, {&(0x7f0000000440)="b62513038a5bdadc0f82047cb0b49899e10207821b0ff9cd238fae2e71441c8de45e394c73eb1f672172092ebd0c4548ce633a1a0eebffae9d89824182405a3259e6c7d1dee81bdc6cb678252fac47d2628d3352e71c5545d06d2f5911f7bd9e8c5815fdc896224ce86c57b8d06ad846fe7d14a5b24d53322766", 0x7a}, {&(0x7f0000002f80)="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", 0xf17}], 0x4, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001}], 0x1, 0x44804) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x75e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x48001) unshare(0x400) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r4, 0x1, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0), 0x8) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f0000000000)={0xfffffff2, 0xce, 0x9, 0x0, 0x9, 0x0, 0x6}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f00000007c0)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000100)=0x800, 0x4) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000300)) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.849068997s ago: executing program 1 (id=2944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000001803030500ffffc4"], 0xe4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.660908972s ago: executing program 3 (id=2945): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000825bd7000fddbdf251100000005002d00010000000500290000000000"], 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x5) mmap(&(0x7f0000f15000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x4000) 1.548879041s ago: executing program 4 (id=2946): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x7, 0x6, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.449965443s ago: executing program 3 (id=2947): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl(r2, 0x8b32, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xa9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000280)={r7, 0x5, 0x17d, 0x5}, &(0x7f00000002c0)=0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xf, 0x7, 0x64, @local, @mcast1, 0x80, 0x10, 0x1, 0xee}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xf, 0x7, 0x64, @local, @mcast1, 0x80, 0x10, 0x1, 0xee}}) 1.35669651s ago: executing program 4 (id=2948): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) socketpair(0x1d, 0x802, 0x7, &(0x7f0000004740)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x14, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x9b56f0b53039426e, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0xa0}}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x14, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x9b56f0b53039426e, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0xa0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@updpolicy={0x184, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0xfffe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, {0x0, 0x882d, 0x0, 0x1, 0x100000000, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}, @algo_aead={0xb5, 0x12, {{'ccm-aes-ce\x00'}, 0x348, 0x80, "c57a3c28e6f8509cf373d96c76d2d536cc1b86e211df097802500e562518c778b6c40b9920b6c84fb46b8cddf28ff26fd30d8c772204bcb4409becd47d7f0e6b9e7d04d488953a3a88d537c58820f76f491e87d871dbedd9e376fb3ee0d2b4d4db29e213cdf8b30bfa"}}, @replay_thresh={0x8, 0xb, 0x1ff}]}, 0x184}}, 0x4c050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r7, 0x400454cd, 0x339) (async) ioctl$TUNSETLINK(r7, 0x400454cd, 0x339) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9afc, 0x0, 0x3}, {0x0, 0x8001, 0x2, 0xa3}, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x7, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000", @ANYRESDEC=r6, @ANYBLOB="00000000000000002c000000000000001800000000000000180095000000000000009500000000000000e2946e36a6aa320d6ef95880ff366df5b3ba046026da83ad0ce90510948c139c816fe8aff6929a561d34f350fd32f02e80f8140c361b403b4f8479bd26bd9c8f", @ANYRESHEX=r7, @ANYRES64, @ANYRESOCT=r4], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x7, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000", @ANYRESDEC=r6, @ANYBLOB="00000000000000002c000000000000001800000000000000180095000000000000009500000000000000e2946e36a6aa320d6ef95880ff366df5b3ba046026da83ad0ce90510948c139c816fe8aff6929a561d34f350fd32f02e80f8140c361b403b4f8479bd26bd9c8f", @ANYRESHEX=r7, @ANYRES64, @ANYRESOCT=r4], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r10}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r10}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r10}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r9, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) close(0x3) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/95, &(0x7f0000000040)=0x5f) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.307901687s ago: executing program 1 (id=2949): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000100000008500000087000000850000000f0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000100000008500000087000000850000000f0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x3, 0x7fffffff, 0x3f8}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000280)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)='>', 0x1}], 0x1, 0x0, 0x0, 0x810}, 0x1) (async) sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)='>', 0x1}], 0x1, 0x0, 0x0, 0x810}, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc0, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x0, 0x7fffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}}, 0x2c000010) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000003e40)={0x128, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@fast_bss_trans={0x37, 0x100, {0x80, 0x7, "e6c1ef5b5c68668d0c189ce7d4aaed09", "6ee988957b0661e146691b71803cbf68ca1dc4805dc92942cacbdd1681a31ed5", "ec0981469d7564dfb5664d4b7f11b42763f8a4f7e1fc031da269ff5e57727094", [{0x4, 0x10, "c63215136254171f3e785b95f755ad1d"}, {0x2, 0x15, "44eb628e1ea2f79fe4fcbae08b4344dfa66a6886cd"}, {0x3, 0x28, "7ac588f636fde88db529db60436c8a54575afa236251a1718e182308a12c3d1a8334262935964bc5"}, {0x2, 0x6, "7874e9ed05c5"}, {0x1, 0x1e, "2e777ac7bfa6d83f5bfb7e1884eee89ce2d2f0cbab33ef21709182ae54c4"}, {0x3, 0x24, "45e45865f32d56143c97cace4da4a523acd9e06eb07c52b6c098eb7fca850221995b0d48"}, {0x3, 0xb, "4522bb45f260934a024e0b"}]}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x11, 0x3, 0x7859a0ba, 0x0, 0x20005, 0x80, 0x2}}, {0x8, 0x2, [0x6, 0x3ff]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0xffff7fff}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x9, 0x7fff, 0xffffffff, 0x2, 0x78, 0x7fff, 0x8}}, {0x19, 0x2, [0x9, 0x7, 0x200, 0x6, 0x5, 0x6, 0x5fcf, 0x0]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{}, {0x0, 0x2, 0x9}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x0, 0x2, 0x0, 0x6, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x80, 0x55, &(0x7f0000000200)=""/85, 0x41100, 0x61, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xae, 0x7806000, 0x6618}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r8, r9], &(0x7f00000004c0)=[{0x0, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x0, 0xb}], 0x10, 0x5}, 0x94) 1.047420699s ago: executing program 1 (id=2950): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x7, &(0x7f00000001c0)=0x3, 0x4) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, r3, 0x881056f66a146f61, 0xfffffffd, 0x25dfdbff, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) 994.491496ms ago: executing program 3 (id=2951): r0 = socket$inet6(0xa, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r4, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="00f254e4457f000000", @ANYRES16=r8, @ANYBLOB="08022abd7000fddbdf250800000008001700", @ANYRES32=r1, @ANYBLOB="05001400070000000500220000000000080009000100000005000d0000000000"], 0x3c}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet(r11, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x1, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r9, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6=r10}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r9, &(0x7f0000001f80), 0x0}, 0x20) sendto$inet6(r0, 0x0, 0xffffffffffffff5e, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 935.901682ms ago: executing program 4 (id=2952): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x1c}}, 0x4800) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) 905.508485ms ago: executing program 2 (id=2953): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b00000000008000008500000075000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000640)="04000000f655", 0x6}], 0x2}, 0x2400c084) unshare(0x22020400) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 664.417021ms ago: executing program 4 (id=2954): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r1, &(0x7f0000000180)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x80) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) write(r0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) 640.595097ms ago: executing program 4 (id=2955): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) bind$llc(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000580), 0x80800) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f00000005c0)=0x5, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x9, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf250b0000000c00058008000100"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r2, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x47e2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x47e2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x20004055) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f00000006c0)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 244.330072ms ago: executing program 2 (id=2956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000003010500ac1e0101000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fc000000000000000000000000000000000000003300000002000000000000000000000000000000000000000000000001030000040000004900000000000000ff010000000000000000000000000001000000003200000002"], 0x1fc}}, 0x0) 160.784978ms ago: executing program 3 (id=2957): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x3) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r5, 0x7434) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 77.005068ms ago: executing program 2 (id=2958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000ef000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 0s ago: executing program 4 (id=2959): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x40000000, 0x0, 0x2, 0x2, 0x41, 0x5e7}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x5, 0x5, 0x200}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) r3 = socket(0x1e, 0x1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x2, 0xff, 0x0, 0xffff}, 0x20) (async) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x85, 0x200, 0x8, 0x52e7, 0x3ff, 0x1, 0xbfe, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={r4, @in={{0x2, 0x4e23, @local}}}, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@private1, 0x4, 0x2, 0xff, 0xb, 0x3, 0x5}, 0x20) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000500)={{r0, &(0x7f0000000300)='!.%*}@@\x00', 0x8000, &(0x7f0000000340)={@_ha_fsid={[0x0, 0x8000]}, {0xffff, 0xca, 0xd, 0x1}}, 0x4e, &(0x7f0000000380), &(0x7f00000003c0)=0x7}, {[0x0, 0x6689ad51, 0x7fffffff, 0x6]}, 0xfffffffa, 0xe0, &(0x7f0000000400)=""/224}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0xd}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4040084) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000700)={@empty, 0x1, 0x0, 0xff, 0x2, 0xffff, 0x81}, 0x20) (async, rerun: 32) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000011c0)={{r8, &(0x7f0000000740)='\x00', 0x20101, &(0x7f0000000780)={@align=0xd, {0x4, 0x2, 0xfff, 0x1ff}}, 0x8001, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0xd49e}, 0x8, &(0x7f00000010c0)=[{0x1, 0x401, &(0x7f0000000840)='nl80211\x00', &(0x7f0000000880)="e15bf71b254da2941cc59651020ebc7063225466f7fe0557dd6d4ff85dde8cb11d20c226c85233546f0bf31ab757cead6dc2684586980e963b9cf26e0fc544b8e549e4a4e6e4a0c647cf06aa998a96d1238d2f6a980a6d5634bb95c81e04c4668c696bde25f8154920e4167f1864a6f201508447635aad9be286cb3da304f2df8cd996a076d552dffac19a09fd36ff462047cf56044555f1d8e6d94cf0b8e6c1a35e79d9a1798c4e7c03d89bc0856fe3193820f87d2e5891363900b084f2ad00c88975173adc62c4784737f379288665b99cc0ff8f99fe3a1f9c6bc1851af931bcc2c485789943", 0xe7, 0x2}, {0x3, 0x2, &(0x7f0000000980)='wlan0\x00', &(0x7f00000009c0)="804f2c41d0913bb2c6c48ce35dc81b63c9f69585bd134e08f71bdf7462304de16da5a2b4c60d5af6177f526e7d10c75238750f06bb92f04cb4dcb8de1fd38c13022dbfe4e394b072ce3b101c4b81120e0a2d9fb209c0e8f86b3248796692d8f7e6d164d1c36617e1c885803dfc0e3b0b8620e0e558b194fd899f1289e7da762bb25abab6fd", 0x85, 0x12}, {0x1, 0x9, &(0x7f0000000a80)='batadv_slave_1\x00', &(0x7f0000000ac0)="8bf64e7815595ded9805fe9b8cd592ca0c6214a2d21e2d6dcfc2096ef8773a87451d6db9a107412f3769f7bbe548fc9268cb9d259dbd4fb0801c3ceb3a07153d2e83159d4a16c2b0986226b60de1d67266f33db6e3480618b7d5d850856be8bfc41dbbe19d2404cb501cfc14f250a44841e5553a1dfb293c8f242f3f00e0e84e2961573ffc4336ddf9538c47576e604a6a5fbeb63ac461bfbb133b240b1781c8bdacbecfee88f0ee39391f1fcb4987b08481f793f72cda41283185b61b30d4c3e48fba78d11b34380674bff1a244f08758961cfb", 0xd4, 0xa}, {0x1, 0x2, &(0x7f0000000bc0)='batadv_slave_1\x00', &(0x7f0000000c00)="ab0f7c3c1528a76dd5b72abff7e2ffa92528940ff3ba6f9614c0e4600887229ccfbf1a04fc6316cf6ad78db3f68bd3876ffb61e218ad3d33b7da851ec0479b0fe9bc36cc44f6c379380724898d53840f1c77139eb5b304d6f4980cb0ccaecf616dd754b12c76ac492f8eca2153086fbc9af4e3e4c2603ea90a5ea1fc9f8bd58bdf2e2a71", 0x84, 0x18}, {0x2, 0x7, &(0x7f0000000cc0)='^+\x01\x00', &(0x7f0000000d00)="045ef8d6d7302345d50d6ce1cedb074156f0c3bf8630550f242a74060fc75f7c68510219787b0682f8c2c068e1f460a64258d5db9b11cabec3880df9995fcffbbbc669dc1d4330ec9a81e82ae1b9879dfa8f0aa6231e6a85385162568292788d873848504bafdeb0f5a6351ddeb84d3174297fe4c2585fa9ebc0911e94c7576d21026e0ca6b5c4d94a89b4b188a0853a60240b755dad93dbe4841c6d8401f4a29418aae28cdfd977453dcabe8dd8dba2353f080590f6c3f2c1c75947c6e82aab017dec4ef6f948d2ac6bee436a1fbd8e8a4f1b4dbc37f11611dd", 0xda, 0x10}, {0x0, 0x5, &(0x7f0000000e00)='\x00', &(0x7f0000000e40)="2bbcd9696395dca4c0067cf7fe6d0c371dc785849ea40f327bf4138d7dd8e7d3d765955318ba41", 0x27, 0x2}, {0x3, 0x5, &(0x7f0000000e80)='!.%*}@@\x00', &(0x7f0000000ec0)="5180710c391cc4aa570945d1a36efd42b40b2bb137c3a151301dc2fe81541811780a1d4a0adf7c59e4ca2fb971002e3edcfe4427be8cffacaa76345cc97e92971257a3a4571cacde3316fa851a2f752b8dd71036abc266f1a19dddececfa9a19fa5ed469dc62d60f1b1fee891cb20c9ade8938677e52eee6b71d047cb410b4d0dc2b534dee53d22d3369595ed1622c0258f1ebfcf14d47fba20183100bf632c588d8c39be7efee56baa29941163dd1aefe816b6e7c2a09476682d35ef526a900b2c3c4", 0xc3}, {0x3, 0x9c8b, &(0x7f0000000fc0)='^\x00', &(0x7f0000001000)="9de29c9c002e4e5900061ae420d5d37b895b923c1be248a3e3eeeab03b8403dc429c47490c6230f757b5b81a75bc8befdecd07972fe363dd56fdeb674635481e7883b914c4f91d768dfde1404ef851b923861a3a98933ccf2cf63d0cd3aab9bece8db247d75f6221d451949f5bdab3eccd251f8904c2ec227cce185e2b743eb07e4b8734a8f03110d0d3f714a35b5248df35c1c796ace3b9225c77d6fc35de16dab4f3f9cf4fcbca24b94fa934a76e55179387", 0xb3, 0x38}]}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000021) (async, rerun: 32) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xd, 0x5b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x33e}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x11) (async, rerun: 32) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x20, r6, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) recvmsg(r3, &(0x7f0000001880)={&(0x7f0000001580)=@phonet, 0x80, &(0x7f0000001780)=[{&(0x7f0000001600)=""/150, 0x96}, {&(0x7f00000016c0)=""/28, 0x1c}, {0xfffffffffffffffe}, {&(0x7f0000001700)=""/125, 0x7d}], 0x4, &(0x7f00000017c0)=""/183, 0xb7}, 0x0) (async) sendmsg$inet_sctp(r5, &(0x7f0000001e00)={&(0x7f00000018c0)=@in6={0xa, 0x4e24, 0x0, @loopback, 0x5}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001900)}, {&(0x7f0000001940)="f15db76194b80718e58b0e80be90f74e7f43a9e74a", 0x15}, {&(0x7f0000001980)="84cd35160702b6ad941eaa608c2324761a8fdf2bee31910731ea04b12ffd308bb836b51996e61682a91dd2da5655be9f10f8155928f5d95aa5f19de3eaaf339a5c1a1e301351a1f6073b377f7f94d3885aa348e590b78d9c9c619b226e16dde2f74139109de99ecd9b82948d819ace22628682a12a08cbecc9d06a15dcdf68a7ad1e19eed161baf9ebce3f690d7e4b85c436a7f8f353167c5b82293dd7ec6d0b561277e138f3b5af51a5da1e0d898d35648ff37bb883bfdf65a4f33df277c1e58c8cdb73f1c15170d4f09f90c74cc08888065f872a6f52f6ffb2e48ca88ce8933808083a03678e", 0xe7}, {&(0x7f0000001a80)="b7299f0209628aabfa2c914222c10e5bc83bb72846af62a07a6b97a77aa4cf3dac0896547077f567f80f96d7159f897fc1d8577e64403d7af18b34eeaf0f0e79cb37c75a1881d99663cf75d8797d1361b1d71ea99dc8d57ac25e390f609731bc0bd4e4021b9482cb2eb1342302230467", 0x70}, {&(0x7f0000001b00)="f5a8478365bca6fc0e8de56432ad51b016df29e7d5521c49def674566a76b954c9f50e1c46f2eb8ba5e0b5f27dd7b76c203e975e97fc22714fe53c1ca653b6c608db0d8d5bcf0dcc6c68", 0x4a}, {&(0x7f0000001b80)="5d034c8ded71389306a7c1380185fc06c712ca5b9a7f18aadf485ad72671c076bee6841e57c7a04ee9ff7d6c61977b950cebcb7c3dff1bdd9e6055c7951358a7deec40918684341e0c1dd9d7043f50852e75ecb0ae49acd2bc0f9758134059177b049a39102246ff2d96fb17e9c222b12817bf374a45c750911f8d182b38945c9c298e26344042f4c8aaf1e0886fa353925b685ef1a14e527dd85153ed6adbcbc3458f26c28253e3fa80ee315ee0dbdaa4566dfdea9f61b7e235b4ead09642afc725306f6bc3d76390abd78d15bed069e4dc4fe1a198609cefe8035f60a0912845cc0f126806", 0xe6}, {&(0x7f0000001c80)="1be165ff85a69060c1679fba9bb17cc810731345ed775325d24a999136b1d54060c45a0904be7908cb19296fe5b371a3a4905f069d08909348ac997dfc059a4c095125c3f0412b8c9ac6ecc604e6ba3cba6137664d65bbff196a17010136c3d592b46c44f09582e4b5d9ad9ddc97abff44118f8756e42ba33bfe79e512d99f4d7492563779e54c556d7c5b1f9daf22731f584d88bdb2c142f0637fc0d34b26d8", 0xa0}], 0x7, &(0x7f0000001dc0)=[@init={0x18, 0x84, 0x0, {0x7, 0x2, 0xd1e, 0x9}}, @init={0x18, 0x84, 0x0, {0x1ff, 0x8, 0xffff, 0xf1}}], 0x30, 0x10}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r2, 0x0, 0x87, 0xfe, &(0x7f0000001e40)="1ea494afa83ec8eec59a869d23389ca0ab3767627a2ec46c64c07cdd740242006376acdb3d81c88fd92b41fd3142b16544c382333c67df2dfc3376374a54105f6fc7f3e1149c6e7b3d6e513f6e376ccbb9e1f95356ba068eed8287d35d077e4ae711a2a79a43f886d8af31dab66d19e2f8ba0484249ce2ddae09477382f3b971c62246248e5c05", &(0x7f0000001f00)=""/254, 0x1, 0x0, 0x30, 0x7f, &(0x7f0000002000)="42c61ed66f9d53c17d1314835dac3d6e9698f9febdb8e7a84cb9c8f8efa332d98cd323c0ec9821f18bb9e40353bfad0e", &(0x7f0000002040)="dcb0ea872e8323f267d2c96529d73bfaef8a556809a317bfa1440ecf69e20cbc6d4e095716672fb36d1341a8a1b47ff81c244f644ba9102bf7df46a0a273f5223b2f9879549139021fb7b22d1545d8d4f29d0773dfa522f64077caf7080a2908b0cdac9cbdb8aee7b83fc5888f8a382f2e217b487e0a8a22d90be608d241ad", 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f00000021c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002240), 0xffffffffffffffff) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000002280)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x2c, r11, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) kernel console output (not intermixed with test programs): nable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.768679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.811142][T10795] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 222.973227][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 223.009268][T10795] bond4: entered promiscuous mode [ 223.014984][T10795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.093881][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 223.311049][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.713109][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.747498][T10824] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 223.808937][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'. [ 223.936051][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.185424][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1238'. [ 224.353882][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.391511][T10856] tipc: Enabled bearer , priority 0 [ 224.628024][T10870] netlink: 'syz.3.1253': attribute type 21 has an invalid length. [ 224.653790][T10856] tipc: Resetting bearer [ 224.701048][T10864] syzkaller0: entered promiscuous mode [ 224.706592][T10864] syzkaller0: entered allmulticast mode [ 224.750399][T10864] tipc: Resetting bearer [ 224.828624][T10855] tipc: Resetting bearer [ 224.962467][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 225.002109][T10879] netlink: 'syz.2.1255': attribute type 29 has an invalid length. [ 225.011155][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 225.391214][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.431320][T10673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.665588][T10855] tipc: Disabling bearer [ 226.679766][ T5940] tipc: Node number set to 3121848796 [ 226.805175][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 227.397647][T10947] syzkaller0: entered promiscuous mode [ 227.403710][T10947] syzkaller0: entered allmulticast mode [ 227.471705][T10673] net_ratelimit: 1025 callbacks suppressed [ 227.471725][T10673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.497062][T10951] __nla_validate_parse: 5 callbacks suppressed [ 227.497079][T10951] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1273'. [ 227.517415][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.526632][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.535466][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.597726][T10955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.606572][T10955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.615472][T10955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.625331][T10955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.660981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.670828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.792610][T10959] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.835606][T10959] bond5: (slave lo): Enslaving as an active interface with an up link [ 227.878001][T10962] netlink: 'syz.3.1275': attribute type 1 has an invalid length. [ 228.058799][T10980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1281'. [ 228.217668][T10990] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1284'. [ 228.260493][T10994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1286'. [ 228.270486][T10994] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1286'. [ 228.284909][T10996] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1284'. [ 228.396019][T10997] lo speed is unknown, defaulting to 1000 [ 228.475927][T11006] netlink: 'syz.1.1288': attribute type 3 has an invalid length. [ 228.512803][T11007] netlink: 'syz.1.1288': attribute type 3 has an invalid length. [ 228.547956][T11007] pimreg: left allmulticast mode [ 228.940506][T11030] netlink: 'syz.1.1293': attribute type 1 has an invalid length. [ 229.017893][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1297'. [ 229.019118][T11030] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.041668][T11038] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1297'. [ 229.083723][T11033] bond3: (slave gretap1): making interface the new active one [ 229.113769][T11033] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 229.314283][T11042] syzkaller0: entered promiscuous mode [ 229.319898][T11042] syzkaller0: entered allmulticast mode [ 229.352873][T11046] netlink: 'syz.2.1300': attribute type 10 has an invalid length. [ 229.371303][T11046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1300'. [ 229.395223][T11052] : renamed from dummy0 [ 229.550653][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 231.008934][T11049] lo speed is unknown, defaulting to 1000 [ 231.047682][T11084] syzkaller0: entered promiscuous mode [ 231.229266][T11089] FAULT_INJECTION: forcing a failure. [ 231.229266][T11089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.279773][T11089] CPU: 0 UID: 0 PID: 11089 Comm: syz.3.1309 Not tainted syzkaller #0 PREEMPT(full) [ 231.279814][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.279829][T11089] Call Trace: [ 231.279838][T11089] [ 231.279847][T11089] dump_stack_lvl+0xe8/0x150 [ 231.279884][T11089] should_fail_ex+0x412/0x560 [ 231.279921][T11089] _copy_from_iter+0x1d3/0x1670 [ 231.279960][T11089] ? rcu_is_watching+0x15/0xb0 [ 231.279996][T11089] ? __pfx__copy_from_iter+0x10/0x10 [ 231.280038][T11089] ? netlink_sendmsg+0x650/0xb40 [ 231.280061][T11089] ? skb_put+0x11b/0x210 [ 231.280090][T11089] netlink_sendmsg+0x6c0/0xb40 [ 231.280124][T11089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.280152][T11089] ? aa_sock_msg_perm+0xf1/0x1b0 [ 231.280187][T11089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.280216][T11089] ____sys_sendmsg+0x972/0x9f0 [ 231.280266][T11089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.280302][T11089] ? import_iovec+0x73/0xa0 [ 231.280328][T11089] ___sys_sendmsg+0x2a5/0x360 [ 231.280360][T11089] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.280422][T11089] ? __fget_files+0x2a/0x420 [ 231.280453][T11089] ? __fget_files+0x3a0/0x420 [ 231.280494][T11089] __x64_sys_sendmsg+0x1bd/0x2a0 [ 231.280524][T11089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.280561][T11089] ? __pfx_ksys_write+0x10/0x10 [ 231.280596][T11089] do_syscall_64+0x14d/0xf80 [ 231.280625][T11089] ? trace_irq_disable+0x3b/0x150 [ 231.280644][T11089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.280665][T11089] ? clear_bhb_loop+0x40/0x90 [ 231.280691][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.280712][T11089] RIP: 0033:0x7f48a699c799 [ 231.280732][T11089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.280750][T11089] RSP: 002b:00007f48a782b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.280773][T11089] RAX: ffffffffffffffda RBX: 00007f48a6c15fa0 RCX: 00007f48a699c799 [ 231.280798][T11089] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 231.280810][T11089] RBP: 00007f48a782b090 R08: 0000000000000000 R09: 0000000000000000 [ 231.280822][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.280833][T11089] R13: 00007f48a6c16038 R14: 00007f48a6c15fa0 R15: 00007ffd2a368a68 [ 231.280863][T11089] [ 231.667050][T11103] netlink: 'syz.2.1313': attribute type 13 has an invalid length. [ 231.725741][T11103] netlink: 'syz.2.1313': attribute type 17 has an invalid length. [ 231.748773][T11107] bond0: entered promiscuous mode [ 231.754444][T11107] : entered promiscuous mode [ 231.759626][T11107] bond_slave_1: entered promiscuous mode [ 231.767432][T11107] batadv0: entered promiscuous mode [ 231.917818][T11103] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.930727][T11114] tipc: MTU too low for tipc bearer [ 232.286953][T11136] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 232.331604][T11136] bond6 (unregistering): Released all slaves [ 232.477017][T11141] can: request_module (can-proto-3) failed. [ 232.525380][ T35] net_ratelimit: 36 callbacks suppressed [ 232.525402][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.569198][T11142] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 232.673573][T10673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.705139][T11161] FAULT_INJECTION: forcing a failure. [ 232.705139][T11161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.723750][T11161] CPU: 1 UID: 0 PID: 11161 Comm: syz.2.1328 Not tainted syzkaller #0 PREEMPT(full) [ 232.723782][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.723795][T11161] Call Trace: [ 232.723804][T11161] [ 232.723820][T11161] dump_stack_lvl+0xe8/0x150 [ 232.723857][T11161] should_fail_ex+0x412/0x560 [ 232.723894][T11161] _copy_from_iter+0x1d3/0x1670 [ 232.723932][T11161] ? rcu_is_watching+0x15/0xb0 [ 232.723968][T11161] ? __pfx__copy_from_iter+0x10/0x10 [ 232.724009][T11161] ? netlink_sendmsg+0x650/0xb40 [ 232.724032][T11161] ? skb_put+0x11b/0x210 [ 232.724061][T11161] netlink_sendmsg+0x6c0/0xb40 [ 232.724094][T11161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.724121][T11161] ? aa_sock_msg_perm+0xf1/0x1b0 [ 232.724154][T11161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.724182][T11161] ____sys_sendmsg+0x972/0x9f0 [ 232.724218][T11161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.724255][T11161] ? import_iovec+0x73/0xa0 [ 232.724280][T11161] ___sys_sendmsg+0x2a5/0x360 [ 232.724314][T11161] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.724378][T11161] ? __fget_files+0x2a/0x420 [ 232.724409][T11161] ? __fget_files+0x3a0/0x420 [ 232.724451][T11161] __x64_sys_sendmsg+0x1bd/0x2a0 [ 232.724481][T11161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.724518][T11161] ? __pfx_ksys_write+0x10/0x10 [ 232.724553][T11161] do_syscall_64+0x14d/0xf80 [ 232.724585][T11161] ? trace_irq_disable+0x3b/0x150 [ 232.724603][T11161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.724626][T11161] ? clear_bhb_loop+0x40/0x90 [ 232.724652][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.724673][T11161] RIP: 0033:0x7f372999c799 [ 232.724692][T11161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.724710][T11161] RSP: 002b:00007f372a790028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.724732][T11161] RAX: ffffffffffffffda RBX: 00007f3729c15fa0 RCX: 00007f372999c799 [ 232.724747][T11161] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 232.724760][T11161] RBP: 00007f372a790090 R08: 0000000000000000 R09: 0000000000000000 [ 232.724773][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.724785][T11161] R13: 00007f3729c16038 R14: 00007f3729c15fa0 R15: 00007ffe82ca8538 [ 232.724825][T11161] [ 232.753350][T11169] __nla_validate_parse: 8 callbacks suppressed [ 232.753406][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'. [ 232.902805][T11163] No such timeout policy "syz1" [ 233.029882][T11163] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1329'. [ 233.051825][T11170] lo speed is unknown, defaulting to 1000 [ 233.069232][T11159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.080374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.123267][T11163] ksmbd: Unknown IPC event: 1, ignore. [ 233.151102][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.453008][T11179] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 233.482565][T11176] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 233.629946][T11203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.653090][T11203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.681532][ T7495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.692852][T11203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.712349][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.770426][T11205] tipc: Enabled bearer , priority 0 [ 233.809370][T11199] syzkaller0: entered promiscuous mode [ 233.825951][T11199] syzkaller0: entered allmulticast mode [ 233.892158][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 233.907646][T11207] xt_hashlimit: size too large, truncated to 1048576 [ 233.963096][T11199] tipc: Resetting bearer [ 233.975310][T11198] tipc: Resetting bearer [ 234.003296][T11198] tipc: Disabling bearer [ 234.234070][T11228] FAULT_INJECTION: forcing a failure. [ 234.234070][T11228] name failslab, interval 1, probability 0, space 0, times 0 [ 234.261273][T11228] CPU: 1 UID: 0 PID: 11228 Comm: syz.1.1342 Not tainted syzkaller #0 PREEMPT(full) [ 234.261316][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.261329][T11228] Call Trace: [ 234.261337][T11228] [ 234.261345][T11228] dump_stack_lvl+0xe8/0x150 [ 234.261380][T11228] should_fail_ex+0x412/0x560 [ 234.261416][T11228] should_failslab+0xa8/0x100 [ 234.261456][T11228] __kmalloc_noprof+0xe8/0x760 [ 234.261480][T11228] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 234.261518][T11228] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 234.261546][T11228] ? is_bpf_text_address+0x26/0x2b0 [ 234.261574][T11228] genl_family_rcv_msg_doit+0xd9/0x330 [ 234.261603][T11228] ? __asan_memcpy+0x40/0x70 [ 234.261627][T11228] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 234.261664][T11228] ? apparmor_capable+0x126/0x170 [ 234.261690][T11228] ? bpf_lsm_capable+0x9/0x20 [ 234.261719][T11228] ? security_capable+0x7e/0x2c0 [ 234.261755][T11228] genl_rcv_msg+0x61c/0x7a0 [ 234.261790][T11228] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.261817][T11228] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 234.261838][T11228] ? __lock_acquire+0x6b5/0x2cf0 [ 234.261877][T11228] netlink_rcv_skb+0x232/0x4b0 [ 234.261921][T11228] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.261951][T11228] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.262010][T11228] ? down_read+0x272/0x2e0 [ 234.262028][T11228] ? genl_rcv+0xd/0x40 [ 234.262058][T11228] genl_rcv+0x28/0x40 [ 234.262083][T11228] netlink_unicast+0x80f/0x9b0 [ 234.262125][T11228] ? __pfx_netlink_unicast+0x10/0x10 [ 234.262160][T11228] ? netlink_sendmsg+0x650/0xb40 [ 234.262194][T11228] ? skb_put+0x11b/0x210 [ 234.262223][T11228] netlink_sendmsg+0x813/0xb40 [ 234.262256][T11228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.262283][T11228] ? aa_sock_msg_perm+0xf1/0x1b0 [ 234.262316][T11228] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.262344][T11228] ____sys_sendmsg+0x972/0x9f0 [ 234.262381][T11228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.262418][T11228] ? import_iovec+0x73/0xa0 [ 234.262454][T11228] ___sys_sendmsg+0x2a5/0x360 [ 234.262487][T11228] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.262553][T11228] ? __fget_files+0x2a/0x420 [ 234.262583][T11228] ? __fget_files+0x3a0/0x420 [ 234.262626][T11228] __x64_sys_sendmsg+0x1bd/0x2a0 [ 234.262656][T11228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.262692][T11228] ? __pfx_ksys_write+0x10/0x10 [ 234.262728][T11228] do_syscall_64+0x14d/0xf80 [ 234.262757][T11228] ? trace_irq_disable+0x3b/0x150 [ 234.262775][T11228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.262795][T11228] ? clear_bhb_loop+0x40/0x90 [ 234.262821][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.262842][T11228] RIP: 0033:0x7f10fa39c799 [ 234.262862][T11228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.262880][T11228] RSP: 002b:00007f10fb29d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.262901][T11228] RAX: ffffffffffffffda RBX: 00007f10fa616090 RCX: 00007f10fa39c799 [ 234.262917][T11228] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 234.262929][T11228] RBP: 00007f10fb29d090 R08: 0000000000000000 R09: 0000000000000000 [ 234.262942][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.262953][T11228] R13: 00007f10fa616128 R14: 00007f10fa616090 R15: 00007ffc86e07508 [ 234.262986][T11228] [ 234.708016][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 235.268033][T11264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1355'. [ 235.279402][T11264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1355'. [ 235.338051][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1357'. [ 235.583483][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1359'. [ 235.698636][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 235.752259][T11280] bond2: entered allmulticast mode [ 235.757806][T11280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.790659][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1361'. [ 235.814752][T11281] bond2 (unregistering): Released all slaves [ 235.847822][T11288] xt_hashlimit: overflow, try lower: 0/0 [ 235.853855][T11288] sctp: [Deprecated]: syz.2.1361 (pid 11288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.853855][T11288] Use struct sctp_sack_info instead [ 235.871921][T11288] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 235.900183][T11288] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 236.409902][T11327] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 237.603744][T11379] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 237.627805][T11385] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 237.684707][T11348] net_ratelimit: 86 callbacks suppressed [ 237.684729][T11348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.759107][T11379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.842828][T11397] sctp: [Deprecated]: syz.4.1387 (pid 11397) Use of int in max_burst socket option. [ 237.842828][T11397] Use struct sctp_assoc_value instead [ 238.042386][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.283930][T11409] __nla_validate_parse: 4 callbacks suppressed [ 238.283951][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 238.462434][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.567243][T11414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.624646][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1393'. [ 238.634499][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1393'. [ 238.691456][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 238.724461][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1393'. [ 238.790072][T11427] netlink: 'syz.2.1396': attribute type 7 has an invalid length. [ 238.799629][T11424] bond5 (unregistering): Released all slaves [ 238.807605][T11427] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1396'. [ 238.916225][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.953185][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1398'. [ 239.024794][T11435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1399'. [ 239.074926][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.353113][T11454] tipc: Enabled bearer , priority 10 [ 239.591678][ T7501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.031152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.111510][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.654267][T11467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.687678][T11470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.752753][T11472] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1406'. [ 242.178097][T10676] tipc: Node number set to 1901170966 [ 242.480603][T11488] bond3: option lp_interval: invalid value (0) [ 242.489347][T11488] bond3: option lp_interval: allowed values 1 - 2147483647 [ 242.502592][T11488] bond3 (unregistering): Released all slaves [ 242.546688][T11487] bond6: entered allmulticast mode [ 242.567638][T11492] macvlan2: entered promiscuous mode [ 242.573342][T11492] macvlan2: entered allmulticast mode [ 242.580304][T11492] bond6: entered promiscuous mode [ 242.586579][T11492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.602605][T11492] bond6: left promiscuous mode [ 242.645141][T11494] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 242.911191][ C0] net_ratelimit: 9 callbacks suppressed [ 242.911213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.943246][ T7495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.994442][T11538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1422'. [ 243.151057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.231871][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.353111][T11551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.361784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.061180][ T7495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.271886][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.671267][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.171200][ T7495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.495367][T11499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.718047][T11565] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1430'. [ 245.840417][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 245.892385][T11570] lo speed is unknown, defaulting to 1000 [ 246.108401][T11587] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 246.306550][T11594] bond5: (slave veth7): Enslaving as an active interface with a down link [ 246.374652][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1434'. [ 246.385647][T11608] rdma_rxe: rxe_newlink: failed to add gre0 [ 246.497953][T11594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.579384][T11587] netlink: 'syz.1.1434': attribute type 32 has an invalid length. [ 246.672984][T11621] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1443'. [ 246.778200][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 246.793176][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1444'. [ 246.806177][T11624] tipc: Enabling of bearer rejected, failed to enable media [ 246.889859][T11629] netlink: 'syz.2.1446': attribute type 11 has an invalid length. [ 247.258651][T11648] pim6reg99999999: entered allmulticast mode [ 247.285976][T11644] syzkaller1: entered promiscuous mode [ 247.319644][T11644] syzkaller1: entered allmulticast mode [ 247.474517][T11661] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 247.484293][T11661] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1456'. [ 247.640372][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1458'. [ 247.651168][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'. [ 247.769569][T11680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1462'. [ 248.410459][T11698] tipc: Enabled bearer , priority 0 [ 248.432637][T10676] net_ratelimit: 12 callbacks suppressed [ 248.432654][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.448861][T11697] tipc: Disabling bearer [ 248.501288][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.848049][T11724] FAULT_INJECTION: forcing a failure. [ 248.848049][T11724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.898175][T11724] CPU: 0 UID: 0 PID: 11724 Comm: syz.4.1478 Not tainted syzkaller #0 PREEMPT(full) [ 248.898206][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.898228][T11724] Call Trace: [ 248.898237][T11724] [ 248.898247][T11724] dump_stack_lvl+0xe8/0x150 [ 248.898285][T11724] should_fail_ex+0x412/0x560 [ 248.898322][T11724] _copy_from_user+0x2d/0xb0 [ 248.898348][T11724] __sys_bpf+0x229/0x950 [ 248.898372][T11724] ? __pfx___sys_bpf+0x10/0x10 [ 248.898408][T11724] ? ksys_write+0x242/0x270 [ 248.898444][T11724] ? __pfx_ksys_write+0x10/0x10 [ 248.898475][T11724] __x64_sys_bpf+0x7c/0x90 [ 248.898507][T11724] do_syscall_64+0x14d/0xf80 [ 248.898538][T11724] ? trace_irq_disable+0x3b/0x150 [ 248.898556][T11724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.898580][T11724] ? clear_bhb_loop+0x40/0x90 [ 248.898607][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.898628][T11724] RIP: 0033:0x7f14d0b9c799 [ 248.898649][T11724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.898667][T11724] RSP: 002b:00007f14d1a43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.898691][T11724] RAX: ffffffffffffffda RBX: 00007f14d0e15fa0 RCX: 00007f14d0b9c799 [ 248.898707][T11724] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 248.898721][T11724] RBP: 00007f14d1a43090 R08: 0000000000000000 R09: 0000000000000000 [ 248.898735][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.898748][T11724] R13: 00007f14d0e16038 R14: 00007f14d0e15fa0 R15: 00007ffe1e441168 [ 248.898782][T11724] [ 249.305556][T11737] lo speed is unknown, defaulting to 1000 [ 249.471696][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.711099][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.724841][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.792225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e437c00: rx timeout, send abort [ 249.900016][T11767] vlan4: entered allmulticast mode [ 249.910866][T11767] bridge4: entered allmulticast mode [ 249.960668][ T7501] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.980421][ T7501] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.019388][ T7501] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.052110][ T7501] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.222571][T11780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.245055][T11791] xt_cluster: node mask cannot exceed total number of nodes [ 250.292361][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e437800: rx timeout, send abort [ 250.300861][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e437c00: abort rx timeout. Force session deactivation [ 250.382847][T11801] sctp: [Deprecated]: syz.3.1499 (pid 11801) Use of int in max_burst socket option. [ 250.382847][T11801] Use struct sctp_assoc_value instead [ 250.521311][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.724557][T11817] __nla_validate_parse: 47 callbacks suppressed [ 250.724579][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'. [ 250.800663][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e437800: abort rx timeout. Force session deactivation [ 250.874335][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.036256][T11825] geneve2: entered promiscuous mode [ 251.050861][T11825] geneve2: entered allmulticast mode [ 251.065401][ T7501] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.079869][ T7501] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.114850][T11830] netlink: 'syz.3.1509': attribute type 83 has an invalid length. [ 251.132966][ T7501] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.173867][T11830] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1509'. [ 251.183533][T11830] openvswitch: netlink: Message has 16 unknown bytes. [ 251.206166][ T7501] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.215428][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1508'. [ 251.354434][T11839] netlink: 'syz.4.1512': attribute type 3 has an invalid length. [ 251.392415][T11832] lo speed is unknown, defaulting to 1000 [ 251.408754][T11837] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 251.409417][T11839] netlink: 'syz.4.1512': attribute type 3 has an invalid length. [ 251.498145][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 251.540140][T11845] netlink: 'syz.2.1513': attribute type 1 has an invalid length. [ 251.551944][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.571054][T11845] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1513'. [ 251.613447][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 251.629795][T11853] GUP no longer grows the stack in syz.1.1516 (11853): 200000003000-20000000a000 (200000001000) [ 251.645569][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.1.1516 Not tainted syzkaller #0 PREEMPT(full) [ 251.645604][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.645619][T11853] Call Trace: [ 251.645628][T11853] [ 251.645637][T11853] dump_stack_lvl+0xe8/0x150 [ 251.645676][T11853] __get_user_pages+0x2453/0x29d0 [ 251.645712][T11853] ? __lock_acquire+0x6b5/0x2cf0 [ 251.645760][T11853] ? __gup_longterm_locked+0xc4e/0x1630 [ 251.645795][T11853] ? down_read_killable+0x1bb/0x340 [ 251.645822][T11853] __gup_longterm_locked+0xdcf/0x1630 [ 251.645882][T11853] gup_fast_fallback+0x1d82/0x22e0 [ 251.645949][T11853] ? __pfx_gup_fast_fallback+0x10/0x10 [ 251.645981][T11853] ? futex_unqueue+0x22/0x240 [ 251.646020][T11853] ? futex_unqueue+0x22/0x240 [ 251.646037][T11850] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 251.646046][T11853] ? is_valid_gup_args+0x11f/0x200 [ 251.646101][T11853] ? get_user_pages_fast+0x4d/0xb0 [ 251.646224][T11853] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 251.646320][T11853] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 251.646395][T11853] iov_iter_get_pages2+0x5e/0xa0 [ 251.646483][T11853] __se_sys_vmsplice+0x7b3/0x1490 [ 251.646629][T11853] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 251.646717][T11853] ? __pfx_futex_wait+0x10/0x10 [ 251.646836][T11853] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.647077][T11853] do_syscall_64+0x14d/0xf80 [ 251.647163][T11853] ? trace_irq_disable+0x3b/0x150 [ 251.647209][T11853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.647278][T11853] ? clear_bhb_loop+0x40/0x90 [ 251.647353][T11853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.647410][T11853] RIP: 0033:0x7f10fa39c799 [ 251.647471][T11853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.647525][T11853] RSP: 002b:00007f10fb2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 251.647590][T11853] RAX: ffffffffffffffda RBX: 00007f10fa615fa0 RCX: 00007f10fa39c799 [ 251.647648][T11853] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 251.647701][T11853] RBP: 00007f10fa432c99 R08: 0000000000000000 R09: 0000000000000000 [ 251.647735][T11853] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 251.647769][T11853] R13: 00007f10fa616038 R14: 00007f10fa615fa0 R15: 00007ffc86e07508 [ 251.647859][T11853] [ 251.895670][T11850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1515'. [ 251.987764][T11864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1519'. [ 252.814399][T11914] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.827252][T11912] veth0_virt_wifi: entered allmulticast mode [ 252.882416][T11914] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.957938][T11923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 252.997500][T11916] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 253.006887][T11916] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 253.139666][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1536'. [ 253.139941][T11929] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 253.229132][T11933] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 253.323610][T11929] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.389100][T11960] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 253.442463][T11949] bond6 (unregistering): Released all slaves [ 253.471206][T11954] pim6reg: entered allmulticast mode [ 253.521552][T11960] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.572756][T11966] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 253.603751][T11962] bond3: (slave veth5): Enslaving as an active interface with a down link [ 253.631422][T10672] net_ratelimit: 7 callbacks suppressed [ 253.631438][T10672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.679834][T11960] bond3: (slave veth7): Enslaving as an active interface with a down link [ 253.689336][T11940] lo speed is unknown, defaulting to 1000 [ 253.709283][T11970] netlink: 'syz.1.1543': attribute type 13 has an invalid length. [ 253.996136][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.017425][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.298791][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.308178][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.323363][T11970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.382083][ T531] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.405955][ T531] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.461394][ T531] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.470461][ T531] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.553116][ T531] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.562508][ T531] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.585500][ T531] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.600422][ T531] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.743994][ T1156] bond0: (slave 30): link status definitely down, disabling slave [ 254.761165][ T1156] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 254.785245][ T1156] bond0: now running without any active interface! [ 254.965530][T12017] lo speed is unknown, defaulting to 1000 [ 255.617965][T12059] ipt_ECN: cannot use operation on non-tcp rule [ 255.720002][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730400][T12066] lo speed is unknown, defaulting to 1000 [ 255.994585][T12076] __nla_validate_parse: 10 callbacks suppressed [ 255.994613][T12076] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1570'. [ 256.096273][T12077] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 256.115446][T12077] pim6reg1: entered promiscuous mode [ 256.121023][T12077] pim6reg1: entered allmulticast mode [ 256.129495][T12077] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 256.177085][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1571'. [ 256.249539][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1573'. [ 256.337403][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1574'. [ 256.352162][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1574'. [ 256.454707][T12088] validate_nla: 4 callbacks suppressed [ 256.454728][T12088] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 256.618076][T12081] tipc: Enabling of bearer rejected, already enabled [ 256.723843][T12099] lo speed is unknown, defaulting to 1000 [ 256.934822][T12102] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 257.305916][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1583'. [ 257.675476][T12137] ip6gretap1: entered promiscuous mode [ 257.690086][T12137] ip6gretap1: entered allmulticast mode [ 257.955262][T12152] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1590'. [ 258.001469][T12152] nbd: socks must be embedded in a SOCK_ITEM attr [ 258.009291][T12152] block nbd0: shutting down sockets [ 258.054049][ T29] audit: type=1800 audit(1774828124.316:2): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1589" name="memory.events" dev="tmpfs" ino=1804 res=0 errno=0 [ 258.179343][T12164] netlink: 'syz.0.1593': attribute type 11 has an invalid length. [ 258.224588][T12159] bond5: entered allmulticast mode [ 258.286302][T12159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.475138][T12177] netlink: 'syz.0.1596': attribute type 9 has an invalid length. [ 258.485383][T12177] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1596'. [ 258.510996][T12179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1597'. [ 258.527583][T12177] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1596'. [ 258.676151][T12186] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 258.707824][T12181] lo speed is unknown, defaulting to 1000 [ 259.425020][ T51] Bluetooth: hci3: link tx timeout [ 259.430260][ T51] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 259.442505][T12206] syzkaller0: entered promiscuous mode [ 259.448051][T12206] syzkaller0: entered allmulticast mode [ 259.473101][T12208] tipc: Enabled bearer , priority 30 [ 261.063424][T12225] netlink: 'syz.0.1611': attribute type 29 has an invalid length. [ 261.295267][T12246] __nla_validate_parse: 7 callbacks suppressed [ 261.295286][T12246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1617'. [ 261.420660][T12253] team0: entered promiscuous mode [ 261.437575][T12253] team_slave_0: entered promiscuous mode [ 261.453655][T12253] team_slave_1: entered promiscuous mode [ 261.472071][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 261.486942][T12253] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 261.561356][T12262] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1621'. [ 261.654073][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 261.737507][T12265] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1622'. [ 261.792337][T12271] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1622'. [ 261.823727][T12271] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1622'. [ 261.881725][T12276] syzkaller0: entered allmulticast mode [ 262.098719][T12284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1630'. [ 262.313907][T12295] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1634'. [ 265.485037][T12309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.658157][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1642'. [ 265.696147][T12325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1641'. [ 265.697343][T12322] netlink: 'syz.4.1640': attribute type 30 has an invalid length. [ 265.943589][T12338] sctp: [Deprecated]: syz.3.1647 (pid 12338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.943589][T12338] Use struct sctp_sack_info instead [ 266.443090][T12365] __nla_validate_parse: 4 callbacks suppressed [ 266.443115][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1655'. [ 266.666672][T12378] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1659'. [ 266.900478][T12374] lo speed is unknown, defaulting to 1000 [ 267.041597][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.050274][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.059115][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.067994][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.076689][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.085337][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.094046][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.103431][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.112145][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.120541][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.480001][T12402] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 267.541725][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1664'. [ 267.587789][T12400] batadv_slave_0: entered promiscuous mode [ 267.600761][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 267.621536][T12407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1666'. [ 267.686043][T12411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1667'. [ 267.739989][T12402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.762980][T12403] batadv_slave_0: left promiscuous mode [ 267.812854][T12408] bond4 (unregistering): Released all slaves [ 267.901867][T12416] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1670'. [ 268.089547][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 268.099116][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 268.182106][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1674'. [ 268.206206][T12438] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.731596][T12466] netlink: 'syz.2.1687': attribute type 1 has an invalid length. [ 268.830663][T12466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.141896][T12486] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 269.206161][T12489] netlink: 'syz.1.1692': attribute type 2 has an invalid length. [ 269.334322][T12497] netlink: 'syz.0.1694': attribute type 39 has an invalid length. [ 269.388519][T12504] netlink: 'syz.0.1694': attribute type 5 has an invalid length. [ 269.544237][T12516] wg1: entered promiscuous mode [ 269.560839][T12516] wg1: entered allmulticast mode [ 269.800045][T12532] sctp: [Deprecated]: syz.4.1706 (pid 12532) Use of int in max_burst socket option. [ 269.800045][T12532] Use struct sctp_assoc_value instead [ 269.891420][T12532] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 270.188982][T12555] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 270.198282][T12555] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 271.041056][T12585] nbd: must specify at least one socket [ 271.657538][T12615] netlink: 'syz.4.1731': attribute type 2 has an invalid length. [ 271.699593][T12615] !: entered promiscuous mode [ 271.728086][T12621] __nla_validate_parse: 25 callbacks suppressed [ 271.728106][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 271.746142][T12627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.753472][T12627] IPv6: NLM_F_CREATE should be set when creating new route [ 271.950512][T12632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1739'. [ 271.969928][T12632] nbd: must specify a device to reconfigure [ 272.142808][T12641] bond0: (slave bond_slave_1): Releasing backup interface [ 272.304243][T12659] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:65530 [ 272.365310][T12654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1744'. [ 272.378216][T12664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1747'. [ 272.602169][T12675] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1751'. [ 272.614519][T12675] nbd: must specify a device to reconfigure [ 272.624269][T12676] ipt_ECN: cannot use operation on non-tcp rule [ 272.639237][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1748'. [ 272.677107][T12669] lo speed is unknown, defaulting to 1000 [ 272.709640][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 272.722561][T12681] netlink: 'syz.2.1753': attribute type 10 has an invalid length. [ 272.730430][T12681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1753'. [ 272.765660][T12681] bridge0: port 1() entered blocking state [ 272.781222][T12681] bridge0: port 1() entered disabled state [ 272.790551][T12681] : entered allmulticast mode [ 272.820466][T12676] lo speed is unknown, defaulting to 1000 [ 272.963921][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1755'. [ 272.973444][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 273.313807][T12713] No such timeout policy "syz1" [ 273.379197][T12712] lo speed is unknown, defaulting to 1000 [ 273.541928][T12725] block nbd0: not configured, cannot reconfigure [ 273.750495][T12731] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 274.144412][T12755] block nbd0: not configured, cannot reconfigure [ 274.592206][T12773] net_ratelimit: 1015 callbacks suppressed [ 274.592218][T12773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.617639][T11987] lo speed is unknown, defaulting to 1000 [ 274.626353][T11987] syz2: Port: 1 Link ACTIVE [ 274.742675][T12775] tipc: Resetting bearer [ 274.767875][T12780] netlink: 'syz.3.1782': attribute type 9 has an invalid length. [ 274.952809][T12790] netlink: 'syz.4.1783': attribute type 21 has an invalid length. [ 275.203072][T12790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.210754][T12790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.221953][T12790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.229395][T12790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.389663][T12800] block nbd0: not configured, cannot reconfigure [ 275.457603][T12796] syzkaller0: entered promiscuous mode [ 275.512307][T12796] syzkaller0: entered allmulticast mode [ 275.746909][T12811] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 275.792757][T12811] bond7 (unregistering): Released all slaves [ 275.933290][T12825] netlink: 'syz.4.1792': attribute type 1 has an invalid length. [ 276.068160][T12829] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 276.105976][T12834] ip6gre2: entered promiscuous mode [ 276.322867][T12829] bond7: entered promiscuous mode [ 276.328543][T12829] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.596892][T12851] block nbd0: not configured, cannot reconfigure [ 277.204587][T12877] __nla_validate_parse: 12 callbacks suppressed [ 277.204609][T12877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1806'. [ 277.297222][T12882] FAULT_INJECTION: forcing a failure. [ 277.297222][T12882] name failslab, interval 1, probability 0, space 0, times 0 [ 277.314875][T12882] CPU: 0 UID: 0 PID: 12882 Comm: syz.3.1808 Not tainted syzkaller #0 PREEMPT(full) [ 277.314904][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.314918][T12882] Call Trace: [ 277.314926][T12882] [ 277.314936][T12882] dump_stack_lvl+0xe8/0x150 [ 277.314982][T12882] should_fail_ex+0x412/0x560 [ 277.315021][T12882] should_failslab+0xa8/0x100 [ 277.315051][T12882] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 277.315083][T12882] ? trace_kmalloc+0x2a/0x110 [ 277.315104][T12882] ? page_pool_create_percpu+0x76/0xb80 [ 277.315139][T12882] page_pool_create_percpu+0x76/0xb80 [ 277.315170][T12882] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 277.315201][T12882] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 277.315232][T12882] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 277.315274][T12882] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 277.315313][T12882] ? __pfx_autoremove_wake_function+0x10/0x10 [ 277.315340][T12882] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 277.315404][T12882] ? 0xffffffffa02019d0 [ 277.315452][T12882] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 277.315494][T12882] ? _copy_from_user+0x94/0xb0 [ 277.315519][T12882] ? bpf_test_init+0x113/0x150 [ 277.315540][T12882] ? xdp_convert_md_to_buff+0x5b/0x330 [ 277.315566][T12882] bpf_prog_test_run_xdp+0x81c/0x1160 [ 277.315607][T12882] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.315637][T12882] ? __fget_files+0x2a/0x420 [ 277.315675][T12882] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.315700][T12882] bpf_prog_test_run+0x2c7/0x340 [ 277.315728][T12882] __sys_bpf+0x643/0x950 [ 277.315751][T12882] ? __pfx___sys_bpf+0x10/0x10 [ 277.315787][T12882] ? ksys_write+0x242/0x270 [ 277.315815][T12882] ? __pfx_ksys_write+0x10/0x10 [ 277.315847][T12882] __x64_sys_bpf+0x7c/0x90 [ 277.315880][T12882] do_syscall_64+0x14d/0xf80 [ 277.315910][T12882] ? trace_irq_disable+0x3b/0x150 [ 277.315929][T12882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.315951][T12882] ? clear_bhb_loop+0x40/0x90 [ 277.315978][T12882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.316000][T12882] RIP: 0033:0x7f48a699c799 [ 277.316019][T12882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.316038][T12882] RSP: 002b:00007f48a782b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.316067][T12882] RAX: ffffffffffffffda RBX: 00007f48a6c15fa0 RCX: 00007f48a699c799 [ 277.316084][T12882] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 277.316098][T12882] RBP: 00007f48a782b090 R08: 0000000000000000 R09: 0000000000000000 [ 277.316111][T12882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.316124][T12882] R13: 00007f48a6c16038 R14: 00007f48a6c15fa0 R15: 00007ffd2a368a68 [ 277.316158][T12882] [ 277.665109][T12884] netlink: 'syz.1.1809': attribute type 83 has an invalid length. [ 277.812329][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1813'. [ 277.866686][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1814'. [ 277.889137][T12902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1814'. [ 277.940920][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.949430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.985143][T12908] team0: left promiscuous mode [ 277.990005][T12908] team_slave_0: left promiscuous mode [ 278.041475][T12908] team_slave_1: left promiscuous mode [ 278.057498][T12908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.093242][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'. [ 278.129619][T12911] nbd: must specify at least one socket [ 278.254593][T12921] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 278.489754][T12933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1824'. [ 278.510134][T12933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1824'. [ 278.528556][T12933] ip6gretap0: entered promiscuous mode [ 278.535729][T12933] syz_tun: entered promiscuous mode [ 278.542274][T12933] debugfs: 'hsr1' already exists in 'hsr' [ 278.548303][T12933] Cannot create hsr debugfs directory [ 278.554019][T12933] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 278.564704][T12933] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 279.047061][T12958] openvswitch: netlink: Multiple metadata blocks provided [ 279.122284][T12962] sctp: [Deprecated]: syz.2.1833 (pid 12962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.122284][T12962] Use struct sctp_sack_info instead [ 279.158959][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 279.182233][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 279.410973][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 280.307911][T13010] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 280.435946][T13026] IPVS: length: 132 != 8 [ 280.469747][T13026] pimreg: entered allmulticast mode [ 280.499388][T13030] tipc: Enabling of bearer rejected, failed to enable media [ 280.860751][T13049] FAULT_INJECTION: forcing a failure. [ 280.860751][T13049] name failslab, interval 1, probability 0, space 0, times 0 [ 280.896431][T13049] CPU: 0 UID: 0 PID: 13049 Comm: syz.4.1859 Not tainted syzkaller #0 PREEMPT(full) [ 280.896462][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.896476][T13049] Call Trace: [ 280.896485][T13049] [ 280.896494][T13049] dump_stack_lvl+0xe8/0x150 [ 280.896539][T13049] should_fail_ex+0x412/0x560 [ 280.896578][T13049] should_failslab+0xa8/0x100 [ 280.896607][T13049] ? skb_clone+0x212/0x3a0 [ 280.896637][T13049] kmem_cache_alloc_noprof+0x87/0x650 [ 280.896659][T13049] ? __netlink_lookup+0xc6/0x8b0 [ 280.896693][T13049] skb_clone+0x212/0x3a0 [ 280.896726][T13049] __netlink_deliver_tap+0x404/0x850 [ 280.896762][T13049] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.896787][T13049] netlink_deliver_tap+0x19c/0x1b0 [ 280.896813][T13049] netlink_unicast+0x7e3/0x9b0 [ 280.896856][T13049] ? __pfx_netlink_unicast+0x10/0x10 [ 280.896892][T13049] ? netlink_sendmsg+0x650/0xb40 [ 280.896914][T13049] ? skb_put+0x11b/0x210 [ 280.896944][T13049] netlink_sendmsg+0x813/0xb40 [ 280.896979][T13049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.897007][T13049] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.897041][T13049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.897070][T13049] ____sys_sendmsg+0x972/0x9f0 [ 280.897109][T13049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.897153][T13049] ? import_iovec+0x73/0xa0 [ 280.897182][T13049] ___sys_sendmsg+0x2a5/0x360 [ 280.897217][T13049] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.897285][T13049] ? __fget_files+0x2a/0x420 [ 280.897317][T13049] ? __fget_files+0x3a0/0x420 [ 280.897366][T13049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 280.897399][T13049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.897437][T13049] ? __pfx_ksys_write+0x10/0x10 [ 280.897475][T13049] do_syscall_64+0x14d/0xf80 [ 280.897512][T13049] ? trace_irq_disable+0x3b/0x150 [ 280.897531][T13049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.897554][T13049] ? clear_bhb_loop+0x40/0x90 [ 280.897580][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.897601][T13049] RIP: 0033:0x7f14d0b9c799 [ 280.897622][T13049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.897641][T13049] RSP: 002b:00007f14d1a43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.897664][T13049] RAX: ffffffffffffffda RBX: 00007f14d0e15fa0 RCX: 00007f14d0b9c799 [ 280.897679][T13049] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000b [ 280.897693][T13049] RBP: 00007f14d1a43090 R08: 0000000000000000 R09: 0000000000000000 [ 280.897706][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.897719][T13049] R13: 00007f14d0e16038 R14: 00007f14d0e15fa0 R15: 00007ffe1e441168 [ 280.897754][T13049] [ 281.517612][T13064] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.528919][T13064] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 281.742951][T13070] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.789371][T13070] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 282.009108][T13106] "syz.3.1870" (13106) uses obsolete ecb(arc4) skcipher [ 282.009108][T13092] syzkaller0: entered promiscuous mode [ 282.022259][T13092] syzkaller0: entered allmulticast mode [ 283.393261][T13108] lo speed is unknown, defaulting to 1000 [ 283.724174][T13131] __nla_validate_parse: 8 callbacks suppressed [ 283.724198][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 283.778655][T13131] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.792254][T13134] netlink: 'syz.3.1876': attribute type 2 has an invalid length. [ 283.914660][T13131] macsec2: entered allmulticast mode [ 283.924743][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.933289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.934353][T13131] bond9: entered allmulticast mode [ 283.966626][T13131] bond9: left allmulticast mode [ 284.074232][T13142] lo speed is unknown, defaulting to 1000 [ 284.107193][T13145] netlink: 'syz.1.1881': attribute type 11 has an invalid length. [ 284.224065][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 284.298643][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 284.327780][T13154] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1880'. [ 284.501061][T13167] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000 [ 284.516976][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 284.587112][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 284.590930][T13164] sctp: [Deprecated]: syz.3.1882 (pid 13164) Use of int in max_burst socket option. [ 284.590930][T13164] Use struct sctp_assoc_value instead [ 285.011344][T13191] geneve2: entered promiscuous mode [ 285.016660][T13191] geneve2: entered allmulticast mode [ 285.037077][ T82] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.047653][ T82] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.669596][ T82] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.695499][ T82] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.775128][T13210] syzkaller0: left allmulticast mode [ 285.875202][T13213] tipc: Enabled bearer , priority 0 [ 285.952501][T13203] tipc: Disabling bearer [ 286.604883][T13277] Bluetooth: MGMT ver 1.23 [ 286.618734][T13277] netlink: 'syz.2.1903': attribute type 3 has an invalid length. [ 286.627491][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 286.688467][T13282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1903'. [ 286.847943][T13262] delete_channel: no stack [ 286.895982][T13279] syzkaller0: entered promiscuous mode [ 286.920873][T13279] syzkaller0: entered allmulticast mode [ 287.191782][T13291] lo speed is unknown, defaulting to 1000 [ 287.696020][T13325] team0: left promiscuous mode [ 287.701597][T13325] team_slave_0: left promiscuous mode [ 287.709577][T13325] team_slave_1: left promiscuous mode [ 287.723696][T13331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1914'. [ 287.754898][T13325] ip6gretap1: left promiscuous mode [ 287.810921][T13325] ip6gretap1: left allmulticast mode [ 287.855947][T13325] geneve2: left promiscuous mode [ 287.861179][T13325] geneve2: left allmulticast mode [ 287.946737][T13243] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 287.955783][T13243] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 287.997954][T13243] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.109590][T13243] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.249304][T13354] dvmrp0: left allmulticast mode [ 288.715134][T13378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.896451][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'. [ 289.418440][T13408] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 289.475576][T13408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.488103][T13428] netlink: 'syz.1.1938': attribute type 1 has an invalid length. [ 289.501225][T13426] netlink: 'syz.1.1938': attribute type 1 has an invalid length. [ 289.534131][T13422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.581337][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'. [ 289.662551][T13438] tipc: Enabling of bearer rejected, failed to enable media [ 289.758581][T13435] bond8: entered allmulticast mode [ 289.770292][T13435] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.819996][T13452] netlink: 'syz.0.1941': attribute type 29 has an invalid length. [ 289.894708][T13456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.903632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.983645][T13460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1944'. [ 289.995620][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 290.022184][T13461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 290.084930][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1945'. [ 290.391844][T13486] netlink: 'syz.3.1954': attribute type 83 has an invalid length. [ 290.643911][T13499] syzkaller0: entered promiscuous mode [ 290.659710][T13499] syzkaller0: entered allmulticast mode [ 290.711186][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1959'. [ 290.736587][T13504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1959'. [ 290.746268][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1959'. [ 290.757606][T13504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1959'. [ 292.018251][T13504] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 292.036613][T13504] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 292.150230][T13518] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 292.272207][T13526] netlink: 'syz.2.1966': attribute type 5 has an invalid length. [ 292.448713][T13513] pim6reg: entered allmulticast mode [ 292.454605][T13516] pim6reg: left allmulticast mode [ 292.520455][T13244] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.551281][T13244] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.575810][T13244] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.586667][T13244] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.634308][T13543] netlink: 'syz.2.1973': attribute type 26 has an invalid length. [ 292.649239][T13543] netlink: 'syz.2.1973': attribute type 26 has an invalid length. [ 292.792718][T13547] syzkaller1: entered promiscuous mode [ 292.801746][T13547] syzkaller1: entered allmulticast mode [ 293.096631][T13561] tipc: Enabling of bearer rejected, already enabled [ 293.382151][T13579] bridge5: entered promiscuous mode [ 293.393136][T13579] bridge5: port 1(macsec2) entered blocking state [ 293.399858][T13579] bridge5: port 1(macsec2) entered disabled state [ 293.407072][T13579] macsec2: entered allmulticast mode [ 293.413816][T13579] bridge5: entered allmulticast mode [ 293.425908][T13579] macsec2: left allmulticast mode [ 293.438718][T13579] bridge5: left allmulticast mode [ 293.451953][T13579] bridge5: left promiscuous mode [ 293.507625][T13586] netlink: 'syz.0.1989': attribute type 9 has an invalid length. [ 293.743114][T13605] batadv0: entered promiscuous mode [ 293.759095][T13605] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 294.040706][T13615] __nla_validate_parse: 24 callbacks suppressed [ 294.040727][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 294.059326][T13615] hsr_slave_0: left promiscuous mode [ 294.066383][T13615] hsr_slave_1: left promiscuous mode [ 294.284224][T13627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2002'. [ 294.444705][T13636] lo speed is unknown, defaulting to 1000 [ 294.705299][ T29] audit: type=1800 audit(1774828160.966:3): pid=13652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2008" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2091 res=0 errno=0 [ 295.096613][T13672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2015'. [ 295.543425][T13710] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2021'. [ 295.810609][T13722] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2026'. [ 295.979169][T13727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2027'. [ 296.005081][T13727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2027'. [ 296.048997][T13729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2028'. [ 296.486003][T13743] validate_nla: 1 callbacks suppressed [ 296.486024][T13743] netlink: 'syz.3.2031': attribute type 1 has an invalid length. [ 296.522407][T13742] geneve3: entered promiscuous mode [ 296.527700][T13742] geneve3: entered allmulticast mode [ 296.551825][T13242] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 296.569477][T13242] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 296.578689][T13242] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 296.611349][T13242] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 296.762429][T13762] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 296.780732][T13762] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2036'. [ 296.803304][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 298.010392][T13819] Cannot find set identified by id 65534 to match [ 298.412996][T13840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.421510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.525015][T13841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.536589][T13243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.573286][T13841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.792003][T13847] netlink: 'syz.1.2063': attribute type 8 has an invalid length. [ 298.801559][T13847] : renamed from dummy0 (while UP) [ 298.959624][T13855] netlink: 'syz.1.2065': attribute type 9 has an invalid length. [ 299.090442][T13859] pim6reg: left allmulticast mode [ 299.262230][T13868] tipc: MTU too low for tipc bearer [ 300.091554][T13907] __nla_validate_parse: 10 callbacks suppressed [ 300.091574][T13907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2077'. [ 300.417389][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2084'. [ 300.496153][T13921] bridge6: port 1(veth9) entered blocking state [ 300.512166][T13921] bridge6: port 1(veth9) entered disabled state [ 300.522554][T13921] veth9: entered allmulticast mode [ 300.530128][T13921] veth9: entered promiscuous mode [ 300.562520][T13928] bridge6: port 2(veth11) entered blocking state [ 300.569165][T13928] bridge6: port 2(veth11) entered disabled state [ 300.578172][T13928] veth11: entered allmulticast mode [ 300.586553][T13928] veth11: entered promiscuous mode [ 300.602087][T13925] sit1: entered promiscuous mode [ 300.618705][T13923] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 300.667200][T13923] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2085'. [ 300.693405][T13923] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2085'. [ 300.702639][T13923] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 300.762370][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'. [ 300.798015][T13937] bridge5: entered promiscuous mode [ 300.814181][T13936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2088'. [ 300.871015][T13936] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2088'. [ 301.109995][T13960] geneve3: entered promiscuous mode [ 301.122419][T13960] geneve3: entered allmulticast mode [ 301.146773][T13242] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 301.170985][T13242] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 301.179340][T13242] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 301.220902][T13242] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 301.286589][T13966] bridge7: entered allmulticast mode [ 301.398434][T13973] netlink: 'syz.3.2102': attribute type 8 has an invalid length. [ 301.429712][T13973] syzkaller0: entered allmulticast mode [ 301.440673][T13973] netlink: 'syz.3.2102': attribute type 12 has an invalid length. [ 301.448897][T13973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2102'. [ 301.656353][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2108'. [ 301.718137][T13999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2109'. [ 301.943265][T14012] pim6reg99999991: entered allmulticast mode [ 302.277112][T14026] netlink: 'syz.4.2121': attribute type 30 has an invalid length. [ 302.434244][T14033] xt_hashlimit: max too large, truncated to 1048576 [ 302.450043][T14033] xt_bpf: check failed: parse error [ 302.467282][T14033] sctp: [Deprecated]: syz.1.2122 (pid 14033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.467282][T14033] Use struct sctp_sack_info instead [ 303.011231][T14072] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 303.035431][T14063] netlink: 'syz.1.2131': attribute type 4 has an invalid length. [ 303.059988][T14062] hsr0: entered promiscuous mode [ 303.075766][T14062] hsr0: entered allmulticast mode [ 303.090925][T14062] hsr_slave_0: entered allmulticast mode [ 303.661699][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.695106][T14108] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 303.727160][T14108] bond7 (unregistering): Released all slaves [ 303.765467][T14109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.794826][T14113] bridge0: entered promiscuous mode [ 303.905324][T14120] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 303.986918][T14123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.994317][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 304.001894][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 304.009156][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 304.297448][T14142] IPv6: sit2: Disabled Multicast RS [ 304.304512][T14142] sit2: entered allmulticast mode [ 304.451562][T14153] netlink: 'syz.2.2165': attribute type 1 has an invalid length. [ 304.650489][T14159] lo speed is unknown, defaulting to 1000 [ 305.035625][T14197] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 305.069379][T14184] bridge8: entered promiscuous mode [ 305.220718][T14210] __nla_validate_parse: 17 callbacks suppressed [ 305.229128][T14197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.237049][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2177'. [ 306.283463][T14233] netlink: 'syz.1.2185': attribute type 3 has an invalid length. [ 306.311095][T14233] netlink: 'syz.1.2185': attribute type 3 has an invalid length. [ 306.350032][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2192'. [ 306.467194][T14232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2186'. [ 306.551457][T14238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2186'. [ 306.588353][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2195'. [ 306.609846][T14269] sctp: [Deprecated]: syz.4.2194 (pid 14269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.609846][T14269] Use struct sctp_sack_info instead [ 306.658537][T14269] netlink: 'syz.4.2194': attribute type 11 has an invalid length. [ 306.785715][T14273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2198'. [ 306.906561][T14277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2200'. [ 306.969968][T14279] netlink: 'syz.2.2201': attribute type 49 has an invalid length. [ 306.990972][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 307.167406][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 307.667553][T14328] netlink: 'syz.4.2215': attribute type 11 has an invalid length. [ 308.591909][T14352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2219'. [ 309.416973][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2221'. [ 309.868927][T14389] lo speed is unknown, defaulting to 1000 [ 310.031157][T14403] netlink: 'syz.3.2229': attribute type 3 has an invalid length. [ 310.187042][T14406] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 310.194377][T14406] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 310.279313][T14414] rdma_rxe: rxe_newlink: failed to add gre0 [ 310.311441][T14414] xt_hashlimit: size too large, truncated to 1048576 [ 310.332388][T14413] __nla_validate_parse: 6 callbacks suppressed [ 310.332410][T14413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2234'. [ 310.348413][T14414] xt_hashlimit: max too large, truncated to 1048576 [ 310.368934][T14421] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2237'. [ 310.518778][T14428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2239'. [ 310.716322][T14440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2242'. [ 310.771777][T14440] netlink: 18451 bytes leftover after parsing attributes in process `syz.3.2242'. [ 311.219112][T14474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'. [ 313.290873][T14469] bond0: (slave bond_slave_1): Releasing backup interface [ 313.298901][T14469] bond_slave_1: left promiscuous mode [ 313.644207][T14507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2262'. [ 313.665846][T14506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2261'. [ 313.674935][T14506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2261'. [ 313.731302][T14507] ip6gre3: entered promiscuous mode [ 313.741010][T14507] ip6gre3: entered allmulticast mode [ 313.756293][T14511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2264'. [ 313.815027][T14511] ip6gre3: entered promiscuous mode [ 313.820393][T14511] ip6gre3: entered allmulticast mode [ 313.851709][T13244] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 313.864306][T13244] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 313.872574][T11994] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 313.908457][T14516] : entered promiscuous mode [ 313.972555][T13251] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 313.980479][T13251] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 314.001104][ T5940] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 314.059853][T14529] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 314.161769][T11987] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 314.230404][T14540] netlink: 'syz.2.2274': attribute type 1 has an invalid length. [ 314.551141][ T5940] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 314.673814][T11994] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 314.752324][T11994] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 315.730604][T14540] bond7: entered promiscuous mode [ 315.736136][T14540] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.762332][T14547] bond7: (slave bridge5): making interface the new active one [ 315.769872][T14547] bridge5: entered promiscuous mode [ 315.776548][T14547] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 315.873260][T14558] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 315.959956][T14558] bond7: entered promiscuous mode [ 315.971486][T14558] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.326113][T14586] netlink: 'syz.1.2284': attribute type 23 has an invalid length. [ 316.358778][T14588] __nla_validate_parse: 6 callbacks suppressed [ 316.358800][T14588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2286'. [ 316.482910][T14590] bond8: option lp_interval: invalid value (0) [ 316.489603][T14590] bond8: option lp_interval: allowed values 1 - 2147483647 [ 316.499029][T14590] bond8 (unregistering): Released all slaves [ 316.669601][T14603] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2289'. [ 316.687376][T14603] netlink: 'syz.3.2289': attribute type 11 has an invalid length. [ 316.695667][T14603] netlink: 'syz.3.2289': attribute type 23 has an invalid length. [ 316.704550][T14603] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2289'. [ 316.826938][T14603] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 317.019846][T14619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 317.436088][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 317.570668][T14642] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2300'. [ 318.380284][T14648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2302'. [ 319.639866][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'. [ 319.972419][T14672] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2310'. [ 320.017126][T14674] geneve4: entered promiscuous mode [ 320.161193][T14680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2313'. [ 320.820664][T14704] syzkaller0: entered promiscuous mode [ 320.826578][T14704] syzkaller0: entered allmulticast mode [ 321.144772][T14712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.152205][T14712] IPv6: NLM_F_CREATE should be set when creating new route [ 321.379710][T14728] netlink: 'syz.0.2329': attribute type 83 has an invalid length. [ 321.426524][T14732] __nla_validate_parse: 3 callbacks suppressed [ 321.426546][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 321.522438][T14732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2330'. [ 321.555734][T14742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.857520][T14754] delete_channel: no stack [ 322.015008][T14764] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2341'. [ 322.030065][T14767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2343'. [ 322.042440][T14767] netlink: 18451 bytes leftover after parsing attributes in process `syz.2.2343'. [ 322.288245][T14783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2347'. [ 322.549531][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'. [ 322.595225][T14799] netlink: 'syz.4.2354': attribute type 13 has an invalid length. [ 322.604997][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2353'. [ 322.622366][T14799] netlink: 'syz.4.2354': attribute type 17 has an invalid length. [ 322.638166][T14807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2353'. [ 322.735306][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 322.827614][T14799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.903217][T14813] bond8: entered allmulticast mode [ 322.909497][T14813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 322.925761][T14816] tipc: Enabling of bearer rejected, failed to enable media [ 323.527505][T14848] : renamed from gretap0 (while UP) [ 324.414060][T14911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.425501][T14910] SET target dimension over the limit! [ 324.444200][T14900] bond9: option packets_per_slave: invalid value (1048582) [ 324.452600][T14900] bond9: option packets_per_slave: allowed values 0 - 65535 [ 324.477378][T14900] bond9 (unregistering): Released all slaves [ 324.733792][T14926] tipc: Resetting bearer [ 324.824150][T14926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.839225][T14926] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.852612][T14926] bridge0: port 1() entered blocking state [ 324.859173][T14926] bridge0: port 1() entered forwarding state [ 324.874847][T14926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.271326][T14956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.279759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.301212][T14952] netlink: 'syz.0.2395': attribute type 1 has an invalid length. [ 325.471041][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 325.471063][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 325.559419][T14957] bond5: (slave geneve5): making interface the new active one [ 325.864462][T14957] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 326.066066][T13245] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 326.075644][T13245] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 326.102532][T13245] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 326.134370][T13245] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 326.404829][T14990] netlink: 'syz.2.2404': attribute type 1 has an invalid length. [ 326.658002][T15002] __nla_validate_parse: 13 callbacks suppressed [ 326.658023][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 326.813725][T15010] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2409'. [ 326.863170][T15012] block nbd0: not configured, cannot reconfigure [ 326.949247][T15016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2411'. [ 327.106094][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2415'. [ 327.216755][T15034] netlink: 'syz.0.2416': attribute type 1 has an invalid length. [ 327.230330][T15034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2416'. [ 327.243405][T15034] netlink: 'syz.0.2416': attribute type 1 has an invalid length. [ 327.275954][T15034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2416'. [ 327.393161][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 327.442719][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 327.505990][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 327.521776][T15050] xt_connbytes: Forcing CT accounting to be enabled [ 327.529436][T15050] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 327.557863][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2420'. [ 327.578193][T15049] lo speed is unknown, defaulting to 1000 [ 327.766418][T15054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2422'. [ 328.102699][T15061] block nbd0: not configured, cannot reconfigure [ 328.761592][T15076] netlink: 'syz.2.2429': attribute type 1 has an invalid length. [ 329.548619][T15103] tipc: Enabling of bearer rejected, already enabled [ 329.563919][T15106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.573351][T15103] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 329.608867][T15103] tipc: Resetting bearer [ 330.726875][T15135] netlink: 'syz.3.2443': attribute type 13 has an invalid length. [ 330.757526][T15138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.974855][ T5916] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 331.180422][T15157] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 331.393043][ T5916] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 331.707513][T15180] lo speed is unknown, defaulting to 1000 [ 332.058485][T15191] lo speed is unknown, defaulting to 1000 [ 332.167317][T15194] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 332.175019][T15194] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 332.361015][T15207] __nla_validate_parse: 6 callbacks suppressed [ 332.361037][T15207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2461'. [ 332.774467][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'. [ 332.786925][T15216] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 332.801630][T15216] team0 (unregistering): Port device team_slave_0 removed [ 332.816472][T15216] team0 (unregistering): Failed to send options change via netlink (err -105) [ 332.827369][T15216] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 332.840412][T15216] team0 (unregistering): Port device team_slave_1 removed [ 333.094881][T15228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2470'. [ 335.022950][T15249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2476'. [ 335.040646][T15249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2476'. [ 335.097709][T15265] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 335.105812][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 335.813262][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 336.318328][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2490'. [ 337.360261][T15298] bridge7: port 1(veth0_to_bond) entered blocking state [ 337.367582][T15298] bridge7: port 1(veth0_to_bond) entered disabled state [ 337.375709][T15298] veth0_to_bond: entered allmulticast mode [ 337.384928][T15298] veth0_to_bond: entered promiscuous mode [ 337.613136][T15303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.621980][T15303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.635447][T15314] x_tables: unsorted underflow at hook 3 [ 337.655988][T15319] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.2494'. [ 337.687826][T15319] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 337.796863][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2501'. [ 337.869376][T15332] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 337.877293][T15332] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 338.437416][T15348] erspan0: entered promiscuous mode [ 338.678462][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2508'. [ 338.689713][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'. [ 340.191069][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 340.554784][T15309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.739321][T15363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2511'. [ 340.750029][T15364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2509'. [ 340.883750][T15363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2511'. [ 340.949689][T15374] block nbd0: not configured, cannot reconfigure [ 341.044586][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2517'. [ 341.327961][T15400] netlink: 'syz.4.2519': attribute type 1 has an invalid length. [ 342.645188][T15409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2522'. [ 342.867757][T15422] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 342.889740][T15422] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 342.913840][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'. [ 342.938618][T15429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2529'. [ 342.948022][T15428] block nbd0: not configured, cannot reconfigure [ 342.981101][T15431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2530'. [ 343.021871][T15433] tipc: Enabling of bearer rejected, failed to enable media [ 343.074638][T15429] bridge6: entered promiscuous mode [ 343.382377][T15453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2536'. [ 343.401021][T15453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2536'. [ 343.410295][T15453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2536'. [ 343.419828][T15453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2536'. [ 343.620583][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 343.759780][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2540'. [ 343.817214][T15469] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 343.825491][T15468] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 344.849123][T15468] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 344.850411][T15469] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 344.959099][T15479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2543'. [ 345.071530][T15486] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 345.153251][T15490] tipc: Enabling of bearer rejected, already enabled [ 345.199221][T15494] lo speed is unknown, defaulting to 1000 [ 345.311027][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 345.500100][T15506] syzkaller0: left promiscuous mode [ 345.516431][T15506] syzkaller0: left allmulticast mode [ 345.558287][T15513] vxcan0: entered allmulticast mode [ 345.583074][T15520] gretap0: entered promiscuous mode [ 345.591053][T15520] vlan4: entered promiscuous mode [ 345.746657][T15523] netlink: 'syz.2.2558': attribute type 3 has an invalid length. [ 345.923253][ T5916] IPVS: starting estimator thread 0... [ 345.999327][T15530] lo speed is unknown, defaulting to 1000 [ 346.016043][T15536] lo speed is unknown, defaulting to 1000 [ 346.021550][T15538] IPVS: using max 25 ests per chain, 60000 per kthread [ 346.894613][T15569] FAULT_INJECTION: forcing a failure. [ 346.894613][T15569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.947094][T15569] CPU: 1 UID: 0 PID: 15569 Comm: syz.3.2568 Not tainted syzkaller #0 PREEMPT(full) [ 346.947126][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.947140][T15569] Call Trace: [ 346.947148][T15569] [ 346.947157][T15569] dump_stack_lvl+0xe8/0x150 [ 346.947194][T15569] should_fail_ex+0x412/0x560 [ 346.947232][T15569] _copy_from_user+0x2d/0xb0 [ 346.947257][T15569] ___sys_sendmsg+0x1c6/0x360 [ 346.947293][T15569] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.947327][T15569] ? kstrtouint+0x6e/0xe0 [ 346.947383][T15569] ? __fget_files+0x2a/0x420 [ 346.947416][T15569] ? __fget_files+0x3a0/0x420 [ 346.947459][T15569] __sys_sendmmsg+0x27c/0x4e0 [ 346.947493][T15569] ? __pfx___sys_sendmmsg+0x10/0x10 [ 346.947519][T15569] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 346.947579][T15569] ? ksys_write+0x242/0x270 [ 346.947607][T15569] ? __pfx_ksys_write+0x10/0x10 [ 346.947639][T15569] __x64_sys_sendmmsg+0xa0/0xc0 [ 346.947669][T15569] do_syscall_64+0x14d/0xf80 [ 346.947700][T15569] ? trace_irq_disable+0x3b/0x150 [ 346.947719][T15569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.947741][T15569] ? clear_bhb_loop+0x40/0x90 [ 346.947768][T15569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.947794][T15569] RIP: 0033:0x7f48a699c799 [ 346.947815][T15569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.947834][T15569] RSP: 002b:00007f48a782b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.947857][T15569] RAX: ffffffffffffffda RBX: 00007f48a6c15fa0 RCX: 00007f48a699c799 [ 346.947873][T15569] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 346.947887][T15569] RBP: 00007f48a782b090 R08: 0000000000000000 R09: 0000000000000000 [ 346.947900][T15569] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000001 [ 346.947919][T15569] R13: 00007f48a6c16038 R14: 00007f48a6c15fa0 R15: 00007ffd2a368a68 [ 346.947954][T15569] [ 347.261654][T15552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.851561][T15600] netlink: 'syz.2.2580': attribute type 195 has an invalid length. [ 347.931083][T15608] __nla_validate_parse: 8 callbacks suppressed [ 347.931105][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2583'. [ 348.059908][T15613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2585'. [ 348.341632][T15622] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 348.349027][T15622] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 348.492764][T15620] block nbd0: not configured, cannot reconfigure [ 348.704272][T15637] lo speed is unknown, defaulting to 1000 [ 348.877617][T15651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2598'. [ 349.275652][T15668] netlink: 38 bytes leftover after parsing attributes in process `syz.3.2604'. [ 349.300423][T15668] netlink: 'syz.3.2604': attribute type 4 has an invalid length. [ 349.322981][T15668] netlink: 'syz.3.2604': attribute type 4 has an invalid length. [ 349.422164][T15672] bond9: entered promiscuous mode [ 349.429655][T15672] bond9: entered allmulticast mode [ 349.435944][T15672] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.474310][T15679] lo speed is unknown, defaulting to 1000 [ 349.608138][T15685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2607'. [ 349.796055][T15683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2608'. [ 349.856679][T15700] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 349.866363][T15700] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2612'. [ 349.889050][T15700] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 349.899836][T15700] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2612'. [ 349.906414][T15704] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2611'. [ 349.918630][T15700] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 349.935408][T15700] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2612'. [ 349.945994][T15700] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 349.954676][T15700] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 349.964078][T15700] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 349.972625][T15700] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 350.308787][T15727] ip6t_srh: unknown srh invflags BA61 [ 350.489191][T15731] macvtap0: mtu less than device minimum [ 350.788714][T15747] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.966930][T15756] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 350.974836][T15756] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 351.155785][T15763] tipc: Enabled bearer , priority 0 [ 351.300965][T15763] syzkaller0: entered promiscuous mode [ 351.306570][T15763] syzkaller0: entered allmulticast mode [ 351.312973][T15763] tipc: Resetting bearer [ 351.343211][T15774] bridge_slave_1: entered promiscuous mode [ 351.361469][T15774] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 351.394119][T15761] tipc: Resetting bearer [ 351.852629][T15807] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 352.984285][T15761] tipc: Disabling bearer [ 353.208182][T15824] validate_nla: 61 callbacks suppressed [ 353.208206][T15824] netlink: 'syz.0.2653': attribute type 12 has an invalid length. [ 353.288138][T15828] FAULT_INJECTION: forcing a failure. [ 353.288138][T15828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.307383][T15828] CPU: 0 UID: 0 PID: 15828 Comm: syz.1.2655 Not tainted syzkaller #0 PREEMPT(full) [ 353.307411][T15828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.307424][T15828] Call Trace: [ 353.307431][T15828] [ 353.307439][T15828] dump_stack_lvl+0xe8/0x150 [ 353.307474][T15828] should_fail_ex+0x412/0x560 [ 353.307508][T15828] _copy_from_user+0x2d/0xb0 [ 353.307533][T15828] ___sys_sendmsg+0x1c6/0x360 [ 353.307565][T15828] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.307638][T15828] __sys_sendmmsg+0x27c/0x4e0 [ 353.307689][T15828] ? __pfx___sys_sendmmsg+0x10/0x10 [ 353.307714][T15828] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 353.307770][T15828] ? ksys_write+0x242/0x270 [ 353.307796][T15828] ? __pfx_ksys_write+0x10/0x10 [ 353.307826][T15828] __x64_sys_sendmmsg+0xa0/0xc0 [ 353.307855][T15828] do_syscall_64+0x14d/0xf80 [ 353.307883][T15828] ? trace_irq_disable+0x3b/0x150 [ 353.307901][T15828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.307921][T15828] ? clear_bhb_loop+0x40/0x90 [ 353.307946][T15828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.307967][T15828] RIP: 0033:0x7f10fa39c799 [ 353.307985][T15828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.308004][T15828] RSP: 002b:00007f10fb2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 353.308026][T15828] RAX: ffffffffffffffda RBX: 00007f10fa615fa0 RCX: 00007f10fa39c799 [ 353.308040][T15828] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 353.308053][T15828] RBP: 00007f10fb2be090 R08: 0000000000000000 R09: 0000000000000000 [ 353.308066][T15828] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000001 [ 353.308079][T15828] R13: 00007f10fa616038 R14: 00007f10fa615fa0 R15: 00007ffc86e07508 [ 353.308108][T15828] [ 353.667947][T15833] __nla_validate_parse: 65 callbacks suppressed [ 353.667968][T15833] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2654'. [ 353.698429][T15833] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 353.741925][T15842] netlink: 'syz.1.2658': attribute type 13 has an invalid length. [ 353.813407][T15844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.829099][T15844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.862405][T15844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.918148][T15849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.926844][T15849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.005382][T15856] syzkaller0: entered promiscuous mode [ 354.011505][T15856] syzkaller0: entered allmulticast mode [ 354.301403][T15871] netlink: 'syz.3.2665': attribute type 4 has an invalid length. [ 354.368580][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 354.421697][T15871] team0: Port device team_slave_0 removed [ 354.453865][T15877] batman_adv: batadv0: Adding interface: ipvlan0 [ 354.460424][T15877] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.495913][T15877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.509940][T15877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.520273][T15877] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 354.547088][T15875] ip6gre2: entered promiscuous mode [ 354.553109][T15875] ip6gre2: entered allmulticast mode [ 354.790360][T15881] lo speed is unknown, defaulting to 1000 [ 354.800516][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 354.831056][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'. [ 354.843310][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2670'. [ 355.034338][T13251] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 355.150045][T15910] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 355.240087][T15904] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 355.251717][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2678'. [ 355.349806][T15910] 8021q: adding VLAN 0 to HW filter on device bond9 [ 355.732759][T15943] syzkaller0: entered promiscuous mode [ 355.745047][T15943] syzkaller0: entered allmulticast mode [ 355.830234][T15953] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 356.007953][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 356.250372][T15973] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2696'. [ 356.270607][T15973] ip6tnl0: Caught tx_queue_len zero misconfig [ 356.288655][T15973] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 356.351886][T15980] tipc: Enabling of bearer rejected, failed to enable media [ 356.365616][T15979] SET target dimension over the limit! [ 356.486717][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 356.525978][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'. [ 356.617672][T15988] lo speed is unknown, defaulting to 1000 [ 356.672224][T15989] lo speed is unknown, defaulting to 1000 [ 356.673529][T15992] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 356.758416][T16001] xt_hashlimit: max too large, truncated to 1048576 [ 356.858078][T15995] lo speed is unknown, defaulting to 1000 [ 357.599488][T16029] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 357.932067][T16040] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 357.939281][T16040] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 358.739635][T16062] bond10: entered promiscuous mode [ 358.772869][T16062] 8021q: adding VLAN 0 to HW filter on device bond10 [ 358.951990][T16075] openvswitch: netlink: Message has 496 unknown bytes. [ 358.958929][T16075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.238381][T16094] __nla_validate_parse: 3 callbacks suppressed [ 359.238402][T16094] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2732'. [ 359.303626][T16097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.342761][T16095] lo speed is unknown, defaulting to 1000 [ 359.376608][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2730'. [ 359.420992][T16103] : entered promiscuous mode [ 359.589178][T16106] syzkaller0: entered promiscuous mode [ 359.615859][T16106] syzkaller0: entered allmulticast mode [ 360.056287][T16120] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 360.091029][T16120] bond9 (unregistering): Released all slaves [ 360.315117][T16129] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 360.332705][T16129] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 360.490992][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'. [ 360.514858][T16148] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2746'. [ 360.555005][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 361.034210][T16165] lo speed is unknown, defaulting to 1000 [ 361.448106][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 361.566461][T16188] ip6tnl0: Caught tx_queue_len zero misconfig [ 361.592912][T16193] netlink: 'syz.3.2759': attribute type 7 has an invalid length. [ 361.802906][T16208] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2766'. [ 361.814018][T16209] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2765'. [ 361.899660][T16212] IPVS: nq: FWM 3 0x00000003 - no destination available [ 361.918943][T16212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.944177][T16214] bridge9: entered promiscuous mode [ 361.981279][T16218] bridge10: entered promiscuous mode [ 361.994833][T16220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.063742][T16223] netlink: 'syz.1.2767': attribute type 39 has an invalid length. [ 362.478893][T16223] syz_tun (unregistering): left promiscuous mode [ 362.533883][T16239] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2775'. [ 362.543373][T16239] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 362.653771][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2776'. [ 362.766065][T16250] syzkaller0: entered promiscuous mode [ 362.773263][T16250] syzkaller0: entered allmulticast mode [ 362.803059][T16251] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 362.809068][T16251] syzkaller1: linktype set to 825 [ 362.909660][T16263] sctp: [Deprecated]: syz.4.2782 (pid 16263) Use of int in max_burst socket option deprecated. [ 362.909660][T16263] Use struct sctp_assoc_value instead [ 363.155286][T16270] netlink: 'syz.4.2784': attribute type 4 has an invalid length. [ 363.239832][T16276] netlink: 'syz.0.2787': attribute type 3 has an invalid length. [ 363.508176][T16292] lo speed is unknown, defaulting to 1000 [ 363.542853][T16298] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 363.561062][T16298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.058540][T16316] FAULT_INJECTION: forcing a failure. [ 364.058540][T16316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.100876][T16316] CPU: 0 UID: 0 PID: 16316 Comm: syz.3.2799 Not tainted syzkaller #0 PREEMPT(full) [ 364.100908][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.100922][T16316] Call Trace: [ 364.100931][T16316] [ 364.100940][T16316] dump_stack_lvl+0xe8/0x150 [ 364.100976][T16316] should_fail_ex+0x412/0x560 [ 364.101014][T16316] _copy_from_user+0x2d/0xb0 [ 364.101040][T16316] ___sys_sendmsg+0x1c6/0x360 [ 364.101075][T16316] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.101138][T16316] ? __fget_files+0x2a/0x420 [ 364.101170][T16316] ? __fget_files+0x3a0/0x420 [ 364.101212][T16316] __x64_sys_sendmsg+0x1bd/0x2a0 [ 364.101243][T16316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.101282][T16316] ? __pfx_ksys_write+0x10/0x10 [ 364.101319][T16316] do_syscall_64+0x14d/0xf80 [ 364.101349][T16316] ? trace_irq_disable+0x3b/0x150 [ 364.101368][T16316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.101389][T16316] ? clear_bhb_loop+0x40/0x90 [ 364.101415][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.101437][T16316] RIP: 0033:0x7f48a699c799 [ 364.101458][T16316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.101477][T16316] RSP: 002b:00007f48a782b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.101501][T16316] RAX: ffffffffffffffda RBX: 00007f48a6c15fa0 RCX: 00007f48a699c799 [ 364.101517][T16316] RDX: 0000000000048004 RSI: 0000200000003a80 RDI: 0000000000000004 [ 364.101532][T16316] RBP: 00007f48a782b090 R08: 0000000000000000 R09: 0000000000000000 [ 364.101545][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.101557][T16316] R13: 00007f48a6c16038 R14: 00007f48a6c15fa0 R15: 00007ffd2a368a68 [ 364.101590][T16316] [ 364.444245][T16326] __nla_validate_parse: 3 callbacks suppressed [ 364.444266][T16326] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2801'. [ 364.529867][T16331] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2805'. [ 364.541107][T16331] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2805'. [ 364.910259][T16349] netlink: 'syz.1.2809': attribute type 2 has an invalid length. [ 365.022649][T16359] bond11: entered allmulticast mode [ 365.507882][T16397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2820'. [ 365.509604][T16393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.526056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.592761][T16393] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2821'. [ 365.747914][T16409] vxcan1: entered promiscuous mode [ 365.849269][T16413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2825'. [ 365.916236][T16419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2825'. [ 366.000612][T16423] openvswitch: netlink: EtherType 50a is less than min 600 [ 366.041631][T16427] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 366.049420][T16427] netlink: 'syz.0.2831': attribute type 4 has an invalid length. [ 366.067994][T16427] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2831'. [ 366.513024][T16453] macvtap1: entered promiscuous mode [ 366.518587][T16453] macvtap1: entered allmulticast mode [ 366.550475][T16453] veth1_vlan: entered allmulticast mode [ 366.648786][T16464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2839'. [ 366.658966][T16461] macvtap2: entered promiscuous mode [ 366.695314][T16461] macvtap2: entered allmulticast mode [ 366.900360][T16443] lo speed is unknown, defaulting to 1000 [ 366.947278][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 367.256672][T16476] ip6gretap0 (unregistering): left promiscuous mode [ 367.414643][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.441321][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.463100][T13245] bond0: (slave team0): link status definitely down, disabling slave [ 367.476086][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.487052][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.498483][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.711107][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 367.792530][T16496] lo speed is unknown, defaulting to 1000 [ 368.381493][T16496] chnl_net:caif_netlink_parms(): no params data found [ 368.473051][T16535] bond7: Removing last arp target with arp_interval on [ 368.611405][T16496] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.618629][T16496] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.626048][T16496] bridge_slave_0: entered allmulticast mode [ 368.633718][T16496] bridge_slave_0: entered promiscuous mode [ 368.656910][T16496] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.665035][T16496] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.675060][T16496] bridge_slave_1: entered allmulticast mode [ 368.683447][T16496] bridge_slave_1: entered promiscuous mode [ 368.718135][T16496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.776299][T16496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.831749][T13251] bridge0: port 3(batadv0) entered disabled state [ 368.861605][T13251] bridge_slave_1: left allmulticast mode [ 368.874305][T13251] bridge_slave_1: left promiscuous mode [ 368.889208][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.914168][T13251] bridge_slave_0: left promiscuous mode [ 368.920133][T13251] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.956381][T13251] dvmrp0: left allmulticast mode [ 368.963186][T13251] batman_adv: batadv0: Interface deactivated: erspan0 [ 369.183518][T13251] batman_adv: batadv0: Removing interface: erspan0 [ 369.257397][T13251] bond2 (unregistering): (slave geneve2): Releasing active interface [ 369.551019][ T5836] Bluetooth: hci5: command tx timeout [ 369.668388][T13251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.678307][T13251] bond0 (unregistering): Released all slaves [ 369.689190][T13251] bond1 (unregistering): Released all slaves [ 369.705039][T13251] bond2 (unregistering): Released all slaves [ 369.725845][T13251] bond3 (unregistering): Released all slaves [ 369.747246][T13251] bond4 (unregistering): Released all slaves [ 369.764139][T13251] bond5 (unregistering): (slave lo): Releasing backup interface [ 369.772451][T13251] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 369.792572][T13251] bond5 (unregistering): Released all slaves [ 369.807399][T13251] bond6 (unregistering): Released all slaves [ 369.823095][T13251] bond7 (unregistering): Released all slaves [ 369.838150][T13251] bond8 (unregistering): Released all slaves [ 369.853939][T13251] bond9 (unregistering): Released all slaves [ 369.883179][T13251] bond10 (unregistering): Released all slaves [ 369.898250][T13251] bond11 (unregistering): Released all slaves [ 369.923370][T16496] team0: Port device team_slave_0 added [ 369.935359][T16558] smc: net device wlan0 applied user defined pnetid SYZ0 [ 369.991321][T16496] team0: Port device team_slave_1 added [ 370.289463][T16591] __nla_validate_parse: 7 callbacks suppressed [ 370.289486][T16591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2869'. [ 370.308264][T16496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.336054][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.383490][T16496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.476328][T16591] netlink: 18451 bytes leftover after parsing attributes in process `syz.0.2869'. [ 370.528086][T16496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.535580][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.580174][T16496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.748996][T16607] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2872'. [ 370.783277][T16608] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 370.830439][T16616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2873'. [ 370.934227][T16496] hsr_slave_0: entered promiscuous mode [ 370.956399][T16496] hsr_slave_1: entered promiscuous mode [ 370.963049][T16496] debugfs: 'hsr0' already exists in 'hsr' [ 370.968830][T16496] Cannot create hsr debugfs directory [ 371.082754][T16627] sctp: [Deprecated]: syz.4.2876 (pid 16627) Use of int in max_burst socket option. [ 371.082754][T16627] Use struct sctp_assoc_value instead [ 371.142974][ T29] audit: type=1800 audit(1774828237.406:4): pid=16634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2879" name=CB dev="tmpfs" ino=2911 res=0 errno=0 [ 371.175028][T16636] netlink: 'syz.2.2877': attribute type 1 has an invalid length. [ 371.323416][T16649] xt_cgroup: path and classid specified [ 371.331314][T16649] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.339978][T16649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.347311][T16649] IPv6: NLM_F_CREATE should be set when creating new route [ 371.354631][T16649] IPv6: NLM_F_CREATE should be set when creating new route [ 371.413635][T16650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2877'. [ 371.517540][T16657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2877'. [ 371.631990][ T5836] Bluetooth: hci5: command tx timeout [ 372.034179][T16669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2881'. [ 372.134629][T16636] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 372.226205][T16665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2878'. [ 372.250505][T16669] netlink: 18451 bytes leftover after parsing attributes in process `syz.4.2881'. [ 372.336975][T13251] hsr_slave_0: left promiscuous mode [ 372.357032][T13251] hsr_slave_1: left promiscuous mode [ 372.373608][T13251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.411755][T13251] batman_adv: batadv0: Removing interface: ipvlan0 [ 372.770153][T13251] team0 (unregistering): Port device team_slave_1 removed [ 373.175727][T16702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2887'. [ 373.655867][T13251] IPVS: stop unused estimator thread 0... [ 373.714744][ T5836] Bluetooth: hci5: command tx timeout [ 374.084777][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.353688][T16750] netlink: 'syz.0.2899': attribute type 3 has an invalid length. [ 374.738247][T16496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.787567][T16496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.889138][T16496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.958117][T16496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.223920][T16818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.241124][T16818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.472103][T16826] tipc: Enabling of bearer rejected, failed to enable media [ 375.594145][T16496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.732910][T16496] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.793096][ T5836] Bluetooth: hci5: command tx timeout [ 375.828188][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.835442][T13245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.864330][T13245] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.871580][T13245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.883111][T16835] __nla_validate_parse: 9 callbacks suppressed [ 375.883128][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 376.183397][T16845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.226783][T16845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.263345][T16845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.317218][T16845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.325823][T16845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.351372][T16845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.367639][T16852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2919'. [ 376.402123][T16845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.624086][T16496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.646315][T16870] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2921'. [ 376.664916][T16869] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 376.691526][T16869] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 376.971125][T16879] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2924'. [ 377.133871][T16496] veth0_vlan: entered promiscuous mode [ 377.192401][T16496] veth1_vlan: entered promiscuous mode [ 377.289771][T16886] lo speed is unknown, defaulting to 1000 [ 377.319232][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 377.524137][T16496] veth0_macvtap: entered promiscuous mode [ 377.563869][T16496] veth1_macvtap: entered promiscuous mode [ 377.653559][T16496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.761006][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2931'. [ 377.868835][T16496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.932488][T13249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.988187][T13249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.054279][T13249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.098524][T13249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.503112][T13239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.530838][T13239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.553872][T16915] nbd0: detected capacity change from 0 to 63 [ 378.560692][T16917] netlink: 'syz.2.2932': attribute type 1 has an invalid length. [ 378.604974][T16917] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2932'. [ 378.713835][ T5836] block nbd0: Receive control failed (result -104) [ 378.766010][T13245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.795051][T13245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.059140][T16938] atomic_op ffff8880771c4198 conn xmit_atomic 0000000000000000 [ 379.230957][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 379.356396][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.366696][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.375039][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.384488][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.398418][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.517661][T16944] lo speed is unknown, defaulting to 1000 [ 379.774678][T16966] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2944'. [ 379.985658][T16973] bond10 (unregistering): Released all slaves [ 380.222842][T16987] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 380.251312][T16987] syzkaller1: linktype set to 825 [ 380.269238][T16984] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 380.322270][T16984] syzkaller1: linktype set to 825 [ 380.331588][T16984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2948'. [ 380.441781][T16944] chnl_net:caif_netlink_parms(): no params data found [ 380.710670][T16944] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.718357][T16944] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.725988][T16944] bridge_slave_0: entered allmulticast mode [ 380.734498][T16944] bridge_slave_0: entered promiscuous mode [ 381.201830][T16944] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.218302][T16944] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.260986][T16944] bridge_slave_1: entered allmulticast mode [ 381.301848][T16944] bridge_slave_1: entered promiscuous mode [ 381.346418][T17026] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2956'. [ 381.465335][T16944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.475918][ T51] Bluetooth: hci4: command tx timeout [ 381.492555][ C1] ------------[ cut here ]------------ [ 381.498251][ C1] sk->sk_forward_alloc [ 381.498279][ C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#1: syz.3.2957/17029 [ 381.512663][ C1] Modules linked in: [ 381.516904][ C1] CPU: 1 UID: 0 PID: 17029 Comm: syz.3.2957 Not tainted syzkaller #0 PREEMPT(full) [ 381.517797][T16944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.526340][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.526372][ C1] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 381.526404][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 80 0c 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 72 0c 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 64 0c 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 381.526424][ C1] RSP: 0018:ffffc90000a08d48 EFLAGS: 00010246 [ 381.526446][ C1] RAX: ffffffff8a26a20c RBX: dffffc0000000000 RCX: ffff88801db69e80 [ 381.526465][ C1] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 381.593396][ C1] RBP: 0000000000000f70 R08: ffff88802ac8f127 R09: 1ffff11005591e24 [ 381.601439][ C1] R10: dffffc0000000000 R11: ffffed1005591e25 R12: ffff88802ac8ee80 [ 381.609448][ C1] R13: dffffc0000000000 R14: ffff88802ac8f10c R15: ffffffff8fca6c80 [ 381.617526][ C1] FS: 00007fdb8f4906c0(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 381.626568][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.633247][ C1] CR2: 00007f372a74da08 CR3: 00000000354d4000 CR4: 00000000003526f0 [ 381.641313][ C1] Call Trace: [ 381.644624][ C1] [ 381.647504][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 381.653072][ C1] __sk_destruct+0x85/0x880 [ 381.657629][ C1] ? rcu_core+0x751/0x1070 [ 381.662127][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 381.667290][ C1] rcu_core+0x7cd/0x1070 [ 381.671642][ C1] ? __pfx_rcu_core+0x10/0x10 [ 381.676380][ C1] ? sched_balance_domains+0x13a/0x950 [ 381.681935][ C1] handle_softirqs+0x22a/0x870 [ 381.686747][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 381.691629][ C1] __irq_exit_rcu+0x5f/0x150 [ 381.696269][ C1] irq_exit_rcu+0x9/0x30 [ 381.700563][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 381.706320][ C1] [ 381.709289][ C1] [ 381.712321][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.718439][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 381.723832][ C1] Code: e9 30 ff ff ff e8 45 65 0f 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c1 22 7b 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d be 4f 73 [ 381.743527][ C1] RSP: 0018:ffffc90005ee78f0 EFLAGS: 00000296 [ 381.749643][ C1] RAX: 361d5b496295a000 RBX: 0000000000000246 RCX: 0000000080000001 [ 381.757707][ C1] RDX: 00000000f55d60ce RSI: ffffffff8e19a76a RDI: ffffffff8c27ca80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 381.765767][ C1] RBP: 0000000000000001 R08: ffffffff82241bf8 R09: ffff8880b873f368 [ 381.773844][ C1] R10: dffffc0000000000 R11: ffffed100666cadb R12: 0000000000000000 [ 381.781900][ C1] R13: ffff8880b873f368 R14: 0000000000000000 R15: 0000000000000001 [ 381.790185][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 381.795339][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 381.800504][ C1] __kmalloc_noprof+0x1d4/0x760 [ 381.805440][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 381.810527][ C1] ? __netlink_kernel_create+0x1e3/0x720 [ 381.816274][ C1] ? __netlink_create+0x16a/0x260 [ 381.821378][ C1] __netlink_kernel_create+0x1e3/0x720 [ 381.826884][ C1] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 381.832559][ C1] ? __pfx___netlink_kernel_create+0x10/0x10 [ 381.838619][ C1] ? fib_net_init+0x1f6/0x3b0 [ 381.843388][ C1] fib_net_init+0x208/0x3b0 [ 381.847944][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.853867][ C1] ? __pfx_fib_net_init+0x10/0x10 [ 381.858942][ C1] ? __pfx_nl_fib_input+0x10/0x10 [ 381.859892][T17031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2958'. [ 381.864058][ C1] ? devinet_init_net+0x5c8/0x7c0 [ 381.864097][ C1] ops_init+0x35c/0x5c0 [ 381.864138][ C1] setup_net+0x118/0x340 [ 381.864165][ C1] ? __pfx_setup_net+0x10/0x10 [ 381.891581][ C1] ? preinit_net+0x47d/0x780 [ 381.896218][ C1] copy_net_ns+0x50e/0x730 [ 381.900697][ C1] create_new_namespaces+0x3e7/0x6a0 [ 381.906086][ C1] ? security_capable+0x7e/0x2c0 [ 381.911134][ C1] unshare_nsproxy_namespaces+0x11a/0x160 [ 381.916916][ C1] ksys_unshare+0x51d/0x930 [ 381.921542][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 381.926717][ C1] ? rcu_is_watching+0x15/0xb0 [ 381.931590][ C1] __x64_sys_unshare+0x38/0x50 [ 381.936414][ C1] do_syscall_64+0x14d/0xf80 [ 381.941091][ C1] ? trace_irq_disable+0x3b/0x150 [ 381.946149][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.952320][ C1] ? clear_bhb_loop+0x40/0x90 [ 381.957045][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.963099][ C1] RIP: 0033:0x7fdb8e59c799 [ 381.967566][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.982008][T17031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2958'. [ 381.987263][ C1] RSP: 002b:00007fdb8f490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 382.004774][ C1] RAX: ffffffffffffffda RBX: 00007fdb8e816180 RCX: 00007fdb8e59c799 [ 382.012861][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 382.020922][ C1] RBP: 00007fdb8e632c99 R08: 0000000000000000 R09: 0000000000000000 [ 382.028952][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.037022][ C1] R13: 00007fdb8e816218 R14: 00007fdb8e816180 R15: 00007ffe1a59cea8 [ 382.045106][ C1] [ 382.048185][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 382.055508][ C1] CPU: 1 UID: 0 PID: 17029 Comm: syz.3.2957 Not tainted syzkaller #0 PREEMPT(full) [ 382.064913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.075060][ C1] Call Trace: [ 382.078380][ C1] [ 382.081255][ C1] vpanic+0x56c/0xa60 [ 382.085366][ C1] ? __pfx__printk+0x10/0x10 [ 382.089978][ C1] ? __pfx_vpanic+0x10/0x10 [ 382.094600][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 382.099912][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 382.105148][ C1] panic+0xc5/0xd0 [ 382.108899][ C1] ? __pfx_panic+0x10/0x10 [ 382.113363][ C1] __warn+0x315/0x4f0 [ 382.117371][ C1] ? inet_sock_destruct+0x62d/0x740 [ 382.122594][ C1] ? inet_sock_destruct+0x62d/0x740 [ 382.127815][ C1] __report_bug+0x29a/0x540 [ 382.132346][ C1] ? kasan_save_track+0x3e/0x80 [ 382.137222][ C1] ? kasan_save_free_info+0x46/0x50 [ 382.142466][ C1] ? __kasan_slab_free+0x5c/0x80 [ 382.147429][ C1] ? inet_sock_destruct+0x62d/0x740 [ 382.152656][ C1] ? __pfx___report_bug+0x10/0x10 [ 382.157709][ C1] ? fib_net_init+0x208/0x3b0 [ 382.162491][ C1] ? ops_init+0x35c/0x5c0 [ 382.166854][ C1] ? setup_net+0x118/0x340 [ 382.171287][ C1] ? copy_net_ns+0x50e/0x730 [ 382.175904][ C1] ? create_new_namespaces+0x3e7/0x6a0 [ 382.181387][ C1] ? unshare_nsproxy_namespaces+0x11a/0x160 [ 382.187305][ C1] ? ksys_unshare+0x51d/0x930 [ 382.192093][ C1] ? __x64_sys_unshare+0x38/0x50 [ 382.197061][ C1] ? do_syscall_64+0x14d/0xf80 [ 382.201852][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.207956][ C1] ? inet_sock_destruct+0x62d/0x740 [ 382.213184][ C1] report_bug+0x16a/0x220 [ 382.217571][ C1] ? inet_sock_destruct+0x62d/0x740 [ 382.222798][ C1] ? inet_sock_destruct+0x62f/0x740 [ 382.228017][ C1] handle_bug+0x9c/0x200 [ 382.232288][ C1] exc_invalid_op+0x1a/0x50 [ 382.236836][ C1] asm_exc_invalid_op+0x1a/0x20 [ 382.241874][ C1] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 382.247706][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 80 0c 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 72 0c 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 64 0c 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 382.267356][ C1] RSP: 0018:ffffc90000a08d48 EFLAGS: 00010246 [ 382.273455][ C1] RAX: ffffffff8a26a20c RBX: dffffc0000000000 RCX: ffff88801db69e80 [ 382.281451][ C1] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 382.289446][ C1] RBP: 0000000000000f70 R08: ffff88802ac8f127 R09: 1ffff11005591e24 [ 382.297486][ C1] R10: dffffc0000000000 R11: ffffed1005591e25 R12: ffff88802ac8ee80 [ 382.305480][ C1] R13: dffffc0000000000 R14: ffff88802ac8f10c R15: ffffffff8fca6c80 [ 382.313488][ C1] ? inet_sock_destruct+0x62c/0x740 [ 382.318724][ C1] ? inet_sock_destruct+0x62c/0x740 [ 382.323947][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 382.329433][ C1] __sk_destruct+0x85/0x880 [ 382.333965][ C1] ? rcu_core+0x751/0x1070 [ 382.338414][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 382.343632][ C1] rcu_core+0x7cd/0x1070 [ 382.347917][ C1] ? __pfx_rcu_core+0x10/0x10 [ 382.352624][ C1] ? sched_balance_domains+0x13a/0x950 [ 382.358112][ C1] handle_softirqs+0x22a/0x870 [ 382.362904][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 382.367703][ C1] __irq_exit_rcu+0x5f/0x150 [ 382.372322][ C1] irq_exit_rcu+0x9/0x30 [ 382.376595][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 382.382257][ C1] [ 382.385204][ C1] [ 382.388158][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.394175][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 382.399510][ C1] Code: e9 30 ff ff ff e8 45 65 0f 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c1 22 7b 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d be 4f 73 [ 382.419134][ C1] RSP: 0018:ffffc90005ee78f0 EFLAGS: 00000296 [ 382.425316][ C1] RAX: 361d5b496295a000 RBX: 0000000000000246 RCX: 0000000080000001 [ 382.433309][ C1] RDX: 00000000f55d60ce RSI: ffffffff8e19a76a RDI: ffffffff8c27ca80 [ 382.441305][ C1] RBP: 0000000000000001 R08: ffffffff82241bf8 R09: ffff8880b873f368 [ 382.449294][ C1] R10: dffffc0000000000 R11: ffffed100666cadb R12: 0000000000000000 [ 382.457285][ C1] R13: ffff8880b873f368 R14: 0000000000000000 R15: 0000000000000001 [ 382.465383][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 382.470466][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 382.475514][ C1] __kmalloc_noprof+0x1d4/0x760 [ 382.480389][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 382.485446][ C1] ? __netlink_kernel_create+0x1e3/0x720 [ 382.491094][ C1] ? __netlink_create+0x16a/0x260 [ 382.496147][ C1] __netlink_kernel_create+0x1e3/0x720 [ 382.501632][ C1] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 382.507213][ C1] ? __pfx___netlink_kernel_create+0x10/0x10 [ 382.513234][ C1] ? fib_net_init+0x1f6/0x3b0 [ 382.517949][ C1] fib_net_init+0x208/0x3b0 [ 382.522473][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.528361][ C1] ? __pfx_fib_net_init+0x10/0x10 [ 382.533408][ C1] ? __pfx_nl_fib_input+0x10/0x10 [ 382.538461][ C1] ? devinet_init_net+0x5c8/0x7c0 [ 382.543508][ C1] ops_init+0x35c/0x5c0 [ 382.547700][ C1] setup_net+0x118/0x340 [ 382.551970][ C1] ? __pfx_setup_net+0x10/0x10 [ 382.556771][ C1] ? preinit_net+0x47d/0x780 [ 382.561392][ C1] copy_net_ns+0x50e/0x730 [ 382.565842][ C1] create_new_namespaces+0x3e7/0x6a0 [ 382.571161][ C1] ? security_capable+0x7e/0x2c0 [ 382.576139][ C1] unshare_nsproxy_namespaces+0x11a/0x160 [ 382.581895][ C1] ksys_unshare+0x51d/0x930 [ 382.586435][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 382.591486][ C1] ? rcu_is_watching+0x15/0xb0 [ 382.596287][ C1] __x64_sys_unshare+0x38/0x50 [ 382.601082][ C1] do_syscall_64+0x14d/0xf80 [ 382.605711][ C1] ? trace_irq_disable+0x3b/0x150 [ 382.610756][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.616855][ C1] ? clear_bhb_loop+0x40/0x90 [ 382.621571][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.627483][ C1] RIP: 0033:0x7fdb8e59c799 [ 382.632357][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.651981][ C1] RSP: 002b:00007fdb8f490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 382.660438][ C1] RAX: ffffffffffffffda RBX: 00007fdb8e816180 RCX: 00007fdb8e59c799 [ 382.668432][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 382.676418][ C1] RBP: 00007fdb8e632c99 R08: 0000000000000000 R09: 0000000000000000 [ 382.684410][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.692488][ C1] R13: 00007fdb8e816218 R14: 00007fdb8e816180 R15: 00007ffe1a59cea8 [ 382.700582][ C1] [ 382.704257][ C1] Kernel Offset: disabled [ 382.708592][ C1] Rebooting in 86400 seconds..