last executing test programs: 12.131496702s ago: executing program 0 (id=7861): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000780)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffff0000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000800)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x26de7, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000840)=[{0x3, 0x4, 0xa, 0xb}], 0x10, 0xd3}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x40006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "1d97ee3d10e02311"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r2, &(0x7f0000000400)="712f0efc4d5b32e975dd3a44b62ea0a4c729ccccf0b4ca08e7d0091818bc1d0300a93891f5b970ec60fe9bfed77ad9fd5f104ed02c34ddd7ad1622301f8cfc5644103b555a85630d88ebb23f68a93658ab3c51469350fab31844221ad397eed3342ab1820d6d726b64d2923eb3146005a7a408319d8e3bdccb3dc92fd71a0d71c30153abc61ef9e10a620f6ade301336c4b528b20c8cd951f991627154220785c3c773537991affe32d58efac5b16f25ede6fe8c3597ce2da5576aabd008fe7f63699642", &(0x7f0000000640)=""/217}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r2, &(0x7f0000000400)="712f0efc4d5b32e975dd3a44b62ea0a4c729ccccf0b4ca08e7d0091818bc1d0300a93891f5b970ec60fe9bfed77ad9fd5f104ed02c34ddd7ad1622301f8cfc5644103b555a85630d88ebb23f68a93658ab3c51469350fab31844221ad397eed3342ab1820d6d726b64d2923eb3146005a7a408319d8e3bdccb3dc92fd71a0d71c30153abc61ef9e10a620f6ade301336c4b528b20c8cd951f991627154220785c3c773537991affe32d58efac5b16f25ede6fe8c3597ce2da5576aabd008fe7f63699642", &(0x7f0000000640)=""/217}, 0x20) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000103fd31340e92c4bb8"], 0x48}, 0x300}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18800000000000000000000000000000b7080000000000007b8af8ff0000000000080000683200007b8af0ff00000000bfa100000000000007010000f8ffff0400a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00000000000f0000b70500000800000085000000760000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0) 11.079583698s ago: executing program 0 (id=7871): r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a54f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000300000000a1602a6800", 0x80, 0x3, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x1, 0x3, 0x1, 0x2, 0x4], 0x6}, {0x4, [0x6, 0x4, 0x3, 0x3, 0x1], 0x4, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="50c338e088a8", 0x6, 0x8, [0x31, 0xc, 0x2a, 0x39, 0xa, 0x24, 0x6, 0x4, 0x18, 0x2f, 0x2c, 0x2e, 0x2, 0x3a, 0x2a, 0xd], 0x2, 0x80000000, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 9.830580931s ago: executing program 0 (id=7880): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x0, &(0x7f0000000040)=""/57, &(0x7f0000000000)=0x39) r2 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newchain={0x10c0, 0x64, 0xa00, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x8, 0xe}, {0x2, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x108c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2}}, @TCA_MATCHALL_ACT={0x1070, 0x2, [@m_connmark={0x106c, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc56, 0x3, 0x8, 0x4, 0xfffffffa}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3b9, 0x3, 0x5, 0x6, 0x100}, 0x401}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x10c0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtclass={0x58, 0x28, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0x1}, {0x1, 0xfff3}, {0xfff2, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0xd}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x62}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0xfc, 0xa}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48014}, 0x4010) 8.559731898s ago: executing program 0 (id=7888): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000001300)="d7b5", 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f0000000300)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x1f, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x0, 0xc, 0x9, 0x5, 0xfffffffffffffffc, 0x4}, @alu={0x7, 0x0, 0x5, 0x1, 0x5, 0x20}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x2e}, @alu={0x4, 0x0, 0x5, 0x0, 0xb, 0xffffffffffffffe0, 0x11}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@generic={0x3, 0x7, 0x4, 0x6, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x5}}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0x16, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.163817726s ago: executing program 0 (id=7913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40800, 0x10}, [@IFLA_GROUP={0x8, 0x1b, 0xfffffffd}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 4.223642071s ago: executing program 0 (id=7926): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) pipe(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb9a9aff000000000000000085000000a0000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x8}, 0xc) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x93, 0x3, [@const={0x9, 0x0, 0x0, 0xa, 0x2}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @datasec={0x10, 0x8, 0x0, 0xf, 0x3, [{0x4, 0x35da, 0xc}, {0x4, 0x6, 0x5}, {0x5, 0x6, 0x3}, {0x2, 0xffff, 0x8}, {0x1, 0xfffff800, 0x6}, {0x2, 0xd, 0x4}, {0x5, 0x9, 0x2}, {0x5, 0x80000001, 0xffffff29}], "51fe5b"}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/145, 0xaf, 0x91, 0x1, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x1, 0x19f5d566, 0x200, 0x280, r6, 0xff, '\x00', 0x0, r7, 0x1, 0x3, 0x3, 0x6}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) close(r5) 3.741752615s ago: executing program 4 (id=7933): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x20, &(0x7f0000000500)=[@in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x4, "1fe473a8"}, &(0x7f0000000700)=0xc) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, &(0x7f0000000040)="d93937f5a4264335cdef726eb393eb56a2ec451dc4ecb1f447fac3129349ab1be7bb6772192b174c3443191a0c2a997d70b6cc8cbbb600796b48b39e808cd5f73f2c20ad2db514ded8a28b9cfcdfc11c1f7a8c44330a1db2c47a58a96f2b41f27ad6ed51f2e8dc8ae1f3116f11fc10710b926e7906be81a1749e9713a65f214e28fa14dca5d1ee203643176e4de37cd60b9f4d28ec3753ca01c9120519bf5b1b1a3be60c32b4453d9895eeb7a9a5d1ef0b7fc0aa8f4f3f50205bf5a16619a70224821ffd8348e85b7339c33738d64b6fc7", 0xd1, 0x4, &(0x7f0000000200)={0x23, 0x46, 0x6, 0xc5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000440)='syzkaller\x00'}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) listen(r4, 0x0) sendmmsg$inet6(r4, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32, @ANYBLOB="080000000000000000000000000000002b76973a3cd2a017c196d38c920858c22ff7ba1096abcc3134215b19bc2023c7a42aba056a8687cb056bb9ac9f95acf9890ed3a52946e5c5801e59154f4d7f9fc1912132ee8196b39b01516c3d98f1a70f862f4e0ea12aae5e1c8fe53bbdbc2793623e3201a30444ef3e7b64d287582a9ad237c7f72111a607935eb6b380df3d0eab065f5450d8981435a3eaa6209fc29114e03dbc3cc98ea67c0f6e8ca169b52a71cda67dadbfe61c8f35f2436962", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12, r11}, 0xc) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r3) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r14, @ANYRES64=r13, @ANYRES32=r13, @ANYRES32=r4], 0x80}}, 0x4000805) 2.63966585s ago: executing program 4 (id=7938): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 64) r0 = socket(0x2, 0x80805, 0x0) (rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32, @ANYBLOB="00000000000000feffff"], 0xac}}, 0x4000) getsockopt$bt_hci(r4, 0x84, 0x3, &(0x7f0000002580)=""/4103, &(0x7f0000000180)=0x100b) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x9) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) ioctl$sock_ifreq(r0, 0x8938, &(0x7f0000001100)={'veth1_vlan\x00', @ifru_mtu=0x8}) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10) (async) r8 = accept(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000001240)={0x0, 0xfffffff8}, &(0x7f0000001280)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={r9, 0x20, &(0x7f00000012c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000001300)=0x10) (async) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 2.430214462s ago: executing program 2 (id=7940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2000b}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3d0, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x195}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1ff, @local, 0xffffffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x27}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x734}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x86, @mcast1, 0x85}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "429e6c873363e459f22d44d5a668e5cfa04f7c00d9eb6c406d97032d2c5d81859675676def9c72cc"}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "095c0ce4e6fa237eaaf0f2a0d544d8716b29f9d5d00076ee14d3a97b31a62a8cf990916a18ac8d20d4f6d3ccff6f843688d5c24ea922964028cb7eb14f4622098e0f11f5b9b8acfa49ef760e51b161a4fffeccf575aef3d4533e4fa138617adf2f17b35a0bd637b712ff55727b174e32601c247e2952da8589c1db0d33ba6ddc5277d4b252b90a15a9e1ae11a57ba8ac7ec86e3e66fa5e9603a28df9fb0eff886f8e1dc9898ad2160bf9d2ab419f9ec6b1dd5d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x80}, 0x1) r3 = socket(0x21, 0x0, 0x2000fd) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getpeername$llc(r3, 0x0, 0x0) accept$unix(r3, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2000b}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3d0, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x195}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1ff, @local, 0xffffffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x27}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x734}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x86, @mcast1, 0x85}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "429e6c873363e459f22d44d5a668e5cfa04f7c00d9eb6c406d97032d2c5d81859675676def9c72cc"}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "095c0ce4e6fa237eaaf0f2a0d544d8716b29f9d5d00076ee14d3a97b31a62a8cf990916a18ac8d20d4f6d3ccff6f843688d5c24ea922964028cb7eb14f4622098e0f11f5b9b8acfa49ef760e51b161a4fffeccf575aef3d4533e4fa138617adf2f17b35a0bd637b712ff55727b174e32601c247e2952da8589c1db0d33ba6ddc5277d4b252b90a15a9e1ae11a57ba8ac7ec86e3e66fa5e9603a28df9fb0eff886f8e1dc9898ad2160bf9d2ab419f9ec6b1dd5d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) socket(0x21, 0x0, 0x2000fd) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) getpeername$llc(r3, 0x0, 0x0) (async) accept$unix(r3, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) (async) 2.275033358s ago: executing program 3 (id=7942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000226050b0000000000000000070000050514bf000700000011000300686173683ab93e87efea777269702c706f7274000000000900020073797a320000000005000400020000001400078005001400010000000800084000000042050005000a000000"], 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x42) 2.260537157s ago: executing program 4 (id=7943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x0, &(0x7f0000000040)="f9ad5dff258f902792b9ba83bbcc", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.133741847s ago: executing program 2 (id=7944): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1, 0xfffffffd}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd94) unshare(0x20000400) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001008800f34dadf891b5d000074d4642c", @ANYRES32=0x0, @ANYBLOB="0001000000500000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20010) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 2.036186476s ago: executing program 3 (id=7946): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x30, r2, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r3, 0x952de000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x28) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x7}, 0x10) sendto$inet(r6, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x4}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r6) recvmsg(0xffffffffffffffff, 0x0, 0x400002e1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fdffffff0000000007000000850000002c000000b7080000068000007b8af0ff0078e4cf73bd586030f6742bfcfa7bff000000bfa100100000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000089de700182300000013f491b3f12bacd5d1c85b02cfb8ce796b4d18109538c4febf57a60230587d727391842a72764df882d55d891bba600f5e82e58ee51c4af90113d8a1e51e0172141195c6d41a635f8166b1077aa8d97d5c92", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="0010001d000000136e53532f2848", 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$phonet(0x23, 0x2, 0x1) 2.005816924s ago: executing program 1 (id=7947): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x4, 0x80000005}, {0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x22, &(0x7f0000000880)=""/50, &(0x7f00000008c0)=0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x9c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe, 0x4f}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0xc841) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x0, 0x0, @mcast2, 0xffffff08}}}, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, 0x0, 0x81) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x4e24, 0x6, @mcast1, 0x4}}}, 0x88) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @mcast1, @mcast2, {[], {0x400, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1c62acdfad905d2b4f6f2255ad1b963029028df42bc19c77", "4b2efecb22f91768539b1bf983c8123155f58650f790b44486a262078a7de578"}}}}}}}, 0x0) write$ppp(r0, &(0x7f00000000c0)="43f1", 0x2) 1.926375369s ago: executing program 4 (id=7948): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r0, 0xf401}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x68000005}) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 1.758693874s ago: executing program 2 (id=7949): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d463"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001740)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x91}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB="00000000000000000000b65c972e6d324e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20040800) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000ffff000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d463"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001740)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x91}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB="00000000000000000000b65c972e6d324e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20040800) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000ffff000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 1.754398426s ago: executing program 1 (id=7950): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="c8", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x28, 0x4, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd511}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x3df}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r6], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x2, @local, 0xffffff55}}, [0x6, 0x5, 0x1, 0x7, 0xb69, 0x7fffffff, 0x1000, 0x6, 0x6df, 0xffffffffffffed19, 0x1ff00000000000, 0x4, 0x609, 0x7]}, &(0x7f0000000500)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000600)={r9, 0x3c, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x10001, @mcast2, 0x80000000}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000640)=0x10) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)={@val={0x8, 0x9}, @void, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x1, 0xff, 0x100}, "c1963bf57e73e3279fdbd0c7"}}}}, 0x34) 1.706295386s ago: executing program 3 (id=7951): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfffd, 0xb}, {0x5, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x0, 0x24e, 0x7ff, 0x4, 0x6, 0x7fff, 0x4, 0xc}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc040) r4 = socket(0x1, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0xe, &(0x7f00000002c0)=""/250, &(0x7f0000000400)=0xfa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r6, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0x8, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xf, 0xa}, {0xfff3, 0x1}}, [{0x8, 0xb, 0x688}, {0x8, 0xb, 0x51a}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, @local, @empty, 0x7, 0x0, 0x80000}}) 1.614321334s ago: executing program 4 (id=7952): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0xc}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001000)={'vcan0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x95}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB='f\n\x00\x00\a\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0x77, 0x6, 0x7, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x7, 0xf2}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r8}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000040)={@private2, r9}, 0x14) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/25], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.254165779s ago: executing program 2 (id=7953): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2c}, {0x10000000000, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) (async) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) (async) socket$inet6(0xa, 0x3, 0x88) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2c}, {0x10000000000, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) 809.427492ms ago: executing program 4 (id=7954): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000100000000000000000000000000000000000000000000000f000720f176821ba743efe970357eda89abc771505161a756bc919cc155a7ebe9b8ee7bf61facaf85f40b13a5e44538864f86a010cfe331f59b726e8a12bd825b8f9a4f85de09ffdbd8432cc369c4b3a7f7d4f2e0c6498bd87ca53a40f9032300595be2b2157a5065924bb67e9bf09c344a8519b1aa67beca9e4c512269728b0e9274901767670da802d924fe77dcc0ea90f20650a871f139e41acdd549188f8bbf9b47c8c463421752fdf242242d4b361ea4a342c41e6d768"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r3}, 0x38) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) r4 = socket(0x1e, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x3, 0xf02, 0x0, 0x31, 0x1, 0x5}, 0x9c) shutdown(r4, 0x2) unshare(0x28000100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000166000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000100000000000000000000000000000000000000000000000f000720f176821ba743efe970357eda89abc771505161a756bc919cc155a7ebe9b8ee7bf61facaf85f40b13a5e44538864f86a010cfe331f59b726e8a12bd825b8f9a4f85de09ffdbd8432cc369c4b3a7f7d4f2e0c6498bd87ca53a40f9032300595be2b2157a5065924bb67e9bf09c344a8519b1aa67beca9e4c512269728b0e9274901767670da802d924fe77dcc0ea90f20650a871f139e41acdd549188f8bbf9b47c8c463421752fdf242242d4b361ea4a342c41e6d768"], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r3}, 0x38) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) (async) socket(0x1e, 0x1, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x3, 0xf02, 0x0, 0x31, 0x1, 0x5}, 0x9c) (async) shutdown(r4, 0x2) (async) unshare(0x28000100) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000166000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) 763.621321ms ago: executing program 3 (id=7955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbfb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040041}, 0x400c004) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x400, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x86}, @TCA_SAMPLE_PARMS={0xffffffffffffff99, 0x2, {0x0, 0x0, 0x0, 0x40, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 551.503152ms ago: executing program 1 (id=7956): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340)={0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) syz_emit_ethernet(0x1f5, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "387c9d", 0x1bf, 0x6, 0xff, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, {[@hopopts={0x2f, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x1, 0x24, "294da391ba2821488e3baff89096b1831ba54dfcaa5a7b5bef2d850c8fa3053bd83ef017"}, @jumbo={0xc2, 0x4, 0xa5}, @calipso={0x7, 0x28, {0x0, 0x8, 0xa, 0xda0e, [0x1, 0x1647, 0x10, 0xb]}}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x87, 0x5, '\x00', [@ra={0x5, 0x2, 0xfb15}, @hao={0xc9, 0x10, @mcast1}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @srh={0x67, 0xa, 0x4, 0x5, 0x9, 0x30, 0x4, [@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x2c, 0x3, '\x00', [@ra={0x5, 0x2, 0x104}, @pad1, @jumbo={0xc2, 0x4, 0x55}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x2f, 0x7, '\x00', [@ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0xfc00, [0xa, 0x3, 0x3, 0x4ba]}}, @ra={0x5, 0x2, 0xfff}]}], @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x9390, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0xf05, 0x2, 0x4e23, 0x4e22}, 0x4, 0x1}, 0x2}, 0x4}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340)={0x0}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) (async) syz_emit_ethernet(0x1f5, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "387c9d", 0x1bf, 0x6, 0xff, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, {[@hopopts={0x2f, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x1, 0x24, "294da391ba2821488e3baff89096b1831ba54dfcaa5a7b5bef2d850c8fa3053bd83ef017"}, @jumbo={0xc2, 0x4, 0xa5}, @calipso={0x7, 0x28, {0x0, 0x8, 0xa, 0xda0e, [0x1, 0x1647, 0x10, 0xb]}}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x87, 0x5, '\x00', [@ra={0x5, 0x2, 0xfb15}, @hao={0xc9, 0x10, @mcast1}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @srh={0x67, 0xa, 0x4, 0x5, 0x9, 0x30, 0x4, [@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x2c, 0x3, '\x00', [@ra={0x5, 0x2, 0x104}, @pad1, @jumbo={0xc2, 0x4, 0x55}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x2f, 0x7, '\x00', [@ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0xfc00, [0xa, 0x3, 0x3, 0x4ba]}}, @ra={0x5, 0x2, 0xfff}]}], @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x9390, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0xf05, 0x2, 0x4e23, 0x4e22}, 0x4, 0x1}, 0x2}, 0x4}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) (async) close(0x3) (async) 550.58082ms ago: executing program 2 (id=7957): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {0x0, 0x8001}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4040080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000480)={{r5, &(0x7f0000000540)='macv\xb3,\xdc\xe0\xb6\xa3\aU\xdc\x1c\x86\x9eduT\xee\x86n\x00', 0x4400, &(0x7f00000000c0)={@_ha_fsid={[0x80, 0xffffffff]}, {0x6, 0x2800, 0x9, 0xc99}}, 0xd, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xff}, 0x1, &(0x7f0000000440)=[{0x2, 0x8, &(0x7f0000000280)='\\\x00', &(0x7f00000003c0)="2816129e2da8a7c019ca5bea4ce158823baff5dc66049e210088d82fe6a31aed7083f60b89667df44b1b1f733acfd35debd5df5e6a95e91e245258a5d0a88fb319d00788083abb3817", 0x49}]}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@bridge_getneigh={0x38, 0x1e, 0x300, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x40, 0x44}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r5) 306.463666ms ago: executing program 1 (id=7958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000040)="f9ad5dff258f902792b9ba83bbcc", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 254.476648ms ago: executing program 1 (id=7959): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x402, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd5, 0xd5, 0xb, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x36, 0x4}], 'E'}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x1}, @var={0x2, 0x0, 0x0, 0xe, 0x1, 0x8f8197e8743eda33}, @union={0xb, 0xa, 0x0, 0x5, 0x0, 0x23f0, [{0x6, 0x3, 0x8}, {0xb, 0x0, 0x1}, {0x10, 0x0, 0xfffffbff}, {0xa, 0x0, 0x7}, {0x7, 0x2, 0x4}, {0x1, 0x4, 0x6}, {0xf, 0x2, 0x7fff}, {0x7, 0x5}, {0xd, 0x0, 0x4}, {0x0, 0x5, 0x4f}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x61, 0x0, 0x2e, 0x2e, 0x0, 0x0, 0x30, 0x5f]}}, &(0x7f0000000180)=""/123, 0xfb, 0x7b, 0x0, 0x1000}, 0x28) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000240)={0x0, 0x88, 0xfffffffffffffffa}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r2, 0x7, 0x0, [0x125, 0x101, 0x8, 0x5, 0x3], [0x1, 0xff, 0x5d4, 0xfff, 0xb, 0x7, 0x5622, 0x0, 0x1, 0x0, 0x8, 0x9, 0x7, 0xd30000000000, 0xe8ae, 0x1, 0x2, 0x595, 0x10000, 0x0, 0x100000000, 0x4, 0x10001, 0xa60, 0xb22, 0x2, 0x7, 0x401, 0x6, 0xfffffffffffffe00, 0x0, 0x100000001, 0xfffffffffffffff8, 0x81, 0x6, 0x3, 0x9, 0x2, 0x7, 0x1000, 0xfffffffffffffffb, 0x1000, 0x100000000, 0x3d3f, 0x7f, 0xa3b, 0x7fff, 0x8, 0x2, 0x3, 0x4, 0xe, 0x1, 0x7fffffff, 0xc, 0x1, 0x3, 0x8, 0x8, 0x8867, 0xa29, 0x4, 0x80000000, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffff8, 0x1, 0x7, 0x4, 0x8336, 0x0, 0x9, 0x3, 0x0, 0x8, 0xfffffffffffffffd, 0x4, 0x1, 0x4, 0x3, 0x5, 0xd, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x2, 0x79, 0x2, 0xc5b7, 0x40, 0x0, 0x4, 0x800100000, 0x9, 0x3, 0x643b, 0x5, 0x3600000000000000, 0x8, 0x0, 0x80, 0x10000, 0x8cb, 0xf4, 0xab, 0x6, 0x74c, 0x59, 0x63c9, 0xd4, 0x100000001, 0x7fffffffffffffff, 0x8000, 0x80000000, 0x5, 0x8000000000000001, 0x5]}) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x28004200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x178, 0x1403, 0x404, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x24008000}, 0x4) r5 = socket(0x11, 0x80008, 0x7) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0x7ff, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004004}, 0x8c5) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x35f025f5, 0x2, 0x8, 0x1, 0xf, 0x2}, {0x80000001, 0x3, 0xc7, 0x2, 0xfb9, 0x3}], ['\x00', '\x00', '\x00', '\x00']}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xc, 0x6, 0x5, 0x0, 0x40, 0x10001, 0xb}, &(0x7f0000001080)=0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000010c0)={r6, 0x0, 0x1eed}, 0x8) socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "95a8be8d0b50bd"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002100)={0x0, r7, "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", "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"}) setsockopt$inet6_buf(r4, 0x29, 0x1b, &(0x7f0000003100)="d98af4a8380fce9a66897f4c82e7f3570e169ff83b669375107bdbac99f62e44834554821062da5ec3d49055594832fed04819b22f87d4da0bad90cdd96684d36fd8", 0x42) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000003180)={r4}, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), r5) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000003340)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003240)={0x9c, r9, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "673dc968023d12b70aebfabb5f"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "af865eb4e4f5e5"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x20, r11, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x1c140) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003500), r3) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000036c0)={&(0x7f00000034c0), 0xc, &(0x7f0000003680)={&(0x7f0000003540)={0x118, r12, 0x203, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf6}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xaaf}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcd5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1369}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000094}, 0x894) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000003840), &(0x7f0000003880)=0xc) r14 = accept4(r4, 0x0, &(0x7f00000038c0), 0x80000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f0000003900)={0x5, [0x7, 0x5, 0x4, 0x60d, 0x5]}, &(0x7f0000003940)=0xe) 203.219041ms ago: executing program 3 (id=7960): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$l2tp6(r0, &(0x7f0000001500)={0xa, 0x0, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001, 0x2}, 0x20) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00080000000000000300000008"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x7389a79a199574b9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) readv(r4, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) (async, rerun: 64) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) (rerun: 64) close(r1) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fdfffefe00000000030000008500003caca310cf3d941400110000001526dd2b2491d62bcc4cb9f97f247a82626aee52fb271ce2b53c7728dd538c32de2a4e0a2d799f2852a0cbdee81f0825f051f1bb7eafc589ae3797d1da9faa29a28da7288bf6119dff3503089331691e6da70f395fa8362b3010a93552927ed843ca925d140b99926c6cce5d06a47a3032023480516650d8d14890418175c783414fb0e626a340bf06ef835a33858ce9e0040d205c0f87d6fbfd5e2ef72618466b13d06c70d48ab35f6abc5fd4dca661f07017eb5decaa7526a457008f5a37772a1cbd974ad4a0d688f5"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 195.096054ms ago: executing program 1 (id=7961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000300fed3000000000000000000000000003414000200fe"], 0x64}}, 0x4008000) 52.423741ms ago: executing program 2 (id=7962): r0 = socket(0x10, 0x803, 0x0) unshare(0x2020600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) sendfile(r0, r1, &(0x7f0000000180)=0x4, 0x5a7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008009c11ff20010000000000000000000000000001ff0200000000000000000000000000014f194e000003"], 0xd6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2060600003060000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=7963): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000000080104000000001100000005000300210000000900010073797a30000000000900010073797a30000000000900010073797a31000000000900010073797a300000000005000300110000000eea9dc60eebfe08a01c47ea5cf7708cb0e1e55b5ca7ef121d75a7cf9fd0fd500cc4f24d1dcf0b"], 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000250002000000000005000200000000004500000000000000a500feff000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @multicast}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) kernel console output (not intermixed with test programs): f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.108970][T31436] RSP: 002b:00007fc3e70e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 834.108989][T31436] RAX: ffffffffffffffda RBX: 00007fc3e6425fa0 RCX: 00007fc3e619de59 [ 834.109002][T31436] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 834.109015][T31436] RBP: 00007fc3e70e4090 R08: 0000000000000000 R09: 0000000000000000 [ 834.109026][T31436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.109037][T31436] R13: 00007fc3e6426038 R14: 00007fc3e6425fa0 R15: 00007ffd96035058 [ 834.109065][T31436] [ 834.111735][T31440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6533'. [ 834.279162][T31442] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 834.474298][T31448] netlink: 'syz.0.6534': attribute type 1 has an invalid length. [ 834.492617][T31448] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6534'. [ 834.626189][T31458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6538'. [ 834.768542][T31458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6538'. [ 834.947793][T31470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6541'. [ 834.978202][T31470] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6541'. [ 835.014699][T31470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6541'. [ 835.214040][T31487] nbd: socks must be embedded in a SOCK_ITEM attr [ 835.297514][T31490] FAULT_INJECTION: forcing a failure. [ 835.297514][T31490] name failslab, interval 1, probability 0, space 0, times 0 [ 835.319615][T31490] CPU: 1 UID: 0 PID: 31490 Comm: syz.1.6546 Not tainted syzkaller #0 PREEMPT(full) [ 835.319642][T31490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 835.319653][T31490] Call Trace: [ 835.319661][T31490] [ 835.319669][T31490] dump_stack_lvl+0xe8/0x150 [ 835.319706][T31490] should_fail_ex+0x40c/0x560 [ 835.319733][T31490] should_failslab+0xa8/0x100 [ 835.319763][T31490] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 835.319787][T31490] ? skb_clone+0x212/0x3a0 [ 835.319822][T31490] ? skb_clone+0x212/0x3a0 [ 835.319857][T31490] skb_clone+0x212/0x3a0 [ 835.319889][T31490] __netlink_deliver_tap+0x413/0x860 [ 835.319931][T31490] ? netlink_deliver_tap+0x2e/0x1b0 [ 835.319961][T31490] netlink_deliver_tap+0x19c/0x1b0 [ 835.319990][T31490] netlink_unicast+0x77f/0x940 [ 835.320028][T31490] netlink_sendmsg+0x813/0xb40 [ 835.320066][T31490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.320100][T31490] ? aa_sock_msg_perm+0xf1/0x1b0 [ 835.320126][T31490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.320152][T31490] sock_sendmsg_nosec+0x13a/0x180 [ 835.320176][T31490] ____sys_sendmsg+0x54e/0x850 [ 835.320210][T31490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.320247][T31490] ? import_iovec+0x73/0xa0 [ 835.320278][T31490] ___sys_sendmsg+0x2a5/0x360 [ 835.320304][T31490] ? __lock_acquire+0x683/0x2cf0 [ 835.320334][T31490] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.320365][T31490] ? kstrtouint+0x6e/0xe0 [ 835.320409][T31490] ? __fget_files+0x2a/0x420 [ 835.320432][T31490] ? __fget_files+0x3a2/0x420 [ 835.320466][T31490] __sys_sendmmsg+0x273/0x4d0 [ 835.320500][T31490] ? __pfx___sys_sendmmsg+0x10/0x10 [ 835.320538][T31490] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 835.320580][T31490] ? ksys_write+0x242/0x270 [ 835.320611][T31490] ? __pfx_ksys_write+0x10/0x10 [ 835.320646][T31490] __x64_sys_sendmmsg+0xa0/0xc0 [ 835.320675][T31490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.320694][T31490] do_syscall_64+0x174/0x580 [ 835.320716][T31490] ? trace_irq_disable+0x3b/0x140 [ 835.320738][T31490] ? clear_bhb_loop+0x40/0x90 [ 835.320761][T31490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.320779][T31490] RIP: 0033:0x7fc3e619de59 [ 835.320797][T31490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.320822][T31490] RSP: 002b:00007fc3e70e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 835.320841][T31490] RAX: ffffffffffffffda RBX: 00007fc3e6425fa0 RCX: 00007fc3e619de59 [ 835.320854][T31490] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 835.320867][T31490] RBP: 00007fc3e70e4090 R08: 0000000000000000 R09: 0000000000000000 [ 835.320878][T31490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.320889][T31490] R13: 00007fc3e6426038 R14: 00007fc3e6425fa0 R15: 00007ffd96035058 [ 835.320920][T31490] [ 835.321089][T31490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6546'. [ 835.368427][T31493] netlink: 'syz.0.6547': attribute type 10 has an invalid length. [ 835.666735][T31493] geneve2: entered promiscuous mode [ 835.672146][T31493] geneve2: entered allmulticast mode [ 835.693436][T31495] netlink: 'syz.1.6548': attribute type 13 has an invalid length. [ 836.522605][T31523] FAULT_INJECTION: forcing a failure. [ 836.522605][T31523] name failslab, interval 1, probability 0, space 0, times 0 [ 836.547986][T31523] CPU: 1 UID: 0 PID: 31523 Comm: syz.1.6558 Not tainted syzkaller #0 PREEMPT(full) [ 836.548013][T31523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 836.548025][T31523] Call Trace: [ 836.548033][T31523] [ 836.548042][T31523] dump_stack_lvl+0xe8/0x150 [ 836.548075][T31523] should_fail_ex+0x40c/0x560 [ 836.548103][T31523] should_failslab+0xa8/0x100 [ 836.548132][T31523] __kmalloc_cache_noprof+0xa8/0x660 [ 836.548159][T31523] ? rtnl_newlink+0x136/0x1bd0 [ 836.548186][T31523] ? rtnl_newlink+0x136/0x1bd0 [ 836.548217][T31523] rtnl_newlink+0x136/0x1bd0 [ 836.548243][T31523] ? kasan_save_track+0x4f/0x80 [ 836.548265][T31523] ? kasan_save_track+0x3e/0x80 [ 836.548286][T31523] ? kasan_save_free_info+0x40/0x50 [ 836.548304][T31523] ? __kasan_slab_free+0x5c/0x80 [ 836.548326][T31523] ? kmem_cache_free+0x182/0x650 [ 836.548348][T31523] ? dev_hard_start_xmit+0x2cd/0x830 [ 836.548376][T31523] ? __netlink_deliver_tap+0x5b4/0x860 [ 836.548403][T31523] ? netlink_deliver_tap+0x19c/0x1b0 [ 836.548429][T31523] ? netlink_unicast+0x77f/0x940 [ 836.548451][T31523] ? netlink_sendmsg+0x813/0xb40 [ 836.548480][T31523] ? __pfx_rtnl_newlink+0x10/0x10 [ 836.548502][T31523] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 836.548528][T31523] ? do_syscall_64+0x174/0x580 [ 836.548552][T31523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.548607][T31523] ? kasan_quarantine_put+0xbb/0x1f0 [ 836.548630][T31523] ? lockdep_hardirqs_on+0x7a/0x110 [ 836.548659][T31523] ? nlmon_xmit+0xb0/0x100 [ 836.548682][T31523] ? kmem_cache_free+0x182/0x650 [ 836.548718][T31523] ? __lock_acquire+0x683/0x2cf0 [ 836.548755][T31523] ? __dev_queue_xmit+0x29b/0x37f0 [ 836.548777][T31523] ? __local_bh_enable_ip+0xd0/0x130 [ 836.548799][T31523] ? lockdep_hardirqs_on+0x7a/0x110 [ 836.548822][T31523] ? __dev_queue_xmit+0x29b/0x37f0 [ 836.548839][T31523] ? __local_bh_enable_ip+0xd0/0x130 [ 836.548859][T31523] ? __dev_queue_xmit+0x29b/0x37f0 [ 836.548884][T31523] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 836.548910][T31523] ? __pfx_rtnl_newlink+0x10/0x10 [ 836.548947][T31523] ? __pfx_rtnl_newlink+0x10/0x10 [ 836.548971][T31523] rtnetlink_rcv_msg+0x802/0xc00 [ 836.548999][T31523] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 836.549023][T31523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 836.549046][T31523] ? ref_tracker_free+0x689/0x830 [ 836.549073][T31523] ? __pfx_ref_tracker_free+0x10/0x10 [ 836.549106][T31523] netlink_rcv_skb+0x226/0x4a0 [ 836.549135][T31523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 836.549162][T31523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 836.549203][T31523] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.549231][T31523] ? netlink_deliver_tap+0x2e/0x1b0 [ 836.549263][T31523] netlink_unicast+0x7bb/0x940 [ 836.549300][T31523] netlink_sendmsg+0x813/0xb40 [ 836.549338][T31523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.549371][T31523] ? aa_sock_msg_perm+0xf1/0x1b0 [ 836.549396][T31523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.549423][T31523] sock_sendmsg_nosec+0x13a/0x180 [ 836.549448][T31523] ____sys_sendmsg+0x54e/0x850 [ 836.549480][T31523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 836.549518][T31523] ? import_iovec+0x73/0xa0 [ 836.549549][T31523] ___sys_sendmsg+0x2a5/0x360 [ 836.549576][T31523] ? __lock_acquire+0x683/0x2cf0 [ 836.549606][T31523] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.549639][T31523] ? kstrtouint+0x6e/0xe0 [ 836.549686][T31523] ? __fget_files+0x2a/0x420 [ 836.549710][T31523] ? __fget_files+0x3a2/0x420 [ 836.549750][T31523] __sys_sendmmsg+0x273/0x4d0 [ 836.549784][T31523] ? __pfx___sys_sendmmsg+0x10/0x10 [ 836.549821][T31523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 836.549862][T31523] ? ksys_write+0x242/0x270 [ 836.549896][T31523] ? __pfx_ksys_write+0x10/0x10 [ 836.549931][T31523] __x64_sys_sendmmsg+0xa0/0xc0 [ 836.549957][T31523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.549976][T31523] do_syscall_64+0x174/0x580 [ 836.549998][T31523] ? trace_irq_disable+0x3b/0x140 [ 836.550019][T31523] ? clear_bhb_loop+0x40/0x90 [ 836.550040][T31523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.550059][T31523] RIP: 0033:0x7fc3e619de59 [ 836.550082][T31523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.550098][T31523] RSP: 002b:00007fc3e70e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 836.550118][T31523] RAX: ffffffffffffffda RBX: 00007fc3e6425fa0 RCX: 00007fc3e619de59 [ 836.550133][T31523] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 836.550145][T31523] RBP: 00007fc3e70e4090 R08: 0000000000000000 R09: 0000000000000000 [ 836.550157][T31523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.550169][T31523] R13: 00007fc3e6426038 R14: 00007fc3e6425fa0 R15: 00007ffd96035058 [ 836.550201][T31523] [ 837.138645][T31530] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 837.259706][T31535] netlink: 'syz.1.6562': attribute type 3 has an invalid length. [ 837.582781][ T5628] block nbd5: Receive control failed (result -32) [ 837.759577][T31559] syzkaller0: entered promiscuous mode [ 837.779587][T31559] syzkaller0: entered allmulticast mode [ 837.896863][T31567] syzkaller0: entered promiscuous mode [ 837.902465][T31567] syzkaller0: entered allmulticast mode [ 837.989567][T31573] FAULT_INJECTION: forcing a failure. [ 837.989567][T31573] name failslab, interval 1, probability 0, space 0, times 0 [ 838.003988][T31573] CPU: 0 UID: 0 PID: 31573 Comm: syz.2.6569 Not tainted syzkaller #0 PREEMPT(full) [ 838.004015][T31573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 838.004027][T31573] Call Trace: [ 838.004035][T31573] [ 838.004044][T31573] dump_stack_lvl+0xe8/0x150 [ 838.004077][T31573] should_fail_ex+0x40c/0x560 [ 838.004106][T31573] should_failslab+0xa8/0x100 [ 838.004136][T31573] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 838.004160][T31573] ? __d_lookup+0x66/0x790 [ 838.004187][T31573] ? __d_alloc+0x37/0x6f0 [ 838.004210][T31573] ? __d_alloc+0x37/0x6f0 [ 838.004244][T31573] __d_alloc+0x37/0x6f0 [ 838.004276][T31573] d_alloc+0x4b/0x190 [ 838.004299][T31573] ? lookup_one_qstr_excl+0xc4/0x360 [ 838.004329][T31573] lookup_one_qstr_excl+0xd8/0x360 [ 838.004360][T31573] ? lookup_noperm_common+0x245/0x430 [ 838.004389][T31573] start_dirop+0x5c/0x90 [ 838.004414][T31573] simple_start_creating+0xcc/0x110 [ 838.004442][T31573] ? __pfx_simple_start_creating+0x10/0x10 [ 838.004468][T31573] ? do_raw_spin_unlock+0xf5/0x210 [ 838.004488][T31573] ? mntput+0x65/0xc0 [ 838.004512][T31573] debugfs_start_creating+0xdb/0x1a0 [ 838.004633][T31573] __debugfs_create_file+0x6f/0x400 [ 838.004691][T31573] debugfs_create_file_full+0x3f/0x60 [ 838.004724][T31573] ref_tracker_dir_debugfs+0x197/0x360 [ 838.004749][T31573] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 838.004800][T31573] ? __kvmalloc_node_noprof+0x55a/0x860 [ 838.004825][T31573] ? __kvmalloc_node_noprof+0x35c/0x860 [ 838.004852][T31573] ? __raw_spin_lock_init+0x45/0x100 [ 838.004876][T31573] alloc_netdev_mqs+0x275/0x12b0 [ 838.004895][T31573] ? __pfx_snprintf+0x10/0x10 [ 838.004915][T31573] ? __pfx_macvlan_setup+0x10/0x10 [ 838.004946][T31573] rtnl_create_link+0x321/0xd70 [ 838.004974][T31573] rtnl_newlink_create+0x25f/0xb00 [ 838.005005][T31573] ? __mutex_lock+0x5d4/0x1550 [ 838.005032][T31573] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 838.005063][T31573] ? __pfx___mutex_lock+0x10/0x10 [ 838.005099][T31573] ? ns_capable+0x89/0xe0 [ 838.005124][T31573] rtnl_newlink+0x167f/0x1bd0 [ 838.005164][T31573] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.005187][T31573] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 838.005212][T31573] ? do_syscall_64+0x174/0x580 [ 838.005232][T31573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.005288][T31573] ? kasan_quarantine_put+0xbb/0x1f0 [ 838.005310][T31573] ? lockdep_hardirqs_on+0x7a/0x110 [ 838.005337][T31573] ? nlmon_xmit+0xb0/0x100 [ 838.005359][T31573] ? kmem_cache_free+0x182/0x650 [ 838.005396][T31573] ? __lock_acquire+0x683/0x2cf0 [ 838.005425][T31573] ? __dev_queue_xmit+0x29b/0x37f0 [ 838.005448][T31573] ? __local_bh_enable_ip+0xd0/0x130 [ 838.005470][T31573] ? lockdep_hardirqs_on+0x7a/0x110 [ 838.005493][T31573] ? __dev_queue_xmit+0x29b/0x37f0 [ 838.005510][T31573] ? __local_bh_enable_ip+0xd0/0x130 [ 838.005530][T31573] ? __dev_queue_xmit+0x29b/0x37f0 [ 838.005555][T31573] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 838.005597][T31573] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.005627][T31573] rtnetlink_rcv_msg+0x802/0xc00 [ 838.005653][T31573] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 838.005676][T31573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.005698][T31573] ? ref_tracker_free+0x689/0x830 [ 838.005722][T31573] ? __pfx_ref_tracker_free+0x10/0x10 [ 838.005757][T31573] netlink_rcv_skb+0x226/0x4a0 [ 838.005786][T31573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.005812][T31573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 838.005836][T31573] ? lockdep_hardirqs_on+0x7a/0x110 [ 838.005886][T31573] netlink_unicast+0x7bb/0x940 [ 838.005925][T31573] netlink_sendmsg+0x813/0xb40 [ 838.005964][T31573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.005998][T31573] ? aa_sock_msg_perm+0xf1/0x1b0 [ 838.006024][T31573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.006051][T31573] sock_sendmsg_nosec+0x13a/0x180 [ 838.006077][T31573] ____sys_sendmsg+0x54e/0x850 [ 838.006110][T31573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.006148][T31573] ? import_iovec+0x73/0xa0 [ 838.006179][T31573] ___sys_sendmsg+0x2a5/0x360 [ 838.006205][T31573] ? __lock_acquire+0x683/0x2cf0 [ 838.006235][T31573] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.006269][T31573] ? kstrtouint+0x6e/0xe0 [ 838.006321][T31573] ? __fget_files+0x2a/0x420 [ 838.006345][T31573] ? __fget_files+0x3a2/0x420 [ 838.006380][T31573] __sys_sendmmsg+0x273/0x4d0 [ 838.006414][T31573] ? __pfx___sys_sendmmsg+0x10/0x10 [ 838.006452][T31573] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 838.006494][T31573] ? ksys_write+0x242/0x270 [ 838.006525][T31573] ? __pfx_ksys_write+0x10/0x10 [ 838.006561][T31573] __x64_sys_sendmmsg+0xa0/0xc0 [ 838.006590][T31573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.006618][T31573] do_syscall_64+0x174/0x580 [ 838.006641][T31573] ? trace_irq_disable+0x3b/0x140 [ 838.006665][T31573] ? clear_bhb_loop+0x40/0x90 [ 838.006689][T31573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.006709][T31573] RIP: 0033:0x7f1317d9de59 [ 838.006728][T31573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.006744][T31573] RSP: 002b:00007f1318d01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 838.006765][T31573] RAX: ffffffffffffffda RBX: 00007f1318025fa0 RCX: 00007f1317d9de59 [ 838.006778][T31573] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 838.006791][T31573] RBP: 00007f1318d01090 R08: 0000000000000000 R09: 0000000000000000 [ 838.006804][T31573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.006815][T31573] R13: 00007f1318026038 R14: 00007f1318025fa0 R15: 00007ffebe2868a8 [ 838.006850][T31573] [ 838.799396][T20200] wlan0: Trigger new scan to find an IBSS to join [ 838.928695][ T30] audit: type=1800 audit(1783146216.037:14): pid=31586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6572" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=654 res=0 errno=0 [ 839.001892][T31595] __nla_validate_parse: 19 callbacks suppressed [ 839.001910][T31595] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6570'. [ 839.019087][T31595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6570'. [ 839.028258][T31595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6570'. [ 839.041356][T31593] bond1: entered promiscuous mode [ 839.067363][T31593] bond1: entered allmulticast mode [ 839.115990][T31599] bridge0: Caught tx_queue_len zero misconfig [ 839.179398][T31607] bridge0: entered allmulticast mode [ 839.388873][T20185] team0: left allmulticast mode [ 839.399378][T20185] team0: left promiscuous mode [ 839.411116][T20185] bridge0: port 1(team0) entered disabled state [ 839.475149][T20185] dummy0: left allmulticast mode [ 840.185999][T20185] bond3 (unregistering): (slave geneve3): Releasing active interface [ 840.274324][T20185] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 840.322918][T20185] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 840.360571][T20185] team0: Port device bridge6 removed [ 840.482886][T20185] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 840.506831][T20185] bond0 (unregistering): Released all slaves [ 840.627031][T31633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6582'. [ 840.649652][T31633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6582'. [ 840.674151][T20185] bond1 (unregistering): Released all slaves [ 840.694256][T20185] bond2 (unregistering): Released all slaves [ 840.713930][T20185] bond3 (unregistering): Released all slaves [ 840.761888][T20185] bond4 (unregistering): Released all slaves [ 840.809910][T20185] bond5 (unregistering): Released all slaves [ 840.827345][T20185] bond6 (unregistering): Released all slaves [ 840.842608][T20185] bond7 (unregistering): Released all slaves [ 840.861873][T20185] bond8 (unregistering): Released all slaves [ 840.878254][T20185] bond9 (unregistering): Released all slaves [ 840.898033][T20185] bond10 (unregistering): Released all slaves [ 840.916963][T20185] bond11 (unregistering): Released all slaves [ 840.974869][T31633] FAULT_INJECTION: forcing a failure. [ 840.974869][T31633] name failslab, interval 1, probability 0, space 0, times 0 [ 841.014401][T31633] CPU: 1 UID: 0 PID: 31633 Comm: syz.0.6582 Not tainted syzkaller #0 PREEMPT(full) [ 841.014428][T31633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.014441][T31633] Call Trace: [ 841.014449][T31633] [ 841.014456][T31633] dump_stack_lvl+0xe8/0x150 [ 841.014488][T31633] should_fail_ex+0x40c/0x560 [ 841.014514][T31633] should_failslab+0xa8/0x100 [ 841.014541][T31633] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 841.014565][T31633] ? __d_lookup+0x66/0x790 [ 841.014592][T31633] ? __d_alloc+0x37/0x6f0 [ 841.014614][T31633] ? __d_alloc+0x37/0x6f0 [ 841.014647][T31633] __d_alloc+0x37/0x6f0 [ 841.014679][T31633] d_alloc+0x4b/0x190 [ 841.014703][T31633] ? lookup_one_qstr_excl+0xc4/0x360 [ 841.014733][T31633] lookup_one_qstr_excl+0xd8/0x360 [ 841.014760][T31633] ? lookup_noperm_common+0x245/0x430 [ 841.014788][T31633] start_dirop+0x5c/0x90 [ 841.014814][T31633] simple_start_creating+0xcc/0x110 [ 841.014849][T31633] ? __pfx_simple_start_creating+0x10/0x10 [ 841.014877][T31633] ? do_raw_spin_unlock+0xf5/0x210 [ 841.014898][T31633] ? mntput+0x65/0xc0 [ 841.014924][T31633] debugfs_start_creating+0xdb/0x1a0 [ 841.014945][T31633] __debugfs_create_file+0x6f/0x400 [ 841.014979][T31633] debugfs_create_file_full+0x3f/0x60 [ 841.015013][T31633] ref_tracker_dir_debugfs+0x197/0x360 [ 841.015037][T31633] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 841.015087][T31633] ? __kvmalloc_node_noprof+0x55a/0x860 [ 841.015115][T31633] ? __kvmalloc_node_noprof+0x35c/0x860 [ 841.015143][T31633] ? __raw_spin_lock_init+0x45/0x100 [ 841.015167][T31633] alloc_netdev_mqs+0x275/0x12b0 [ 841.015187][T31633] ? __pfx_snprintf+0x10/0x10 [ 841.015205][T31633] ? __pfx_macvlan_setup+0x10/0x10 [ 841.015235][T31633] rtnl_create_link+0x321/0xd70 [ 841.015262][T31633] rtnl_newlink_create+0x25f/0xb00 [ 841.015294][T31633] ? __mutex_lock+0x5d4/0x1550 [ 841.015322][T31633] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 841.015349][T31633] ? __pfx___mutex_lock+0x10/0x10 [ 841.015384][T31633] ? ns_capable+0x89/0xe0 [ 841.015411][T31633] rtnl_newlink+0x167f/0x1bd0 [ 841.015453][T31633] ? __pfx_rtnl_newlink+0x10/0x10 [ 841.015476][T31633] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 841.015501][T31633] ? do_syscall_64+0x174/0x580 [ 841.015523][T31633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.015581][T31633] ? kasan_quarantine_put+0xbb/0x1f0 [ 841.015604][T31633] ? lockdep_hardirqs_on+0x7a/0x110 [ 841.015633][T31633] ? nlmon_xmit+0xb0/0x100 [ 841.015655][T31633] ? kmem_cache_free+0x182/0x650 [ 841.015693][T31633] ? __lock_acquire+0x683/0x2cf0 [ 841.015724][T31633] ? __dev_queue_xmit+0x29b/0x37f0 [ 841.015746][T31633] ? __local_bh_enable_ip+0xd0/0x130 [ 841.015768][T31633] ? lockdep_hardirqs_on+0x7a/0x110 [ 841.015791][T31633] ? __dev_queue_xmit+0x29b/0x37f0 [ 841.015807][T31633] ? __local_bh_enable_ip+0xd0/0x130 [ 841.015827][T31633] ? __dev_queue_xmit+0x29b/0x37f0 [ 841.015859][T31633] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 841.015898][T31633] ? __pfx_rtnl_newlink+0x10/0x10 [ 841.015922][T31633] rtnetlink_rcv_msg+0x802/0xc00 [ 841.015951][T31633] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 841.015974][T31633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 841.015997][T31633] ? ref_tracker_free+0x689/0x830 [ 841.016023][T31633] ? __pfx_ref_tracker_free+0x10/0x10 [ 841.016058][T31633] netlink_rcv_skb+0x226/0x4a0 [ 841.016089][T31633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 841.016116][T31633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 841.016158][T31633] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.016185][T31633] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.016219][T31633] netlink_unicast+0x7bb/0x940 [ 841.016256][T31633] netlink_sendmsg+0x813/0xb40 [ 841.016295][T31633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.016325][T31633] ? aa_sock_msg_perm+0xf1/0x1b0 [ 841.016348][T31633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.016373][T31633] sock_sendmsg_nosec+0x13a/0x180 [ 841.016398][T31633] ____sys_sendmsg+0x54e/0x850 [ 841.016432][T31633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.016468][T31633] ? import_iovec+0x73/0xa0 [ 841.016500][T31633] ___sys_sendmsg+0x2a5/0x360 [ 841.016525][T31633] ? __lock_acquire+0x683/0x2cf0 [ 841.016555][T31633] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.016622][T31633] ? __fget_files+0x2a/0x420 [ 841.016645][T31633] ? __fget_files+0x3a2/0x420 [ 841.016680][T31633] __sys_sendmmsg+0x273/0x4d0 [ 841.016711][T31633] ? __pfx___sys_sendmmsg+0x10/0x10 [ 841.016748][T31633] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 841.016790][T31633] ? rcu_is_watching+0x15/0xb0 [ 841.016823][T31633] __x64_sys_sendmmsg+0xa0/0xc0 [ 841.016855][T31633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.016874][T31633] do_syscall_64+0x174/0x580 [ 841.016897][T31633] ? trace_irq_disable+0x3b/0x140 [ 841.016920][T31633] ? clear_bhb_loop+0x40/0x90 [ 841.016945][T31633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.016962][T31633] RIP: 0033:0x7f0b59d9de59 [ 841.016981][T31633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.016997][T31633] RSP: 002b:00007f0b5abbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 841.017016][T31633] RAX: ffffffffffffffda RBX: 00007f0b5a025fa0 RCX: 00007f0b59d9de59 [ 841.017028][T31633] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 841.017040][T31633] RBP: 00007f0b5abbc090 R08: 0000000000000000 R09: 0000000000000000 [ 841.017052][T31633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.017061][T31633] R13: 00007f0b5a026038 R14: 00007f0b5a025fa0 R15: 00007ffc989ad2c8 [ 841.017093][T31633] [ 841.836490][T31649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6586'. [ 841.844611][ T14] wlan0: Trigger new scan to find an IBSS to join [ 841.855509][T31649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6586'. [ 841.968214][T20185] tipc: Left network mode [ 842.318409][T31674] netlink: 'syz.4.6594': attribute type 1 has an invalid length. [ 842.918242][T31687] netlink: 'syz.3.6598': attribute type 2 has an invalid length. [ 842.934006][T31692] batadv_slave_1: entered promiscuous mode [ 843.006499][T31696] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20002 [ 843.157613][T31697] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 843.185121][T31697] bond5 (unregistering): Released all slaves [ 843.269883][T31695] batadv_slave_1: left promiscuous mode [ 843.647098][T31718] syzkaller0: entered promiscuous mode [ 843.656998][T31718] syzkaller0: entered allmulticast mode [ 843.844591][T31724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6608'. [ 844.250829][T31735] team_slave_1: Caught tx_queue_len zero misconfig [ 844.317493][T31735] netlink: 'syz.1.6613': attribute type 8 has an invalid length. [ 844.326244][T31735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6613'. [ 844.335568][T20185] hsr_slave_0: left promiscuous mode [ 844.342676][T20185] hsr_slave_1: left promiscuous mode [ 844.353594][T20185] veth0_to_team: left promiscuous mode [ 844.361514][T20185] veth0_macvtap: left promiscuous mode [ 844.369031][T20185] veth1_vlan: left promiscuous mode [ 844.374970][T20185] veth0_vlan: left promiscuous mode [ 844.479764][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6616'. [ 844.498710][T31744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6614'. [ 844.877973][T20200] wlan0: Trigger new scan to find an IBSS to join [ 844.991781][T31735] bond0: entered promiscuous mode [ 844.997999][T31735] bond_slave_0: entered promiscuous mode [ 845.003886][T31735] bond_slave_1: entered promiscuous mode [ 845.011691][T31735] gretap0: entered promiscuous mode [ 845.018783][T31735] bond0: left promiscuous mode [ 845.023680][T31735] bond_slave_0: left promiscuous mode [ 845.029583][T31735] bond_slave_1: left promiscuous mode [ 845.040092][T31735] gretap0: left promiscuous mode [ 845.118917][T31743] gretap0: entered promiscuous mode [ 845.142179][T20186] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.163444][T20186] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.186772][T20186] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.223306][T31755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'. [ 845.272016][T20186] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.351685][T31763] xt_hashlimit: size too large, truncated to 1048576 [ 845.809780][T31784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6626'. [ 845.809893][T31787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6628'. [ 845.842415][T20185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.866563][T31784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6626'. [ 845.902442][T31784] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6626'. [ 845.924414][T31784] IPVS: Unknown mcast interface: pim6reg [ 846.143323][T31792] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6630'. [ 846.438290][T31813] lo: Caught tx_queue_len zero misconfig [ 847.235077][T31846] syzkaller0: entered promiscuous mode [ 847.240629][T31846] syzkaller0: entered allmulticast mode [ 847.430422][T31860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6642'. [ 847.458836][T31864] netlink: 'syz.4.6648': attribute type 1 has an invalid length. [ 847.737323][T31869] syzkaller0: entered promiscuous mode [ 847.743854][T31869] syzkaller0: entered allmulticast mode [ 848.060939][T31897] netlink: 'syz.4.6657': attribute type 6 has an invalid length. [ 848.074853][T31897] netlink: 'syz.4.6657': attribute type 5 has an invalid length. [ 848.123433][T20186] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.134861][T31897] netlink: 'syz.4.6657': attribute type 6 has an invalid length. [ 848.153161][T20186] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.164389][T31897] netlink: 'syz.4.6657': attribute type 5 has an invalid length. [ 848.176116][T20186] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.196479][T20186] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.762822][T31907] __nla_validate_parse: 8 callbacks suppressed [ 851.762841][T31907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6660'. [ 851.778431][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 851.789946][T31903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6660'. [ 851.972575][T31919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6661'. [ 852.003592][T31919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6661'. [ 852.035818][T31926] netlink: 'syz.3.6663': attribute type 1 has an invalid length. [ 852.100940][T31928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6663'. [ 852.148054][T31931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6664'. [ 852.172613][T31926] bond5: entered promiscuous mode [ 852.196420][T31926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 852.209600][T31928] bond5: entered allmulticast mode [ 852.440098][T31942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6664'. [ 853.172946][T31926] bond5: (slave bridge6): making interface the new active one [ 853.180745][T31926] bridge6: entered promiscuous mode [ 853.186323][T31926] bridge6: entered allmulticast mode [ 853.192695][T31926] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 853.227685][T31943] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 853.428871][T31958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6668'. [ 853.440696][T31957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6669'. [ 853.453924][T31957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6669'. [ 854.029711][T31972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 854.072689][T31986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 854.268254][T32006] netlink: 'syz.2.6681': attribute type 1 has an invalid length. [ 854.288497][T32004] lo: Caught tx_queue_len zero misconfig [ 854.423531][T32006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 854.546476][T32010] bond2: (slave veth3): Enslaving as an active interface with a down link [ 854.569040][T32024] tunl0: Caught tx_queue_len zero misconfig [ 854.603340][T32017] bridge_slave_0: left allmulticast mode [ 854.627625][T32017] bridge_slave_0: left promiscuous mode [ 854.645526][T32017] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.660667][T32017] bridge_slave_1: left allmulticast mode [ 854.667503][T32017] bridge_slave_1: left promiscuous mode [ 854.673339][T32017] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.686691][T32017] bond0: (slave bond_slave_0): Releasing backup interface [ 854.712179][T32017] bond0: (slave bond_slave_1): Releasing backup interface [ 854.757520][T32017] team0: Port device team_slave_0 removed [ 854.779074][T32017] team0: Port device team_slave_1 removed [ 854.790317][T32017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.799632][T32017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.808738][T32017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.816812][T32017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.825792][T32017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 854.927935][T20186] tipc: Subscription rejected, illegal request [ 854.994115][T32034] syzkaller0: entered promiscuous mode [ 855.000144][T32034] syzkaller0: entered allmulticast mode [ 858.689995][T32068] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 858.717945][T32068] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 858.753860][T32068] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 858.837689][T32094] __nla_validate_parse: 9 callbacks suppressed [ 858.837709][T32094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6701'. [ 859.036674][T32105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6709'. [ 859.047188][T32105] tunl0: Caught tx_queue_len zero misconfig [ 859.078865][T32107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6708'. [ 859.141380][T32110] bond0: Caught tx_queue_len zero misconfig [ 859.211014][T32115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6704'. [ 859.292027][T32119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6714'. [ 859.392692][T32128] block nbd6: Unsupported socket: should be TCP or UNIX. [ 859.550324][T32135] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 859.569439][T32135] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 860.454263][T32168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6726'. [ 860.465098][T32168] ip6_vti0: Caught tx_queue_len zero misconfig [ 860.481083][T32168] ip6gre1: entered promiscuous mode [ 860.486885][T32168] ip6gre1: entered allmulticast mode [ 861.657625][T32207] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 862.107793][T32213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6738'. [ 862.190169][T32213] bond2: option ad_actor_sys_prio: invalid value (0) [ 862.210662][T32213] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 862.222856][T32213] bond2 (unregistering): Released all slaves [ 862.628250][T32226] TC_ACT_REPEAT abuse ? [ 863.968053][T32246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6744'. [ 864.051148][T32249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6745'. [ 864.170383][T32251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6746'. [ 864.451464][T32261] netlink: 'syz.1.6749': attribute type 1 has an invalid length. [ 864.534078][T32261] bond2: (slave gretap1): making interface the new active one [ 864.542735][T32261] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 864.876024][T32273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6752'. [ 865.127006][T32283] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 865.141831][T32283] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 865.163680][T32283] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 865.203155][T32283] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 865.332894][T20185] smbdirect: ib_dev[syz2] removed [ 865.786903][T32293] syzkaller0: entered promiscuous mode [ 865.792677][T32293] syzkaller0: entered allmulticast mode [ 865.983726][T32231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.147796][T32297] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6759'. [ 866.174260][T32297] openvswitch: netlink: Flow key attr not present in new flow. [ 866.198292][T32298] "syz.1.6759" (32298) uses obsolete ecb(arc4) skcipher [ 866.258378][T32304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6760'. [ 866.671673][T32319] sctp: [Deprecated]: syz.1.6764 (pid 32319) Use of int in max_burst socket option. [ 866.671673][T32319] Use struct sctp_assoc_value instead [ 866.675888][T32322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6765'. [ 866.752482][T32322] 8021q: adding VLAN 0 to HW filter on device bond6 [ 866.786042][T32322] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 867.569492][T32364] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6775'. [ 867.605549][T32364] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6775'. [ 867.626395][T32371] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6777'. [ 868.439110][T32398] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 868.454366][T32398] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 868.636442][T32411] vxcan2: entered promiscuous mode [ 868.843788][T32415] bond3: entered promiscuous mode [ 868.869842][T22659] IPVS: starting estimator thread 0... [ 868.871322][T32413] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 868.907521][T32415] bond3: entered allmulticast mode [ 868.927327][T32415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 868.943177][T32427] tipc: Started in network mode [ 868.949812][T32427] tipc: Node identity 080211, cluster identity 4711 [ 868.962834][T32427] tipc: Enabled bearer , priority 0 [ 868.974842][T32424] IPVS: using max 34 ests per chain, 81600 per kthread [ 869.081766][T32431] netlink: 'syz.2.6793': attribute type 2 has an invalid length. [ 869.178182][T32421] syzkaller0: mtu less than device minimum [ 869.377085][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.407239][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.438804][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.468445][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.497790][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.534801][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.536620][T32444] netlink: 'syz.4.6796': attribute type 4 has an invalid length. [ 869.568019][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.584861][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.608693][T32444] netlink: 'syz.4.6796': attribute type 4 has an invalid length. [ 869.619149][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.644747][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 869.681748][T32447] batadv_slave_0: Caught tx_queue_len zero misconfig [ 870.400584][T22649] tipc: Node number set to 134353152 [ 871.009305][T32468] syzkaller0: entered promiscuous mode [ 871.026148][T32468] syzkaller0: entered allmulticast mode [ 871.385113][T32484] netlink: 'syz.1.6803': attribute type 3 has an invalid length. [ 871.403168][T32464] syzkaller1: entered promiscuous mode [ 871.424597][T32464] syzkaller1: entered allmulticast mode [ 871.917775][T32487] tipc: Started in network mode [ 871.928392][T32487] tipc: Node identity e0000001, cluster identity 4711 [ 871.945883][T32487] tipc: Enabling of bearer rejected, failed to enable media [ 876.586165][T32528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6815'. [ 876.586163][T32527] __nla_validate_parse: 66 callbacks suppressed [ 876.586183][T32527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6815'. [ 876.622698][T32525] debugfs: 'netdev:nicvf0' already exists in 'phy56' [ 876.745068][T32538] mac80211_hwsim hwsim56 syzkaller1: entered promiscuous mode [ 876.753868][T32538] mac80211_hwsim hwsim56 syzkaller1: entered allmulticast mode [ 876.778304][T32538] syzkaller0: entered promiscuous mode [ 876.784105][T32538] syzkaller0: entered allmulticast mode [ 876.831800][T32538] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.841127][T32538] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.165735][T32562] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6824'. [ 877.250295][T32562] digital: digital_start_poll: Unknown protocol [ 877.386485][T32572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6825'. [ 877.437622][T32577] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6826'. [ 877.723353][T32579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 878.139446][ T5287] netdevsim netdevsim1 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 878.173444][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.396329][T20182] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 878.492032][T32610] bond4: entered promiscuous mode [ 878.497725][T32610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 878.520917][T32609] syzkaller1: entered promiscuous mode [ 878.535358][T32614] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 878.575091][T32609] syzkaller1: entered allmulticast mode [ 878.638817][T32623] netlink: 'syz.4.6837': attribute type 1 has an invalid length. [ 878.746632][T32623] bond2: entered promiscuous mode [ 878.922529][T32634] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6840'. [ 879.590430][T32624] bond0: (slave dummy0): Releasing backup interface [ 879.646777][T32624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 879.747786][T32640] syzkaller1: entered promiscuous mode [ 879.847117][T32640] syzkaller1: entered allmulticast mode [ 879.871217][T32654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6843'. [ 879.908483][T32622] bond2: left promiscuous mode [ 879.924018][T32659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6843'. [ 880.093130][T32648] syzkaller0: entered promiscuous mode [ 880.127684][T32648] syzkaller0: entered allmulticast mode [ 880.130175][T32670] netlink: 'syz.4.6844': attribute type 9 has an invalid length. [ 880.732954][T32675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6845'. [ 884.372864][T32704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6849'. [ 884.457402][T32712] ip6tnl3: entered allmulticast mode [ 884.554241][T32715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6853'. [ 884.617646][T32719] netlink: 'syz.0.6855': attribute type 1 has an invalid length. [ 884.685592][T32719] bond3: entered promiscuous mode [ 884.694292][T32719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 884.710284][T32724] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 884.719943][T32723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6856'. [ 884.738312][T32728] x_tables: duplicate underflow at hook 3 [ 884.817247][T32719] bond3: (slave bridge2): making interface the new active one [ 884.825662][T32719] bridge2: entered promiscuous mode [ 884.831875][T32719] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 885.016135][T32735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.027072][T32736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6859'. [ 885.095158][T20200] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.103638][T20200] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.106611][T32739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6859'. [ 885.145218][ T5717] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.304774][T32742] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6863'. [ 885.564754][ T5717] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.609399][T32756] netlink: 'syz.0.6867': attribute type 1 has an invalid length. [ 885.647739][T32756] bond4: (slave geneve2): making interface the new active one [ 885.658895][T32756] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 885.667874][T20200] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 885.678070][T20200] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 885.687126][T32763] sctp: [Deprecated]: syz.4.6869 (pid 32763) Use of int in maxseg socket option. [ 885.687126][T32763] Use struct sctp_assoc_value instead [ 885.702557][T20200] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 885.711895][T20200] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 886.008950][ T302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6870'. [ 886.154827][T22649] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 886.205569][ T306] syzkaller0: entered promiscuous mode [ 886.211920][ T306] syzkaller0: entered allmulticast mode [ 886.222552][ T306] tc action pedit offset must be on 32 bit boundaries [ 886.424061][ T314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6874'. [ 886.482762][ T317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6877'. [ 886.499097][ T317] netlink: 'syz.3.6877': attribute type 5 has an invalid length. [ 886.521638][ T321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6876'. [ 886.560194][ T317] netlink: 'syz.3.6877': attribute type 8 has an invalid length. [ 886.607285][ T317] geneve2: entered promiscuous mode [ 886.612550][ T317] geneve2: entered allmulticast mode [ 886.638885][T20183] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 46364 - 0 [ 886.656955][T20183] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 46364 - 0 [ 886.677861][T20183] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 46364 - 0 [ 886.689305][ T331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.689812][T20183] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 46364 - 0 [ 887.183505][ T350] netlink: 'syz.4.6888': attribute type 1 has an invalid length. [ 887.212452][ T350] bond3: entered promiscuous mode [ 887.218327][ T350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 887.242440][ T353] syzkaller0: entered promiscuous mode [ 887.254696][ T353] syzkaller0: entered allmulticast mode [ 887.298284][ T350] bond3: (slave bridge3): making interface the new active one [ 887.306225][ T350] bridge3: entered promiscuous mode [ 887.317096][ T350] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 887.517883][ T312] Bluetooth: hci2: command 0x0406 tx timeout [ 887.652301][ T369] vlan3: entered promiscuous mode [ 887.662970][ T369] gretap0: entered promiscuous mode [ 888.201428][ T400] syz_tun: entered allmulticast mode [ 888.290670][ T400] dvmrp8: entered allmulticast mode [ 888.313841][ T393] syz_tun: left allmulticast mode [ 888.394649][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 888.401893][ T405] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 888.457709][ T405] bond5 (unregistering): Released all slaves [ 888.566666][ T409] tipc: Enabled bearer , priority 0 [ 888.574170][ T409] syzkaller0: entered promiscuous mode [ 888.581324][ T409] syzkaller0: entered allmulticast mode [ 888.595985][ T409] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 888.602257][ T413] netlink: 'syz.3.6907': attribute type 1 has an invalid length. [ 888.711492][ T418] netlink: 'syz.2.6908': attribute type 1 has an invalid length. [ 888.711616][ T413] 8021q: adding VLAN 0 to HW filter on device bond7 [ 888.736565][ T414] vlan3: entered promiscuous mode [ 888.741922][ T414] bond7: entered promiscuous mode [ 888.747770][ T414] vlan3: entered allmulticast mode [ 888.752984][ T414] bond7: entered allmulticast mode [ 888.799701][ T418] 8021q: adding VLAN 0 to HW filter on device bond5 [ 888.822327][ T409] tipc: Resetting bearer [ 888.831345][ T421] bond5: entered allmulticast mode [ 888.850968][ T408] tipc: Resetting bearer [ 888.886505][ T408] tipc: Disabling bearer [ 889.020788][ T431] tipc: Enabling not permitted [ 889.044625][ T431] tipc: Enabling of bearer rejected, failed to enable media [ 889.058668][ T431] xt_hashlimit: size too large, truncated to 1048576 [ 889.061016][ T434] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 889.073273][ T434] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 889.089947][ T434] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 889.152003][ T436] bond4 (unregistering): Released all slaves [ 889.336221][ T436] bond4 (unregistering): Released all slaves [ 889.461897][ T436] bond4 (unregistering): Released all slaves [ 889.525537][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 889.548378][ T436] bond4 (unregistering): Released all slaves [ 889.643948][ T436] bond4 (unregistering): Released all slaves [ 889.822662][ T436] bond4 (unregistering): Released all slaves [ 889.850039][ T461] __nla_validate_parse: 14 callbacks suppressed [ 889.850059][ T461] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6919'. [ 889.866564][ T461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6919'. [ 889.875765][ T461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6919'. [ 890.050537][ T469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6921'. [ 890.378165][ T482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 890.446844][ T488] sctp: [Deprecated]: syz.1.6928 (pid 488) Use of int in max_burst socket option. [ 890.446844][ T488] Use struct sctp_assoc_value instead [ 890.491173][T20200] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 890.515173][T20200] bond2: (slave veth3): making interface the new active one [ 890.545803][ T491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6929'. [ 890.563873][T20200] bond2: active interface up! [ 890.612649][ T492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6929'. [ 890.633041][ T482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.109044][ T510] netlink: 'syz.0.6933': attribute type 1 has an invalid length. [ 891.133170][ T510] 8021q: adding VLAN 0 to HW filter on device bond5 [ 891.213989][ T513] syzkaller0: entered promiscuous mode [ 891.220255][ T513] syzkaller0: entered allmulticast mode [ 891.280368][ T515] netlink: 'syz.0.6935': attribute type 1 has an invalid length. [ 891.354112][ T515] bond6: entered promiscuous mode [ 891.363199][ T515] 8021q: adding VLAN 0 to HW filter on device bond6 [ 891.372574][ T519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6936'. [ 891.860116][ T550] wg2: Caught tx_queue_len zero misconfig [ 891.896353][ T556] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6945'. [ 891.962332][ T557] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6944'. [ 892.635158][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 898.234721][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 916.155216][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 917.766949][ T576] netlink: 'syz.2.6948': attribute type 10 has an invalid length. [ 917.775249][ T577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6950'. [ 917.785181][ T575] mac80211_hwsim hwsim56 syzkaller1: left promiscuous mode [ 917.792617][ T576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6948'. [ 917.801863][ T575] mac80211_hwsim hwsim56 syzkaller1: left allmulticast mode [ 917.822786][ T576] batadv0: entered promiscuous mode [ 917.831788][ T576] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 917.840323][ T576] batadv0: left promiscuous mode [ 918.056642][ T588] netlink: 'syz.4.6953': attribute type 1 has an invalid length. [ 918.239750][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 918.363984][ T50] block nbd6: Receive control failed (result -32) [ 918.371079][ T5628] block nbd6: Receive control failed (result -32) [ 918.425044][ T607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 918.432351][ T607] IPv6: NLM_F_CREATE should be set when creating new route [ 918.439659][ T607] IPv6: NLM_F_CREATE should be set when creating new route [ 918.442066][ T612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6960'. [ 918.446959][ T607] IPv6: NLM_F_CREATE should be set when creating new route [ 918.464126][ T612] netlink: 'syz.2.6960': attribute type 25 has an invalid length. [ 918.472795][ T612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6960'. [ 918.499205][ T613] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6958'. [ 918.548050][ T615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6962'. [ 918.664363][ T617] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6961'. [ 918.674582][ T617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6961'. [ 918.731863][ T617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6961'. [ 919.021929][ T640] netlink: 'syz.4.6969': attribute type 1 has an invalid length. [ 919.168829][ T640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6969'. [ 919.214961][ T648] bond5: (slave geneve2): making interface the new active one [ 919.227694][ T648] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 919.552363][ T673] netlink: 'syz.3.6978': attribute type 20 has an invalid length. [ 919.607527][ T676] netlink: 'syz.3.6978': attribute type 20 has an invalid length. [ 919.700336][ T640] 8021q: adding VLAN 0 to HW filter on device bond5 [ 919.724869][T20200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 919.744534][T20200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 920.116360][ T5823] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 920.486786][T11569] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 920.631310][T20200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 920.725903][T20200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 921.119648][ T694] tipc: Enabling of bearer rejected, already enabled [ 921.145031][ T700] netlink: 'syz.2.6984': attribute type 21 has an invalid length. [ 921.162212][ T700] netlink: 'syz.2.6984': attribute type 22 has an invalid length. [ 921.181785][ T700] netlink: 'syz.2.6984': attribute type 23 has an invalid length. [ 921.193531][ T700] netlink: 'syz.2.6984': attribute type 25 has an invalid length. [ 921.498967][ T716] bond6: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 921.546248][ T716] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 921.584930][ T716] bond6: entered allmulticast mode [ 921.968507][ T185] tipc: Resetting bearer [ 922.471777][ T754] syzkaller0: entered promiscuous mode [ 922.484985][ T754] syzkaller0: entered allmulticast mode [ 922.849342][ T763] lo: entered allmulticast mode [ 922.868367][ T763] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20002 [ 923.420810][ T796] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 923.909250][ T826] __nla_validate_parse: 8 callbacks suppressed [ 923.909268][ T826] netlink: 292 bytes leftover after parsing attributes in process `syz.4.7011'. [ 923.958659][ T834] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7013'. [ 923.990451][ T829] bond8: option xmit_hash_policy: invalid value (10) [ 924.006318][ T829] bond8 (unregistering): Released all slaves [ 924.076606][ T844] C: renamed from veth1_to_team [ 924.095088][ T844] validate_nla: 3 callbacks suppressed [ 924.095107][ T844] netlink: 'syz.4.7016': attribute type 1 has an invalid length. [ 924.109698][ T844] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7016'. [ 924.119831][ T844] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 924.137802][ T846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7016'. [ 924.220426][ T844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7016'. [ 924.402124][T20182] tipc: Subscription rejected, illegal request [ 924.682063][ T872] netlink: 'syz.1.7023': attribute type 3 has an invalid length. [ 924.715287][ T867] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7021'. [ 924.752043][ T794] sit0: entered promiscuous mode [ 924.849232][ T794] netlink: 'syz.0.7003': attribute type 1 has an invalid length. [ 924.867328][ T794] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7003'. [ 925.616613][ T912] bond3: entered allmulticast mode [ 925.622304][ T912] 8021q: adding VLAN 0 to HW filter on device bond3 [ 925.847317][ T934] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7041'. [ 926.118928][ T940] netlink: 'syz.4.7043': attribute type 1 has an invalid length. [ 926.134969][ T940] IPv6: NLM_F_CREATE should be specified when creating new route [ 926.178965][ T943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7044'. [ 926.896955][ T981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7054'. [ 926.905607][ T984] netlink: 'syz.3.7056': attribute type 10 has an invalid length. [ 926.937399][ T984] geneve3: entered promiscuous mode [ 926.950558][ T984] geneve3: entered allmulticast mode [ 926.967649][ T1164] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 926.987963][ T1164] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 927.016376][ T1164] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 927.044507][ T1164] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 927.225299][ T998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 927.277476][ T1001] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 927.376703][ T1005] tipc: Enabling of bearer rejected, failed to enable media [ 927.531315][ T1011] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 927.673215][ T1013] netlink: 'syz.1.7064': attribute type 1 has an invalid length. [ 927.906860][ T1025] netlink: 'syz.4.7066': attribute type 1 has an invalid length. [ 928.823576][ T1094] syzkaller1: entered promiscuous mode [ 928.833306][ T1094] syzkaller1: entered allmulticast mode [ 929.125609][ T1108] netlink: 'syz.1.7082': attribute type 1 has an invalid length. [ 929.137465][ T1108] __nla_validate_parse: 6 callbacks suppressed [ 929.137481][ T1108] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7082'. [ 929.565354][ T1130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7089'. [ 929.700283][ T1137] netlink: 292 bytes leftover after parsing attributes in process `syz.2.7093'. [ 929.855667][ T1144] pim6reg1: entered promiscuous mode [ 929.861075][ T1144] pim6reg1: entered allmulticast mode [ 929.967287][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7100'. [ 929.980327][ T1159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7100'. [ 929.995203][ T1159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7100'. [ 930.332329][ T1172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7103'. [ 930.579232][ T1189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 930.641093][ T1190] dvmrp8: left allmulticast mode [ 930.980981][ T1216] geneve4: entered promiscuous mode [ 930.994564][ T1216] geneve4: entered allmulticast mode [ 931.004960][T20185] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20003 - 0 [ 931.020338][T20185] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20003 - 0 [ 931.047037][T20185] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20003 - 0 [ 931.066028][T20185] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20003 - 0 [ 931.121617][ T1218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7113'. [ 931.238682][ T1234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.313986][ T1237] ip6gre0: Caught tx_queue_len zero misconfig [ 931.321073][ T1237] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 931.349134][ T1240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7120'. [ 931.358900][ T1240] block nbd9: Unsupported socket: should be TCP or UNIX. [ 931.428092][ T1244] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004 [ 931.492759][ T1248] tc_dump_action: action bad kind [ 931.498509][ T1249] tc_dump_action: action bad kind [ 931.570155][ T1255] xt_hashlimit: size too large, truncated to 1048576 [ 931.592568][ T1256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7124'. [ 932.072854][ T5628] block nbd8: Receive control failed (result -32) [ 932.143398][ T1276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.229070][ T1272] netlink: 'syz.0.7126': attribute type 6 has an invalid length. [ 932.595576][ T1296] 8021q: adding VLAN 0 to HW filter on device bond7 [ 932.653615][ T1272] macsec1: entered allmulticast mode [ 932.659330][ T1272] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 932.704037][ T1272] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 932.721068][ T1272] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 932.730912][ T1272] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 932.757205][T11569] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 932.774216][ T1296] bond7: (slave batadv1): Opening slave failed [ 932.857763][ T1309] bridge8: entered allmulticast mode [ 933.011423][ T1312] xt_hashlimit: max too large, truncated to 1048576 [ 933.037614][ T1312] xt_hashlimit: overflow, try lower: 2/0 [ 933.170189][ T1322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 933.305856][ T1329] netlink: 'syz.2.7146': attribute type 4 has an invalid length. [ 933.363562][ T1329] netlink: 'syz.2.7146': attribute type 4 has an invalid length. [ 934.302013][ T1378] ipt_REJECT: TCP_RESET invalid for non-tcp [ 934.330959][ T1380] __nla_validate_parse: 10 callbacks suppressed [ 934.330978][ T1380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7155'. [ 934.520206][ T1392] syzkaller0: entered promiscuous mode [ 934.534860][ T1392] syzkaller0: entered allmulticast mode [ 934.829330][ T1407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7162'. [ 934.839360][ T1407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7162'. [ 934.866436][ T1403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7162'. [ 934.916766][ T1407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7162'. [ 934.937518][ T1407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7162'. [ 934.952181][ T1413] netlink: 'syz.4.7165': attribute type 1 has an invalid length. [ 935.021821][ T1413] 8021q: adding VLAN 0 to HW filter on device bond7 [ 935.037110][ T1415] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 935.061266][ T1415] bond7: entered allmulticast mode [ 935.087215][ T1413] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 935.189156][ T1419] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 935.314893][ T1426] netlink: 67 bytes leftover after parsing attributes in process `syz.3.7168'. [ 935.398970][ T1426] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.418030][ T1426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.433771][ T1435] netlink: 'syz.2.7169': attribute type 1 has an invalid length. [ 935.471483][ T1426] wireguard: wg2: Could not create IPv4 socket [ 935.492531][ T1426] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 935.545251][ T1164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.568245][ T1164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.608036][ T1164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.638679][ T1164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.350142][ T1469] netlink: 'syz.2.7179': attribute type 4 has an invalid length. [ 936.367658][ T30] audit: type=1800 audit(1783146313.477:15): pid=1469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7179" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1058 res=0 errno=0 [ 936.797794][ T1485] netlink: 'syz.2.7185': attribute type 2 has an invalid length. [ 936.797794][ T1484] netlink: 'syz.2.7185': attribute type 2 has an invalid length. [ 936.838215][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7186'. [ 936.844836][ T1485] : entered promiscuous mode [ 937.048005][ T1495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7189'. [ 937.059029][ T1495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7189'. [ 937.488613][ T1522] erspan0: entered promiscuous mode [ 937.860003][ T1541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.101565][ T1552] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 938.402068][ T5628] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 938.823473][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 938.830967][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 938.898262][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 938.915732][ T1591] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 938.933432][ T1591] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 938.997120][ T1591] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 939.033392][ T1591] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 939.100180][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.376452][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.400055][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.420690][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.442683][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.462731][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.482987][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.516266][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.539874][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.551977][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.573896][ T1591] syzkaller0 speed is unknown, defaulting to 1000 [ 939.812517][ T1627] syzkaller0: entered promiscuous mode [ 939.824970][ T1627] syzkaller0: entered allmulticast mode [ 940.073816][ T1637] bond8: Unable to set down delay as MII monitoring is disabled [ 940.084133][ T1637] bond8 (unregistering): Released all slaves [ 940.431040][ T1665] netlink: 'syz.2.7231': attribute type 1 has an invalid length. [ 940.466690][ T1598] tipc: Resetting bearer [ 940.532862][ T1665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 940.588479][T22659] syzkaller0 speed is unknown, defaulting to 1000 [ 940.745949][ T1674] bridge3: entered promiscuous mode [ 940.751715][ T1674] bridge3: entered allmulticast mode [ 940.762869][ T1674] team0: Port device bridge3 added [ 940.781441][ T1674] bridge0: port 3(team0) entered blocking state [ 940.789883][ T1674] bridge0: port 3(team0) entered disabled state [ 940.797466][ T1674] team0: entered allmulticast mode [ 940.802849][ T1674] team_slave_0: entered allmulticast mode [ 940.812308][ T1674] team_slave_1: entered allmulticast mode [ 940.820546][ T1674] dummy0: entered allmulticast mode [ 940.835008][ T1674] team0: entered promiscuous mode [ 940.840320][ T1674] team_slave_0: entered promiscuous mode [ 940.846695][ T1674] team_slave_1: entered promiscuous mode [ 940.852674][ T1674] dummy0: entered promiscuous mode [ 940.858786][ T1677] __nla_validate_parse: 4 callbacks suppressed [ 940.858804][ T1677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7234'. [ 940.871728][ T1674] bridge0: port 3(team0) entered blocking state [ 940.880691][ T1674] bridge0: port 3(team0) entered listening state [ 941.090964][ T1662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 941.118501][ T185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.128878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.310205][ T1702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 941.327057][ T1702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 941.351502][ T1709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7243'. [ 941.357817][ T1702] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7241'. [ 941.485537][ T1713] netlink: 'syz.4.7246': attribute type 10 has an invalid length. [ 941.594792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.224024][ T1724] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 942.635064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.845904][ T1767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7259'. [ 942.850429][ T1766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.863109][ T1767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7259'. [ 942.865657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.933117][ T1767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7259'. [ 942.961920][ T1767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7259'. [ 943.038442][ T1751] syzkaller0 speed is unknown, defaulting to 1000 [ 943.170083][ T1780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7263'. [ 943.675031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.802933][ T1802] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 943.890358][ T1802] tipc: Resetting bearer [ 943.907133][ T1806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7270'. [ 943.937787][ T1806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7270'. [ 944.180982][ T1821] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 944.547561][ T1847] netlink: 'syz.3.7284': attribute type 3 has an invalid length. [ 944.555910][ T1847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.714741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.740156][ T1857] tipc: Started in network mode [ 944.747639][ T1857] tipc: Node identity 32d585ad884c, cluster identity 4711 [ 944.755681][ T1857] tipc: Enabled bearer , priority 0 [ 944.811477][ T1857] syzkaller0: entered promiscuous mode [ 944.818352][ T1857] syzkaller0: entered allmulticast mode [ 944.825256][ T1857] tipc: Resetting bearer [ 944.841185][ T1856] tipc: Resetting bearer [ 945.755047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.615390][ T1886] __nla_validate_parse: 3 callbacks suppressed [ 946.615407][ T1886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7296'. [ 946.631242][ T1885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7296'. [ 946.797324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.880874][T20186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.890579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.834775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.360253][ T1856] tipc: Disabling bearer [ 948.875016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.914726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.954704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.362501][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 952.001289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.009479][T20185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.018100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.124321][ T5823] tipc: Node number set to 3130623405 [ 952.132685][ T1884] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 952.139953][ T1884] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 952.147649][ T1884] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 952.360931][ T1909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7303'. [ 952.419746][ T1913] netlink: 'syz.1.7306': attribute type 1 has an invalid length. [ 952.480080][ T1913] bond4: entered promiscuous mode [ 952.512045][ T1913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 952.670472][ T1924] netlink: 'syz.1.7308': attribute type 1 has an invalid length. [ 952.723171][ T1924] bond5: entered promiscuous mode [ 952.750733][ T1924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 952.843892][ T1925] veth3: entered promiscuous mode [ 952.870459][ T1925] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 953.034786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.124622][ T1943] netlink: 'syz.1.7312': attribute type 13 has an invalid length. [ 953.126862][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7313'. [ 953.143752][ T1943] netlink: 'syz.1.7312': attribute type 17 has an invalid length. [ 953.173292][ T1942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7313'. [ 953.193941][ T1944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7312'. [ 953.280043][ T1944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7312'. [ 954.074741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.468636][ T1942] macvlan2: entered allmulticast mode [ 954.474049][ T1942] erspan0: entered allmulticast mode [ 954.496354][ T1943] erspan0: left promiscuous mode [ 954.575129][ T1943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.597663][ T1943] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.608878][ T1943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.691750][ T1943] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 954.725203][ T1935] syzkaller0 speed is unknown, defaulting to 1000 [ 954.829106][ T96] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.844202][ T96] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.857393][ T96] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.875355][ T96] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.099414][ T1960] syzkaller0: entered promiscuous mode [ 955.105491][ T1960] syzkaller0: entered allmulticast mode [ 955.115855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.147696][ T96] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.156854][ T96] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.962313][ T1998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7322'. [ 956.163016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.474648][ C1] bridge0: port 3(team0) entered learning state [ 957.194549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.768373][T20176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.776845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.234785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.607692][ T2011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7325'. [ 958.631193][ T2012] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 959.061716][ T2027] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.7327'. [ 959.073151][ T2027] openvswitch: netlink: Message has 16 unknown bytes. [ 959.106358][ T2027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7327'. [ 959.317615][ T2041] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7331'. [ 959.337090][ T2041] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7331'. [ 959.423410][ T2046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7334'. [ 959.475400][ T2048] netlink: 'syz.1.7335': attribute type 1 has an invalid length. [ 959.599053][ T2060] bond6: (slave geneve2): making interface the new active one [ 959.635862][ T2060] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 959.664211][T20176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 959.674170][ T2046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7334'. [ 959.694866][T20176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 959.719773][ T2046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7334'. [ 959.738342][ T2064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.749410][T20176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.008918][ T2079] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7344'. [ 960.336229][ T2079] gretap0: entered promiscuous mode [ 960.842482][ T2102] syzkaller0 speed is unknown, defaulting to 1000 [ 960.849171][ T2126] netlink: 'syz.3.7352': attribute type 2 has an invalid length. [ 960.864712][ T2126] netlink: 'syz.3.7352': attribute type 1 has an invalid length. [ 960.874910][ T2126] netlink: 'syz.3.7352': attribute type 1 has an invalid length. [ 960.914102][ T2129] 8021q: VLANs not supported on ip_vti0 [ 961.211380][ T2143] netlink: 'syz.1.7357': attribute type 1 has an invalid length. [ 961.230820][ T2143] netlink: 'syz.1.7357': attribute type 2 has an invalid length. [ 961.262028][ T2143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7357'. [ 961.463105][ T2150] IPv6: NLM_F_CREATE should be specified when creating new route [ 961.708975][ T2160] 8021q: adding VLAN 0 to HW filter on device bond8 [ 961.819703][ T2166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.854352][ T2169] netlink: 'syz.3.7366': attribute type 1 has an invalid length. [ 961.961551][ T2173] netlink: 'syz.4.7365': attribute type 10 has an invalid length. [ 962.063682][ T2169] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 962.068752][ T2173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.097481][ T2173] team0: Port device bond0 added [ 962.111427][ T2174] veth0_to_team: entered promiscuous mode [ 962.119683][ T2174] erspan0: entered promiscuous mode [ 962.421684][ T2163] syzkaller0 speed is unknown, defaulting to 1000 [ 962.441877][ T2182] pim6reg1: entered promiscuous mode [ 962.447450][ T2182] pim6reg1: entered allmulticast mode [ 962.768556][ T2194] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 962.803268][ T2194] bond9 (unregistering): Released all slaves [ 962.846989][ T2200] IPVS: length: 15 != 8 [ 962.952175][ T2197] netlink: 'syz.1.7373': attribute type 1 has an invalid length. [ 963.532412][ T2243] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 963.737594][ T2251] xt_connbytes: Forcing CT accounting to be enabled [ 963.905406][ T2261] xt_hashlimit: size too large, truncated to 1048576 [ 963.957603][ T2262] netlink: 'syz.3.7388': attribute type 11 has an invalid length. [ 963.989337][ T2262] __nla_validate_parse: 3 callbacks suppressed [ 963.989358][ T2262] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7388'. [ 964.338692][ T2223] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7372'. [ 964.556177][ T2271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7392'. [ 964.758271][ T2280] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 964.798694][ T2285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7395'. [ 964.920464][ T2281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.937090][ T2281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 964.959540][ T2295] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 964.971250][ T2289] netlink: 'syz.2.7396': attribute type 1 has an invalid length. [ 964.981595][ T2291] x_tables: duplicate underflow at hook 1 [ 964.988899][ T2289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7396'. [ 965.142230][ T2281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.166571][ T2281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 965.230211][ T2309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7400'. [ 965.322211][ T2313] netlink: 'syz.3.7403': attribute type 1 has an invalid length. [ 965.351642][ T2281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.370054][ T2281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 965.387311][ T2316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7403'. [ 965.404849][ T2316] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7403'. [ 965.461358][ T2313] bond9: option mode: invalid value (7) [ 965.469047][ T2313] bond9 (unregistering): Released all slaves [ 965.496711][ T2315] netlink: 'syz.1.7404': attribute type 2 has an invalid length. [ 965.587566][ T2281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.631453][ T2281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 965.681759][ T2322] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7407'. [ 965.805014][ T2329] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 0, id = 0 [ 965.878463][ T1164] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.913466][ T1164] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 966.000804][T20185] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.013012][T20185] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 966.070729][T20200] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.085280][T20200] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 966.099639][ T2332] syzkaller0: entered promiscuous mode [ 966.105581][ T2332] syzkaller0: entered allmulticast mode [ 966.164584][ T1164] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.190936][ T1164] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 966.761697][ T2371] vlan3: entered allmulticast mode [ 966.776043][ T2371] bond0: entered allmulticast mode [ 966.787606][ T2372] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7423'. [ 966.814801][ T2371] bond_slave_0: entered allmulticast mode [ 966.820602][ T2371] bond_slave_1: entered allmulticast mode [ 966.997637][ T2372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.018273][ T2372] bond_slave_0: left allmulticast mode [ 967.047699][ T2372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.070739][ T2372] bond_slave_1: left allmulticast mode [ 967.080808][ T2372] bond0 (unregistering): Released all slaves [ 967.439254][ T2387] tipc: Enabled bearer , priority 0 [ 967.457272][ T30] audit: type=1804 audit(1783146344.567:16): pid=2391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7428" name="/newroot/305/cgroup.controllers" dev="tmpfs" ino=1579 res=1 errno=0 [ 967.480611][ T2387] syzkaller0: entered promiscuous mode [ 967.486354][ T2387] syzkaller0: entered allmulticast mode [ 967.527080][ T30] audit: type=1800 audit(1783146344.587:17): pid=2391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7428" name="cgroup.controllers" dev="tmpfs" ino=1579 res=0 errno=0 [ 967.566180][ T2387] tipc: Resetting bearer [ 967.582122][ T30] audit: type=1804 audit(1783146344.677:18): pid=2391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7428" name="/newroot/305/cgroup.controllers" dev="tmpfs" ino=1579 res=1 errno=0 [ 967.621235][ T2386] tipc: Resetting bearer [ 967.695249][ T2386] tipc: Disabling bearer [ 967.948446][ T2408] tipc: Enabled bearer , priority 0 [ 967.986306][ T2406] tipc: Disabling bearer [ 968.266187][ T2425] netlink: 'syz.4.7438': attribute type 1 has an invalid length. [ 968.343301][ T2425] bond9: entered promiscuous mode [ 968.349429][ T2425] 8021q: adding VLAN 0 to HW filter on device bond9 [ 968.377829][ T2429] vlan3: entered allmulticast mode [ 968.395145][ T2429] bond9: entered allmulticast mode [ 968.437272][ T2425] bond9: (slave bridge5): making interface the new active one [ 968.449314][ T2425] bridge5: entered promiscuous mode [ 968.457512][ T2425] bridge5: entered allmulticast mode [ 968.473574][ T2425] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 968.665549][ T2447] netlink: 'syz.1.7441': attribute type 4 has an invalid length. [ 968.853663][ T2460] veth1_to_bond: entered promiscuous mode [ 968.942532][ T2460] veth1_to_bond (unregistering): left promiscuous mode [ 969.029880][ T2476] netlink: 'syz.4.7446': attribute type 1 has an invalid length. [ 969.041476][ T2423] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 969.381161][ T2503] netlink: 'syz.2.7453': attribute type 1 has an invalid length. [ 969.390286][ T2503] __nla_validate_parse: 5 callbacks suppressed [ 969.390304][ T2503] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7453'. [ 969.546653][ T2520] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7456'. [ 969.558635][ T2520] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7456'. [ 969.909716][ T2535] --map-set only usable from mangle table [ 970.027316][ T2545] netlink: 'syz.1.7462': attribute type 12 has an invalid length. [ 970.281229][ T2573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7466'. [ 970.445061][ T2582] netlink: 'syz.4.7467': attribute type 1 has an invalid length. [ 970.473769][ T2582] netlink: 'syz.4.7467': attribute type 11 has an invalid length. [ 970.501685][ T2582] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7467'. [ 970.562970][ T2582] tipc: Started in network mode [ 970.582402][ T2582] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 970.603685][ T2582] tipc: Enabling of bearer rejected, failed to enable media [ 970.620311][ T2572] tipc: Enabling of bearer rejected, failed to enable media [ 970.669325][ T2582] PKCS7: Unknown OID: [4] (bad) [ 970.702180][ T2582] PKCS7: Only support pkcs7_signedData type [ 971.282502][ T2607] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7472'. [ 971.563358][ T2632] netlink: 'syz.2.7478': attribute type 5 has an invalid length. [ 971.596162][ T2632] netlink: 'syz.2.7478': attribute type 5 has an invalid length. [ 971.609179][ T2632] netlink: 'syz.2.7478': attribute type 5 has an invalid length. [ 971.618905][ T2632] netlink: 'syz.2.7478': attribute type 5 has an invalid length. [ 971.627672][ T2632] netlink: 'syz.2.7478': attribute type 5 has an invalid length. [ 971.668576][ T2642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7480'. [ 971.670745][ T2647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7481'. [ 971.695623][ T2642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7480'. [ 971.717188][ T2646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7480'. [ 971.837733][ C1] bridge0: port 3(team0) entered forwarding state [ 971.844268][ C1] bridge0: topology change detected, propagating [ 972.077782][ T2662] 8021q: adding VLAN 0 to HW filter on device bond10 [ 972.220836][ T2680] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 972.974740][ T2734] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 973.098065][ T2731] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 973.111370][ T2746] tipc: New replicast peer: 255.255.255.255 [ 973.119633][ T2746] tipc: Enabled bearer , priority 10 [ 973.164343][ T2747] syzkaller1: entered promiscuous mode [ 973.176417][ T2747] syzkaller1: entered allmulticast mode [ 973.208930][ T2750] netlink: 'syz.3.7506': attribute type 9 has an invalid length. [ 973.288503][ T2751] "syz.3.7506" (2751) uses obsolete ecb(arc4) skcipher [ 974.007179][ T2805] netlink: 'syz.1.7519': attribute type 3 has an invalid length. [ 974.665639][ T2845] __nla_validate_parse: 10 callbacks suppressed [ 974.665661][ T2845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7529'. [ 974.682437][ T2845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7529'. [ 974.691707][ T2845] netlink: 58 bytes leftover after parsing attributes in process `syz.4.7529'. [ 974.698013][ T2843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7527'. [ 975.246702][ T2883] 8021q: VLANs not supported on ip6tnl0 [ 975.390929][ T2897] netlink: 'syz.2.7540': attribute type 1 has an invalid length. [ 975.528072][ T2897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.549956][ T2898] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20000 [ 975.703300][ T2909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7544'. [ 975.911262][ T2929] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 976.199197][ T2941] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7554'. [ 976.466072][ T2956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7557'. [ 976.584007][ T2959] xfrm0: entered allmulticast mode [ 976.603006][ T2959] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 976.870857][ T2976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7551'. [ 977.135344][ T2988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7567'. [ 977.144458][ T2988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7567'. [ 977.153557][ T2988] netlink: 'syz.4.7567': attribute type 11 has an invalid length. [ 977.156176][ T2990] netlink: 'syz.1.7566': attribute type 1 has an invalid length. [ 977.190560][ T2990] 8021q: adding VLAN 0 to HW filter on device bond7 [ 977.233290][ T2990] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 977.400478][ T3001] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 977.646729][ T3014] netlink: 'syz.2.7575': attribute type 2 has an invalid length. [ 977.655747][ T3014] nbd: must specify at least one socket [ 977.668177][ T3016] vlan0: entered promiscuous mode [ 977.673246][ T3016] bridge0: entered promiscuous mode [ 977.756479][ T3019] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 977.767070][T20183] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 977.778060][T20183] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 977.787566][T20183] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 977.796545][T20183] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 978.186666][ T3045] FAULT_INJECTION: forcing a failure. [ 978.186666][ T3045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.199965][ T3045] CPU: 0 UID: 0 PID: 3045 Comm: syz.2.7585 Not tainted syzkaller #0 PREEMPT(full) [ 978.199991][ T3045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.200003][ T3045] Call Trace: [ 978.200010][ T3045] [ 978.200018][ T3045] dump_stack_lvl+0xe8/0x150 [ 978.200054][ T3045] should_fail_ex+0x40c/0x560 [ 978.200091][ T3045] _copy_from_user+0x2d/0xb0 [ 978.200119][ T3045] ___sys_sendmsg+0x1c6/0x360 [ 978.200150][ T3045] ? __lock_acquire+0x683/0x2cf0 [ 978.200181][ T3045] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.200243][ T3045] ? __fget_files+0x2a/0x420 [ 978.200267][ T3045] ? __fget_files+0x3a2/0x420 [ 978.200301][ T3045] __x64_sys_sendmsg+0x1b1/0x290 [ 978.200331][ T3045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 978.200377][ T3045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.200400][ T3045] do_syscall_64+0x174/0x580 [ 978.200427][ T3045] ? trace_irq_disable+0x3b/0x140 [ 978.200452][ T3045] ? clear_bhb_loop+0x40/0x90 [ 978.200476][ T3045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.200495][ T3045] RIP: 0033:0x7f1317d9de59 [ 978.200514][ T3045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.200531][ T3045] RSP: 002b:00007f1318d01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.200552][ T3045] RAX: ffffffffffffffda RBX: 00007f1318025fa0 RCX: 00007f1317d9de59 [ 978.200567][ T3045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 978.200579][ T3045] RBP: 00007f1318d01090 R08: 0000000000000000 R09: 0000000000000000 [ 978.200591][ T3045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.200602][ T3045] R13: 00007f1318026038 R14: 00007f1318025fa0 R15: 00007ffebe2868a8 [ 978.200634][ T3045] [ 978.973813][ T3083] tipc: Enabled bearer , priority 10 [ 979.814116][ T3130] tipc: Resetting bearer [ 979.838593][ T9] syzkaller0 speed is unknown, defaulting to 1000 [ 979.877027][ T3134] __nla_validate_parse: 15 callbacks suppressed [ 979.877043][ T3134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7609'. [ 980.003819][ T3141] syzkaller0: entered promiscuous mode [ 980.010103][ T3141] syzkaller0: entered allmulticast mode [ 980.030012][ T3141] tipc: Enabled bearer , priority 0 [ 980.116098][ T3138] tipc: Resetting bearer [ 980.217260][ T3138] tipc: Disabling bearer [ 980.444079][ T3161] x_tables: duplicate underflow at hook 1 [ 980.463672][ T3165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7618'. [ 980.487212][ T3164] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 980.626092][ T3174] No such timeout policy "syz0" [ 980.749653][ T3180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7626'. [ 980.791464][ T3180] nbd: nbd3 already in use [ 980.821665][ T3188] IPVS: set_ctl: invalid protocol: 4 172.20.20.61:20000 [ 981.095890][ T3208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7633'. [ 981.191934][ T3210] netlink: 'syz.2.7634': attribute type 2 has an invalid length. [ 981.286031][ T3233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7637'. [ 981.509876][ T3244] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 982.085186][ T3261] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7644'. [ 982.135898][ T3267] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 982.498396][ T3292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7651'. [ 982.665379][ T3294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.676318][ T3294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.700819][ T3294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 983.250318][ T3294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.261403][ T3294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.272088][ T3294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 983.521999][ T3294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.533841][ T3326] netlink: 'syz.1.7660': attribute type 23 has an invalid length. [ 983.535776][ T3294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.552651][ T3294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 983.626113][ T3326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7660'. [ 983.736364][ T3294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.747040][ T3294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.758761][ T3294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 983.777655][ T3328] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7662'. [ 983.807141][ T3328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7662'. [ 984.109276][ T3343] netlink: 'syz.3.7664': attribute type 29 has an invalid length. [ 984.140392][ T3343] netlink: 'syz.3.7664': attribute type 29 has an invalid length. [ 984.148802][ T3343] netlink: 'syz.3.7664': attribute type 29 has an invalid length. [ 984.173510][ T3343] netlink: 'syz.3.7664': attribute type 29 has an invalid length. [ 984.184952][ T3343] netlink: 'syz.3.7664': attribute type 29 has an invalid length. [ 984.243512][ T1164] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.264195][ T1164] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 984.275147][ T1164] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 984.283707][ T3343] netlink: 'syz.3.7664': attribute type 29 has an invalid length. [ 984.297081][ T3343] netlink: 'syz.3.7664': attribute type 29 has an invalid length. [ 984.322241][ T3343] netlink: 'syz.3.7664': attribute type 29 has an invalid length. [ 984.346590][ T1164] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.372228][ T1164] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 984.392612][ T1164] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 984.407037][ T1164] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.415766][ T1164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 984.426655][ T1164] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 984.461381][ T1164] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.473715][ T1164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 984.483563][ T1164] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 985.270861][ T3366] batman_adv: batadv0: Interface deactivated: gretap2 [ 985.591769][ T3379] syzkaller0: entered promiscuous mode [ 985.599465][ T3379] syzkaller0: entered allmulticast mode [ 985.633033][T20183] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.642394][T20183] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 46364 - 0 [ 985.662765][T20183] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 985.680708][T20183] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 20003 - 0 [ 985.711357][ T3400] __nla_validate_parse: 11 callbacks suppressed [ 985.711400][ T3400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7676'. [ 985.713158][T20183] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.738605][ T3400] FAULT_INJECTION: forcing a failure. [ 985.738605][ T3400] name failslab, interval 1, probability 0, space 0, times 0 [ 985.759042][ T3400] CPU: 1 UID: 0 PID: 3400 Comm: syz.2.7676 Not tainted syzkaller #0 PREEMPT(full) [ 985.759069][ T3400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 985.759080][ T3400] Call Trace: [ 985.759089][ T3400] [ 985.759098][ T3400] dump_stack_lvl+0xe8/0x150 [ 985.759135][ T3400] should_fail_ex+0x40c/0x560 [ 985.759165][ T3400] should_failslab+0xa8/0x100 [ 985.759205][ T3400] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 985.759231][ T3400] ? local_lock_release+0x9c/0x160 [ 985.759259][ T3400] ? __alloc_skb+0x1d7/0x7a0 [ 985.759280][ T3400] ? __alloc_skb+0x1d7/0x7a0 [ 985.759311][ T3400] __alloc_skb+0x1d7/0x7a0 [ 985.759339][ T3400] ovs_dp_cmd_set+0x6b/0x3b0 [ 985.759464][ T3400] genl_family_rcv_msg_doit+0x233/0x340 [ 985.759495][ T3400] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 985.759531][ T3400] ? bpf_lsm_capable+0x9/0x20 [ 985.759570][ T3400] ? security_capable+0x7e/0x2c0 [ 985.759643][ T3400] genl_rcv_msg+0x614/0x7a0 [ 985.759672][ T3400] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.759692][ T3400] ? __pfx_ovs_dp_cmd_set+0x10/0x10 [ 985.759714][ T3400] ? __pfx_ref_tracker_free+0x10/0x10 [ 985.759745][ T3400] netlink_rcv_skb+0x226/0x4a0 [ 985.759781][ T3400] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.759802][ T3400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 985.759841][ T3400] ? down_read+0x2be/0x330 [ 985.759870][ T3400] genl_rcv+0x28/0x40 [ 985.759888][ T3400] netlink_unicast+0x7bb/0x940 [ 985.759923][ T3400] netlink_sendmsg+0x813/0xb40 [ 985.759958][ T3400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.759989][ T3400] ? aa_sock_msg_perm+0xf1/0x1b0 [ 985.760014][ T3400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.760040][ T3400] sock_sendmsg_nosec+0x13a/0x180 [ 985.760065][ T3400] ____sys_sendmsg+0x54e/0x850 [ 985.760099][ T3400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 985.760135][ T3400] ? import_iovec+0x73/0xa0 [ 985.760166][ T3400] ___sys_sendmsg+0x2a5/0x360 [ 985.760191][ T3400] ? __lock_acquire+0x683/0x2cf0 [ 985.760220][ T3400] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.760281][ T3400] ? __fget_files+0x2a/0x420 [ 985.760305][ T3400] ? __fget_files+0x3a2/0x420 [ 985.760340][ T3400] __x64_sys_sendmsg+0x1b1/0x290 [ 985.760371][ T3400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 985.760417][ T3400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.760440][ T3400] do_syscall_64+0x174/0x580 [ 985.760463][ T3400] ? trace_irq_disable+0x3b/0x140 [ 985.760487][ T3400] ? clear_bhb_loop+0x40/0x90 [ 985.760512][ T3400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.760531][ T3400] RIP: 0033:0x7f1317d9de59 [ 985.760550][ T3400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.760566][ T3400] RSP: 002b:00007f1318d01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.760586][ T3400] RAX: ffffffffffffffda RBX: 00007f1318025fa0 RCX: 00007f1317d9de59 [ 985.760600][ T3400] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 985.760612][ T3400] RBP: 00007f1318d01090 R08: 0000000000000000 R09: 0000000000000000 [ 985.760624][ T3400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.760636][ T3400] R13: 00007f1318026038 R14: 00007f1318025fa0 R15: 00007ffebe2868a8 [ 985.760668][ T3400] [ 985.772738][T20183] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 46364 - 0 [ 986.100819][T20183] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 986.109318][T20183] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 20003 - 0 [ 986.129839][T20183] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.146895][T20183] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 46364 - 0 [ 986.156516][T20183] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 986.165875][T20183] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 20003 - 0 [ 986.176923][T20183] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.186366][T20183] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 46364 - 0 [ 986.194987][T20183] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 986.203498][T20183] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 20003 - 0 [ 986.241256][ T3401] block nbd10: server does not support multiple connections per device. [ 986.250283][ T3401] block nbd10: shutting down sockets [ 986.410865][ T3421] validate_nla: 1 callbacks suppressed [ 986.410884][ T3421] netlink: 'syz.2.7682': attribute type 12 has an invalid length. [ 986.434238][ T3421] netlink: 'syz.2.7682': attribute type 29 has an invalid length. [ 986.446406][ T3421] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7682'. [ 986.497053][ T3424] team0: Port device bond0 removed [ 986.511773][ T3424] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 986.566554][ T3431] netlink: 'syz.2.7686': attribute type 1 has an invalid length. [ 986.599303][ T3431] bond10: entered promiscuous mode [ 986.605485][ T3431] 8021q: adding VLAN 0 to HW filter on device bond10 [ 986.623231][ T3431] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 986.637333][ T3431] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 986.648366][ T3431] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 986.673819][ T3434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7687'. [ 986.685044][ T3435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7686'. [ 986.806784][ T3438] syzkaller1: entered promiscuous mode [ 986.822525][ T3438] syzkaller1: entered allmulticast mode [ 987.067604][ T3455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7692'. [ 987.979211][ T3485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7699'. [ 988.098381][ T3490] netlink: 'syz.2.7701': attribute type 11 has an invalid length. [ 988.111205][ T3490] netlink: 'syz.2.7701': attribute type 4 has an invalid length. [ 988.132690][ T3490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7701'. [ 988.171940][ T3494] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 988.308673][ T30] audit: type=1800 audit(1783146365.417:19): pid=3500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7705" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2004 res=0 errno=0 [ 988.403702][ T3498] netlink: 'syz.4.7704': attribute type 1 has an invalid length. [ 988.418511][ T3498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 988.747570][ T3518] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 989.005080][ T3535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7715'. [ 989.065669][ T3537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7716'. [ 989.152584][ T3539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7717'. [ 990.318418][ T5628] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 990.445458][ T3590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 990.676240][ T3595] can: request_module (can-proto-3) failed. [ 990.700893][ T3600] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 990.864878][ T3607] __nla_validate_parse: 5 callbacks suppressed [ 990.864898][ T3607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7738'. [ 990.992353][ T3612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7739'. [ 991.073078][ T3614] nbd: nbd2 already in use [ 991.299575][ T3620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 991.750687][ T3641] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7746'. [ 991.885694][ T3639] syzkaller0: entered promiscuous mode [ 991.904842][ T3639] syzkaller0: entered allmulticast mode [ 997.209598][ T3631] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 997.258760][ T3631] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 997.283598][ T3631] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 997.320430][ T3678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7756'. [ 997.358757][ T3678] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 997.572686][ T3688] macsec1: entered promiscuous mode [ 997.588874][ T3688] bridge0: entered promiscuous mode [ 997.601260][ T3667] syzkaller0 speed is unknown, defaulting to 1000 [ 997.885107][ T3706] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7761'. [ 997.927067][ T3709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7763'. [ 998.113344][ T3717] IPv6: Can't replace route, no match found [ 998.142597][ T3717] IPv6: Can't replace route, no match found [ 999.317742][ T3752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7768'. [ 999.509130][ T3759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7774'. [ 999.659775][ T3768] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7776'. [ 999.880217][ T3779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7779'. [ 999.907266][ T3779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1000.065888][ T3785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7781'. [ 1000.223855][ T3789] netlink: 'syz.4.7784': attribute type 1 has an invalid length. [ 1000.282071][ T3792] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7785'. [ 1000.298603][ T3789] bond11: entered promiscuous mode [ 1000.305618][ T3789] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1000.382843][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7784'. [ 1000.574097][ T3802] syzkaller0: entered promiscuous mode [ 1000.582157][ T3802] syzkaller0: entered allmulticast mode [ 1000.617218][ T3811] netlink: 'syz.2.7791': attribute type 1 has an invalid length. [ 1005.600237][ T3808] netlink: 'syz.3.7789': attribute type 12 has an invalid length. [ 1005.614185][ T3811] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1005.623010][ T3814] pimreg: entered allmulticast mode [ 1005.639568][ T3816] __nla_validate_parse: 2 callbacks suppressed [ 1005.639586][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7789'. [ 1005.674069][ T3819] macsec0: entered promiscuous mode [ 1005.863512][ T3839] xt_CT: No such helper "syz0" [ 1005.953172][ T3850] netlink: 'syz.1.7799': attribute type 3 has an invalid length. [ 1005.975276][ T3850] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7799'. [ 1006.115323][ T3857] bond8: Unable to set down delay as MII monitoring is disabled [ 1006.133895][ T3857] bond8 (unregistering): Released all slaves [ 1006.233802][ T3869] netlink: 'syz.4.7804': attribute type 4 has an invalid length. [ 1006.292518][ T3868] netlink: 'syz.4.7804': attribute type 4 has an invalid length. [ 1006.457585][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7805'. [ 1006.482910][ T3877] x_tables: unsorted underflow at hook 2 [ 1007.440692][ T3905] ip6erspan1: entered allmulticast mode [ 1007.480352][ T3908] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7815'. [ 1007.492249][ T3908] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7815'. [ 1007.699410][ T3923] netlink: 'syz.2.7819': attribute type 7 has an invalid length. [ 1007.707592][ T3923] netlink: 'syz.2.7819': attribute type 8 has an invalid length. [ 1007.741088][ T3927] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7821'. [ 1007.775486][ T3926] syzkaller0: entered promiscuous mode [ 1007.794903][ T3926] syzkaller0: entered allmulticast mode [ 1007.923788][ T3936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7807'. [ 1008.039877][ T3941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7825'. [ 1008.137075][ T3946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1008.156715][ T3946] netlink: 'syz.2.7826': attribute type 5 has an invalid length. [ 1008.172245][ T3946] netlink: 'syz.2.7826': attribute type 4 has an invalid length. [ 1008.180532][ T3946] netlink: 'syz.2.7826': attribute type 8 has an invalid length. [ 1008.188877][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1008.209691][ T3946] geneve4: entered promiscuous mode [ 1008.215348][ T3946] geneve4: entered allmulticast mode [ 1008.223455][T20182] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 45178 - 0 [ 1008.233443][T20182] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 45178 - 0 [ 1008.243869][T20182] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 45178 - 0 [ 1008.288363][T20182] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 45178 - 0 [ 1008.440463][ T3960] tipc: Enabled bearer , priority 30 [ 1008.479694][ T3961] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 1008.495362][ T3961] syzkaller1: ignored: set checksum disabled [ 1008.998639][ T3986] netlink: 'syz.3.7837': attribute type 1 has an invalid length. [ 1010.078091][ T4034] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1010.331097][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.383156][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.419434][ T4036] bridge_slave_1: left promiscuous mode [ 1010.470975][ T4036] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1010.489247][ T4040] ªªªªª!: renamed from virt_wifi0 [ 1010.581814][ T4045] bond0 (unregistering): Released all slaves [ 1010.682600][ T4046] __nla_validate_parse: 6 callbacks suppressed [ 1010.682634][ T4046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7849'. [ 1010.774876][ T4046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1010.950059][ T4062] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7855'. [ 1011.039001][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7856'. [ 1011.220089][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7857'. [ 1011.264123][ T4071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7857'. [ 1011.603587][ T4088] xt_hashlimit: size too large, truncated to 1048576 [ 1011.961645][ T4100] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1013.028249][ T4151] validate_nla: 1 callbacks suppressed [ 1013.028296][ T4151] netlink: 'syz.1.7876': attribute type 13 has an invalid length. [ 1013.254275][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7876'. [ 1013.438311][ T4157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1013.481237][ T4161] Cannot find del_set index 4 as target [ 1013.514970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.525647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.844041][ T4174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7880'. [ 1014.211750][ T4165] erspan0: entered promiscuous mode [ 1014.267260][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.276683][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.292618][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.334213][ T4165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1014.345211][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1014.360315][ T4165] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1014.488946][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1014.499226][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1014.586570][T20185] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1014.615204][T20185] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1014.628738][T20185] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1014.696571][ T4192] tun0: tun_chr_ioctl cmd 1074812117 [ 1014.854295][ T4207] netlink: 'syz.3.7884': attribute type 5 has an invalid length. [ 1015.494900][ T4225] nbd4: detected capacity change from 0 to 63 [ 1015.675834][ T5628] block nbd4: Receive control failed (result -104) [ 1015.883560][ T4248] __nla_validate_parse: 3 callbacks suppressed [ 1015.883580][ T4248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7897'. [ 1015.900409][ T4249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1015.977516][ T4229] syzkaller0 speed is unknown, defaulting to 1000 [ 1016.634121][ T4273] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7903'. [ 1016.892385][ T4268] syzkaller0 speed is unknown, defaulting to 1000 [ 1017.239086][ T4284] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7907'. [ 1018.087169][ T4296] netlink: 'syz.3.7909': attribute type 1 has an invalid length. [ 1018.165939][ T4296] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1018.178872][ T4298] bond9: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1018.189208][ T4298] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1018.399037][ T4306] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7914'. [ 1018.546366][ T4313] netlink: 'syz.4.7916': attribute type 1 has an invalid length. [ 1018.614960][ T4311] openvswitch: netlink: Key type 309 is out of range max 32 [ 1018.650974][ T4313] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1018.673679][ T4317] vlan4: entered allmulticast mode [ 1018.679766][ T4317] bond13: entered allmulticast mode [ 1018.725789][ T4320] bond13: (slave geneve3): making interface the new active one [ 1018.734326][ T4320] geneve3: entered allmulticast mode [ 1018.795514][ T4320] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 1018.808170][T20185] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1018.818127][T20185] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1018.833925][ T4326] syzkaller0: refused to change device tx_queue_len [ 1018.841157][T20185] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1018.851284][T20185] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1019.114690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.123190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.492748][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7927'. [ 1019.542160][ T4360] tipc: Enabling not permitted [ 1019.567007][ T4360] tipc: Enabling of bearer rejected, failed to enable media [ 1019.682736][ T4366] xt_hashlimit: size too large, truncated to 1048576 [ 1019.717389][ T4372] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1019.816566][ T4372] lo: entered allmulticast mode [ 1019.848387][ T4372] lo: left allmulticast mode [ 1019.945217][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7932'. [ 1019.984281][ T4378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.428551][ T4386] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1020.443298][ T4370] syzkaller0 speed is unknown, defaulting to 1000 [ 1020.827505][ T4397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7937'. [ 1021.117647][ T4409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1021.576652][ T4426] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1021.622050][ T30] audit: type=1800 audit(1783146398.727:20): pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7946" name="memory.events" dev="tmpfs" ino=2321 res=0 errno=0 [ 1021.939266][ T4447] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1022.464655][ T4449] erspan0: left allmulticast mode [ 1022.588276][ T4459] mac80211_hwsim hwsim56 syzkaller1: entered promiscuous mode [ 1022.604521][ T4459] mac80211_hwsim hwsim56 syzkaller1: entered allmulticast mode [ 1022.653663][ T96] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.681823][ T96] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1022.699472][ T96] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1022.719521][ T96] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.740462][ T96] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1022.756427][ T96] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1022.806777][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7955'. [ 1022.829987][ T96] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.847207][ T4470] netlink: 'syz.3.7955': attribute type 7 has an invalid length. [ 1022.865512][ T96] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1022.887554][ T4470] netlink: 'syz.3.7955': attribute type 8 has an invalid length. [ 1022.903258][ T96] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1022.923357][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7955'. [ 1022.952803][ T96] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.990660][ T96] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1023.018284][ T96] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1023.067051][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7957'. [ 1023.078824][ T4470] dummy0: entered promiscuous mode [ 1023.093033][ T4470] team0: entered promiscuous mode [ 1023.108838][ T4470] erspan0: entered promiscuous mode [ 1023.119945][ T4470] debugfs: 'hsr0' already exists in 'hsr' [ 1023.127893][ T4470] Cannot create hsr debugfs directory [ 1023.134207][ T4470] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 1023.333092][ T4483] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1023.382022][ T4356] syzkaller0 speed is unknown, defaulting to 1000 [ 1023.478071][ T4497] ip6tnl2: entered allmulticast mode [ 1023.521075][T22658] [ 1023.523453][T22658] ====================================================== [ 1023.530515][T22658] WARNING: possible circular locking dependency detected [ 1023.537607][T22658] syzkaller #0 Not tainted [ 1023.542032][T22658] ------------------------------------------------------ [ 1023.549124][T22658] kworker/0:15/22658 is trying to acquire lock: [ 1023.555367][T22658] ffff888029be4158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1023.565402][T22658] [ 1023.565402][T22658] but task is already holding lock: [ 1023.573377][T22658] ffff88803cbcd070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1023.582497][T22658] [ 1023.582497][T22658] which lock already depends on the new lock. [ 1023.582497][T22658] [ 1023.592891][T22658] [ 1023.592891][T22658] the existing dependency chain (in reverse order) is: [ 1023.601894][T22658] [ 1023.601894][T22658] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 1023.609753][T22658] _raw_spin_lock_bh+0x36/0x50 [ 1023.615036][T22658] hsr_dev_xmit+0x237/0x360 [ 1023.620051][T22658] dev_hard_start_xmit+0x2cd/0x830 [ 1023.625680][T22658] __dev_queue_xmit+0x1435/0x37f0 [ 1023.631215][T22658] NF_HOOK+0x33a/0x3c0 [ 1023.635902][T22658] arp_xmit+0x16c/0x270 [ 1023.640571][T22658] arp_solicit+0xbdc/0xe40 [ 1023.645498][T22658] __neigh_event_send+0xf0c/0x1510 [ 1023.651124][T22658] neigh_resolve_output+0x1a1/0x720 [ 1023.656832][T22658] ip_finish_output2+0xc4b/0x10b0 [ 1023.662457][T22658] ip_output+0x29f/0x450 [ 1023.667212][T22658] iptunnel_xmit+0x626/0xd10 [ 1023.672374][T22658] ip_tunnel_xmit+0x195b/0x2040 [ 1023.677781][T22658] __gre_xmit+0x19e/0x240 [ 1023.682694][T22658] erspan_xmit+0xad5/0x1590 [ 1023.687714][T22658] dev_hard_start_xmit+0x2cd/0x830 [ 1023.693341][T22658] sch_direct_xmit+0x257/0x4c0 [ 1023.698617][T22658] __dev_queue_xmit+0x1754/0x37f0 [ 1023.704160][T22658] alb_send_lp_vid+0x348/0x550 [ 1023.709500][T22658] alb_send_learning_packets+0x12c/0x300 [ 1023.715644][T22658] bond_alb_monitor+0x3d0/0x17c0 [ 1023.721098][T22658] process_scheduled_works+0xa8e/0x14e0 [ 1023.727160][T22658] worker_thread+0xa47/0xfb0 [ 1023.732261][T22658] kthread+0x388/0x470 [ 1023.736844][T22658] ret_from_fork+0x514/0xb70 [ 1023.741957][T22658] ret_from_fork_asm+0x1a/0x30 [ 1023.747227][T22658] [ 1023.747227][T22658] -> #0 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 1023.755476][T22658] __lock_acquire+0x1520/0x2cf0 [ 1023.760843][T22658] lock_acquire+0x106/0x350 [ 1023.765914][T22658] _raw_spin_lock+0x2e/0x40 [ 1023.770957][T22658] sch_direct_xmit+0x15f/0x4c0 [ 1023.776234][T22658] __dev_queue_xmit+0x1754/0x37f0 [ 1023.781919][T22658] hsr_forward_skb+0x152a/0x28c0 [ 1023.787927][T22658] hsr_dev_xmit+0x242/0x360 [ 1023.792948][T22658] dev_hard_start_xmit+0x2cd/0x830 [ 1023.798581][T22658] __dev_queue_xmit+0x1435/0x37f0 [ 1023.804116][T22658] ip6_output+0x337/0x540 [ 1023.809108][T22658] NF_HOOK+0x177/0x4f0 [ 1023.813723][T22658] mld_sendpack+0x890/0xe10 [ 1023.818738][T22658] mld_ifc_work+0x839/0xe70 [ 1023.823748][T22658] process_scheduled_works+0xa8e/0x14e0 [ 1023.829824][T22658] worker_thread+0xa47/0xfb0 [ 1023.834928][T22658] kthread+0x388/0x470 [ 1023.839517][T22658] ret_from_fork+0x514/0xb70 [ 1023.844618][T22658] ret_from_fork_asm+0x1a/0x30 [ 1023.849891][T22658] [ 1023.849891][T22658] other info that might help us debug this: [ 1023.849891][T22658] [ 1023.860105][T22658] Possible unsafe locking scenario: [ 1023.860105][T22658] [ 1023.867562][T22658] CPU0 CPU1 [ 1023.872974][T22658] ---- ---- [ 1023.878322][T22658] lock(&hsr->seqnr_lock); [ 1023.882822][T22658] lock(&qdisc_xmit_lock_key#4); [ 1023.890360][T22658] lock(&hsr->seqnr_lock); [ 1023.897376][T22658] lock(&qdisc_xmit_lock_key#4); [ 1023.902415][T22658] [ 1023.902415][T22658] *** DEADLOCK *** [ 1023.902415][T22658] [ 1023.910542][T22658] 11 locks held by kworker/0:15/22658: [ 1023.915989][T22658] #0: ffff888032966d40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1023.926747][T22658] #1: ffffc900026afc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1023.939875][T22658] #2: ffff8880673e7530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 1023.949092][T22658] #3: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x206/0xe10 [ 1023.958305][T22658] #4: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 1023.967342][T22658] #5: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 1023.977428][T22658] #6: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1023.986557][T22658] #7: ffff88803cbcd070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1023.996038][T22658] #8: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x28c0 [ 1024.005520][T22658] #9: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 1024.015436][T22658] #10: ffff88802c43d228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 1024.028151][T22658] [ 1024.028151][T22658] stack backtrace: [ 1024.034030][T22658] CPU: 0 UID: 0 PID: 22658 Comm: kworker/0:15 Not tainted syzkaller #0 PREEMPT(full) [ 1024.034048][T22658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1024.034060][T22658] Workqueue: mld mld_ifc_work [ 1024.034081][T22658] Call Trace: [ 1024.034089][T22658] [ 1024.034097][T22658] dump_stack_lvl+0xe8/0x150 [ 1024.034121][T22658] print_circular_bug+0x2e1/0x300 [ 1024.034137][T22658] check_noncircular+0x12e/0x150 [ 1024.034162][T22658] __lock_acquire+0x1520/0x2cf0 [ 1024.034190][T22658] ? sch_direct_xmit+0x15f/0x4c0 [ 1024.034208][T22658] lock_acquire+0x106/0x350 [ 1024.034226][T22658] ? sch_direct_xmit+0x15f/0x4c0 [ 1024.034249][T22658] _raw_spin_lock+0x2e/0x40 [ 1024.034265][T22658] ? sch_direct_xmit+0x15f/0x4c0 [ 1024.034282][T22658] sch_direct_xmit+0x15f/0x4c0 [ 1024.034302][T22658] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1024.034320][T22658] ? kasan_save_track+0x10/0x80 [ 1024.034342][T22658] __dev_queue_xmit+0x1754/0x37f0 [ 1024.034357][T22658] ? kthread+0x388/0x470 [ 1024.034377][T22658] ? ret_from_fork+0x514/0xb70 [ 1024.034410][T22658] ? __dev_queue_xmit+0x29b/0x37f0 [ 1024.034427][T22658] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1024.034444][T22658] ? __copy_skb_header+0xa3/0x4a0 [ 1024.034469][T22658] ? hsr_addr_subst_dest+0x30a/0xaa0 [ 1024.034562][T22658] ? skb_clone+0x246/0x3a0 [ 1024.034581][T22658] ? hsr_get_untagged_frame+0x48/0x730 [ 1024.034599][T22658] hsr_forward_skb+0x152a/0x28c0 [ 1024.034619][T22658] ? hsr_forward_skb+0xb3/0x28c0 [ 1024.034637][T22658] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1024.034653][T22658] ? do_raw_spin_lock+0x12b/0x2f0 [ 1024.034669][T22658] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1024.034687][T22658] ? hsr_dev_xmit+0x237/0x360 [ 1024.034702][T22658] hsr_dev_xmit+0x242/0x360 [ 1024.034715][T22658] ? hsr_dev_xmit+0x2d/0x360 [ 1024.034729][T22658] dev_hard_start_xmit+0x2cd/0x830 [ 1024.034761][T22658] __dev_queue_xmit+0x1435/0x37f0 [ 1024.034779][T22658] ? __dev_queue_xmit+0x29b/0x37f0 [ 1024.034792][T22658] ? ___neigh_create+0x1cd2/0x22b0 [ 1024.034812][T22658] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1024.034826][T22658] ? neigh_connected_output+0x1e7/0x470 [ 1024.034845][T22658] ? eth_header+0x11b/0x200 [ 1024.034859][T22658] ? __asan_memcpy+0x40/0x70 [ 1024.034883][T22658] ? ip6_output+0x11e/0x540 [ 1024.034899][T22658] ip6_output+0x337/0x540 [ 1024.034914][T22658] ? __pfx_ip6_output+0x10/0x10 [ 1024.034929][T22658] NF_HOOK+0x177/0x4f0 [ 1024.034945][T22658] ? __pfx_NF_HOOK+0x10/0x10 [ 1024.034959][T22658] ? icmp6_dst_alloc+0x39b/0x430 [ 1024.035007][T22658] ? __pfx_dst_output+0x10/0x10 [ 1024.035021][T22658] ? __local_bh_enable_ip+0xd0/0x130 [ 1024.035039][T22658] ? icmp6_dst_alloc+0x39b/0x430 [ 1024.035054][T22658] ? icmp6_dst_alloc+0x39b/0x430 [ 1024.035070][T22658] mld_sendpack+0x890/0xe10 [ 1024.035091][T22658] ? mld_sendpack+0x206/0xe10 [ 1024.035105][T22658] ? __pfx_mld_sendpack+0x10/0x10 [ 1024.035127][T22658] mld_ifc_work+0x839/0xe70 [ 1024.035142][T22658] ? rcu_is_watching+0x15/0xb0 [ 1024.035165][T22658] ? process_scheduled_works+0xa20/0x14e0 [ 1024.035181][T22658] process_scheduled_works+0xa8e/0x14e0 [ 1024.035207][T22658] ? __pfx_process_scheduled_works+0x10/0x10 [ 1024.035225][T22658] ? assign_work+0x3cf/0x5d0 [ 1024.035242][T22658] worker_thread+0xa47/0xfb0 [ 1024.035268][T22658] kthread+0x388/0x470 [ 1024.035287][T22658] ? __pfx_worker_thread+0x10/0x10 [ 1024.035303][T22658] ? __pfx_kthread+0x10/0x10 [ 1024.035322][T22658] ret_from_fork+0x514/0xb70 [ 1024.035362][T22658] ? __pfx_ret_from_fork+0x10/0x10 [ 1024.035399][T22658] ? __switch_to+0xc89/0x1420 [ 1024.035417][T22658] ? __pfx_kthread+0x10/0x10 [ 1024.035437][T22658] ret_from_fork_asm+0x1a/0x30 [ 1024.035457][T22658] [ 1024.431094][T20183] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.438863][T20183] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.454508][ T4181] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.784831][ T4179] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.944580][ T4179] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1028.795392][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!