last executing test programs: 1m44.871504374s ago: executing program 0 (id=7333): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) 1m44.689583065s ago: executing program 0 (id=7335): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0xa, @void}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000314040027bd7000fedbdf250900020073797a3100000000080041007278650014003300000000000000000000000000000000000900020073797a30000000000800410014003300726f7365300000000000000000000000ce94f40324c104c2befe02ff40132fb189af53b589eb3eb62f"], 0x60}, 0x1, 0x0, 0x0, 0x97c10b1095f1e75b}, 0x81) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000d3e752b99a008bdf47d1fbd34aff81ea36d77108aa720f835672f39b794b1131c75c595897d2dfe578efb1f2bbb4865af16f184edb54e70e05fd47ab5a3ae55ae69b6a15b72aba2f796e3910976080a7495c75074b238010778e2243060b29bec78f9a69d6ed0f99463a19cfb22cafd4c12e5b16a130", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0004000000060016000b0000000500120001000000060011008000000008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'macvtap0\x00', &(0x7f0000000700)=@ethtool_link_settings={0x4c, 0x4, 0x5, 0x3, 0x80, 0x9, 0x1, 0xff, 0x4, 0x4, [0xf55e, 0x61, 0x6, 0x6, 0x1, 0xfff, 0x4, 0x9]}}) 1m44.513368935s ago: executing program 0 (id=7337): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x8) 1m44.410166625s ago: executing program 0 (id=7338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="019c2c00000000000000540000000800030000000000"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000009d430000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000002320000004a000000fc010000000000000000000000000000000000000400"/182], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e695"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080), 0x5ee58f7459da15a6) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x4194, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}], 0x18}}], 0x1, 0xc040) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES8=r7], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket(0xa, 0x3, 0x3a) getsockopt$inet_opts(r9, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x3, 0x1, 0x101, 0x0, 0x0, {0x9, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xcb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x504}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendto$packet(r6, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000a7", @ANYRES16=r2, @ANYBLOB="e9932cbd7000fedbdf25060000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x20000100}, 0x4000000) close(r0) 1m43.860672906s ago: executing program 0 (id=7340): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/1, 0x1}, 0x40}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m42.841719093s ago: executing program 4 (id=7349): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000580)={0x2, @long={0x3, 0xffff, {0xc3f162150e0db309}}}, 0x14) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0xfe, 0xe1, 0x2, 0x9, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x11}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000006100)=[{&(0x7f00000002c0)="000300000001000000009d", 0xb}], 0x1}, 0x24000008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0xffffffffffffffbb, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x11f}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1m42.120333809s ago: executing program 1 (id=7351): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000004}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_cipso(0xfffffffffffffffe, 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2"], 0xfc}}, 0x4080894) 1m41.971775888s ago: executing program 1 (id=7352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="185b00000a00000000d800065f00000018400000020000000000000000faff008520000006000000850000009200000018400000060000000000000000000000d7000200ffffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r7, r8, 0x0, 0xffffffff000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r10, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) 1m41.693267589s ago: executing program 4 (id=7353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000140)) r5 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x24008800}, 0x40040c4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000880)={0x2d8, 0x3c, 0x10, 0x70bd29, 0x25dfdbfb, "", [@generic="77c7135f542db8ac9619e00dc7ec2f9a9495b64a006b683e", @generic="2c9ad8d3cab76ada7801a3e9ca4b9d5e6985ff4f30d0e9d4e5d5d49aca4ae813fa33be7d640da728418afae3a99644831f20dae7508e2f55514a7c92f7f16d83efe107f17c0a7253fe436a71a24bac62da80101786a12ca06e948f055b22e2ee86b020f864cded2475977c5505f7ced6d9aefb11a150", @generic="6463da46c3a2126b0d23ba981f99148385318bb80786170ce071456b01a276f2515d8365792038a414d5d4f4de79f57a61cd4116c1728f7751e495d76c00356b187f19fc42c6ee3e0484c2fe3945c304ccb4809171d890c4d4ff70c09464ac5cca7efaa5e47ca9f4efedc1cb8735704bd350c4e81edafed7a11c3c8f1b409a3f4b298b3a9492a3eb5a2245647609602c5ae60e1cd5cd8d5515c2ec43db8697e7baa1038c22c79102dc46c9e396d57717c987e83a45cafb", @generic="bc43bd3ae665852df1c8da5a1f0472779ea9eaced818c4511e42a86ee4755c2736837bbfd9b797c94ae5f0dda57abcc6800dc8ef380ecbc35b44ba647b25d52ef6740811a89212bdda86ce23790d7cd9765c06595e7e26fa21d42768305ce079a47f09bc83fcc0f64a81b7", @nested={0x117, 0x137, 0x0, 0x1, [@nested={0x4, 0x3c}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast1}, @generic="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"]}]}, 0x2d8}, {&(0x7f0000000d00)={0x134, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x2}, @nested={0xe4, 0x53, 0x0, 0x1, [@generic="fc681ee954dd229abba6df2f9a65", @generic="0fda83d8874d3dde6b6022d097795f56831f9849cea5ad16c44c8cb8d2f8ae32aee3a50c5f600f25be4b658809ebc334a64bd9f59590bb061f3af78af88898450e0bae412a2d9b719f016088eb9e73a510e6631e786e1a85a5c2093707883ba0ce73bf924965c21674b0423a74ce74853df27c5e0db75d1451237243ef8c256db59e95cba0d36f2861791a9f96503e0195d8607ebf41cbeb56b511860e15d365746ffa1afb9a802621b5399a54726eca155291b0178973d394948cd646ebfcc861fc72c35164e7b11a786744dd632d74ad4e"]}, @generic="cc81ed6d8d3b43095a795047915c871a8ab2f18dd344122751d0c9a62eda11cc8a1b384b4ddcc529d56f6c4aa7e23f24e916d67e"]}, 0x134}, {&(0x7f0000000e40)={0x104, 0x26, 0x400, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@loopback}, @typed={0x7c, 0x45, 0x0, 0x0, @binary="c3826f18928660e5ab7e6ad51d11fba57c390d7922aaafdbc26de70cb77abf40b9c605a0f5618c9a96c8a1763352915941aec8df5f3a7d8cf99899fc17f5df38e2289d6ae2a81e1a5073a6c54f5ecb31e0a48c149bce6dadd69ed3a221d83b29163a06a1fc33d2485823b94db6ec3ef89d8a0f84b91ca66f"}, @typed={0x1f, 0x61, 0x0, 0x0, @str='connect aa:aa:aa:aa:aa:11 1'}, @generic="85e704340eceb4e517711a97eeb256324259d308df2cee83e83cc4a1cdefb702633c5cf4e993e1555b58dd2ff6d93d7c16cdddd7e35d377f319a457667848b1efddb7f2d7c", @typed={0x8, 0xb1, 0x0, 0x0, @uid}]}, 0x104}, {&(0x7f0000000f80)={0x7c, 0x29, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x102}]}, @generic="4c9a191f350e649b47b1f67d3e1cd1c752f0dc253b3bb84f1f60dfbbf02fa9306a3662f755df487836e1302f6871dbce901810cfbdb87789640b4f31d8403d241b6a207db9f3777697433567e10eb7a21b857f8eed927e9c7b72", @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@empty}]}, 0x7c}], 0x4, &(0x7f0000001140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x60}, 0x8012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r6, @ANYBLOB="089805000750050008001300", @ANYRES32=r7, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001d00)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000001e00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e40)={0x0, 0x0, 0x0}, &(0x7f0000001e80)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)=[{&(0x7f0000000940)={0x110c, 0x15, 0x800, 0x70bd25, 0x25dfdbfd, "", [@generic="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", @generic="d1880a60c70410fdc6862189a6f96199bc3a56d249330bcab5e278ed2da57179bae5d5ed51aecc1125dc577307c9e5e11859759057f5fc55d330c5b272c705c532e962eb041e6c6213030e5a16d3bf428e7f76742b1605513e3957aad04f679daff9f0f9d2afdeb9479d5e5025ede20f947d1e6455e5da788a39caf38603c7bfaea70cf8823ee0081d8fbdf3c573928210c33c1dcb608062e0687067b67368118d86980830c2cdaa51fda77f8d7f59f680bb85caed6f4889c888859e6ac6fc32f7c936e21c90650a5ade1120b54e4ea918ba8021b10fa5a12eef706f9ade", @generic="f17a6731b42f9430d203", @typed={0x8, 0x35, 0x0, 0x0, @fd}, @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0xa0}]}, 0x110c}], 0x1, &(0x7f0000001ec0)=[@rights={{0x2c, 0x1, 0x1, [r3, r0, r1, r0, r1, r0, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r3, r3, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r3, r2, r1, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}], 0xe8, 0x1}, 0x40000) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0xfffffffffffffe7e, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1, 0x400, 0x8, {0x77359400}, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x3}, 0x8, 0x2, 0x0, 0x0, "a901eda474282db4"}}, 0x48}, 0x1, 0x0, 0x0, 0x4088010}, 0x20040010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r11 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x61f0, 0x0) close(0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804040000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"], 0x5c}}, 0x0) 1m41.576824453s ago: executing program 3 (id=7354): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x2e, 0x61, 0x2d]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e20, 0x0, 0x4000, 0x3, 0xa, 0x20, 0x0, 0x3b}, {0xec, 0x0, 0x40000000007, 0x9, 0x8, 0x8000000000000003, 0x200000200000003, 0xd}, {0x400000000004, 0xfffffffffffffffd, 0x6, 0x7}, 0x4, 0x0, 0x1, 0x0, 0x6}, {{@in=@multicast1, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) socket$netlink(0x10, 0x3, 0x12) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f00000002c0)=""/155, 0x9b, 0x0, &(0x7f0000000380)=""/198, 0xc6}}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}], 0x1, 0xfdef) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850010000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x50) ioctl$XFS_IOC_FSGEOMETRY_V4(r7, 0x8070587c, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m41.316223714s ago: executing program 3 (id=7356): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="1900000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m41.229254561s ago: executing program 0 (id=7357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r1, &(0x7f0000000500), 0xff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000010) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000fdff2cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="60020000007a01001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}, 0x1, 0x8100}, 0x2800804c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08c, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0x8, 0x80000001, 0x5, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x2, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0xcc, 0x4, 0x80000001, 0x5, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xf, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x4, 0x9, 0xd, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x7, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x1, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0x0, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000004, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0xb, 0x6, 0xf03, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) close(r14) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) socket$inet_mptcp(0x2, 0x1, 0x106) 1m41.145965973s ago: executing program 3 (id=7358): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x400}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x1, 0x0, 0xff}, 0x20) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000080)='\x00', 0x440440, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x1ff]}, {0x800, 0x4, 0x42, 0xfffffffffffffc01}}, 0x1, &(0x7f0000000180), &(0x7f00000002c0)=0xfffffff8}, {[0x3, 0x3, 0xc2cc, 0x7]}, 0x8, 0x3e, &(0x7f0000000380)=""/62}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001014000127bd7000fcdbdf2508004f004107000008004c000000000008004b091300000008004f0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) close(0x4) 1m40.95575366s ago: executing program 2 (id=7359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0xac, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3343f830}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7da4a9fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x2, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4412ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x3045162e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21d1b66d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d0b5925}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x236abb25}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2001f}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1m40.784649545s ago: executing program 1 (id=7360): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e0", 0x9}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe", 0x13}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 1m40.683175998s ago: executing program 2 (id=7361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004c0000440000000000069078ac141400ac1e0801830f73ffffffffac1414aaac1e01014404e501860600"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @private1, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)="e1d3aa10c1f51927be1925098ebac796501b3b", 0x13}], 0x1}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffff8f13}, 0x20060) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 1m40.441016505s ago: executing program 1 (id=7362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x2, 0x4, 0x0, 0x0, 0x7, 0x10005}, [""]}, 0x1c}}, 0x20008000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80001, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYRESOCT], 0x35c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb7e35", 0x4}], 0x1}}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x7b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) 1m40.420783165s ago: executing program 4 (id=7363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x20, r5, 0x7b0827b413e7d899, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x8) write$cgroup_devices(r7, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000ffff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1m40.189539784s ago: executing program 4 (id=7364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130a030000000000000000010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4040040) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, 0x0, 0x4850) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x48810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24040090) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b8030000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20004500000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b400000000014000480100001800b00010064796e73657400000900010073797a300000000009000740ae30c66524000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) 1m40.075833621s ago: executing program 3 (id=7365): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) sendfile(r0, r1, 0x0, 0xffffffff004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x17, 0xc6, &(0x7f0000000040)="99915428a84116cb1c5974e4a0707c2daa4eef65d79251", &(0x7f0000000240)=""/198, 0xffffffff, 0x0, 0x4d, 0xf7, &(0x7f0000000340)="7cc1a9af52b11c03b6aeebdffe2bf06e9551b9e5ea6bc4f749fe9ba84877cc3ea32f922e44b08a18a0feb7814c508a0e463ccc6056d6200871d4cfeab1aa0fd9d7b442117717158f2849addbd3", &(0x7f00000003c0)="884890422db87dddd112b9d224c9a4f0acf11708ba2b2d910f5d0e701b223b72c76ba98a8b2fe995595a2b7cea854f7f55f1f5f2e0bf168c58b08b8fa77f521b9b07a9f59b9c3d46b2af6d5407bf298407ef01f36bdc7c4a1cd4fe958c9fe2703162115512405d170532ab3786306788834ef328319e0327ca05f84ddb84865b870e79ccb74d0180f4d9adec852e62fb4d79397c4a52bd402dbb0df1c85bd13499c7ada12240e266120e4524f02581b6bc359c9ee5f870001790b6a7fde0701cbe486a0cb29660ea4d53fc1f4a23d1103fd1bed8864bdb09e1f5c4772c4410e02b7b6c2ab0dfa025fc9c8f2f02c660eaadd099b3ff341e", 0x2, 0x0, 0x2}, 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xb0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) (rerun: 32) 1m39.913207847s ago: executing program 4 (id=7366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000006780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006740)={&(0x7f0000006800)=ANY=[@ANYBLOB="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"], 0x2dbc}, 0x1, 0x0, 0x0, 0x4}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) pipe(&(0x7f0000000180)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x20000400) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000035c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES8=r6, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0x3}, 0x0, {[0x80000001, 0x0, 0x0, 0xffffffff, 0x8a, 0x0, 0x2, 0xffffffff]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@null, 0xd, 'dummy0\x00'}) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000067c0)=0x4) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'ipvlan1\x00'}}, 0x1e) 1m39.797008261s ago: executing program 3 (id=7367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e00)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xce}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x200204) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m39.786345867s ago: executing program 3 (id=7368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x4000) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffe4b}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}, {0x0}], 0x2, &(0x7f0000000d00)=""/179, 0xb3}, 0x30120) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 1m39.720206405s ago: executing program 2 (id=7369): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002900070125bd700001dbdf25027c00006653bed7ebe5452b57c779c205a86b733d0faac1a2c376d84e0e6e417fa7f32f4e75265877b182b3c3f8868a83c7bed0c8eefbd8ca25f962657224c1a85822162a11320738983c81b4ec3fbc4053f41ff996d3e7ac057fcc2ce411bd7b445201b11e1c096a85"], 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x8010) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfab}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r5, 0x891e, &(0x7f00000000c0)={'erspan0\x00', @ifru_addrs=@can}) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e1d, 0x74, @mcast2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="e100"/16], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000c700ca6552aa45762e00100043"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000002000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000020000000000000d5290f060000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003300000002000000000000000000000000000000000000000000000001030000040000004900000000000000ff01000000000000000000000000000100000000320000000200", @ANYBLOB="a4da9c646a0a94dc0ed0ea34300e60412163e54c64553c"], 0x1fc}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYRESHEX=r4], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r6, @ANYRES64=r0, @ANYBLOB="fe44a04f2cc40fbb798b5199a182780d82d5a1d9a4e21e83229ff25e5245a9fa9216038e4a7c453630fd1791f402d8841708371d967072901665fbb69b150b8839ee7db1b8c1328d620fd74bfcdd26f5f9c6b3d3653bcaf410eaa0c04d3187454a8106e7c994cb02dbc763", @ANYBLOB="c5030f4aebcadf634a2728cb0083479c87250955a5a9ab77256a4b776c5f37c8590721ebf12da7908702c253c6be00491fba11b660a1c0089ba4e4b0588693add61f01da0ed39ac977cb59746bf4e1dc4ef40ccc"], 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'erspan0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x9, 0x4194, {{0x32, 0x4, 0x3, 0x29, 0xc8, 0x65, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@cipso={0x86, 0x32, 0x1, [{0x6, 0x5, "997b44"}, {0x2, 0xe, "8bb6a10ca21b7a72580b7f5c"}, {0x7, 0xb, "81d7a240527f540fd9"}, {0x2, 0xe, "a1312000bc4a2c035cf5c83f"}]}, @generic={0x86, 0xa, "d02044c9917fb758"}, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x96, [@multicast1, @remote]}, @timestamp_prespec={0x44, 0x44, 0x5d, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x9}, {@multicast1, 0x3}, {@loopback, 0x9}, {@empty, 0x9}, {@private=0xa010101, 0x16}, {@rand_addr=0x64010102, 0xfe3f}]}, @ssrr={0x89, 0x7, 0x70, [@multicast1]}, @timestamp_addr={0x44, 0xc, 0xa4, 0x1, 0x4, [{@multicast1, 0xffffffff}]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x9, [0x2ec, 0x3, 0x7]}]}}}}}) 1m39.575560218s ago: executing program 2 (id=7370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000bcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m39.574245643s ago: executing program 1 (id=7371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc4}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@btf_id={0x18, 0x4}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1m39.281379484s ago: executing program 2 (id=7372): r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffe000) ioctl$FIONCLEX(r1, 0x5450) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040), 0x4) listen(r0, 0x8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="9a5be948f5fe13ee19cf97661a98fa33025197433e80884e3711ca03692a0ce9df1d", 0x22}, {&(0x7f0000000740)="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", 0x4af}], 0x2, 0x0, 0x0, 0xc4}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x8) close(r3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a4f0ff000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250c00000008000600080000000800040000a86701"], 0x24}, 0x1, 0x0, 0x0, 0x2000040}, 0x4004004) 1m39.10168578s ago: executing program 1 (id=7373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000140)) r5 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x24008800}, 0x40040c4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000880)={0x2d8, 0x3c, 0x10, 0x70bd29, 0x25dfdbfb, "", [@generic="77c7135f542db8ac9619e00dc7ec2f9a9495b64a006b683e", @generic="2c9ad8d3cab76ada7801a3e9ca4b9d5e6985ff4f30d0e9d4e5d5d49aca4ae813fa33be7d640da728418afae3a99644831f20dae7508e2f55514a7c92f7f16d83efe107f17c0a7253fe436a71a24bac62da80101786a12ca06e948f055b22e2ee86b020f864cded2475977c5505f7ced6d9aefb11a150", @generic="6463da46c3a2126b0d23ba981f99148385318bb80786170ce071456b01a276f2515d8365792038a414d5d4f4de79f57a61cd4116c1728f7751e495d76c00356b187f19fc42c6ee3e0484c2fe3945c304ccb4809171d890c4d4ff70c09464ac5cca7efaa5e47ca9f4efedc1cb8735704bd350c4e81edafed7a11c3c8f1b409a3f4b298b3a9492a3eb5a2245647609602c5ae60e1cd5cd8d5515c2ec43db8697e7baa1038c22c79102dc46c9e396d57717c987e83a45cafb", @generic="bc43bd3ae665852df1c8da5a1f0472779ea9eaced818c4511e42a86ee4755c2736837bbfd9b797c94ae5f0dda57abcc6800dc8ef380ecbc35b44ba647b25d52ef6740811a89212bdda86ce23790d7cd9765c06595e7e26fa21d42768305ce079a47f09bc83fcc0f64a81b7", @nested={0x117, 0x137, 0x0, 0x1, [@nested={0x4, 0x3c}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast1}, @generic="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"]}]}, 0x2d8}, {&(0x7f0000000d00)={0x134, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x2}, @nested={0xe4, 0x53, 0x0, 0x1, [@generic="fc681ee954dd229abba6df2f9a65", @generic="0fda83d8874d3dde6b6022d097795f56831f9849cea5ad16c44c8cb8d2f8ae32aee3a50c5f600f25be4b658809ebc334a64bd9f59590bb061f3af78af88898450e0bae412a2d9b719f016088eb9e73a510e6631e786e1a85a5c2093707883ba0ce73bf924965c21674b0423a74ce74853df27c5e0db75d1451237243ef8c256db59e95cba0d36f2861791a9f96503e0195d8607ebf41cbeb56b511860e15d365746ffa1afb9a802621b5399a54726eca155291b0178973d394948cd646ebfcc861fc72c35164e7b11a786744dd632d74ad4e"]}, @generic="cc81ed6d8d3b43095a795047915c871a8ab2f18dd344122751d0c9a62eda11cc8a1b384b4ddcc529d56f6c4aa7e23f24e916d67e"]}, 0x134}, {&(0x7f0000000e40)={0x104, 0x26, 0x400, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@loopback}, @typed={0x7c, 0x45, 0x0, 0x0, @binary="c3826f18928660e5ab7e6ad51d11fba57c390d7922aaafdbc26de70cb77abf40b9c605a0f5618c9a96c8a1763352915941aec8df5f3a7d8cf99899fc17f5df38e2289d6ae2a81e1a5073a6c54f5ecb31e0a48c149bce6dadd69ed3a221d83b29163a06a1fc33d2485823b94db6ec3ef89d8a0f84b91ca66f"}, @typed={0x1f, 0x61, 0x0, 0x0, @str='connect aa:aa:aa:aa:aa:11 1'}, @generic="85e704340eceb4e517711a97eeb256324259d308df2cee83e83cc4a1cdefb702633c5cf4e993e1555b58dd2ff6d93d7c16cdddd7e35d377f319a457667848b1efddb7f2d7c", @typed={0x8, 0xb1, 0x0, 0x0, @uid}]}, 0x104}, {&(0x7f0000000f80)={0x8c, 0x29, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x102}]}, @generic="4c9a191f350e649b47b1f67d3e1cd1c752f0dc253b3bb84f1f60dfbbf02fa9306a3662f755df487836e1302f6871dbce901810cfbdb87789640b4f31d8403d241b6a207db9f3777697433567e10eb7a21b857f8eed927e9c7b720e97613b1fff45d983707235de8d03", @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@empty}]}, 0x8c}], 0x4, &(0x7f0000001140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x60}, 0x8012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r6, @ANYBLOB="089805000750050008001300", @ANYRES32=r7, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001d00)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000001e00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e40)={0x0, 0x0, 0x0}, &(0x7f0000001e80)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)=[{&(0x7f0000000940)={0x110c, 0x15, 0x800, 0x70bd25, 0x25dfdbfd, "", [@generic="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", @generic="d1880a60c70410fdc6862189a6f96199bc3a56d249330bcab5e278ed2da57179bae5d5ed51aecc1125dc577307c9e5e11859759057f5fc55d330c5b272c705c532e962eb041e6c6213030e5a16d3bf428e7f76742b1605513e3957aad04f679daff9f0f9d2afdeb9479d5e5025ede20f947d1e6455e5da788a39caf38603c7bfaea70cf8823ee0081d8fbdf3c573928210c33c1dcb608062e0687067b67368118d86980830c2cdaa51fda77f8d7f59f680bb85caed6f4889c888859e6ac6fc32f7c936e21c90650a5ade1120b54e4ea918ba8021b10fa5a12eef706f9ade", @generic="f17a6731b42f9430d203", @typed={0x8, 0x35, 0x0, 0x0, @fd}, @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0xa0}]}, 0x110c}], 0x1, &(0x7f0000001ec0)=[@rights={{0x2c, 0x1, 0x1, [r3, r0, r1, r0, r1, r0, r1]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r3, r3, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r3, r2, r1, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}], 0xe8, 0x1}, 0x40000) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0xfffffffffffffe7e, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1, 0x400, 0x8, {0x77359400}, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x3}, 0x8, 0x2, 0x0, 0x0, "a901eda474282db4"}}, 0x48}, 0x1, 0x0, 0x0, 0x4088010}, 0x20040010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r11 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x61f0, 0x0) close(0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804040000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"], 0x5c}}, 0x0) 1m38.704682154s ago: executing program 4 (id=7374): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x20, r5, 0x7b0827b413e7d899, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x8) write$cgroup_devices(r7, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000ffff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1m26.158557089s ago: executing program 2 (id=7375): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb7e35", 0x4}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) (fail_nth: 2) 0s ago: executing program 32 (id=7357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r1, &(0x7f0000000500), 0xff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000010) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000fdff2cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="60020000007a01001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}, 0x1, 0x8100}, 0x2800804c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08c, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0x8, 0x80000001, 0x5, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x2, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0xcc, 0x4, 0x80000001, 0x5, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xf, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x4, 0x9, 0xd, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x7, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x1, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0x0, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000004, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0xb, 0x6, 0xf03, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) close(r14) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) socket$inet_mptcp(0x2, 0x1, 0x106) kernel console output (not intermixed with test programs): rdirqs_on+0x7a/0x110 [ 1180.952037][T30904] ? irqentry_exit+0x218/0x8e0 [ 1180.952057][T30904] ? trace_irq_disable+0x3b/0x140 [ 1180.952109][T30904] ip_getsockopt+0xbb/0x230 [ 1180.952140][T30904] ? __pfx_ip_getsockopt+0x10/0x10 [ 1180.952166][T30904] ? rep_movs_alternative+0xf/0x90 [ 1180.952233][T30904] ? sctp_getsockopt+0x9b/0xb90 [ 1180.952305][T30904] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1180.952354][T30904] do_sock_getsockopt+0x51d/0x7e0 [ 1180.952384][T30904] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1180.952426][T30904] ? __fget_files+0x3a2/0x420 [ 1180.952465][T30904] ? __fget_files+0x2a/0x420 [ 1180.952500][T30904] __x64_sys_getsockopt+0x1a4/0x240 [ 1180.952531][T30904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.952573][T30904] do_syscall_64+0x174/0x580 [ 1180.952596][T30904] ? trace_irq_disable+0x3b/0x140 [ 1180.952627][T30904] ? clear_bhb_loop+0x40/0x90 [ 1180.952656][T30904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.952677][T30904] RIP: 0033:0x7f4b2779ce59 [ 1180.952698][T30904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.952717][T30904] RSP: 002b:00007f4b28716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1180.952740][T30904] RAX: ffffffffffffffda RBX: 00007f4b27a15fa0 RCX: 00007f4b2779ce59 [ 1180.952763][T30904] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000004 [ 1180.952776][T30904] RBP: 00007f4b28716090 R08: 0000200000000040 R09: 0000000000000000 [ 1180.952790][T30904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.952803][T30904] R13: 00007f4b27a16038 R14: 00007f4b27a15fa0 R15: 00007ffe5e8a7738 [ 1180.952839][T30904] [ 1181.282078][T11488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.292122][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.301368][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.321591][T30910] IPv6: NLM_F_CREATE should be specified when creating new route [ 1181.936071][T30932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6099'. [ 1182.101208][T30932] veth3: entered promiscuous mode [ 1182.167023][T25202] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1182.191014][T25202] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1182.209083][T25202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1182.226100][T25202] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1182.238215][T25202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1182.923929][T30963] FAULT_INJECTION: forcing a failure. [ 1182.923929][T30963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.938432][T30963] CPU: 1 UID: 0 PID: 30963 Comm: syz.3.6105 Not tainted syzkaller #0 PREEMPT(full) [ 1182.938462][T30963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1182.938476][T30963] Call Trace: [ 1182.938485][T30963] [ 1182.938495][T30963] dump_stack_lvl+0xe8/0x150 [ 1182.938526][T30963] should_fail_ex+0x40c/0x560 [ 1182.938568][T30963] _copy_from_user+0x2d/0xb0 [ 1182.938595][T30963] do_ipt_get_ctl+0x55e/0x1300 [ 1182.938738][T30963] ? do_ip_getsockopt+0x130b/0x1d10 [ 1182.938762][T30963] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 1182.938783][T30963] ? do_ip_getsockopt+0x130b/0x1d10 [ 1182.938808][T30963] ? lockdep_hardirqs_on+0x7a/0x110 [ 1182.938836][T30963] ? __mutex_trylock_common+0x15f/0x270 [ 1182.938869][T30963] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1182.938899][T30963] ? rcu_is_watching+0x15/0xb0 [ 1182.938935][T30963] ? trace_contention_end+0x3d/0x140 [ 1182.938971][T30963] ? nf_getsockopt+0x224/0x290 [ 1182.939017][T30963] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1182.939041][T30963] ? nf_getsockopt+0x34/0x290 [ 1182.939074][T30963] ? __pfx___mutex_lock+0x10/0x10 [ 1182.939098][T30963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1182.939127][T30963] ? __might_fault+0xaf/0x130 [ 1182.939168][T30963] nf_getsockopt+0x26e/0x290 [ 1182.939207][T30963] ip_getsockopt+0x19e/0x230 [ 1182.939238][T30963] ? __pfx_ip_getsockopt+0x10/0x10 [ 1182.939265][T30963] ? rep_movs_alternative+0xf/0x90 [ 1182.939292][T30963] ? sctp_getsockopt+0x9b/0xb90 [ 1182.939317][T30963] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1182.939350][T30963] do_sock_getsockopt+0x51d/0x7e0 [ 1182.939380][T30963] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1182.939422][T30963] ? __fget_files+0x3a2/0x420 [ 1182.939449][T30963] ? __fget_files+0x2a/0x420 [ 1182.939484][T30963] __x64_sys_getsockopt+0x1a4/0x240 [ 1182.939516][T30963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.939541][T30963] do_syscall_64+0x174/0x580 [ 1182.939563][T30963] ? trace_irq_disable+0x3b/0x140 [ 1182.939596][T30963] ? clear_bhb_loop+0x40/0x90 [ 1182.939632][T30963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.939653][T30963] RIP: 0033:0x7f486fb9ce59 [ 1182.939675][T30963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.939700][T30963] RSP: 002b:00007f486ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1182.939723][T30963] RAX: ffffffffffffffda RBX: 00007f486fe15fa0 RCX: 00007f486fb9ce59 [ 1182.939739][T30963] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000004 [ 1182.939752][T30963] RBP: 00007f486ddf6090 R08: 0000200000000040 R09: 0000000000000000 [ 1182.939767][T30963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.939781][T30963] R13: 00007f486fe16038 R14: 00007f486fe15fa0 R15: 00007ffed1a0cc58 [ 1182.939818][T30963] [ 1183.429726][T30975] netlink: 840 bytes leftover after parsing attributes in process `syz.1.6106'. [ 1183.581382][T30980] netlink: 'syz.2.6109': attribute type 1 has an invalid length. [ 1183.593793][T30981] netlink: 135 bytes leftover after parsing attributes in process `syz.3.6108'. [ 1183.612537][T30981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6108'. [ 1184.366639][T25202] Bluetooth: hci3: command tx timeout [ 1184.591609][T30980] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1184.622876][T30983] gretap1: entered allmulticast mode [ 1185.053136][T31000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6113'. [ 1185.281391][T30937] xfrm0 speed is unknown, defaulting to 1000 [ 1185.562823][T31021] syzkaller0: entered promiscuous mode [ 1185.568469][T31021] syzkaller0: entered allmulticast mode [ 1185.924436][T31028] netlink: 'syz.4.6121': attribute type 1 has an invalid length. [ 1186.442606][T25202] Bluetooth: hci3: command tx timeout [ 1188.535685][T25202] Bluetooth: hci3: command tx timeout [ 1190.601433][T25202] Bluetooth: hci3: command tx timeout [ 1191.147893][T31025] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6119'. [ 1191.160478][T31028] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1191.189133][T31030] gretap1: entered allmulticast mode [ 1191.236946][T31037] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 1191.554756][T31050] xfrm0 speed is unknown, defaulting to 1000 [ 1191.694932][T31057] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1191.743414][T31057] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1191.997720][T31064] netlink: 'syz.1.6128': attribute type 2 has an invalid length. [ 1192.048597][T31066] openvswitch: netlink: Missing valid actions attribute. [ 1192.089001][T31066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.179342][T31063] bond19: option all_slaves_active: invalid value (13) [ 1192.239237][T31063] bond19 (unregistering): Released all slaves [ 1192.334227][T31073] nbd: must specify at least one socket [ 1192.579657][T31078] syzkaller0: entered promiscuous mode [ 1192.590510][T31078] syzkaller0: entered allmulticast mode [ 1192.596616][T31086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6134'. [ 1198.383163][T31133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6141'. [ 1198.413218][T31133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6141'. [ 1198.736367][T31148] bridge11: entered promiscuous mode [ 1198.743899][T31148] bridge11: entered allmulticast mode [ 1199.159671][T30937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.196372][T30937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.218590][T30937] bridge_slave_0: entered allmulticast mode [ 1199.248148][T30937] bridge_slave_0: entered promiscuous mode [ 1199.298190][T30937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.318580][T30937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.330860][T30937] bridge_slave_1: entered allmulticast mode [ 1199.374109][T30937] bridge_slave_1: entered promiscuous mode [ 1199.408004][T31162] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 1199.445990][T31162] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 1199.779660][T31176] netlink: 'syz.2.6151': attribute type 4 has an invalid length. [ 1199.788698][T31176] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6151'. [ 1199.818856][T30937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.845371][T31177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6152'. [ 1199.912971][T30937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.337973][T30937] team0: Port device team_slave_0 added [ 1200.369132][T30937] team0: Port device team_slave_1 added [ 1200.527420][T30937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.545922][T30937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.585505][T30937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.600087][T30937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.613436][T30937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.662987][T30937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.739660][T30937] hsr_slave_0: entered promiscuous mode [ 1200.748737][T30937] hsr_slave_1: entered promiscuous mode [ 1200.758547][T30937] debugfs: 'hsr0' already exists in 'hsr' [ 1200.765112][T30937] Cannot create hsr debugfs directory [ 1201.235825][T31216] syzkaller0: entered promiscuous mode [ 1201.241883][T31216] syzkaller0: entered allmulticast mode [ 1206.671505][T31243] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1206.689239][T31247] syzkaller0: entered promiscuous mode [ 1206.715119][T31247] syzkaller0: entered allmulticast mode [ 1206.726997][T31243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1206.840756][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.848101][ C0] bridge0: topology change detected, propagating [ 1206.969810][T31264] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1206.987337][T31267] netlink: 'syz.3.6175': attribute type 1 has an invalid length. [ 1207.011852][T31267] netlink: 'syz.3.6175': attribute type 2 has an invalid length. [ 1207.021700][T31264] netlink: 508 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1207.035432][T31267] netlink: 'syz.3.6175': attribute type 1 has an invalid length. [ 1207.044405][T31264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1207.054944][T31267] netlink: 'syz.3.6175': attribute type 3 has an invalid length. [ 1207.077438][T31267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6175'. [ 1207.150676][T31267] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6175'. [ 1207.306631][T31277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6180'. [ 1207.307752][T31267] batadv_slave_0: entered promiscuous mode [ 1207.326049][T31280] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1207.483050][T31265] batadv_slave_0: left promiscuous mode [ 1207.542419][T31286] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6180'. [ 1208.026317][T30937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1208.051089][T30937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1208.071455][T30937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1208.093230][T30937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1208.112108][T30937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1208.140832][T30937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1208.161358][T30937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1208.192290][T30937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1208.556996][T30937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.636886][T30937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.674728][T19870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.682031][T19870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.753293][T31329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6193'. [ 1208.766178][T19870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.773443][T19870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.822855][T31329] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1208.839847][T31329] dvmrp1: linktype set to 804 [ 1209.005631][T31335] bridge_slave_0: left allmulticast mode [ 1209.024588][T31335] bridge_slave_0: left promiscuous mode [ 1209.032928][T31335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.085337][T31335] bridge_slave_1: left allmulticast mode [ 1209.095208][T31335] bridge_slave_1: left promiscuous mode [ 1209.102705][T31335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.110095][T31342] netlink: 'syz.2.6195': attribute type 10 has an invalid length. [ 1209.145822][T31335] bond0: (slave bond_slave_0): Releasing backup interface [ 1209.186134][T31335] bond0: (slave bond_slave_1): Releasing backup interface [ 1209.199137][T31335] team0: Port device team_slave_0 removed [ 1209.207710][T31335] team0: Port device team_slave_1 removed [ 1209.215008][T31335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.225120][T31335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.234869][T31335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1209.527608][T31348] netlink: 'syz.3.6197': attribute type 1 has an invalid length. [ 1210.050409][T31362] syzkaller0: entered promiscuous mode [ 1210.078206][T31362] syzkaller0: entered allmulticast mode [ 1210.240039][T31375] bond20: entered promiscuous mode [ 1210.264895][T31375] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1214.690632][T31389] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1214.737668][T30937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.939131][T31409] netlink: 'syz.3.6209': attribute type 1 has an invalid length. [ 1214.966226][T30937] veth0_vlan: entered promiscuous mode [ 1214.977098][T31409] __nla_validate_parse: 3 callbacks suppressed [ 1214.977121][T31409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1215.009901][T30937] veth1_vlan: entered promiscuous mode [ 1215.017020][T31408] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6210'. [ 1215.078120][T30937] veth0_macvtap: entered promiscuous mode [ 1215.106982][T30937] veth1_macvtap: entered promiscuous mode [ 1215.142331][T30937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.179052][T30937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.238155][T11488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.274567][T11488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.286748][T31423] xt_hashlimit: size too large, truncated to 1048576 [ 1215.295535][T11488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.394382][T31425] @0Ù: renamed from bond_slave_1 [ 1215.445056][T11488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.537744][T31431] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6216'. [ 1215.553015][T31433] blkio.reset_stats is deprecated [ 1215.753691][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.771438][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.881868][T31439] syzkaller0: entered promiscuous mode [ 1215.888991][T31439] syzkaller0: entered allmulticast mode [ 1215.939315][T31433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1220.577015][T19870] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.602506][T19870] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.624237][T19870] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.665064][ T6472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.685187][T19870] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.698997][ T6472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.806427][T31468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6227'. [ 1221.002208][T31465] batman_adv: batadv0: Adding interface: dummy0 [ 1221.038211][T31465] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.161554][T31465] batman_adv: batadv0: Interface activated: dummy0 [ 1221.315347][T31483] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1221.379181][T31483] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1221.595403][T31499] netlink: 'syz.4.6233': attribute type 1 has an invalid length. [ 1221.806342][ T5648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1221.833234][ T5648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1221.851065][ T5648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1221.866220][ T5648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1221.875437][ T5648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1222.114544][T31499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1222.252810][T31495] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1222.292158][T31491] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6232'. [ 1222.345564][T31503] bond1: (slave dummy0): making interface the new active one [ 1222.363862][T31503] dummy0: entered promiscuous mode [ 1222.381082][T31503] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1222.447358][T31496] ip6gretap0: left promiscuous mode [ 1222.675100][T31527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6237'. [ 1222.873950][T31532] tipc: Started in network mode [ 1222.891182][T31532] tipc: Node identity 663f0780585e, cluster identity 4711 [ 1222.927846][T31532] tipc: Enabled bearer , priority 0 [ 1223.198452][T31502] xfrm0 speed is unknown, defaulting to 1000 [ 1223.655345][T31532] tipc: Disabling bearer [ 1223.971715][ T5648] Bluetooth: hci4: command tx timeout [ 1224.039295][T31570] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 1224.125660][T31574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6248'. [ 1224.356782][T31573] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1224.638919][T31573] bond13 (unregistering): Released all slaves [ 1224.713793][T31585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6251'. [ 1225.039989][T31598] netlink: 'syz.0.6254': attribute type 9 has an invalid length. [ 1225.331239][T31604] netlink: 'syz.1.6257': attribute type 1 has an invalid length. [ 1225.359764][T31604] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6257'. [ 1225.372231][T31604] netlink: 'syz.1.6257': attribute type 1 has an invalid length. [ 1225.380559][T31604] netlink: 'syz.1.6257': attribute type 8 has an invalid length. [ 1225.409107][T31604] netlink: 582 bytes leftover after parsing attributes in process `syz.1.6257'. [ 1225.467135][T31604] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6257'. [ 1226.052903][ T5648] Bluetooth: hci4: command tx timeout [ 1226.246575][T31633] netlink: 'syz.4.6263': attribute type 1 has an invalid length. [ 1226.266193][T31633] netlink: 'syz.4.6263': attribute type 2 has an invalid length. [ 1226.318906][T31633] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1226.547275][T31643] netlink: 'syz.2.6268': attribute type 21 has an invalid length. [ 1226.557482][T31643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6268'. [ 1226.642170][T31637] syzkaller0: entered promiscuous mode [ 1226.648022][T31637] syzkaller0: entered allmulticast mode [ 1226.665289][T31651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'. [ 1226.684877][T31651] netlink: 'syz.1.6269': attribute type 3 has an invalid length. [ 1228.139386][ T5648] Bluetooth: hci4: command tx timeout [ 1230.204636][ T5648] Bluetooth: hci4: command tx timeout [ 1231.047869][T31502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.077081][T31502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.119356][T31502] bridge_slave_0: entered allmulticast mode [ 1231.128298][T31502] bridge_slave_0: entered promiscuous mode [ 1231.148206][T31502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.169080][T31668] netlink: 'syz.2.6273': attribute type 1 has an invalid length. [ 1231.179042][T31671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6274'. [ 1231.186614][T31502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.196047][T31502] bridge_slave_1: entered allmulticast mode [ 1231.205053][T31502] bridge_slave_1: entered promiscuous mode [ 1231.230092][T31671] netlink: 'syz.0.6274': attribute type 1 has an invalid length. [ 1231.250454][T31671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6274'. [ 1231.414391][T31502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.433279][T31681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6275'. [ 1231.443743][T31502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.499739][T31676] bond2: (slave gretap2): making interface the new active one [ 1231.523423][T31676] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1231.543720][T31668] macvlan2: entered promiscuous mode [ 1231.549232][T31668] macvlan2: entered allmulticast mode [ 1231.556155][T31668] bond2: entered promiscuous mode [ 1231.569936][T31668] gretap2: entered promiscuous mode [ 1231.585482][T31668] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1231.594535][T31668] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1231.611992][T31668] bond2: left promiscuous mode [ 1231.618313][T31668] gretap2: left promiscuous mode [ 1231.710682][T31682] vlan2: entered allmulticast mode [ 1231.716279][T31682] bridge1: entered allmulticast mode [ 1231.778497][T31502] team0: Port device team_slave_0 added [ 1231.813453][T31502] team0: Port device team_slave_1 added [ 1231.871694][T31692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6279'. [ 1231.927329][T31688] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.6278'. [ 1231.959983][T31688] openvswitch: netlink: Flow key attr not present in new flow. [ 1231.969952][T31502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.988792][T31502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.049915][T31502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.253649][T31708] netlink: 'syz.4.6282': attribute type 1 has an invalid length. [ 1232.349648][T31502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.357309][T31502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.404431][T31502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.557167][T31502] hsr_slave_0: entered promiscuous mode [ 1232.588676][T31502] hsr_slave_1: entered promiscuous mode [ 1232.609169][T31502] debugfs: 'hsr0' already exists in 'hsr' [ 1232.625446][T31502] Cannot create hsr debugfs directory [ 1232.682463][T31715] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6284'. [ 1232.747020][T31722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1232.841079][T31725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1233.208007][ T5648] block nbd3: Receive control failed (result -32) [ 1233.454718][T31502] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.467151][T31502] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.724435][T31502] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.746426][T31502] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.757236][T31744] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1233.772232][T31744] netlink: ct family unspecified [ 1234.065064][T31502] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.083208][T31502] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.219604][T31764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1234.292770][T31502] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.309244][T31502] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.438332][T31766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6296'. [ 1234.541411][T28302] dummy0: left promiscuous mode [ 1234.672298][T31773] openvswitch: netlink: Flow key attr not present in new flow. [ 1235.035381][T31786] bond13 (unregistering): Released all slaves [ 1235.084560][ T5648] block nbd8: Receive control failed (result -32) [ 1235.168359][T31502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1235.192470][T31502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1235.201502][T31502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1235.248287][T31502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1235.276137][T31502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1235.334317][T31502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1235.357863][T31502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1235.418324][T31502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.452109][T31802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1235.784017][T31502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.841278][T31502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.878395][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.885768][T11488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.938860][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.946149][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.218892][T31831] xfrm0: entered allmulticast mode [ 1236.256843][T31831] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1236.288775][T31835] netlink: 'syz.0.6316': attribute type 1 has an invalid length. [ 1236.494081][T31840] netlink: 'syz.4.6318': attribute type 1 has an invalid length. [ 1236.653712][T31846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6318'. [ 1236.712451][T31849] netlink: 'syz.2.6320': attribute type 4 has an invalid length. [ 1236.752493][T31850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1236.752548][T31845] bond2: entered promiscuous mode [ 1236.768336][T31849] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1236.891232][T31839] bond2: left promiscuous mode [ 1237.114810][T31860] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6321'. [ 1237.149952][T31860] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1237.504820][T31869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6323'. [ 1237.687405][T31874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6323'. [ 1238.035671][T31502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.056353][T31881] tun0: tun_chr_ioctl cmd 2148553947 [ 1238.316729][T31502] veth0_vlan: entered promiscuous mode [ 1238.358242][T31502] veth1_vlan: entered promiscuous mode [ 1238.516577][T31502] veth0_macvtap: entered promiscuous mode [ 1238.545466][T31502] veth1_macvtap: entered promiscuous mode [ 1238.639238][T31502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.705155][T31502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.748709][T28302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.770686][T28302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.797009][T28302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.822544][T28302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.146403][T31896] netlink: 'syz.2.6330': attribute type 32 has an invalid length. [ 1239.186147][T31896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6330'. [ 1239.391606][T28302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.426839][T28302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.566803][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.576995][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.687486][T31915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1239.716644][T31915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1239.750363][T31915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1239.828098][ T79] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.846227][ T79] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.876301][ T79] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.919949][ T79] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.348827][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6339'. [ 1240.382462][ T5648] block nbd9: Receive control failed (result -32) [ 1240.679374][T31947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6345'. [ 1240.704027][T31947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6345'. [ 1241.183750][T31966] netlink: 'syz.1.6348': attribute type 4 has an invalid length. [ 1242.361444][T32018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1242.856521][T32051] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000 [ 1243.170102][T32058] __nla_validate_parse: 3 callbacks suppressed [ 1243.170129][T32058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6375'. [ 1243.581598][T32068] tipc: Started in network mode [ 1243.602414][T32068] tipc: Node identity 9abc009e81cc, cluster identity 4711 [ 1243.625509][T32068] tipc: Enabled bearer , priority 0 [ 1243.648396][T32068] syzkaller0: entered promiscuous mode [ 1243.656741][T32068] syzkaller0: entered allmulticast mode [ 1243.678486][T32068] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1243.878485][T32079] tipc: Resetting bearer [ 1243.957239][T32067] tipc: Resetting bearer [ 1244.065129][T32067] tipc: Disabling bearer [ 1244.143176][T32090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1244.902369][T32122] bond1 (unregistering): Released all slaves [ 1244.979194][T32129] IPVS: set_ctl: invalid protocol: 56376 0.0.0.0:0 [ 1245.283572][T32131] syzkaller0: entered promiscuous mode [ 1245.321033][T32131] syzkaller0: entered allmulticast mode [ 1245.429212][T32143] netlink: 'syz.4.6398': attribute type 1 has an invalid length. [ 1250.749792][T32177] netlink: 'syz.1.6403': attribute type 3 has an invalid length. [ 1250.768675][T32177] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1250.786599][T32176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1250.963013][T32176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1250.986307][T32176] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1251.028014][T32181] block nbd10: server does not support multiple connections per device. [ 1251.043061][T32181] block nbd10: shutting down sockets [ 1251.083075][T32188] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1251.284936][T32196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1251.343395][T32198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1251.390315][T32198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1251.617091][T32209] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1251.684981][T32212] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6415'. [ 1252.034712][T32227] netlink: 'syz.0.6418': attribute type 32 has an invalid length. [ 1252.076290][T32227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6418'. [ 1252.246829][T32239] xt_HMARK: spi-set and port-set can't be combined [ 1252.257624][T32227] bond1: option coupled_control: invalid value (238) [ 1252.286319][T32227] bond1 (unregistering): Released all slaves [ 1252.482085][T32236] pim6reg: entered allmulticast mode [ 1252.501296][T32239] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6422'. [ 1252.551063][T32245] pim6reg: left allmulticast mode [ 1253.016087][T32272] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 1253.307972][T32286] x_tables: duplicate underflow at hook 3 [ 1254.147507][T32281] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1254.158391][T30681] IPVS: starting estimator thread 0... [ 1254.250554][T32319] IPVS: using max 27 ests per chain, 64800 per kthread [ 1254.325950][T32323] netlink: 'syz.0.6439': attribute type 1 has an invalid length. [ 1254.461800][T32310] team0: Device wg0 is of different type [ 1254.562198][T32310] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1255.052950][T32333] syzkaller0: entered promiscuous mode [ 1255.069072][T32333] syzkaller0: entered allmulticast mode [ 1255.189422][ T30] audit: type=1804 audit(1781302799.861:20): pid=32347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6445" name="/newroot/596/cgroup.controllers" dev="tmpfs" ino=3081 res=1 errno=0 [ 1255.283569][ T30] audit: type=1800 audit(1781302799.861:21): pid=32347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6445" name="cgroup.controllers" dev="tmpfs" ino=3081 res=0 errno=0 [ 1255.349898][ T30] audit: type=1804 audit(1781302799.911:22): pid=32347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6445" name="/newroot/596/cgroup.controllers" dev="tmpfs" ino=3081 res=1 errno=0 [ 1255.955300][T32376] __nla_validate_parse: 8 callbacks suppressed [ 1255.955562][T32376] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1256.000987][T32376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1256.053072][T32382] netlink: 'syz.2.6457': attribute type 8 has an invalid length. [ 1256.068821][T32382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1256.184692][T32387] netlink: 'syz.0.6456': attribute type 1 has an invalid length. [ 1256.195513][T32390] syzkaller0: entered promiscuous mode [ 1256.209357][T32390] syzkaller0: entered allmulticast mode [ 1256.221778][T32387] netlink: 'syz.0.6456': attribute type 1 has an invalid length. [ 1256.248995][T32388] netlink: 'syz.0.6456': attribute type 1 has an invalid length. [ 1256.267531][T32394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6458'. [ 1256.283598][T32388] netlink: 'syz.0.6456': attribute type 1 has an invalid length. [ 1256.317660][T32387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6456'. [ 1256.404341][T32396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.415529][T32396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.435254][T32396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1256.507719][T32396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.658693][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.665979][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.753727][T32406] tipc: Enabled bearer , priority 0 [ 1257.257133][T25202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1257.275192][T25202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1257.310737][T25202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1257.330324][T25202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1257.338304][T25202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1259.404640][T25202] Bluetooth: hci0: command tx timeout [ 1261.490777][T25202] Bluetooth: hci0: command tx timeout [ 1261.745581][T32413] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6464'. [ 1261.766424][T32406] tipc: Resetting bearer [ 1261.816434][T32409] syzkaller0: entered promiscuous mode [ 1261.841494][T32409] syzkaller0: entered allmulticast mode [ 1261.864984][T32403] tipc: Resetting bearer [ 1261.926055][T32403] tipc: Disabling bearer [ 1261.953246][T28058] tipc: Node number set to 460325022 [ 1262.249698][T32444] tun0: tun_chr_ioctl cmd 1074025675 [ 1262.285854][T32444] tun0: persist enabled [ 1262.756190][T32420] xfrm0 speed is unknown, defaulting to 1000 [ 1262.919531][T32460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1262.954208][T32458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1263.029824][T32461] syzkaller0: entered promiscuous mode [ 1263.049580][T32461] syzkaller0: entered allmulticast mode [ 1263.381871][T32440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6470'. [ 1263.438626][T32446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6470'. [ 1263.472576][T32476] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1263.560428][T25202] Bluetooth: hci0: command tx timeout [ 1263.763416][T32475] syzkaller0: entered promiscuous mode [ 1263.780712][T32475] syzkaller0: entered allmulticast mode [ 1264.077204][T32499] netlink: 'syz.4.6483': attribute type 1 has an invalid length. [ 1265.640506][T25202] Bluetooth: hci0: command tx timeout [ 1269.190078][T28058] bridge0: entered promiscuous mode [ 1269.242473][T32537] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1270.306769][T32572] Cannot find set identified by id 0 to match [ 1270.338584][T32571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.419935][T32576] tipc: Enabling of bearer rejected, failed to enable media [ 1270.463981][T32581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1270.604505][T32585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1270.916647][T32597] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6497'. [ 1271.124750][T32599] mac80211_hwsim hwsim85 wlan0: entered promiscuous mode [ 1271.359483][T32420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.405282][T32420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.455017][T32420] bridge_slave_0: entered allmulticast mode [ 1271.503963][T32420] bridge_slave_0: entered promiscuous mode [ 1271.537369][T32420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.576794][T32420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.602864][T32420] bridge_slave_1: entered allmulticast mode [ 1271.624149][T32420] bridge_slave_1: entered promiscuous mode [ 1271.798993][T32420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.860655][T32420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.988711][T32420] team0: Port device team_slave_0 added [ 1272.008738][T32420] team0: Port device team_slave_1 added [ 1272.115326][T32420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.127636][T32420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.172268][T32420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.188544][T32420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.195961][T32420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.223004][T32420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.040029][T32420] hsr_slave_0: entered promiscuous mode [ 1273.088723][T32420] hsr_slave_1: entered promiscuous mode [ 1273.134980][T32420] debugfs: 'hsr0' already exists in 'hsr' [ 1273.169168][T32420] Cannot create hsr debugfs directory [ 1273.377101][T32666] tipc: Started in network mode [ 1273.385937][T32666] tipc: Node identity 42de570cca85, cluster identity 4711 [ 1273.402949][T32666] tipc: Enabled bearer , priority 0 [ 1273.535804][T32673] syzkaller0: entered promiscuous mode [ 1273.549338][T32673] syzkaller0: entered allmulticast mode [ 1273.562640][T32673] tipc: Resetting bearer [ 1273.798579][T32664] tipc: Resetting bearer [ 1274.040085][T32690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6529'. [ 1278.439759][T32664] tipc: Disabling bearer [ 1278.495401][T32696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1278.518089][T23400] tipc: Node number set to 2287687436 [ 1278.883647][T32420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.056655][T32718] syzkaller0: entered promiscuous mode [ 1279.112004][T32718] syzkaller0: entered allmulticast mode [ 1279.177636][T32709] tipc: Enabled bearer , priority 0 [ 1279.323113][T32420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.377061][T32706] tipc: Resetting bearer [ 1279.415861][T32726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6540'. [ 1279.439372][T32706] tipc: Disabling bearer [ 1279.496622][T32730] sctp: [Deprecated]: syz.3.6542 (pid 32730) Use of int in max_burst socket option. [ 1279.496622][T32730] Use struct sctp_assoc_value instead [ 1279.689700][T32420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.772221][T32746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6545'. [ 1279.851987][T32738] syzkaller1: entered promiscuous mode [ 1279.879048][T32738] syzkaller1: entered allmulticast mode [ 1280.539216][ T302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6552'. [ 1280.637660][ T308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1280.808833][ T314] netlink: 'syz.0.6555': attribute type 13 has an invalid length. [ 1280.882893][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6555'. [ 1280.950743][ T314] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1280.996946][ T320] sctp: [Deprecated]: syz.2.6554 (pid 320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1280.996946][ T320] Use struct sctp_sack_info instead [ 1281.079384][T32420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1281.567858][T32420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1281.683803][T32420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1281.699345][T32420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1281.760908][T32420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1281.817754][T32420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1281.839620][T32420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1281.899971][T32420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1282.093862][ T339] Bluetooth: MGMT ver 1.23 [ 1282.198466][ T347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6563'. [ 1282.238155][ T352] Cannot find add_set index 0 as target [ 1282.328677][T32420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.457275][T32420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.507564][T28306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.514845][T28306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.582211][T15827] IPVS: starting estimator thread 0... [ 1282.595831][ T366] netlink: 'syz.4.6566': attribute type 29 has an invalid length. [ 1282.647449][T28306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.654660][T28306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.679920][ T366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6566'. [ 1282.706965][ T374] IPVS: using max 27 ests per chain, 64800 per kthread [ 1283.048259][ T387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6570'. [ 1283.089996][ T387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6570'. [ 1283.130912][ T390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1283.236407][ T396] syzkaller0: entered promiscuous mode [ 1283.249912][ T396] syzkaller0: entered allmulticast mode [ 1284.187962][ T438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6580'. [ 1284.265695][T32420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.337782][T32420] veth0_vlan: entered promiscuous mode [ 1284.356311][T32420] veth1_vlan: entered promiscuous mode [ 1284.400145][T32420] veth0_macvtap: entered promiscuous mode [ 1284.411233][T32420] veth1_macvtap: entered promiscuous mode [ 1284.433581][T32420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.458244][T32420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.477854][ T6472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.489033][ T6472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.513971][ T6472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.531052][ T6472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.534700][ T417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1286.947003][T28306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.983923][T28306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.034365][ T460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1287.122391][ T461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6587'. [ 1287.134669][T11488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.167684][T11488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.340037][ T469] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6589'. [ 1287.533263][ T474] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1287.571633][ T474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6465'. [ 1287.721310][ T479] syzkaller0: entered promiscuous mode [ 1287.759692][ T479] syzkaller0: entered allmulticast mode [ 1288.337053][ T495] netlink: 'syz.1.6595': attribute type 1 has an invalid length. [ 1288.376993][ T495] netlink: 'syz.1.6595': attribute type 2 has an invalid length. [ 1288.418931][ T495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6595'. [ 1288.487160][ T511] netlink: 'syz.2.6597': attribute type 1 has an invalid length. [ 1288.531951][ T511] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6597'. [ 1288.568976][ T512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1288.650317][ T519] IPv6: addrconf: prefix option has invalid lifetime [ 1288.677379][ T518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1288.703348][ T519] netlink: 604 bytes leftover after parsing attributes in process `syz.3.6600'. [ 1288.848487][ T526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6601'. [ 1289.216741][ T534] netlink: 'syz.3.6604': attribute type 27 has an invalid length. [ 1289.249711][ T534] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1289.277291][ T540] netlink: 'syz.1.6605': attribute type 12 has an invalid length. [ 1289.365183][ T540] netlink: 'syz.1.6605': attribute type 11 has an invalid length. [ 1289.515585][ T546] syzkaller0: entered promiscuous mode [ 1289.559072][ T546] syzkaller0: entered allmulticast mode [ 1289.611664][ T546] FAULT_INJECTION: forcing a failure. [ 1289.611664][ T546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.660568][ T546] CPU: 0 UID: 0 PID: 546 Comm: syz.2.6608 Not tainted syzkaller #0 PREEMPT(full) [ 1289.660604][ T546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1289.660620][ T546] Call Trace: [ 1289.660631][ T546] [ 1289.660643][ T546] dump_stack_lvl+0xe8/0x150 [ 1289.660685][ T546] should_fail_ex+0x40c/0x560 [ 1289.660734][ T546] _copy_from_iter+0x1d3/0x1660 [ 1289.660759][ T546] ? skb_set_owner_w+0x263/0x3d0 [ 1289.660804][ T546] ? __pfx__copy_from_iter+0x10/0x10 [ 1289.660842][ T546] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1289.660877][ T546] skb_copy_datagram_from_iter+0xe6/0x720 [ 1289.660910][ T546] ? dev_get_by_index+0x22/0x2d0 [ 1289.661033][ T546] ? skb_put+0x112/0x210 [ 1289.661062][ T546] packet_sendmsg+0x36ab/0x5040 [ 1289.661184][ T546] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1289.661241][ T546] ? __lock_acquire+0x683/0x2cd0 [ 1289.661284][ T546] ? __pfx_clear_nonspinnable+0x1/0x10 [ 1289.661356][ T546] ? __pfx_packet_sendmsg+0x10/0x10 [ 1289.661380][ T546] ? aa_sk_perm+0x6d5/0x900 [ 1289.661425][ T546] ? __pfx_aa_sk_perm+0x10/0x10 [ 1289.661457][ T546] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1289.661541][ T546] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1289.661596][ T546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1289.661639][ T546] ? __pfx_packet_sendmsg+0x10/0x10 [ 1289.661668][ T546] __sys_sendto+0x672/0x710 [ 1289.661711][ T546] ? __pfx___sys_sendto+0x10/0x10 [ 1289.661748][ T546] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1289.661795][ T546] ? __fget_files+0x3a2/0x420 [ 1289.661842][ T546] ? ksys_write+0x242/0x270 [ 1289.661881][ T546] ? __pfx_ksys_write+0x10/0x10 [ 1289.661924][ T546] __x64_sys_sendto+0xde/0x100 [ 1289.661964][ T546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.661993][ T546] do_syscall_64+0x174/0x580 [ 1289.662018][ T546] ? trace_irq_disable+0x3b/0x140 [ 1289.662055][ T546] ? clear_bhb_loop+0x40/0x90 [ 1289.662087][ T546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.662112][ T546] RIP: 0033:0x7f7c8c99ce59 [ 1289.662136][ T546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.662158][ T546] RSP: 002b:00007f7c8d8fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1289.662184][ T546] RAX: ffffffffffffffda RBX: 00007f7c8cc15fa0 RCX: 00007f7c8c99ce59 [ 1289.662203][ T546] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 1289.662219][ T546] RBP: 00007f7c8d8fb090 R08: 0000200000000080 R09: 0000000000000014 [ 1289.662236][ T546] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001 [ 1289.662252][ T546] R13: 00007f7c8cc16038 R14: 00007f7c8cc15fa0 R15: 00007ffe18761c08 [ 1289.662293][ T546] [ 1290.255827][ T568] netlink: 'syz.3.6613': attribute type 1 has an invalid length. [ 1291.162378][ T606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1291.245889][ T622] sctp: [Deprecated]: syz.0.6624 (pid 622) Use of int in max_burst socket option deprecated. [ 1291.245889][ T622] Use struct sctp_assoc_value instead [ 1291.602602][ T633] syzkaller0: entered promiscuous mode [ 1291.625239][ T633] syzkaller0: entered allmulticast mode [ 1291.671020][ T633] FAULT_INJECTION: forcing a failure. [ 1291.671020][ T633] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.686155][ T633] CPU: 1 UID: 0 PID: 633 Comm: syz.2.6626 Not tainted syzkaller #0 PREEMPT(full) [ 1291.686187][ T633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1291.686203][ T633] Call Trace: [ 1291.686213][ T633] [ 1291.686224][ T633] dump_stack_lvl+0xe8/0x150 [ 1291.686259][ T633] should_fail_ex+0x40c/0x560 [ 1291.686307][ T633] should_failslab+0xa8/0x100 [ 1291.686349][ T633] ? skb_clone+0x212/0x3a0 [ 1291.686377][ T633] kmem_cache_alloc_noprof+0x87/0x650 [ 1291.686414][ T633] ? __pfx_skb_orphan_partial+0x10/0x10 [ 1291.686450][ T633] skb_clone+0x212/0x3a0 [ 1291.686476][ T633] ? netem_enqueue+0xeb8/0x32b0 [ 1291.686596][ T633] netem_enqueue+0xecb/0x32b0 [ 1291.686634][ T633] ? do_raw_spin_lock+0x12b/0x2f0 [ 1291.686715][ T633] dev_qdisc_enqueue+0x4e/0x260 [ 1291.686746][ T633] ? __dev_queue_xmit+0x1b26/0x37f0 [ 1291.686778][ T633] __dev_queue_xmit+0x1b40/0x37f0 [ 1291.686822][ T633] ? __dev_queue_xmit+0x29b/0x37f0 [ 1291.686856][ T633] ? _copy_from_iter+0x21b/0x1660 [ 1291.686878][ T633] ? skb_set_owner_w+0x263/0x3d0 [ 1291.686907][ T633] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1291.686945][ T633] ? __pfx__copy_from_iter+0x10/0x10 [ 1291.686990][ T633] ? __pfx_packet_parse_headers+0x10/0x10 [ 1291.687027][ T633] ? packet_xmit+0x68/0x330 [ 1291.687054][ T633] ? skb_put+0x112/0x210 [ 1291.687081][ T633] packet_sendmsg+0x3d95/0x5040 [ 1291.687119][ T633] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1291.687154][ T633] ? __lock_acquire+0x683/0x2cd0 [ 1291.687195][ T633] ? __pfx_clear_nonspinnable+0x1/0x10 [ 1291.687257][ T633] ? __pfx_packet_sendmsg+0x10/0x10 [ 1291.687280][ T633] ? aa_sk_perm+0x6d5/0x900 [ 1291.687358][ T633] ? __pfx_aa_sk_perm+0x10/0x10 [ 1291.687391][ T633] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1291.687440][ T633] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1291.687480][ T633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1291.687513][ T633] ? __pfx_packet_sendmsg+0x10/0x10 [ 1291.687542][ T633] __sys_sendto+0x672/0x710 [ 1291.687586][ T633] ? __pfx___sys_sendto+0x10/0x10 [ 1291.687631][ T633] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1291.687677][ T633] ? __fget_files+0x3a2/0x420 [ 1291.687723][ T633] ? ksys_write+0x242/0x270 [ 1291.687763][ T633] ? __pfx_ksys_write+0x10/0x10 [ 1291.687808][ T633] __x64_sys_sendto+0xde/0x100 [ 1291.687848][ T633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.687876][ T633] do_syscall_64+0x174/0x580 [ 1291.687902][ T633] ? trace_irq_disable+0x3b/0x140 [ 1291.687939][ T633] ? clear_bhb_loop+0x40/0x90 [ 1291.687971][ T633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.687998][ T633] RIP: 0033:0x7f7c8c99ce59 [ 1291.688023][ T633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.688044][ T633] RSP: 002b:00007f7c8d8fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1291.688069][ T633] RAX: ffffffffffffffda RBX: 00007f7c8cc15fa0 RCX: 00007f7c8c99ce59 [ 1291.688088][ T633] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 1291.688104][ T633] RBP: 00007f7c8d8fb090 R08: 0000200000000080 R09: 0000000000000014 [ 1291.688121][ T633] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001 [ 1291.688136][ T633] R13: 00007f7c8cc16038 R14: 00007f7c8cc15fa0 R15: 00007ffe18761c08 [ 1291.688178][ T633] [ 1292.124097][ T561] Bluetooth: hci1: command 0x0406 tx timeout [ 1292.438562][ T648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1292.445946][ T648] IPv6: NLM_F_CREATE should be set when creating new route [ 1292.453395][ T648] IPv6: NLM_F_CREATE should be set when creating new route [ 1292.460691][ T648] IPv6: NLM_F_CREATE should be set when creating new route [ 1292.732538][ T663] __nla_validate_parse: 12 callbacks suppressed [ 1292.732561][ T663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1292.796463][ T663] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1292.817151][ T654] sctp: [Deprecated]: syz.0.6635 (pid 654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1292.817151][ T654] Use struct sctp_sack_info instead [ 1292.838299][ T654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1292.999242][ T672] sctp: [Deprecated]: syz.2.6641 (pid 672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1292.999242][ T672] Use struct sctp_sack_info instead [ 1293.220752][ T685] netlink: 'syz.2.6646': attribute type 1 has an invalid length. [ 1293.311746][ T685] bond3: entered promiscuous mode [ 1293.322531][ T685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1293.336408][ T691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6646'. [ 1293.548537][ T699] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6651'. [ 1293.558553][ T699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6651'. [ 1293.596375][ T699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6651'. [ 1293.715684][ T699] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.6651'. [ 1293.863551][ T703] xfrm0 speed is unknown, defaulting to 1000 [ 1294.062056][T28058] IPVS: starting estimator thread 0... [ 1294.190790][ T717] IPVS: using max 26 ests per chain, 62400 per kthread [ 1294.298834][ T724] syzkaller0: entered promiscuous mode [ 1294.308052][ T724] syzkaller0: entered allmulticast mode [ 1294.359145][ T725] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6653'. [ 1294.370562][ T725] netlink: 'syz.0.6653': attribute type 1 has an invalid length. [ 1294.740342][ T738] xt_hl: Unknown TTL match mode: 237 [ 1295.538711][ T764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1295.564996][ T762] xt_hashlimit: max too large, truncated to 1048576 [ 1295.592408][ T762] xt_hashlimit: overflow, try lower: 2/0 [ 1295.662540][ T767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.705194][ T30] audit: type=1804 audit(1781302840.381:23): pid=767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6674" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=850 res=1 errno=0 [ 1295.761471][ T30] audit: type=1800 audit(1781302840.411:24): pid=767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6674" name="cgroup.controllers" dev="tmpfs" ino=850 res=0 errno=0 [ 1298.007850][ T827] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1298.113949][ T831] __nla_validate_parse: 2 callbacks suppressed [ 1298.113984][ T831] netlink: 732 bytes leftover after parsing attributes in process `syz.4.6693'. [ 1298.133368][ T831] netlink: 732 bytes leftover after parsing attributes in process `syz.4.6693'. [ 1298.271555][ T838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6696'. [ 1298.293847][ T836] netlink: 5000 bytes leftover after parsing attributes in process `syz.3.6695'. [ 1298.312754][ T833] netlink: 'syz.4.6693': attribute type 10 has an invalid length. [ 1298.320798][ T836] openvswitch: netlink: Flow key attr not present in new flow. [ 1298.451012][ T841] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6697'. [ 1298.526100][ T846] netlink: 'syz.2.6699': attribute type 1 has an invalid length. [ 1298.543408][ T833] bond1: (slave dummy0): Releasing active interface [ 1298.586963][ T848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6698'. [ 1298.614280][ T849] netlink: 'syz.2.6699': attribute type 4 has an invalid length. [ 1298.635936][ T833] team0: Port device dummy0 added [ 1298.665515][ T846] netlink: 'syz.2.6699': attribute type 4 has an invalid length. [ 1298.835024][ T853] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1298.951194][ T857] netlink: 'syz.4.6702': attribute type 1 has an invalid length. [ 1299.113038][ T869] syzkaller1: entered promiscuous mode [ 1299.150438][ T869] syzkaller1: entered allmulticast mode [ 1299.245458][ T870] ip6tnl2: entered allmulticast mode [ 1299.396205][ T869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.404036][ T869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.555111][ T869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.577418][ T869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.856366][ T869] syzkaller1: left promiscuous mode [ 1299.865060][ T869] syzkaller1: left allmulticast mode [ 1299.878214][T19870] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1299.905171][T30696] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1299.914028][T19870] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1299.930425][ T152] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.995707][T30696] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1300.028180][ T152] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.057833][ T152] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.113484][ T152] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.141754][ T890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6711'. [ 1300.151315][ T890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6711'. [ 1300.262304][T30696] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1300.464811][ T914] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6715'. [ 1300.491746][ T913] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1301.447975][ T951] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6726'. [ 1302.338779][ T993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1302.362755][T25202] Bluetooth: hci5: command 0x0419 tx timeout [ 1302.394642][T30680] hid-generic 0005:046D:0008.0002: item fetching failed at offset 10/11 [ 1302.407097][T30680] hid-generic 0005:046D:0008.0002: probe with driver hid-generic failed with error -22 [ 1302.469694][ T994] macsec0: entered allmulticast mode [ 1302.475231][ T994] veth1_macvtap: entered allmulticast mode [ 1302.786067][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.795974][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.806939][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.835414][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.925621][ T1015] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1302.943707][ T1015] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1302.964310][ T1015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1303.720427][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1303.824951][ T1073] __nla_validate_parse: 6 callbacks suppressed [ 1303.824981][ T1073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6757'. [ 1303.907297][ T1083] macsec1: entered promiscuous mode [ 1303.922363][ T1083] netlink: 'syz.1.6759': attribute type 1 has an invalid length. [ 1304.077317][ T1090] netlink: 'syz.1.6759': attribute type 10 has an invalid length. [ 1304.109035][ T1090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6759'. [ 1304.161108][ T1090] dummy0: entered promiscuous mode [ 1304.182983][ T1093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6761'. [ 1304.403677][ T1110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6765'. [ 1304.442505][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6765'. [ 1304.502185][ T1097] nbd: must specify a size in bytes for the device [ 1304.582823][ T1108] syzkaller0: entered promiscuous mode [ 1304.590035][ T1108] syzkaller0: entered allmulticast mode [ 1304.617564][ T1110] hsr_slave_1 (unregistering): left promiscuous mode [ 1304.701205][ T1115] openvswitch: netlink: IPv4 tun info is not correct [ 1304.809970][ T1123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6768'. [ 1309.339616][ T1163] syzkaller0: entered promiscuous mode [ 1309.346408][ T1163] syzkaller0: entered allmulticast mode [ 1309.658813][ T1175] netlink: 'syz.0.6785': attribute type 1 has an invalid length. [ 1309.926964][ T1175] bond1: entered promiscuous mode [ 1309.982369][ T1175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1310.063046][ T1176] bond1: (slave bridge1): making interface the new active one [ 1310.074945][ T1176] bridge1: entered promiscuous mode [ 1310.085486][ T1176] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1310.127702][ T1177] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1310.141443][ T1177] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1310.277526][T28306] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1310.492422][ T1192] tipc: Enabling of bearer rejected, failed to enable media [ 1310.507392][ T1207] lo: entered allmulticast mode [ 1310.593905][ T1207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6790'. [ 1310.939153][ T1223] tipc: Enabling of bearer rejected, failed to enable media [ 1310.985325][ T1225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6796'. [ 1311.072790][ T1228] syzkaller0: entered promiscuous mode [ 1311.108633][ T1228] syzkaller0: entered allmulticast mode [ 1311.285902][ T1245] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6796'. [ 1311.800812][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1311.979177][ T1275] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1312.504406][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6810'. [ 1312.523908][ T1288] unsupported nla_type 216 [ 1312.559846][ T1288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6810'. [ 1312.689718][ T1292] syzkaller0: entered promiscuous mode [ 1312.715178][ T1292] syzkaller0: entered allmulticast mode [ 1312.877559][ T1303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6815'. [ 1312.948793][ T1308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6816'. [ 1313.071351][ T1305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6814'. [ 1313.276593][ T1318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6818'. [ 1313.457395][ T1327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6821'. [ 1314.304061][ T1342] erspan0: entered promiscuous mode [ 1314.316261][ T1342] gretap0: entered promiscuous mode [ 1314.329926][ T1342] debugfs: 'hsr1' already exists in 'hsr' [ 1314.346452][ T1342] Cannot create hsr debugfs directory [ 1314.602442][ T1357] syzkaller0: entered promiscuous mode [ 1314.624290][ T1357] syzkaller0: entered allmulticast mode [ 1314.712940][ T1366] netlink: 'syz.4.6833': attribute type 23 has an invalid length. [ 1314.917790][ T1366] xfrm0 speed is unknown, defaulting to 1000 [ 1315.621944][ T1386] bridge_slave_0: default FDB implementation only supports local addresses [ 1316.913413][ T1414] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1316.995451][ T1417] netlink: 'syz.3.6847': attribute type 16 has an invalid length. [ 1317.017642][ T1417] netlink: 'syz.3.6847': attribute type 3 has an invalid length. [ 1317.037598][ T1417] __nla_validate_parse: 6 callbacks suppressed [ 1317.037617][ T1417] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.6847'. [ 1317.067602][ T1418] syzkaller1: entered promiscuous mode [ 1317.080953][ T1418] syzkaller1: entered allmulticast mode [ 1317.436947][ T1424] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1317.717530][ T1426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6850'. [ 1317.816075][ T561] block nbd10: Receive control failed (result -32) [ 1318.048336][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6853'. [ 1318.396979][ T1446] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6855'. [ 1318.430600][ T1446] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1318.563385][ T1449] syzkaller1: entered promiscuous mode [ 1318.595077][ T1449] syzkaller1: entered allmulticast mode [ 1318.672809][ T1456] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1318.708967][ T1455] netlink: 'syz.3.6857': attribute type 4 has an invalid length. [ 1318.729295][ T1456] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1318.753537][ T1458] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6858'. [ 1318.776318][ T1460] netlink: 'syz.3.6857': attribute type 4 has an invalid length. [ 1318.795215][ T1456] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1318.989775][ T1465] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6859'. [ 1319.090963][ T1468] netlink: 'syz.1.6860': attribute type 1 has an invalid length. [ 1319.110549][ T1469] netlink: 'syz.1.6860': attribute type 1 has an invalid length. [ 1319.139404][ T1470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6861'. [ 1319.655172][ T1477] gretap1: entered allmulticast mode [ 1319.796233][ T1482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6863'. [ 1319.831938][ T1485] FAULT_INJECTION: forcing a failure. [ 1319.831938][ T1485] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.843098][ T1482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6863'. [ 1319.869256][ T1485] CPU: 1 UID: 0 PID: 1485 Comm: syz.0.6864 Not tainted syzkaller #0 PREEMPT(full) [ 1319.869290][ T1485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1319.869306][ T1485] Call Trace: [ 1319.869317][ T1485] [ 1319.869329][ T1485] dump_stack_lvl+0xe8/0x150 [ 1319.869367][ T1485] should_fail_ex+0x40c/0x560 [ 1319.869416][ T1485] should_failslab+0xa8/0x100 [ 1319.869443][ T1485] __kmalloc_cache_noprof+0x88/0x660 [ 1319.869479][ T1485] ? __genradix_ptr_alloc+0x463/0x4a0 [ 1319.869509][ T1485] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1319.869673][ T1485] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1319.869711][ T1485] ? sctp_stream_interleave_init+0x55/0x90 [ 1319.869753][ T1485] sctp_association_new+0x15be/0x25d0 [ 1319.869830][ T1485] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1319.869863][ T1485] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1319.869893][ T1485] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1319.869923][ T1485] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1319.869949][ T1485] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1319.869978][ T1485] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1319.870014][ T1485] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1319.870050][ T1485] sctp_sendmsg+0x159b/0x2d00 [ 1319.870105][ T1485] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1319.870137][ T1485] ? aa_sk_perm+0x6d5/0x900 [ 1319.870169][ T1485] ? __might_fault+0xaf/0x130 [ 1319.870209][ T1485] ? __pfx_aa_sk_perm+0x10/0x10 [ 1319.870248][ T1485] ? sock_rps_record_flow+0x19/0x350 [ 1319.870329][ T1485] ? __pfx_inet_sendmsg+0x10/0x10 [ 1319.870366][ T1485] ? inet_sendmsg+0x298/0x320 [ 1319.870401][ T1485] ? __pfx_inet_sendmsg+0x10/0x10 [ 1319.870438][ T1485] __sys_sendto+0x5de/0x710 [ 1319.870482][ T1485] ? __pfx___sys_sendto+0x10/0x10 [ 1319.870518][ T1485] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1319.870562][ T1485] ? __fget_files+0x3a2/0x420 [ 1319.870606][ T1485] ? ksys_write+0x242/0x270 [ 1319.870646][ T1485] ? __pfx_ksys_write+0x10/0x10 [ 1319.870688][ T1485] __x64_sys_sendto+0xde/0x100 [ 1319.870728][ T1485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.870757][ T1485] do_syscall_64+0x174/0x580 [ 1319.870782][ T1485] ? trace_irq_disable+0x3b/0x140 [ 1319.870818][ T1485] ? clear_bhb_loop+0x40/0x90 [ 1319.870849][ T1485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.870874][ T1485] RIP: 0033:0x7fcb7399ce59 [ 1319.870898][ T1485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.870920][ T1485] RSP: 002b:00007fcb7483d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1319.870947][ T1485] RAX: ffffffffffffffda RBX: 00007fcb73c15fa0 RCX: 00007fcb7399ce59 [ 1319.870965][ T1485] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1319.870982][ T1485] RBP: 00007fcb7483d090 R08: 000020000005ffe4 R09: 000000000000001c [ 1319.870998][ T1485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.871013][ T1485] R13: 00007fcb73c16038 R14: 00007fcb73c15fa0 R15: 00007ffe2b374fe8 [ 1319.871054][ T1485] [ 1320.562898][ T1497] Bluetooth: MGMT ver 1.23 [ 1320.989115][ T1518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1321.361401][T30696] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1321.750590][T30696] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1321.867525][ T1542] netlink: 'syz.4.6879': attribute type 10 has an invalid length. [ 1322.905309][ T1586] xfrm0 speed is unknown, defaulting to 1000 [ 1322.952929][ T1590] __nla_validate_parse: 3 callbacks suppressed [ 1322.952952][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6887'. [ 1323.172335][ T1598] netlink: 'syz.0.6885': attribute type 8 has an invalid length. [ 1323.629428][ T1611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6892'. [ 1323.760544][ T1619] FAULT_INJECTION: forcing a failure. [ 1323.760544][ T1619] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.812640][ T1619] CPU: 0 UID: 0 PID: 1619 Comm: syz.1.6894 Not tainted syzkaller #0 PREEMPT(full) [ 1323.812671][ T1619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1323.812686][ T1619] Call Trace: [ 1323.812695][ T1619] [ 1323.812706][ T1619] dump_stack_lvl+0xe8/0x150 [ 1323.812796][ T1619] should_fail_ex+0x40c/0x560 [ 1323.812839][ T1619] should_failslab+0xa8/0x100 [ 1323.812864][ T1619] __kmalloc_noprof+0xe8/0x750 [ 1323.812895][ T1619] ? is_bpf_text_address+0x26/0x2b0 [ 1323.812918][ T1619] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1323.812959][ T1619] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1323.813001][ T1619] genl_family_rcv_msg_doit+0xda/0x340 [ 1323.813041][ T1619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1323.813083][ T1619] ? apparmor_capable+0x126/0x170 [ 1323.813111][ T1619] ? bpf_lsm_capable+0x9/0x20 [ 1323.813133][ T1619] ? security_capable+0x7e/0x2c0 [ 1323.813193][ T1619] genl_rcv_msg+0x614/0x7a0 [ 1323.813231][ T1619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1323.813261][ T1619] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1323.813355][ T1619] ? __pfx_nl80211_stop_p2p_device+0x10/0x10 [ 1323.813404][ T1619] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1323.813449][ T1619] netlink_rcv_skb+0x226/0x4a0 [ 1323.813475][ T1619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1323.813508][ T1619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1323.813551][ T1619] ? down_read+0x270/0x2e0 [ 1323.813579][ T1619] ? genl_rcv+0xd/0x40 [ 1323.813611][ T1619] genl_rcv+0x28/0x40 [ 1323.813639][ T1619] netlink_unicast+0x7bb/0x940 [ 1323.813688][ T1619] netlink_sendmsg+0x813/0xb40 [ 1323.813732][ T1619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1323.813762][ T1619] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1323.813797][ T1619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1323.813826][ T1619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1323.813854][ T1619] ____sys_sendmsg+0x9b9/0xa20 [ 1323.813878][ T1619] ? __might_fault+0xaf/0x130 [ 1323.813915][ T1619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1323.813951][ T1619] ? import_iovec+0x73/0xa0 [ 1323.813981][ T1619] ___sys_sendmsg+0x2a5/0x360 [ 1323.814004][ T1619] ? __lock_acquire+0x683/0x2cd0 [ 1323.814033][ T1619] ? __pfx____sys_sendmsg+0x10/0x10 [ 1323.814100][ T1619] ? __fget_files+0x2a/0x420 [ 1323.814127][ T1619] ? __fget_files+0x3a2/0x420 [ 1323.814167][ T1619] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1323.814195][ T1619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1323.814231][ T1619] ? __pfx_ksys_write+0x10/0x10 [ 1323.814274][ T1619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.814299][ T1619] do_syscall_64+0x174/0x580 [ 1323.814322][ T1619] ? trace_irq_disable+0x3b/0x140 [ 1323.814355][ T1619] ? clear_bhb_loop+0x40/0x90 [ 1323.814383][ T1619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.814406][ T1619] RIP: 0033:0x7f9aac19ce59 [ 1323.814428][ T1619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.814447][ T1619] RSP: 002b:00007f9aad124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1323.814470][ T1619] RAX: ffffffffffffffda RBX: 00007f9aac415fa0 RCX: 00007f9aac19ce59 [ 1323.814487][ T1619] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1323.814501][ T1619] RBP: 00007f9aad124090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.814515][ T1619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.814528][ T1619] R13: 00007f9aac416038 R14: 00007f9aac415fa0 R15: 00007ffd40738b58 [ 1323.814566][ T1619] [ 1324.516692][ T1624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6895'. [ 1324.688230][ T1627] netlink: 'syz.1.6897': attribute type 63 has an invalid length. [ 1324.725531][ T1627] netlink: 'syz.1.6897': attribute type 62 has an invalid length. [ 1324.775105][ T1628] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.6897'. [ 1324.877335][ T1630] netlink: 'syz.2.6898': attribute type 3 has an invalid length. [ 1325.235622][ T1635] bridge_slave_0: default FDB implementation only supports local addresses [ 1325.671723][ T1658] openvswitch: netlink: IP tunnel dst address not specified [ 1325.682653][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1326.511010][ T1693] Bluetooth: MGMT ver 1.23 [ 1326.906323][ T1704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6916'. [ 1327.075955][ T1711] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.6919'. [ 1327.234066][ T1701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1327.524003][ T1713] bridge0: port 1(ipvlan2) entered blocking state [ 1327.547308][ T1713] bridge0: port 1(ipvlan2) entered disabled state [ 1327.585517][ T1713] ipvlan2: entered allmulticast mode [ 1327.620629][ T1713] bridge0: entered allmulticast mode [ 1327.633814][ T30] audit: type=1800 audit(1781302872.311:25): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6915" name="memory.events" dev="tmpfs" ino=359 res=0 errno=0 [ 1327.658053][ T1713] ipvlan2: left allmulticast mode [ 1327.684506][ T1713] bridge0: left allmulticast mode [ 1327.714626][ T1726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1327.757500][ T1722] tun1: tun_chr_ioctl cmd 1074025680 [ 1327.767093][ T1727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1327.800813][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1327.831261][ T1727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1327.936220][ T1719] bridge4: entered promiscuous mode [ 1327.960041][ T1719] bridge4: entered allmulticast mode [ 1328.012985][ T1719] team0: Port device bridge4 added [ 1328.734377][ T1765] netlink: 'syz.4.6935': attribute type 1 has an invalid length. [ 1328.792372][ T1765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1328.828661][ T1778] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1328.846211][ T1765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1329.063013][ T1788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6941'. [ 1329.094643][ T1790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6942'. [ 1329.523692][ T1806] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1330.098959][ T1817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6946'. [ 1330.122955][ T1812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6946'. [ 1330.138132][ T1821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6948'. [ 1330.748095][ T1844] x_tables: unsorted underflow at hook 4 [ 1330.865658][ T1844] xfrm0 speed is unknown, defaulting to 1000 [ 1331.107543][ T1862] netlink: 'syz.4.6960': attribute type 10 has an invalid length. [ 1331.243890][ T1862] team0: Port device veth1_to_hsr added [ 1331.980388][ T1871] netlink: 'syz.4.6962': attribute type 1 has an invalid length. [ 1332.093696][ T1882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1332.098601][ T1871] bond4: entered promiscuous mode [ 1332.109114][ T1871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1332.136355][ T1879] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1332.143169][ T1882] netlink: 'syz.0.6965': attribute type 1 has an invalid length. [ 1332.153395][ T1879] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1332.167763][ T1879] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1332.228587][ T1882] netlink: 476 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1332.268574][ T1882] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1332.969229][ T1907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1333.218398][ T1918] IPv6: addrconf: prefix option has invalid lifetime [ 1333.878232][ T1948] __nla_validate_parse: 2 callbacks suppressed [ 1333.878258][ T1948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1334.228766][ T1959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6990'. [ 1334.637166][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6995'. [ 1335.495567][ T1985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1335.563105][ T1985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1335.943376][ T2001] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1336.279277][ T2017] FAULT_INJECTION: forcing a failure. [ 1336.279277][ T2017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.330274][ T2017] CPU: 0 UID: 0 PID: 2017 Comm: syz.1.7008 Not tainted syzkaller #0 PREEMPT(full) [ 1336.330307][ T2017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1336.330320][ T2017] Call Trace: [ 1336.330330][ T2017] [ 1336.330340][ T2017] dump_stack_lvl+0xe8/0x150 [ 1336.330370][ T2017] should_fail_ex+0x40c/0x560 [ 1336.330412][ T2017] _copy_from_user+0x2d/0xb0 [ 1336.330439][ T2017] ___sys_sendmsg+0x1c6/0x360 [ 1336.330462][ T2017] ? __lock_acquire+0x683/0x2cd0 [ 1336.330491][ T2017] ? __pfx____sys_sendmsg+0x10/0x10 [ 1336.330552][ T2017] ? __fget_files+0x2a/0x420 [ 1336.330578][ T2017] ? __fget_files+0x3a2/0x420 [ 1336.330615][ T2017] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1336.330642][ T2017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1336.330676][ T2017] ? __pfx_ksys_write+0x10/0x10 [ 1336.330717][ T2017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.330741][ T2017] do_syscall_64+0x174/0x580 [ 1336.330763][ T2017] ? trace_irq_disable+0x3b/0x140 [ 1336.330796][ T2017] ? clear_bhb_loop+0x40/0x90 [ 1336.330823][ T2017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.330845][ T2017] RIP: 0033:0x7f9aac19ce59 [ 1336.330865][ T2017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.330883][ T2017] RSP: 002b:00007f9aad124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1336.330906][ T2017] RAX: ffffffffffffffda RBX: 00007f9aac415fa0 RCX: 00007f9aac19ce59 [ 1336.330922][ T2017] RDX: 0000000020008004 RSI: 0000200000001200 RDI: 0000000000000003 [ 1336.330936][ T2017] RBP: 00007f9aad124090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.330950][ T2017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.330963][ T2017] R13: 00007f9aac416038 R14: 00007f9aac415fa0 R15: 00007ffd40738b58 [ 1336.330997][ T2017] [ 1336.684754][ T2021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1336.736770][ T2021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1336.739669][ T2025] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1336.841289][ T2024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1337.059322][ T2034] netlink: 'syz.3.7014': attribute type 27 has an invalid length. [ 1337.079199][ T2021] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1337.097558][ T2021] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1337.144567][ T2024] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1337.175085][ T2024] bond3 (unregistering): Released all slaves [ 1337.290929][ T2048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1337.302463][ T2048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1337.429554][ T2036] hsr0: entered promiscuous mode [ 1337.463421][ T2044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.705812][ T2062] FAULT_INJECTION: forcing a failure. [ 1337.705812][ T2062] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.758163][ T2062] CPU: 1 UID: 0 PID: 2062 Comm: syz.0.7020 Not tainted syzkaller #0 PREEMPT(full) [ 1337.758193][ T2062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1337.758207][ T2062] Call Trace: [ 1337.758221][ T2062] [ 1337.758230][ T2062] dump_stack_lvl+0xe8/0x150 [ 1337.758262][ T2062] should_fail_ex+0x40c/0x560 [ 1337.758303][ T2062] should_failslab+0xa8/0x100 [ 1337.758328][ T2062] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1337.758359][ T2062] ? __alloc_skb+0x189/0x7a0 [ 1337.758402][ T2062] ? __alloc_skb+0x1d7/0x7a0 [ 1337.758433][ T2062] ? __local_bh_enable_ip+0xd0/0x130 [ 1337.758475][ T2062] __alloc_skb+0x1d7/0x7a0 [ 1337.758514][ T2062] netlink_sendmsg+0x5d4/0xb40 [ 1337.758548][ T2062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.758578][ T2062] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1337.758611][ T2062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1337.758638][ T2062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.758663][ T2062] ____sys_sendmsg+0x9b9/0xa20 [ 1337.758685][ T2062] ? __might_fault+0xaf/0x130 [ 1337.758720][ T2062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1337.758752][ T2062] ? import_iovec+0x73/0xa0 [ 1337.758780][ T2062] ___sys_sendmsg+0x2a5/0x360 [ 1337.758800][ T2062] ? __lock_acquire+0x683/0x2cd0 [ 1337.758828][ T2062] ? __pfx____sys_sendmsg+0x10/0x10 [ 1337.758889][ T2062] ? __fget_files+0x2a/0x420 [ 1337.758916][ T2062] ? __fget_files+0x3a2/0x420 [ 1337.758954][ T2062] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1337.758982][ T2062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1337.759016][ T2062] ? __pfx_ksys_write+0x10/0x10 [ 1337.759055][ T2062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.759078][ T2062] do_syscall_64+0x174/0x580 [ 1337.759102][ T2062] ? trace_irq_disable+0x3b/0x140 [ 1337.759144][ T2062] ? clear_bhb_loop+0x40/0x90 [ 1337.759169][ T2062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.759189][ T2062] RIP: 0033:0x7fcb7399ce59 [ 1337.759208][ T2062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.759226][ T2062] RSP: 002b:00007fcb7483d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1337.759248][ T2062] RAX: ffffffffffffffda RBX: 00007fcb73c15fa0 RCX: 00007fcb7399ce59 [ 1337.759263][ T2062] RDX: 0000000020008004 RSI: 0000200000001200 RDI: 0000000000000003 [ 1337.759278][ T2062] RBP: 00007fcb7483d090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.759291][ T2062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.759303][ T2062] R13: 00007fcb73c16038 R14: 00007fcb73c15fa0 R15: 00007ffe2b374fe8 [ 1337.759337][ T2062] [ 1338.807557][ T2107] xt_bpf: check failed: parse error [ 1339.123339][ T2123] netlink: 'syz.2.7041': attribute type 1 has an invalid length. [ 1339.203467][ T2118] __nla_validate_parse: 5 callbacks suppressed [ 1339.203487][ T2118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7039'. [ 1339.288578][T23400] IPVS: starting estimator thread 0... [ 1339.304187][ T2124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7039'. [ 1339.430436][ T2135] IPVS: using max 29 ests per chain, 69600 per kthread [ 1339.776536][ T2143] netlink: 'syz.4.7045': attribute type 1 has an invalid length. [ 1339.947936][ T2151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7047'. [ 1340.001616][ T2156] netlink: 'syz.1.7049': attribute type 1 has an invalid length. [ 1340.031257][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7049'. [ 1340.042089][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7049'. [ 1340.294684][ T2158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7047'. [ 1340.308709][ T2165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7050'. [ 1340.408414][ T2165] bond3: entered promiscuous mode [ 1340.429842][ T2165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1340.453475][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7050'. [ 1340.455840][ T2172] netlink: 'syz.4.7053': attribute type 1 has an invalid length. [ 1340.486605][ T2161] bridge4: entered promiscuous mode [ 1340.493603][ T2161] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1340.591517][ T2170] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1340.651269][ T2177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7054'. [ 1340.663226][ T2170] bridge4: left promiscuous mode [ 1340.678615][ T2170] bond3 (unregistering): Released all slaves [ 1340.943744][ T2183] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7056'. [ 1341.680988][ T2222] netlink: 'syz.1.7066': attribute type 1 has an invalid length. [ 1341.729139][ T2222] gretap1: entered allmulticast mode [ 1341.748749][ T2222] bond3: (slave gretap1): making interface the new active one [ 1341.757757][ T2222] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1341.989309][ T2233] veth0: entered promiscuous mode [ 1342.029256][ T2233] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1342.125866][ T2236] sctp: [Deprecated]: syz.0.7070 (pid 2236) Use of int in max_burst socket option. [ 1342.125866][ T2236] Use struct sctp_assoc_value instead [ 1342.166258][ T2232] veth0: left promiscuous mode [ 1342.791224][ T2255] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1342.859834][ T2263] netlink: 'syz.4.7076': attribute type 16 has an invalid length. [ 1342.887943][ T2258] netlink: 'syz.3.7075': attribute type 16 has an invalid length. [ 1342.948160][ T2266] netlink: 'syz.0.7077': attribute type 1 has an invalid length. [ 1343.134270][ T2277] syz.1.7080: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1343.168591][ T2277] CPU: 0 UID: 0 PID: 2277 Comm: syz.1.7080 Not tainted syzkaller #0 PREEMPT(full) [ 1343.168624][ T2277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1343.168640][ T2277] Call Trace: [ 1343.168650][ T2277] [ 1343.168661][ T2277] dump_stack_lvl+0xe8/0x150 [ 1343.168701][ T2277] warn_alloc+0x249/0x340 [ 1343.168737][ T2277] ? __pfx_stack_trace_save+0x10/0x10 [ 1343.168777][ T2277] ? __pfx_warn_alloc+0x10/0x10 [ 1343.168817][ T2277] ? __kasan_kmalloc+0x93/0xb0 [ 1343.168848][ T2277] ? __kmalloc_cache_noprof+0x318/0x660 [ 1343.168879][ T2277] ? xskq_create+0x56/0x170 [ 1343.168935][ T2277] ? xsk_init_queue+0x8a/0xe0 [ 1343.168966][ T2277] ? xsk_setsockopt+0x52a/0x960 [ 1343.168996][ T2277] ? do_sock_setsockopt+0x17c/0x1b0 [ 1343.169018][ T2277] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1343.169040][ T2277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.169071][ T2277] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1343.169137][ T2277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1343.169178][ T2277] ? __kasan_kmalloc+0x93/0xb0 [ 1343.169217][ T2277] vmalloc_user_noprof+0xad/0xe0 [ 1343.169250][ T2277] ? xskq_create+0xbf/0x170 [ 1343.169285][ T2277] xskq_create+0xbf/0x170 [ 1343.169322][ T2277] xsk_init_queue+0x8a/0xe0 [ 1343.169358][ T2277] xsk_setsockopt+0x52a/0x960 [ 1343.169389][ T2277] ? __fget_files+0x2a/0x420 [ 1343.169419][ T2277] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1343.169452][ T2277] ? __pfx_aa_sk_perm+0x10/0x10 [ 1343.169489][ T2277] ? aa_sock_opt_perm+0xff/0x1a0 [ 1343.169527][ T2277] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1343.169557][ T2277] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1343.169592][ T2277] do_sock_setsockopt+0x17c/0x1b0 [ 1343.169622][ T2277] __x64_sys_setsockopt+0x13d/0x1b0 [ 1343.169649][ T2277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.169674][ T2277] do_syscall_64+0x174/0x580 [ 1343.169699][ T2277] ? trace_irq_disable+0x3b/0x140 [ 1343.169733][ T2277] ? clear_bhb_loop+0x40/0x90 [ 1343.169763][ T2277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.169786][ T2277] RIP: 0033:0x7f9aac19ce59 [ 1343.169809][ T2277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.169829][ T2277] RSP: 002b:00007f9aad124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1343.169855][ T2277] RAX: ffffffffffffffda RBX: 00007f9aac415fa0 RCX: 00007f9aac19ce59 [ 1343.169873][ T2277] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 1343.169887][ T2277] RBP: 00007f9aac232d6f R08: 0000000000000004 R09: 0000000000000000 [ 1343.169908][ T2277] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1343.169923][ T2277] R13: 00007f9aac416038 R14: 00007f9aac415fa0 R15: 00007ffd40738b58 [ 1343.169959][ T2277] [ 1343.528877][ T2277] Mem-Info: [ 1343.571127][ T2277] active_anon:6957 inactive_anon:0 isolated_anon:0 [ 1343.571127][ T2277] active_file:3639 inactive_file:40462 isolated_file:0 [ 1343.571127][ T2277] unevictable:768 dirty:196 writeback:0 [ 1343.571127][ T2277] slab_reclaimable:14735 slab_unreclaimable:174670 [ 1343.571127][ T2277] mapped:32837 shmem:1431 pagetables:1449 [ 1343.571127][ T2277] sec_pagetables:0 bounce:0 [ 1343.571127][ T2277] kernel_misc_reclaimable:0 [ 1343.571127][ T2277] free:1220168 free_pcp:25604 free_cma:0 [ 1343.681159][ T2277] Node 0 active_anon:27828kB inactive_anon:0kB active_file:14556kB inactive_file:161652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94576kB dirty:784kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19408kB pagetables:5648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1343.716671][ T2277] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36772kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1343.753424][ T2277] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.827006][ T2277] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 1343.838736][ T2277] Node 0 DMA32 free:1059328kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27828kB inactive_anon:0kB active_file:14556kB inactive_file:161652kB unevictable:1536kB writepending:784kB zspages:0kB present:3129332kB managed:2552928kB mlocked:0kB bounce:0kB free_pcp:40148kB local_pcp:19028kB free_cma:0kB [ 1343.900492][ T2277] lowmem_reserve[]: 0 0 0 0 0 [ 1343.905657][ T2277] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1343.956950][ T2277] lowmem_reserve[]: 0 0 0 0 0 [ 1343.964815][ T2277] Node 1 Normal free:3810080kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62332kB local_pcp:31136kB free_cma:0kB [ 1343.997822][ T2258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.998368][ T2258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.018209][ T2277] lowmem_reserve[]: 0 0 0 0 0 [ 1344.023770][ T2277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1344.037752][ T2277] Node 0 DMA32: 5020*4kB (UME) 7956*8kB (UM) 4337*16kB (UME) 40*32kB (M) 83*64kB (UM) 726*128kB (UME) 675*256kB (UME) 424*512kB (UME) 217*1024kB (U) 95*2048kB (UM) 0*4096kB = 1059296kB [ 1344.058873][ T2277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1344.080425][ T2277] Node 1 Normal: 8*4kB (UM) 20*8kB (UM) 12*16kB (UM) 11*32kB (UM) 9*64kB (UM) 10*128kB (UM) 7*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 925*4096kB (UM) = 3810080kB [ 1344.099207][ T2277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.109752][ T2277] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1344.120073][ T2277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.136806][ T2277] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1344.146973][ T2277] 45528 total pagecache pages [ 1344.152298][ T2277] 0 pages in swap cache [ 1344.157520][ T2277] Free swap = 124996kB [ 1344.228186][ T2277] Total swap = 124996kB [ 1344.238779][ T2277] 2097051 pages RAM [ 1344.252613][ T2277] 0 pages HighMem/MovableOnly [ 1344.260114][ T2277] 427034 pages reserved [ 1344.264880][ T2277] 0 pages cma reserved [ 1344.674366][ T2258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.745379][ T2258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.589203][ T2266] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1345.608243][ T2270] gretap1: entered allmulticast mode [ 1345.645212][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.673094][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.811874][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.827627][ T2292] __nla_validate_parse: 6 callbacks suppressed [ 1345.827650][ T2292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7083'. [ 1345.858841][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.979701][ T2245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1346.016292][ T2245] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1346.043886][ T2310] netlink: 'syz.0.7088': attribute type 1 has an invalid length. [ 1346.211945][ T2308] bond5: entered promiscuous mode [ 1346.227658][ T2318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7088'. [ 1346.243965][ T2308] bond5: entered allmulticast mode [ 1346.270805][ T2308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1346.482592][ T2310] bond3: entered promiscuous mode [ 1346.518772][ T2310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1346.596826][ T2245] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1346.621162][ T2245] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1346.636703][ T2318] bond3: entered allmulticast mode [ 1346.783332][ T2330] bond3: (slave bridge3): making interface the new active one [ 1346.793528][ T2330] bridge3: entered promiscuous mode [ 1346.799003][ T2330] bridge3: entered allmulticast mode [ 1346.808553][ T2330] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1348.450832][ T2327] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.473917][ T2245] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1348.482181][ T2245] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1348.520982][ T2245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1348.527047][ T2245] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1348.873785][ T2354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7094'. [ 1348.917613][ T2357] netlink: 'syz.4.7095': attribute type 1 has an invalid length. [ 1349.027245][ T2370] netlink: 298 bytes leftover after parsing attributes in process `syz.3.7096'. [ 1349.063412][ T2370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.443707][ T2391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7106'. [ 1349.872603][ T2413] netlink: 'syz.2.7111': attribute type 1 has an invalid length. [ 1350.627014][ T2454] openvswitch: netlink: Flow key attr not present in new flow. [ 1351.167798][ T2486] openvswitch: netlink: Message has 4 unknown bytes. [ 1351.184033][ T2490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7122'. [ 1351.208146][ T2468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7118'. [ 1351.217380][ T2486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1351.432442][ T2500] netlink: 'syz.0.7123': attribute type 1 has an invalid length. [ 1351.605487][ T2508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7126'. [ 1351.705511][ T2502] gretap1: entered allmulticast mode [ 1351.745551][ T2502] bond4: (slave gretap1): making interface the new active one [ 1351.777501][ T2502] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1352.089545][ T2524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7130'. [ 1352.235747][ T2533] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7132'. [ 1352.312701][ T2533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.345240][ T2533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.381454][ T2533] bond0 (unregistering): Released all slaves [ 1352.405194][ T2544] netlink: 'syz.0.7136': attribute type 9 has an invalid length. [ 1352.418348][ T2544] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.7136'. [ 1352.476133][ T2550] netlink: 'syz.2.7135': attribute type 24 has an invalid length. [ 1352.684504][ T2555] netlink: 'syz.2.7138': attribute type 1 has an invalid length. [ 1353.082513][ T2567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7141'. [ 1353.399250][ T2584] IPVS: set_ctl: invalid protocol: 76 224.0.0.1:20000 [ 1353.596532][ T2588] bond2: option lacp_rate: invalid value (128) [ 1353.624926][ T2588] bond2 (unregistering): Released all slaves [ 1353.902894][ T2604] netlink: 'syz.1.7150': attribute type 1 has an invalid length. [ 1353.926322][ T2599] nicvf0: tun_chr_ioctl cmd 3489698878 [ 1354.190625][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1354.274927][ T2621] bridge4: port 1(vlan2) entered blocking state [ 1354.289172][ T2621] bridge4: port 1(vlan2) entered disabled state [ 1354.305900][ T2621] vlan2: entered allmulticast mode [ 1354.321331][ T2621] bridge4: entered allmulticast mode [ 1354.348233][ T2621] vlan2: left allmulticast mode [ 1354.362991][ T2621] bridge4: left allmulticast mode [ 1354.493577][ T2631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7158'. [ 1354.670410][ T2635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7159'. [ 1354.670889][ T2637] openvswitch: netlink: Invalid VLAN frame [ 1354.708342][ T2635] openvswitch: netlink: Invalid VLAN frame [ 1354.749666][ T2640] netlink: 'syz.3.7161': attribute type 9 has an invalid length. [ 1354.902000][ T2653] netlink: 'syz.0.7164': attribute type 1 has an invalid length. [ 1354.975332][ T2651] syzkaller1: entered promiscuous mode [ 1354.988925][ T2651] syzkaller1: entered allmulticast mode [ 1355.008528][ T2664] netlink: 'syz.2.7165': attribute type 11 has an invalid length. [ 1355.106934][ T2664] netlink: 'syz.2.7165': attribute type 11 has an invalid length. [ 1355.774112][ T2701] bond6 (unregistering): Released all slaves [ 1355.821539][ T2714] netlink: 'syz.1.7178': attribute type 1 has an invalid length. [ 1356.336608][ T2743] xfrm0 speed is unknown, defaulting to 1000 [ 1356.664413][ T2764] __nla_validate_parse: 6 callbacks suppressed [ 1356.664437][ T2764] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7188'. [ 1357.336855][ T2779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7191'. [ 1357.663885][ T2792] netlink: 'syz.2.7193': attribute type 1 has an invalid length. [ 1358.050419][ T2798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7195'. [ 1358.230802][ T2802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7194'. [ 1358.421786][ T2814] syzkaller0: entered promiscuous mode [ 1358.466309][ T2809] FAULT_INJECTION: forcing a failure. [ 1358.466309][ T2809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.494575][ T2814] syzkaller0: entered allmulticast mode [ 1358.513108][ T2809] CPU: 0 UID: 0 PID: 2809 Comm: syz.0.7197 Not tainted syzkaller #0 PREEMPT(full) [ 1358.513148][ T2809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1358.513162][ T2809] Call Trace: [ 1358.513172][ T2809] [ 1358.513182][ T2809] dump_stack_lvl+0xe8/0x150 [ 1358.513214][ T2809] should_fail_ex+0x40c/0x560 [ 1358.513290][ T2809] _copy_from_iter+0x1d3/0x1660 [ 1358.513312][ T2809] ? skb_set_owner_w+0x263/0x3d0 [ 1358.513351][ T2809] ? __pfx__copy_from_iter+0x10/0x10 [ 1358.513384][ T2809] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1358.513415][ T2809] skb_copy_datagram_from_iter+0xe6/0x720 [ 1358.513446][ T2809] ? dev_get_by_index+0x22/0x2d0 [ 1358.513475][ T2809] ? skb_put+0x112/0x210 [ 1358.513500][ T2809] packet_sendmsg+0x36ab/0x5040 [ 1358.513536][ T2809] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1358.513571][ T2809] ? __lock_acquire+0x683/0x2cd0 [ 1358.513613][ T2809] ? unwind_next_frame+0x8f/0x2550 [ 1358.513659][ T2809] ? __pfx_packet_sendmsg+0x10/0x10 [ 1358.513681][ T2809] ? aa_sk_perm+0x6d5/0x900 [ 1358.513723][ T2809] ? __pfx_aa_sk_perm+0x10/0x10 [ 1358.513752][ T2809] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1358.513795][ T2809] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1358.513830][ T2809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1358.513858][ T2809] ? __pfx_packet_sendmsg+0x10/0x10 [ 1358.513885][ T2809] ____sys_sendmsg+0x9b9/0xa20 [ 1358.513919][ T2809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1358.513954][ T2809] ? import_iovec+0x73/0xa0 [ 1358.513983][ T2809] ___sys_sendmsg+0x2a5/0x360 [ 1358.514005][ T2809] ? __lock_acquire+0x683/0x2cd0 [ 1358.514033][ T2809] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.514098][ T2809] ? __fget_files+0x2a/0x420 [ 1358.514126][ T2809] ? __fget_files+0x3a2/0x420 [ 1358.514172][ T2809] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1358.514200][ T2809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1358.514236][ T2809] ? __pfx_ksys_write+0x10/0x10 [ 1358.514278][ T2809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.514303][ T2809] do_syscall_64+0x174/0x580 [ 1358.514327][ T2809] ? trace_irq_disable+0x3b/0x140 [ 1358.514361][ T2809] ? clear_bhb_loop+0x40/0x90 [ 1358.514388][ T2809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.514411][ T2809] RIP: 0033:0x7fcb7399ce59 [ 1358.514432][ T2809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.514451][ T2809] RSP: 002b:00007fcb7483d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.514476][ T2809] RAX: ffffffffffffffda RBX: 00007fcb73c15fa0 RCX: 00007fcb7399ce59 [ 1358.514493][ T2809] RDX: 0000000000000804 RSI: 0000200000000440 RDI: 0000000000000009 [ 1358.514507][ T2809] RBP: 00007fcb7483d090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.514522][ T2809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.514535][ T2809] R13: 00007fcb73c16038 R14: 00007fcb73c15fa0 R15: 00007ffe2b374fe8 [ 1358.514569][ T2809] [ 1359.237003][ T2843] netlink: 'syz.0.7206': attribute type 1 has an invalid length. [ 1359.463282][ T2835] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1359.477223][ T2835] batman_adv: batadv0: Adding interface: gretap3 [ 1359.484045][ T2835] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.509998][ T2835] batman_adv: batadv0: Interface activated: gretap3 [ 1359.669496][ T2859] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7207'. [ 1360.038525][ T2876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7210'. [ 1360.678180][ T2901] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1360.756489][ T2904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1360.832749][ T2910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7219'. [ 1361.066880][ T2916] netlink: 'syz.4.7220': attribute type 1 has an invalid length. [ 1361.445232][ T2930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1361.490561][ T2930] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 1361.641019][ T2930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1361.672069][ T2941] openvswitch: netlink: Multiple metadata blocks provided [ 1361.697460][ T2946] openvswitch: netlink: Multiple metadata blocks provided [ 1361.701820][T30707] IPVS: starting estimator thread 0... [ 1361.719961][ T2941] tipc: Failed to remove unknown binding: 66,1,1/0:3083647097/3083647099 [ 1361.758746][ T2941] tipc: Failed to remove unknown binding: 66,1,1/0:3083647097/3083647099 [ 1361.777054][ T2950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7229'. [ 1361.840836][ T2947] IPVS: using max 26 ests per chain, 62400 per kthread [ 1361.879125][ T2950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7229'. [ 1361.969894][ T2954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7231'. [ 1361.994603][ T2953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7230'. [ 1362.018485][ T2953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7230'. [ 1362.056232][ T2953] syzkaller0: entered promiscuous mode [ 1362.077419][ T2953] syzkaller0: entered allmulticast mode [ 1362.248567][ T2963] netlink: 'syz.3.7234': attribute type 1 has an invalid length. [ 1362.323591][ T2963] gretap1: entered allmulticast mode [ 1362.335197][ T2963] bond2: (slave gretap1): making interface the new active one [ 1362.345168][ T2963] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1362.497317][ T2968] syzkaller0: entered promiscuous mode [ 1362.520638][ T2968] syzkaller0: entered allmulticast mode [ 1363.256909][ T2992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7243'. [ 1363.516778][ T2988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7242'. [ 1363.543007][T15840] IPVS: starting estimator thread 0... [ 1363.639817][ T2994] x_tables: duplicate underflow at hook 1 [ 1363.660660][ T2999] IPVS: using max 26 ests per chain, 62400 per kthread [ 1363.937274][ T3017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7250'. [ 1364.245987][ T3020] netlink: 'syz.1.7251': attribute type 1 has an invalid length. [ 1364.364797][ T3020] bond7: entered promiscuous mode [ 1364.405780][ T3020] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1364.504170][ T3043] netlink: 'syz.0.7255': attribute type 13 has an invalid length. [ 1364.558892][ T3029] vlan2: entered allmulticast mode [ 1364.574038][ T3043] netlink: 'syz.0.7255': attribute type 17 has an invalid length. [ 1364.588548][ T3029] bond7: entered allmulticast mode [ 1364.638449][ T3041] bond7: (slave bridge5): making interface the new active one [ 1364.653690][ T3052] x_tables: duplicate underflow at hook 2 [ 1364.690615][ T3041] bridge5: entered promiscuous mode [ 1364.700982][ T3041] bridge5: entered allmulticast mode [ 1364.725684][ T3041] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1365.305318][ T3075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7260'. [ 1365.317325][ T3074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1365.464212][ T3043] hsr0: left promiscuous mode [ 1365.473680][ T3043] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1365.592631][ T3074] veth7: entered promiscuous mode [ 1366.097494][ T3080] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1366.228744][ T3082] bridge0: entered promiscuous mode [ 1366.246143][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.259379][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.274370][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.330090][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.341176][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.362793][T28306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.370214][T28306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.414047][T28306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.421423][T28306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.517858][ T37] bond8 (unregistering): (slave gretap2): Releasing backup interface [ 1377.600466][ T37] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1377.679008][ T37] bond1 (unregistering): Released all slaves [ 1377.697321][ T37] bond2 (unregistering): Released all slaves [ 1377.722812][ T37] bond3 (unregistering): Released all slaves [ 1377.744125][ T37] bond4 (unregistering): Released all slaves [ 1377.766654][ T37] bond5 (unregistering): Released all slaves [ 1377.786652][ T37] bond0 (unregistering): Released all slaves [ 1377.795530][ T79] smc: removing ib device syz1 [ 1377.835238][ T37] bond6 (unregistering): Released all slaves [ 1377.865237][ T37] bond7 (unregistering): Released all slaves [ 1377.885094][ T37] bond8 (unregistering): Released all slaves [ 1377.933192][ T79] smbdirect: ib_dev[syz1] removed [ 1380.093297][ T37] : left promiscuous mode [ 1380.195327][ T37] tipc: Disabling bearer [ 1380.202382][ T37] tipc: Disabling bearer [ 1380.222366][ T37] tipc: Disabling bearer [ 1380.239504][ T37] tipc: Left network mode [ 1381.515895][ T37] veth1_macvtap: left promiscuous mode [ 1381.522143][ T37] veth0_macvtap: left promiscuous mode [ 1381.527904][ T37] veth1_vlan: left promiscuous mode [ 1381.533849][ T37] veth0_vlan: left promiscuous mode [ 1381.907407][T19871] smc: removing ib device uyz0 [ 1381.989842][T30707] uyz0: Port: 1 Link DOWN [ 1382.048451][T19871] smbdirect: ib_dev[uyz0] removed [ 1384.245355][ T37] IPVS: stop unused estimator thread 0... [ 1393.540493][ T3113] syzkaller0: entered promiscuous mode [ 1393.551114][ T3113] syzkaller0: entered allmulticast mode [ 1393.673746][ T3127] __nla_validate_parse: 1 callbacks suppressed [ 1393.673767][ T3127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7272'. [ 1393.856569][ T3127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7272'. [ 1398.347166][ T3152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7277'. [ 1398.406420][ T3157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7280'. [ 1398.417307][ T3157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7280'. [ 1398.499001][ T3160] netlink: 'syz.1.7281': attribute type 4 has an invalid length. [ 1398.519723][ T3160] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7281'. [ 1398.597366][ T3167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7284'. [ 1398.801358][ T3167] syzkaller1: entered promiscuous mode [ 1398.814968][ T3167] syzkaller1: entered allmulticast mode [ 1399.186187][ T3187] syzkaller0: entered promiscuous mode [ 1399.211824][ T3187] syzkaller0: entered allmulticast mode [ 1399.221919][ T3188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7290'. [ 1399.255698][ T3191] netlink: 'syz.1.7292': attribute type 1 has an invalid length. [ 1399.380810][ T3191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1399.518305][ T3201] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1399.575129][ T3196] veth3: entered allmulticast mode [ 1399.621631][ T3196] bond8: (slave veth3): Enslaving as an active interface with an up link [ 1399.728974][ T3207] Cannot find add_set index 4 as target [ 1399.781698][ T3191] bond8 (unregistering): (slave veth3): Releasing backup interface [ 1399.815530][ T3191] bond8 (unregistering): Released all slaves [ 1400.023058][ T3186] infiniband syz1: set active [ 1400.039485][ T3186] infiniband syz1: added syz_tun [ 1400.101758][ T3186] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1400.128469][ T3186] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1400.216757][ T3186] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1400.383743][ T3186] RDS/IB: syz1: added [ 1400.411241][ T3186] smc: adding ib device syz1 with port count 1 [ 1400.452864][ T3186] smc: ib device syz1 port 1 has no pnetid [ 1400.646966][ T3237] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1401.151480][ T3247] syzkaller0: entered promiscuous mode [ 1401.165087][ T3247] syzkaller0: entered allmulticast mode [ 1402.219753][ T3262] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.7305'. [ 1402.434275][ T3265] netlink: 'syz.4.7308': attribute type 1 has an invalid length. [ 1402.635436][ T3270] bond8: Unable to set down delay as MII monitoring is disabled [ 1402.674479][ T3270] bond8 (unregistering): Released all slaves [ 1402.791142][ T3284] netlink: 'syz.1.7312': attribute type 2 has an invalid length. [ 1402.844295][ T3284] netlink: 'syz.1.7312': attribute type 1 has an invalid length. [ 1403.043733][ T3291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7313'. [ 1403.711913][ T3308] xfrm0 speed is unknown, defaulting to 1000 [ 1404.318393][ T3312] IPVS: Unknown mcast interface: caif0 [ 1404.471701][ T3339] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7321'. [ 1404.548123][ T3359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7321'. [ 1405.744953][ T3392] netlink: 'syz.1.7336': attribute type 27 has an invalid length. [ 1405.762641][ T3392] netlink: 'syz.1.7336': attribute type 1 has an invalid length. [ 1405.859114][ T3392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1405.950557][ T3398] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7338'. [ 1405.966925][ T3396] dummy0: left promiscuous mode [ 1406.033067][ T3396] bond8: (slave dummy0): making interface the new active one [ 1406.066738][ T3396] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1406.426118][ T3407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7341'. [ 1406.613596][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7342'. [ 1406.646412][ T3405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.669139][ T3405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.693456][ T3415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7342'. [ 1407.432447][ T3405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.456910][ T3405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.784498][ T3405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1407.840305][ T3405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.065812][ T3405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.088322][ T3405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.403461][ T3329] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.412125][ T3329] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.625852][ T3324] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.660520][ T3324] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.756371][ T3326] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.779228][ T3326] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.858680][ T3324] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.886293][ T3324] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.183017][ T3471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7357'. [ 1409.235949][ T3471] ip6erspan0: entered allmulticast mode [ 1409.289173][ T3471] syzkaller0: entered promiscuous mode [ 1409.302032][ T3471] syzkaller0: entered allmulticast mode [ 1409.311117][ T3474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7359'. [ 1409.330723][ T3474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7359'. [ 1409.449926][ T3472] syzkaller1: entered promiscuous mode [ 1409.473651][ T3472] syzkaller1: entered allmulticast mode [ 1410.034188][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7364'. [ 1410.338224][ T3497] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1410.515310][ T3505] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1410.675108][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7370'. [ 1411.121886][ T3513] netlink: 'syz.3.7368': attribute type 1 has an invalid length. [ 1411.307183][ T3513] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.7368'. [ 1415.950168][ C0] sched: DL replenish lagged too much [ 1683.670024][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1683.677045][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29893/1:b..l [ 1683.685712][ C0] rcu: (detected by 0, t=10503 jiffies, g=250485, q=1013579 ncpus=2) [ 1683.693948][ C0] task:syz-executor state:R running task stack:22416 pid:29893 tgid:29893 ppid:29882 task_flags:0x400140 flags:0x00080000 [ 1683.708999][ C0] Call Trace: [ 1683.712334][ C0] [ 1683.715308][ C0] __schedule+0x1840/0x57a0 [ 1683.719916][ C0] ? __lock_acquire+0x683/0x2cd0 [ 1683.724909][ C0] ? __pfx___schedule+0x10/0x10 [ 1683.729817][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1683.734995][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1683.740074][ C0] irqentry_exit+0x14f/0x8e0 [ 1683.744717][ C0] ? trace_irq_disable+0x3b/0x140 [ 1683.749806][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1683.755830][ C0] RIP: 0010:unwind_next_frame+0xca0/0x2550 [ 1683.761689][ C0] Code: 0f 97 c0 20 c8 3c 01 0f 85 90 0e 00 00 48 8d 42 08 48 39 d8 0f 97 c1 4c 39 f8 0f 96 c0 20 c8 3c 01 0f 85 76 0e 00 00 48 89 d7 cb 23 00 00 48 89 c3 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 [ 1683.781342][ C0] RSP: 0018:ffffc9000467f020 EFLAGS: 00000202 [ 1683.787456][ C0] RAX: ffffc9000467f301 RBX: 1ffff920008cfe1a RCX: 1ffff920008cfe01 [ 1683.795477][ C0] RDX: ffffc9000467f370 RSI: 0000000000000002 RDI: ffffc9000467f370 [ 1683.803496][ C0] RBP: 1ffffffff21a6206 R08: ffffc9000467f378 R09: 0000000000000000 [ 1683.811522][ C0] R10: 0000000000000000 R11: ffffffff8e95c780 R12: 1ffff920008cfe1b [ 1683.819536][ C0] R13: ffffc90004680000 R14: ffffc9000467f0c8 R15: ffffc90004678000 [ 1683.827592][ C0] ? __reset_page_owner+0x71/0x1f0 [ 1683.832984][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1683.838153][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1683.844380][ C0] arch_stack_walk+0x11b/0x150 [ 1683.849241][ C0] ? __reset_page_owner+0x71/0x1f0 [ 1683.854414][ C0] stack_trace_save+0xa9/0x100 [ 1683.859235][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1683.864665][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1683.870197][ C0] save_stack+0x122/0x230 [ 1683.874582][ C0] ? __pfx_save_stack+0x10/0x10 [ 1683.879507][ C0] __reset_page_owner+0x71/0x1f0 [ 1683.884539][ C0] __free_frozen_pages+0xc0d/0xd20 [ 1683.889706][ C0] ? __free_slab+0x172/0x280 [ 1683.894343][ C0] __slab_free+0x274/0x2c0 [ 1683.898816][ C0] ? qlist_free_all+0x8e/0x100 [ 1683.903634][ C0] qlist_free_all+0x99/0x100 [ 1683.908276][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1683.913787][ C0] __kasan_slab_alloc+0x22/0x80 [ 1683.918696][ C0] __kmalloc_node_noprof+0x494/0x7b0 [ 1683.924126][ C0] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 1683.930336][ C0] ? __kmalloc_node_noprof+0x34b/0x7b0 [ 1683.935854][ C0] __vmalloc_node_range_noprof+0x5d9/0x1730 [ 1683.941821][ C0] ? __mutex_lock+0x30f/0x1590 [ 1683.946650][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1683.953032][ C0] ? xt_find_table_lock+0x55/0x400 [ 1683.958308][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1683.963377][ C0] ? net_generic+0x1e/0x240 [ 1683.967930][ C0] ? alloc_counters+0x63/0x5c0 [ 1683.972738][ C0] vzalloc_noprof+0xb2/0xe0 [ 1683.977330][ C0] ? alloc_counters+0x63/0x5c0 [ 1683.982138][ C0] alloc_counters+0x63/0x5c0 [ 1683.986792][ C0] ? xt_find_table_lock+0x36d/0x400 [ 1683.992087][ C0] do_ipt_get_ctl+0xb3c/0x1300 [ 1683.996921][ C0] ? do_ip_getsockopt+0x130b/0x1d10 [ 1684.002174][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 1684.007501][ C0] ? do_ip_getsockopt+0x130b/0x1d10 [ 1684.012744][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1684.018033][ C0] ? __mutex_trylock_common+0x15f/0x270 [ 1684.023631][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1684.029575][ C0] ? rcu_is_watching+0x15/0xb0 [ 1684.034382][ C0] ? trace_contention_end+0x3d/0x140 [ 1684.039725][ C0] ? nf_getsockopt+0x224/0x290 [ 1684.044553][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1684.050244][ C0] ? nf_getsockopt+0x34/0x290 [ 1684.055072][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1684.060155][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1684.066201][ C0] ? __might_fault+0xaf/0x130 [ 1684.070941][ C0] nf_getsockopt+0x26e/0x290 [ 1684.075590][ C0] ip_getsockopt+0x19e/0x230 [ 1684.080236][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 1684.085401][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 1684.090848][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1684.096802][ C0] do_sock_getsockopt+0x51d/0x7e0 [ 1684.101971][ C0] ? file_init_path+0x43c/0x5a0 [ 1684.106901][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1684.112505][ C0] ? fd_install+0x94/0x3d0 [ 1684.117000][ C0] __x64_sys_getsockopt+0x1a4/0x240 [ 1684.122266][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.128381][ C0] do_syscall_64+0x174/0x580 [ 1684.133021][ C0] ? trace_irq_disable+0x3b/0x140 [ 1684.138102][ C0] ? clear_bhb_loop+0x40/0x90 [ 1684.142844][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.148779][ C0] RIP: 0033:0x7f7c8c99e62a [ 1684.153236][ C0] RSP: 002b:00007ffe18761878 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 1684.161695][ C0] RAX: ffffffffffffffda RBX: 00007ffe18761900 RCX: 00007f7c8c99e62a [ 1684.169714][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1684.177734][ C0] RBP: 0000000000000003 R08: 00007ffe1876189c R09: 0000000000000000 [ 1684.185750][ C0] R10: 00007ffe18761900 R11: 0000000000000212 R12: 00007f7c8cbebd40 [ 1684.193779][ C0] R13: 00007ffe1876189c R14: 0000000000000000 R15: 00007f7c8cbed180 [ 1684.201825][ C0] [ 1684.204986][ C0] rcu: rcu_preempt kthread starved for 3432 jiffies! g250485 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1684.216224][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1684.226435][ C0] rcu: RCU grace-period kthread stack dump: [ 1684.232366][ C0] task:rcu_preempt state:R running task stack:27688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1684.245926][ C0] Call Trace: [ 1684.249300][ C0] [ 1684.252295][ C0] __schedule+0x1840/0x57a0 [ 1684.256840][ C0] ? __lock_acquire+0x683/0x2cd0 [ 1684.261914][ C0] ? __pfx___schedule+0x10/0x10 [ 1684.266830][ C0] ? schedule+0x90/0x360 [ 1684.271122][ C0] schedule+0x164/0x360 [ 1684.275323][ C0] schedule_timeout+0x152/0x2c0 [ 1684.280323][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1684.285764][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1684.291112][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1684.296981][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1684.302592][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1684.307504][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1684.313712][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1684.319043][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1684.324320][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1684.328965][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1684.334246][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1684.339303][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1684.344387][ C0] kthread+0x389/0x470 [ 1684.348501][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1684.353809][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.358446][ C0] ret_from_fork+0x514/0xb70 [ 1684.363078][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1684.368240][ C0] ? __switch_to+0xc89/0x1420 [ 1684.372968][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.377615][ C0] ret_from_fork_asm+0x1a/0x30 [ 1684.382439][ C0] [ 1684.385493][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1684.391854][ C0] CPU: 0 UID: 0 PID: 30707 Comm: kworker/0:15 Not tainted syzkaller #0 PREEMPT(full) [ 1684.401459][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1684.411553][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 1684.418564][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1684.425043][ C0] Code: f7 e8 4d 00 fa f5 f7 c3 00 02 00 00 74 05 e8 f0 86 25 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 8d eb f5 65 8b 05 cd 17 90 07 85 c0 74 18 5b 41 5e c3 cc cc [ 1684.444741][ C0] RSP: 0018:ffffc90000007290 EFLAGS: 00000206 [ 1684.450896][ C0] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 0000000080000102 [ 1684.458922][ C0] RDX: 0000000000000002 RSI: ffffffff8dfac484 RDI: 0000000000000001 [ 1684.466940][ C0] RBP: 0000000000000000 R08: ffffffff903006f7 R09: 1ffffffff20600de [ 1684.475055][ C0] R10: dffffc0000000000 R11: fffffbfff20600df R12: 0000000000000001 [ 1684.483076][ C0] R13: ffff8881afbd3d40 R14: ffffffff9a6b3458 R15: 0000000000000000 [ 1684.491096][ C0] FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 1684.500071][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1684.506703][ C0] CR2: 00007f59ec43980e CR3: 000000007e288000 CR4: 00000000003526f0 [ 1684.514734][ C0] Call Trace: [ 1684.518054][ C0] [ 1684.520934][ C0] debug_check_no_obj_freed+0x483/0x530 [ 1684.526628][ C0] kfree+0x13e/0x640 [ 1684.530578][ C0] ? skb_release_data+0x85e/0xab0 [ 1684.535657][ C0] skb_release_data+0x85e/0xab0 [ 1684.540655][ C0] __kfree_skb+0x5d/0x210 [ 1684.545026][ C0] nft_synproxy_eval_v4+0x383/0x530 [ 1684.550957][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1684.556792][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1684.561705][ C0] nft_synproxy_do_eval+0x335/0x550 [ 1684.566954][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1684.572730][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 1684.578148][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1684.583843][ C0] nft_do_chain+0x48d/0x1ad0 [ 1684.588578][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1684.593749][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 1684.599771][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1684.604931][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1684.610454][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1684.615908][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1684.621418][ C0] nf_hook_slow+0xc5/0x220 [ 1684.625896][ C0] NF_HOOK+0x21f/0x3c0 [ 1684.630079][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1684.636108][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1684.640310][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1684.644948][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1684.650991][ C0] ? ip_local_deliver+0x113/0x190 [ 1684.656243][ C0] NF_HOOK+0x336/0x3c0 [ 1684.660378][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1684.665536][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1684.669741][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1684.674404][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1684.679583][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1684.684238][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1684.688798][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1684.693355][ C0] process_backlog+0xa34/0x1860 [ 1684.698282][ C0] ? process_backlog+0x3c3/0x1860 [ 1684.703398][ C0] __napi_poll+0xaa/0x330 [ 1684.707805][ C0] net_rx_action+0x61d/0xf50 [ 1684.712560][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1684.717772][ C0] handle_softirqs+0x225/0x840 [ 1684.722592][ C0] ? do_softirq+0x76/0xd0 [ 1684.727018][ C0] ? neigh_periodic_work+0xc23/0xe40 [ 1684.732400][ C0] do_softirq+0x76/0xd0 [ 1684.736616][ C0] [ 1684.739591][ C0] [ 1684.742559][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1684.747726][ C0] neigh_periodic_work+0xc23/0xe40 [ 1684.752920][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1684.758692][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1684.764327][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1684.770369][ C0] ? assign_work+0x3cf/0x5d0 [ 1684.775029][ C0] worker_thread+0xa47/0xfb0 [ 1684.779711][ C0] kthread+0x389/0x470 [ 1684.783837][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1684.789003][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.793655][ C0] ret_from_fork+0x514/0xb70 [ 1684.798301][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1684.803470][ C0] ? __switch_to+0xc89/0x1420 [ 1684.808209][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.812875][ C0] ret_from_fork_asm+0x1a/0x30 [ 1684.817717][ C0]