last executing test programs: 2m48.934494986s ago: executing program 4 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010604ad0c002b8008000400070000001400030076657468305f766c616e"], 0x4c}}, 0x48000) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150601010000ffdbdf251000000005000f0031000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000888c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0083fc9c6a5f6ed4740000fddbdf25087c0000080001801716c2e9a2cc38a503f1611dc407255384a97ff062f12944f7bd73f95ad696776fd8512e16adf6bf50ab01000000927b5e0c6a832c2b46f5b14e0f7971c58f0c8e183a93b8c9e5b7b507e3c9ecb722d0141b36999c4b6ee2cb17286039ff8a29096367013d998b6aaa3f4765529b"], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4008080) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f00000002c0)}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="7a2f60aa94a7ee6b4e481136413b480b"], 0x28}}, 0x2000c058) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) unshare(0x8040480) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f0000000000)={0x24, @long}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2m47.333599803s ago: executing program 4 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x14, 0x0, 0x111, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @empty, 0x1}, 0x1c) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc, 0xffffffff}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xc49b, 0x30}, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0"], 0xfce) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000003100)=""/4083, 0xff3}, {&(0x7f00000007c0)=""/177, 0xb1}, {&(0x7f0000000b40)=""/141, 0x8d}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4120, 0x1018}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f00000009c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/222, 0xde}, {&(0x7f0000000280)=""/94, 0x5e}, {&(0x7f0000000880)=""/191, 0xbf}, {&(0x7f0000000a40)=""/231, 0xe7}], 0xf}, 0x2140) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_delrule={0x1c, 0x21, 0x400, 0x70bd2a, 0x25dfdbff, {0xa, 0x80, 0x0, 0x7, 0x7, 0x0, 0x0, 0x3, 0x10}}, 0x1c}}, 0x0) 2m46.898855226s ago: executing program 4 (id=46): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 2m46.11112381s ago: executing program 4 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200a0, 0x88c9}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8}}]}]}]}, 0x44}}, 0x800) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r4}, 0x10) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000e40)={{r2}, r5, 0x8, @inherit={0x58, &(0x7f0000000480)={0x1, 0x2, 0x3, 0x9, {0x4, 0x6, 0x9, 0x2, 0x9}, [0x3c, 0x8]}}, @devid=r6}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000440)=[{r9, 0x40}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98) recvmsg$can_raw(r8, &(0x7f00000003c0)={&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000300)=""/17, 0x11}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/174, 0xae}, {&(0x7f0000000940)=""/122, 0x7a}], 0x6, &(0x7f0000001ec0)=""/181, 0xb5}, 0x2102) write$nci(r9, &(0x7f00000001c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x1, 0x2, 0x1, 0x8, {{0x0, 0x10001, 0xb0, "9748790a26168815865815f843f09101cada18e6783d0538575d34aa13808d7fefe135ff2bd40451411d0d7b5456b3ecc9719354c62ee7916faea1beee13f2d8c67db69f28295e56a9a6024bb2d752266b73591833b94ba85ebfc56160273cf3fba1c1f635bd89187c52b541328bdb7972afb85df368464704beea161f1cd629d575e45cdca8dc08ee978002fb0ff5ced8e18171b5acf456069ed2b45eb4dd823e5b648765cbfd6897ffd6a66ede54e9"}, {0xff, 0x6e, 0xa0, 0x8000, 0x0, 0x8000}}}, 0xc4) unshare(0x24000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000430001002dbd7000fbdbdf251c000000060001"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) 2m45.071978426s ago: executing program 4 (id=67): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="740000000008010400002220bde89be69a6ef11298f100000000000002000005140004800800024000000003080002400000c2120900010073797a3100000000050003002f0000002400048008000240ece482b2080001400000007f08000240000108000240000000050900010073797a31000053238056e84cae8cdd8b09a9156296171740c72dcf08"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0c00990004000000190000000a00f50050505050505000000a00f500d97d7fddae3a00000a0034000101010101010000"], 0x4c}}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c0300002100000429bd70ffffffffff007f0000000000000e000a000000000004c0080000000000000000000100097e0ddfe1f430d600"/71, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="b26b6e00020000003401110000000000000000000000000000000000fe80000000000000000000000000003800000000000000000000000000000000fc0000000000000000000000000000003c030000ff3400000a000200ff02000000000000000000000000000100000000000000000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000016c0100000535000002000a00fc01000000000000000000000000000164010101000000000000000000000000e00000020000000000000000000000002001000000000000000000000000000132030000043500000a000a00ac1414bb000000000000000000000000ac1e000100000000000000000000000020010000000000000000000000000002fe8000000000000000000000000000aa320300000535000002000a0008001e000500000010000a002cbd70002dbd7000020000002400090004000000000000000800000000000000040000000000000005000000000000000a0010000000000000000000300017000500000029bd70002cbd70000004000028bd70000900000002000000ef000000fcffffffff030000ff01000008001800030000000c0015005c07350001000000760002006c72772d73657270656e742d6176780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070010000b170bb651d96d92d222f261a3ce16965d776944bd8b2e232b7b1d7fcec0022c4506818a31c7f731bb61beffdd0920000c4000500ac14143b000000000000000000000000000004d46c0000000a000000000000000000000000000000000000000135000000000900080000000100000010000000fc000000000000000000000000000001000004d22b0000000a00000020010000000000000000000000000001ff3400000303070009000000ff0700000100000000000000000000000000000000000001000004d63300000002000000ac1414bb00000000000000000000000003350000020300000010000009000000ffffffff"], 0x34c}, 0x1, 0x0, 0x0, 0x4000005}, 0x804) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000000)=0x1ffffd, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket(0x14, 0x2, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r11) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24008084) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r9, 0xffffe000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2m43.813288849s ago: executing program 4 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x80000000, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 2m28.715347204s ago: executing program 32 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x80000000, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 3.668946775s ago: executing program 5 (id=1622): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x128}, 0x40000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r12, 0x1, 0x2a, &(0x7f0000000300)=0x4, 0x4) recvmmsg(r12, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x32c1}], 0x1, 0x2, 0x0) sendmmsg(r11, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}}], 0x2, 0x4040081) (async) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) close(r0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 3.41692589s ago: executing program 0 (id=1624): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x9, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x400}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000540)=@framed={{}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x4, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf2505100000e9e1020008000000080002000100000008000400060000000500050009000000f54a9e2772db0d75c0938504eb7585a77e2c928628cde171567b5a29f0c01956bda44f2fa2a3a0c41a4b3a8e2e1484158398468f534f23d7592306e0f0b45998ece37e116e865ca775db2da0cb94b991759c0e54edbd1a94ca5c1df66a03202c37090ad7cc4ca94777ddd5ea771ba440acef9130a007a26074a6cfc0047f0a48eee2ade5d82864cd7592cd54894abae84bfe3edb1398936e5f791963b9f720f039b6992edfe3930d9d4a29fad8516aba1e8971ad3a241427b924271eba88db5deb3f"], 0x34}}, 0x841) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x20000400) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r5, 0x0, &(0x7f0000000300), 0x80800) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x414e}], 0x1, 0x6) 3.195439274s ago: executing program 5 (id=1626): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000600)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x40042) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="13ffffdeb2fc5f", @ANYRES16=r4, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000280)=0xe8) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000002840), r5) 3.046054718s ago: executing program 5 (id=1628): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0x3c}}, 0x0) 2.758628044s ago: executing program 5 (id=1630): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)={0x3c, r2, 0x1, 0x170bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe0307dcb63f81144}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x35dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffffffd}}]}, 0x60}, 0x1, 0x7}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000000c0)={'xfrm0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r8, 0x10c, 0x1, &(0x7f0000000000)=0x5794, 0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700001000abd7000f7dbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c0001800500090007"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.129243283s ago: executing program 1 (id=1639): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r1}, 0x38) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4e21, 0x401, 0x4e24, 0x0, 0x2, 0xb0, 0x20, 0x76, 0x0, 0xee01}, {0x0, 0x7f, 0xf, 0x4, 0x8000000000000001, 0xfffffffffffffff9, 0x6, 0x7fffffff}, {0x5ec18add, 0xffffffffffffff7f, 0x100000000, 0x8e40}, 0xffff, 0x6e6bb8, 0x0, 0x1, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d6, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3509, 0x0, 0x0, 0x9, 0x7, 0x7, 0x1}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0x3, 0x5, 0x8}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'wg2\x00', 0x100}) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 2.054190041s ago: executing program 5 (id=1641): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x9, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x400}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000540)=@framed={{}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x4, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf2505100000e9e1020008000000080002000100000008000400060000000500050009000000f54a9e2772db0d75c0938504eb7585a77e2c928628cde171567b5a29f0c01956bda44f2fa2a3a0c41a4b3a8e2e1484158398468f534f23d7592306e0f0b45998ece37e116e865ca775db2da0cb94b991759c0e54edbd1a94ca5c1df66a03202c37090ad7cc4ca94777ddd5ea771ba440acef9130a007a26074a6cfc0047f0a48eee2ade5d82864cd7592cd54894abae84bfe3edb1398936e5f791963b9f720f039b6992edfe3930d9d4a29fad8516aba1e8971ad3a241427b924271eba88db5deb3f"], 0x34}}, 0x841) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x20000400) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r5, 0x0, &(0x7f0000000300), 0x80800) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002200000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) poll(&(0x7f0000000380)=[{r6, 0x414e}], 0x1, 0x6) socket$netlink(0x10, 0x3, 0x0) 2.043138849s ago: executing program 3 (id=1642): setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e8100a13e7fcca4310085ea82993babea06255779d0dfa66f589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae9dade5d7a11f0f2bbdec62e2df3daf9875c79c6763fdcb88306000000bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd409823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a00", 0xdd}, {&(0x7f00000012c0)="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", 0xf23}, {&(0x7f0000000100)="ecf19571", 0x4}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x844) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x70}}, 0xc810) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x4, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES8=r4, @ANYRESOCT=r1], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa, 0x2}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) recvfrom$unix(r5, &(0x7f0000000440)=""/116, 0x74, 0x100, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1}, 0xfe, 0x1, 0x0, 0x0, "c49bc517a6bdb5a8c574326b3d1a2cd328971128f016c3926cf5c07e97913f4927acf5c385672f9e15f9f096c4a8a50682532ce2971dca06656d719f72acb5a4"}, 0x48}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}, {&(0x7f00000005c0)="a79d8d0c55cbecaa2a857ff2c4fa57710ceeef871a2aa1e84841677c39d451579aeccd95cc4694d1518997be0aeb8556e3e676b102c1b8e579a94f9cce8b9e2d127877b8ed66a4d297eccd6d55961fa06481d9b065fc0419d43629eb0527d1411a8f0cfb249d81cd218fd158b717f1fe308c0b12019636f289c915317439e55564b0c27d55e662fcd5eed8cd24cfdb14394bc715a7d7168a59e6659119a42a084ee4bb927fae4f3030d9728beb345f009f62e7610a41926f9bee8d94f21560f3f3d94800"/206, 0x93}], 0x2, 0x0, 0x0, 0xc9e}, 0x8000) 1.952369209s ago: executing program 0 (id=1643): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1d8, 0x194, 0x194, 0x1d8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xd8, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x4, "744e0c8559c5a9128a6df634790dc3271e33969086733af137c08495d02d"}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x32, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xedc623580015bdcb, 0x110, r2, 0xe5c10000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="7859bc0428ee3cad489a1d7737278718cc14aef908082e77e1a783db25e0a95af49cc0991c60972417cfa30825621177dab7bc67ae5469c63de5f6376bff1afb2d929a732e97045d1451463aeb33d2099f31e72c2856f26fee905f037ecbbda26a70b6a49b8d107686aa29dae5fc1924b68bea8efc8e1d7757a037d4cec5848d921814460718e74831fc4500e579cdbc6a43ad185b8a1afdc8c8f4eb48c5bf1957b747e4386b1a486b99e492304fed99b6e84e741edf3fb97ecf53d51426708f3720638172664c9c14e9afda2a81f3a47116f41d9c480464f2b2abd001701e93d38c3ea0254ac70f4261", 0xea) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@mpls_delroute={0x30, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "498eb9b37af76d8db5fdf87c372d"}}]}, 0x30}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x8, 0x200}) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r7, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r7, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) write(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r10, &(0x7f0000000100)=""/12, 0xc) 1.680685527s ago: executing program 1 (id=1646): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r6, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) (async) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) (async) close(r1) (async) sendto(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xfffffff8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000100)={r8, 0x7}, 0x8) 1.506984151s ago: executing program 1 (id=1648): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="00220400", 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48000) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f00000006c0)=@ethtool_ringparam={0x10, 0x1, 0x4, 0x8596, 0xd89, 0x7, 0x8, 0x4, 0x7fffffff}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) unshare(0x10000900) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.17129936s ago: executing program 5 (id=1653): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x9, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x400}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000540)=@framed={{}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x4, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf2505100000e9e1020008000000080002000100000008000400060000000500050009000000f54a9e2772db0d75c0938504eb7585a77e2c928628cde171567b5a29f0c01956bda44f2fa2a3a0c41a4b3a8e2e1484158398468f534f23d7592306e0f0b45998ece37e116e865ca775db2da0cb94b991759c0e54edbd1a94ca5c1df66a03202c37090ad7cc4ca94777ddd5ea771ba440acef9130a007a26074a6cfc0047f0a48eee2ade5d82864cd7592cd54894abae84bfe3edb1398936e5f791963b9f720f039b6992edfe3930d9d4a29fad8516aba1e8971ad3a241427b924271eba88db5deb3f"], 0x34}}, 0x841) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x20000400) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r5, 0x0, &(0x7f0000000300), 0x80800) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x414e}], 0x1, 0x6) 1.094014683s ago: executing program 3 (id=1655): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0x3c}}, 0x0) (fail_nth: 3) 996.193579ms ago: executing program 2 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r4) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="93800000688200005c001280090001007866726d000000004c00028008000200040000000800010002000000080002000200000008000100030000000800020002000000080001000300000008000200030000000800010004000000080001000100000008000500", @ANYRES32=r1, @ANYBLOB="08001f0007ffff00"], 0x8c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 947.452614ms ago: executing program 0 (id=1657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) (rerun: 32) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) (async, rerun: 64) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000) (rerun: 64) 683.159743ms ago: executing program 3 (id=1658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x6b, 0xa238, 0x7, 0x6, 0x2, 0x81}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$inet(r1, &(0x7f0000000680)="3d8c165acce06fb4", 0x8, 0x0, &(0x7f0000001100)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000240)=""/129, &(0x7f0000000000)=0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 623.770846ms ago: executing program 2 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffff62f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x4004085) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x40080) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg(r2, &(0x7f0000001900)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000001780)=[{&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/241, 0xf1}, {&(0x7f00000014c0)=""/74, 0x4a}, {&(0x7f0000001540)=""/105, 0x69}, {&(0x7f00000015c0)=""/15, 0xf}, {&(0x7f0000001600)=""/92, 0x5c}, {&(0x7f0000001680)=""/11, 0xb}, {&(0x7f00000016c0)=""/133, 0x85}], 0xa, &(0x7f0000001840)=""/143, 0x8f}, 0x40002161) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000001a40)={r2, &(0x7f0000001940)='\x00', 0x4000, &(0x7f0000001980)={@align=0x45, {0x2, 0x4, 0x5992c643, 0x100000001}}, 0xe, &(0x7f00000019c0), &(0x7f0000001a00)=0x7}) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x44100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4217475138153942) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000001d40)={&(0x7f0000001b80), 0xc, &(0x7f0000001d00)={&(0x7f0000001c00)={0xfc, r3, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfff, 0x49}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x78f8}, @NL80211_ATTR_VENDOR_DATA={0xbc, 0xc5, "6c2cdee53afd9b5544beb2ff67c50403bcb6c7d62e84568790ba4b734c113735ab2e480148179d4e3d711a95cdc93aed408b19eb134730f5430e3155c396717582345d4aba427b6d92247d0e03719ba60dd2f89a59527dbd94b1f4fda6658a47a34e94005e5158ceb6105bd2f1c42c35b52b1df3be43d68e5edb37f7eeb9b368370e57dc1058d33487cc54d0cb64fff46efade8357413161274c6bbc8f64a837a5acabbc65bdbe695d56d3cd032e25911b7f60304fcdbca2"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0x8010) (async, rerun: 64) sendmsg$nl_crypto(r5, &(0x7f0000001f00)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001dc0)=@getstat={0xe0, 0x15, 0x4, 0x70bd2c, 0x25dfdbfc, {{'morus1280-generic\x00'}, '\x00', '\x00', 0x2400, 0x2000}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x894}, 0x4004) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001f40)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002000)={'syztnl2\x00', &(0x7f0000001f80)={'ip6_vti0\x00', r7, 0x4, 0x2, 0x6, 0xabe, 0x10, @loopback, @loopback, 0x8, 0x7800, 0x7fff, 0x4}}) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000002680)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f0000002080)={0x5a4, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x1da, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x8}}, @random={0x8, 0x81, "3ddf23283ad440343da79433893cbacb856ea2cb5a3643125f155f416793456d7df4a3592da91eba05fb7cdd4ef756114ed38cf648150e90b8cc14a06550f4544e511251be2310d63fc3aae545d343a3b50316a430be27a112756b9f41b7d09ace70d6a3b8d4b07556b7c54672132a35ce2236f0a553d9636a311e221eb10a059e"}, @random_vendor={0xdd, 0xf9, "86093b74fcf1079d2fb54f5bdbd4f658a165ec30882fc412724d13104c2922fa80ed7d9abc775952bd93efd26883e231398b068952a2d1bada84d63e3fc0bc722b0f2cbee9f85bed13ce8f453cf83d23c4627b4c6dbae3b7bdd91a839d3f0d74ae2f052e0227da2542cbd886f42a8c69c12a372bf504c8606ee83ae7859561c0cd79a4234368b2945409700bb62e2c67030e3b72f3f9d7d23de76b45829774b337c3d62f355c8656a4343263e7af5ae77ec6a9f6264c6dd5ddc3cbc1dbdd5f7f142ae863c52a7b361826d026e68d52951ea4b9450520d24caf86efe362bfc9cff2ffd129b0c0843108fef8ec3af406ebc4650440fb40b47fa4"}, @mic={0x8c, 0x10, {0x96, "0f13eaec1262", @short="e34e24460b3cc591"}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x33, 0x0, @device_b, 0x3, 0x3, 0xfffffff0}}, @random_vendor={0xdd, 0x1e, "f65580b391db8712858b2bb8d51f347e7daac80f9532657accfa272fdd4a"}, @chsw_timing={0x68, 0x4, {0x2, 0x7}}]}, @NL80211_ATTR_IE={0x1b7, 0x2a, [@random={0xa4, 0xfa, "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"}, @sec_chan_ofs={0x3e, 0x1}, @dsss={0x3, 0x1, 0x70}, @ibss={0x6, 0x2, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x0, 0x9f}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x9}}, @mic={0x8c, 0x10, {0xa65, "5da1fa0f80bc", @short="7676ca3511c4d55a"}}, @random_vendor={0xdd, 0x8a, "71c08ef4fae151c3e93495430f48cc4ca9da629cea7b9f75b376924c2aad6d6fa177c3dfeeb375d76303a0e79fea6963d7ddbe9577f9c015ef63502142c30d6de33d440f1a964b161a2a21cc88f01235972e47670f7baa0903d0a20c035cd2ecc98a6346c6d7c2046d69d39cbec55cc3d39e3cf574aa32c6c57db0de144d86c17c56782b5df502de5b1a"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "93691f1137aa7bbbcf815dfc53"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_REALM={0x8a, 0xfa, "1d54379989d2c3c2f3d6045451211e1df49abd2f5494318fb630f210fbd20ca4c2cf4079feb057295d27e857c6f818814e20486d509ce196144bb9610e32483b259b83f2a3b5775044258bcbff982ec180b1cae0fa18c0ad85e6293ac5b045fff9b40c213401e25c6856619bd33353fccfc0cf5a1ef6a9b1dddfd40b614c035297a19b813a2f"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "51ff66c686"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "40c372281aa94f7601b313f4a06789b1"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "74038d7a9baf3288d4ca1a98a77452"}, @NL80211_ATTR_FILS_ERP_REALM={0xf1, 0xfa, "fbcc139bdac39f97e5df4f12c6ed273cfb40e0a4cca63f83753f024f671f95b46bc66ce48381b4790c1da1de76ca98fdd3f88379d2a085b903daa75584a44af02ca3a97e4abf0fbe7f4bacf5c954eef1b34d10f1c0332938b25438e9d3c55255a7b10607a614cea83ebf4f4dfc99b3a3141cc9c142ff08f321e83251d2ce83ca104805503582e62ca38b88e17a84a2c0cf577f281432293a6847104d8b1eaa43ed250204c011b5e97eeef58a02744df7a5b42f3b4735eff477a3754b296614672862bbbd4df75e5c628025c14f3d462a930d856ee1649e4328d4e1d7cdaaef95b3473b480734bd537ade93840b"}, @NL80211_ATTR_FILS_ERP_REALM={0x14, 0xfa, "631420a85628353aa0064fb728081ed3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "b5678012"}]]}, 0x5a4}, 0x1, 0x0, 0x0, 0x4008004}, 0x40) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000026c0)) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x34, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfd7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) write(r2, &(0x7f0000002800)="a964b8f1983a20495d2a4e06bd667c027168de46a5d64d51fb8dce46c6fd9d8be3178508c25cd75a5bae508dc4e5ae60036faea0880bf0c1e76c08aa45d86669f9244cc80efd1c9d7eefef8e67545d7c08171abcd13f2f573e97c02c82bd6a820aca5a330809450153530ac0aab9553ac8e30366273d52b29b267f71", 0x7c) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000028c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000002a80)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002900)={0x110, r9, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x180}, 0x8080) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d40)={r5, 0x0, 0xa9, 0x73, &(0x7f0000002ac0)="5433ab16bb7c6d7b67074c982446838ce98c90f9c6ba8cf72b078eb66af5ad4a41c1c9e08165c8f11be999a0ae7eba13a30d9fa4e1ea36fdb36602015d9c85f1ee9174b623279bfa572d3630c2dd2765466785cc2164bd8051e5c145f42e1468f3bbbd47b92fcda1770271ce7e3e92b769514b19dbf8059d868f2f9011d8a02dcdd563639698afcb30bfad44bf7e2a86fa35600b4206dd24d89e0a91a2b60b04f516009a5e05ccd82c", &(0x7f0000002b80)=""/115, 0x7, 0x0, 0x8b, 0x42, &(0x7f0000002c00)="e0153251c18af0460ebed41e0761fc9f02153e09ad4b6589bbf818f0293efcf867e80d241931ee2377f04e8dc9059d2219235ca774d9eb96fd4b2625cef9a5e66595c89a7b0d6e86d711393bdfffad3d31737c0472f849e8b7f708045b81ae8e5a674940532ac80abb46c4ce8f7caa74fc017000645d9401b3033303ab66de3fb9cf10cc1c4e97f2b0ba6b", &(0x7f0000002cc0)="fa4c37640d6df4683571cc5b91a48f36f0e5c7c1e3d1554f92f51a33290465b7f903ac4b9220e3aa690d8f1f5c990788e4a770c86f01af055a5c75a9fd5d94134ad5", 0x6, 0x0, 0xfffffff7}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)=@ipv6_delroute={0x24, 0x19, 0x20, 0x70bd2c, 0x25dfdbfc, {0xa, 0x20, 0x0, 0xff, 0x0, 0x2, 0xfe, 0x3}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x2c, 0x1402, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x1) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x68, r12, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xec}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x34}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x67}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc080) 531.46042ms ago: executing program 3 (id=1660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110128bd7000fddbdf25040000001400018008004d9c40d5a324050002"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000f40)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "adc292a1adf8c2f3ffb3e4bcf7665863a1"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a00000003000000090000000100000068000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000003"], 0x50) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000004", @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40004000) 505.027868ms ago: executing program 0 (id=1661): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x100000001, 0x20ecd5b9, 0x7, 0x4, 0x148}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x5, 0xb}, {0xfff3, 0xfffe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b55400040000ea0756", 0xe, 0x8c4, &(0x7f00000001c0)={0x11, 0x810b, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r8, 0x0, 0xf3a, 0x0) (async) write$tun(r8, &(0x7f0000000540)=ANY=[], 0x8b) (async) read$alg(r7, &(0x7f00000003c0)=""/85, 0x55) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x10001) 484.434031ms ago: executing program 1 (id=1662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x440dc, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x2004c0c1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000011"], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000000128011000100736974001481c7039bff0900000000000500050004000000"], 0x40}}, 0x20008040) 431.361345ms ago: executing program 2 (id=1663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg$sock(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="ac", 0x1}, {0x0}], 0x2}}], 0x1, 0x48044) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() sendmmsg$unix(r3, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="41b0", 0x2}], 0x1, 0x0, 0x0, 0x8060}}, {{0x0, 0x0, 0x0, 0xfffffffffffffff3, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x48004}}], 0x2, 0x20008811) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=r4) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040)) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0, 0x3f6}, 0x33fe0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a0000022dbd7000fcdbdf2502900045fe020005001d0001fcbcbdf7"], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 357.718612ms ago: executing program 2 (id=1664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async, rerun: 64) sendmsg$tipc(r7, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) (rerun: 64) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487", 0x2f}], 0x1}, 0x0) 337.660026ms ago: executing program 0 (id=1665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000007440)={0x0, 0x0, &(0x7f0000007400)={&(0x7f0000000000)=ANY=[@ANYBLOB="90010000", @ANYRES16=r1, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x2044854}, 0x8814) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000007280), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000007440)={0x0, 0x0, &(0x7f0000007400)={&(0x7f0000000000)=ANY=[@ANYBLOB="90010000", @ANYRES16=r1, @ANYBLOB="e36127bd7000fddbdf2504000000540001801c00028008000200b8520000080003000800000008000200560b00002400028008000400d30a000008000400a9cd0000080002000800000008000400000000070b00010069623a7767320000040002802c00038008000100070000000800030008000000080001000300000008000100070000000800010005000000fc0001800800030004000000080003000400000008000300050000001400028008000300090000000800030000000080380004001400010002004e21ac1414bb0000000000000000200002000a004e2200000004fc020000000000000000000000000001ffff000008000300240d000038000400200001000a004e2100000008000000000000000000000000000000010e0000001400020002004e247f000001000000000000000054000280080002000200000008000300000400000800010018000000080002001109000008000300e37c00000800010016000000080001000d000000080002000200000008000100170000000800040001010000"], 0x190}, 0x1, 0x0, 0x0, 0x2044854}, 0x8814) (async) 242.712336ms ago: executing program 3 (id=1666): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r8) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x8, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0x3, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r4, 0x0, 0x0) 190.209659ms ago: executing program 0 (id=1667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 169.584358ms ago: executing program 1 (id=1668): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0x3c}}, 0x0) (fail_nth: 4) 106.502875ms ago: executing program 2 (id=1669): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x9}}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x3}]}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0xf, 0x3}, {0x1, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x1}}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x1, 0x6}, @restrict={0xb, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x2e, 0x30, 0x2e]}}, &(0x7f00000000c0)=""/155, 0xb2, 0x9b, 0x0, 0xc995}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x23, 0x100, 0x2, 0x8, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, r0, 0x4, 0x2, 0x1}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='memory.events.local\x00', 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f00000002c0)) ioctl(r0, 0x8, &(0x7f0000000300)="66dcb03788317c80a42eb48b369b90a0e063d6deca16dbfe6cfc9d34f555022d7186a3d826490bc899d92eb56d88a7879fd965e1c585844aceb53bf306bd") r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r0, 0x3c, 0x7, 0x2}) pwritev(r0, &(0x7f00000017c0)=[{&(0x7f0000000380)="414dd796ed8b7937fb40cce49b30c1291a38ab02991c82cec49e1ea8eb7e42c093ad9b8495552999bf1abf04a85f8e329efedb0ab67ee0dcfcd366c18dd534ca202132ac0e0d8aad7a09c2674b5bcd51f86f0e63f4a1c7c8a3fda38e93285f17ee6170f3628c68605f8bb976a0220261a6121ee1f5f5a231075f4f1049ab4bb44734b9850addd1923ba42fc5c183a9a89fb9fc0963436cc94630bdd39c06d583b421cd08ddad0788b87b266391ee2646145ddf973994de1da9798320be5d03940c447725edc69624040ee2f479e055084453960ebf7def1c0e83c26809012275", 0xe0}, {&(0x7f0000000480)="3b114891789ea5d33a5ebe57982dc45299a34fea26d273ae302815742ec2f585cdb0e46b190ca08e68b1f8f0080e499416da77882213c003ffdb8d5df1e938cf0aa303a6327fd6a29b9a29903334ff50760fcfa04e38e584b85b6b13e852d387065fe92189a0e68f16643b801df0b33d22bfe387aed08082e89a6e90b56da07e52f789e9599ba4a6a31e68a7bb22ea360a5369e197a1857505b096e1e183a2b6aa5bec79a530f587c0ba5818b7849cd2445bbffc013787ba0b1e90", 0xbb}, {&(0x7f0000000540)="c551f9bde40be66d210670da98784019d12925b76c7c7434ae2271ecd2ff133c591e2b474158872694278bb7b6640e951a8dbb46fe7c9e9a98c17501dcf8d1b7b96badeb1368ddbb25bca6a504abd9899aebf1fa9776aad4ade33a170ef6dfcaa945f7c857db20c263148e94fff33e459ef4f1ca4d19606f0eceffef55d016521a112eef082df5abbb48a3d8416e23766d839dc0dff6adef52ef757633e46a095dddcb3faf38224d13e84d00da6d4577d2bec776c6bcc266", 0xb8}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)}, {&(0x7f0000001640)="65b18cfe32e7491945", 0x9}, {&(0x7f0000001680)="a427d22d2790", 0x6}, {&(0x7f00000016c0)="dd24c404", 0x4}, {&(0x7f0000001700)="a0d7dbf4d9b2711475e0b73c7b920bf13f9cc920b989b6795e074a407adbc51ac0c3d085fa0ba9cdeecbe26faff47296c5982ae5dec1e39bb4c7e5dcf9476818ba07a9bfc78fdce903dafee2c15b029ae41677b277fdd154a81ca45e8f7d0c586d622056f59d341a75900bfa0a715afe3b9db208b475260203c9f5ffff375aa1ebbf538b5daf7eeee75f4f6b4d8d2faf6a5c74d2f70a94b96affa18f56e29b9dab5b5a0c48fafa9640751c20bbcb1a8816028fb8", 0xb4}], 0x9, 0x9, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) writev(r6, &(0x7f0000001cc0)=[{&(0x7f0000001880)="a46687ed8d81c03b151923235402255fa4be070dcf2741fae3f2d6a2f3eed149fec64a559bb8682a2c5c9a88d2cbe0da593517ae7a04a40b3bd5e5950fcb708332d294b0a07cbe7cc623379ebf751d35fb7beaba3e7d1aee6fe83c224259766623fa123886a806f72f4fe95d04da5eda70750a91ba78225fbdd2c1a6eb2fdcc38a13df48d0bd2e2c5aa9", 0x8a}, {&(0x7f0000001940)="6ced446727de77702ea0bdda9f60a9bdedc5a9174e300343e8f498cb8a5c1ba1fdc7f1271bd0cb4f16f576d6184b52f5de083d053ec571b72e475f2ea2e54997f1844fbebc7931af2aae06bf155846278e3b91484d72454f70e3f11f27b47236b91f5351ed4fdfb2d7d42111245f2484b8082a16cb9a0db99a25e6", 0x7b}, {&(0x7f00000019c0)="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", 0xfe}, {&(0x7f0000001ac0)="284ead08294d263bf879edb0447fb4ec56267bffa112e4b0fec3c924bce656e21cbcab4ae81226474ff60338286b0f2460124c238a032e5008ace2655711dce0c85f955030167d59a43eba430fafdea02dbb28413a4bbb2640f9ed321dea47e9a5", 0x61}, {&(0x7f0000001b40)="da781a9259d91706fa3478c069694b574cf041a5b6f4a25f6cf768aeb370c67cad37023f15daec86256ce4f4421b4c87745cbf0010a7245f463dabda7bf2901fa6aab3704dd1fb67a9b38797337e2b5bff362b9af3c9fee8c97c343804684651acabad48dfb346feac163fe717e4804ef81695779c5aeb32b0181df93b3ab5578ef0922f42b6837dffdf67", 0x8b}, {&(0x7f0000001c00)="ee4be851c99eb3a7495cc542d8fdccb0b8ec352e8f97630fc661f521d9403f318bb347efbedd6a40d91c532ac84bdeda763abb1a4393dbacca893a142c7d71574df4985b5875b832e72260dcde46de80669e11d9e2e028ddcef48ab7366099d18aab1cca2437f4c9258a790d1ea5ccc00facf53bdf227b91bec9f4469c04f360624d16841bb53a85b9881a895416f06d38826a14e2ecf964b66cd368aabac227675fe3dbdf43bff263cb22ef8e9f92deef1055", 0xb3}], 0x6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x60, 0x1403, 0x800, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000001e80)={0x10}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000002100)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001f00)={0x1a0, 0x1403, 0x400, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004002}, 0x20000014) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000002140)={0x0, 0x1, 0x0, 0x7}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000002180)=0xffffffffffff238b) connect$inet6(r2, &(0x7f00000021c0)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000002200)) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, r7, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040c0}, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000002600)={&(0x7f0000002400)=0xf049, 0x0, &(0x7f0000002440)=[{}, {}], &(0x7f00000025c0)}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000024}, 0x4040) connect$netrom(r2, &(0x7f0000002740)={{0x3, @bcast, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept4(r5, &(0x7f00000027c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000002840)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000002880)={0x0, 0x5b, "a6fcfa0e71a2bdb3a48ad99f8de837a691cad8f6f85cc64698f8151150f8893e027c4f37ccc3d9cd0b613fdc69987e2fd0533cfbc566a941830c4b29de12bf291d57fbd767b8480bc7110dde7a0d73a53c1a26f0511a1af3a32c1a"}, &(0x7f0000002900)=0x63) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000002940)={r10, 0xfbdc, 0x2}, 0x8) 17.368533ms ago: executing program 2 (id=1670): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x400}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000400"/21], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x4, 0x10001, 0x5, 0xc89, 0x10002, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c80)=[0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1863000005000000000000009635ec661800000000001800000000000000000018170000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000001000000186500000b0000000000000000f8ffff6c940c00f0ffffff85100000062000008520000003000000185600"/64], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}}}]}, 0x38}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x8400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0x3c, 0x0, &(0x7f0000000000)="100000000000000000000000000031984604ad9ee173b0a6135b651242c1352b5c2e884e99a734958b77811c6cf8ec73f80066bbe39089399245fee6", 0x0, 0x203, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r10, 0xc0385869, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000001c0)='}\x00', 0x4000, &(0x7f00000003c0)={@_ha_fsid={[0xb391, 0x6]}, {0x1, 0x8, 0x8, 0x401}}, 0xc5, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)}) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f0000000f00)={0x0, 0x0, 0x6, r4, 0x4}, 0xc) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xe359, 0x101}, &(0x7f0000000240)=0x8) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=@flushsa={0x7c, 0x1c, 0x400, 0x70bd25, 0x25dfdbfe, {0xff}, [@algo_auth={0x57, 0x1, {{'blake2b-256-generic\x00'}, 0x78, "7edcf25b4db9473d52857db2a5f653"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2d, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0x7ff, 0xf2, &(0x7f0000000580)=""/242, 0x41000, 0x11, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x0, 0x1000, 0xa1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000880)=[r11, r0, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000980)=[{0x4, 0x3, 0xc, 0x6}, {0x3, 0x5, 0xc, 0xa}, {0x3, 0x2, 0x3, 0xe}, {0x5, 0x2, 0xb, 0x1}, {0x3, 0x4, 0x0, 0x3}], 0x10, 0x436}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r13, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 7.17119ms ago: executing program 3 (id=1671): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x840) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4000, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES8], 0x20, 0x46015}, 0x8006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5e, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5e, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) (async) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000001c0)={r7}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa963bffff5, 0x13012, r0, 0x0) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa963bffff5, 0x13012, r0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x800) connect$pppl2tp(r11, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x4, {0xa, 0x4e24, 0xfffff00f, @mcast1, 0x8}}}, 0x3a) sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) shutdown(0xffffffffffffffff, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1a, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x800007, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x8, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendto$inet6(r1, &(0x7f0000000800)="4103082c111648040102", 0xa, 0x880, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0xd, 0x3f, 0x0, 0x8, 0x101, 0x2}}, {0x8, 0x2, [0x1ff, 0x600]}}, {{0x1c, 0x1, {0x0, 0xff, 0x9, 0x26af, 0x2, 0x8, 0x5, 0x3}}, {0xa, 0x2, [0x5d57, 0xfb, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0x3, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x0, 0x0, 0x0, {{0x6, 0x3, 0x2}, {0x5, 0x80, 0xc, 0x7fffffff}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xd5f, 0x9, 0x7fff}}}]}]}]}}]}, 0x6c}}, 0x4840) socket$packet(0x11, 0x3, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) kernel console output (not intermixed with test programs): st mode [ 113.228011][ T6593] tipc: Started in network mode [ 113.241783][ T6593] tipc: Node identity 1ab08fc6d06d, cluster identity 4711 [ 113.259090][ T6593] tipc: Enabled bearer , priority 0 [ 113.289744][ T6588] netlink: 84 bytes leftover after parsing attributes in process `syz.3.157'. [ 113.360680][ T6586] tipc: Resetting bearer [ 113.442554][ T6586] tipc: Disabling bearer [ 113.757448][ T6617] warning: `syz.2.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.035472][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 114.135826][ T6631] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 114.143540][ T6631] netlink: 'syz.2.171': attribute type 7 has an invalid length. [ 114.182237][ T6631] netlink: 'syz.2.171': attribute type 8 has an invalid length. [ 114.204679][ T6631] netlink: 208 bytes leftover after parsing attributes in process `syz.2.171'. [ 114.237294][ T6631] NCSI netlink: No device for ifindex 1073545264 [ 114.551160][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.178'. [ 114.896655][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 115.005679][ T6680] netlink: 5 bytes leftover after parsing attributes in process `syz.3.183'. [ 115.038484][ T6680] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 115.109455][ T6680] ..0ªî{X¹¦: entered allmulticast mode [ 115.115886][ T6680] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 115.359285][ T6695] trusted_key: syz.0.186 sent an empty control message without MSG_MORE. [ 115.478894][ T6703] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 115.533536][ T6703] netlink: 5 bytes leftover after parsing attributes in process `syz.3.188'. [ 115.572613][ T6704] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 115.937323][ T6721] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 116.015782][ T6722] veth5: entered promiscuous mode [ 116.054843][ T5980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.184614][ T5933] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.650652][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.693022][ T6752] __nla_validate_parse: 3 callbacks suppressed [ 116.693040][ T6752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'. [ 116.851020][ T6757] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 117.488067][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.502884][ T6787] lo speed is unknown, defaulting to 1000 [ 117.515085][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.521627][ T6791] rdma_op ffff8880569d31f0 conn xmit_rdma 0000000000000000 [ 117.538450][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.568257][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.576248][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.616384][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 117.688076][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 117.733686][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 117.759049][ T6795] netlink: 'syz.0.206': attribute type 2 has an invalid length. [ 117.791099][ T6795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.206'. [ 117.812326][ T6786] lo speed is unknown, defaulting to 1000 [ 118.075603][ T5905] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 118.293884][ T6817] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 118.307797][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 118.366832][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'. [ 118.392747][ T6813] tipc: Enabling of bearer rejected, failed to enable media [ 118.989248][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 119.017427][ T6846] IPv6: addrconf: prefix option has invalid lifetime [ 119.133359][ T6851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.536788][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 119.537888][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.562988][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.570691][ T6786] bridge_slave_0: entered allmulticast mode [ 119.579472][ T6786] bridge_slave_0: entered promiscuous mode [ 119.589053][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.596550][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.603860][ T6786] bridge_slave_1: entered allmulticast mode [ 119.613346][ T6786] bridge_slave_1: entered promiscuous mode [ 119.664512][ T5834] Bluetooth: hci5: command tx timeout [ 119.875844][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.936051][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.953579][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 120.118367][ T6786] team0: Port device team_slave_0 added [ 120.157495][ T6786] team0: Port device team_slave_1 added [ 120.264610][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.282596][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.378876][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.438183][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.457205][ T6906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.226'. [ 120.466630][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.495604][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 120.519666][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.722744][ T6786] hsr_slave_0: entered promiscuous mode [ 120.768392][ T6786] hsr_slave_1: entered promiscuous mode [ 120.779289][ T6786] debugfs: 'hsr0' already exists in 'hsr' [ 120.804444][ T6786] Cannot create hsr debugfs directory [ 121.229380][ T6932] erspan0: entered promiscuous mode [ 121.280904][ T6932] batadv0: entered promiscuous mode [ 121.744713][ T5834] Bluetooth: hci5: command tx timeout [ 121.866419][ T6786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.968314][ T6786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.002556][ T6786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.033610][ T6786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.144635][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.399471][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.474848][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.528569][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.535791][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.602709][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.609997][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.711815][ T6976] syzkaller0: entered promiscuous mode [ 122.730575][ T6976] syzkaller0: entered allmulticast mode [ 122.773913][ T6786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.796101][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 122.927536][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 123.014651][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 123.023770][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 123.275755][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 123.511878][ T7002] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 123.529599][ T6786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.584540][ T7002] netlink: 224 bytes leftover after parsing attributes in process `syz.1.243'. [ 123.777189][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 123.832379][ T5834] Bluetooth: hci5: command tx timeout [ 123.981800][ T7021] pim6reg99999999: entered allmulticast mode [ 124.185610][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 124.303532][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 124.468804][ T7028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.024032][ T6786] veth0_vlan: entered promiscuous mode [ 125.113508][ T6786] veth1_vlan: entered promiscuous mode [ 125.223487][ T7050] lo speed is unknown, defaulting to 1000 [ 125.300739][ T7063] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 125.507343][ T6786] veth0_macvtap: entered promiscuous mode [ 125.559194][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.252'. [ 125.592529][ T6786] veth1_macvtap: entered promiscuous mode [ 125.899067][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.915017][ T5834] Bluetooth: hci5: command tx timeout [ 125.977103][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.254233][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.273960][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.611143][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.647829][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.137579][ T7108] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 127.206495][ T7108] ..0ªî{X¹¦: entered allmulticast mode [ 127.212469][ T7108] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.350081][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.404706][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.501716][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.535318][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.652491][ T7121] lo speed is unknown, defaulting to 1000 [ 128.362126][ T7159] __nla_validate_parse: 7 callbacks suppressed [ 128.362145][ T7159] netlink: 5 bytes leftover after parsing attributes in process `syz.3.271'. [ 128.413003][ T7160] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 128.420740][ T7160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.270'. [ 128.441613][ T7160] NCSI netlink: No device for ifindex 0 [ 128.466200][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 128.650843][ T7159] ..1ªî{X¹¦: renamed from ..0ªî{X¹¦ (while UP) [ 128.661317][ T7159] A link change request failed with some changes committed already. Interface ..1ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 128.736457][ T7174] lo speed is unknown, defaulting to 1000 [ 128.747772][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 128.964022][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 129.429189][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 129.675834][ T7208] netlink: 'syz.5.281': attribute type 2 has an invalid length. [ 129.752944][ T7208] netlink: 1696 bytes leftover after parsing attributes in process `syz.5.281'. [ 130.078136][ T7218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.085653][ T7218] IPv6: NLM_F_CREATE should be set when creating new route [ 130.092998][ T7218] IPv6: NLM_F_CREATE should be set when creating new route [ 130.159287][ T7220] tipc: Started in network mode [ 130.189412][ T7220] tipc: Node identity 6675c44fe3e8, cluster identity 4711 [ 130.216186][ T7220] tipc: Enabled bearer , priority 0 [ 130.254406][ T7223] syzkaller0: entered allmulticast mode [ 130.272026][ T7220] tipc: Resetting bearer [ 130.566840][ T7225] tipc: Disabling bearer [ 130.641016][ T7234] lo speed is unknown, defaulting to 1000 [ 130.641710][ T7239] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.288'. [ 130.696077][ T7239] netlink: ct family unspecified [ 130.838325][ T7243] tipc: Enabling of bearer rejected, failed to enable media [ 130.864516][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.904011][ T7242] syzkaller0: entered promiscuous mode [ 130.905329][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'. [ 130.910441][ T7242] syzkaller0: entered allmulticast mode [ 130.930588][ T7243] netlink: 'syz.5.290': attribute type 1 has an invalid length. [ 130.960526][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 131.032984][ T7242] gtp0: entered promiscuous mode [ 131.049077][ T7242] gtp0: entered allmulticast mode [ 131.315203][ T7263] tipc: Started in network mode [ 131.320500][ T7263] tipc: Node identity ba145c3976b5, cluster identity 4711 [ 131.345706][ T7263] tipc: Enabled bearer , priority 0 [ 131.371759][ T7268] tipc: Disabling bearer [ 131.944652][ T7299] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 132.028295][ T7298] lo speed is unknown, defaulting to 1000 [ 132.292721][ T7301] bond2 (unregistering): Released all slaves [ 132.792627][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.068572][ T77] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.090990][ T7339] netlink: 'syz.5.307': attribute type 11 has an invalid length. [ 133.139317][ T7339] netlink: 'syz.5.307': attribute type 23 has an invalid length. [ 133.280830][ T10] IPVS: starting estimator thread 0... [ 133.287366][ T7341] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 133.394878][ T7344] IPVS: using max 27 ests per chain, 64800 per kthread [ 133.586254][ T7339] gretap1: entered promiscuous mode [ 133.999058][ T77] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.088198][ T7358] __nla_validate_parse: 5 callbacks suppressed [ 134.088216][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 134.248125][ T77] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.324823][ T7368] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 134.364433][ T7368] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 134.372131][ T7368] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 134.454428][ T7368] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 134.462142][ T7368] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 134.496101][ T7368] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 134.602159][ T77] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.535433][ T7405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.542735][ T7405] IPv6: NLM_F_CREATE should be set when creating new route [ 135.876852][ T7425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.013406][ T77] bond0 (unregistering): Released all slaves [ 136.044621][ T7437] netlink: 120 bytes leftover after parsing attributes in process `syz.2.331'. [ 136.053905][ T7410] tipc: Enabling of bearer rejected, failed to enable media [ 136.068904][ T7420] validate_nla: 45 callbacks suppressed [ 136.068940][ T7420] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 136.110987][ T7420] netlink: 'syz.1.328': attribute type 3 has an invalid length. [ 136.123012][ T7420] netlink: 224 bytes leftover after parsing attributes in process `syz.1.328'. [ 136.410267][ T7448] netlink: 5 bytes leftover after parsing attributes in process `syz.3.334'. [ 136.430803][ T7451] netlink: 5 bytes leftover after parsing attributes in process `syz.1.335'. [ 136.470144][ T7448] ..0ªî{X¹¦: renamed from ..1ªî{X¹¦ (while UP) [ 136.490177][ T7448] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 136.527644][ T7451] ..1ªî{X¹¦: renamed from ..0ªî{X¹¦ (while UP) [ 136.588218][ T7451] A link change request failed with some changes committed already. Interface ..1ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 136.892310][ T7472] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 137.402016][ T7505] netlink: 176 bytes leftover after parsing attributes in process `syz.0.347'. [ 137.440271][ T77] hsr_slave_0: left promiscuous mode [ 137.448092][ T77] hsr_slave_1: left promiscuous mode [ 137.472491][ T77] veth1_macvtap: left promiscuous mode [ 137.483406][ T77] veth0_macvtap: left promiscuous mode [ 137.490079][ T77] veth1_vlan: left promiscuous mode [ 137.950062][ T7501] mac80211_hwsim hwsim4 wlan0: default FDB implementation only supports local addresses [ 137.974024][ T7502] mac80211_hwsim hwsim4 wlan0: default FDB implementation only supports local addresses [ 138.097344][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.348'. [ 138.369275][ T7529] netlink: 72 bytes leftover after parsing attributes in process `syz.2.350'. [ 138.379110][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 138.445040][ T7529] team0: Port device team_slave_0 removed [ 138.753712][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.356'. [ 138.850452][ T7549] netlink: 'syz.5.356': attribute type 21 has an invalid length. [ 139.388545][ T7582] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.552405][ T7582] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.656447][ T7582] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.692945][ T7601] siw: device registration error -23 [ 139.762791][ T7582] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.063040][ T77] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.087524][ T77] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.160447][ T7621] __nla_validate_parse: 4 callbacks suppressed [ 140.160467][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 140.211642][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 140.246494][ T77] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.300984][ T77] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.462877][ T7612] sctp: [Deprecated]: syz.5.371 (pid 7612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.462877][ T7612] Use struct sctp_sack_info instead [ 140.709983][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 140.764907][ T7644] syzkaller1: entered promiscuous mode [ 140.794412][ T7644] syzkaller1: entered allmulticast mode [ 140.921427][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 141.104835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.347066][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.772981][ T7689] tipc: Can't bind to reserved service type 1 [ 142.339333][ T7704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.384975][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.476160][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 142.490926][ T7712] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 142.672381][ T7719] xt_CONNSECMARK: invalid mode: 0 [ 142.688505][ T7715] gretap1: entered allmulticast mode [ 142.740896][ T7715] bond3: (slave gretap1): making interface the new active one [ 142.769549][ T7715] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 142.876063][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.217647][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 143.245467][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 143.318800][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.406'. [ 143.424977][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.625066][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 143.687870][ T7782] No such timeout policy "syz0" [ 143.739197][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 144.092981][ T7801] gre1: entered allmulticast mode [ 144.421365][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.429148][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.466199][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.583042][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.598727][ T7808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.853138][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.888137][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.929805][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.963375][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.214644][ T7836] __nla_validate_parse: 1 callbacks suppressed [ 145.214662][ T7836] netlink: 104 bytes leftover after parsing attributes in process `syz.1.422'. [ 145.272026][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.327623][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 145.347491][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'. [ 145.418550][ T7849] netlink: 92 bytes leftover after parsing attributes in process `syz.2.424'. [ 145.429340][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 145.510923][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.586486][ T7858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.425'. [ 145.909507][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.931839][ T7870] veth0_to_bond: entered promiscuous mode [ 145.990872][ T7870] veth0_to_bond: entered allmulticast mode [ 146.000681][ T7870] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 146.065732][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 146.101802][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 146.134210][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.163248][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.189442][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.215407][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.544666][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.688312][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'. [ 146.701569][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 146.761300][ T7915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.769871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.842394][ T87] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.990635][ T87] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.037785][ T87] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.083179][ T7929] syz_tun: entered allmulticast mode [ 147.120693][ T7929] syz_tun: left allmulticast mode [ 147.160622][ T87] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.260355][ T7943] ip6_vti0: entered promiscuous mode [ 147.390680][ T7949] netlink: 'syz.3.449': attribute type 5 has an invalid length. [ 147.587768][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.961728][ T7976] : entered promiscuous mode [ 148.144471][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.460592][ T8004] rdma_op ffff88807c2929f0 conn xmit_rdma 0000000000000000 [ 148.657054][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.816144][ T8020] sctp: [Deprecated]: syz.1.464 (pid 8020) Use of int in max_burst socket option deprecated. [ 148.816144][ T8020] Use struct sctp_assoc_value instead [ 148.959446][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.294961][ T8044] syzkaller1: entered promiscuous mode [ 149.302992][ T8044] syzkaller1: entered allmulticast mode [ 149.425886][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.669325][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.852916][ T8057] bond1: entered promiscuous mode [ 149.874411][ T8057] bond1: entered allmulticast mode [ 149.880000][ T8057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.065078][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.073383][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.498003][ T8096] netlink: 'syz.5.480': attribute type 2 has an invalid length. [ 150.512562][ T8096] l24): entered promiscuous mode [ 150.560242][ T8093] Bluetooth: MGMT ver 1.23 [ 150.568496][ T8095] __nla_validate_parse: 9 callbacks suppressed [ 150.568514][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'. [ 151.168365][ T8119] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 151.193167][ T8121] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 151.214110][ T8122] netlink: 52 bytes leftover after parsing attributes in process `syz.1.488'. [ 151.580444][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.494'. [ 151.638649][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.5.494'. [ 151.746108][ T5933] net_ratelimit: 1 callbacks suppressed [ 151.746127][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.832212][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 151.863088][ T8157] ip6gretap0: entered promiscuous mode [ 151.903820][ T8157] ip6gretap0: left promiscuous mode [ 152.100435][ T8162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.120506][ T8176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.129847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.154153][ T8179] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 152.166645][ T8162] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.183660][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.502'. [ 152.211018][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.502'. [ 152.220549][ T8162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.311908][ T8179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.353999][ T8185] bond2: (slave veth3): Enslaving as an active interface with a down link [ 152.375149][ T8161] vlan2: entered promiscuous mode [ 152.380357][ T8161] geneve1: entered promiscuous mode [ 152.386743][ T8161] vlan2: entered allmulticast mode [ 152.392008][ T8161] geneve1: entered allmulticast mode [ 152.786501][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.840517][ T8205] netlink: 'syz.3.505': attribute type 66 has an invalid length. [ 152.939479][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 153.114098][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.130256][ T8218] xt_CONNSECMARK: invalid mode: 0 [ 153.212669][ T8224] x_tables: duplicate underflow at hook 1 [ 153.256388][ T8226] batadv_slave_0: entered promiscuous mode [ 153.267719][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.281195][ T8225] batadv_slave_0: left promiscuous mode [ 153.452055][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 153.461765][ T8232] netlink: 39 bytes leftover after parsing attributes in process `syz.1.516'. [ 153.480467][ T8238] netlink: zone id is out of range [ 153.496133][ T8238] netlink: zone id is out of range [ 153.501282][ T8238] netlink: zone id is out of range [ 153.582691][ T8237] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.952011][ T8237] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.160568][ T8237] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.502371][ T8237] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.585003][ T8274] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 154.715071][ T8274] bond4: entered promiscuous mode [ 154.720596][ T8274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.791867][ T8284] macsec0: entered allmulticast mode [ 154.804416][ T8284] veth1_macvtap: entered allmulticast mode [ 154.834247][ T8274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.843230][ T8274] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 154.856897][ T8274] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 154.882116][ T8274] bond4: (slave vcan1): making interface the new active one [ 154.889624][ T8274] vcan1: entered promiscuous mode [ 154.898752][ T8274] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 155.041490][ T1319] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.075460][ T1319] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.191240][ T8305] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 155.244409][ T77] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.346066][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.776577][ T8345] netlink: 'syz.5.543': attribute type 1 has an invalid length. [ 156.333026][ T29] audit: type=1107 audit(1772741422.039:2): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 156.464118][ T8370] __nla_validate_parse: 3 callbacks suppressed [ 156.464137][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.549'. [ 156.558994][ T8370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.549'. [ 156.571707][ T8370] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.549'. [ 156.944927][ T5980] net_ratelimit: 1090 callbacks suppressed [ 156.944946][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.110033][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.275710][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.555'. [ 157.316511][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.555'. [ 157.535451][ T8438] netlink: 84 bytes leftover after parsing attributes in process `syz.0.560'. [ 157.744697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.846523][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 157.975017][ T8455] vlan2: entered promiscuous mode [ 157.985654][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.993839][ T8455] bond0: entered promiscuous mode [ 158.007716][ T8455] bond_slave_0: entered promiscuous mode [ 158.020615][ T8455] bond_slave_1: entered promiscuous mode [ 158.061087][ T8464] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 158.090422][ T8466] netlink: 452 bytes leftover after parsing attributes in process `syz.0.568'. [ 158.280873][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 158.438468][ T8493] netlink: 120 bytes leftover after parsing attributes in process `syz.3.573'. [ 158.503939][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.513434][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.522242][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.547979][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.565757][ T8494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.835195][ T8509] xt_l2tp: missing protocol rule (udp|l2tpip) [ 160.660898][ T8557] IPv6: sit1: Disabled Multicast RS [ 161.209553][ T8475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.221123][ T8507] netlink: 'syz.0.576': attribute type 3 has an invalid length. [ 161.237250][ T8507] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 161.250052][ T8507] NCSI netlink: No device for ifindex 808464432 [ 161.568409][ T8570] sctp: [Deprecated]: syz.0.591 (pid 8570) Use of int in max_burst socket option deprecated. [ 161.568409][ T8570] Use struct sctp_assoc_value instead [ 161.612714][ T8577] macsec1: entered promiscuous mode [ 161.638418][ T8577] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 161.903417][ T8597] __nla_validate_parse: 6 callbacks suppressed [ 161.903436][ T8597] netlink: 104 bytes leftover after parsing attributes in process `syz.1.597'. [ 162.070522][ T8606] nbd: must specify a size in bytes for the device [ 162.148639][ T5933] net_ratelimit: 444 callbacks suppressed [ 162.148659][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.479865][ T8626] netlink: 'syz.0.606': attribute type 13 has an invalid length. [ 162.544827][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.980028][ T8644] netlink: 428 bytes leftover after parsing attributes in process `syz.1.607'. [ 163.184778][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.289112][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.613'. [ 163.342100][ T8659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.370169][ T8659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.581650][ T8659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.630439][ T8659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.694113][ T8676] sctp: [Deprecated]: syz.0.616 (pid 8676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.694113][ T8676] Use struct sctp_sack_info instead [ 163.808980][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 163.832240][ T8659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.846366][ T8659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.930146][ T8659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.942200][ T8659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.967197][ T8679] netlink: 72 bytes leftover after parsing attributes in process `syz.0.619'. [ 164.109129][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 164.148776][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 164.229623][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.426403][ T8403] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.439350][ T8403] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.712284][ T8398] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.721622][ T8398] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.729970][ T8398] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.738823][ T8398] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.770030][ T8401] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.802775][ T8401] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.862216][ T8688] netlink: 'syz.2.623': attribute type 3 has an invalid length. [ 165.021242][ T8690] netlink: 312 bytes leftover after parsing attributes in process `syz.3.624'. [ 165.268119][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.591295][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.638513][ T8710] tipc: Enabled bearer , priority 0 [ 165.649908][ T8709] syzkaller0: entered promiscuous mode [ 165.656928][ T8709] syzkaller0: entered allmulticast mode [ 165.666451][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 165.683965][ T8709] tipc: Resetting bearer [ 166.047170][ T8719] syz_tun: entered allmulticast mode [ 166.056298][ T8718] syz_tun: left allmulticast mode [ 166.239793][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 166.340176][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.342530][ T8726] netlink: 'syz.1.637': attribute type 4 has an invalid length. [ 166.707358][ T10] tipc: Node number set to 3433126969 [ 166.714966][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.723148][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.293390][ T8759] __nla_validate_parse: 3 callbacks suppressed [ 167.293410][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 167.346383][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.354597][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.375378][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 168.384584][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.393782][ T8791] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 168.430553][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 168.439779][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.540387][ T8618] Set syz1 is full, maxelem 65536 reached [ 168.771530][ T8805] xt_hashlimit: max too large, truncated to 1048576 [ 168.784759][ T8805] xt_hashlimit: overflow, try lower: 13/0 [ 168.849707][ T8809] raw_sendmsg: syz.2.653 forgot to set AF_INET. Fix it! [ 168.865751][ T8407] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.921481][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.098738][ T8817] netlink: set zone limit has 4 unknown bytes [ 169.107459][ T8815] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 169.208676][ T8822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.657'. [ 169.224783][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 169.407903][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 169.498461][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.746640][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.813275][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'. [ 169.936052][ T8413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.957998][ T8413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.011300][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.663'. [ 170.204517][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.338419][ T8864] netlink: 'syz.2.668': attribute type 33 has an invalid length. [ 170.366860][ T8864] netlink: 152 bytes leftover after parsing attributes in process `syz.2.668'. [ 170.452422][ T8864] `: renamed from team0 (while UP) [ 170.545676][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.664850][ T8875] netlink: 'syz.1.671': attribute type 21 has an invalid length. [ 170.672644][ T8875] netlink: 128 bytes leftover after parsing attributes in process `syz.1.671'. [ 170.683079][ T8875] netlink: 'syz.1.671': attribute type 4 has an invalid length. [ 171.585712][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.697441][ T8923] bridge_slave_0: left allmulticast mode [ 171.703330][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.749146][ T8927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.781603][ T8923] bridge_slave_1: left allmulticast mode [ 171.787551][ T8923] bridge_slave_1: left promiscuous mode [ 171.793417][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.889757][ T8923] bond0: (slave bond_slave_0): Releasing backup interface [ 171.903120][ T8923] bond0: (slave bond_slave_1): Releasing backup interface [ 171.932324][ T8923] team0: Port device team_slave_1 removed [ 171.940898][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.950351][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.961287][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.970858][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.283869][ T8941] syzkaller0: refused to change device tx_queue_len [ 172.435893][ T8951] __nla_validate_parse: 7 callbacks suppressed [ 172.435911][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 172.504638][ T8952] syzkaller0: entered promiscuous mode [ 172.529377][ T8952] syzkaller0: entered allmulticast mode [ 172.624982][ T796] net_ratelimit: 45 callbacks suppressed [ 172.624999][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.729182][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 172.785905][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.823686][ T8752] Set syz1 is full, maxelem 65536 reached [ 173.078277][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 173.079730][ T8977] netlink: 44 bytes leftover after parsing attributes in process `syz.3.700'. [ 173.137024][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.701'. [ 173.224605][ T8989] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 173.235248][ T8971] netlink: 52 bytes leftover after parsing attributes in process `syz.2.699'. [ 173.303205][ T8989] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 173.538828][ T9000] bridge0: entered allmulticast mode [ 173.669234][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.904508][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.051820][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 174.058941][ T9031] lo speed is unknown, defaulting to 1000 [ 174.107120][ T9031] lo speed is unknown, defaulting to 1000 [ 174.120522][ T9031] lo speed is unknown, defaulting to 1000 [ 174.226501][ T9044] batadv_slave_1: entered promiscuous mode [ 174.241649][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'. [ 174.257397][ T9044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.346303][ T9044] batadv_slave_1 (unregistering): left promiscuous mode [ 174.380007][ T9044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.452024][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 174.548975][ T9031] infiniband syz0: set down [ 174.553715][ T9031] infiniband syz0: added lo [ 174.612977][ T9031] RDS/IB: syz0: added [ 174.622291][ T9031] smc: adding ib device syz0 with port count 1 [ 174.629190][ T9031] smc: ib device syz0 port 1 has no pnetid [ 174.704783][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.839186][ T9052] netlink: 32 bytes leftover after parsing attributes in process `syz.2.720'. [ 174.848809][ T9052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.930645][ T796] lo speed is unknown, defaulting to 1000 [ 174.930650][ T9062] syz_tun: entered allmulticast mode [ 174.947894][ T5933] lo speed is unknown, defaulting to 1000 [ 174.982909][ T9031] lo speed is unknown, defaulting to 1000 [ 175.206153][ T9070] bond1: entered allmulticast mode [ 175.262164][ T9070] netlink: 'syz.5.724': attribute type 4 has an invalid length. [ 175.305518][ T9070] bridge1: entered promiscuous mode [ 175.311353][ T9070] bridge1: entered allmulticast mode [ 175.325501][ T9070] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 175.377745][ T9031] lo speed is unknown, defaulting to 1000 [ 175.670584][ T9031] lo speed is unknown, defaulting to 1000 [ 175.744931][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.824847][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.865320][ T9031] lo speed is unknown, defaulting to 1000 [ 176.026216][ T9101] lo speed is unknown, defaulting to 1000 [ 176.166982][ T9031] lo speed is unknown, defaulting to 1000 [ 176.786106][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.801330][ T9121] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 176.809672][ T9119] lo speed is unknown, defaulting to 1000 [ 176.845803][ T9121] bond5: entered promiscuous mode [ 176.851289][ T9121] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.872749][ T9121] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.884879][ T9121] bond5: (slave vcan2): The slave device specified does not support setting the MAC address [ 176.897566][ T9121] bond5: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 176.910356][ T9121] bond5: (slave vcan2): making interface the new active one [ 176.918760][ T9121] vcan2: entered promiscuous mode [ 176.925534][ T9121] bond5: (slave vcan2): Enslaving as an active interface with an up link [ 176.946249][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.824932][ T42] net_ratelimit: 1 callbacks suppressed [ 177.824951][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.082967][ T9072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.382586][ T9138] syzkaller0: entered promiscuous mode [ 178.388351][ T9138] syzkaller0: entered allmulticast mode [ 178.396670][ T9138] __nla_validate_parse: 6 callbacks suppressed [ 178.396688][ T9138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.739'. [ 178.700898][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 178.752470][ T9167] netlink: zone id is out of range [ 178.770807][ T9167] netlink: zone id is out of range [ 178.776256][ T9167] netlink: zone id is out of range [ 178.781943][ T9167] netlink: zone id is out of range [ 178.787465][ T9167] netlink: zone id is out of range [ 178.793608][ T9167] netlink: zone id is out of range [ 178.799047][ T9167] netlink: zone id is out of range [ 178.804330][ T9167] netlink: zone id is out of range [ 178.812397][ T9167] netlink: zone id is out of range [ 178.950688][ T9174] netlink: 'syz.5.748': attribute type 1 has an invalid length. [ 178.958614][ T9174] netlink: 'syz.5.748': attribute type 2 has an invalid length. [ 178.985170][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.748'. [ 179.117827][ T9180] bridge_slave_0: left allmulticast mode [ 179.173966][ T9180] bridge_slave_0: left promiscuous mode [ 179.183973][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.211742][ T9180] bridge_slave_1: left allmulticast mode [ 179.218873][ T9180] bridge_slave_1: left promiscuous mode [ 179.224879][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.287813][ T9180] bond0: (slave bond_slave_0): Releasing backup interface [ 179.311188][ T9180] bond_slave_0: left promiscuous mode [ 179.384178][ T9180] bond0: (slave bond_slave_1): Releasing backup interface [ 179.449847][ T9180] bond_slave_1: left promiscuous mode [ 179.471476][ T9180] `: Port device team_slave_1 removed [ 179.477708][ T9180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.487298][ T9180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.599608][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 179.719589][ T9211] netlink: 'syz.1.757': attribute type 3 has an invalid length. [ 179.785290][ T9211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.757'. [ 179.817186][ T9211] pimreg: entered allmulticast mode [ 179.829950][ T9216] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 179.989830][ T9222] netlink: 332 bytes leftover after parsing attributes in process `syz.1.761'. [ 180.003631][ T9222] netlink: 'syz.1.761': attribute type 9 has an invalid length. [ 180.013209][ T9222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.761'. [ 180.023046][ T9222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.761'. [ 180.393296][ T9221] lo speed is unknown, defaulting to 1000 [ 180.572208][ T9246] netlink: 112 bytes leftover after parsing attributes in process `syz.0.767'. [ 180.774041][ T42] IPVS: starting estimator thread 0... [ 180.794344][ T9255] team0: Device gtp0 is of different type [ 180.908252][ T9254] IPVS: using max 33 ests per chain, 79200 per kthread [ 181.163456][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 181.378044][ T9267] netlink: 'syz.0.773': attribute type 2 has an invalid length. [ 181.732259][ T9278] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 181.998056][ T9285] syz_tun: left allmulticast mode [ 182.064470][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.065044][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.167626][ T9290] IPVS: set_ctl: invalid protocol: 102 172.30.1.3:20002 [ 182.372271][ T9300] netlink: 'syz.3.784': attribute type 9 has an invalid length. [ 182.539480][ T9310] veth1_macvtap: left allmulticast mode [ 182.546851][ T9310] veth1_macvtap: left promiscuous mode [ 182.840922][ T5905] net_ratelimit: 1237 callbacks suppressed [ 182.840940][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.879285][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.899179][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.916799][ T9329] lo speed is unknown, defaulting to 1000 [ 182.934550][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.946681][ T9326] xt_CT: No such helper "snmp_trap" [ 182.986759][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.009017][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.034105][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.065820][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.101489][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.134929][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.436229][ T9343] __nla_validate_parse: 9 callbacks suppressed [ 183.436251][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.796'. [ 183.469069][ T9345] xt_hashlimit: max too large, truncated to 1048576 [ 183.478194][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 183.491114][ T9345] xt_bpf: check failed: parse error [ 183.523707][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.796'. [ 183.842433][ T9351] syzkaller0: entered promiscuous mode [ 183.848304][ T9351] syzkaller0: entered allmulticast mode [ 184.248911][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 184.257881][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.805'. [ 184.509766][ T9384] xt_TCPMSS: Only works on TCP SYN packets [ 184.732230][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.808'. [ 185.387595][ T9388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.477181][ T9388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.553865][ T9396] netlink: 140 bytes leftover after parsing attributes in process `syz.2.811'. [ 185.567039][ T9396] netlink: 56 bytes leftover after parsing attributes in process `syz.2.811'. [ 185.672943][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 185.719709][ T9404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.810'. [ 185.841725][ T9412] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.069044][ T9391] tipc: Resetting bearer [ 186.094242][ T9396] tipc: New replicast peer: 255.255.255.255 [ 186.122331][ T9396] tipc: Enabled bearer , priority 10 [ 186.210952][ T8403] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.224737][ T8403] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.243748][ T8403] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.260137][ T8403] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.288980][ T9414] 0ªî{X¹¦: renamed from ..0ªî{X¹¦ (while UP) [ 186.326186][ T8403] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.347041][ T8403] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.399811][ T8403] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.423947][ T8403] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.620379][ T9408] lo speed is unknown, defaulting to 1000 [ 187.178420][ T9465] bridge0: port 1(macvtap1) entered blocking state [ 187.188160][ T9465] bridge0: port 1(macvtap1) entered disabled state [ 187.196875][ T9465] macvtap1: entered allmulticast mode [ 187.207835][ T9465] macvtap1: left allmulticast mode [ 187.267450][ T5905] tipc: Node number set to 3403517894 [ 187.274432][ T9451] lo speed is unknown, defaulting to 1000 [ 187.333766][ T9472] pim6reg: entered allmulticast mode [ 187.436970][ T9476] pim6reg: left allmulticast mode [ 187.851925][ T9481] ip6tnl1: entered promiscuous mode [ 187.874381][ T9481] ip6tnl1: entered allmulticast mode [ 187.984596][ T5904] net_ratelimit: 392 callbacks suppressed [ 187.984627][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.426702][ T9502] syzkaller0: entered promiscuous mode [ 188.437950][ T9502] syzkaller0: entered allmulticast mode [ 188.465908][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.478563][ T9509] __nla_validate_parse: 10 callbacks suppressed [ 188.478579][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 188.523624][ T9509] macsec0 (unregistering): left allmulticast mode [ 189.106575][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.190651][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 189.244398][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 189.294245][ T9544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.313194][ T9544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.336314][ T9544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.357062][ T9544] netlink: 'syz.5.852': attribute type 1 has an invalid length. [ 189.365389][ T9544] netlink: 224 bytes leftover after parsing attributes in process `syz.5.852'. [ 189.407979][ T9549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.434982][ T9549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.463422][ T9549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.484647][ T9549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.576149][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.855'. [ 190.188344][ T9584] lo speed is unknown, defaulting to 1000 [ 190.277757][ T9591] xt_connbytes: Forcing CT accounting to be enabled [ 190.296547][ T9578] ipt_ECN: cannot use operation on non-tcp rule [ 190.321783][ T9586] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.862'. [ 190.334768][ T9578] netlink: 'syz.1.860': attribute type 32 has an invalid length. [ 190.342526][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.860'. [ 190.365934][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'. [ 190.465761][ T9578] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 190.506085][ T35] bond0: (slave rose0): link status definitely down, disabling slave [ 190.532152][ T35] bond0: now running without any active interface! [ 190.596554][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.866'. [ 190.703614][ T9603] geneve3: entered promiscuous mode [ 190.786518][ T9603] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.825657][ T9603] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.909440][ T9603] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.945929][ T9603] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.052858][ T9603] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.074422][ T9603] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.158698][ T9590] lo speed is unknown, defaulting to 1000 [ 191.243669][ T9603] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.281461][ T9603] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.544539][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 191.566106][ T5933] IPVS: starting estimator thread 0... [ 191.654894][ T9644] IPVS: using max 27 ests per chain, 64800 per kthread [ 191.666702][ T9638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.673224][ T9638] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 191.777014][ T9638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.799902][ T9638] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 191.938572][ T8403] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.947409][ T9638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.963144][ T8403] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.973153][ T9638] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 192.052620][ T9638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.083102][ T8403] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.083807][ T9638] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 192.114255][ T8403] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.128961][ T8403] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.159507][ T8403] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.287147][ T9638] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 192.287438][ T8403] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.293204][ T9638] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 192.316995][ T8403] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.277128][ T9703] netlink: 'syz.2.884': attribute type 4 has an invalid length. [ 193.319536][ T9703] netlink: 'syz.2.884': attribute type 4 has an invalid length. [ 193.679656][ T9719] __nla_validate_parse: 3 callbacks suppressed [ 193.679676][ T9719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.888'. [ 193.719477][ T5933] net_ratelimit: 77 callbacks suppressed [ 193.719493][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.744753][ T9719] netlink: 'syz.3.888': attribute type 32 has an invalid length. [ 193.784000][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 193.918600][ T9728] xt_hashlimit: size too large, truncated to 1048576 [ 194.169679][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.893'. [ 194.424736][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 194.458189][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 194.785098][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.970531][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 195.015020][ T9771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.902'. [ 195.037086][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.902'. [ 195.184570][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.239444][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.905'. [ 195.330895][ T9786] ip6gre1: entered promiscuous mode [ 195.351166][ T9786] ip6gre1: entered allmulticast mode [ 195.360912][ T9796] netlink: 'syz.2.905': attribute type 6 has an invalid length. [ 195.392705][ T9796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.905'. [ 195.698574][ T9807] x_tables: duplicate underflow at hook 2 [ 195.720010][ T9811] netlink: 'syz.1.912': attribute type 11 has an invalid length. [ 195.826238][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.916332][ T9819] lo speed is unknown, defaulting to 1000 [ 196.630385][ T9822] lo speed is unknown, defaulting to 1000 [ 196.864987][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.905616][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.064492][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.224647][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.695045][ T9873] bond7: entered promiscuous mode [ 198.707409][ T9873] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.954661][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.006787][ T9879] __nla_validate_parse: 4 callbacks suppressed [ 199.006807][ T9879] netlink: 232 bytes leftover after parsing attributes in process `syz.1.930'. [ 199.344582][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.511269][ T9914] xt_hashlimit: size too large, truncated to 1048576 [ 199.520729][ T9912] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 199.529121][ T9914] xt_hashlimit: max too large, truncated to 1048576 [ 199.534626][ T9912] netlink: 264 bytes leftover after parsing attributes in process `syz.2.940'. [ 199.574536][ T9912] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 199.602155][ T9912] netlink: 264 bytes leftover after parsing attributes in process `syz.2.940'. [ 199.771495][ T9930] netlink: 'syz.1.945': attribute type 39 has an invalid length. [ 199.813872][ T9934] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 199.866684][ T9933] vlan3: entered promiscuous mode [ 199.871906][ T9933] `: entered promiscuous mode [ 199.957957][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 199.967073][ T9940] netlink: 'syz.0.948': attribute type 3 has an invalid length. [ 200.001331][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.237704][ T9947] lo speed is unknown, defaulting to 1000 [ 200.565930][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 200.585163][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 200.609649][ T9957] gre0: Master is either lo or non-ether device [ 200.626997][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.045492][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.264680][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.529108][T10011] syzkaller1: entered promiscuous mode [ 201.562971][T10011] syzkaller1: entered allmulticast mode [ 201.572716][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.967'. [ 201.590796][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 201.600830][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 201.610545][T10015] netlink: 'syz.1.968': attribute type 18 has an invalid length. [ 201.917271][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.974'. [ 202.065122][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.249332][T10057] smc: net device hsr0 applied user defined pnetid SYZ2 [ 202.385976][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.437368][T10067] FAULT_INJECTION: forcing a failure. [ 202.437368][T10067] name failslab, interval 1, probability 0, space 0, times 0 [ 202.466282][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.2.983 Not tainted syzkaller #0 PREEMPT(full) [ 202.466310][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.466333][T10067] Call Trace: [ 202.466341][T10067] [ 202.466350][T10067] dump_stack_lvl+0xe8/0x150 [ 202.466404][T10067] should_fail_ex+0x412/0x560 [ 202.466457][T10067] should_failslab+0xa8/0x100 [ 202.466482][T10067] ? skb_clone+0x212/0x3a0 [ 202.466511][T10067] kmem_cache_alloc_noprof+0x87/0x650 [ 202.466541][T10067] ? __netlink_lookup+0xc6/0x8b0 [ 202.466574][T10067] skb_clone+0x212/0x3a0 [ 202.466607][T10067] __netlink_deliver_tap+0x404/0x850 [ 202.466644][T10067] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.466670][T10067] netlink_deliver_tap+0x19c/0x1b0 [ 202.466696][T10067] netlink_unicast+0x7e3/0x9b0 [ 202.466726][T10067] ? __pfx_netlink_unicast+0x10/0x10 [ 202.466750][T10067] ? netlink_sendmsg+0x650/0xb40 [ 202.466772][T10067] ? skb_put+0x11b/0x210 [ 202.466809][T10067] netlink_sendmsg+0x813/0xb40 [ 202.466843][T10067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.466890][T10067] ? aa_sock_msg_perm+0xf1/0x1b0 [ 202.466917][T10067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.466942][T10067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.466967][T10067] ____sys_sendmsg+0xa68/0xad0 [ 202.467007][T10067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.467048][T10067] ? import_iovec+0x73/0xa0 [ 202.467082][T10067] ___sys_sendmsg+0x2a5/0x360 [ 202.467119][T10067] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.467188][T10067] ? __fget_files+0x2a/0x420 [ 202.467215][T10067] ? __fget_files+0x3a0/0x420 [ 202.467258][T10067] __x64_sys_sendmsg+0x1bd/0x2a0 [ 202.467293][T10067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.467336][T10067] ? __pfx_ksys_write+0x10/0x10 [ 202.467369][T10067] do_syscall_64+0x14d/0xf80 [ 202.467389][T10067] ? trace_irq_disable+0x3b/0x150 [ 202.467419][T10067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.467440][T10067] ? clear_bhb_loop+0x40/0x90 [ 202.467466][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.467487][T10067] RIP: 0033:0x7f181cb9c799 [ 202.467516][T10067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.467534][T10067] RSP: 002b:00007f181db3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.467563][T10067] RAX: ffffffffffffffda RBX: 00007f181ce15fa0 RCX: 00007f181cb9c799 [ 202.467578][T10067] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000006 [ 202.467591][T10067] RBP: 00007f181db3e090 R08: 0000000000000000 R09: 0000000000000000 [ 202.467603][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.467615][T10067] R13: 00007f181ce16038 R14: 00007f181ce15fa0 R15: 00007ffc07d39158 [ 202.467653][T10067] [ 202.799814][T10071] lo speed is unknown, defaulting to 1000 [ 203.117130][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.326268][T10090] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 203.756033][ T5904] IPVS: starting estimator thread 0... [ 203.844759][T10117] IPVS: using max 26 ests per chain, 62400 per kthread [ 203.883010][T10120] FAULT_INJECTION: forcing a failure. [ 203.883010][T10120] name failslab, interval 1, probability 0, space 0, times 0 [ 203.914492][T10120] CPU: 0 UID: 0 PID: 10120 Comm: syz.1.996 Not tainted syzkaller #0 PREEMPT(full) [ 203.914521][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.914533][T10120] Call Trace: [ 203.914542][T10120] [ 203.914551][T10120] dump_stack_lvl+0xe8/0x150 [ 203.914585][T10120] should_fail_ex+0x412/0x560 [ 203.914616][T10120] should_failslab+0xa8/0x100 [ 203.914644][T10120] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 203.914682][T10120] ? __alloc_skb+0x1d0/0x7d0 [ 203.914707][T10120] ? __local_bh_enable_ip+0xd0/0x130 [ 203.914739][T10120] __alloc_skb+0x1d0/0x7d0 [ 203.914776][T10120] ? __pfx_nf_tables_getgen+0x10/0x10 [ 203.914810][T10120] nf_tables_getgen+0x33/0x220 [ 203.914843][T10120] ? __pfx_nf_tables_getgen+0x10/0x10 [ 203.914877][T10120] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 203.914903][T10120] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 203.914947][T10120] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 203.915022][T10120] netlink_rcv_skb+0x232/0x4b0 [ 203.915051][T10120] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 203.915077][T10120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.915120][T10120] ? bpf_lsm_capable+0x9/0x20 [ 203.915147][T10120] ? security_capable+0x7e/0x2c0 [ 203.915178][T10120] nfnetlink_rcv+0x2c0/0x27b0 [ 203.915200][T10120] ? is_bpf_text_address+0x26/0x2b0 [ 203.915227][T10120] ? is_bpf_text_address+0x292/0x2b0 [ 203.915248][T10120] ? is_bpf_text_address+0x26/0x2b0 [ 203.915273][T10120] ? kernel_text_address+0xa5/0xe0 [ 203.915297][T10120] ? __kernel_text_address+0xd/0x30 [ 203.915319][T10120] ? unwind_get_return_address+0x4d/0x90 [ 203.915351][T10120] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 203.915374][T10120] ? arch_stack_walk+0xfb/0x150 [ 203.915416][T10120] ? __lock_acquire+0x6b5/0x2cf0 [ 203.915444][T10120] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 203.915467][T10120] ? __pfx_stack_trace_save+0x10/0x10 [ 203.915491][T10120] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.915522][T10120] ? __lock_acquire+0x6b5/0x2cf0 [ 203.915558][T10120] ? __lock_acquire+0x6b5/0x2cf0 [ 203.915591][T10120] ? __netlink_lookup+0xc6/0x8b0 [ 203.915624][T10120] ? __netlink_lookup+0x7e4/0x8b0 [ 203.915660][T10120] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.915693][T10120] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.915728][T10120] netlink_unicast+0x80f/0x9b0 [ 203.915768][T10120] ? __pfx_netlink_unicast+0x10/0x10 [ 203.915795][T10120] ? netlink_sendmsg+0x650/0xb40 [ 203.915820][T10120] ? skb_put+0x11b/0x210 [ 203.915851][T10120] netlink_sendmsg+0x813/0xb40 [ 203.915886][T10120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.915917][T10120] ? aa_sock_msg_perm+0xf1/0x1b0 [ 203.915945][T10120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.915970][T10120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.915996][T10120] ____sys_sendmsg+0xa68/0xad0 [ 203.916040][T10120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.916083][T10120] ? import_iovec+0x73/0xa0 [ 203.916118][T10120] ___sys_sendmsg+0x2a5/0x360 [ 203.916157][T10120] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.916228][T10120] ? __fget_files+0x2a/0x420 [ 203.916258][T10120] ? __fget_files+0x3a0/0x420 [ 203.916300][T10120] __x64_sys_sendmsg+0x1bd/0x2a0 [ 203.916335][T10120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.916377][T10120] ? __pfx_ksys_write+0x10/0x10 [ 203.916412][T10120] do_syscall_64+0x14d/0xf80 [ 203.916432][T10120] ? trace_irq_disable+0x3b/0x150 [ 203.916461][T10120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.916483][T10120] ? clear_bhb_loop+0x40/0x90 [ 203.916511][T10120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.916532][T10120] RIP: 0033:0x7fde9259c799 [ 203.916553][T10120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.916570][T10120] RSP: 002b:00007fde9340e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.916603][T10120] RAX: ffffffffffffffda RBX: 00007fde92815fa0 RCX: 00007fde9259c799 [ 203.916619][T10120] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000006 [ 203.916632][T10120] RBP: 00007fde9340e090 R08: 0000000000000000 R09: 0000000000000000 [ 203.916645][T10120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.916656][T10120] R13: 00007fde92816038 R14: 00007fde92815fa0 R15: 00007fff7c60e628 [ 203.916689][T10120] [ 204.045643][T10122] __nla_validate_parse: 4 callbacks suppressed [ 204.045694][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 204.240327][T10074] lec:lec_atm_close: lec0: Shut down! [ 204.250970][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.510549][T10125] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 205.153746][T10142] x_tables: duplicate underflow at hook 3 [ 205.184248][T10139] syzkaller0: mtu greater than device maximum [ 205.208265][T10144] xt_hashlimit: max too large, truncated to 1048576 [ 205.215272][T10142] xt_hashlimit: max too large, truncated to 1048576 [ 205.221903][T10142] xt_hashlimit: overflow, try lower: 13/0 [ 205.244924][T10144] xt_hashlimit: overflow, try lower: 13/0 [ 205.264653][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.425935][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.460720][T10149] netlink: 'syz.2.1004': attribute type 61 has an invalid length. [ 205.484645][T10149] netlink: 'syz.2.1004': attribute type 62 has an invalid length. [ 205.726055][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 205.813409][T10161] lo speed is unknown, defaulting to 1000 [ 206.304753][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.579237][T10183] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1010'. [ 206.657580][T10190] netlink: 'syz.2.1011': attribute type 13 has an invalid length. [ 206.665583][T10190] netlink: 'syz.2.1011': attribute type 17 has an invalid length. [ 206.736726][T10190] ip6_vti0: left promiscuous mode [ 206.751191][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 206.768628][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 206.786377][T10190] bridge0: left allmulticast mode [ 206.787859][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1013'. [ 206.805456][T10190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.938948][T10198] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1014'. [ 206.959814][T10192] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 207.121001][ T5933] lec:lec_start_xmit: lec0:No lecd attached [ 207.347242][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.644573][T10219] sctp: [Deprecated]: syz.2.1018 (pid 10219) Use of int in maxseg socket option. [ 207.644573][T10219] Use struct sctp_assoc_value instead [ 208.393812][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.467127][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.095574][T10278] syzkaller1: entered promiscuous mode [ 209.121634][T10278] syzkaller1: entered allmulticast mode [ 209.335973][T10281] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 209.424810][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.478563][T10287] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 209.479418][T10289] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 209.759839][T10307] netlink: 'syz.1.1035': attribute type 2 has an invalid length. [ 209.848947][T10313] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 209.938792][T10302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.947827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.036494][T10315] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1037'. [ 210.066268][T10315] netlink: 'syz.1.1037': attribute type 2 has an invalid length. [ 210.241473][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 210.380310][T10303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.389136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.460968][T10328] netlink: 'syz.2.1042': attribute type 8 has an invalid length. [ 210.514774][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.720288][T10342] syzkaller0: entered promiscuous mode [ 210.726311][T10342] syzkaller0: entered allmulticast mode [ 210.865175][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.992523][T10354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.001532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.071815][T10355] lo speed is unknown, defaulting to 1000 [ 211.086078][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1050'. [ 211.819709][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 212.144347][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 212.152863][ C0] lec:lec_tx_timeout: lec0 [ 212.157744][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 212.369634][T10405] netlink: 'syz.0.1060': attribute type 2 has an invalid length. [ 212.562026][T10409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1062'. [ 212.581818][T10414] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 212.643295][T10412] veth0: entered allmulticast mode [ 213.404122][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 214.119416][T10467] syzkaller0: entered promiscuous mode [ 214.141617][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1079'. [ 214.151981][T10467] syzkaller0: entered allmulticast mode [ 214.187031][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 214.241145][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'. [ 214.310946][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 214.412416][T10483] tipc: Started in network mode [ 214.417844][T10483] tipc: Node identity fe7f32c2d1fc, cluster identity 4711 [ 214.428953][T10483] tipc: Enabled bearer , priority 0 [ 214.457331][T10463] tipc: Resetting bearer [ 214.496650][T10463] tipc: Disabling bearer [ 214.549605][ T5904] net_ratelimit: 60 callbacks suppressed [ 214.549640][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.707636][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.773419][T10506] rdma_rxe: rxe_newlink: failed to add lo [ 214.912057][T10515] netlink: 'syz.0.1090': attribute type 3 has an invalid length. [ 215.001734][T10519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.009021][T10519] IPv6: NLM_F_CREATE should be set when creating new route [ 215.016535][T10519] IPv6: NLM_F_CREATE should be set when creating new route [ 215.046703][T10525] __nla_validate_parse: 5 callbacks suppressed [ 215.046719][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1091'. [ 215.156988][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 215.177547][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1094'. [ 215.293223][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1095'. [ 215.348226][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'. [ 215.388964][T10541] bridge_slave_1: left allmulticast mode [ 215.410840][T10541] bridge_slave_1: left promiscuous mode [ 215.425349][T10541] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.487977][T10541] bridge_slave_0: left allmulticast mode [ 215.493641][T10541] bridge_slave_0: left promiscuous mode [ 215.501905][T10550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1098'. [ 215.504875][T10541] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.744517][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.330151][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1107'. [ 216.382594][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1107'. [ 216.399415][T10580] syzkaller0: entered promiscuous mode [ 216.406302][T10580] syzkaller0: entered allmulticast mode [ 216.415340][T10584] tipc: Enabled bearer , priority 0 [ 216.503246][T10573] tipc: Resetting bearer [ 216.557001][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 216.592314][T10573] tipc: Disabling bearer [ 216.789562][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.896825][T10616] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1115'. [ 217.161790][T10625] geneve4: entered promiscuous mode [ 217.180900][T10625] geneve4: entered allmulticast mode [ 217.209976][T10627] gtp0: entered promiscuous mode [ 217.215077][T10627] gtp0: entered allmulticast mode [ 217.586435][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.744531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.829216][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.852120][T10660] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 217.904307][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 217.912352][ C0] lec:lec_tx_timeout: lec0 [ 217.917312][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 218.031421][T10665] netlink: 'syz.1.1128': attribute type 4 has an invalid length. [ 218.068721][T10673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.213756][T10682] netlink: 'syz.1.1134': attribute type 15 has an invalid length. [ 218.611371][T10696] netlink: 'syz.5.1137': attribute type 10 has an invalid length. [ 218.619796][T10700] netlink: 'syz.5.1137': attribute type 10 has an invalid length. [ 218.631904][T10704] netlink: 'syz.1.1139': attribute type 21 has an invalid length. [ 218.866069][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.859636][T10768] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.914492][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.980052][T10769] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 220.215275][T10788] vlan0: entered promiscuous mode [ 220.224357][T10788] geneve1: entered promiscuous mode [ 220.229758][T10788] vlan0: entered allmulticast mode [ 220.277189][T10788] geneve1: entered allmulticast mode [ 220.332540][T10789] lo speed is unknown, defaulting to 1000 [ 220.494489][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.625571][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.754224][T10805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.844921][T10794] netlink: 'syz.5.1160': attribute type 1 has an invalid length. [ 220.852923][T10794] netlink: 'syz.5.1160': attribute type 2 has an invalid length. [ 220.894893][T10794] __nla_validate_parse: 13 callbacks suppressed [ 220.894910][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 220.922579][T10784] lo speed is unknown, defaulting to 1000 [ 220.955082][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.990466][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1160'. [ 221.110919][T10832] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.319168][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1164'. [ 221.380717][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1164'. [ 221.479930][T10849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.771951][T10861] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 221.801730][T10859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.994486][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.423092][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1177'. [ 222.924331][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 222.932420][ C0] lec:lec_tx_timeout: lec0 [ 222.937302][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 223.025089][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.320698][T10936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.531776][T10951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1191'. [ 223.571522][T10953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.591963][T10953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.657342][T10956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1191'. [ 223.666710][T10956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1191'. [ 223.941515][T10969] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 223.955727][T10963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.982107][T10969] bond3: entered promiscuous mode [ 223.987762][T10969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.057195][T10969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.089287][T10969] bond3: (slave bond4): making interface the new active one [ 224.115465][T10974] netlink: 'syz.5.1198': attribute type 1 has an invalid length. [ 224.123290][T10974] netlink: 'syz.5.1198': attribute type 1 has an invalid length. [ 224.135739][T10969] bond4: entered promiscuous mode [ 224.146397][T10969] bond3: (slave bond4): Enslaving as an active interface with an up link [ 224.264923][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 224.289364][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 224.436856][T10989] FAULT_INJECTION: forcing a failure. [ 224.436856][T10989] name failslab, interval 1, probability 0, space 0, times 0 [ 224.465472][T10989] CPU: 0 UID: 0 PID: 10989 Comm: syz.0.1203 Not tainted syzkaller #0 PREEMPT(full) [ 224.465500][T10989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.465513][T10989] Call Trace: [ 224.465522][T10989] [ 224.465531][T10989] dump_stack_lvl+0xe8/0x150 [ 224.465565][T10989] should_fail_ex+0x412/0x560 [ 224.465598][T10989] should_failslab+0xa8/0x100 [ 224.465627][T10989] __kmalloc_noprof+0xe8/0x760 [ 224.465651][T10989] ? tomoyo_encode+0x28b/0x550 [ 224.465684][T10989] tomoyo_encode+0x28b/0x550 [ 224.465718][T10989] tomoyo_realpath_from_path+0x58d/0x5d0 [ 224.465757][T10989] ? tomoyo_path_number_perm+0x219/0x630 [ 224.465782][T10989] tomoyo_path_number_perm+0x246/0x630 [ 224.465808][T10989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.465836][T10989] ? __lock_acquire+0x6b5/0x2cf0 [ 224.465877][T10989] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 224.465923][T10989] ? __fget_files+0x2a/0x420 [ 224.465957][T10989] ? __fget_files+0x2a/0x420 [ 224.465986][T10989] ? __fget_files+0x3a0/0x420 [ 224.466015][T10989] ? __fget_files+0x2a/0x420 [ 224.466051][T10989] security_file_ioctl+0xc3/0x2a0 [ 224.466097][T10989] __se_sys_ioctl+0x47/0x170 [ 224.466125][T10989] do_syscall_64+0x14d/0xf80 [ 224.466145][T10989] ? trace_irq_disable+0x3b/0x150 [ 224.466176][T10989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.466199][T10989] ? clear_bhb_loop+0x40/0x90 [ 224.466226][T10989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.466248][T10989] RIP: 0033:0x7f503779c799 [ 224.466268][T10989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.466287][T10989] RSP: 002b:00007f50385cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.466309][T10989] RAX: ffffffffffffffda RBX: 00007f5037a15fa0 RCX: 00007f503779c799 [ 224.466324][T10989] RDX: 0000200000000140 RSI: 0000000040086602 RDI: 0000000000000003 [ 224.466351][T10989] RBP: 00007f50385cd090 R08: 0000000000000000 R09: 0000000000000000 [ 224.466363][T10989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.466375][T10989] R13: 00007f5037a16038 R14: 00007f5037a15fa0 R15: 00007ffc939ee4d8 [ 224.466418][T10989] [ 224.466491][T10989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.104539][ T5933] net_ratelimit: 249 callbacks suppressed [ 225.104558][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.274519][T11026] IPVS: stopping backup sync thread 9216 ... [ 225.396889][T11033] netlink: 'syz.5.1215': attribute type 21 has an invalid length. [ 225.437407][T11033] netlink: 'syz.5.1215': attribute type 1 has an invalid length. [ 225.750071][T11047] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 225.795914][T10370] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.808821][T10370] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.831830][T10370] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.858492][T10370] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.984598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.992927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.145180][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.210769][T11062] netlink: 'syz.5.1227': attribute type 4 has an invalid length. [ 226.238802][T11062] netlink: 'syz.5.1227': attribute type 4 has an invalid length. [ 226.258120][T11065] IPv6: sit1: Disabled Multicast RS [ 226.706689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.148280][T11108] syzkaller0: entered promiscuous mode [ 227.153809][T11108] syzkaller0: entered allmulticast mode [ 227.195680][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.377579][T11115] lo speed is unknown, defaulting to 1000 [ 227.431348][T11125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.439879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.479041][T11125] __nla_validate_parse: 4 callbacks suppressed [ 227.479056][T11125] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1239'. [ 227.944299][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 227.952359][ C0] lec:lec_tx_timeout: lec0 [ 227.957172][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 227.997443][T11154] gretap2: entered promiscuous mode [ 228.003537][T11154] batman_adv: batadv0: Adding interface: gretap2 [ 228.010335][T11154] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 228.075937][T11154] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 228.354571][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.882196][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'. [ 228.924783][T11167] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 228.932629][T11167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1252'. [ 229.056938][T11171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1253'. [ 229.163384][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1254'. [ 229.311028][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 229.424457][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.710526][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1261'. [ 229.727903][T11209] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1262'. [ 229.773880][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 230.085910][T11224] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1267'. [ 230.166777][T11226] netlink: 'syz.3.1268': attribute type 4 has an invalid length. [ 230.205509][T11233] ..1ªî{X¹¦: left allmulticast mode [ 230.216806][T11233] veth0: left allmulticast mode [ 230.224964][T11230] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 230.237490][T11233] bridge_slave_0: left promiscuous mode [ 230.260315][T11233] vlan2: left promiscuous mode [ 230.276479][T11233] bridge0: left promiscuous mode [ 230.283429][T11233] tipc: Resetting bearer [ 230.327492][T11240] netlink: 'syz.3.1271': attribute type 18 has an invalid length. [ 230.340494][T11233] syzkaller0: left promiscuous mode [ 230.346725][T11233] syzkaller0: left allmulticast mode [ 230.381498][T11240] netlink: 'syz.3.1271': attribute type 18 has an invalid length. [ 230.391102][T10372] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.404939][T10372] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.425268][T10372] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.464592][ T5933] net_ratelimit: 4 callbacks suppressed [ 230.464607][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.468457][T10372] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.998550][T11263] netlink: 'syz.3.1276': attribute type 12 has an invalid length. [ 231.017072][T11263] netlink: 'syz.3.1276': attribute type 29 has an invalid length. [ 231.102754][T11267] lo speed is unknown, defaulting to 1000 [ 231.210419][T11263] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 231.253932][T11263] bond2 (unregistering): Released all slaves [ 231.504485][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.589765][T11283] batadv1: entered promiscuous mode [ 231.615267][T11283] batadv1: entered allmulticast mode [ 231.621953][T11283] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 231.759673][T11287] syzkaller0: entered promiscuous mode [ 231.778693][T11287] syzkaller0: entered allmulticast mode [ 232.532490][T11317] rdma_rxe: rxe_newlink: failed to add lo [ 232.544504][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.563114][T11315] __nla_validate_parse: 9 callbacks suppressed [ 232.563126][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.632114][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.672455][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.703778][T11324] lo speed is unknown, defaulting to 1000 [ 232.711556][T11324] lo speed is unknown, defaulting to 1000 [ 232.712223][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.743006][T11326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1295'. [ 232.752590][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.780664][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.789934][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.808172][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.824720][T11324] lo speed is unknown, defaulting to 1000 [ 232.830870][T11327] bond0: Error: Cannot enslave bond to itself. [ 232.837672][T11329] bond0: Error: Cannot enslave bond to itself. [ 232.854508][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.877997][T11324] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 232.887626][T11315] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1292'. [ 232.964357][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 232.972470][ C0] lec:lec_tx_timeout: lec0 [ 232.977541][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 232.994484][T11324] lo speed is unknown, defaulting to 1000 [ 233.002100][T11324] lo speed is unknown, defaulting to 1000 [ 233.009693][T11324] lo speed is unknown, defaulting to 1000 [ 233.017509][T11324] lo speed is unknown, defaulting to 1000 [ 233.025130][T11324] lo speed is unknown, defaulting to 1000 [ 233.584826][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.976643][T11377] netlink: 'syz.3.1308': attribute type 11 has an invalid length. [ 233.992526][T11378] netlink: 'syz.3.1308': attribute type 11 has an invalid length. [ 234.124997][T11381] bridge0: entered promiscuous mode [ 234.131559][T11381] ip6gretap0: entered promiscuous mode [ 234.148054][T11381] debugfs: 'hsr1' already exists in 'hsr' [ 234.157975][T11381] Cannot create hsr debugfs directory [ 234.438601][T11395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.447435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.566848][T11403] lo: Caught tx_queue_len zero misconfig [ 234.627107][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.793829][T11422] FAULT_INJECTION: forcing a failure. [ 234.793829][T11422] name failslab, interval 1, probability 0, space 0, times 0 [ 234.833660][T11422] CPU: 0 UID: 0 PID: 11422 Comm: syz.1.1319 Not tainted syzkaller #0 PREEMPT(full) [ 234.833689][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.833702][T11422] Call Trace: [ 234.833711][T11422] [ 234.833719][T11422] dump_stack_lvl+0xe8/0x150 [ 234.833754][T11422] should_fail_ex+0x412/0x560 [ 234.833785][T11422] should_failslab+0xa8/0x100 [ 234.833824][T11422] __kmalloc_noprof+0xe8/0x760 [ 234.833845][T11422] ? do_sys_poll+0x313/0x1120 [ 234.833876][T11422] do_sys_poll+0x313/0x1120 [ 234.833912][T11422] ? __lock_acquire+0x6b5/0x2cf0 [ 234.833939][T11422] ? __pfx_do_sys_poll+0x10/0x10 [ 234.833963][T11422] ? is_bpf_text_address+0x26/0x2b0 [ 234.834093][T11422] ? __pfx_timespec64_add_safe+0x10/0x10 [ 234.834128][T11422] __x64_sys_poll+0x190/0x350 [ 234.834154][T11422] ? __pfx___x64_sys_poll+0x10/0x10 [ 234.834188][T11422] do_syscall_64+0x14d/0xf80 [ 234.834207][T11422] ? trace_irq_disable+0x3b/0x150 [ 234.834239][T11422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.834262][T11422] ? clear_bhb_loop+0x40/0x90 [ 234.834285][T11422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.834304][T11422] RIP: 0033:0x7fde9259c799 [ 234.834321][T11422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.834338][T11422] RSP: 002b:00007fde9340e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 234.834357][T11422] RAX: ffffffffffffffda RBX: 00007fde92815fa0 RCX: 00007fde9259c799 [ 234.834370][T11422] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 234.834382][T11422] RBP: 00007fde9340e090 R08: 0000000000000000 R09: 0000000000000000 [ 234.834394][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.834405][T11422] R13: 00007fde92816038 R14: 00007fde92815fa0 R15: 00007fff7c60e628 [ 234.834434][T11422] [ 235.454012][T11452] netlink: 'syz.1.1329': attribute type 24 has an invalid length. [ 235.579025][T11458] tipc: Enabling of bearer rejected, failed to enable media [ 235.669557][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.735116][T11472] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 235.824578][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.707676][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.836901][T11517] netlink: 'syz.1.1347': attribute type 3 has an invalid length. [ 236.865116][T11517] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 236.959803][T11523] netlink: 'syz.2.1348': attribute type 13 has an invalid length. [ 237.011826][T11522] sctp: [Deprecated]: syz.3.1349 (pid 11522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.011826][T11522] Use struct sctp_sack_info instead [ 237.388997][T11545] netlink: 'syz.5.1357': attribute type 1 has an invalid length. [ 237.427179][T11543] lo speed is unknown, defaulting to 1000 [ 237.588651][T11553] syzkaller1: entered promiscuous mode [ 237.594165][T11553] syzkaller1: entered allmulticast mode [ 237.744638][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.984336][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 237.992390][ C0] lec:lec_tx_timeout: lec0 [ 237.997059][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 238.359346][T11595] __nla_validate_parse: 69 callbacks suppressed [ 238.359367][T11595] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1364'. [ 238.409703][T11595] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 238.415079][T11597] netlink: 'syz.5.1366': attribute type 12 has an invalid length. [ 238.527012][T11595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.560114][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 238.579549][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 238.618775][T11597] bond5: entered promiscuous mode [ 238.632236][T11597] bond5: entered allmulticast mode [ 238.637914][T11597] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.659096][T11603] macvlan0: entered promiscuous mode [ 238.671332][T11603] macvlan0: entered allmulticast mode [ 238.681098][T11603] bond4: entered allmulticast mode [ 238.692231][T11603] bond4: entered promiscuous mode [ 238.710332][T11603] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 238.743389][T11603] team0: Port device macvlan0 added [ 238.748814][T11543] lo speed is unknown, defaulting to 1000 [ 238.750552][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 238.773949][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 238.782902][T11613] netlink: 'syz.5.1369': attribute type 1 has an invalid length. [ 238.791592][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.866448][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.352775][T11645] netlink: 'syz.5.1376': attribute type 142 has an invalid length. [ 239.441939][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 239.598337][T11654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1380'. [ 239.665105][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.727938][T11657] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.804172][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1382'. [ 239.824760][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.306221][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.460754][T11678] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 240.495391][T11678] ip6tnl3: entered allmulticast mode [ 240.517936][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 240.731059][ T42] IPVS: starting estimator thread 0... [ 240.824427][T11691] IPVS: using max 29 ests per chain, 69600 per kthread [ 240.865345][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.007790][T11696] lo speed is unknown, defaulting to 1000 [ 241.308813][ T5905] IPVS: starting estimator thread 0... [ 241.404703][T11709] IPVS: using max 29 ests per chain, 69600 per kthread [ 241.600774][T11696] lo speed is unknown, defaulting to 1000 [ 241.689524][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'. [ 241.905554][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.913710][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.909506][T11751] netlink: 'syz.5.1411': attribute type 10 has an invalid length. [ 242.923849][T11751] team0: Cannot enslave team device to itself [ 242.935043][T11751] siw: device registration error -23 [ 242.944737][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.004313][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 243.012366][ C0] lec:lec_tx_timeout: lec0 [ 243.017546][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 243.317967][T11763] lo speed is unknown, defaulting to 1000 [ 243.384436][T11764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.388426][T11769] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 243.423775][T11769] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 243.506773][T11769] bond5 (unregistering): Released all slaves [ 243.764072][T11763] lo speed is unknown, defaulting to 1000 [ 243.986893][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.950583][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.027291][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.299555][T11799] __nla_validate_parse: 8 callbacks suppressed [ 245.299574][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 245.371203][T11797] syzkaller1: entered promiscuous mode [ 245.377283][T11797] syzkaller1: entered allmulticast mode [ 245.536622][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.564487][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.664003][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 245.725399][T11817] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 245.746006][T11820] IPVS: Unknown mcast interface: veth0_to_team [ 245.859893][T11825] syzkaller0: entered promiscuous mode [ 245.875339][T11825] syzkaller0: entered allmulticast mode [ 246.076684][ T5980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.188077][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 246.286718][T11845] netlink: 'syz.5.1438': attribute type 1 has an invalid length. [ 246.294716][T11845] netlink: 'syz.5.1438': attribute type 7 has an invalid length. [ 246.302470][T11845] netlink: 'syz.5.1438': attribute type 8 has an invalid length. [ 246.322195][T11845] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1438'. [ 246.344924][T11845] NCSI netlink: No device for ifindex 1073545264 [ 246.378972][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.419143][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.475096][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.484532][T11845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.492798][T11845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.540963][T11845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.549744][T11845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.596195][T11845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.638761][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 246.640887][T11845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.653460][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 246.691065][T11862] lo speed is unknown, defaulting to 1000 [ 246.908833][T11870] syz_tun: entered promiscuous mode [ 246.919073][T11870] syz_tun: refused to change device tx_queue_len [ 247.047260][T11879] syzkaller1: entered promiscuous mode [ 247.091453][T11879] syzkaller1: entered allmulticast mode [ 247.405711][T11861] lo speed is unknown, defaulting to 1000 [ 247.413711][T11862] lo speed is unknown, defaulting to 1000 [ 248.024308][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 248.032367][ C0] lec:lec_tx_timeout: lec0 [ 248.037366][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 248.139598][T11939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1461'. [ 248.198188][T11929] lo speed is unknown, defaulting to 1000 [ 248.206564][T11861] lo speed is unknown, defaulting to 1000 [ 248.242399][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1462'. [ 248.289573][T11945] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.339555][T11945] bond3: (slave lo): Enslaving as an active interface with an up link [ 248.503037][T11929] lo speed is unknown, defaulting to 1000 [ 248.647089][T11953] netlink: 212064 bytes leftover after parsing attributes in process `syz.1.1465'. [ 249.347061][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 249.779616][T11970] veth1_macvtap: left promiscuous mode [ 249.792891][T11970] macsec0: entered allmulticast mode [ 249.919843][T11990] syzkaller1: entered promiscuous mode [ 249.945434][T11990] syzkaller1: entered allmulticast mode [ 249.976225][T11990] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 250.071343][T11990] bond8: entered promiscuous mode [ 250.095746][T11990] 8021q: adding VLAN 0 to HW filter on device bond8 [ 250.143965][T11997] bond8: (slave bridge0): making interface the new active one [ 250.153788][T11997] bridge0: entered promiscuous mode [ 250.163989][T11997] bridge0: left promiscuous mode [ 250.378142][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 250.505312][T12014] syzkaller0: entered promiscuous mode [ 250.533498][T12014] syzkaller0: entered allmulticast mode [ 250.588290][T12024] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 250.609873][T12022] syz_tun: entered promiscuous mode [ 250.682730][T12029] bond5: entered promiscuous mode [ 250.689552][T12029] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.803592][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1489'. [ 250.844431][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1489'. [ 251.071005][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 251.097717][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 251.233877][T12076] netlink: 'syz.1.1494': attribute type 3 has an invalid length. [ 251.247171][T12067] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1494'. [ 251.264935][ T5933] net_ratelimit: 17 callbacks suppressed [ 251.264951][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.281511][T12073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.420710][T12082] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1498'. [ 251.685118][T12090] netlink: 'syz.2.1503': attribute type 2 has an invalid length. [ 252.150094][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'. [ 252.416991][T12122] netlink: 'syz.5.1510': attribute type 1 has an invalid length. [ 252.746685][T12152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1518'. [ 252.892333][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 253.824297][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 253.832374][ C0] lec:lec_tx_timeout: lec0 [ 253.837023][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.943647][T12206] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 253.965476][T12206] pim6reg1: linktype set to 805 [ 254.097783][T12221] žÿ: renamed from team_slave_1 [ 254.417605][T12235] lo speed is unknown, defaulting to 1000 [ 254.507816][T12246] netlink: 'syz.5.1546': attribute type 1 has an invalid length. [ 254.544162][T12246] netlink: 'syz.5.1546': attribute type 3 has an invalid length. [ 254.552157][T12246] NCSI netlink: No device for ifindex 813332851 [ 254.562346][T12246] IPv6: addrconf: prefix option has invalid lifetime [ 254.612914][T12251] syzkaller0: entered promiscuous mode [ 254.620003][T12251] syzkaller0: entered allmulticast mode [ 254.827560][T12235] lo speed is unknown, defaulting to 1000 [ 255.167936][T12285] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.196415][T12285] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.373706][T12294] syzkaller0: entered promiscuous mode [ 255.393630][T12294] syzkaller0: entered allmulticast mode [ 255.666026][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.875447][T12285] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.901859][T12285] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.962256][T12285] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.972341][T12285] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.106150][T12285] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.121444][T12285] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.190847][T12307] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.342126][T12307] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.424954][T12326] __nla_validate_parse: 8 callbacks suppressed [ 256.424972][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 256.428551][T12320] lo speed is unknown, defaulting to 1000 [ 256.431769][ T9791] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.466334][ T9791] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.483268][T12307] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.525767][ T9791] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.534145][ T9791] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.577303][T12307] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.633801][T10369] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.650882][T10369] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.691375][T10373] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.699828][T10373] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.758663][T10373] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.829175][ T9793] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.889816][ T9793] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.907234][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 256.908161][ T9793] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.991616][T12320] lo speed is unknown, defaulting to 1000 [ 257.311519][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 257.320527][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 257.335963][T12346] lo speed is unknown, defaulting to 1000 [ 257.414775][T12351] vlan3: entered promiscuous mode [ 257.438425][T12351] vlan3: entered allmulticast mode [ 257.444703][T12351] geneve1: entered allmulticast mode [ 257.682423][T12346] lo speed is unknown, defaulting to 1000 [ 257.788662][T12363] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 257.811511][T12363] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 258.056646][T12362] lo speed is unknown, defaulting to 1000 [ 258.410267][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 258.585308][T12385] bond_slave_1: mtu greater than device maximum [ 258.624224][T12385] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 258.637813][T12385] bond9 (unregistering): Released all slaves [ 258.674509][T12371] lo speed is unknown, defaulting to 1000 [ 258.689134][T12391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.864544][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 258.872663][ C0] lec:lec_tx_timeout: lec0 [ 258.877475][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 258.888971][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 258.902007][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 259.023901][T12371] lo speed is unknown, defaulting to 1000 [ 259.071595][T12362] lo speed is unknown, defaulting to 1000 [ 259.643697][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 259.668932][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1593'. [ 259.875054][T12418] netlink: 'syz.5.1595': attribute type 39 has an invalid length. [ 260.112339][T12425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1597'. [ 260.188940][T12427] x_tables: duplicate underflow at hook 1 [ 260.286778][T12432] netlink: 'syz.2.1599': attribute type 9 has an invalid length. [ 260.549781][T12447] netlink: 'syz.3.1605': attribute type 32 has an invalid length. [ 260.726112][T12452] lo speed is unknown, defaulting to 1000 [ 261.056663][T12452] lo speed is unknown, defaulting to 1000 [ 261.504712][T12476] batadv0: entered promiscuous mode [ 261.897710][T12500] __nla_validate_parse: 5 callbacks suppressed [ 261.897730][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 261.948208][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1618'. [ 261.973647][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 262.318349][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 262.683950][T12539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1627'. [ 262.693950][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 262.720942][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1628'. [ 262.771574][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1628'. [ 262.896387][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1629'. [ 263.083171][T12552] xfrm0: mtu less than device minimum [ 263.161942][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 263.782404][T12593] netlink: 'syz.3.1642': attribute type 10 has an invalid length. [ 263.821822][T12593] hsr0: entered promiscuous mode [ 263.869009][T12593] bridge0: port 3(hsr0) entered blocking state [ 263.878851][T12593] bridge0: port 3(hsr0) entered disabled state [ 263.884534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 263.887498][T12593] hsr0: entered allmulticast mode [ 263.893270][ C0] lec:lec_tx_timeout: lec0 [ 263.900368][T12593] hsr_slave_0: entered allmulticast mode [ 263.903181][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 263.909411][T12593] hsr_slave_1: entered allmulticast mode [ 263.957094][T12593] bridge0: port 3(hsr0) entered blocking state [ 263.963485][T12593] bridge0: port 3(hsr0) entered forwarding state [ 264.212498][T12620] netlink: 'syz.1.1648': attribute type 2 has an invalid length. [ 264.686153][T12639] FAULT_INJECTION: forcing a failure. [ 264.686153][T12639] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 264.724476][T12639] CPU: 1 UID: 0 PID: 12639 Comm: syz.3.1655 Not tainted syzkaller #0 PREEMPT(full) [ 264.724504][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.724529][T12639] Call Trace: [ 264.724538][T12639] [ 264.724546][T12639] dump_stack_lvl+0xe8/0x150 [ 264.724581][T12639] should_fail_ex+0x412/0x560 [ 264.724611][T12639] _copy_from_iter+0x1d3/0x1670 [ 264.724643][T12639] ? rcu_is_watching+0x15/0xb0 [ 264.724678][T12639] ? __pfx__copy_from_iter+0x10/0x10 [ 264.724713][T12639] ? netlink_sendmsg+0x650/0xb40 [ 264.724739][T12639] ? skb_put+0x11b/0x210 [ 264.724772][T12639] netlink_sendmsg+0x6c0/0xb40 [ 264.724808][T12639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.724839][T12639] ? aa_sock_msg_perm+0xf1/0x1b0 [ 264.724881][T12639] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.724906][T12639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.724932][T12639] ____sys_sendmsg+0xa68/0xad0 [ 264.724972][T12639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.725013][T12639] ? import_iovec+0x73/0xa0 [ 264.725046][T12639] ___sys_sendmsg+0x2a5/0x360 [ 264.725083][T12639] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.725149][T12639] ? __fget_files+0x2a/0x420 [ 264.725196][T12639] ? __fget_files+0x3a0/0x420 [ 264.725237][T12639] __x64_sys_sendmsg+0x1bd/0x2a0 [ 264.725270][T12639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.725312][T12639] ? __pfx_ksys_write+0x10/0x10 [ 264.725345][T12639] do_syscall_64+0x14d/0xf80 [ 264.725365][T12639] ? trace_irq_disable+0x3b/0x150 [ 264.725396][T12639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.725418][T12639] ? clear_bhb_loop+0x40/0x90 [ 264.725445][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.725465][T12639] RIP: 0033:0x7f8631b9c799 [ 264.725485][T12639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.725504][T12639] RSP: 002b:00007f86329c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.725526][T12639] RAX: ffffffffffffffda RBX: 00007f8631e15fa0 RCX: 00007f8631b9c799 [ 264.725542][T12639] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 264.725555][T12639] RBP: 00007f86329c8090 R08: 0000000000000000 R09: 0000000000000000 [ 264.725568][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.725581][T12639] R13: 00007f8631e16038 R14: 00007f8631e15fa0 R15: 00007ffdde94a8c8 [ 264.725615][T12639] [ 265.259474][T12668] netlink: 'syz.3.1660': attribute type 2 has an invalid length. [ 265.442304][T12675] 8021q: VLANs not supported on syzkaller1 [ 265.498789][T12681] netlink: 'syz.3.1666': attribute type 4 has an invalid length. [ 265.513354][T12681] netlink: 'syz.3.1666': attribute type 4 has an invalid length. [ 265.744758][ C0] [ 265.747147][ C0] ============================================ [ 265.753297][ C0] WARNING: possible recursive locking detected [ 265.759460][ C0] syzkaller #0 Not tainted [ 265.763877][ C0] -------------------------------------------- [ 265.770028][ C0] syz.0.1667/12689 is trying to acquire lock: [ 265.776105][ C0] ffff888068caaf70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 265.785189][ C0] [ 265.785189][ C0] but task is already holding lock: [ 265.792561][ C0] ffff888079cc2f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 265.802848][ C0] [ 265.802848][ C0] other info that might help us debug this: [ 265.810912][ C0] Possible unsafe locking scenario: [ 265.810912][ C0] [ 265.818395][ C0] CPU0 [ 265.821682][ C0] ---- [ 265.824974][ C0] lock(&hsr->seqnr_lock); [ 265.829483][ C0] lock(&hsr->seqnr_lock); [ 265.833987][ C0] [ 265.833987][ C0] *** DEADLOCK *** [ 265.833987][ C0] [ 265.842136][ C0] May be due to missing lock nesting notation [ 265.842136][ C0] [ 265.850454][ C0] 11 locks held by syz.0.1667/12689: [ 265.855746][ C0] #0: ffff888035168340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0xa10 [ 265.864833][ C0] #1: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 265.874353][ C0] #2: ffff88805902e678 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 265.884815][ C0] #3: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 265.894826][ C0] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 265.903970][ C0] #5: ffff888079cc2f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 265.914700][ C0] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 265.924228][ C0] #7: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 265.934165][ C0] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1920 [ 265.943393][ C0] #9: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 265.953295][ C0] #10: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 265.962541][ C0] [ 265.962541][ C0] stack backtrace: [ 265.968433][ C0] CPU: 0 UID: 0 PID: 12689 Comm: syz.0.1667 Not tainted syzkaller #0 PREEMPT(full) [ 265.968451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.968460][ C0] Call Trace: [ 265.968467][ C0] [ 265.968473][ C0] dump_stack_lvl+0xe8/0x150 [ 265.968495][ C0] print_deadlock_bug+0x279/0x290 [ 265.968519][ C0] __lock_acquire+0x253f/0x2cf0 [ 265.968540][ C0] ? sock_def_readable+0xae/0x580 [ 265.968557][ C0] ? sock_def_readable+0x2ff/0x580 [ 265.968571][ C0] ? sock_def_readable+0xae/0x580 [ 265.968589][ C0] lock_acquire+0xf0/0x2e0 [ 265.968607][ C0] ? hsr_dev_xmit+0x237/0x360 [ 265.968624][ C0] ? dev_queue_xmit_nit+0x969/0xad0 [ 265.968645][ C0] ? hsr_dev_xmit+0x237/0x360 [ 265.968662][ C0] _raw_spin_lock_bh+0x36/0x50 [ 265.968682][ C0] ? hsr_dev_xmit+0x237/0x360 [ 265.968698][ C0] hsr_dev_xmit+0x237/0x360 [ 265.968715][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 265.968732][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 265.968760][ C0] __dev_queue_xmit+0x17a7/0x38d0 [ 265.968789][ C0] ? __dev_queue_xmit+0x28d/0x38d0 [ 265.968803][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 265.968824][ C0] ? ebt_do_table+0x2665/0x2830 [ 265.968840][ C0] ? ebt_do_table+0x2665/0x2830 [ 265.968857][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.968878][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 265.968895][ C0] br_dev_queue_push_xmit+0x370/0x4a0 [ 265.968909][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 265.968922][ C0] NF_HOOK+0x360/0x3f0 [ 265.968934][ C0] ? NF_HOOK+0xa2/0x3f0 [ 265.968946][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 265.968957][ C0] ? arch_check_zapped_pte+0x2d/0xb0 [ 265.968971][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 265.968988][ C0] br_forward_finish+0xd3/0x130 [ 265.968999][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 265.969012][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 265.969024][ C0] NF_HOOK+0x360/0x3f0 [ 265.969036][ C0] ? NF_HOOK+0xa2/0x3f0 [ 265.969047][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 265.969059][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 265.969073][ C0] ? __skb_clone+0x483/0x7a0 [ 265.969091][ C0] ? br_handle_vlan+0x61/0x530 [ 265.969111][ C0] __br_forward+0x397/0x540 [ 265.969122][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 265.969136][ C0] br_flood+0x6ee/0xb80 [ 265.969152][ C0] ? br_dev_xmit+0x193/0x1920 [ 265.969168][ C0] br_dev_xmit+0x127a/0x1920 [ 265.969185][ C0] ? br_dev_xmit+0x193/0x1920 [ 265.969202][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 265.969219][ C0] ? dev_queue_xmit_nit+0x2d/0xad0 [ 265.969238][ C0] ? call_netdevice_notifiers_info+0xe0/0x100 [ 265.969254][ C0] ? dev_queue_xmit_nit+0x2d/0xad0 [ 265.969275][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 265.969301][ C0] __dev_queue_xmit+0x17a7/0x38d0 [ 265.969313][ C0] ? handle_softirqs+0x22a/0x870 [ 265.969331][ C0] ? unmap_page_range+0x1b4c/0x48f0 [ 265.969346][ C0] ? __dev_queue_xmit+0x28d/0x38d0 [ 265.969359][ C0] ? exit_to_user_mode_loop+0x86/0x480 [ 265.969375][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.969392][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.969407][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 265.969431][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 265.969448][ C0] ? skb_clone+0x246/0x3a0 [ 265.969468][ C0] hsr_forward_skb+0x157b/0x2860 [ 265.969491][ C0] ? hsr_forward_skb+0xb3/0x2860 [ 265.969510][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 265.969527][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 265.969542][ C0] ? __asan_memset+0x22/0x50 [ 265.969562][ C0] ? __skb_pad+0x405/0x610 [ 265.969575][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 265.969596][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 265.969614][ C0] hsr_announce+0x1db/0x370 [ 265.969630][ C0] ? hsr_announce+0x89/0x370 [ 265.969645][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 265.969665][ C0] call_timer_fn+0x192/0x640 [ 265.969681][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 265.969696][ C0] ? call_timer_fn+0xd4/0x640 [ 265.969712][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 265.969732][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.969750][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 265.969772][ C0] __run_timer_base+0x652/0x8b0 [ 265.969786][ C0] ? ktime_get+0x45/0x200 [ 265.969802][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 265.969819][ C0] ? sched_clock_cpu+0x74/0x440 [ 265.969839][ C0] run_timer_softirq+0xb7/0x170 [ 265.969854][ C0] handle_softirqs+0x22a/0x870 [ 265.969873][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 265.969893][ C0] __irq_exit_rcu+0x5f/0x150 [ 265.969909][ C0] irq_exit_rcu+0x9/0x30 [ 265.969925][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 265.969946][ C0] [ 265.969950][ C0] [ 265.969955][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.969970][ C0] RIP: 0010:arch_check_zapped_pte+0x2d/0xb0 [ 265.969985][ C0] Code: d6 41 57 41 56 53 48 89 f3 49 89 fe e8 dc 41 4d 00 49 83 c6 20 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 f7 e8 09 67 b7 00 4d 8b 36 49 bf 00 00 00 00 20 00 00 [ 265.969997][ C0] RSP: 0018:ffffc9000cf0f380 EFLAGS: 00000246 [ 265.970009][ C0] RAX: 1ffff1100683247c RBX: 80000000651d2007 RCX: dffffc0000000000 [ 265.970019][ C0] RDX: 0000000000000000 RSI: 80000000651d2007 RDI: ffff8880341923c0 [ 265.970029][ C0] RBP: ffffc9000cf0f670 R08: ffffea0001947487 R09: 1ffffd4000328e90 [ 265.970039][ C0] R10: dffffc0000000000 R11: fffff94000328e91 R12: 1ffffd4000328e93 [ 265.970049][ C0] R13: dffffc0000000000 R14: ffff8880341923e0 R15: ffffea0001947488 [ 265.970066][ C0] unmap_page_range+0x1b4c/0x48f0 [ 265.970098][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 265.970117][ C0] ? mas_find+0xb0e/0xd30 [ 265.970137][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 265.970153][ C0] unmap_vmas+0x48f/0x6a0 [ 265.970171][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 265.970194][ C0] exit_mmap+0x280/0xa10 [ 265.970215][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 265.970243][ C0] ? __pfx_exit_aio+0x10/0x10 [ 265.970266][ C0] ? uprobe_clear_state+0x27c/0x290 [ 265.970283][ C0] __mmput+0x118/0x430 [ 265.970300][ C0] exit_mm+0x168/0x220 [ 265.970314][ C0] do_exit+0x62e/0x2320 [ 265.970327][ C0] ? cgroup1_freezing+0x20/0x350 [ 265.970345][ C0] ? __pfx_do_exit+0x10/0x10 [ 265.970358][ C0] ? cgroup1_freezing+0x20/0x350 [ 265.970375][ C0] ? cgroup1_freezing+0x20/0x350 [ 265.970395][ C0] do_group_exit+0x21b/0x2d0 [ 265.970408][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.970427][ C0] get_signal+0x1284/0x1330 [ 265.970451][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 265.970468][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 265.970490][ C0] exit_to_user_mode_loop+0x86/0x480 [ 265.970505][ C0] ? rcu_is_watching+0x15/0xb0 [ 265.970525][ C0] do_syscall_64+0x32d/0xf80 [ 265.970537][ C0] ? trace_irq_disable+0x3b/0x150 [ 265.970556][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.970570][ C0] ? clear_bhb_loop+0x40/0x90 [ 265.970585][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.970598][ C0] RIP: 0033:0x7f503779c799 [ 265.970609][ C0] Code: Unable to access opcode bytes at 0x7f503779c76f. [ 265.970616][ C0] RSP: 002b:00007f50385cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 265.970629][ C0] RAX: fffffffffffffe00 RBX: 00007f5037a15fa8 RCX: 00007f503779c799 [ 265.970639][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5037a15fa8 [ 265.970647][ C0] RBP: 00007f5037a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 265.970656][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.970663][ C0] R13: 00007f5037a16038 R14: 00007ffc939ee3f0 R15: 00007ffc939ee4d8 [ 265.970679][ C0] [ 268.914352][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 268.922373][ C0] lec:lec_tx_timeout: lec0 [ 268.926951][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 273.934296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.942373][ C0] lec:lec_tx_timeout: lec0 [ 273.946913][ C0] lec:lec_start_xmit: lec0:No lecd attached