last executing test programs: 4.803955292s ago: executing program 2 (id=11272): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x6b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pim6reg\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x24008040) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000005c0)='%-010d \x00'}, 0x55) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f0000000880)="40f05373f047010000bf7bbb7c00", 0x0, 0xbaa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.61497293s ago: executing program 2 (id=11277): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000000)=@ax25={{0x3, @rose}, [@default, @netrom, @rose, @remote, @rose, @rose, @netrom, @netrom]}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x5, 0x401, 0x1, 0xffffff0b, 0x5}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x6b, @empty, 0xffff}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xba4, @local, 0x319}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r3, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c68d59c07b6f911670061287f3"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b62ff30bd5"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "f6ed"}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1a8b3a5c75f257160e8cda548e"}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff58}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x16, 0x34, @random="ba3f47291201762290aa1b1f842e2f49e9bc"}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040880}, 0x12000441) r4 = socket(0x1e, 0x80000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000004c0)=0x4, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000580)={r1, 0x1}, &(0x7f00000005c0)=0x8) preadv(r6, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/2, 0x2}, {&(0x7f0000000640)=""/81, 0x51}, {&(0x7f00000006c0)=""/249, 0xf9}], 0x3, 0x81, 0x9) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) read$nci(r8, &(0x7f0000000840)=""/93, 0x5d) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) ioctl$NILFS_IOCTL_SYNC(r9, 0x80086e8a, &(0x7f0000000900)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000940)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f00000009c0)={@private0, 0x37, r10}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000a00)) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r3, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendto$packet(r4, &(0x7f0000000b80)="b86afe3439a45dbe6f40e1550df4625460b0e241fa26d8509e6bc317a671d423690c829e4efefbcb6bc6e22d6bc396350bc81f8c216022c2505e496b2642ed1b41f9dbb73296222584c46e35f48f5deb413b40bfb08c58265fcc6c64096c442d7bffd81dd57c6bf1b45c7f329243d918543bf73c3cd24d0cab3dd06f1777f16f9013cc33ccca7853306af013bd810df8e1bec70c91c279fc572a9d97aa438fd6ad9a2220abc34ef3edc706a656e26993e0f28fbb07007a566dd28f52081b4bacdef83c968e4c21753fbc3d658a1f9da82791e2e71c0c6efa2bc365315f0bf4a917", 0xe1, 0x84, &(0x7f0000000c80)={0x11, 0x9, r10, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r5) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000e00)={r7, 0x6b7, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000e40)=0x5506, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000e80)={r7, 0x81, 0x1, 0x6}, &(0x7f0000000ec0)=0x10) 4.397488527s ago: executing program 0 (id=11280): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) pipe(&(0x7f0000000180)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000800280012800a00010076786c616e00ec330877ec61ad2b515371b802b760cd531acbb8db6be57ae137a673ed547b0376403c2c7837bc5e98665c1ef210a2a67036c1f047306550f600c24995cdee296748d5897d879e2b2eea2c310f894ed812c39ad13e789d"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) 4.287549035s ago: executing program 0 (id=11282): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x40}}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x2003, 0x0, 0x0, 0x40}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x5, 0xfffffa9a, 0x4000000, 0x4, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/50, 0x32, 0x122, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x2a, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 4.094773766s ago: executing program 4 (id=11287): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000002}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) read(r2, &(0x7f0000000380)=""/154, 0x9a) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000110000000000000002000000000a28000000000a010800002100000000000a00000008000240000000020900010073797a300000000028000000000a030000000000000000000a00000008000240000000000900010073797a3000000000140000001900010000000000000000000000000a2d55a4816bd186464ba2b8af113e566a8256860531ac3bc506e212"], 0x78}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) write$tun(r5, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x2}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$alg(0x26, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r9}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="08002abd7000fcdbdf25010000000000000001410000001800170000001f000007ff7564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x44055}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xa51e, 0x38}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x9}, 0x2c3c2e2a2517c2aa) 3.693192165s ago: executing program 2 (id=11290): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x4040044) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) r3 = socket(0x3, 0x4, 0x6) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x9, r2, 0x39, r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x7d, @mcast2, 0x94b}, 0x1c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x174, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8880}, 0x4000080) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000500)={0x8, 0xc68b, 0x1b6, 0x6, 0x3, 0x9, 0x0, 0xafe}, &(0x7f0000000540)={0xb, 0x1, 0x1, 0x3, 0x3, 0xe9, 0x1000, 0x100000000}, &(0x7f0000000580)={0x7, 0x4, 0x6, 0xc4, 0x2a9, 0x4, 0x0, 0x8000}, &(0x7f0000000600)={r7, r8+60000000}, &(0x7f0000000680)={&(0x7f0000000640)={[0xbd]}, 0x8}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000006c0)={'gretap0\x00'}) sendmsg$nl_route(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@setneightbl={0x38, 0x43, 0xb12, 0x70bd28, 0x25dfdbfd, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x80000001}, @NDTA_THRESH3={0x8, 0x4, 0x3}, @NDTA_THRESH1={0x8, 0x2, 0x29}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x40804) ppoll(&(0x7f0000000800)=[{r3, 0x5}], 0x1, &(0x7f0000000840), &(0x7f0000000880)={[0x1800]}, 0x8) sendmsg$inet(r1, &(0x7f0000001a80)={&(0x7f00000008c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000900)="e99b91ed28bf989808fef2044db7425ad70229ced1a75558acb92bd5d0d0ade3800a9d0716d0480167c992046d84c1918bda9b8d7fd560a3f38b74e7c26c7f413dc20068caa5bf1e290f47ce6598ad0d94bd9b6cc7ddd1e98cfb8bd7ae2cf6f13fc6e6c4c312cb56902fcf856117edd0a3b6ce7738114e19171788b5ddeb649e76b6e7dcd388e0c4e8f8ba845cc707c2", 0x90}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="c3ac0d1760141266619c2cc23b69f2321b2eb179b17b12aae874165fc2f9cf915f50bc59a567776aa18d9a949dbabee79f4d821ec06d202672293cfea1d728", 0x3f}], 0x3, &(0x7f0000001a40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) recvmmsg(r4, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b40)=""/28, 0x1c}], 0x1, &(0x7f0000001bc0)=""/23, 0x17}, 0x5}, {{&(0x7f0000001c00)=@generic, 0x80, &(0x7f0000002140)=[{&(0x7f0000001c80)=""/193, 0xc1}, {&(0x7f0000001d80)=""/231, 0xe7}, {&(0x7f0000001e80)=""/55, 0x37}, {&(0x7f0000001ec0)=""/80, 0x50}, {&(0x7f0000001f40)=""/123, 0x7b}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)=""/122, 0x7a}, {&(0x7f0000002080)=""/182, 0xb6}], 0x8, &(0x7f00000021c0)=""/215, 0xd7}, 0x9}, {{&(0x7f00000022c0)=@can, 0x80, &(0x7f0000003700)=[{&(0x7f0000002340)=""/216, 0xd8}, {&(0x7f0000002440)=""/183, 0xb7}, {&(0x7f0000002500)=""/101, 0x65}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/99, 0x63}, {&(0x7f0000003600)=""/210, 0xd2}], 0x6, &(0x7f0000003780)}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f00000037c0)=""/96, 0x60}, {&(0x7f0000003840)=""/136, 0x88}, {&(0x7f0000003900)=""/115, 0x73}, {&(0x7f0000003980)=""/143, 0x8f}, {&(0x7f0000003a40)=""/111, 0x6f}], 0x5, &(0x7f0000003b40)=""/238, 0xee}, 0xc}, {{&(0x7f0000003c40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003cc0)=""/118, 0x76}, {&(0x7f0000003d40)=""/29, 0x1d}, {&(0x7f0000003d80)=""/162, 0xa2}, {&(0x7f0000003e40)=""/26, 0x1a}, {&(0x7f0000003e80)=""/216, 0xd8}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/43, 0x2b}], 0x7, &(0x7f0000004140)=""/53, 0x35}, 0x3}, {{&(0x7f0000004180)=@nl=@unspec, 0x80, &(0x7f00000054c0)=[{&(0x7f0000004200)=""/82, 0x52}, {&(0x7f0000004280)=""/14, 0xe}, {&(0x7f00000042c0)=""/164, 0xa4}, {&(0x7f0000004380)=""/249, 0xf9}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)}], 0x6, &(0x7f0000005540)=""/108, 0x6c}, 0xc}], 0x6, 0x40000060, &(0x7f0000005740)={0x0, 0x3938700}) syz_genetlink_get_family_id$gtp(&(0x7f0000005780), r1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005800), r0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000005840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000005940)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005900)={&(0x7f0000005880)={0x48, r10, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x92}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2dc}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4080) r12 = accept4$phonet_pipe(r3, &(0x7f0000005980), &(0x7f00000059c0)=0x10, 0x800) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r12, 0xc9c2b000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r12, 0x40047211, &(0x7f0000005a00)=0x28) writev(r9, &(0x7f0000006d40)=[{&(0x7f0000005a40)="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", 0xfb}, {&(0x7f0000005b40)="2afe6dd455db25b47d1d57ad8175c7100920b20a00464ced1dcd8734c2302c28c5fba09889be4240248742ee095053cabc220c8163aec06f33059e23f40ea4828081bd0c8055d5e14dd88b94734344ba33eb6892c4456cc3ccc8851c334bed1dc529cabcfaec9a194664375f45", 0x6d}, {&(0x7f0000005bc0)="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", 0x1000}, {&(0x7f0000006bc0)="f549b9f359ce42af28ed6ef60844f38bb7807c89fffc7ec8f6e62fb314b0420aea20a7a4c2056da687e353382a3f9f0e5cefd05e22e1ec83a2d71d98140974436ebc247a6405700c85bb6af39abbd1b8", 0x50}, {&(0x7f0000006c40)="cc4a62c5dba5a2ce3967d4b2019b5780e6f9b328a2b006c142c56554688105bf28", 0x21}, {&(0x7f0000006c80)="c7c5d2772c15a7c9c40f6075e2756457de96354390d095d0e75177267a47a0796821c609885079840c4e54f2d8c900c8c85026ab002c6817948cf7e778bbb734fd2574d8754bd7a0a2f49d6577a25addc1279d59c1483b0bac4df15778547caac305faac4b906d3376f0608de533b2c59a9b032c56e4f6ee645497c70013cce097", 0x81}], 0x6) sendmsg$NFT_BATCH(r4, &(0x7f0000006fc0)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006f80)={&(0x7f0000006e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x12c, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xf9, 0x8, "8a39f533d1b19c771521ef42ea0c326daa9f2d94174073354e139921774f54c27d0b2666b535c6cacbae3f36bc1c1df2f0874db568034456574123f9311b972d2cdc79f1fcd66c0ada1fb55831a8f989c5390ed7943a608e7e62861c42aa1be529b62e5864670a04c0856eeb0dd5851647a9bd258e4e4d563dbce0cc4609bffe07618325fd8aea6f873af099e354d39d741d0408ea822e94d0fbae2b7ea1c21b3bac65c2b1ca1c8d86f4464fe8a76febf64bb85716179431033222e37f17435a83f868d8e155f13b0aff28979b2cacdcf476ba3bd570199f1d158123573975c6f4989ba80b15991dd260c841ed93760a18578b9698"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x40d1) socket$nl_generic(0x10, 0x3, 0x10) 3.54768291s ago: executing program 2 (id=11291): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x8b51, 0x4392610, 0x2, 0x6, 0x17, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "0a0c00000046dac48f29d158dbe8cfb1979e12979688dc839b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f26aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a8a84f1d4d132f5bb79dcfdb3370a262000001006b6cec3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cfffffffff19c6a48a5442cabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d100"}]}}]}, 0x159}}, 0x4000010) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRESOCT=r0, @ANYBLOB="4400228040000100240401006d6f00010000000000000000000000000000000000000000000000000000000005000300056c97f1024cfb015f50e056efb1a7101cccf75e1b2662473bbd8e5deb795e0b463ad3c58811a6fb23207d85e1a29294138d295a275e9b333ee64d33ce6242503da2e46feb6cf592681a8b5680db385b1bb53b86e01859a847b3a14ccf"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x48094) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)=ANY=[@ANYBLOB="680200000005010400000000000000000200000a5402010001000000070000000408060008001a0073797a3000000000000000000000000000000000000000000000000000000000914ba820c09d274ee86c250f05aed67434bf12b56cec7846f2d79717d5b9014af152cdf18d97c0414069203d0f8440c1a030ff45d6c99bcffd3a68fd99dd96620800000002000000000800000300fffb00000000000000000800060002000000020000000180070003000000ff0f000006000600020000000200000002000010020000000100010003000100020000000700000003000a000000000001000000ff03020003000000050000000100460603000000050000000200ae00000000000300000000010300030000005900000009000600030000000200000001fc05000000000007000000ff01f6ff0000000099ac0000050002000000000003000000000202003bb21a040400000000000500020000000500000008000100030000000900000000007704000000001700000001011000000000000010000001000a00010000004077ffffffff7f5801000000feffffff0d0000000000000000000100000054660100000003000000010003000000000082e60000060000040000000008000000c0c70a0c00000000000000000800b6b401000000001000003a03870f0200000009000000060081000000000000000000010004000000000005000000070001000200000009000000070001000200000006000000070009000300000005000000080070e801000000070000000200fe1c0100000008000000070181000000000001000000fbb201000100000008000000ff0003000000000029000000"], 0x268}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xbffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xc}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300", @ANYRES32=r10, @ANYBLOB="04005b00"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4810) close(0x3) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000008000000000000000b00000091116400000000009501000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.132114432s ago: executing program 0 (id=11294): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) accept4$nfc_llcp(r1, 0x0, &(0x7f0000000040), 0x80800) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x9213}}, 0x30) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000004003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8008044}, 0x0) syz_emit_ethernet(0xfeb6, 0x0, 0x0) syz_emit_ethernet(0x3d, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x2}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x34, 0x27, 0x68, 0x0, 0x81, 0x21, 0x0, @broadcast, @remote}, {{0x4e22, 0x4e22, 0x4, 0x1, 0xd, 0x0, 0x0, 0x8, 0x6, "8c7cf4", 0x9, "9edd82"}, "c16d0a"}}}}}, 0x0) 1.03622666s ago: executing program 2 (id=11296): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="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", 0x1000, 0x40000, &(0x7f0000001180)={0x11, 0xd, r5, 0x1, 0x1, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f00000000c0)={0x1d, r13}, 0x18) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13}, 0x18) sendmmsg(r12, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)="f55099b901313b89c6", 0x9}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001480)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1}}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x5, 0xf, 0xa, 0x10, 0x11, 0x3}}]}}]}, 0x148}}, 0x4000010) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800910}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20000810) 1.002630206s ago: executing program 3 (id=11297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000000c98d711b4cfd8e01050000000000000000000700000320000d80140004002001000000000000000000000000000008"], 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x200048c5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x7, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f3100000000140000001100010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x2) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "adf83dd9149bc431", "bbc6ae386b11411f6ff3dce3504e9d5c", '\x00', "a5cc48f33a8300"}, 0x28) recvfrom(r4, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x54) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b008646dc3f25220a793abce7d4fbbd09baf3fb0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x45, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcac48dc4}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000000c00000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xfe7, &(0x7f0000000a80)=""/4071, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 984.886869ms ago: executing program 0 (id=11299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600014000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e", 0x68}], 0x1}, 0x4008040) r1 = socket(0x1d, 0x80802, 0x6) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfd}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x6, 0x2000}, 0xffffffffffffff3c) 907.387393ms ago: executing program 4 (id=11300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0xc0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x34}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 892.764706ms ago: executing program 0 (id=11301): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) write(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3d) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2581000000931ec2c235a95e97020c76d789b2876fb60f9984d8d35f78c6e57e6b0526025788ef10d2b215aaab7f4b504f71ac64430397e66f65490627a4a30366092e7415d5b2e68996afa5e05cc4720b00f4a021e1b21748f8729e327b4b9264ac8f16faff91d64bc46dc06fd83eaac884c1eccd60ae6599478ad4f08e9e0f4cd0783f662794e73264a556ee91ff8b3f72a80fbd87124a9b5b54e9030aea35ced280e484bb76f7fdac7b5fc9fc856a896c19206670f5e155d2d4c4f98fc11b68e56ab2bb7a270c92", @ANYRES32=0x0, @ANYBLOB="9052040049820400200012800b00010065727370616e000010000280050016000200000004001200"], 0x40}}, 0x0) 683.960921ms ago: executing program 3 (id=11303): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 682.992998ms ago: executing program 1 (id=11304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x4, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) sendmsg$sock(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="eb", 0x1}], 0x1}, 0x40080c4) 640.218952ms ago: executing program 4 (id=11305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000060000001800c3ff", @ANYRES32, @ANYBLOB="000000000032ac94ce0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 630.720136ms ago: executing program 1 (id=11306): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={r1, 0xe0, "46b4a77f65fdd5cc909f6dacaa52d5d765d383be18fc371935340041f4b42bfe5591a3eee7b47b4a10fd25e4651bb65c5f10043512f912f8f3fe840e0ccde52d03fe56a5414de00a595e1e6aa31a6d2b36d0267cc7482669ae2cc148ff60ea020da71466c9ff21d50c3cdd043858770b5b280a25affd9df895a6603cf02071cdc94edf527010c3a33e67dc5f82d08bfa75c353c2a890d914030a5b9129d8bf036e148cd638ab10948a076c7c47943b3de47e28740ad8c9481dd3c0447192c173e57c50ff321df9d50bf99febd2ca1b051669d906dd6f405d5fa431079da30d27"}, &(0x7f0000000240)=0xe8) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000280)={0xc80, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000300)={0x2c, 0x21, '\x00', [@pad1, @hao={0xc9, 0x10, @private0}, @generic={0x0, 0x8, "95241328e5c40be3"}, @ra={0x5, 0x2, 0x2}, @generic={0x8, 0xe5, "a5d9c6a4da9e6b23a6951759827985b3da63bd52ae7cce4d5280d175daadb819a6ee158370e7512812220eb121690ef1073bafe2ca3c39d81edd5253203945e845e6f8dc19300aa5b0bc7867a3e5799f13905f56e6f07729f0913023ffa1ce2062684724e94b663ec9fdb51971898fef9789bab2fa9d743735c29896505d2a069ea40030a3b22b7c50eed37d04f8bb9311a1f21c37c0c28ad61b4d3b078e32a5b26c91b297a77b4f0223a772e6bae8b80db72be1f55296a7647b7b464ae1a49b8f545e1aa4d8b0e93fbe484238df8c1f413a495ec317f507ffd5b36af6533bda6b83bd73cd"}]}, 0x118) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002a00)={&(0x7f0000000440)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000004c0)="c0bf48ff3b611d8c5b244e944105e7501f06a301ce5c1fb1f8577eccf3a318148f0f601729812c1d177bbba623de93fb7b", 0x31}, {&(0x7f0000000500)="85a52726ee3e54e417cb7d2e8d49dca7e5c3282d9dc03008da3e1470c16618d777a71a8b98268852546afe84f6d5bf342156460f6d4373a18308b50a583728ebea98065738bef369debce6739720c5a53e64c4f406c07a0d6d81b764d4c7fa2ea50e1e6a90ae9987c297fdb3aa48e8178ae7e1a3", 0x74}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="1fdd0ec4481d81a3b12fe44ded501f6211606fb7e46d1e977a1c162618114e7210734f19087f956b699889446fc1830c2ec966e0082ec5b8d303ba3723f5fe44ae3c6d2f9366b4e1d8900597addbdccdc86cbc17e85774b1285372acbd2f28b8c9fb584f358faa619549814baed21a4f16771c0cc75f8b5281f0567d9654515907e05c1dfe1476bbdec0dcb60e989fd654e379019e26af189400ae094c9b744743078c636c570762ccea64337798f2eb8905052f2d87023644ed0d1a217b31d45d1cdfa85db7d4e00c8b4cf56f25", 0xce}, {&(0x7f0000001680)="889b7402a745cef11abee0d01af662bfc6c38d26ce2ac849f71a02c732bc64530b294d81b98719fbbbe31c8c5230bbc548520d5330dd7dd4f0ffa98c80d3524cb17d2cd333efa07e55c603c69c2c3c019588b634eaeea11a242a80e4032a", 0x5e}, {&(0x7f0000001700)="f9b8b3fcb6061cf4d777cac3b88bf0aec28c", 0x12}, {&(0x7f0000001740)="e7ba36f069bdc4881c2a347ccfb534d67d0665c14d0f9529129820c41a319d134fbc85c07fa513c7d3be678fe16f6e9c4669c82bd87e1b6430abec65743cb2f1d0e2a270693f2a4521fc56b77ad375b5fc46114484fe5f7d83bb6d0d7b01115b187c8c4820f05de01797295a6c4c5e43152b24c9d92d9c5033cc894a72", 0x7d}, {&(0x7f00000017c0)="888c622f3059299cb69332054b1e97c889923ca5a3e34682cbf7f02a7b4e2442569826264b5cbd68f7b75519ab59e5044921d254c1e800423cfc3f6d", 0x3c}, {&(0x7f0000001800)="4ff5066d32ceea2bb6219906031eb37d08c5617b291ea523395b0f272b5725d7adfd4bd806ff22336494db9eeeb473faefd68dbb3e603a6893cbabc692de372573fd85acb211b8956bfe7de966b6822ef4abbe081187cd2d93a8f938f8c4ec36d887adebb3ae9d2ef73a7308d8a8884f358d6cd3abd990f385d8460e81986005d9", 0x81}, {&(0x7f00000018c0)="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", 0x1000}], 0xa, &(0x7f0000002980)=[{0x70, 0x1, 0x5, "e2a1993bacfd945e6f774374565cf3328f893259d619dcdabb33e50a839e5c2887ba2c44bc2fd709dabd220e1e0043924a9b20453568c9c9c0d809fc850b1b1384e97142ae6cad6684c029b46e508cc0f1be8b3f3d8a6c9416ca8f05ee88"}], 0x70}, 0x4041) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000002b40)={r0, &(0x7f0000002a40)='}\x00', 0x28000, &(0x7f0000002a80)={@align=0x5, {0x4, 0x0, 0x0, 0x5}}, 0x6, &(0x7f0000002ac0), &(0x7f0000002b00)=0xffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x68, r5, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000002e00)={r0, &(0x7f0000002d00)='[+!}./:\x00', 0x400, &(0x7f0000002d40)={@align=0x1, {0x856, 0xed8, 0x7, 0xfffffffffffffffe}}, 0xb8c0, &(0x7f0000002d80), &(0x7f0000002dc0)=0x6691}) sendmsg$kcm(r6, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002e40)="88281091158dbedce6052ea29da7d72a6c74ba514f9161229ed041d029fe072167213a4ca3e76435fabc02cd539719370733c4ff9c0b", 0x36}, {&(0x7f0000002e80)="8500da3f29c89ebb7da967bf9bdf613efd37a8547004bad4f185151dc2124558f11c7cd334bd0e3cb1e17f1a7e3b654a457978bf0386ee7ac2714455b327f6a9c88c1457a6289ffe3da138ff3eee9c0c68fbc04d2f1968efa4e4874f74a69e5d0170b19b14eee1933bfd8afaf31403ce3ddbc755e0a5264ad4a101bcef0eb2", 0x7f}, {&(0x7f0000002f00)="4109afd385170d53eef9c452d5765a98a858e37c42f6b91502dd1ec4f15e26c682cc70378246a5c8c94a6cfe432a1ad8d983ddea796ebddc8ea7e644039a59f4247597410899ab3c1315159c017f9eb021717956f7506503cbc4fb97417a432db65ccaeb9359437d940f719f8022e2638c6c49443c8a30eafa24ace4e94016d087b6c5d9c7a4b49a49c0c5bf5a520b45f298cb6805282811bf324ea1ceea", 0x9e}, {&(0x7f0000002fc0)="67c2a777755b2f2b7faaeaaa0d4ec29b9d5310d9eb41afeff95ccf9a721391c17cc54beed7985e06a5fdf32ef4087e70d2684900ea9aa7ab8004cbdc446e86ee3531a6c274cb3b36c0e97ec35e0fa5758a03e30584f4667a23aa70b191b23f12362f2ecb8992d58733ccc9595cc515bf7dc61120f63f8b3555ad3089a86ff807e85796df303432a105f3e7adc641b5b3d0bde4802309623eaa73ff49c995b55e4ffa4b9997849833817b694cdfd6c3e0d0b8a4035694", 0xb6}, {&(0x7f0000003080)="a5699151219cdb360425e4ee24055b80afe6f1cf9e61b9f6e847d5f41319abf14373fb70e556b5df65b8a50bcca850f3dde5aa8082eace8c1362f0a648536b716be86bd7e4f48befb901f12e38b9274df12b87d41950ad5d3eed13ec2fad7ebde1cd897a4f1fec9aa57578fa258d53d65e92c95775e0e55896fd53229c98fb1191ff72", 0x83}, {&(0x7f0000003140)="be9a9a06057e93016746606609d97c17db5e3aec7bb4fae158f9d22fd7b47b8b79aa471220b6667480f95f10bbf60a2bfe15bd1ea88dfad62a3a5ac27221e9d96c66a666105d98788a7343493cf1a42f453601bf858414bc8215ab9144ae37f351c8bf9f77bc20945c31bf76ce86a55c0a3ef420956d398555228f2de62b7e17cd90a43dbb11aa837093d67ae0ebe9caf4beb2471b9d0327e27a45a1451895202d2a2d6a8d7bbddd6417f0869d1649beda92c9de2663e75b503637e17f0375a76066ce1bfc9ce25b69810d6c67098705660446b1525631037e22e433a5ca02d0ad77", 0xe2}], 0x6, &(0x7f00000032c0)=[{0x10, 0x115}, {0xd0, 0x114, 0x8, "48d2df28fc97ab315da107bce559c1d1eb527ef8e87b8a02a02e2d905334b5e72f51b7e8327f9e06b261d6e4266103e37d3d25771628cdbb20fe6166566dddc8f983ce88cba7c361acf541ec017c282d88b77ba05aacd4afa650aa0443f98e3f1f8eab77926477ddc43450c04b7c6b946ef05354ad7d55acc4246c229bb707a2700780c5b7923a6dbfa92843c1b821ebe98aac403d9593a2c434fb9cdfd81dc35f234fe4f1b24c54927850d0a42cd661f26887ce49f1eb0eae8e"}, {0xe0, 0x109, 0x9, "a70ed4dd6276aafb1bddcba084c156c75578180ad2719013b1df0eeb9fbd89a6623b6a2a2a9f765b8d842e09d602442bbcc695bf1fc75a7114b5006458d2d5c292baf1ee84eccc5134138fe565c855caf789aa0d2203e95a2856c4a93cc3367283d8348cf3ce66e7b7a025e16f036a079590be8b1a9e918463e342d06df88c4463b0cd42331b23eeba2ccb6f9151f9af6e233dc1b4ce91dae7130d27a03bad5d5ff447dbb424e4ac6c8a59f548f90ac252f19e6358782e3119454f9b6b236cdfcd58c568cc7b8be0a39417"}, {0x1010, 0x103, 0xa, "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"}, {0xe8, 0x3a, 0x93, "1d1a6df93f319b316d3bfa857fc6ece696eab1a59f2c771fe6c1d98b05a9d4af8f07b200ffa902af9fe57446b5c6c6816f6100ae358187ef3a69f3069b5ac3be9c0bd883566c03f5323cbe91629844d05f029fbf385b490004d622a1fd6ecf8a2ef08d19a724fec377242afba51960296ccd58f8f49524da8e8379e9014a63d599eae223b12016f24445e61173844db54a5834743058c192f9ac9ee149d210928b28fa004cc7657ca40e18cea1f936cfdb6c9fc8a4e953c60bc4e5196cd2d8ebbd03ac38856fd5c4c1c4d01e0a68be0b8150ebeb28dd031a"}, {0x90, 0x117, 0x5, "d762054a9458ec7dce75f07506032b10876b6f4e7c42a45309900f591d9500d07c9ec3135b7436172c5717679a2fd2c87a8d664a8137b6e824d7d9bb5bbe34ce0f7b40616c3710efc37d759e06cefa3bb07d90d3010bb96617923bd94d42143e75f4c4c1fa1fef752fb35f3f658e6f8d0cc3efe06c5f91d41bc6"}], 0x1348}, 0x11) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000004680)=0x9, 0x4) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000004780)={'syztnl0\x00', &(0x7f00000046c0)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x7fffffff, 0x7fff, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x68, 0x0, 0xde, 0x4, 0x0, @private=0xa010100, @private=0xa010101, {[@timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x7, [{@local, 0x6}, {@rand_addr=0x64010101, 0x9}, {@local, 0x3}, {@remote, 0x8}]}, @ssrr={0x89, 0x7, 0x7b, [@broadcast]}, @rr={0x7, 0xf, 0xd0, [@multicast2, @multicast1, @multicast1]}, @rr={0x7, 0xb, 0x42, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @rr={0x7, 0x1b, 0xfc, [@empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000004840)={'erspan0\x00', &(0x7f00000047c0)={'syztnl1\x00', r7, 0x8, 0x10, 0xfff, 0xffffff01, {{0x15, 0x4, 0x1, 0x9, 0x54, 0x8, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xa6, 0x1, 0x1, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@empty, 0x6}, {@multicast1, 0xfffffffa}]}, @timestamp_addr={0x44, 0xc, 0xa8, 0x1, 0x8, [{@rand_addr=0x64010101, 0x9}]}]}}}}}) epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) pwritev(r9, &(0x7f0000004c40)=[{&(0x7f0000004880)="accedd43a9a5bfc9425afa9eb6bb024de7a225e28ceb32dfba1be3a93673c406b64230d3211ca6febbbcde336621e8b2fa0bdcea4b226aee9676c2c9c2bf643256e70ccfeced8fff67f5143ce7b18687bf256d0c899557753beb8d52f7f5b53454b0f53f9f4b338a3271d1eb29097d2fe6f16373da974deeb3aa0b2778ffc98c7523bb895a13b83995c4fcf0ace6b76d3402fa53dc84325a71306199a929d36c4cc8c2fc7c0bfe23c3c20f7b69613c1c0f0fbbd08878890e0a3b81193dab9395d1012b031d7fced82b3a05d844b0bef615ede5b5b00b539b4cf4f5347d52b50de37fc7d820a2bc00a8335590ccd4e5f94ae9caefdaa24f7559966eb87d", 0xfd}, {&(0x7f0000004980)="f76ae3452b7a69a6bf7d621c3d530a7dbb0fd01c758252107597a1daef654891a52e168f9fc62463185a63cfb1cb17a4", 0x30}, {&(0x7f00000049c0)="2b4d13e3384977faec13c26538a7c5fb9856bb7799a6c5d914c93ac0cdcca016da2db0e655a019", 0x27}, {&(0x7f0000004a00)="452322a976a1d1d4f801f6163fcef786ee53dacf28019447daf395f32fc0c77dc39beedcfe740c5062e34279c683a6b4d29a56da10429a9d19194016c1bdeaf9bf07d60c4650df2cc0ec1cdc09c13fbda2a436207729983b417d75d5be76e9463a08c8f2135c465a874ac7bba0e0651d686c2f5df742d960f10880a7ec5fd119e681041241e401a78b93920437eb596afdf48d5ba0e396e01859049f4cd2a99cd69e443668f6c5a7400c184f2f3abc478f859aaf3c7312bd7fe483b778c13f03e7c72f360bfffa55a7", 0xc9}, {&(0x7f0000004b00)="9d91f7d20fb5cf57cd50f69825a547e6170670a0d2cd8d5d4d2a11d2fe8b1aa058f4fbca11291146a8123c40ae54aacb7a3902cd9d386c9baae4c080ed7a28af9bb8e4bdcc930ac5cf592dbc07d7bc12fae9056b4bf4091c00fb23b0eed9af52d26326e8667695fab9e9c02ebb507ab93b9045661805f03de7e02e872d1880362bfea49c8047c6fc7953d975833628086a5bb83572d7f9e715b7c8e46fccafe7a7aa9ff2c46aefba568637dea875fe71c6c85964e6f4e15219809ded182b9e44a3dd0cb8d053", 0xc6}, {&(0x7f0000004c00)="95c086d9e505c365d095833e", 0xc}], 0x6, 0x6, 0x5) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000004dc0)={r3, &(0x7f0000004cc0)='\x00', 0x400, &(0x7f0000004d00)={@_ha_fsid={[0x10000, 0x6]}, {0x46, 0x7, 0x100, 0xffffffff00000001}}, 0x2, &(0x7f0000004d40), &(0x7f0000004d80)=0x6}) ioctl$sock_x25_SIOCADDRT(r10, 0x890b, &(0x7f0000004e00)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x2, 'veth1\x00'}) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004f40), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x1c, r11, 0xba6cb288e95b6b2, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$NILFS_IOCTL_GET_CPSTAT(r10, 0x80186e83, &(0x7f0000005040)) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000050c0), r9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000005180)={'ip6tnl0\x00', &(0x7f0000005100)={'syztnl1\x00', r8, 0x29, 0x2, 0x5, 0x5f51, 0x1, @local, @empty, 0x750, 0x7800, 0x10000}}) sendmsg$ETHTOOL_MSG_STATS_GET(r6, &(0x7f0000005540)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005500)={&(0x7f00000051c0)={0x320, r12, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_GROUPS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf3e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "ea"}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "b700d4b40689d2f61e982851071de66a6c9d114e75c556fe48c2aec77a1b4889871260e4c56e3291eed050207179951df6b993817c751542fa599732545249e9937dc968c096cb07"}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "dccd2e9b926aa71d0b5aed7d87579242ce578ed924acffd7ef9092ea3ca52b553bd39530ef7bb5d2c33b4ad086906d5ea62b571285a3da4f316145b79bff2c6a3dda000f215c9f6f479b476dcf3db886dd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa619}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_STATS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STATS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_STATS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STATS_GROUPS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x25e5e826}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[,&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x33, 0x5, "a25cf7f85b09088d857a72574bbbfab4370f18c12d8a83e34ca2a832e7f8a247f88d723c9840df091bc097b642876f"}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x110}, 0x2404c040) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000005580)={r2, 0x3, 0xa, 0x7f3}, 0x10) 585.515322ms ago: executing program 3 (id=11307): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000001c0)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000001800dd8d00000000000000000220100000007e06000101028ae36ead0ffbf53bd73cc6ffe4efb560cf9fc030cd1b2470b5264c07feed967289931b5686e42c330d91d37425423e98e709d2e0d3c2a41975960e00f046db971d962428c8bd0b7f7c3a24df7df950521b5d1c04214d5e8d01b560f11a7608fb0254511e46431de50b51c506d7865a4f319cf8240ca74276ac89ed1a100e17283454ac10ad2fd0d6f2ddfdf0db"], 0x2c}, 0x1, 0x0, 0x0, 0x10000801}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0xfa88, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8, 0xfffb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x5d}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb1d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038d88646faa6e9053502000000e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55f9b9881d15633717817c7383e41ec2f119a6a6364d68900c1cce4a3b3225a9009e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2a783f691be9eba75cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221004000"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x95, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) 520.252182ms ago: executing program 1 (id=11308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x400000000000009) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x4044000) 500.576578ms ago: executing program 4 (id=11309): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4892}, 0x44000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2bbb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000100005ff00130000000000000000004a", @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a0001"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4000000) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x8050) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) (async) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000240)={0x8, 0x1, 0x5, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10) (async) close(r3) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async) listen(r7, 0x5) (async) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580020007"], 0x4a) 411.903424ms ago: executing program 3 (id=11310): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_BASIC_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001400010000000000000000002d000000020000000500"], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) 364.087978ms ago: executing program 1 (id=11311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f00000002c0)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x5f, 0x5f, 0x2e, 0x51, 0x5f, 0x61]}}, 0x0, 0x20, 0x0, 0x1}, 0x28) 321.953642ms ago: executing program 3 (id=11312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004050) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9e0399a188f698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f0000000080)=@fragment={0x2f, 0x0, 0x0, 0x1, 0x0, 0x14, 0x64}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00002f00000061116e0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x46}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r9, &(0x7f0000000380)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}]}, &(0x7f00000002c0)=0x10) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r11, &(0x7f0000000340), 0x2, 0x0) 309.582203ms ago: executing program 4 (id=11313): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c578608f7c85e7c13e76d4dfc8ec2070000", @ANYRES16=0x0, @ANYBLOB="120629bd7000fedbdf252800000008002c0013000000060006000100000005002e0081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r3, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@s}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x5824, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 187.34299ms ago: executing program 1 (id=11314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x140, 0x65, 0x400, 0x270bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x114, 0x2, [@TCA_BPF_ACT={0x110, 0x1, [@m_bpf={0x54, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x29, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be109311739257508"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xb8, 0x13, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0x61, 0x6, "3f664d65ad79178dad4d7815e4c50308bfba3f35e2b90355966ed0ed5095219549287bd8b7c2a4646f1cb6b7f0853d3faf9141b4852152ae06b923f29f87d7dcc542255be647ec06862fbe83a0b5909e656ae759165d478e15639b1ad7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r1 = socket(0x2a, 0x80000, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000006000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'macvtap0\x00', {0x2, 0x0, @initdev}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000001fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x3, 0xfffffff9, 0x40, @local, @mcast2, 0x20, 0x7800, 0xc, 0x400}}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000ac0)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@bloom_filter={0x1e, 0xd2, 0x3, 0xfffffff7, 0x69102, r5, 0x4, '\x00', 0x0, r7, 0x0, 0x1, 0x0, 0x2, @value=r7}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f00000002c0), &(0x7f0000000340)=r10}, 0x20) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000f40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000022}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x8004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @generic={0x0, 0x1, 0x3, 0x836, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x80, 0x6, 0x8, 0xfff8, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x374}]}, &(0x7f00000006c0)='GPL\x00', 0x7fff, 0x4c, &(0x7f0000000880)=""/76, 0x40f00, 0x20, '\x00', r6, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x7, 0xa, 0x101}, 0x10, 0x2ba74, r2, 0x2, &(0x7f0000000d00)=[r7, r8, r10], &(0x7f0000000d40)=[{0x1, 0x1, 0x4, 0x7}, {0x1, 0x5, 0x10, 0x7}], 0x10, 0x6}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80000}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010001000000fedbdf25030000000f0001800c00028008000300af0400000d0001007564703a73797a3000000000"], 0x34}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000700)=0x4, 0x4) 186.405968ms ago: executing program 0 (id=11315): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'veth0_virt_wifi\x00', {0x3b}, 0x26}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @rand_addr, {[@timestamp_addr={0x44, 0x2c, 0x6e, 0x1, 0xa, [{@remote, 0xfffffff2}, {@rand_addr=0x64010100, 0x80000000}, {@local, 0x80}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @rand_addr, {[@timestamp_addr={0x44, 0x2c, 0x6e, 0x1, 0xa, [{@remote, 0xfffffff2}, {@rand_addr=0x64010100, 0x80000000}, {@local, 0x80}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}}}}, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x240000c6) nanosleep(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 151.935275ms ago: executing program 3 (id=11316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010004b0400000020000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000a00000240012800b00010000726964676500001400028005002a000100000005002b0008000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x804) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000280)="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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) 136.223083ms ago: executing program 4 (id=11317): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800f0001"], 0x4c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES8], 0x20, 0x6044}, 0x6) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x30, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800dd8d29bd700000000000020000f0ffffff070000000006001500050000000c00168005"], 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x80, 0x3, 0x7, 0x8, 0x8, 0x2, 0x9, {0x0, @in6={{0xa, 0x4e23, 0xf4, @private0={0xfc, 0x0, '\x00', 0x1a}, 0x1}}, 0x0, 0x8, 0x5, 0x74e, 0x80}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={r6, 0x0, 0x4, [0x7, 0x3ff, 0x4, 0x3]}, &(0x7f0000000280)=0x10) 106.684233ms ago: executing program 2 (id=11318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x14d, 0x0, 0x1, [@nested={0x13, 0x7a, 0x0, 0x1, [@nested={0xc, 0x28, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @u32=0x3}]}, @generic="a96c45"]}]}]}, 0x28}], 0x1}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x19e) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500), 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r10 = socket$pppoe(0x18, 0x1, 0x0) accept4(r10, &(0x7f0000000240)=@tipc=@id, &(0x7f00000002c0)=0x80, 0x80000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000390400000000fc179ef695228822e1406184ffffff00000000", @ANYRES32=r9, @ANYBLOB="0198000000000000"], 0x20}}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x3df, 0x2}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000400)={r13, 0xaa3, 0x1, 0x9, 0x7fff, 0x2}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c00ea002004026ae761c90e2ecf5e289bd03e6c147152cfdb4c3432f19aabbc83f11f4c54702874aa8e5eafc32d44367d7b4f42093903c7e834b850baa122caf65c8f23bc18e5df73a2627195bb0117d36b9535a18d654336616a7898d7f8eb32978aec88b776a74538ae5554aa47af2a8d167bedfc0dc94a74f1d75a30a10bac7c68cadc57db09f3a6b6679600d9b573f1d0c096796fb249409d1c18ea43716eb54f12e4fa52aa1f1652c63123686b21896a98a6ebf18e6a8f3549f06a15a866c5cfaae62a", @ANYRES32=r9, @ANYBLOB="40100000002902005c0012800b00010067656e65766500004c000280080002006401010005000d0006000000050003001700000005000a000000000008000200ac141428060005004e200000080001000100000005000a00000000000500080001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x2400c04d}, 0x40000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYRES16=r6, @ANYRES16=r15, @ANYRESHEX=r13], 0x34}}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r16) writev(r1, &(0x7f0000006280)=[{&(0x7f00000041c0)="d2cf43", 0x3}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=11319): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100fdffffffffdbdf25ff010000000000000000000000000001ac1414bb0000000000000080000000104e20000bf7ff00000a00e00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000000000000ffffffffffffffff001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000080000000000000000000000000000000fcffffff00"/112], 0xb8}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x8c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r4, &(0x7f0000000040)=0x1, r5, &(0x7f00000000c0)=0x2, 0x9, 0x0) unshare(0x20000400) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r2, &(0x7f0000000140)=0x33, 0x1000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, 0x0, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, 0x0, 0x300080c1) setsockopt$sock_attach_bpf(r11, 0x1, 0x9, &(0x7f0000000080), 0x4) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.503519][T11022] RIP: 0033:0x7f78bff9e159 [ 1273.503536][T11022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.503550][T11022] RSP: 002b:00007f78c0eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1273.503567][T11022] RAX: ffffffffffffffda RBX: 00007f78c0225fa0 RCX: 00007f78bff9e159 [ 1273.503580][T11022] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 1273.503591][T11022] RBP: 00007f78c0eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.503602][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1273.503612][T11022] R13: 00007f78c0226038 R14: 00007f78c0225fa0 R15: 00007ffdd42c42c8 [ 1273.503641][T11022] [ 1273.503664][T11022] Mem-Info: [ 1273.503674][T11022] active_anon:5693 inactive_anon:0 isolated_anon:0 [ 1273.503674][T11022] active_file:2 inactive_file:44315 isolated_file:0 [ 1273.503674][T11022] unevictable:0 dirty:174 writeback:0 [ 1273.503674][T11022] slab_reclaimable:12148 slab_unreclaimable:123587 [ 1273.503674][T11022] mapped:30006 shmem:554 pagetables:1326 [ 1273.503674][T11022] sec_pagetables:0 bounce:0 [ 1273.503674][T11022] kernel_misc_reclaimable:0 [ 1273.503674][T11022] free:1219134 free_pcp:26779 free_cma:0 [ 1273.503718][T11022] Node 0 active_anon:22772kB inactive_anon:0kB active_file:8kB inactive_file:177060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120024kB dirty:696kB writeback:0kB shmem:2216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15452kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1273.503770][T11022] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1273.503814][T11022] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.503862][T11022] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1273.503894][T11022] Node 0 DMA32 free:917672kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22772kB inactive_anon:0kB active_file:8kB inactive_file:177060kB unevictable:0kB writepending:696kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:104600kB local_pcp:21804kB free_cma:0kB [ 1273.503943][T11022] lowmem_reserve[]: 0 0 0 0 0 [ 1273.503973][T11022] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.510995][T11022] lowmem_reserve[]: 0 0 0 0 0 [ 1273.511039][T11022] Node 1 Normal free:3943504kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2516kB local_pcp:0kB free_cma:0kB [ 1273.511090][T11022] lowmem_reserve[]: 0 0 0 0 0 [ 1273.511119][T11022] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1273.511218][T11022] Node 0 DMA32: 673*4kB (UME) 386*8kB (UME) 262*16kB (UME) 899*32kB (UM) 369*64kB (UME) 534*128kB (UME) 218*256kB (UME) 76*512kB (UME) 38*1024kB (UME) 9*2048kB (UM) 155*4096kB (UM) = 917652kB [ 1273.511352][T11022] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1273.511435][T11022] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943556kB [ 1273.511581][T11022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.511596][T11022] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1273.511610][T11022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.511623][T11022] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1273.511637][T11022] 44867 total pagecache pages [ 1273.511645][T11022] 0 pages in swap cache [ 1273.511651][T11022] Free swap = 124996kB [ 1273.511658][T11022] Total swap = 124996kB [ 1273.511665][T11022] 2097051 pages RAM [ 1273.511671][T11022] 0 pages HighMem/MovableOnly [ 1273.511678][T11022] 428705 pages reserved [ 1273.511684][T11022] 0 pages cma reserved [ 1273.556249][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9851'. [ 1273.733971][T11027] xt_hashlimit: size too large, truncated to 1048576 [ 1274.551377][T10945] wg2 speed is unknown, defaulting to 1000 [ 1274.773515][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9859'. [ 1274.896168][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9860'. [ 1274.953616][T10945] wg2 speed is unknown, defaulting to 1000 [ 1274.978736][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9860'. [ 1275.200269][T11076] macsec1: entered promiscuous mode [ 1275.314853][T10945] wg2 speed is unknown, defaulting to 1000 [ 1275.357589][T11079] netlink: 'syz.1.9866': attribute type 2 has an invalid length. [ 1275.712799][T10945] wg2 speed is unknown, defaulting to 1000 [ 1276.222326][T10945] wg2 speed is unknown, defaulting to 1000 [ 1276.767599][T10945] wg2 speed is unknown, defaulting to 1000 [ 1276.782313][T11215] netlink: 'syz.0.9874': attribute type 1 has an invalid length. [ 1276.821047][T11215] netlink: 'syz.0.9874': attribute type 10 has an invalid length. [ 1276.821291][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.821782][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.828860][T11215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.829068][T11215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.829359][T11215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.829457][T11215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.925155][T11215] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1277.287606][T11225] __nla_validate_parse: 1 callbacks suppressed [ 1277.287626][T11225] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9876'. [ 1277.596963][T11232] netlink: 'syz.4.9879': attribute type 12 has an invalid length. [ 1277.598015][T11237] netlink: 'syz.4.9879': attribute type 12 has an invalid length. [ 1277.765446][T11241] ip_tables: iptables: counters copy to user failed while replacing table [ 1277.797625][T11241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9883'. [ 1277.819115][T11244] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9884'. [ 1277.819139][T11244] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9884'. [ 1277.899123][T11248] ip_tables: iptables: counters copy to user failed while replacing table [ 1278.293635][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9889'. [ 1278.293934][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9889'. [ 1278.297519][T11266] netlink: 'syz.2.9889': attribute type 1 has an invalid length. [ 1278.297536][T11266] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.9889'. [ 1278.606940][T11270] Bluetooth: MGMT ver 1.23 [ 1278.793551][T11275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.844213][T11275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.878715][T11275] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1278.881581][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.881784][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.886554][T11275] bond0 (unregistering): Released all slaves [ 1279.159814][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9898'. [ 1279.333120][T11311] netlink: 'syz.4.9901': attribute type 21 has an invalid length. [ 1279.333258][T11311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9901'. [ 1279.333289][T11311] netlink: 'syz.4.9901': attribute type 1 has an invalid length. [ 1279.409679][T11313] ip_tables: iptables: counters copy to user failed while replacing table [ 1279.453541][T11315] netlink: 'syz.3.9903': attribute type 1 has an invalid length. [ 1279.543511][T11315] bond4: entered promiscuous mode [ 1279.544732][T11315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1279.588423][T11321] macvtap1: entered allmulticast mode [ 1279.634105][T11315] bond4: (slave bridge1): making interface the new active one [ 1279.634129][T11315] bridge1: entered promiscuous mode [ 1279.635638][T11315] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1279.689869][T11326] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9905'. [ 1279.948187][T11326] dummy0 (unregistering): left allmulticast mode [ 1279.948301][T11326] bridge0: port 3(dummy0) entered disabled state [ 1280.642829][T11374] netlink: 'syz.3.9916': attribute type 11 has an invalid length. [ 1280.651557][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1281.685552][T11432] openvswitch: netlink: IP tunnel dst address not specified [ 1282.257358][T11466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.303276][T11466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.729034][T11493] __nla_validate_parse: 8 callbacks suppressed [ 1282.729054][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9957'. [ 1282.821567][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9957'. [ 1283.548760][T11508] netlink: 'syz.2.9959': attribute type 4 has an invalid length. [ 1283.548774][T11508] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9959'. [ 1283.549796][T11508] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1285.227501][T11467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1285.404975][T11511] siw: device registration error -23 [ 1285.421232][T11513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1285.538934][T11525] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9965'. [ 1285.790257][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9972'. [ 1285.856633][T11553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9972'. [ 1285.858798][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9972'. [ 1285.980006][T11561] netlink: zone id is out of range [ 1285.980022][T11561] netlink: zone id is out of range [ 1285.980046][T11561] netlink: zone id is out of range [ 1285.980054][T11561] netlink: zone id is out of range [ 1285.980062][T11561] netlink: zone id is out of range [ 1285.980069][T11561] netlink: zone id is out of range [ 1286.145942][T11565] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9977'. [ 1286.146140][T11565] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9977'. [ 1286.146320][T11565] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9977'. [ 1286.295914][T11576] netlink: 'syz.3.9980': attribute type 4 has an invalid length. [ 1286.485199][T11592] ip_tables: iptables: counters copy to user failed while replacing table [ 1287.048481][T11611] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 1287.519725][T11624] syzkaller1: entered promiscuous mode [ 1287.519744][T11624] syzkaller1: entered allmulticast mode [ 1287.842033][T11632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1287.928587][T24114] IPVS: starting estimator thread 0... [ 1287.964936][T11645] __nla_validate_parse: 40 callbacks suppressed [ 1287.964963][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9995'. [ 1288.024179][T11643] IPVS: using max 35 ests per chain, 84000 per kthread [ 1288.265444][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10000'. [ 1288.588922][T11675] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10006'. [ 1288.603865][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10006'. [ 1288.603919][T11675] bridge_slave_1: left allmulticast mode [ 1288.603930][T11675] bridge_slave_1: left promiscuous mode [ 1288.604060][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.608136][T11675] bridge_slave_0: left allmulticast mode [ 1288.608151][T11675] bridge_slave_0: left promiscuous mode [ 1288.608292][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.879030][T11691] net_ratelimit: 1 callbacks suppressed [ 1288.879049][T11691] ip_tables: iptables: counters copy to user failed while replacing table [ 1289.076644][T11701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1289.096955][T11701] netlink: 284 bytes leftover after parsing attributes in process `syz.2.10013'. [ 1289.327984][T11710] syzkaller1: entered promiscuous mode [ 1289.327998][T11710] syzkaller1: entered allmulticast mode [ 1289.773819][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10026'. [ 1289.812665][T11743] bond5: entered promiscuous mode [ 1289.812689][T11743] bond5: entered allmulticast mode [ 1289.889730][T11748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.901497][T11748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.909075][T11748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.925021][T11751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10028'. [ 1289.978681][T11748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.992123][T11748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.995434][T11748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1289.999745][T11748] veth1_vlan: left promiscuous mode [ 1290.022596][T11757] netlink: 'syz.3.10029': attribute type 3 has an invalid length. [ 1290.034258][T11748] veth0_vlan: left promiscuous mode [ 1290.035801][T11748] veth0_vlan: entered promiscuous mode [ 1290.038140][T11748] veth1_vlan: entered promiscuous mode [ 1290.061402][T11748] veth0_macvtap: left promiscuous mode [ 1290.062443][T11748] veth0_macvtap: entered promiscuous mode [ 1290.102531][T11748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1290.103948][T11748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1290.104945][T11748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1290.105919][T11748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1290.108082][T11748] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1290.211509][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10032'. [ 1290.271680][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.274865][T13131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.274913][T13131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.274942][T13131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.464169][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10037'. [ 1290.641500][T11782] netlink: 'syz.1.10041': attribute type 1 has an invalid length. [ 1290.861209][T11795] syzkaller0: entered promiscuous mode [ 1290.861230][T11795] syzkaller0: entered allmulticast mode [ 1290.862283][T11795] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10045'. [ 1290.863049][T11795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1291.075785][T11812] nbd: must specify at least one socket [ 1291.289890][T11822] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1291.511725][T11842] FAULT_INJECTION: forcing a failure. [ 1291.511725][T11842] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.511756][T11842] CPU: 1 UID: 0 PID: 11842 Comm: syz.4.10058 Not tainted syzkaller #0 PREEMPT(full) [ 1291.511776][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1291.511787][T11842] Call Trace: [ 1291.511795][T11842] [ 1291.511803][T11842] dump_stack_lvl+0xe8/0x150 [ 1291.511835][T11842] should_fail_ex+0x410/0x560 [ 1291.511862][T11842] should_failslab+0xa8/0x100 [ 1291.511887][T11842] __kvmalloc_node_noprof+0x176/0x820 [ 1291.511908][T11842] ? bpf_compute_postorder+0x87c/0x970 [ 1291.511930][T11842] ? bpf_stack_liveness_init+0x29/0x90 [ 1291.511952][T11842] ? bpf_stack_liveness_init+0x29/0x90 [ 1291.511979][T11842] bpf_stack_liveness_init+0x29/0x90 [ 1291.512001][T11842] bpf_check+0x24f6/0x2e10 [ 1291.512033][T11842] ? ktime_get_with_offset+0x93/0x2d0 [ 1291.512056][T11842] ? __pfx_bpf_check+0x10/0x10 [ 1291.512077][T11842] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1291.512106][T11842] bpf_prog_load+0x14d6/0x1c20 [ 1291.512139][T11842] ? __pfx_bpf_prog_load+0x10/0x10 [ 1291.512185][T11842] __sys_bpf+0xd0d/0xd90 [ 1291.512214][T11842] ? __pfx___sys_bpf+0x10/0x10 [ 1291.512246][T11842] ? __fget_files+0x2a/0x420 [ 1291.512288][T11842] ? ksys_write+0x242/0x270 [ 1291.512317][T11842] ? __pfx_ksys_write+0x10/0x10 [ 1291.512349][T11842] __x64_sys_bpf+0xba/0xd0 [ 1291.512371][T11842] do_syscall_64+0x166/0x520 [ 1291.512394][T11842] ? trace_irq_disable+0x3b/0x140 [ 1291.512412][T11842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.512436][T11842] ? clear_bhb_loop+0x70/0xc0 [ 1291.512460][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.512478][T11842] RIP: 0033:0x7f83c7b9e159 [ 1291.512496][T11842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.512511][T11842] RSP: 002b:00007f83c5df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1291.512531][T11842] RAX: ffffffffffffffda RBX: 00007f83c7e25fa0 RCX: 00007f83c7b9e159 [ 1291.512545][T11842] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 1291.512557][T11842] RBP: 00007f83c5df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.512569][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.512581][T11842] R13: 00007f83c7e26038 R14: 00007f83c7e25fa0 R15: 00007ffcfa50ebe8 [ 1291.512611][T11842] [ 1298.250994][T24114] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1302.251015][T31216] Bluetooth: hci2: command 0x0406 tx timeout [ 1317.612607][T31216] Bluetooth: hci5: command 0x0406 tx timeout [ 1330.251401][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1338.093214][T31216] Bluetooth: hci1: command 0x0406 tx timeout [ 1347.662950][T11864] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 1347.814919][T11872] netlink: 'syz.3.10064': attribute type 1 has an invalid length. [ 1348.053234][T11897] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 1348.223740][T11911] FAULT_INJECTION: forcing a failure. [ 1348.223740][T11911] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.223771][T11911] CPU: 0 UID: 0 PID: 11911 Comm: syz.3.10075 Not tainted syzkaller #0 PREEMPT(full) [ 1348.223791][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1348.223803][T11911] Call Trace: [ 1348.223810][T11911] [ 1348.223818][T11911] dump_stack_lvl+0xe8/0x150 [ 1348.223849][T11911] should_fail_ex+0x410/0x560 [ 1348.223876][T11911] should_failslab+0xa8/0x100 [ 1348.223900][T11911] __kvmalloc_node_noprof+0x176/0x820 [ 1348.223920][T11911] ? bpf_compute_postorder+0x87c/0x970 [ 1348.223940][T11911] ? bpf_stack_liveness_init+0x29/0x90 [ 1348.223962][T11911] ? bpf_stack_liveness_init+0x29/0x90 [ 1348.223989][T11911] bpf_stack_liveness_init+0x29/0x90 [ 1348.224010][T11911] bpf_check+0x24f6/0x2e10 [ 1348.224038][T11911] ? ktime_get_with_offset+0x93/0x2d0 [ 1348.224071][T11911] ? __pfx_bpf_check+0x10/0x10 [ 1348.224092][T11911] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1348.224121][T11911] bpf_prog_load+0x14d6/0x1c20 [ 1348.224152][T11911] ? __pfx_bpf_prog_load+0x10/0x10 [ 1348.224197][T11911] __sys_bpf+0xd0d/0xd90 [ 1348.224225][T11911] ? __pfx___sys_bpf+0x10/0x10 [ 1348.224256][T11911] ? __fget_files+0x2a/0x420 [ 1348.224296][T11911] ? ksys_write+0x242/0x270 [ 1348.224325][T11911] ? __pfx_ksys_write+0x10/0x10 [ 1348.224357][T11911] __x64_sys_bpf+0xba/0xd0 [ 1348.224378][T11911] do_syscall_64+0x166/0x520 [ 1348.224401][T11911] ? trace_irq_disable+0x3b/0x140 [ 1348.224419][T11911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.224438][T11911] ? clear_bhb_loop+0x70/0xc0 [ 1348.224460][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.224478][T11911] RIP: 0033:0x7f209bf9e159 [ 1348.224494][T11911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.224509][T11911] RSP: 002b:00007f209a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1348.224528][T11911] RAX: ffffffffffffffda RBX: 00007f209c225fa0 RCX: 00007f209bf9e159 [ 1348.224541][T11911] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 1348.224553][T11911] RBP: 00007f209a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.224564][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.224575][T11911] R13: 00007f209c226038 R14: 00007f209c225fa0 R15: 00007ffe978c7a98 [ 1348.224605][T11911] [ 1348.225181][T11910] __nla_validate_parse: 2 callbacks suppressed [ 1348.225196][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10073'. [ 1348.274961][T11912] batadv_slave_1: entered promiscuous mode [ 1348.557258][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1348.588544][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1348.682111][T11931] x_tables: duplicate underflow at hook 1 [ 1349.141404][T11915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.637167][T11928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1349.714177][T30144] wg2 speed is unknown, defaulting to 1000 [ 1349.714215][T30144] syz2: Port: 1 Link DOWN [ 1349.752628][T11949] syzkaller0: entered promiscuous mode [ 1349.752654][T11949] syzkaller0: entered allmulticast mode [ 1349.788886][T30144] wg2 speed is unknown, defaulting to 1000 [ 1349.792599][T24112] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.792628][T24112] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1349.800864][T24114] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.800892][T24114] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1349.807480][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.807508][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1349.807543][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.807563][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1349.827811][T11958] syzkaller0: entered promiscuous mode [ 1349.827829][T11958] syzkaller0: entered allmulticast mode [ 1349.893564][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10082'. [ 1350.116798][T11980] FAULT_INJECTION: forcing a failure. [ 1350.116798][T11980] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.116836][T11980] CPU: 1 UID: 0 PID: 11980 Comm: syz.4.10086 Not tainted syzkaller #0 PREEMPT(full) [ 1350.116856][T11980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1350.116868][T11980] Call Trace: [ 1350.116876][T11980] [ 1350.116884][T11980] dump_stack_lvl+0xe8/0x150 [ 1350.116914][T11980] should_fail_ex+0x410/0x560 [ 1350.116939][T11980] should_failslab+0xa8/0x100 [ 1350.116961][T11980] __kvmalloc_node_noprof+0x176/0x820 [ 1350.116979][T11980] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 1350.117004][T11980] ? sort_subprogs_topo+0xbf/0xf20 [ 1350.117021][T11980] ? sort_subprogs_topo+0xbf/0xf20 [ 1350.117045][T11980] sort_subprogs_topo+0xbf/0xf20 [ 1350.117065][T11980] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 1350.117102][T11980] bpf_check+0x25a5/0x2e10 [ 1350.117130][T11980] ? ktime_get_with_offset+0x93/0x2d0 [ 1350.117153][T11980] ? __pfx_bpf_check+0x10/0x10 [ 1350.117175][T11980] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1350.117204][T11980] bpf_prog_load+0x14d6/0x1c20 [ 1350.117236][T11980] ? __pfx_bpf_prog_load+0x10/0x10 [ 1350.117275][T11980] __sys_bpf+0xd0d/0xd90 [ 1350.117303][T11980] ? __pfx___sys_bpf+0x10/0x10 [ 1350.117332][T11980] ? __fget_files+0x2a/0x420 [ 1350.117372][T11980] ? ksys_write+0x242/0x270 [ 1350.117399][T11980] ? __pfx_ksys_write+0x10/0x10 [ 1350.117428][T11980] __x64_sys_bpf+0xba/0xd0 [ 1350.117445][T11980] do_syscall_64+0x166/0x520 [ 1350.117466][T11980] ? trace_irq_disable+0x3b/0x140 [ 1350.117481][T11980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.117499][T11980] ? clear_bhb_loop+0x70/0xc0 [ 1350.117520][T11980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.117538][T11980] RIP: 0033:0x7f83c7b9e159 [ 1350.117555][T11980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.117571][T11980] RSP: 002b:00007f83c5df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.117590][T11980] RAX: ffffffffffffffda RBX: 00007f83c7e25fa0 RCX: 00007f83c7b9e159 [ 1350.117604][T11980] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 1350.117616][T11980] RBP: 00007f83c5df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.117627][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.117638][T11980] R13: 00007f83c7e26038 R14: 00007f83c7e25fa0 R15: 00007ffcfa50ebe8 [ 1350.117666][T11980] [ 1350.169811][T11976] pimreg: tun_chr_ioctl cmd 1074025677 [ 1350.169893][T11976] pimreg: linktype set to 270 [ 1350.462061][T11992] ip_tables: iptables: counters copy to user failed while replacing table [ 1350.745102][T11997] Cannot find add_set index 0 as target [ 1350.756751][T11997] Bluetooth: MGMT ver 1.23 [ 1350.768793][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10092'. [ 1350.768816][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10092'. [ 1350.869234][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10094'. [ 1350.869672][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10093'. [ 1351.019717][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10098'. [ 1351.043581][T12023] FAULT_INJECTION: forcing a failure. [ 1351.043581][T12023] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.043611][T12023] CPU: 0 UID: 0 PID: 12023 Comm: syz.3.10097 Not tainted syzkaller #0 PREEMPT(full) [ 1351.043631][T12023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1351.043642][T12023] Call Trace: [ 1351.043650][T12023] [ 1351.043657][T12023] dump_stack_lvl+0xe8/0x150 [ 1351.043688][T12023] should_fail_ex+0x410/0x560 [ 1351.043722][T12023] should_failslab+0xa8/0x100 [ 1351.043746][T12023] __kvmalloc_node_noprof+0x176/0x820 [ 1351.043769][T12023] ? __kvmalloc_node_noprof+0x345/0x820 [ 1351.043787][T12023] ? sort_subprogs_topo+0xf5/0xf20 [ 1351.043807][T12023] ? sort_subprogs_topo+0xf5/0xf20 [ 1351.043834][T12023] sort_subprogs_topo+0xf5/0xf20 [ 1351.043854][T12023] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 1351.043893][T12023] bpf_check+0x25a5/0x2e10 [ 1351.043922][T12023] ? ktime_get_with_offset+0x93/0x2d0 [ 1351.043946][T12023] ? __pfx_bpf_check+0x10/0x10 [ 1351.043968][T12023] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1351.043997][T12023] bpf_prog_load+0x14d6/0x1c20 [ 1351.044029][T12023] ? __pfx_bpf_prog_load+0x10/0x10 [ 1351.044077][T12023] __sys_bpf+0xd0d/0xd90 [ 1351.044105][T12023] ? __pfx___sys_bpf+0x10/0x10 [ 1351.044136][T12023] ? __fget_files+0x2a/0x420 [ 1351.044174][T12023] ? ksys_write+0x242/0x270 [ 1351.044201][T12023] ? __pfx_ksys_write+0x10/0x10 [ 1351.044231][T12023] __x64_sys_bpf+0xba/0xd0 [ 1351.044252][T12023] do_syscall_64+0x166/0x520 [ 1351.044274][T12023] ? trace_irq_disable+0x3b/0x140 [ 1351.044292][T12023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.044311][T12023] ? clear_bhb_loop+0x70/0xc0 [ 1351.044333][T12023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.044351][T12023] RIP: 0033:0x7f209bf9e159 [ 1351.044368][T12023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.044383][T12023] RSP: 002b:00007f209a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1351.044402][T12023] RAX: ffffffffffffffda RBX: 00007f209c225fa0 RCX: 00007f209bf9e159 [ 1351.044416][T12023] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 1351.044428][T12023] RBP: 00007f209a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.044439][T12023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.044450][T12023] R13: 00007f209c226038 R14: 00007f209c225fa0 R15: 00007ffe978c7a98 [ 1351.044479][T12023] [ 1351.312627][T12027] ip6erspan0: entered allmulticast mode [ 1351.330803][T12032] ip_tables: iptables: counters copy to user failed while replacing table [ 1352.065584][T12076] netlink: zone id is out of range [ 1352.065600][T12076] netlink: zone id is out of range [ 1352.065608][T12076] netlink: zone id is out of range [ 1352.065616][T12076] netlink: zone id is out of range [ 1352.065623][T12076] netlink: zone id is out of range [ 1352.065631][T12076] netlink: zone id is out of range [ 1352.065639][T12076] netlink: zone id is out of range [ 1352.065646][T12076] netlink: zone id is out of range [ 1352.265351][T12081] xt_hashlimit: size too large, truncated to 1048576 [ 1352.497810][T12094] bond0: (slave bond_slave_0): Releasing backup interface [ 1352.513871][T12094] bond0: (slave bond_slave_1): Releasing backup interface [ 1352.527648][T12094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.122873][T12124] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1353.132457][T12124] IPVS: set_ctl: invalid protocol: 47 172.30.0.5:20003 [ 1353.455432][T12140] __nla_validate_parse: 8 callbacks suppressed [ 1353.455452][T12140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10122'. [ 1353.796953][T12115] netlink: 'syz.3.10117': attribute type 1 has an invalid length. [ 1354.258600][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10128'. [ 1354.667488][T12150] lo: entered allmulticast mode [ 1355.041980][T12177] netlink: 'syz.0.10136': attribute type 1 has an invalid length. [ 1355.149900][T12186] Bluetooth: ISO socket layer initialized [ 1355.297123][T12195] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10142'. [ 1355.894888][T12218] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10151'. [ 1355.894916][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10151'. [ 1355.928338][T12219] netlink: 'syz.0.10150': attribute type 58 has an invalid length. [ 1355.928359][T12219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10150'. [ 1355.999278][T12232] netlink: 'syz.4.10153': attribute type 21 has an invalid length. [ 1356.145804][T12228] netlink: 'syz.1.10152': attribute type 1 has an invalid length. [ 1356.158876][T12237] syzkaller1: entered promiscuous mode [ 1356.158896][T12237] syzkaller1: entered allmulticast mode [ 1356.901725][T12267] netlink: 432 bytes leftover after parsing attributes in process `syz.4.10162'. [ 1356.901952][T12267] netlink: 18 bytes leftover after parsing attributes in process `syz.4.10162'. [ 1356.989234][T12257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1357.093954][T12288] syzkaller0: entered promiscuous mode [ 1357.093977][T12288] syzkaller0: entered allmulticast mode [ 1357.114040][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10163'. [ 1358.039123][T12303] netlink: 'syz.1.10172': attribute type 6 has an invalid length. [ 1358.052074][T30139] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1358.053490][T12303] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1359.709557][T12257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1359.722297][T12292] netlink: 'syz.4.10165': attribute type 1 has an invalid length. [ 1359.722317][T12292] netlink: 756 bytes leftover after parsing attributes in process `syz.4.10165'. [ 1360.074972][T12334] net_ratelimit: 13 callbacks suppressed [ 1360.074991][T12334] netlink: Unknown NAT attribute (type=33, max=9) [ 1360.075018][T12334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1360.096741][T12332] dummy0: entered allmulticast mode [ 1360.096937][T12332] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1360.418881][T12352] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 1360.557437][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10193'. [ 1360.607819][ T31] audit: type=1800 audit(1790207327.073:26): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10194" name="memory.events" dev="tmpfs" ino=877 res=0 errno=0 [ 1360.712621][T13131] IPVS: starting estimator thread 0... [ 1360.720260][T12368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10196'. [ 1360.801514][T12371] IPVS: using max 34 ests per chain, 81600 per kthread [ 1361.192592][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10202'. [ 1361.227508][T12386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10202'. [ 1361.463845][T12396] smc: net device lo applied user defined pnetid SYZ0 [ 1362.012212][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1362.065630][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1362.119223][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1362.173289][T12429] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1362.253010][T24112] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1362.267148][T12426] bond5 (unregistering): Released all slaves [ 1362.284582][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10221'. [ 1362.285855][T12448] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10221'. [ 1362.426688][T12453] wg2 speed is unknown, defaulting to 1000 [ 1362.428419][T12453] lo speed is unknown, defaulting to 1000 [ 1362.447806][T12453] wg2 speed is unknown, defaulting to 1000 [ 1362.589336][T12459] xt_hashlimit: size too large, truncated to 1048576 [ 1362.654375][T12465] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1363.704631][T12503] openvswitch: netlink: Invalid VLAN frame [ 1363.724414][T24112] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.726390][ T4761] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.726501][ T4761] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.726535][ T4761] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1364.131820][T12521] lo: entered promiscuous mode [ 1364.131990][T12521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1364.247237][T12535] netlink: 'syz.4.10246': attribute type 2 has an invalid length. [ 1364.599744][T12549] openvswitch: netlink: Key type 29 is not supported [ 1364.659224][T12558] netlink: 'syz.2.10252': attribute type 10 has an invalid length. [ 1364.698102][T12555] team0: No ports can be present during mode change [ 1364.804412][T12569] syzkaller0: left promiscuous mode [ 1364.804432][T12569] syzkaller0: left allmulticast mode [ 1364.807869][T12572] __nla_validate_parse: 8 callbacks suppressed [ 1364.807887][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10255'. [ 1364.865083][T12575] geneve1: entered promiscuous mode [ 1364.935467][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10258'. [ 1365.007322][T12583] nbd: must specify a size in bytes for the device [ 1365.027441][T12583] nbd: must specify a size in bytes for the device [ 1365.102509][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1365.123657][T12590] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1365.194215][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1365.649322][T12613] sch_fq: defrate 8 ignored. [ 1365.680250][T12616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10272'. [ 1365.692819][T12616] netlink: 'syz.1.10272': attribute type 1 has an invalid length. [ 1365.786436][T12623] netlink: 'syz.3.10274': attribute type 2 has an invalid length. [ 1365.794182][T12623] netlink: 'syz.3.10274': attribute type 2 has an invalid length. [ 1365.794201][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10274'. [ 1365.840742][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10276'. [ 1365.959106][T12626] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1365.966606][T12626] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1365.974830][T12626] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1366.268621][T12650] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4009 [ 1366.274300][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10280'. [ 1366.281057][T12650] netlink: 'syz.1.10280': attribute type 1 has an invalid length. [ 1366.399636][T12656] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10283'. [ 1366.417696][T12661] netlink: 'syz.1.10285': attribute type 10 has an invalid length. [ 1366.440975][T12661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1366.444764][T12661] team0: Port device netdevsim1 added [ 1366.446744][T12658] netlink: 'syz.1.10285': attribute type 10 has an invalid length. [ 1366.462149][T12658] team0: Port device netdevsim1 removed [ 1366.464387][T12658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1366.466031][T12658] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1366.469759][T12656] netlink: 288 bytes leftover after parsing attributes in process `syz.3.10283'. [ 1368.588419][T12731] sit0: entered promiscuous mode [ 1369.045586][T12763] netlink: 'syz.0.10308': attribute type 4 has an invalid length. [ 1369.645065][T12813] team_slave_0: entered allmulticast mode [ 1369.882912][T12828] netlink: Unknown NAT attribute (type=33, max=9) [ 1369.882948][T12828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.978707][T12832] __nla_validate_parse: 7 callbacks suppressed [ 1369.978726][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10325'. [ 1369.990080][ T52] Bluetooth: hci4: link tx timeout [ 1369.990237][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.003232][ T52] Bluetooth: hci4: link tx timeout [ 1370.003247][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.003340][ T52] Bluetooth: hci4: link tx timeout [ 1370.003351][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.003432][ T52] Bluetooth: hci4: link tx timeout [ 1370.003441][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.003520][ T52] Bluetooth: hci4: link tx timeout [ 1370.003530][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.003609][ T52] Bluetooth: hci4: link tx timeout [ 1370.003618][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.003697][ T52] Bluetooth: hci4: link tx timeout [ 1370.003707][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.003784][ T52] Bluetooth: hci4: link tx timeout [ 1370.006649][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.006790][ T52] Bluetooth: hci4: link tx timeout [ 1370.006801][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.006894][ T52] Bluetooth: hci4: link tx timeout [ 1370.006903][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.006982][ T52] Bluetooth: hci4: link tx timeout [ 1370.006992][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007070][ T52] Bluetooth: hci4: link tx timeout [ 1370.007080][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007158][ T52] Bluetooth: hci4: link tx timeout [ 1370.007167][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007246][ T52] Bluetooth: hci4: link tx timeout [ 1370.007255][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007334][ T52] Bluetooth: hci4: link tx timeout [ 1370.007344][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007423][ T52] Bluetooth: hci4: link tx timeout [ 1370.007433][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007511][ T52] Bluetooth: hci4: link tx timeout [ 1370.007521][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007598][ T52] Bluetooth: hci4: link tx timeout [ 1370.007608][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007733][ T52] Bluetooth: hci4: link tx timeout [ 1370.007765][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007876][ T52] Bluetooth: hci4: link tx timeout [ 1370.007885][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.007963][ T52] Bluetooth: hci4: link tx timeout [ 1370.007973][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008050][ T52] Bluetooth: hci4: link tx timeout [ 1370.008059][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008136][ T52] Bluetooth: hci4: link tx timeout [ 1370.008146][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008223][ T52] Bluetooth: hci4: link tx timeout [ 1370.008232][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008309][ T52] Bluetooth: hci4: link tx timeout [ 1370.008319][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008397][ T52] Bluetooth: hci4: link tx timeout [ 1370.008406][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008484][ T52] Bluetooth: hci4: link tx timeout [ 1370.008493][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008570][ T52] Bluetooth: hci4: link tx timeout [ 1370.008579][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008658][ T52] Bluetooth: hci4: link tx timeout [ 1370.008668][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.008751][ T52] Bluetooth: hci4: link tx timeout [ 1370.008761][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.019890][ T52] Bluetooth: hci4: link tx timeout [ 1370.019905][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.023487][ T52] Bluetooth: hci4: link tx timeout [ 1370.023503][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.025728][ T52] Bluetooth: hci4: link tx timeout [ 1370.025743][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.025842][ T52] Bluetooth: hci4: link tx timeout [ 1370.025852][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.025934][ T52] Bluetooth: hci4: link tx timeout [ 1370.025944][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.026084][ T52] Bluetooth: hci4: link tx timeout [ 1370.026094][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.026175][ T52] Bluetooth: hci4: link tx timeout [ 1370.026185][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.034916][ T52] Bluetooth: hci4: link tx timeout [ 1370.034931][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.037522][ T52] Bluetooth: hci4: link tx timeout [ 1370.037536][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.048040][ T52] Bluetooth: hci4: link tx timeout [ 1370.048057][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1370.101961][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10324'. [ 1370.101990][T12834] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1370.135404][T12832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.011488][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1394.251035][ T7768] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1423.062993][T13132] team0: left allmulticast mode [ 1423.063015][T13132] macvlan2: left allmulticast mode [ 1423.063032][T13132] bridge4: left allmulticast mode [ 1423.065741][T13132] team0: left promiscuous mode [ 1423.066080][T13132] bridge0: port 1(team0) entered disabled state [ 1423.076584][T13132] dvmrp0: left allmulticast mode [ 1423.133664][T13132] bond2 (unregistering): (slave ip6gretap2): Releasing active interface [ 1423.183583][T13132] ip6gretap0 (unregistering): left promiscuous mode [ 1423.369296][T13132] bond10 (unregistering): (slave gretap1): Releasing active interface [ 1423.430955][T13132] bond7 (unregistering): (slave geneve4): Releasing active interface [ 1423.463254][T13132] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1423.463281][T13132] bridge1 (unregistering): left promiscuous mode [ 1423.499461][T13132] team0: Port device bridge4 removed [ 1423.525374][T13132] bond0 (unregistering): Released all slaves [ 1423.529741][T13132] bond1 (unregistering): Released all slaves [ 1423.546838][T13132] team0: Port device macvlan2 removed [ 1423.550188][T13132] bond2 (unregistering): Released all slaves [ 1423.566407][T13132] bond3 (unregistering): Released all slaves [ 1423.576200][T13132] bond4 (unregistering): Released all slaves [ 1423.590112][T13132] bond5 (unregistering): Released all slaves [ 1423.604403][T13132] bond6 (unregistering): Released all slaves [ 1423.613998][T13132] bond7 (unregistering): Released all slaves [ 1423.624779][T13132] bond8 (unregistering): Released all slaves [ 1423.635588][T13132] bond9 (unregistering): Released all slaves [ 1423.648238][T13132] bond10 (unregistering): Released all slaves [ 1423.831953][T13132] ovs-s!: left promiscuous mode [ 1423.861860][T13132] : left promiscuous mode [ 1423.931016][T13132] tipc: Left network mode [ 1424.417151][T13132] hsr_slave_0: left promiscuous mode [ 1424.417635][T13132] hsr_slave_1: left promiscuous mode [ 1424.419999][T13132] veth0_macvtap: left promiscuous mode [ 1424.420065][T13132] veth1_vlan: left promiscuous mode [ 1424.420099][T13132] veth0_vlan: left promiscuous mode [ 1424.944383][ T13] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 1424.955515][ T25] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 1425.269486][T13132] IPVS: stop unused estimator thread 0... [ 1426.261805][T24114] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1427.376687][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10326'. [ 1427.379865][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10328'. [ 1427.399600][T12954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10329'. [ 1427.438690][T12957] bridge0: port 1(wlan1) entered blocking state [ 1427.438789][T12957] bridge0: port 1(wlan1) entered disabled state [ 1427.438940][T12957] mac80211_hwsim hwsim113 wlan1: entered allmulticast mode [ 1427.445005][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10330'. [ 1427.454570][T12957] mac80211_hwsim hwsim113 wlan1: entered promiscuous mode [ 1427.492059][T12962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1427.587665][T12966] mac80211_hwsim hwsim113 wlan1 (unregistering): left allmulticast mode [ 1427.587692][T12966] mac80211_hwsim hwsim113 wlan1 (unregistering): left promiscuous mode [ 1427.591834][T12966] bridge0: port 1(wlan1) entered disabled state [ 1427.798252][T12972] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10332'. [ 1427.925733][T12968] macvlan0: entered promiscuous mode [ 1427.968434][T12978] FAULT_INJECTION: forcing a failure. [ 1427.968434][T12978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.968465][T12978] CPU: 1 UID: 0 PID: 12978 Comm: syz.1.10334 Not tainted syzkaller #0 PREEMPT(full) [ 1427.968485][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1427.968496][T12978] Call Trace: [ 1427.968503][T12978] [ 1427.968511][T12978] dump_stack_lvl+0xe8/0x150 [ 1427.968546][T12978] should_fail_ex+0x410/0x560 [ 1427.968572][T12978] _copy_from_user+0x2d/0xb0 [ 1427.968596][T12978] ___sys_sendmsg+0x1c6/0x360 [ 1427.968622][T12978] ? __lock_acquire+0x747/0x2de0 [ 1427.968644][T12978] ? __pfx____sys_sendmsg+0x10/0x10 [ 1427.968696][T12978] ? __fget_files+0x2a/0x420 [ 1427.968720][T12978] ? __fget_files+0x3a2/0x420 [ 1427.968752][T12978] __x64_sys_sendmsg+0x1b1/0x290 [ 1427.968778][T12978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1427.968821][T12978] do_syscall_64+0x166/0x520 [ 1427.968845][T12978] ? trace_irq_disable+0x3b/0x140 [ 1427.968867][T12978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.968887][T12978] ? clear_bhb_loop+0x70/0xc0 [ 1427.968917][T12978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.968936][T12978] RIP: 0033:0x7f6ab499e159 [ 1427.968953][T12978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.968968][T12978] RSP: 002b:00007f6ab5907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.968988][T12978] RAX: ffffffffffffffda RBX: 00007f6ab4c25fa0 RCX: 00007f6ab499e159 [ 1427.969002][T12978] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1427.969014][T12978] RBP: 00007f6ab5907090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.969026][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.969036][T12978] R13: 00007f6ab4c26038 R14: 00007f6ab4c25fa0 R15: 00007fff8ea6adf8 [ 1427.969064][T12978] [ 1428.068974][T12981] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10335'. [ 1428.431115][T12997] netlink: Unknown NAT attribute (type=33, max=9) [ 1428.431152][T12997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.472578][ T31] audit: type=1800 audit(1790207394.943:27): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10341" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1051 res=0 errno=0 [ 1428.475516][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10341'. [ 1428.528252][T13004] ip_tables: iptables: counters copy to user failed while replacing table [ 1428.956405][T13027] batman_adv: batadv0: Adding interface: gretap1 [ 1428.956423][T13027] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.957251][T13027] batman_adv: batadv0: Interface activated: gretap1 [ 1429.245260][T13030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.447595][T13030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.793542][T13030] bond0: (slave netdevsim1): Releasing backup interface [ 1429.797689][T13030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.878318][T13079] syzkaller0: entered promiscuous mode [ 1429.878352][T13079] syzkaller0: entered allmulticast mode [ 1430.032174][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10360'. [ 1430.032198][T13087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10360'. [ 1430.035546][T13030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.229173][T13095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10363'. [ 1430.244717][T13132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.250612][T24112] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.250661][T24112] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.270489][T13132] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.303548][T13134] __nla_validate_parse: 88 callbacks suppressed [ 1433.303567][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10373'. [ 1433.324374][T13134] netlink: 'syz.2.10373': attribute type 4 has an invalid length. [ 1433.324393][T13134] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10373'. [ 1433.348128][T13140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10375'. [ 1433.350078][T13135] netlink: 'syz.0.10374': attribute type 54 has an invalid length. [ 1433.354324][T13138] IPVS: Unknown mcast interface: pim6reg0 [ 1433.629704][T13151] netlink: Failed to add ¦â—k\ helper -22 [ 1433.629756][T13151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.756184][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10380'. [ 1433.756210][T13163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10380'. [ 1434.013090][T24114] IPVS: starting estimator thread 0... [ 1434.107634][T13179] IPVS: using max 34 ests per chain, 81600 per kthread [ 1434.134712][T13184] tipc: Started in network mode [ 1434.134729][T13184] tipc: Node identity ac14140f, cluster identity 4711 [ 1434.137875][T13184] tipc: New replicast peer: 255.255.255.255 [ 1434.138544][T13184] tipc: Enabled bearer , priority 10 [ 1434.216340][T13188] bridge0: entered promiscuous mode [ 1434.216398][T13188] bridge0: entered allmulticast mode [ 1434.336522][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10391'. [ 1434.336540][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10391'. [ 1434.336698][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10390'. [ 1434.336714][T13195] netlink: 'syz.4.10390': attribute type 10 has an invalid length. [ 1434.336722][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10390'. [ 1434.501815][T13190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.504560][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10393'. [ 1434.577764][T13190] veth1_vlan: left allmulticast mode [ 1434.634253][T13190] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1434.652143][T13133] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.652186][T13133] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.652219][T13133] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.694894][T13195] geneve2: entered promiscuous mode [ 1434.694916][T13195] geneve2: entered allmulticast mode [ 1434.850991][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.995988][T13229] ip6gre1: entered promiscuous mode [ 1434.996011][T13229] ip6gre1: entered allmulticast mode [ 1435.262085][T30137] tipc: Node number set to 2886997007 [ 1435.384277][T13255] wg2 speed is unknown, defaulting to 1000 [ 1435.389998][T13255] wg2 speed is unknown, defaulting to 1000 [ 1435.814573][T13258] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1435.814606][T13258] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1435.814640][T13258] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1435.839077][T13258] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1436.467166][T13298] ip_tables: iptables: counters copy to user failed while replacing table [ 1436.637890][T13304] bond7: entered allmulticast mode [ 1437.468707][T13336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.469753][T13336] batman_adv: batadv0: Removing interface: ipvlan2 [ 1437.602543][T13343] netlink: 'syz.2.10432': attribute type 4 has an invalid length. [ 1437.623952][T13343] netlink: 'syz.2.10432': attribute type 4 has an invalid length. [ 1437.796042][T13360] netlink: 'syz.0.10439': attribute type 10 has an invalid length. [ 1437.796223][T13359] netlink: 'syz.0.10439': attribute type 10 has an invalid length. [ 1437.843093][T13355] ovs-s!: entered promiscuous mode [ 1438.454231][T13404] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1438.566543][T13413] __nla_validate_parse: 10 callbacks suppressed [ 1438.566563][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10451'. [ 1438.669415][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10455'. [ 1438.695769][T13421] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1439.289373][T13411] wg2 speed is unknown, defaulting to 1000 [ 1439.307256][T13411] wg2 speed is unknown, defaulting to 1000 [ 1439.649831][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10463'. [ 1439.650141][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10463'. [ 1439.923781][T13459] openvswitch: netlink: Key 7 has unexpected len 0 expected 12 [ 1440.036467][T13457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10469'. [ 1440.036684][T13461] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10469'. [ 1440.066293][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10472'. [ 1440.131310][T13467] tap0: tun_chr_ioctl cmd 1074025677 [ 1440.131418][T13467] tap0: linktype set to 32 [ 1440.469161][T13477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.469710][T13477] bridge0: port 3(bond0) entered blocking state [ 1440.469877][T13477] bridge0: port 3(bond0) entered disabled state [ 1440.470063][T13477] bond0: entered allmulticast mode [ 1440.473259][T13477] bond0: entered promiscuous mode [ 1441.139957][T13514] x_tables: unsorted underflow at hook 4 [ 1441.581286][T13541] netlink: 'syz.2.10495': attribute type 62 has an invalid length. [ 1441.712253][T13544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10496'. [ 1441.940548][T13555] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10499'. [ 1441.947237][T13554] ip_tables: iptables: counters copy to user failed while replacing table [ 1441.970304][T13553] xt_hashlimit: size too large, truncated to 1048576 [ 1441.991774][T13557] syzkaller1: entered promiscuous mode [ 1441.991795][T13557] syzkaller1: entered allmulticast mode [ 1442.041008][T13561] af_packet: tpacket_rcv: packet too big, clamped from 4032 to 3952. macoff=96 [ 1442.370189][T13574] netlink: 'syz.3.10502': attribute type 3 has an invalid length. [ 1442.370209][T13574] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10502'. [ 1442.431103][T13577] netlink: 'syz.0.10503': attribute type 21 has an invalid length. [ 1442.563031][T13586] netlink: 'syz.1.10504': attribute type 1 has an invalid length. [ 1442.583018][T13583] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1442.803402][T13601] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 1442.989616][T13617] netlink: 'syz.0.10512': attribute type 32 has an invalid length. [ 1443.061243][T13622] ip6gre2: entered allmulticast mode [ 1443.118040][T13623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1443.145661][T13623] RDS: rds_bind could not find a transport for 0:400::, load rds_tcp or rds_rdma? [ 1443.616133][T13656] __nla_validate_parse: 4 callbacks suppressed [ 1443.616155][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10521'. [ 1443.926963][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1443.926989][T13675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1443.975190][T13677] netlink: 'syz.1.10527': attribute type 1 has an invalid length. [ 1444.020482][T13679] bond4: (slave veth0_to_bond): making interface the new active one [ 1444.023146][T13679] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1444.050338][T13677] macvlan2: entered promiscuous mode [ 1444.050357][T13677] macvlan2: entered allmulticast mode [ 1444.051766][T13677] bond4: entered promiscuous mode [ 1444.051782][T13677] veth0_to_bond: entered promiscuous mode [ 1444.052737][T13677] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1444.053356][T13677] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1444.053444][T13677] bond4: left promiscuous mode [ 1444.053456][T13677] veth0_to_bond: left promiscuous mode [ 1445.914049][T13610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1446.128640][T13701] syzkaller0: entered promiscuous mode [ 1446.128662][T13701] syzkaller0: entered allmulticast mode [ 1446.152788][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10533'. [ 1447.062138][T13718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1447.181301][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1447.237271][T13730] SET target dimension over the limit! [ 1447.293460][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1447.293489][T13734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1447.453978][T13737] Bluetooth: hci0: unsupported parameter 5135 [ 1447.454000][T13737] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 1447.454592][T13738] Bluetooth: hci0: unsupported parameter 5135 [ 1447.454608][T13738] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 1447.766810][T13753] syzkaller0: entered promiscuous mode [ 1447.766832][T13753] syzkaller0: entered allmulticast mode [ 1448.236596][T13782] wg2 speed is unknown, defaulting to 1000 [ 1448.238284][T13782] wg2 speed is unknown, defaulting to 1000 [ 1448.338701][T13784] netlink: 'syz.0.10556': attribute type 4 has an invalid length. [ 1448.338722][T13784] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.10556'. [ 1448.481410][T13791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1448.492526][T13789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10559'. [ 1448.747120][T13802] sctp: [Deprecated]: syz.1.10562 (pid 13802) Use of int in max_burst socket option. [ 1448.747120][T13802] Use struct sctp_assoc_value instead [ 1449.494497][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10563'. [ 1449.763813][T13816] lo: entered promiscuous mode [ 1449.763992][T13816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1449.764898][T13817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1450.002955][T13826] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10571'. [ 1450.482790][T13857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10578'. [ 1450.508983][T13857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10578'. [ 1450.725513][T13869] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1451.014550][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10582'. [ 1451.335489][T13873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1451.335514][T13873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1451.342121][T13873] veth1_vlan: left promiscuous mode [ 1451.343244][T13873] veth0_vlan: left promiscuous mode [ 1451.344804][T13873] veth0_vlan: entered promiscuous mode [ 1451.347229][T13873] veth1_vlan: entered promiscuous mode [ 1451.348394][T13873] veth1_vlan: entered allmulticast mode [ 1451.355217][T13873] geneve1: left promiscuous mode [ 1451.358179][T13873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1451.359233][T13873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1451.360197][T13873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1451.362172][T13873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1451.362678][T13873] mac80211_hwsim hwsim114 wlan0: left promiscuous mode [ 1451.362697][T13873] mac80211_hwsim hwsim114 wlan0: left allmulticast mode [ 1451.362710][T13873] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1451.363533][T13876] tipc: Enabled bearer , priority 0 [ 1451.363985][T13884] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10582'. [ 1451.364348][T13132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.364426][T13132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.364497][T13132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.364567][T13132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.367935][T13879] syzkaller0: mtu less than device minimum [ 1451.406408][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.406508][ T4761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.407855][T30139] s`z1: Port: 1 Link ACTIVE [ 1451.416223][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.416324][ T4761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.510193][T13874] netlink: 'syz.3.10583': attribute type 21 has an invalid length. [ 1451.564275][T13874] netlink: 'syz.3.10583': attribute type 6 has an invalid length. [ 1451.564298][T13874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10583'. [ 1451.615892][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10587'. [ 1451.763835][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10587'. [ 1451.877955][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10590'. [ 1451.920635][ T7768] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1451.925108][ T7768] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1451.925173][ T7768] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1451.925204][ T7768] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1451.980910][T13924] IPv6: NLM_F_CREATE should be specified when creating new route [ 1451.980968][T13924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1451.980974][T13924] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.980994][T13924] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.981006][T13924] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.992577][T13924] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1452.086793][T13930] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1452.234829][T13901] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 1452.251588][T13901] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1453.661714][T13988] FAULT_INJECTION: forcing a failure. [ 1453.661714][T13988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.661742][T13988] CPU: 0 UID: 0 PID: 13988 Comm: syz.4.10601 Not tainted syzkaller #0 PREEMPT(full) [ 1453.661758][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1453.661767][T13988] Call Trace: [ 1453.661774][T13988] [ 1453.661781][T13988] dump_stack_lvl+0xe8/0x150 [ 1453.661807][T13988] should_fail_ex+0x410/0x560 [ 1453.661828][T13988] _copy_from_user+0x2d/0xb0 [ 1453.661847][T13988] do_ipv6_setsockopt+0x245/0x2960 [ 1453.661875][T13988] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1453.661897][T13988] ? aa_inet_opt_perm+0xae4/0xcf0 [ 1453.661917][T13988] ? get_pid_task+0x20/0x1f0 [ 1453.661940][T13988] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1453.661983][T13988] ? ksys_write+0x1e6/0x270 [ 1453.662009][T13988] ? lock_acquire+0x115/0x350 [ 1453.662030][T13988] ? aa_sock_opt_perm+0xe1/0x1e0 [ 1453.662051][T13988] ipv6_setsockopt+0x59/0x170 [ 1453.662069][T13988] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1453.662090][T13988] do_sock_setsockopt+0x17c/0x1b0 [ 1453.662114][T13988] __x64_sys_setsockopt+0x13d/0x1b0 [ 1453.662137][T13988] do_syscall_64+0x166/0x520 [ 1453.662158][T13988] ? trace_irq_disable+0x3b/0x140 [ 1453.662174][T13988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.662191][T13988] ? clear_bhb_loop+0x70/0xc0 [ 1453.662211][T13988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.662225][T13988] RIP: 0033:0x7f83c7b9e159 [ 1453.662242][T13988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.662255][T13988] RSP: 002b:00007f83c5dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1453.662273][T13988] RAX: ffffffffffffffda RBX: 00007f83c7e26090 RCX: 00007f83c7b9e159 [ 1453.662285][T13988] RDX: 0000000000000002 RSI: 0000000000000029 RDI: 0000000000000003 [ 1453.662296][T13988] RBP: 00007f83c5dd5090 R08: 0000000000000004 R09: 0000000000000000 [ 1453.662307][T13988] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1453.662318][T13988] R13: 00007f83c7e26128 R14: 00007f83c7e26090 R15: 00007ffcfa50ebe8 [ 1453.662346][T13988] [ 1454.323995][T14003] FAULT_INJECTION: forcing a failure. [ 1454.323995][T14003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.324029][T14003] CPU: 1 UID: 0 PID: 14003 Comm: syz.3.10605 Not tainted syzkaller #0 PREEMPT(full) [ 1454.324049][T14003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1454.324060][T14003] Call Trace: [ 1454.324068][T14003] [ 1454.324076][T14003] dump_stack_lvl+0xe8/0x150 [ 1454.324107][T14003] should_fail_ex+0x410/0x560 [ 1454.324133][T14003] _copy_from_user+0x2d/0xb0 [ 1454.324157][T14003] ___sys_recvmsg+0x173/0x5a0 [ 1454.324188][T14003] ? __pfx____sys_recvmsg+0x10/0x10 [ 1454.324217][T14003] ? lock_acquire+0x115/0x350 [ 1454.324263][T14003] do_recvmmsg+0x31a/0x7f0 [ 1454.324296][T14003] ? __pfx_do_recvmmsg+0x10/0x10 [ 1454.324332][T14003] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1454.324358][T14003] ? __fget_files+0x3a2/0x420 [ 1454.324391][T14003] __x64_sys_recvmmsg+0x198/0x250 [ 1454.324420][T14003] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1454.324456][T14003] do_syscall_64+0x166/0x520 [ 1454.324476][T14003] ? trace_irq_disable+0x3b/0x140 [ 1454.324494][T14003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.324514][T14003] ? clear_bhb_loop+0x70/0xc0 [ 1454.324535][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.324553][T14003] RIP: 0033:0x7f209bf9e159 [ 1454.324570][T14003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.324586][T14003] RSP: 002b:00007f209a1d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1454.324606][T14003] RAX: ffffffffffffffda RBX: 00007f209c226090 RCX: 00007f209bf9e159 [ 1454.324619][T14003] RDX: 0000000004000048 RSI: 0000200000000940 RDI: 0000000000000003 [ 1454.324632][T14003] RBP: 00007f209a1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.324644][T14003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.324655][T14003] R13: 00007f209c226128 R14: 00007f209c226090 R15: 00007ffe978c7a98 [ 1454.324685][T14003] [ 1454.618554][T14013] netlink: 'syz.1.10607': attribute type 10 has an invalid length. [ 1454.618929][T14012] netlink: 'syz.1.10607': attribute type 10 has an invalid length. [ 1454.958585][T14022] netlink: Unknown NAT attribute (type=33, max=9) [ 1454.958692][T14022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1455.089703][T14029] __nla_validate_parse: 140 callbacks suppressed [ 1455.089723][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.089844][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.089958][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.090070][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.090170][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.090279][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.097430][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.097561][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.097680][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.097786][T14029] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1455.719645][T14062] netlink: 'syz.1.10619': attribute type 1 has an invalid length. [ 1455.787765][T14062] bond5: entered promiscuous mode [ 1455.799136][T14062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1455.800747][T14062] netlink: 'syz.1.10619': attribute type 1 has an invalid length. [ 1455.866791][T14070] siw: device registration error -23 [ 1455.882782][T14062] netlink: 'syz.1.10619': attribute type 1 has an invalid length. [ 1455.883039][T14062] netlink: 'syz.1.10619': attribute type 1 has an invalid length. [ 1455.884619][T14062] netlink: 'syz.1.10619': attribute type 1 has an invalid length. [ 1455.884801][T14062] netlink: 'syz.1.10619': attribute type 1 has an invalid length. [ 1455.885015][T14062] netlink: 'syz.1.10619': attribute type 1 has an invalid length. [ 1455.885199][T14062] netlink: 'syz.1.10619': attribute type 1 has an invalid length. [ 1455.893827][T14066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1455.990602][T14073] netlink: Unknown NAT attribute (type=33, max=9) [ 1455.990637][T14073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1456.836307][T14086] tipc: Started in network mode [ 1456.836338][T14086] tipc: Node identity 7aaf3b5e0926, cluster identity 4711 [ 1456.838621][T14086] tipc: Enabled bearer , priority 0 [ 1457.069271][T14110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1457.069295][T14110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.089852][T14110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.089899][T14110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.182083][T14116] nbd: must specify at least one socket [ 1457.335957][T14123] tun0: tun_chr_ioctl cmd 2148553947 [ 1457.472932][T14129] x_tables: duplicate underflow at hook 2 [ 1457.583132][T14134] ip_tables: iptables: counters copy to user failed while replacing table [ 1457.588077][T14136] ip_tables: iptables: counters copy to user failed while replacing table [ 1457.834126][T14145] Bluetooth: hci0: unsupported parameter 1280 [ 1457.834147][T14145] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1457.964920][T30137] tipc: Node number set to 1938373470 [ 1458.011397][T14155] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1458.116963][T14166] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1458.118915][T14148] bond4: (slave veth0_to_bond): Releasing active interface [ 1458.136953][T14148] bond6: (slave veth0_to_bond): making interface the new active one [ 1458.149902][T14148] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1458.176595][T14155] bridge5: entered promiscuous mode [ 1458.252489][ T4761] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1458.400022][T14183] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1460.829958][T14164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1460.849868][T14178] __nla_validate_parse: 62 callbacks suppressed [ 1460.849887][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10649'. [ 1460.868164][T14141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1461.129321][T14187] 8021q: VLANs not supported on gre0 [ 1461.532335][T14229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1461.945097][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10662'. [ 1462.101642][T14247] ip_tables: iptables: counters copy to user failed while replacing table [ 1462.108432][T14247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10666'. [ 1462.549616][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10671'. [ 1462.562436][T14268] tipc: Enabled bearer , priority 0 [ 1462.758946][T14290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1462.889801][T14266] syzkaller1: entered promiscuous mode [ 1462.889835][T14266] syzkaller1: entered allmulticast mode [ 1463.186943][T14301] netlink: 666 bytes leftover after parsing attributes in process `syz.0.10675'. [ 1463.588208][T14309] netlink: 944 bytes leftover after parsing attributes in process `syz.0.10676'. [ 1463.653096][T14312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10677'. [ 1463.774585][T14242] tipc: Disabling bearer [ 1464.525508][T14330] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1464.526995][T14330] bond7 (unregistering): Released all slaves [ 1465.145579][T14278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1465.518976][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10688'. [ 1465.800623][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10691'. [ 1465.987784][T14367] validate_nla: 61 callbacks suppressed [ 1465.987804][T14367] netlink: 'syz.0.10692': attribute type 3 has an invalid length. [ 1466.060768][T14359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.312600][T14385] netlink: 'syz.1.10695': attribute type 1 has an invalid length. [ 1467.191945][T14387] veth5: entered allmulticast mode [ 1467.223439][T14387] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1467.294873][T14391] bond6: (slave veth0_to_bond): Releasing active interface [ 1467.315487][T14391] bond7: (slave veth0_to_bond): making interface the new active one [ 1467.318093][T14391] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1467.356343][T14398] macvlan2: entered promiscuous mode [ 1467.356363][T14398] macvlan2: entered allmulticast mode [ 1467.358701][T14398] bond7: entered promiscuous mode [ 1467.358720][T14398] veth0_to_bond: entered promiscuous mode [ 1467.359483][T14398] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1467.366219][T14398] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1467.366298][T14398] bond7: left promiscuous mode [ 1467.366311][T14398] veth0_to_bond: left promiscuous mode [ 1467.489088][T14399] macvlan2: entered promiscuous mode [ 1467.489143][T14399] macvlan2: entered allmulticast mode [ 1467.490853][T14399] bond7: entered promiscuous mode [ 1467.490886][T14399] veth0_to_bond: entered promiscuous mode [ 1467.497217][T14399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1467.498687][T14399] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1467.498914][T14399] bond7: left promiscuous mode [ 1467.498944][T14399] veth0_to_bond: left promiscuous mode [ 1467.580033][T14421] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10700'. [ 1467.811270][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10704'. [ 1467.817531][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10704'. [ 1468.204170][T14461] IPv6: NLM_F_CREATE should be specified when creating new route [ 1468.381149][ T4761] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.115051][T14498] syzkaller0: entered promiscuous mode [ 1469.115091][T14498] syzkaller0: entered allmulticast mode [ 1469.453690][T14494] tc_dump_action: action bad kind [ 1469.804539][T14516] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10726'. [ 1470.197364][T14533] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.10727'. [ 1470.614491][T14541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10728'. [ 1470.825455][T14561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1471.025081][T14569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10736'. [ 1471.240899][T14578] x_tables: duplicate underflow at hook 2 [ 1471.245751][T14578] syzkaller0: left promiscuous mode [ 1471.245789][T14578] syzkaller0: left allmulticast mode [ 1471.515629][T14554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1472.165481][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10748'. [ 1472.733041][T14642] syzkaller0: entered promiscuous mode [ 1472.733102][T14642] syzkaller0: entered allmulticast mode [ 1473.232505][T14659] x_tables: duplicate underflow at hook 2 [ 1473.570058][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10758'. [ 1473.570119][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10758'. [ 1473.594702][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10758'. [ 1473.724445][T14674] team0: Port device team_slave_0 removed [ 1473.745669][T14679] syzkaller1: entered promiscuous mode [ 1473.745691][T14679] syzkaller1: entered allmulticast mode [ 1473.832343][T14685] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1474.856901][T14707] netlink: 'syz.2.10767': attribute type 11 has an invalid length. [ 1474.924272][T14709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10769'. [ 1474.924305][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10769'. [ 1474.924317][T14709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10769'. [ 1474.924333][T14709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10769'. [ 1474.999433][T14711] team0 (unregistering): Port device team_slave_0 removed [ 1475.031833][T14711] team0 (unregistering): Port device team_slave_1 removed [ 1475.071925][T14717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10772'. [ 1475.071944][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10772'. [ 1475.968018][T14735] netlink: 'syz.0.10777': attribute type 4 has an invalid length. [ 1475.968710][T14745] 8021q: VLANs not supported on ip6gre0 [ 1476.403010][T14771] bridge_slave_1: left allmulticast mode [ 1476.403038][T14771] bridge_slave_1: left promiscuous mode [ 1476.403258][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.434181][T14771] bridge_slave_0: left allmulticast mode [ 1476.434207][T14771] bridge_slave_0: left promiscuous mode [ 1476.434442][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.534499][T14771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10785'. [ 1476.867853][T14786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.959388][T14786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.058645][T14791] netlink: 'syz.3.10789': attribute type 83 has an invalid length. [ 1477.064601][T14791] xt_MASQUERADE: bad MAP_IPS. [ 1477.235489][T14797] netlink: 'syz.2.10793': attribute type 1 has an invalid length. [ 1477.326632][T14804] netlink: 'syz.1.10790': attribute type 11 has an invalid length. [ 1477.546870][T14809] ip6gretap0: entered promiscuous mode [ 1477.561370][T14809] macsec1: entered allmulticast mode [ 1477.561392][T14809] ip6gretap0: entered allmulticast mode [ 1477.778735][T14838] netlink: Unknown NAT attribute (type=33, max=9) [ 1477.778771][T14838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1478.465156][T14870] nbd: must specify a device to reconfigure [ 1478.492828][T14871] netlink: 'syz.0.10809': attribute type 11 has an invalid length. [ 1478.575186][T14865] __nla_validate_parse: 5 callbacks suppressed [ 1478.575206][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10810'. [ 1478.575224][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10810'. [ 1478.608538][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10810'. [ 1478.608562][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10810'. [ 1478.608745][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10810'. [ 1478.608761][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10810'. [ 1478.649343][T14860] xt_IDLETIMER: timeout value is zero [ 1479.274616][T14905] tipc: Started in network mode [ 1479.274644][T14905] tipc: Node identity 1001001, cluster identity 4711 [ 1479.274655][T14905] tipc: Node number set to 16781313 [ 1479.379759][T14911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10822'. [ 1479.559121][T14916] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1479.776700][T14942] netlink: 'syz.2.10827': attribute type 11 has an invalid length. [ 1479.796957][T14914] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10821'. [ 1479.815429][T14944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10829'. [ 1479.815640][T14944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10829'. [ 1482.672637][T14932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1483.159299][T14995] x_tables: duplicate entry at hook 1 [ 1483.168291][T14995] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1483.619500][T15030] x_tables: duplicate underflow at hook 4 [ 1483.745108][T15036] __nla_validate_parse: 68 callbacks suppressed [ 1483.745128][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10845'. [ 1483.812155][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10845'. [ 1484.001077][T15047] netlink: 'syz.3.10848': attribute type 10 has an invalid length. [ 1484.084494][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10851'. [ 1484.205801][ T31] audit: type=1804 audit(1790207450.673:28): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10853" name="/newroot/300/cgroup.controllers" dev="tmpfs" ino=1558 res=1 errno=0 [ 1484.205934][ T31] audit: type=1800 audit(1790207450.673:29): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10853" name="cgroup.controllers" dev="tmpfs" ino=1558 res=0 errno=0 [ 1484.288607][T15062] No such timeout policy "syz0" [ 1484.734140][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10854'. [ 1484.831755][T15066] netlink: 'syz.2.10854': attribute type 13 has an invalid length. [ 1484.957493][T15070] veth0: entered promiscuous mode [ 1484.974849][T15069] veth0: left promiscuous mode [ 1485.045740][T15072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10855'. [ 1485.118985][T15076] netlink: 'syz.2.10859': attribute type 1 has an invalid length. [ 1485.145327][T15068] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10855'. [ 1485.200457][T15091] netlink: 'syz.3.10861': attribute type 3 has an invalid length. [ 1485.200476][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10861'. [ 1485.234777][T15076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1485.417604][T15107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10865'. [ 1485.417626][T15107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10865'. [ 1485.457472][T15107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1486.785254][T15148] tap0: tun_chr_ioctl cmd 1074025677 [ 1486.785350][T15148] tap0: linktype set to 778 [ 1487.656860][T15254] netlink: 'syz.1.10883': attribute type 1 has an invalid length. [ 1487.813806][T15254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1487.946931][T15284] netlink: 'syz.2.10886': attribute type 1 has an invalid length. [ 1487.946951][T15284] netlink: 'syz.2.10886': attribute type 2 has an invalid length. [ 1488.233273][T15313] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1489.005811][T15400] __nla_validate_parse: 5 callbacks suppressed [ 1489.005830][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10894'. [ 1489.037056][T15394] netlink: 'syz.1.10895': attribute type 1 has an invalid length. [ 1489.139424][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10895'. [ 1489.157492][T15394] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1489.212023][T15428] xt_hashlimit: max too large, truncated to 1048576 [ 1489.235600][T15428] No such timeout policy "syz1" [ 1489.255081][T15422] netlink: 'syz.2.10897': attribute type 1 has an invalid length. [ 1489.255267][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10898'. [ 1489.287558][T15394] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1489.328747][T15394] bond9: (slave geneve4): making interface the new active one [ 1489.345958][T15394] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 1489.365127][T24112] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1489.367806][T15157] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1489.368626][T15161] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1489.388445][T24112] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1489.388488][T24112] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1489.388518][T24112] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1489.497509][T15441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1489.533998][T15441] netlink: 'syz.0.10900': attribute type 11 has an invalid length. [ 1490.086360][T15461] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10906'. [ 1490.169946][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10906'. [ 1490.252359][T24112] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1490.470209][T15468] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1490.595255][T15468] bond10 (unregistering): Released all slaves [ 1490.799869][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10911'. [ 1490.917774][T15486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10914'. [ 1491.032919][T15493] bond7: (slave veth0_to_bond): Releasing active interface [ 1491.074735][T15495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10914'. [ 1491.077266][T15493] bond0: (slave bond_slave_0): Releasing backup interface [ 1491.150084][T15493] bond0: (slave bond_slave_1): Releasing backup interface [ 1491.191281][T15493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1491.233250][T15499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1491.644772][T15522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10922'. [ 1491.727267][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10923'. [ 1491.727297][T15531] netlink: 'syz.4.10923': attribute type 12 has an invalid length. [ 1491.770746][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.777993][T15531] netlink: 'syz.4.10923': attribute type 12 has an invalid length. [ 1491.781036][ T7768] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.781117][ T7768] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.021510][T15542] Cannot find set identified by id 65534 to match [ 1492.415819][T15566] tipc: Enabled bearer , priority 10 [ 1492.623219][T15571] veth0_to_bridge: entered promiscuous mode [ 1492.623933][T15571] macvtap1: entered allmulticast mode [ 1492.623952][T15571] veth0_to_bridge: entered allmulticast mode [ 1492.667396][T15571] veth0_to_bridge: left allmulticast mode [ 1492.667424][T15571] veth0_to_bridge: left promiscuous mode [ 1492.798912][ T31] audit: type=1804 audit(1790207459.263:30): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10938" name="/newroot/338/cgroup.controllers" dev="tmpfs" ino=1752 res=1 errno=0 [ 1492.799867][ T31] audit: type=1800 audit(1790207459.263:31): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10938" name="cgroup.controllers" dev="tmpfs" ino=1752 res=0 errno=0 [ 1492.806222][T15578] No such timeout policy "syz0" [ 1492.852930][T15580] x_tables: duplicate underflow at hook 2 [ 1493.406624][T15610] netlink: 'syz.1.10945': attribute type 3 has an invalid length. [ 1493.657987][T15622] netlink: 'syz.4.10954': attribute type 2 has an invalid length. [ 1494.552721][T15669] sctp: [Deprecated]: syz.3.10961 (pid 15669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1494.552721][T15669] Use struct sctp_sack_info instead [ 1494.850681][T15681] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1494.874827][T15681] netlink: 'syz.4.10964': attribute type 1 has an invalid length. [ 1494.985320][T15681] bond6: entered promiscuous mode [ 1494.985705][T15681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1495.058715][T15681] __nla_validate_parse: 71 callbacks suppressed [ 1495.058736][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10964'. [ 1495.198307][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10965'. [ 1495.198335][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10965'. [ 1495.198956][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10965'. [ 1495.198977][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10965'. [ 1495.292121][T15681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1495.314616][T15681] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1495.314640][T15681] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1495.418151][T15681] bond6: (slave wireguard0): making interface the new active one [ 1495.418177][T15681] wireguard0: entered promiscuous mode [ 1495.419132][T15681] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 1495.690722][T31216] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1495.724036][T15701] ip_tables: iptables: counters copy to user failed while replacing table [ 1498.801462][T15713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1499.097586][T15772] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1499.106635][T15772] netlink: 'syz.4.10983': attribute type 32 has an invalid length. [ 1499.378765][T15792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10987'. [ 1499.378786][T15792] netlink: 468 bytes leftover after parsing attributes in process `syz.0.10987'. [ 1499.479308][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10989'. [ 1499.663800][T15799] netlink: 'syz.4.10992': attribute type 11 has an invalid length. [ 1499.666616][T15815] netdevsim0: mtu less than device minimum [ 1499.906751][T15825] netlink: 'syz.0.10996': attribute type 1 has an invalid length. [ 1499.907858][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10996'. [ 1499.907887][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10996'. [ 1499.955910][T15829] netlink: 'syz.3.10997': attribute type 8 has an invalid length. [ 1499.956000][T15830] netlink: 'syz.3.10997': attribute type 8 has an invalid length. [ 1499.997456][T15825] bond2: entered promiscuous mode [ 1500.012176][T15825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1500.102733][T15832] bond2: (slave bridge5): making interface the new active one [ 1500.102757][T15832] bridge5: entered promiscuous mode [ 1500.107777][T15832] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 1500.264345][T15800] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1500.264368][T15800] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1500.265655][T15849] __nla_validate_parse: 2 callbacks suppressed [ 1500.265670][T15849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11001'. [ 1500.294893][T15847] bond7: entered promiscuous mode [ 1500.295392][T15847] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1500.359456][T15850] netlink: 'syz.3.11000': attribute type 10 has an invalid length. [ 1500.480329][T15800] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1500.513936][T15800] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1500.623743][T15800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1500.623766][T15800] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1500.676669][T15800] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1500.676692][T15800] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1500.814640][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11007'. [ 1500.814661][T15877] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11007'. [ 1500.994004][T15879] netlink: 'syz.2.11008': attribute type 11 has an invalid length. [ 1501.015284][T15883] netlink: Unknown NAT attribute (type=33, max=9) [ 1501.015319][T15883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1501.243187][T15898] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11011'. [ 1501.320171][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11015'. [ 1501.320197][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11015'. [ 1501.406007][T15908] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11015'. [ 1501.406114][T15908] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1501.409101][T15908] 0ªî{X¹¦: entered allmulticast mode [ 1501.409468][T15908] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1501.719304][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11019'. [ 1502.274215][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11029'. [ 1502.350162][T15950] netlink: 'syz.2.11030': attribute type 11 has an invalid length. [ 1502.484565][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11032'. [ 1502.497434][T15959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.497595][T15959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.435479][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.435707][T16004] bridge0: port 2(bridge_slave_1) entered listening state [ 1503.435946][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.436054][T16004] bridge0: port 1(bridge_slave_0) entered listening state [ 1503.483012][T16004] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1504.040010][T16036] netlink: 'syz.2.11052': attribute type 11 has an invalid length. [ 1504.084816][T16035] bridge_slave_0: left allmulticast mode [ 1504.084843][T16035] bridge_slave_0: left promiscuous mode [ 1504.085047][T16035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.097354][T16035] bond0: left allmulticast mode [ 1504.098267][T16035] bond0: left promiscuous mode [ 1504.098893][T16035] bridge0: port 3(bond0) entered disabled state [ 1504.128675][T16035] bridge_slave_1: left allmulticast mode [ 1504.128705][T16035] bridge_slave_1: left promiscuous mode [ 1504.128907][T16035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.294575][T16051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1504.294594][T16051] IPv6: NLM_F_CREATE should be set when creating new route [ 1504.306131][T16052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.542622][T16062] netlink: 'syz.3.11062': attribute type 1 has an invalid length. [ 1504.628640][T16062] bond5: (slave geneve3): making interface the new active one [ 1504.629196][T16062] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1504.642937][T16062] bond5: entered promiscuous mode [ 1504.642958][T16062] geneve3: entered promiscuous mode [ 1504.654325][T16062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1504.662557][ T7768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1504.662606][ T7768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1504.662636][ T7768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1504.662666][ T7768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1505.025456][T16086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.529190][T16102] siw: device registration error -23 [ 1505.607958][T16105] __nla_validate_parse: 7 callbacks suppressed [ 1505.607978][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11072'. [ 1505.609210][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11072'. [ 1505.609228][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11072'. [ 1505.609290][T16105] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11072'. [ 1505.609303][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11072'. [ 1505.769816][T16117] netlink: 'syz.3.11075': attribute type 10 has an invalid length. [ 1505.794041][T16117] netlink: 'syz.3.11075': attribute type 10 has an invalid length. [ 1505.848221][T16121] netlink: 'syz.0.11076': attribute type 1 has an invalid length. [ 1505.934637][T16121] bond3: entered promiscuous mode [ 1505.936720][T16121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1506.063372][T16126] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1506.063397][T16126] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1506.063412][T16126] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1506.217918][T16136] wg2 speed is unknown, defaulting to 1000 [ 1506.219716][T16136] wg2 speed is unknown, defaulting to 1000 [ 1506.356957][T16140] syzkaller0: entered promiscuous mode [ 1506.356979][T16140] syzkaller0: entered allmulticast mode [ 1506.437465][T16142] ip_tables: iptables: counters copy to user failed while replacing table [ 1506.606423][T16154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11084'. [ 1506.609250][T16150] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1506.625194][T16150] bond4 (unregistering): Released all slaves [ 1506.706797][T16156] tipc: Enabled bearer , priority 0 [ 1507.222129][T16177] netlink: 'syz.2.11090': attribute type 11 has an invalid length. [ 1507.825487][T16208] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1507.827310][T16208] bond11 (unregistering): Released all slaves [ 1508.204179][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11101'. [ 1508.266616][T16232] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1508.300892][T16232] openvswitch: netlink: Message has 8 unknown bytes. [ 1508.647197][T16243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.660294][T16243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.689053][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11108'. [ 1508.746188][T16258] syz.2.11111: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1508.746253][T16258] CPU: 0 UID: 0 PID: 16258 Comm: syz.2.11111 Not tainted syzkaller #0 PREEMPT(full) [ 1508.746273][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1508.746284][T16258] Call Trace: [ 1508.746292][T16258] [ 1508.746300][T16258] dump_stack_lvl+0xe8/0x150 [ 1508.746333][T16258] warn_alloc+0x24d/0x270 [ 1508.746354][T16258] ? kasan_save_track+0x4f/0x80 [ 1508.746373][T16258] ? kasan_save_track+0x3e/0x80 [ 1508.746392][T16258] ? __pfx_warn_alloc+0x10/0x10 [ 1508.746417][T16258] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1508.746442][T16258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.746478][T16258] __vmalloc_node_range_noprof+0x127/0x1540 [ 1508.746525][T16258] ? rcu_is_watching+0x16/0xb0 [ 1508.746551][T16258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1508.746578][T16258] ? __kmalloc_cache_noprof+0x321/0x600 [ 1508.746595][T16258] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1508.746612][T16258] ? xskq_create+0x56/0x220 [ 1508.746641][T16258] xskq_create+0x148/0x220 [ 1508.746660][T16258] ? xsk_init_queue+0x8a/0xe0 [ 1508.746682][T16258] xsk_init_queue+0x8a/0xe0 [ 1508.746703][T16258] xsk_setsockopt+0x52a/0x960 [ 1508.746725][T16258] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1508.746743][T16258] ? __pfx_aa_sk_perm+0x10/0x10 [ 1508.746774][T16258] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1508.746796][T16258] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1508.746815][T16258] do_sock_setsockopt+0x17c/0x1b0 [ 1508.746842][T16258] __x64_sys_setsockopt+0x13d/0x1b0 [ 1508.746870][T16258] do_syscall_64+0x166/0x520 [ 1508.746893][T16258] ? trace_irq_disable+0x3b/0x140 [ 1508.746910][T16258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.746928][T16258] ? clear_bhb_loop+0x70/0xc0 [ 1508.746950][T16258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.746969][T16258] RIP: 0033:0x7f78bff9e159 [ 1508.746986][T16258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.747000][T16258] RSP: 002b:00007f78c0eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1508.747019][T16258] RAX: ffffffffffffffda RBX: 00007f78c0225fa0 RCX: 00007f78bff9e159 [ 1508.747032][T16258] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1508.747043][T16258] RBP: 00007f78c003506b R08: 0000000000000004 R09: 0000000000000000 [ 1508.747055][T16258] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.747066][T16258] R13: 00007f78c0226038 R14: 00007f78c0225fa0 R15: 00007ffdd42c42c8 [ 1508.747096][T16258] [ 1508.748279][T16258] Mem-Info: [ 1508.748291][T16258] active_anon:7522 inactive_anon:0 isolated_anon:0 [ 1508.748291][T16258] active_file:2 inactive_file:44399 isolated_file:0 [ 1508.748291][T16258] unevictable:0 dirty:274 writeback:0 [ 1508.748291][T16258] slab_reclaimable:13084 slab_unreclaimable:118857 [ 1508.748291][T16258] mapped:31739 shmem:2251 pagetables:3565 [ 1508.748291][T16258] sec_pagetables:0 bounce:0 [ 1508.748291][T16258] kernel_misc_reclaimable:0 [ 1508.748291][T16258] free:1194769 free_pcp:12495 free_cma:0 [ 1508.748337][T16258] Node 0 active_anon:30088kB inactive_anon:0kB active_file:8kB inactive_file:177396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126956kB dirty:1096kB writeback:0kB shmem:9004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15388kB pagetables:14132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1508.748382][T16258] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1508.748433][T16258] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.748482][T16258] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1508.748515][T16258] Node 0 DMA32 free:824196kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30088kB inactive_anon:0kB active_file:8kB inactive_file:177396kB unevictable:0kB writepending:1096kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:43444kB local_pcp:20196kB free_cma:0kB [ 1508.748566][T16258] lowmem_reserve[]: 0 0 0 0 0 [ 1508.748597][T16258] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.748642][T16258] lowmem_reserve[]: 0 0 0 0 0 [ 1508.748674][T16258] Node 1 Normal free:3939520kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:6536kB local_pcp:6536kB free_cma:0kB [ 1508.748723][T16258] lowmem_reserve[]: 0 0 0 0 0 [ 1508.749416][T16258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1508.749519][T16258] Node 0 DMA32: 1793*4kB (UE) 1631*8kB (UM) 1076*16kB (UME) 1835*32kB (UM) 1150*64kB (UME) 849*128kB (UME) 438*256kB (UME) 205*512kB (UME) 125*1024kB (UME) 6*2048kB (UM) 46*4096kB (UM) = 824220kB [ 1508.749659][T16258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1508.749744][T16258] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3939520kB [ 1508.749870][T16258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.749885][T16258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1508.749897][T16258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.749910][T16258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1508.749924][T16258] 46648 total pagecache pages [ 1508.749931][T16258] 0 pages in swap cache [ 1508.749938][T16258] Free swap = 124996kB [ 1508.749945][T16258] Total swap = 124996kB [ 1508.749952][T16258] 2097051 pages RAM [ 1508.749959][T16258] 0 pages HighMem/MovableOnly [ 1508.749966][T16258] 428705 pages reserved [ 1508.749972][T16258] 0 pages cma reserved [ 1508.859729][T16243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1508.859753][T16243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1508.865442][T16243] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1508.906644][T16267] netlink: 'syz.1.11112': attribute type 11 has an invalid length. [ 1509.023530][T16258] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1509.079613][T30129] wg2 speed is unknown, defaulting to 1000 [ 1509.079657][T30129] syz2: Port: 1 Link ACTIVE [ 1509.079725][T30129] wg2 speed is unknown, defaulting to 1000 [ 1509.219120][T16262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11111'. [ 1509.438216][T16273] bond6 (unregistering): Released all slaves [ 1509.654280][T16276] netlink: 'syz.0.11114': attribute type 1 has an invalid length. [ 1509.655785][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11114'. [ 1509.694043][T16294] netlink: 'syz.1.11116': attribute type 2 has an invalid length. [ 1509.734263][T16276] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1509.882183][T16294] : entered promiscuous mode [ 1509.917751][T16296] bond0: (slave bond_slave_0): Releasing backup interface [ 1509.983656][T16296] team0: Port device team_slave_0 removed [ 1509.985459][T16296] team0: Port device team_slave_1 removed [ 1509.985791][T16296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.986530][T16296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.987230][T16296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1510.385336][T16329] netlink: 'syz.0.11127': attribute type 2 has an invalid length. [ 1510.650667][T16344] netlink: 'syz.4.11130': attribute type 14 has an invalid length. [ 1510.650687][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11130'. [ 1511.041562][T16375] netlink: 'syz.2.11137': attribute type 11 has an invalid length. [ 1511.765532][T16379] veth1_vlan: left allmulticast mode [ 1511.894975][T16379] tipc: Resetting bearer [ 1511.966088][ T9631] s`z1: Port: 1 Link DOWN [ 1511.997023][T16397] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1512.019114][T16397] bond11 (unregistering): Released all slaves [ 1512.070668][T13132] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.070689][T13132] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.070709][T13132] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.070722][T13132] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.070737][T13132] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.070749][T13132] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.070765][T13132] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1512.070777][T13132] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.276210][T16410] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1512.353881][T16413] netlink: 'syz.2.11150': attribute type 1 has an invalid length. [ 1512.353903][T16413] netlink: 'syz.2.11150': attribute type 2 has an invalid length. [ 1512.353916][T16413] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.11150'. [ 1512.365697][T16415] IPVS: Error connecting to the multicast addr [ 1512.524939][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11153'. [ 1512.524968][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11153'. [ 1512.625328][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11155'. [ 1512.625353][T16432] openvswitch: netlink: Message has 1 unknown bytes. [ 1512.694126][T16442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11157'. [ 1512.694149][T16442] openvswitch: netlink: Flow key attr not present in new flow. [ 1512.699221][T16441] netlink: 810 bytes leftover after parsing attributes in process `syz.4.11159'. [ 1512.967350][T16461] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1513.244076][T16471] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1513.248304][T16471] netlink: NAT attribute has 1 unknown bytes [ 1513.248335][T16471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1513.306432][T16475] ksmbd: Unknown IPC event: 1, ignore. [ 1513.713388][T16499] netlink: 276 bytes leftover after parsing attributes in process `syz.0.11176'. [ 1513.893359][T16507] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1513.895538][T16516] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11180'. [ 1514.003072][T16507] bond8 (unregistering): Released all slaves [ 1514.070312][T16516] bridge0: left promiscuous mode [ 1514.070334][T16516] bridge0: left allmulticast mode [ 1514.299630][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11185'. [ 1514.431410][ T25] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1514.470998][ T25] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1514.561147][T24114] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1515.423998][T16559] macsec1: left promiscuous mode [ 1515.436867][T16559] tipc: Resetting bearer [ 1515.438237][T16559] syzkaller0: left promiscuous mode [ 1515.438255][T16559] syzkaller0: left allmulticast mode [ 1515.654538][T16559] bond5: left promiscuous mode [ 1515.667467][T16559] veth5: left allmulticast mode [ 1515.767710][T16588] __nla_validate_parse: 4 callbacks suppressed [ 1515.767725][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11201'. [ 1515.836427][T16573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1515.836452][T16573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1515.839716][T16573] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1515.839798][T16577] netlink: 'syz.0.11198': attribute type 3 has an invalid length. [ 1515.840042][T16577] netlink: 'syz.0.11198': attribute type 3 has an invalid length. [ 1515.901268][T13133] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.901299][T13133] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1515.901334][T13133] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.901357][T13133] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1515.901390][T13133] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.901411][T13133] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1515.901443][T13133] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.901465][T13133] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1516.016248][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11201'. [ 1516.066518][T30144] s`z1: Port: 1 Link ACTIVE [ 1516.267407][T16612] ip_tables: iptables: counters copy to user failed while replacing table [ 1516.306542][T16592] syzkaller1: entered promiscuous mode [ 1516.306557][T16592] syzkaller1: entered allmulticast mode [ 1516.324614][T16613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11206'. [ 1516.324635][T16613] openvswitch: netlink: Flow key attr not present in new flow. [ 1516.386985][T16615] bond8: option all_slaves_active: invalid value (255) [ 1516.399709][T16615] bond8 (unregistering): Released all slaves [ 1516.429074][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11209'. [ 1516.902263][T16621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1517.224515][T16670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11216'. [ 1517.296461][T16673] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1517.438198][T16679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11219'. [ 1517.749002][T16692] netlink: 'syz.0.11223': attribute type 11 has an invalid length. [ 1518.034823][T16699] tipc: Enabling of bearer rejected, already enabled [ 1518.157210][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11227'. [ 1518.406186][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11232'. [ 1518.408974][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11232'. [ 1518.443402][T16717] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11233'. [ 1518.445615][T16717] netlink: 'syz.4.11233': attribute type 1 has an invalid length. [ 1518.445930][T16718] netlink: 'syz.4.11233': attribute type 1 has an invalid length. [ 1518.471426][T16717] bond8: entered promiscuous mode [ 1518.471863][T16717] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1518.492740][T16717] bond8: (slave bridge9): making interface the new active one [ 1518.492761][T16717] bridge9: entered promiscuous mode [ 1518.495219][T16717] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 1518.532773][T16722] netlink: 'syz.2.11234': attribute type 11 has an invalid length. [ 1518.927490][T16737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1518.944155][T16737] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1518.962353][T16740] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1519.205889][T16751] tipc: Resetting bearer [ 1519.207910][T16749] tipc: Resetting bearer [ 1519.379725][T16758] xt_TCPMSS: Only works on TCP SYN packets [ 1522.355572][T16771] mac80211_hwsim hwsim111 ..ãc¤±€: renamed from wlan1 [ 1522.405510][T24114] tipc: Resetting bearer [ 1522.452601][T16781] openvswitch: netlink: Message has 28 unknown bytes. [ 1522.733802][T16802] netlink: 'syz.2.11254': attribute type 11 has an invalid length. [ 1522.793066][T16806] __nla_validate_parse: 4 callbacks suppressed [ 1522.793085][T16806] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11257'. [ 1522.859381][T16808] IPVS: stopping master sync thread 11864 ... [ 1522.929056][T16816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11261'. [ 1522.929082][T16816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11261'. [ 1522.930169][T16817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11261'. [ 1522.934270][T16820] netlink: 'syz.1.11259': attribute type 10 has an invalid length. [ 1522.934790][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1522.947442][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11260'. [ 1523.116711][T16829] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11262'. [ 1523.239130][T16842] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11266'. [ 1523.239155][T16842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11266'. [ 1523.239228][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11266'. [ 1523.343917][T16839] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1523.355721][T16842] mac80211_hwsim hwsim114 wlan0: entered promiscuous mode [ 1523.355746][T16842] mac80211_hwsim hwsim114 wlan0: entered allmulticast mode [ 1523.502076][T16859] macsec2: entered promiscuous mode [ 1524.047333][T16902] netlink: 'syz.3.11283': attribute type 11 has an invalid length. [ 1527.410642][T16977] netlink: 'syz.2.11296': attribute type 11 has an invalid length. [ 1527.451129][T16979] syzkaller0: entered promiscuous mode [ 1527.451150][T16979] syzkaller0: entered allmulticast mode [ 1527.868958][T16981] __nla_validate_parse: 9 callbacks suppressed [ 1527.868975][T16981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11301'. [ 1528.044146][T17022] netlink: 'syz.4.11313': attribute type 2 has an invalid length. [ 1528.060874][T17022] netlink: 'syz.4.11313': attribute type 7 has an invalid length. [ 1528.149215][T17028] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11314'. [ 1528.237167][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11318'. [ 1528.263822][T17036] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11317'. [ 1528.283613][T17025] [ 1528.285964][T17025] ====================================================== [ 1528.292975][T17025] WARNING: possible circular locking dependency detected [ 1528.299994][T17025] syzkaller #0 Not tainted [ 1528.304399][T17025] ------------------------------------------------------ [ 1528.311400][T17025] syz.0.11315/17025 is trying to acquire lock: [ 1528.317565][T17025] ffff88802c9b7ae8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 1528.329124][T17025] [ 1528.329124][T17025] but task is already holding lock: [ 1528.336469][T17025] ffff888026800260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1528.345423][T17025] [ 1528.345423][T17025] which lock already depends on the new lock. [ 1528.345423][T17025] [ 1528.355826][T17025] [ 1528.355826][T17025] the existing dependency chain (in reverse order) is: [ 1528.364833][T17025] [ 1528.364833][T17025] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1528.372562][T17025] lock_sock_nested+0x41/0x100 [ 1528.377843][T17025] smc_listen_out+0xd4/0x3d0 [ 1528.382945][T17025] smc_listen_work+0x81d/0x1410 [ 1528.388316][T17025] process_scheduled_works+0xc3d/0x1630 [ 1528.394371][T17025] worker_thread+0xa47/0xfb0 [ 1528.399476][T17025] kthread+0x38b/0x480 [ 1528.404050][T17025] ret_from_fork+0x514/0xb70 [ 1528.409145][T17025] ret_from_fork_asm+0x1a/0x30 [ 1528.414424][T17025] [ 1528.414424][T17025] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1528.424573][T17025] __lock_acquire+0x164c/0x2de0 [ 1528.429947][T17025] lock_acquire+0x115/0x350 [ 1528.434966][T17025] __flush_work+0x74c/0xca0 [ 1528.439990][T17025] __cancel_work_sync+0xbf/0x110 [ 1528.445443][T17025] smc_clcsock_release+0x60/0xf0 [ 1528.450978][T17025] __smc_release+0x64e/0x7c0 [ 1528.456081][T17025] smc_close_non_accepted+0xd5/0x1f0 [ 1528.461872][T17025] smc_close_active+0xb30/0xf20 [ 1528.467232][T17025] __smc_release+0x9c/0x7c0 [ 1528.472238][T17025] smc_release+0x2c5/0x550 [ 1528.477158][T17025] __sock_release+0xa0/0x1f0 [ 1528.482321][T17025] sock_close+0x1c/0x30 [ 1528.486988][T17025] __fput+0x418/0xa50 [ 1528.491480][T17025] task_work_run+0x1d9/0x270 [ 1528.496582][T17025] exit_to_user_mode_loop+0x204/0x770 [ 1528.502461][T17025] do_syscall_64+0x328/0x520 [ 1528.507561][T17025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.513966][T17025] [ 1528.513966][T17025] other info that might help us debug this: [ 1528.513966][T17025] [ 1528.524172][T17025] Possible unsafe locking scenario: [ 1528.524172][T17025] [ 1528.531600][T17025] CPU0 CPU1 [ 1528.536946][T17025] ---- ---- [ 1528.542296][T17025] lock(sk_lock-AF_SMC/1); [ 1528.546797][T17025] lock((work_completion)(&new_smc->smc_listen_work)); [ 1528.556234][T17025] lock(sk_lock-AF_SMC/1); [ 1528.563247][T17025] lock((work_completion)(&new_smc->smc_listen_work)); [ 1528.570170][T17025] [ 1528.570170][T17025] *** DEADLOCK *** [ 1528.570170][T17025] [ 1528.578293][T17025] locks held by syz.0.11315/17025: 3, last CPU#1: [ 1528.584688][T17025] #0: ffff8880585ee400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1528.595215][T17025] #1: ffff888026800260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1528.604610][T17025] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 1528.613825][T17025] [ 1528.613825][T17025] stack backtrace: [ 1528.619700][T17025] CPU: 1 UID: 0 PID: 17025 Comm: syz.0.11315 Not tainted syzkaller #0 PREEMPT(full) [ 1528.629137][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1528.639177][T17025] Call Trace: [ 1528.642473][T17025] [ 1528.645393][T17025] dump_stack_lvl+0xe8/0x150 [ 1528.649979][T17025] print_circular_bug+0x2e2/0x300 [ 1528.654995][T17025] check_noncircular+0x12f/0x150 [ 1528.659926][T17025] __lock_acquire+0x164c/0x2de0 [ 1528.664774][T17025] ? do_raw_spin_unlock+0xf5/0x200 [ 1528.669878][T17025] lock_acquire+0x115/0x350 [ 1528.674365][T17025] ? __flush_work+0x101/0xca0 [ 1528.679039][T17025] ? __flush_work+0x101/0xca0 [ 1528.683706][T17025] __flush_work+0x74c/0xca0 [ 1528.688200][T17025] ? __flush_work+0x101/0xca0 [ 1528.692867][T17025] ? __flush_work+0x101/0xca0 [ 1528.697537][T17025] ? __pfx___flush_work+0x10/0x10 [ 1528.702552][T17025] ? __pfx_wq_barrier_func+0x10/0x10 [ 1528.707831][T17025] ? __cancel_work_sync+0x5c/0x110 [ 1528.712938][T17025] __cancel_work_sync+0xbf/0x110 [ 1528.717872][T17025] smc_clcsock_release+0x60/0xf0 [ 1528.722805][T17025] __smc_release+0x64e/0x7c0 [ 1528.727385][T17025] smc_close_non_accepted+0xd5/0x1f0 [ 1528.732658][T17025] smc_close_active+0xb30/0xf20 [ 1528.737505][T17025] ? __pfx_sock_def_readable+0x10/0x10 [ 1528.742955][T17025] __smc_release+0x9c/0x7c0 [ 1528.747444][T17025] ? __local_bh_enable_ip+0xd6/0x140 [ 1528.752722][T17025] smc_release+0x2c5/0x550 [ 1528.757134][T17025] __sock_release+0xa0/0x1f0 [ 1528.761715][T17025] ? __pfx_sock_close+0x10/0x10 [ 1528.766558][T17025] sock_close+0x1c/0x30 [ 1528.770710][T17025] __fput+0x418/0xa50 [ 1528.774685][T17025] task_work_run+0x1d9/0x270 [ 1528.779261][T17025] ? __pfx_task_work_run+0x10/0x10 [ 1528.784363][T17025] exit_to_user_mode_loop+0x204/0x770 [ 1528.789719][T17025] ? rcu_is_watching+0x16/0xb0 [ 1528.794482][T17025] do_syscall_64+0x328/0x520 [ 1528.799062][T17025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.805113][T17025] ? clear_bhb_loop+0x70/0xc0 [ 1528.809776][T17025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.815655][T17025] RIP: 0033:0x7f56f259e159 [ 1528.820055][T17025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.839649][T17025] RSP: 002b:00007fff8ca0abc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1528.848054][T17025] RAX: 0000000000000000 RBX: 00007fff8ca0acb0 RCX: 00007f56f259e159 [ 1528.856015][T17025] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1528.863976][T17025] RBP: 0000000000175112 R08: 0000000000000001 R09: 0000000000000000 [ 1528.871937][T17025] R10: 0000001b30e20000 R11: 0000000000000246 R12: 00007fff8ca0acf0 [ 1528.879892][T17025] R13: 00007f56f282609c R14: 00000000001751d3 R15: 00007f56f2826090 [ 1528.887861][T17025] [ 1528.892632][T17036] netlink: 'syz.4.11317': attribute type 3 has an invalid length. [ 1528.920133][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11319'. [ 1528.930159][T17034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1528.950704][T17043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.982974][T17043] batadv_slave_1: left promiscuous mode [ 1528.984144][T17043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1528.985759][T17043] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1529.027932][T17044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11319'.