last executing test programs: 3.457362652s ago: executing program 3 (id=2135): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @broadcast}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040026bd7000fedbdf250800000020000180140000000000696467655f736c6176655f310000080001001079f5d03cfdfcf75e092798ed592a39f1a420ff9478f88efdec52d9376dc32ea1bb808177d8d50c0775c3bc44662d5fbd867ad918bb1525732f076085b42dc231a4ddc60ea79bd706c770f134859d8dbb", @ANYRES32=r6, @ANYBLOB="080002800400010028000180080003000100000014000200776c616e3000000000000000000000000800030002000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) listen(r2, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c05000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r9, r8, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYBLOB="2f00000000000000040000", @ANYRES32, @ANYBLOB='X<\v'], 0x20) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0xfffffffe) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r10, 0x8917, &(0x7f0000000180)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000240), &(0x7f0000000280)=0x4) 3.009802438s ago: executing program 0 (id=2140): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000040000000000000005000000950000fba8000000184800000400000000000000000000001811000088d225d52383830f232c3dd592d092f10d20dfa9eb19be5b93eed444101c7b38a18706c2fa55dcf7a43bd2440837fef90e8373bbde072a62ea59c252653b3006194dbf8ff002f5725de21445f4d684e416438432e0b052bf4857dd8790f4dea28783a3b66f4f6da092f6a459698aa63b25a290995d030c7ddc43bdae721b88706f9f18193eddb2b21d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000186200000200000000000000040000008c0902000100000082501000f0ffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xea, &(0x7f00000001c0)=""/234, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xf, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0x1, 0xa}], 0x10, 0x2, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001740)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000600)={0x80000000, 0x4, 0x2, 0x7fffffffffffffff, 0x4, 0x6}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x1c, r6, 0x1, 0xc8, 0x6, @dev}, 0x14) write(r4, &(0x7f0000000d40)="92417fdf791ada13", 0x8) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x800000010d, 0x2, &(0x7f0000000000)="0000e2ffffffffff", 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0xc, 0x800}, &(0x7f00000005c0)=0x8) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030527bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000090000140012800b0001006d6163736563000057fe028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x80801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='rpcgss_unwrap_failed\x00', r1, 0x0, 0x2}, 0x18) 2.775553001s ago: executing program 0 (id=2141): r0 = socket(0x11, 0x4, 0x9) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x11, 0x0, 0x20000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000ede91b0170cc2a000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000014000000110001000000000000"], 0x74}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)="0b49c8ff0e5bb4428672dff010f3ba1bea37c5057ca290ff756464fb18ff2da91cb2286a0d20089b09eb09d8ea5b13980ef710fa6ee54685bc4e125989101cee77407bb63b3fa3a01ba47ff9a8a3703fd22adcb045400795075decfd596c1f6890e09ac5264ea6f596fad0666f71443cd250beaf8babf768df6d7451df70c6bb16664dea8185149c7bda4355b9153187c8d66010d9dfcfd5b77d872500e8e6ccfec25cea06f5242cc426b3f45b167512c5990766387b0bb31448397ac4f98f9e253fa6a315ff9592ad3efc11920df5a6af4a5f867deb54f2bb2fcd80e2b445c3b99b7ff318ebf715751d9c2ab5f1d5c8e1", 0xf1}, {&(0x7f0000000680)="2c33561b004b4a33ca0bde643b823dd6b8547326fc51b8027b1439dcd109bb34dc6569f17df881d42ebe58e75676fcff9597f0685d20d8e0bacd1a908b4ad3c61f5a82f9f29ad1c06d3e3aba94c5365c09d16047d618652954668079fcb369ebadc561d9606286d9f765a8926e94be34d508b05da5f990d551147068a00c561860b0cafa418852a1026d3437bff9d450d0945621968172a9153463e944428ff0e2e759", 0xa3}, {&(0x7f0000000300)="a0ded33024885171461af9451bde4ffa23e3d427e3852e48d9e226034afb0d230ee9e49f363a7a52b2cc8686c3e58b7bbbfedb93f6221b8445f4559ad484c9221ccfe70d23eda7dea79cf68269ba4a0ec0ab4b7fde7eac0e470cd94f35cbd39e8e1f17ee3bd1271ce9351ae85078edd6ceeb30bfc4", 0x75}], 0x3}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) syz_emit_ethernet(0x16, &(0x7f0000000200)={@broadcast, @local, @void, {@llc={0x806, {@snap={0xab, 0xaa, '\"', "fd27a7", 0x15}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0x11, 0x4, 0x2, 0x2b, 0x44, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xb, 0x7d, [@empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x38, 0x3, 0x8, [{@broadcast, 0x6d}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) r4 = socket$inet6(0xa, 0x80003, 0xff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r6, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x80800) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.396257353s ago: executing program 3 (id=2145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0, 0x0, {0x0, 0x200000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 2.222238806s ago: executing program 4 (id=2146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xe, 0xd, 0x1, 0x0, "9a1d3d683b867361838a"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x4048010) 2.153243541s ago: executing program 3 (id=2147): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf254b00000008000300", @ANYRES32, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) 1.995897845s ago: executing program 4 (id=2148): close(0xffffffffffffffff) socketpair(0x11, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e657665000018000280060005004e20000004000600050008"], 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x4008800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) close(0x4) 1.738237901s ago: executing program 2 (id=2150): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001500010000000000000000000a"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)={[0x2bfb]}, 0x8) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000180)=0x8, 0x4) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.737774567s ago: executing program 0 (id=2151): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'hsr0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000300)={'veth1_vlan', 0x32, 0x30}, 0xd) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000340)={'vlan1\x00'}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.506247346s ago: executing program 2 (id=2152): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x2004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.404042689s ago: executing program 4 (id=2153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0x997c99d36a8e2b94, 0x8c1, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, &(0x7f0000002380)="4bc32a49c5fee590838631f81d2d501b780e3376f11cd3e5af0a450233e74156f6bbf53a14d2e74c8e46115c0a4d4a0375317c4d988a690e37262cb48b591bfdb4ff738f0be31f3f33d65ec0256e00d937043394bbc296a55f0ffd3f8ae817bd0629ddb54b5a077cb64f8b1b75a3368c7908668352513b274701ffeab331e7427c786ca327f124645e97e4b67c7eda72388d008dbecae8227565c52c02500c1953cff47c07baeaa70ccda20f6ad15db93d0225f72ac9f7c32387b0e50de6f698decf584671232331c524c1e775c4b13e0e379e8253b0ff8fc05238f9a7dada66771b3c485d00532858ad4e137742e6adf72eec34b0ba8821c67f9d2726e98a6074617100882dc2711fb2e477cc76a1ff9b47d93ca2fa42e52f483bd2aa530974ff3fd29a170adadb10241abb8ddff7fdbe53765ee6239d7896be7db752b5046cc5b4b36b2a9c0b3c154915d90ccbf46675a81826b348a5c986a4d1c4488f6e24545619c829e7f6c4ae68d1a86bb2e700728086f30659178c7ba222b71f5786d77f12f221cd20b9fbd24801abcd64eaa605ca9da167fb06b11b9ee2a33d7d144f162f0699972818e0e69159e07393634fd13310a648768d17013063d34b2d68a20469891d0f24282b5cb42118dc5e3ce326c7645fb569ee78dca1ec46d7942a42bd675ed1dbb3b537a24d57b76583df434bb57f38c0b4c2b641580fd2ab4f4511fb0126a3e17e06c65ec6023b8198ddc4b59707132affdb3123a930192d8a1a1d346501468faf24a8090b0454b7fd4fbe7f3afd8e70150edc2d3b6d799b45010dfd621c39d1e32e19f7c1554abf55e4cb0f450d129c4eaef1a1b7431ad30fc0d6ce6b973f2aa0f1dd2599d8284fb79deff298aae73388cd0ae4fccda5cff46b058fac08debb67bb9bc5eea5a6d28cff2d046a5afb09fb608bab362ef021fefc8d05e9619ea57959a884873b3a887a5e08123d564c5349c4c15c2ece77f0e4d0e4c88a516978afe85c014ff344668d4cd97681bae2ab6aecdc6f4a4c705c43d400f691ef6f5c926a8c51d9cd4d0fc15769c5b20662cfbef41d9cc3d62b9d68795907729d33133f3287f2ab5cce83e35fb0e358bb64a60675308f568a25c2327eebaaac30e6e282464d5547daf53eee7190e1e5a40f7d2e327858099bc5a7eff7f79859a074aaad5d6bdd8164c627ea59784fe40f1467bd17ded380e21bca5d7d0bb59aa681740d4e371e632862cdb8868c4d706a328704dd94d8687e07708b8a4742fb0caa260523e515bfd7ddcae9aff8e487aac73232c6a2bf63663c644f4451e209d720b0bd678b27b673443937d80958f94fd747be9f0df02950c2de593ea6978062aba26d12eda852f37cdfc18d3b96b08ac3eaffa2efb619db6ee789446b30fd5939f59e8cbafc28451fb95eefa265e038f43af933d288578be9ecf26495e6da011d91d5578c46b4a4bcbcf649eced6ac16f6623e67afd80c35dffe6b6aadd4bfbbfcd2f248455b8b1ce0f10f628999d8f56ae47e2fbb744bfb7962a3548240c286277db000d2b0e403d13fea75c7a789dec2a29e51e20a037a5156cfc547a7688f1926d8476a5d5bb64b4a82132a3bcadd080503f72e04e7d55ece7d5bbf24eb6fae2abace69fddbc3604c04a0a82408a7dc035e2512082397323cbf6ac5a01c07baa604bbd6315ad2592491a5397ef1c736f5fae08426ad14753fa0ea774f0397a77399bc5a7c9529f7a7b48313f426796346f77f7e975f8c2704bc61ce89f8f462ba69b68de5bbfaefae6b749d68af86334552a37f02b18671eb6ebf58cc77fde6d93a2b859c49113634afa77d33d2655675697b3ba142b94a18cda12773ed4391e4f80e7caf1c429eb4bbf2d2c982ea62aba0c94cfa2280d12e411edba880debe919d334d58492ce78ee93fafb2b6ef8206bf89cd10139dda68c57aece18acb02b5cb1d8ca7c6eba88751ddfad35db2ef8089e14cc30fa7e963394cbdfd4a39053c69e94b9bb44bb445d77b7a0965e3428142405ef3aa26426fcb8e26423b5342a1ea0bfd28448605e7c4346916a152839c23f1e3d463078830f55cfee3d719080be97cc6b6acd9effda875b18df23c07e55cd732d25d0c32b04c38b2c4cec8e9b57548cb7c153c2ac2043aaa49267c179f1485acb449823fd3f379953adaba9209ce052ee6470529ef6c044efdb9ec79c0da170e1a986706da2f191f735e8c9c27a433f06ad910b552ec871c20202bf39c13e3601a65facb32fb7ef2a85d12345b67409bd14c1e26c028676cef27d47e51deb5c8b616d7ec0dd837ad4fc4800ce78f83e5075bef6d3ef784519908712d411d6af598dda6ea13f20fb2ba8f4a85d1c8df3cc7dfe0a8e8d5b2d696e2b51d835c255d97873dae579a69cc3c9f8d50f282250142f78b562cd59325b010fdf5e103cc05f09295ecd5ad1bdbd195ba895bd38e5f3f8abe520a442f98c9b0df2e1bf30771be8c0ba86d59579a9ceda056c2b3b6d51ea5cd584750f45ccb7c9adc37ea8750ff035778da2cd9eac640e1121c4afac6f796a2a6d1892ce896f201a08cfa422bdbfabc34dad9e34352856160037d3485c344900ebb6d331d35fcb1c393a712cb5fe7002561c4bb11051492e65d4291c92c0545a926a798d7a23e806796fed6534d67cdf9857f7123d4dd1ebdb88d545201d75d1c9ba5456b7fb52af56652cb2537c0a5f82ad02f084edcaa66254f9a0a01eb7c5b9606c4c93594f1e636ab15d96f58b11ee9f7a16b6765a146bac6a98da6b47ecc87974a1c732c1194008c5f3514d0c1f42ba7b284b07b23a3b0fe9073dcec4b2d4ea397ef3984753b134d20515ed774118b46f21cd2f2c60b87f54e9335fa30517fe8c360f0803031a91302ba8f44e82d13c58736881ecf4cb643e7bf9585193f4d1e95e08c18c47d460e2edf2a0f1ed39c2e7800cfbffa0d9a09b108d8a5eab9ed409b61458e9d46bceab006e2df77505af41ff7dc0ee67748ec729ee09c11c229ac7ef447712c220ae2ef5612ae45299ca04cc3a26cc09a259c1dbc9a4291bd6589ce6eedc156df97d1bb7eea68ee273bb4c4c8ca0c515299aa53260e587608e4b1ec4f386ad0367a08bfa47ffca6af5705097d1657c94d5d7736e7157d8f7137416480933be3f325708f6f947ea08c94cf4489e0f338f91384715681044e00fbbff94b8d21a874b12be4294173c65f2f4e56427e840a5703e289f8314f705cf74e1d98ff88105967bd42d62a63a897fbe9a50ff08dd122c3ce1445b21aab0502b6fb47577604a0508249d8422b71eedc58fa678646922050d46d5e69d8612917bbb741c19ede0600917b7f84e44e580334db385ef5e5600a73bfdebcb037cea14f50eb7466db1e51d03d61923804ebfef38735452893486cf5a9e6ecc54526a2c998e3b5b41d5d8477c7e9b756876c8748dd10f44f315a5ccc578ec38a6799846ec1fac57bdfe4f9bc65b31d1e7de7cd9fc2f163cb513d790bd1dbb9b5a5cd46efecbbaba6bf504c23ca744ee36704f0b875396da1f9ac7089c28136e19b3c31ea3ac44f0bf8af4bdeb9a917370c78d11ab838282787cdc45b35f604bddf6c65f4079bd7606a40f219bbe940e25e6a54a8b9850ea0decb10013ae99aa920303f35f6283c0211e1bf12f33926840ec6acc53babc28b29c5aee0f626c48d58b092644823fc0b71a57d7175bc35ddf9ec7019d89a3497aa65fb4f34b169c535ce30d695dbb88f278e730d2e4f1394ed4b843885d8fa33b39152398fd2f6bb77520a84e4135e1995e9568bc4d3e60b98e1452ada5893bfc1a7574570a09fa21064ad12aa22af9195fe351cd34a5e3adac29da4669e09abf318d17c4b564f2ed0a7844c840a729fed5c106861f479fedf326d93b39f186c40e4fc59e064c6d090cc9ecf27630ab471817e3bf8acfa1518c6f0f6b2f4c0905e9249af04c8019d3fe12acd69e0a3085e01d673ffa5f2bb6d26717f611de3a0bdb7b838f0d156c06395bbb9294cb0e293f43baf60df683b35c4ff83bfd71b74fb25762079843d6484fa76a610b8cd6affeaf1930a47aa9aec77fee8b6b6a806527597f769570bb62af13a9da2d81254e102134e256f15126d21a7e5e6865989b1eb5c9752d059bea9eff27f7fed5f0ed40413ac11c20e68aa43baf4fc6a59e049e6bdb3ea3ebc5734b0ad0c6c9be761c5c248d2b50584ddfa2399884b091894f19061f4eb9ffa86097c11ee9fdb04d4ca44f91edded8e541adfab1b71c93305e85a41ca5f4eb9cf15820bf677694325c9c55cb443a7cb5e3d18157bd01bb23c1ede5dd5babc2751bead25b2f18860a085584ebf5211d67f74fd70edbecdbbf435d71db84fa96b9878a4166e2b0cc492f0f9eb82ad4fb4cdd5644e20f296feaa8f147e0e20a7c0f37767bf2a47fee3141447043fd990bb39dd56153eee38d05538b43627891f057a07526bf6848e171247549f53e0ba495a108f99e412a178e12001135e27b0184542ac579e0e22987b6b60fe5fc07954587556a53e1b326888d482f519c2e65f57193cb7f328e865db95b757d370200cb643a4da7596a13391d7b1017d842ecacaac3b0a3f53f388301374ad9033ff34d7d18db497c78a1ec8661c8e78e1d498f5a615649f3ecfe2c8ef3ee616ae455a42a06aacd64f1b2904dd111acd54d349dbb2ea2acf9e8fad483a53eb211018f6f2245c519c50fb3453b956c49a05a140b7270939f4f8216da940564f7facc9a83adae647c9fd43790577ed43dbe77420459a74237593fd5b703c0d4076ab1accd9ba686e621f189f41a66df608f7db2dfb1b08137f2f91413e670f3835dd7bca62a078c1cd14683ed4d9ff8d9025477aacffcc38c330c3940ce55ba0742d8ffb4e0a3220177529978390e19167e40dede952fc0cb5e6e8ad6863c6160f517d714bcf18256eb9d0eec8413dbec13a7bd637a77e328d4db8f61493eb0f26eca93137fc4420e0c5bd8d4a1b700bf0608daddec7d40d24751698f2dc89b8a04ae03d3349511a50f988b02cbfacf2c0455a9c8f034d671972368ceed715f3dfc2e9a143ff5c6275c8b714aee89c48c6b10aaf007e363ae17765dffea8b265a27793f55b86c214bbce2b3745f392109ece5688bdccd6dccf33407932dac4a18783b2d26d6dafeff39146397a4e89d2fb32d27c8b86e02b6ffa8fb91499f51d481ade5aa2e89bf5d24cdb95771574c777df39144316c6d6fcd9d8fb2fcec5823adfea0550014dfd2b5a3f7e23116359d12bee8362b5b96c7816583dabda95117b089f37cb3f682aeafec74dd62ca9ed9f1e56f7789e3b1ea9fcd0e3362ce0819f7b73d5e6b73162452eb69a1625a74926e6f4ee83e443e22f035e28f8bb19cfdc79c4e623356d022866edaf6d75c1938b86aa475670015433496f6455e4178072f05210d023ddb30dbaa5c8549fe893880e9da44d7ef99bc67940e73823962c8cc5e5e2708e22ddf27b863e360b372b57771099ab70fb51538bb0f42684e9b8bee428a9292869ad2bda5c554653e592066acd8e8547987f8e734e9e63ce39aae30439d4a0d7d88c8c5b2ee3727b6e8f22e96b9571ac2290edf3aa74e5cd54f464417773ef295e90d43042ee731d129179bef03fafc424b38118b5bfaa2051da04fbe8c84ddb142b8b80a599e419c09e0946268a52c352e74a8c3ff5b4e554dfcb1ae8b9a7f16ff823022ba5cd25ba70b6d6f620c5b2eff4a318c2c38f71c62b66b6d242e8b6046b57589ae1c9da4c71a3da67ae491f3222f911144603238bc0e508f7f6166e95700e043", 0xfffffffffffffd05, 0x2400c093, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000800)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40) 1.218700321s ago: executing program 0 (id=2156): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x2004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xe0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.201213066s ago: executing program 3 (id=2157): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)="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", 0xa69}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='74\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0202e9530000fddbdf257a00000008000300", @ANYRES32=r4, @ANYBLOB="0600fb00b40e00000600fb00090000000600fb00700a0000"], 0x34}}, 0x880) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000030038000008000100ac1414"], 0x24}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004840)=@delchain={0x34, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0xb, 0x0, &(0x7f00000002c0)="61dfb066c6677394ff0100", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000400)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)="00214717a70700000000030600710a06069d856829c2f5d7a3c3b954c224baf58f74dc9e8aa4050061e45080780baa000014", 0x32}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r9 = socket$inet6(0xa, 0x4, 0x3) sendmmsg$inet6(r9, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0xee01}, {0x0, 0x0, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000170029341349ac30000100000080000059", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000001030000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200001400b7030000020000008500000005000000bf092000000000001209f9000095000000000000378c352412864be5007b9af8ff00000000d68900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff64020000185aeb00182200000000fdb1", @ANYRES32=r10, @ANYRES32=r9], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) 1.137989224s ago: executing program 2 (id=2158): accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x1, 'pimreg1\x00', {}, 0xffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110210000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x20040054) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=@newtaction={0x48, 0x30, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x8, 0xfd, 0x0, 0xa, 0xc, 0x9, 0x1, 0x2, r5}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0)={0x6, 0x9f0, 0x5}, 0x8) 918.099625ms ago: executing program 4 (id=2161): r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, 0x0, 0x0) unshare(0xf893107b5866485a) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x4}, {0x6, 0x60}]}) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000080)=0x9) shutdown(r1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2700df00"/20], 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r7, 0x0, 0x13, 0x0, &(0x7f00000002c0)="61dfb066c6677394ff0100000000000043aee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 877.726682ms ago: executing program 2 (id=2162): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000001880)={@val={0x0, 0xc}, @val={0x1, 0x4, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "4966cd", 0x17, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x1}, {"50f6d8"}}}}}}, 0x4d) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bda0ffd46b0449ade68bf84b36ec72dd7126afc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae8200000000000000167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d54f33ba1f549c35817c8a66c29be82fd3f8cd1aedcdb5377546061ea5cff7fb5b0cf191ae3d690cd4a963b89a48f14db49c10b058a1016dfa74790de3e2a09c13ded5e2e329bbb872f93a6b987137302acf6db7d64e85be80680be0e773e6ccbeb626a4e80dd2f13005a70", @ANYRES32], 0x114}, {&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xf4}], 0x2, 0x0, 0x0, 0x20040840}, 0x0) 826.185742ms ago: executing program 1 (id=2163): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10002000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1f8, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x1}, {0x12, 0x1}, {0x6}, {0x18}, {0x18}, {0x1, 0x1}, {0x18, 0x1}, {0x6c}, {0x30, 0x1}, {0x1b}, {0xb, 0x1}, {0x30}, {0x2}, {0x6c}, {0x18, 0x1}, {0x12}, {0x6c}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff008}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x36, 0x6c, 0x25]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x5, 0x1}, {0x2, 0x8}, {0x6, 0x2}, {0x6}, {0x4, 0x3}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x7}, {0x4}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x9}, {0x5, 0x6}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x5, 0x8}, {0x6, 0x3}, {0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x2, 0x4}, {0x7}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x6, 0x6}, {0x6, 0xa}, {0x1, 0x6}, {0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x401, 0x6, 0x7, 0xa29, 0x2, 0x1]}}]}]}, @NL80211_ATTR_MESH_SETUP={0xe8, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_IE={0xa0, 0x3, "075525d09ef10b16ced8ae770289a081288738b28e8142337ccbb980565985a3b0df793512874c023dbad90729cfa0aa9672c671683ed3a22dcc4cc384681a34a4b0daccc17c8ab169fb804b98c5ae241d746772f99c4e1d0fe62ca2d26d92aeaced6409b8489a57ea90d610e9652d9bcef112d9a78c29502222cff6f13f492b5fcc09891d83ff36be76404fe76e0eb24f5cfb238e2162fa7ee865cc"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x24020010}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x0, r2}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000400)={@local, 0x0}, &(0x7f0000000440)=0x14) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x959, 0x4, 0x9, 0x544, r4, 0x1, '\x00', r5, r6, 0x2, 0x2, 0x0, 0x6, @void, @value, @void, @value}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000540)=r6, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x204200, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000600)=r6) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv6_delrule={0x38, 0x21, 0x400, 0x70bd26, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x6, 0x3, 0x0, 0x0, 0x2, 0x5}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) close(r7) r8 = socket(0x1a, 0xa, 0x4027) close(r8) write$cgroup_devices(r6, &(0x7f0000000740)={'c', ' *:* ', 'm\x00'}, 0x8) pread64(r1, &(0x7f0000000780)=""/213, 0xd5, 0xbc40) r9 = accept4(r8, &(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000900)=0x80, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000940)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000980)={0x0, 0xf5, "11915de5dc7448e03a6cb587632eebbc46f4d94daea1e94719fa42193983603bba923398804204fac5c4d1cbf62ae31377d0f09189b1f027de47e93ea43321271f1eb1b8813840092650a3b99a5cb79f1f7f9ee91ec156f8e8bedfafaae6866da369e9eee237e631dde7f5b426e00d04782dcdb92dddfc957148ccefe34a301fa129165e968785855a35392623fc2dfcfdccfef3105b7dc6a29dc4c148f2ef3241c08a6ab192fde5aaebe1fc1967a3152f06c7a0d19c6e4ebb91f2051c275b9764f3ab936e3ac1fb1857ec96daa7650828c4ecee1ff4dfdef28c5122ab5fc6431dbf46872b149167d41f4b22364f682abaa2de9419"}, &(0x7f0000000a80)=0xfd) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000ac0)={r11, 0xee, "364174ac77a95007677ebe7c92de9249577582a21bffcb8a0087dfc95776d97e61cccb0dd8bf2f5ceb5010e2e8e42911d77a30aeaae394c6262f996a2cdfb1937cdeda0a8bc5af2ebfb1510eda3f3444b507347dafcb53a1aa5d6ffbaf3f50dec8bc748879f6d6a2ef50aa409ca86510ea1a89545d96451e7dadc7c9f85e1346375b3dabc46e26eeb2ce627ed719d80c9808ae57f794d9a28e4d758ae1eadda71a101f3142b16b8102016818af0c582cf58b387450295f68f8000f7c3d4f370c8a59d8b18a585663c78be23b21b2c0dfa545215a5a0668c331355ae96ea064e9aa20519c628a322162caf18046ea"}, &(0x7f0000000bc0)=0xf6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000c00)={r12, 0x70, "0ef85418e67e8288baa77fb51a889c5490343026ca1701a947cf4347ce7d656b096a3d0b02a6e392805dc0e0a8e61aa8763483acb8b2722bc960aa1a93839e3cf0dc4e074ea0c95dd6f94022de74a31bc67bdf466f521a873fbbc1643207434b6ff81f8a4a7d44d7b764b31d97c89e59"}, &(0x7f0000000c80)=0x78) read$alg(r9, &(0x7f0000000cc0)=""/252, 0xfc) sendmsg$can_raw(r10, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x1d, r5}, 0x10, &(0x7f0000000e80)={&(0x7f0000000e00)=@canfd={{0x3, 0x0, 0x1, 0x1}, 0x21, 0x0, 0x0, 0x0, "0efe92975cce90954410191d473127713404a58b2509ed4894f071f426be1fe446749990862fed60be01dcc3b182dae24eda47ec0f4131b1761cc51c88095313"}, 0x48}}, 0x8144) write$tun(r7, &(0x7f0000000f00)={@void, @val={0x0, 0x0, 0x2, 0x41b2, 0x1020, 0x1}, @llc={@llc={0x4e, 0x8e, "06", "a8"}}}, 0xe) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000f40)={0xffffffffffffffff, 0x4, 0x9, 0x7f, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) listen(r10, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000f80)={0x6, 'gretap0\x00', {0x3}, 0x2}) 722.227854ms ago: executing program 0 (id=2164): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000004d0242307b4f894d2574fbec5d039cb200"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_dump={0x40, 0x7, 0x5}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf254b00000008000300", @ANYRES32, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 721.575445ms ago: executing program 1 (id=2165): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x2004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 547.542629ms ago: executing program 1 (id=2166): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e24, 0x7f, @remote, 0xa}], 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e24, 0x7f, @remote, 0xa}], 0x1c) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) 477.412737ms ago: executing program 1 (id=2167): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x18, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x502, 0x0, @void, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff00000000691022000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 376.890775ms ago: executing program 4 (id=2168): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000426bd7000fedbdf2509000000080006000000007108000400020000004c0001801400030020010000000000000000000000000000080005000100000006000200000000000800050001000000060004004e22000014000300fe8000000000000000000000000000362800028005000d000000000014000100fc020000000000000000000000000001080009003f240000"], 0x98}, 0x1, 0x0, 0x0, 0x890}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103100000000009500000000000400"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0100000006000000ff0f0000b2e9ffff00000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b1e57d81af7b291c265f29f1434271c3f08d05e98421de894b9001c72e5a24b7d47be0268786dc6d17c9062d91f3f3336357d1aad69560e628442bee8594", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1c, 0x3f, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x29, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000200c0000000000002700000018110000bfab79c279daefb8343075776628fa2d2fe559b3a96e2886550017b760dddc1deb3fdc06bf01c65cdb409a1e", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007faa2000080000000783feffffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000031900001040000000255000010000000950000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000530300008500000006000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) close(r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000180), &(0x7f0000000200)=0x4) listen(r5, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60081f2000803afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000e9ffffff000000000aa74006598080a8030037004023493b87aafaffffffffffffff23732445ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df8c197b603e34066d42ca0a5c15b37adac15084dbaf736b410004000501000000001b00180145976e75e4330000000000000000000000000000000000066af3de09acfc3d79dfd839ead2a97cbd66818f0ec54cacb65c3903c5750729963dfe91c4cfd681c8be5f3c01d674573361ffaea32d7a7e9bf2f047c08f4b8a52bc51300e04948115253728983a0059e8dee0000000"], 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) close(r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="03032abd7000000000000c00000008000300", @ANYRES64=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') ioctl$NS_GET_PARENT(r9, 0xb702, 0x0) 376.488242ms ago: executing program 3 (id=2169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000008c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000000100000008000100030000000500020000000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 331.115607ms ago: executing program 1 (id=2170): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = accept$inet(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000540)={@mcast2, 0x70}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000009f00)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3}, 0x24}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x3d}]}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 328.71548ms ago: executing program 2 (id=2171): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 32) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async, rerun: 32) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r11, @ANYBLOB="0100ffffffff000000000100000008000100", @ANYRES32=r10, @ANYBLOB="b00002803c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000500030006"], 0xcc}, 0x1, 0xf000}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x58, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfb}]}, 0x58}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) listen(r2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x10, 0x1, 0x8, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r6, r4, 0x1a, 0x200c, 0x0, @value=r6, @void, @void, @void, r12}, 0x20) accept4(r2, 0x0, 0x0, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x2c020400) 242.647687ms ago: executing program 1 (id=2172): accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x1, 'pimreg1\x00', {}, 0xffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110210000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x20040054) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=@newtaction={0x48, 0x30, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x8, 0xfd, 0x0, 0xa, 0xc, 0x9, 0x1, 0x2, r5}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0)={0x6, 0x9f0, 0x5}, 0x8) 4.419177ms ago: executing program 0 (id=2174): pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)={0xc0, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x71, 0x3, "3816ec07b94e03ec1bed527135be9a97a7c2e22a5c008fcf50b521fce7ed5b3c7ef71b0a956ba02eb17c3a10fc632c96d68e7d01d524bee99cd4356cf2705509804c62f6f3119149a6bde3d9eb380c1553cf2834282309a6cf1dc8f803839ff0978206c0fda410dc03061d5db0"}, @ETHTOOL_A_WOL_MODES={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'rcu_utilization\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r2 = socket$inet_udp(0x2, 0x2, 0x0) tee(r2, r2, 0x2341, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r2, 0x1, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 3.494005ms ago: executing program 4 (id=2175): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000005000000000000000800018004000c80"], 0x44}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='7\x00'], 0x20) accept4(r0, &(0x7f00000006c0)=@ax25={{0x3, @default}, [@bcast, @default, @bcast, @remote, @default, @netrom, @default, @netrom]}, &(0x7f0000000480)=0x80, 0x800) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000000000300000000030000000200000006000000010000000000000e050000000198bf00006100ef3a30ca7862af9c0552234698012ab6eba60703abc568508f2aedf50b6a6ebb13e7"], 0x0, 0x43, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r11}, &(0x7f0000000880), &(0x7f00000008c0)=r10}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r12 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r12, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=@newchain={0x1f84, 0x64, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xf}, {0x8, 0xa}, {0x6, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x1f44, 0x2, [@TCA_ROUTE4_ACT={0xedc, 0x6, [@m_ctinfo={0x98, 0x19, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfff7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x21}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x3, 0x10000000, 0x4, 0x6}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xe6, 0x7, 0x8, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8001}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x642c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6bb}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x8c, 0x1d, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x3d, 0x6, "0675a7ae9178e10b10e4b199fb6216f847865c189869d35ee0959f3b0fcf76c157624de40b9619a8555cdf4fc340eb49390aacbeaed152ebba"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xf0, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x8, 0x8, 0x5}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x0, 0x9, 0x2}, 0x4}}]}, {0x87, 0x6, "bb0243c634d9efc4aa147aa4747eb5f6acf3559f474a659ed9ab6603175a23374e7c5d6e0f89d3d19e41ec962c0458a87b87ef34215ece1083264c2748986bd3e249eff0a4f53b6e1a55e342fb71b0a26c8207fab4faf5ba09a051325d02eae201857e6f392b431c74094fb8e08289d5b3d637eb0c62b74a0add7fc400c978bfe1ca33"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x11c, 0x10, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xc3, 0x6, 0x10000, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2b2, 0x49a4, 0x2, 0x1, 0xf}, 0x347}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x20000000, 0x965d, 0x4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x5, 0xfffffffd, 0x9}, 0x304a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7866d45e, 0x10000000, 0x6, 0x5}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4c4b, 0x5, 0x2, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x5, 0x5, 0x40000}, 0x5}}]}, {0x25, 0x6, "0bc0c7a2af90afd9039baaa4a0ec28b9d2022872850e406ef3e08937c10126dd74"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x8d0, 0x11, 0x0, 0x0, {{0xb}, {0x890, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x81}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x8, 0xf, 0x4, 0x1, 0x9, 0x5, 0x3, 0x8, 0xffff8386, 0x400, 0x7896, 0xffff3683, 0x2, 0x7, 0x4, 0xfffffff5, 0x4, 0x6, 0x0, 0x2, 0x80000000, 0xa7f2, 0xff, 0x4, 0x421474a2, 0x3, 0xcf46, 0x9b, 0x1, 0x8, 0x8, 0xa, 0x6, 0xccf, 0x3, 0x46c, 0xa, 0x1, 0x5, 0x80, 0x40, 0x9, 0x9, 0x101, 0x3, 0xfffffffb, 0x8, 0x7ff, 0xfffffff2, 0xfffffff0, 0x8, 0x6, 0x5, 0x80000001, 0x3, 0x6, 0x0, 0xb8, 0x1, 0x1, 0xef, 0xc, 0x23930340, 0x2, 0x101, 0x2, 0x3ff, 0x6, 0x7f, 0x2, 0x44602c70, 0x42fd, 0x6, 0x8, 0x2, 0x1581, 0x4, 0xfffffffa, 0x0, 0xe, 0xf61, 0x6, 0x9, 0x81, 0x1ff, 0x1, 0x6, 0xfffffffb, 0x1b36, 0x2, 0x6afe, 0x9, 0x1, 0xffffffff, 0x4, 0x3ff, 0xe, 0x4, 0x2, 0x9, 0x7fffffff, 0xd, 0xf, 0xffffffff, 0x9, 0x4d63, 0x7fffffff, 0x8000, 0x2, 0x5, 0xf622, 0x1ff, 0x3, 0x0, 0x13a3, 0xfffffff8, 0x72fa, 0x7, 0x7f, 0x55f, 0x0, 0xce, 0x0, 0x5, 0x4, 0xfffffff1, 0x6, 0x7fff, 0x0, 0x4, 0x8, 0xc54, 0x8000, 0xd, 0x87c, 0x5, 0x401, 0x4, 0x4, 0x5, 0x1ff, 0x2, 0x7, 0x80000000, 0x10001, 0x1, 0x3, 0x9, 0x4, 0xe6ac, 0x8, 0x3, 0x80000001, 0x9, 0x8a1, 0x8, 0x2000000, 0x0, 0x7, 0xb34, 0xfff, 0x2, 0x80000001, 0x48aa, 0x6, 0x66, 0x5, 0x0, 0xb4ed, 0xfff, 0x3, 0x10001, 0x4, 0x9, 0x168, 0x0, 0x5b3, 0x6, 0xe, 0x9, 0x1, 0xd4, 0x9, 0x5, 0x2, 0x8, 0x5, 0x2, 0x5, 0x9, 0x9, 0xff, 0x4, 0xfdd, 0x5, 0x8, 0x2, 0x9, 0x9, 0x401, 0x400, 0x4f, 0x4, 0x8, 0x5, 0x4, 0x800, 0x32b0, 0x7, 0x7fff, 0x86, 0x4, 0x7, 0xf, 0x2, 0xbe2, 0x5, 0x401, 0x2, 0x401, 0x2, 0xe, 0x40, 0x7, 0x8000, 0x143, 0x80000000, 0x3, 0x0, 0x0, 0x100, 0x0, 0x9, 0x6, 0x7, 0x4, 0x3ff, 0xfffffff7, 0xfffffff9, 0xb1af, 0x6, 0x7, 0x7fff, 0xff, 0x2, 0x3, 0x7fff, 0x5, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x7, 0x7, 0x4, 0x4d44, 0x8, 0x200, 0x2, 0x81, 0x9, 0xfffffffd, 0x6, 0x8, 0x800, 0x101, 0x8, 0xf, 0x7ff, 0x3, 0x0, 0x8001, 0x10001, 0x1, 0x8, 0x1, 0xf23, 0xfffffffd, 0x5, 0x63, 0x3, 0xffffffff, 0x3, 0x4, 0x10000, 0x1, 0xfffffffe, 0x1, 0x7, 0x8, 0xa3fe, 0x7, 0x8, 0x6, 0xd45, 0x10, 0x9c64, 0x2, 0x4, 0x2, 0x7f, 0x7fff, 0x9, 0x75, 0x6, 0x20, 0x8, 0x800, 0x4, 0xf355, 0x9, 0x7, 0x1, 0x6, 0x4, 0x2bf1, 0x0, 0xb2d, 0x9, 0x4, 0xd, 0x8, 0xffffddc2, 0xa, 0x10, 0x6747, 0xf, 0x1, 0xfff, 0x0, 0x6, 0x3, 0x100, 0xa, 0x8001, 0x3, 0x7, 0x9, 0x9, 0x0, 0x3, 0x6, 0xf, 0x1, 0xb1e2, 0x1, 0x400000, 0xfffffffe, 0x6, 0x9, 0x8, 0x97df, 0x6, 0x1, 0x668e, 0x7, 0x2, 0x8, 0xa, 0x3, 0x2, 0x401, 0x8, 0x1, 0x7, 0x8, 0xc70c, 0x8, 0x4240, 0x3, 0x4, 0x40, 0x0, 0xffffffff, 0x5, 0x1e9f, 0x8000, 0x6, 0x7f, 0xc6bf, 0x2, 0x1ff, 0x6, 0x8000, 0x8, 0x0, 0xfffffff3, 0x8, 0x800, 0x140, 0x1, 0xff, 0x8fb, 0x80000000, 0x0, 0xffff, 0x4, 0xa8d6, 0x2, 0x7c, 0x6, 0x401, 0x40, 0x7fff, 0x117b0b5d, 0xf4b, 0x9, 0xe, 0x6, 0x5, 0x7, 0x4, 0xfffffffd, 0x985, 0x5, 0x3, 0x5, 0x75, 0x3, 0x0, 0x8, 0x8f, 0x9, 0xff, 0xfffffff7, 0x5, 0xfffffff9, 0xfffffff9, 0x400, 0x0, 0x5, 0x9, 0x5, 0x4, 0xb, 0x2, 0x4, 0x1, 0x35d0777a, 0x5, 0xffffff7f, 0x2, 0x401, 0x6, 0x0, 0x7fff, 0x9, 0x8, 0x101, 0xf06, 0x10001, 0x2, 0x9, 0x2, 0xb6, 0xbe76, 0x200, 0x4, 0xa999, 0x2, 0x2, 0x8, 0x990a, 0xbe, 0x6, 0x6, 0x10001, 0x7de, 0x9, 0x2, 0x10, 0x9, 0x2, 0x0, 0x89, 0x80, 0x7ff, 0x2, 0x3, 0x40, 0x4, 0xafc2, 0x3, 0x2, 0x46d, 0x7f, 0x0, 0xc98, 0xb, 0x3ff, 0x8000, 0x10, 0x5, 0x200, 0x9, 0xac, 0xeab, 0x4, 0x3, 0x9, 0x20115c91, 0x5, 0x9, 0x401, 0x7, 0x1, 0x8001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0x18, 0x6, "071751540ad71987242231f09855d511c4d6e004"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x70, 0x14, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0x29, 0x6, "c56571f30a7256db04e4b0489a8313f6d4ae5fe8ab811a882a378971e8eea1226dc9d2573a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0xec, 0x9, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xa2a9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6003}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x6, 0x6, 0x4, 0x7ff}, 0x3}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xd1}]}, {0x7c, 0x6, "f13e56b5f1d40162f68e85f6ef6f7a0167f9dc511bab306c2b8360e8676c3b5dddd76b7c02329d7924526bec5a90d6f9b77b30c2f023f899e55b98a4b8642452460548d5ed97310787cb36f4d67089c0b4e6ce5076daa849a26c90e10ab24d188eb9418a619168e5df5526e67a03ef6b3bc566da6e7ade0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x17c, 0x1b, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xcf10, 0x1, 0x6151, 0x4}}, @TCA_DEF_DATA={0xb, 0x3, 'vxcan0\x00'}, @TCA_DEF_DATA={0x8, 0x3, '>\xe0^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x7, 0x3, 0x3, 0x9}}, @TCA_DEF_DATA={0xb, 0x3, 'vxcan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff8, 0xf, 0x0, 0x3ff, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff9, 0x0, 0x3, 0x3, 0x10000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x98, 0x2, 0x3, 0x8, 0x2}}]}, {0xb8, 0x6, "1db92d2d8f0389425e6c3ee6d6369be8495eb4a79005505a03ff81df84cf91f6fa8d402d442986c144d59dad7ccd5c8e4ad58b7396383f6c7ad708b430d1fd9af6bf6703d6670a533e428e2c8679fa7cfa9b887c265cfd98f55f85fa0c95fa78896d03c561b047710b22feca574ec252ae0a83cd3e15e4a10dcb6f7abf2358e5e24cbcdd7748873a1a57072d22677e358978134ad980e24bc3c5166b572df6b8b39895ffa8927f20e0a5553ceed43bd15e43a16d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_TO={0x8, 0x2, 0xfa}, @TCA_ROUTE4_POLICE={0x1044, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x9, 0x6, 0xffff, 0x80000001, 0x4, 0x2, 0x7ff, 0x9, 0x3ff, 0x6, 0xa, 0xde, 0xffff, 0x2, 0x80, 0x200, 0x5, 0x6, 0x2, 0x4, 0xed, 0xd, 0x7, 0x1, 0x8, 0x1972000, 0xd1, 0xffff4a72, 0xeb00, 0x100, 0x4, 0x7, 0x8000, 0x2, 0x80000001, 0x3, 0x9, 0x3, 0x7, 0x3e, 0x10001, 0x10001, 0x3, 0x3, 0x2, 0x906, 0xa12, 0xfffffff7, 0x9, 0x80000000, 0xff, 0x9, 0x0, 0x5, 0x80000000, 0x3, 0x2, 0x2, 0x1, 0x1, 0x5, 0x8, 0xa99, 0x6, 0xd23f, 0x5, 0x9, 0x4, 0xfffffffe, 0xb168, 0x3, 0x5, 0x7f, 0x4, 0x5, 0x37d, 0xb, 0x1, 0x9, 0x2849, 0x80, 0xfffffffb, 0x0, 0x77, 0x9, 0x9, 0xffff, 0x9, 0x2, 0x7fffffff, 0x8f, 0x4, 0x80000001, 0x7, 0x0, 0x7ff, 0x8, 0x11, 0x2, 0x0, 0x5, 0x79b7, 0x7, 0x7, 0x0, 0x4, 0x2, 0x7f, 0x0, 0x3, 0x6, 0x9, 0x3b31de20, 0x1, 0x4, 0x8, 0x4, 0x10b6, 0x3, 0x7, 0x3, 0x10000, 0x0, 0x4, 0x6, 0xb02, 0xc, 0x7, 0x7, 0x5, 0xfffffff9, 0x6, 0x8, 0x7a76, 0x5, 0x40, 0x100, 0x3, 0x400, 0x200, 0x1, 0xa, 0x7, 0xe4, 0xe12, 0xe91, 0x7, 0x1, 0x2a, 0x3, 0x7, 0x3cf, 0x7, 0x6, 0xc, 0x8, 0x224a, 0xfffffff9, 0x9, 0x9, 0x6, 0x3, 0x0, 0x7ff, 0xfff, 0x80000001, 0xf, 0x31cc0ac3, 0x8b, 0x7, 0x0, 0x0, 0xf4, 0x7f, 0x6, 0x0, 0x1, 0x80000001, 0x8000, 0x8, 0xadf, 0x6, 0x5662, 0x0, 0xffffff7a, 0x1, 0x2, 0xfffffffb, 0x7b, 0x6, 0x7ff, 0x401, 0x2, 0xb1d5, 0x44e0000, 0x4, 0x7, 0x2, 0x4, 0x40, 0x6, 0x3, 0x3, 0x5, 0x0, 0x7fffffff, 0x5, 0x1000, 0x3, 0xdf98, 0xc, 0x1, 0xd393, 0x2, 0x1000, 0x4, 0xffffff9c, 0x3, 0x0, 0x5, 0x8, 0xa9b, 0xd, 0x81, 0xffffffff, 0x85, 0x8000, 0xbd, 0x99, 0x0, 0xfffffffd, 0x14aa783d, 0x100, 0x60, 0x1, 0x2, 0x8, 0x40, 0x6, 0x400, 0x7de348b2, 0x7c0d, 0x2, 0x7, 0x8, 0x6, 0x7, 0x80000000, 0x16e9, 0x3, 0xfffffbff, 0x80, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x80, 0xe, 0x3ff, 0x9, 0x53, 0x557, 0xb7e0000, 0x1, 0x2, 0x6, 0x7f, 0x5, 0xff, 0x8, 0x0, 0x4, 0x7, 0xc99, 0x49, 0x6, 0x7, 0x3, 0x6, 0xce2e, 0x6, 0xebf0, 0x3, 0xb0d9, 0x1ff, 0x10001, 0xe99, 0x4, 0x8000, 0xfffffff9, 0x0, 0x7, 0x7, 0x4, 0x6b56, 0xffff8000, 0x5, 0xffffffff, 0x5, 0x0, 0x1, 0x2, 0x5, 0x81, 0x3, 0x6, 0x1, 0x0, 0x0, 0x9, 0x5, 0x2, 0x8, 0x4, 0x100, 0x5, 0x9, 0x7, 0x8, 0x3ff, 0x4, 0xfffffff8, 0xc, 0x0, 0x4, 0x2, 0x6, 0x7fffffff, 0x3, 0x7, 0x0, 0x10001, 0x7, 0x1, 0x1ff, 0x8, 0x800, 0x5f, 0xfffffffb, 0x6, 0x0, 0x4, 0x10, 0x9, 0x401, 0x2, 0x0, 0xffffff04, 0xa3, 0x10001, 0xffffffe0, 0x644, 0x334d, 0x93b, 0x71e, 0x2, 0x9, 0xd, 0x200, 0x40, 0x7, 0x1, 0xffff, 0x4, 0x8, 0x3c4, 0x4, 0x40, 0x7, 0xa891, 0x7, 0x7fffffff, 0xba6, 0x1ff, 0xc8, 0x7, 0x6, 0xb36c, 0x690, 0x4117, 0xe, 0x1, 0x4, 0x5, 0x6, 0x6b459e2f, 0x4, 0x8000, 0x2, 0x5, 0x3, 0xfffffffb, 0x1, 0x2, 0x2, 0x3, 0x2, 0x5, 0x100, 0x580f, 0x1, 0x4, 0x40, 0x8, 0x2, 0x2, 0xe, 0x9cf, 0xfffffeff, 0xa94b, 0xf, 0x0, 0x4, 0xffffffff, 0x1, 0x1, 0x80000000, 0x800, 0x4403, 0x4, 0xffff6191, 0x5, 0xd, 0xff, 0x7, 0x2, 0xf3, 0x6, 0x6, 0x10001, 0x1, 0x6, 0x80000, 0x7, 0xbd3, 0x0, 0x401, 0x2, 0x4640, 0x10000, 0x400, 0x4, 0x7, 0xfffffffa, 0x9d, 0x8, 0x3, 0x0, 0x0, 0x9, 0xfffffff9, 0x9, 0x5, 0x6, 0x5f, 0x81, 0xfffffffe, 0xae, 0x5, 0x5, 0xffffd38a, 0x0, 0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1d, 0x2, 0x7ff, 0xc0, 0x7, 0x2, 0x6, 0x1, 0xfffffff7, 0x10, 0xdb0, 0x8, 0x7f, 0x2, 0x2, 0x3df, 0x6, 0xfffffffd, 0x4, 0x1, 0x316c, 0x7, 0xd3, 0x8, 0x7, 0x1ff, 0x4c, 0x100, 0x9, 0x7, 0x7a55, 0x9, 0x9, 0x7, 0x6, 0x9, 0x10000, 0xc0000, 0x3, 0x9, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x7, 0x4, 0x5, 0x5, 0x5, 0x3b, 0x6, 0x3, 0xb, 0x2, 0x80, 0x5, 0x6, 0xf7, 0x6, 0xcb7, 0x0, 0xffffffff, 0x3, 0x1c000000, 0x30, 0x9, 0x0, 0x8000, 0xa2f, 0x6, 0x3, 0x0, 0x0, 0x2, 0x2, 0x80000000, 0x100, 0x401, 0x2, 0x3, 0xc0c8, 0xffffffff, 0x7, 0x3d2, 0x8, 0x3, 0xe, 0xecc7, 0x101, 0x8, 0x8, 0x7f, 0x1, 0xc855, 0xfffffff9, 0xffff1059, 0x2, 0x8, 0x5, 0x7, 0x8, 0x6, 0x3, 0x1000, 0x3, 0x1, 0x3a6, 0x4, 0x400, 0x9, 0x9, 0x7fff, 0x101, 0x9, 0x8, 0x5, 0xffff, 0x2b3b, 0x3, 0xf785, 0x6, 0x5, 0x8, 0xe42, 0x200, 0x8, 0x3, 0x9, 0xf, 0x8, 0x6, 0x4, 0x5, 0x85, 0x3, 0x6, 0x5, 0x8768, 0x7, 0xffffff00, 0x5, 0x370, 0x6, 0xbd99, 0xfffffbff, 0x7, 0x9, 0x951, 0x0, 0x5, 0x7ff, 0x0, 0x3, 0x2, 0x4, 0x9, 0x1ff, 0xfffffffd, 0x5, 0x6, 0x3, 0x5, 0x2, 0xd9f7, 0x6b3, 0x7, 0x17d4, 0x2, 0xcb, 0xa, 0x80, 0xce2f, 0x7, 0x6, 0x6, 0x7, 0x92b83bdb, 0xc5, 0x7, 0x3, 0x0, 0x1, 0x0, 0x3, 0x4, 0x200, 0xf8, 0x997c, 0x7, 0x4590, 0x80, 0x7fff, 0x2, 0x1, 0x4475, 0x0, 0x320, 0x4, 0x80, 0x73, 0xfff, 0x0, 0xfffffffa, 0x8001, 0x0, 0x80, 0x818, 0x30000, 0x88, 0x7, 0x7, 0xfffffffe, 0x54f54093, 0x5, 0x1, 0x8, 0x101, 0x9, 0x85, 0xfffff800, 0x4, 0x80000001, 0x3, 0x2, 0x7, 0xd, 0x80, 0x1, 0x100, 0x1, 0x5, 0x5, 0x11, 0x4, 0x655cc208, 0x0, 0x1, 0x2, 0xd791, 0x5, 0x400, 0x2, 0x7fffffff, 0x7, 0x6, 0x6, 0x2, 0x4, 0x6, 0x2, 0x7, 0x6, 0x401, 0x3, 0xf, 0xfffffff4, 0x9, 0x80000001, 0x2, 0x8, 0x0, 0x0, 0x6, 0x5, 0x9, 0x10, 0x6, 0xc, 0x2, 0x1, 0x73, 0x51, 0x700ffe69, 0x401, 0x400, 0x6347, 0x9, 0x5, 0xd63, 0x1, 0x4, 0xffff9608, 0x4, 0x5, 0xf3, 0x8, 0xc, 0x80000000, 0x9, 0x4, 0x7fff, 0x4, 0x7, 0x4, 0x7fffffff, 0x7dfc, 0xff, 0x2, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0x7f, 0x173472e6, 0x5, 0x7c, 0x4, 0x8001, 0x14, 0xffffffff, 0x1000, 0xff, 0xd, 0x0, 0xffffffff, 0x1, 0xf, 0x42a, 0x6, 0x3a3c, 0x2, 0xfffffff7, 0x2, 0xc, 0x8, 0x1, 0x80, 0xffffffff, 0x87, 0x200, 0x81, 0x4, 0x4, 0x80, 0x40, 0x5, 0xee, 0xe0b4, 0x5, 0xfffffff8, 0x8, 0x6, 0x8, 0x9, 0x8, 0x1, 0x0, 0x9, 0x8, 0x3c, 0x3, 0x917, 0x1cbc000, 0x1, 0x0, 0x0, 0x10001, 0xa4, 0x6, 0x52714b59, 0xbe6, 0xe, 0x7, 0xe, 0xea5b, 0x0, 0x1, 0x3, 0x1, 0xf48, 0x80, 0xb5a, 0x6, 0x0, 0xfda, 0x7, 0x80, 0xc, 0x0, 0x0, 0xef5f, 0x0, 0x2, 0x8001, 0x9, 0xed83, 0x2, 0x8, 0xba5a, 0x4, 0x1f9a, 0x5, 0x7fff, 0x8, 0xa, 0x1, 0x4ee6, 0x5, 0x3, 0x68, 0xfffffffb, 0xea, 0xffffffff, 0x0, 0x2, 0x3, 0x7ff, 0xd, 0x100, 0x1800, 0x7fff, 0x3, 0x6, 0x6, 0x6a, 0x1, 0xfffffffd, 0x9, 0x7, 0x3ff, 0x4, 0x10, 0x40000000, 0x25c5, 0x28000, 0x8, 0x0, 0xaa6, 0x785, 0x5, 0x10, 0xffff0001, 0x9, 0x0, 0x4, 0x9, 0x4, 0x6, 0x4, 0x7, 0x10, 0x2, 0x9, 0x297800, 0x3, 0x10, 0x0, 0xe, 0x7, 0x7ff, 0x9a, 0x101, 0x8, 0x1, 0xc, 0x20000000, 0xe1, 0x7, 0xd686, 0x3, 0x9, 0x1, 0x7, 0x9, 0x7, 0x1, 0x9, 0x0, 0xb, 0x80000001, 0x2, 0x217, 0x5, 0x9ef2, 0x3, 0x266, 0x8, 0x4, 0x1, 0xffff, 0x4, 0x6ec, 0x5, 0x1, 0xe, 0x800, 0x13, 0xfffffffe, 0x100, 0x4, 0xc, 0x61, 0x9, 0x5, 0x15, 0x3, 0x80000001, 0xa, 0x100, 0x8000, 0x5, 0x7, 0x400, 0x37, 0x7, 0x4, 0x6, 0x2, 0x326, 0x2, 0x2, 0x5, 0x5, 0x8, 0x9, 0x4, 0x1, 0x2, 0x2, 0x2, 0x0, 0xfffffffc, 0x2, 0x8, 0x2, 0x40, 0x9, 0xf, 0x4, 0x5154, 0x8, 0x9, 0x81, 0x18000, 0x7, 0x2, 0xbf, 0x1000, 0x81, 0x2, 0x4, 0xffff, 0x6, 0x5c51, 0x8, 0x1, 0xd38, 0x9, 0x1, 0x2, 0x1, 0x9753, 0x6, 0xffff, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3c8e}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x48}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0xe}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x1f84}, 0x1, 0x0, 0x0, 0x2000808c}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) 1.13581ms ago: executing program 3 (id=2176): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x2004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=2177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000002000000ff030000f0fe000080000000", @ANYRES32=0x1, @ANYBLOB="01056a8a60fc2c21deaa000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000005000000010000000a00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000400)='ext4_mark_inode_dirty\x00', r2, 0x0, 0x84}, 0xfffffffffffffe27) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='mm_shrink_slab_end\x00', r4, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x407) accept4(r5, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000008000f28, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x3, 0x487, 0x9, 0x0, 0x1, 0x2, 0x7, 0x3a, 0x9, 0x80000000, 0xfffffffe, 0x97be, 0x8, 0xfa, 0x8, [0x1154, 0x7]}}) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) close(0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002102) unshare(0x2c020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000001c0)=r10, 0x4) kernel console output (not intermixed with test programs): ot find add_set index 0 as target [ 121.494275][ T7619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.747793][ T7643] Cannot find add_set index 0 as target [ 121.797411][ T7619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.890255][ T7643] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.042127][ T7619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.067757][ T7643] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.135849][ T7619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.164679][ T7643] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.232166][ T7643] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.358784][ T7619] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.463428][ T7619] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.516871][ T7643] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.575539][ T7619] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.597932][ T7619] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.632441][ T7643] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.687403][ T7643] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.703628][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 122.748855][ T7643] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.830290][ T7668] netlink: 'syz.2.608': attribute type 3 has an invalid length. [ 123.042189][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 123.063460][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 123.082187][ T7672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.609'. [ 123.160955][ T7674] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.611'. [ 123.659654][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.620'. [ 123.994338][ T7706] netlink: 'syz.1.625': attribute type 72 has an invalid length. [ 124.054868][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 124.501018][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 124.566008][ T7731] FAULT_INJECTION: forcing a failure. [ 124.566008][ T7731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.584006][ T7731] CPU: 1 UID: 0 PID: 7731 Comm: syz.2.634 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 124.584030][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.584040][ T7731] Call Trace: [ 124.584046][ T7731] [ 124.584053][ T7731] dump_stack_lvl+0x241/0x360 [ 124.584080][ T7731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.584097][ T7731] ? __pfx__printk+0x10/0x10 [ 124.584116][ T7731] ? __pfx_lock_release+0x10/0x10 [ 124.584146][ T7731] should_fail_ex+0x40a/0x550 [ 124.584171][ T7731] _copy_from_user+0x2d/0xb0 [ 124.584191][ T7731] copy_msghdr_from_user+0xae/0x680 [ 124.584211][ T7731] ? __pfx___might_resched+0x10/0x10 [ 124.584234][ T7731] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.584257][ T7731] ? __sys_sendmmsg+0x392/0x720 [ 124.584279][ T7731] ? __might_fault+0xaa/0x120 [ 124.584299][ T7731] __sys_sendmmsg+0x32b/0x720 [ 124.584331][ T7731] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.584363][ T7731] ? __pfx_lock_release+0x10/0x10 [ 124.584382][ T7731] ? kstrtouint_from_user+0x128/0x190 [ 124.584420][ T7731] ? ksys_write+0x22a/0x2b0 [ 124.584437][ T7731] ? __pfx_lock_release+0x10/0x10 [ 124.584463][ T7731] ? sb_end_write+0xe9/0x1c0 [ 124.584484][ T7731] ? vfs_write+0x7fa/0xd10 [ 124.584503][ T7731] ? __mutex_unlock_slowpath+0x227/0x800 [ 124.584546][ T7731] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.584570][ T7731] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.584593][ T7731] ? do_syscall_64+0x100/0x230 [ 124.584616][ T7731] __x64_sys_sendmmsg+0xa0/0xb0 [ 124.584639][ T7731] do_syscall_64+0xf3/0x230 [ 124.584658][ T7731] ? clear_bhb_loop+0x35/0x90 [ 124.584681][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.584707][ T7731] RIP: 0033:0x7f9f7e18d169 [ 124.584721][ T7731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.584734][ T7731] RSP: 002b:00007f9f7ef6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.584751][ T7731] RAX: ffffffffffffffda RBX: 00007f9f7e3a5fa0 RCX: 00007f9f7e18d169 [ 124.584763][ T7731] RDX: 040000000000037c RSI: 0000400000002440 RDI: 000000000000000a [ 124.584774][ T7731] RBP: 00007f9f7ef6d090 R08: 0000000000000000 R09: 0000000000000000 [ 124.584783][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.584793][ T7731] R13: 0000000000000000 R14: 00007f9f7e3a5fa0 R15: 00007ffe363625d8 [ 124.584818][ T7731] [ 124.588319][ T7731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.634'. [ 125.858914][ T7788] FAULT_INJECTION: forcing a failure. [ 125.858914][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.872884][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.1.654 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 125.872906][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.872916][ T7788] Call Trace: [ 125.872922][ T7788] [ 125.872929][ T7788] dump_stack_lvl+0x241/0x360 [ 125.872954][ T7788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.872972][ T7788] ? __pfx__printk+0x10/0x10 [ 125.872991][ T7788] ? __pfx_lock_release+0x10/0x10 [ 125.873021][ T7788] should_fail_ex+0x40a/0x550 [ 125.873047][ T7788] _copy_from_user+0x2d/0xb0 [ 125.873066][ T7788] copy_msghdr_from_user+0xae/0x680 [ 125.873085][ T7788] ? __pfx___might_resched+0x10/0x10 [ 125.873109][ T7788] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 125.873133][ T7788] ? __sys_sendmmsg+0x392/0x720 [ 125.873155][ T7788] ? __might_fault+0xaa/0x120 [ 125.873176][ T7788] __sys_sendmmsg+0x32b/0x720 [ 125.873206][ T7788] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.873239][ T7788] ? __pfx_lock_release+0x10/0x10 [ 125.873258][ T7788] ? kstrtouint_from_user+0x128/0x190 [ 125.873297][ T7788] ? ksys_write+0x22a/0x2b0 [ 125.873318][ T7788] ? __pfx_lock_release+0x10/0x10 [ 125.873344][ T7788] ? sb_end_write+0xe9/0x1c0 [ 125.873365][ T7788] ? vfs_write+0x7fa/0xd10 [ 125.873384][ T7788] ? __mutex_unlock_slowpath+0x227/0x800 [ 125.873432][ T7788] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.873457][ T7788] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.873480][ T7788] ? do_syscall_64+0x100/0x230 [ 125.873503][ T7788] __x64_sys_sendmmsg+0xa0/0xb0 [ 125.873526][ T7788] do_syscall_64+0xf3/0x230 [ 125.873545][ T7788] ? clear_bhb_loop+0x35/0x90 [ 125.873567][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.873587][ T7788] RIP: 0033:0x7fb78638d169 [ 125.873602][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.873614][ T7788] RSP: 002b:00007fb7841f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.873632][ T7788] RAX: ffffffffffffffda RBX: 00007fb7865a5fa0 RCX: 00007fb78638d169 [ 125.873644][ T7788] RDX: 040000000000037c RSI: 0000400000002440 RDI: 000000000000000a [ 125.873654][ T7788] RBP: 00007fb7841f6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.873664][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.873672][ T7788] R13: 0000000000000000 R14: 00007fb7865a5fa0 R15: 00007ffc3e4821f8 [ 125.873697][ T7788] [ 125.877229][ T7788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.654'. [ 126.586689][ T7809] Cannot find add_set index 0 as target [ 126.605138][ T7809] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.734037][ T7809] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.868157][ T7809] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.991410][ T7809] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.105754][ T7809] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.121535][ T7809] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.136548][ T7809] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.152613][ T7809] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.798915][ T7849] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 127.834086][ T7849] __nla_validate_parse: 3 callbacks suppressed [ 127.834100][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 127.874279][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.882736][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.892904][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.906364][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.538506][ T7880] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.690'. [ 128.918289][ T7892] netlink: 'syz.3.695': attribute type 72 has an invalid length. [ 129.417836][ T7911] ip6tnl1: entered promiscuous mode [ 129.694094][ T7925] syzkaller1: entered promiscuous mode [ 129.699622][ T7925] syzkaller1: entered allmulticast mode [ 130.228462][ T7952] sctp: [Deprecated]: syz.4.717 (pid 7952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.228462][ T7952] Use struct sctp_sack_info instead [ 130.894458][ T7977] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.725'. [ 131.281666][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 131.385445][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 131.716242][ T8022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.747'. [ 131.790027][ T8026] FAULT_INJECTION: forcing a failure. [ 131.790027][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 131.802760][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.1.748 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 131.802781][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.802791][ T8026] Call Trace: [ 131.802797][ T8026] [ 131.802803][ T8026] dump_stack_lvl+0x241/0x360 [ 131.802830][ T8026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.802848][ T8026] ? __pfx__printk+0x10/0x10 [ 131.802870][ T8026] ? is_bpf_text_address+0x26/0x2a0 [ 131.802898][ T8026] should_fail_ex+0x40a/0x550 [ 131.802924][ T8026] should_failslab+0xac/0x100 [ 131.802945][ T8026] ? dst_alloc+0x12b/0x190 [ 131.802965][ T8026] kmem_cache_alloc_noprof+0x70/0x380 [ 131.802991][ T8026] dst_alloc+0x12b/0x190 [ 131.803016][ T8026] ip_route_input_rcu+0x211e/0x3740 [ 131.803049][ T8026] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 131.803078][ T8026] ? __pfx_lock_acquire+0x10/0x10 [ 131.803111][ T8026] ? ipt_do_table+0x157a/0x1860 [ 131.803141][ T8026] ? ip_route_input_noref+0xad/0x250 [ 131.803158][ T8026] ip_route_input_noref+0x167/0x250 [ 131.803181][ T8026] ? __pfx_ip_route_input_noref+0x10/0x10 [ 131.803204][ T8026] ? __pfx_udp_v4_early_demux+0x10/0x10 [ 131.803237][ T8026] ip_rcv_finish_core+0x5b1/0x1b50 [ 131.803265][ T8026] ip_rcv_finish+0x14a/0x560 [ 131.803279][ T8026] ? NF_HOOK+0x392/0x450 [ 131.803295][ T8026] ? __pfx_ip_rcv_finish+0x10/0x10 [ 131.803310][ T8026] NF_HOOK+0x3a4/0x450 [ 131.803328][ T8026] ? NF_HOOK+0x9a/0x450 [ 131.803343][ T8026] ? __pfx_NF_HOOK+0x10/0x10 [ 131.803356][ T8026] ? ip_rcv_core+0x801/0xd10 [ 131.803374][ T8026] ? __pfx_ip_rcv_finish+0x10/0x10 [ 131.803397][ T8026] ? __pfx_ip_rcv+0x10/0x10 [ 131.803422][ T8026] __netif_receive_skb+0x2bf/0x650 [ 131.803442][ T8026] ? __pfx_lock_acquire+0x10/0x10 [ 131.803462][ T8026] ? kasan_save_track+0x51/0x80 [ 131.803479][ T8026] ? __pfx___netif_receive_skb+0x10/0x10 [ 131.803494][ T8026] ? build_skb+0x52/0x2a0 [ 131.803511][ T8026] ? tun_get_user+0x205d/0x45f0 [ 131.803526][ T8026] ? tun_chr_write_iter+0x10d/0x1f0 [ 131.803547][ T8026] ? do_syscall_64+0xf3/0x230 [ 131.803566][ T8026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.803585][ T8026] ? tun_rx_batched+0x160/0x8f0 [ 131.803602][ T8026] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 131.803629][ T8026] ? netif_receive_skb+0x131/0x890 [ 131.803645][ T8026] ? netif_receive_skb+0x131/0x890 [ 131.803663][ T8026] netif_receive_skb+0x1e8/0x890 [ 131.803680][ T8026] ? tun_rx_batched+0x160/0x8f0 [ 131.803696][ T8026] ? __pfx_netif_receive_skb+0x10/0x10 [ 131.803726][ T8026] ? tun_rx_batched+0x160/0x8f0 [ 131.803742][ T8026] tun_rx_batched+0x1b7/0x8f0 [ 131.803759][ T8026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.803785][ T8026] ? __pfx_lock_acquire+0x10/0x10 [ 131.803806][ T8026] ? __pfx_tun_rx_batched+0x10/0x10 [ 131.803842][ T8026] ? tun_get_user+0x29f0/0x45f0 [ 131.803857][ T8026] tun_get_user+0x2f1b/0x45f0 [ 131.803878][ T8026] ? tun_get_user+0x850/0x45f0 [ 131.803912][ T8026] ? __pfx_tun_get_user+0x10/0x10 [ 131.803949][ T8026] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.803972][ T8026] ? tun_get+0x1e/0x2f0 [ 131.803987][ T8026] ? __pfx_lock_release+0x10/0x10 [ 131.804024][ T8026] ? tun_get+0x1e/0x2f0 [ 131.804039][ T8026] ? tun_get+0x27d/0x2f0 [ 131.804057][ T8026] tun_chr_write_iter+0x10d/0x1f0 [ 131.804083][ T8026] vfs_write+0xacf/0xd10 [ 131.804105][ T8026] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.804129][ T8026] ? __pfx_vfs_write+0x10/0x10 [ 131.804143][ T8026] ? do_sys_openat2+0x17a/0x1d0 [ 131.804163][ T8026] ? __fget_files+0x2a/0x410 [ 131.804186][ T8026] ? __fget_files+0x2a/0x410 [ 131.804216][ T8026] ksys_write+0x18f/0x2b0 [ 131.804235][ T8026] ? __pfx_ksys_write+0x10/0x10 [ 131.804252][ T8026] ? do_syscall_64+0x100/0x230 [ 131.804275][ T8026] ? do_syscall_64+0xb6/0x230 [ 131.804297][ T8026] do_syscall_64+0xf3/0x230 [ 131.804317][ T8026] ? clear_bhb_loop+0x35/0x90 [ 131.804340][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.804360][ T8026] RIP: 0033:0x7fb78638bc1f [ 131.804375][ T8026] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.804387][ T8026] RSP: 002b:00007fb7841f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.804413][ T8026] RAX: ffffffffffffffda RBX: 00007fb7865a5fa0 RCX: 00007fb78638bc1f [ 131.804424][ T8026] RDX: 000000000000006a RSI: 00004000000000c0 RDI: 00000000000000c8 [ 131.804435][ T8026] RBP: 00007fb7841f6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.804444][ T8026] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000001 [ 131.804454][ T8026] R13: 0000000000000000 R14: 00007fb7865a5fa0 R15: 00007ffc3e4821f8 [ 131.804482][ T8026] [ 132.602932][ T8046] netlink: 44 bytes leftover after parsing attributes in process `syz.4.752'. [ 133.258458][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266337][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.017037][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 134.152644][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 134.153290][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 134.166485][ T8065] gretap0: entered promiscuous mode [ 134.182536][ T8065] gretap0: left promiscuous mode [ 134.233881][ T8066] gretap0: entered promiscuous mode [ 134.241060][ T8066] gretap0: left promiscuous mode [ 134.347721][ T8075] Cannot find add_set index 0 as target [ 134.428617][ T8069] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.603602][ T8069] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.660717][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 134.727165][ T8069] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.799197][ T8092] netlink: 'syz.1.771': attribute type 5 has an invalid length. [ 134.888530][ T8069] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.154199][ T8069] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.274919][ T8069] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.446064][ T8110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.467720][ T8110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.482006][ T8110] bond0 (unregistering): Released all slaves [ 135.533838][ T8069] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.550938][ T8069] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.701981][ T8124] FAULT_INJECTION: forcing a failure. [ 135.701981][ T8124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.715934][ T8124] CPU: 1 UID: 0 PID: 8124 Comm: syz.1.784 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 135.715956][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.715966][ T8124] Call Trace: [ 135.715976][ T8124] [ 135.715983][ T8124] dump_stack_lvl+0x241/0x360 [ 135.716012][ T8124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.716031][ T8124] ? __pfx__printk+0x10/0x10 [ 135.716053][ T8124] ? snprintf+0xda/0x120 [ 135.716073][ T8124] should_fail_ex+0x40a/0x550 [ 135.716097][ T8124] _copy_to_user+0x31/0xb0 [ 135.716119][ T8124] simple_read_from_buffer+0xca/0x150 [ 135.716143][ T8124] proc_fail_nth_read+0x1e9/0x250 [ 135.716167][ T8124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.716190][ T8124] ? rw_verify_area+0x243/0x630 [ 135.716212][ T8124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.716234][ T8124] vfs_read+0x1f8/0xb40 [ 135.716251][ T8124] ? fdget_pos+0x254/0x320 [ 135.716273][ T8124] ? __pfx___mutex_lock+0x10/0x10 [ 135.716294][ T8124] ? __pfx_vfs_read+0x10/0x10 [ 135.716307][ T8124] ? do_sys_openat2+0x17a/0x1d0 [ 135.716332][ T8124] ? __fget_files+0x2a/0x410 [ 135.716353][ T8124] ? __fget_files+0x395/0x410 [ 135.716371][ T8124] ? __fget_files+0x2a/0x410 [ 135.716400][ T8124] ksys_read+0x18f/0x2b0 [ 135.716419][ T8124] ? __pfx_ksys_read+0x10/0x10 [ 135.716436][ T8124] ? do_syscall_64+0x100/0x230 [ 135.716460][ T8124] ? do_syscall_64+0xb6/0x230 [ 135.716482][ T8124] do_syscall_64+0xf3/0x230 [ 135.716501][ T8124] ? clear_bhb_loop+0x35/0x90 [ 135.716524][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.716544][ T8124] RIP: 0033:0x7fb78638bb7c [ 135.716560][ T8124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.716572][ T8124] RSP: 002b:00007fb7841f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.716590][ T8124] RAX: ffffffffffffffda RBX: 00007fb7865a5fa0 RCX: 00007fb78638bb7c [ 135.716602][ T8124] RDX: 000000000000000f RSI: 00007fb7841f60a0 RDI: 0000000000000004 [ 135.716612][ T8124] RBP: 00007fb7841f6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.716621][ T8124] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001 [ 135.716631][ T8124] R13: 0000000000000000 R14: 00007fb7865a5fa0 R15: 00007ffc3e4821f8 [ 135.716658][ T8124] [ 135.977104][ T8126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.783'. [ 136.774189][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 137.875966][ T8203] Cannot find add_set index 0 as target [ 137.908222][ T8203] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.962935][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 137.977522][ T8211] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.818'. [ 138.009405][ T8203] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.094292][ T8203] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.198865][ T8203] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.226275][ T8216] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 138.307566][ T8222] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 138.321240][ T8222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.824'. [ 138.379453][ T8203] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.400083][ T8203] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.416270][ T8203] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.527498][ T8203] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.032480][ T8256] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.835'. [ 139.104394][ T8262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.831'. [ 139.174128][ T8260] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.833'. [ 139.383800][ T8269] syz.1.838 (8269) used greatest stack depth: 19024 bytes left [ 140.037404][ T8299] xt_cgroup: invalid path, errno=-2 [ 140.126545][ T8303] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.851'. [ 140.344989][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.855'. [ 140.538276][ T8327] netlink: 172 bytes leftover after parsing attributes in process `syz.4.857'. [ 140.589061][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 140.751902][ T8330] Cannot find add_set index 0 as target [ 140.802568][ T8330] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.912970][ T8330] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.983468][ T8330] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.074196][ T8330] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.089752][ T8384] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.878'. [ 142.349247][ T8399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.885'. [ 142.448250][ T8403] FAULT_INJECTION: forcing a failure. [ 142.448250][ T8403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.477341][ T8403] CPU: 1 UID: 0 PID: 8403 Comm: syz.4.887 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 142.477365][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.477373][ T8403] Call Trace: [ 142.477379][ T8403] [ 142.477386][ T8403] dump_stack_lvl+0x241/0x360 [ 142.477420][ T8403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.477436][ T8403] ? __pfx__printk+0x10/0x10 [ 142.477453][ T8403] ? __pfx_lock_release+0x10/0x10 [ 142.477480][ T8403] should_fail_ex+0x40a/0x550 [ 142.477504][ T8403] _copy_from_user+0x2d/0xb0 [ 142.477523][ T8403] copy_msghdr_from_user+0xae/0x680 [ 142.477542][ T8403] ? __pfx___might_resched+0x10/0x10 [ 142.477565][ T8403] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.477587][ T8403] ? __sys_sendmmsg+0x392/0x720 [ 142.477608][ T8403] ? __might_fault+0xaa/0x120 [ 142.477628][ T8403] __sys_sendmmsg+0x32b/0x720 [ 142.477659][ T8403] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.477692][ T8403] ? __pfx_lock_release+0x10/0x10 [ 142.477711][ T8403] ? kstrtouint_from_user+0x128/0x190 [ 142.477749][ T8403] ? ksys_write+0x22a/0x2b0 [ 142.477766][ T8403] ? __pfx_lock_release+0x10/0x10 [ 142.477793][ T8403] ? sb_end_write+0xe9/0x1c0 [ 142.477814][ T8403] ? vfs_write+0x7fa/0xd10 [ 142.477833][ T8403] ? __mutex_unlock_slowpath+0x227/0x800 [ 142.477880][ T8403] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.477904][ T8403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.477927][ T8403] ? do_syscall_64+0x100/0x230 [ 142.477951][ T8403] __x64_sys_sendmmsg+0xa0/0xb0 [ 142.477975][ T8403] do_syscall_64+0xf3/0x230 [ 142.477994][ T8403] ? clear_bhb_loop+0x35/0x90 [ 142.478018][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.478038][ T8403] RIP: 0033:0x7fb32938d169 [ 142.478052][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.478066][ T8403] RSP: 002b:00007fb32a133038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.478084][ T8403] RAX: ffffffffffffffda RBX: 00007fb3295a5fa0 RCX: 00007fb32938d169 [ 142.478096][ T8403] RDX: 040000000000037c RSI: 0000400000002440 RDI: 000000000000000a [ 142.478107][ T8403] RBP: 00007fb32a133090 R08: 0000000000000000 R09: 0000000000000000 [ 142.478118][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.478127][ T8403] R13: 0000000000000000 R14: 00007fb3295a5fa0 R15: 00007ffec6361348 [ 142.478153][ T8403] [ 142.519556][ T8403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.887'. [ 143.236025][ T8330] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.251220][ T8330] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.265690][ T8330] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.280048][ T8330] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.439371][ T8437] FAULT_INJECTION: forcing a failure. [ 143.439371][ T8437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.453105][ T8437] CPU: 0 UID: 0 PID: 8437 Comm: syz.1.903 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 143.453127][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.453137][ T8437] Call Trace: [ 143.453143][ T8437] [ 143.453150][ T8437] dump_stack_lvl+0x241/0x360 [ 143.453176][ T8437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.453194][ T8437] ? __pfx__printk+0x10/0x10 [ 143.453213][ T8437] ? __pfx_lock_release+0x10/0x10 [ 143.453243][ T8437] should_fail_ex+0x40a/0x550 [ 143.453268][ T8437] _copy_from_user+0x2d/0xb0 [ 143.453289][ T8437] copy_msghdr_from_user+0xae/0x680 [ 143.453308][ T8437] ? __pfx___might_resched+0x10/0x10 [ 143.453331][ T8437] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 143.453355][ T8437] ? __sys_sendmmsg+0x392/0x720 [ 143.453383][ T8437] ? __might_fault+0xaa/0x120 [ 143.453403][ T8437] __sys_sendmmsg+0x32b/0x720 [ 143.453436][ T8437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.453469][ T8437] ? __pfx_lock_release+0x10/0x10 [ 143.453489][ T8437] ? kstrtouint_from_user+0x128/0x190 [ 143.453527][ T8437] ? ksys_write+0x22a/0x2b0 [ 143.453544][ T8437] ? __pfx_lock_release+0x10/0x10 [ 143.453570][ T8437] ? sb_end_write+0xe9/0x1c0 [ 143.453592][ T8437] ? vfs_write+0x7fa/0xd10 [ 143.453611][ T8437] ? __mutex_unlock_slowpath+0x227/0x800 [ 143.453658][ T8437] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.453682][ T8437] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.453705][ T8437] ? do_syscall_64+0x100/0x230 [ 143.453729][ T8437] __x64_sys_sendmmsg+0xa0/0xb0 [ 143.453752][ T8437] do_syscall_64+0xf3/0x230 [ 143.453772][ T8437] ? clear_bhb_loop+0x35/0x90 [ 143.453796][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.453815][ T8437] RIP: 0033:0x7fb78638d169 [ 143.453830][ T8437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.453844][ T8437] RSP: 002b:00007fb7841f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.453862][ T8437] RAX: ffffffffffffffda RBX: 00007fb7865a5fa0 RCX: 00007fb78638d169 [ 143.453874][ T8437] RDX: 040000000000037c RSI: 0000400000002440 RDI: 000000000000000a [ 143.453886][ T8437] RBP: 00007fb7841f6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.453896][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.453906][ T8437] R13: 0000000000000000 R14: 00007fb7865a5fa0 R15: 00007ffc3e4821f8 [ 143.453931][ T8437] [ 144.101596][ T8458] netlink: 'syz.4.910': attribute type 10 has an invalid length. [ 144.147129][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.155606][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.191991][ T8465] __nla_validate_parse: 5 callbacks suppressed [ 144.192010][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 144.206214][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.214182][ T8458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.221683][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.228834][ T8458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.247157][ T8458] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 144.257474][ T8468] Cannot find add_set index 0 as target [ 144.271825][ T8464] FAULT_INJECTION: forcing a failure. [ 144.271825][ T8464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.296656][ T8464] CPU: 1 UID: 0 PID: 8464 Comm: syz.2.911 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 144.296680][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.296690][ T8464] Call Trace: [ 144.296695][ T8464] [ 144.296702][ T8464] dump_stack_lvl+0x241/0x360 [ 144.296728][ T8464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.296746][ T8464] ? __pfx__printk+0x10/0x10 [ 144.296764][ T8464] ? __pfx_lock_release+0x10/0x10 [ 144.296793][ T8464] should_fail_ex+0x40a/0x550 [ 144.296817][ T8464] _copy_from_user+0x2d/0xb0 [ 144.296836][ T8464] copy_msghdr_from_user+0xae/0x680 [ 144.296858][ T8464] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 144.296874][ T8464] ? __fget_files+0x2a/0x410 [ 144.296899][ T8464] ? __fget_files+0x2a/0x410 [ 144.296926][ T8464] __sys_sendmsg+0x209/0x350 [ 144.296954][ T8464] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.296986][ T8464] ? do_sys_openat2+0x17a/0x1d0 [ 144.297027][ T8464] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.297050][ T8464] ? do_syscall_64+0x100/0x230 [ 144.297073][ T8464] ? do_syscall_64+0xb6/0x230 [ 144.297093][ T8464] do_syscall_64+0xf3/0x230 [ 144.297112][ T8464] ? clear_bhb_loop+0x35/0x90 [ 144.297135][ T8464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.297171][ T8464] RIP: 0033:0x7f9f7e18d169 [ 144.297187][ T8464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.297199][ T8464] RSP: 002b:00007f9f7ef6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.297216][ T8464] RAX: ffffffffffffffda RBX: 00007f9f7e3a5fa0 RCX: 00007f9f7e18d169 [ 144.297227][ T8464] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000005 [ 144.297237][ T8464] RBP: 00007f9f7ef6d090 R08: 0000000000000000 R09: 0000000000000000 [ 144.297247][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.297257][ T8464] R13: 0000000000000000 R14: 00007f9f7e3a5fa0 R15: 00007ffe363625d8 [ 144.297280][ T8464] [ 144.318988][ T8472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.914'. [ 144.522310][ T8465] bridge_slave_1: left allmulticast mode [ 144.529687][ T8465] bridge_slave_1: left promiscuous mode [ 144.537098][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.554912][ T8465] bridge_slave_0: left allmulticast mode [ 144.567525][ T8465] bridge_slave_0: left promiscuous mode [ 144.577554][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.672233][ T8465] bond0: (slave bridge0): Releasing backup interface [ 144.742143][ T8482] FAULT_INJECTION: forcing a failure. [ 144.742143][ T8482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.759487][ T8482] CPU: 1 UID: 0 PID: 8482 Comm: syz.2.916 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 144.759513][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.759618][ T8482] Call Trace: [ 144.759625][ T8482] [ 144.759633][ T8482] dump_stack_lvl+0x241/0x360 [ 144.759658][ T8482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.759675][ T8482] ? __pfx__printk+0x10/0x10 [ 144.759694][ T8482] ? __pfx_lock_release+0x10/0x10 [ 144.759725][ T8482] should_fail_ex+0x40a/0x550 [ 144.759751][ T8482] _copy_from_user+0x2d/0xb0 [ 144.759770][ T8482] copy_msghdr_from_user+0xae/0x680 [ 144.759788][ T8482] ? __pfx___might_resched+0x10/0x10 [ 144.759811][ T8482] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 144.759834][ T8482] ? __sys_sendmmsg+0x392/0x720 [ 144.759856][ T8482] ? __might_fault+0xaa/0x120 [ 144.759878][ T8482] __sys_sendmmsg+0x32b/0x720 [ 144.759910][ T8482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 144.759944][ T8482] ? __pfx_lock_release+0x10/0x10 [ 144.759963][ T8482] ? kstrtouint_from_user+0x128/0x190 [ 144.760000][ T8482] ? ksys_write+0x22a/0x2b0 [ 144.760018][ T8482] ? __pfx_lock_release+0x10/0x10 [ 144.760045][ T8482] ? sb_end_write+0xe9/0x1c0 [ 144.760066][ T8482] ? vfs_write+0x7fa/0xd10 [ 144.760085][ T8482] ? __mutex_unlock_slowpath+0x227/0x800 [ 144.760130][ T8482] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.760152][ T8482] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.760175][ T8482] ? do_syscall_64+0x100/0x230 [ 144.760198][ T8482] __x64_sys_sendmmsg+0xa0/0xb0 [ 144.760221][ T8482] do_syscall_64+0xf3/0x230 [ 144.760241][ T8482] ? clear_bhb_loop+0x35/0x90 [ 144.760262][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.760281][ T8482] RIP: 0033:0x7f9f7e18d169 [ 144.760297][ T8482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.760309][ T8482] RSP: 002b:00007f9f7ef6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.760328][ T8482] RAX: ffffffffffffffda RBX: 00007f9f7e3a5fa0 RCX: 00007f9f7e18d169 [ 144.760339][ T8482] RDX: 040000000000037c RSI: 0000400000002440 RDI: 000000000000000a [ 144.760351][ T8482] RBP: 00007f9f7ef6d090 R08: 0000000000000000 R09: 0000000000000000 [ 144.760362][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.760371][ T8482] R13: 0000000000000000 R14: 00007f9f7e3a5fa0 R15: 00007ffe363625d8 [ 144.760399][ T8482] [ 145.118557][ T8482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.916'. [ 145.194352][ T8500] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.919'. [ 145.311599][ T8507] vcan0: tx drop: invalid da for name 0x0000040000000000 [ 145.476456][ T8515] netlink: 'syz.1.926': attribute type 6 has an invalid length. [ 145.484831][ T8515] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.926'. [ 145.563981][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 145.623366][ T8524] xt_connbytes: Forcing CT accounting to be enabled [ 145.630373][ T8524] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 145.839234][ T8536] FAULT_INJECTION: forcing a failure. [ 145.839234][ T8536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.854063][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.1.933 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 145.854088][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.854098][ T8536] Call Trace: [ 145.854104][ T8536] [ 145.854112][ T8536] dump_stack_lvl+0x241/0x360 [ 145.854137][ T8536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.854156][ T8536] ? __pfx__printk+0x10/0x10 [ 145.854174][ T8536] ? __pfx_lock_release+0x10/0x10 [ 145.854204][ T8536] should_fail_ex+0x40a/0x550 [ 145.854229][ T8536] _copy_from_user+0x2d/0xb0 [ 145.854249][ T8536] copy_msghdr_from_user+0xae/0x680 [ 145.854269][ T8536] ? __pfx___might_resched+0x10/0x10 [ 145.854293][ T8536] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 145.854317][ T8536] ? __sys_sendmmsg+0x392/0x720 [ 145.854338][ T8536] ? __might_fault+0xaa/0x120 [ 145.854358][ T8536] __sys_sendmmsg+0x32b/0x720 [ 145.854389][ T8536] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.854422][ T8536] ? __pfx_lock_release+0x10/0x10 [ 145.854450][ T8536] ? kstrtouint_from_user+0x128/0x190 [ 145.854488][ T8536] ? ksys_write+0x22a/0x2b0 [ 145.854505][ T8536] ? __pfx_lock_release+0x10/0x10 [ 145.854532][ T8536] ? sb_end_write+0xe9/0x1c0 [ 145.854553][ T8536] ? vfs_write+0x7fa/0xd10 [ 145.854572][ T8536] ? __mutex_unlock_slowpath+0x227/0x800 [ 145.854619][ T8536] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.854644][ T8536] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.854667][ T8536] ? do_syscall_64+0x100/0x230 [ 145.854690][ T8536] __x64_sys_sendmmsg+0xa0/0xb0 [ 145.854714][ T8536] do_syscall_64+0xf3/0x230 [ 145.854734][ T8536] ? clear_bhb_loop+0x35/0x90 [ 145.854756][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.854776][ T8536] RIP: 0033:0x7fb78638d169 [ 145.854790][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.854804][ T8536] RSP: 002b:00007fb7841f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.854823][ T8536] RAX: ffffffffffffffda RBX: 00007fb7865a5fa0 RCX: 00007fb78638d169 [ 145.854834][ T8536] RDX: 040000000000037c RSI: 0000400000002440 RDI: 000000000000000a [ 145.854844][ T8536] RBP: 00007fb7841f6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.854854][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.854862][ T8536] R13: 0000000000000000 R14: 00007fb7865a5fa0 R15: 00007ffc3e4821f8 [ 145.854885][ T8536] [ 145.855347][ T8536] netlink: 60 bytes leftover after parsing attributes in process `syz.1.933'. [ 146.091954][ T8540] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.934'. [ 146.211224][ T8545] netlink: 128 bytes leftover after parsing attributes in process `syz.1.936'. [ 146.315471][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.938'. [ 146.382800][ T8555] Cannot find add_set index 0 as target [ 146.392655][ T8555] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.444825][ T8555] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.509025][ T8555] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.566511][ T8555] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.666145][ T8567] netlink: 'syz.3.942': attribute type 39 has an invalid length. [ 147.281959][ T8598] Illegal XDP return value 1216144244 on prog (id 276) dev N/A, expect packet loss! [ 147.807232][ T8621] syzkaller1: entered promiscuous mode [ 147.826641][ T8621] syzkaller1: entered allmulticast mode [ 147.860701][ T8621] netlink: 'syz.4.963': attribute type 4 has an invalid length. [ 148.274496][ T8638] FAULT_INJECTION: forcing a failure. [ 148.274496][ T8638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.311342][ T8638] CPU: 1 UID: 0 PID: 8638 Comm: syz.2.969 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 148.311371][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.311382][ T8638] Call Trace: [ 148.311388][ T8638] [ 148.311395][ T8638] dump_stack_lvl+0x241/0x360 [ 148.311422][ T8638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.311439][ T8638] ? __pfx__printk+0x10/0x10 [ 148.311457][ T8638] ? __pfx_lock_release+0x10/0x10 [ 148.311487][ T8638] should_fail_ex+0x40a/0x550 [ 148.311511][ T8638] _copy_from_user+0x2d/0xb0 [ 148.311531][ T8638] copy_msghdr_from_user+0xae/0x680 [ 148.311549][ T8638] ? __pfx___might_resched+0x10/0x10 [ 148.311571][ T8638] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 148.311592][ T8638] ? __sys_sendmmsg+0x392/0x720 [ 148.311614][ T8638] ? __might_fault+0xaa/0x120 [ 148.311635][ T8638] __sys_sendmmsg+0x32b/0x720 [ 148.311668][ T8638] ? __pfx___sys_sendmmsg+0x10/0x10 [ 148.311700][ T8638] ? __pfx_lock_release+0x10/0x10 [ 148.311719][ T8638] ? kstrtouint_from_user+0x128/0x190 [ 148.311758][ T8638] ? ksys_write+0x22a/0x2b0 [ 148.311775][ T8638] ? __pfx_lock_release+0x10/0x10 [ 148.311802][ T8638] ? sb_end_write+0xe9/0x1c0 [ 148.311822][ T8638] ? vfs_write+0x7fa/0xd10 [ 148.311841][ T8638] ? __mutex_unlock_slowpath+0x227/0x800 [ 148.311886][ T8638] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.311911][ T8638] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.311934][ T8638] ? do_syscall_64+0x100/0x230 [ 148.311957][ T8638] __x64_sys_sendmmsg+0xa0/0xb0 [ 148.311979][ T8638] do_syscall_64+0xf3/0x230 [ 148.311999][ T8638] ? clear_bhb_loop+0x35/0x90 [ 148.312023][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.312043][ T8638] RIP: 0033:0x7f9f7e18d169 [ 148.312058][ T8638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.312071][ T8638] RSP: 002b:00007f9f7ef6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.312096][ T8638] RAX: ffffffffffffffda RBX: 00007f9f7e3a5fa0 RCX: 00007f9f7e18d169 [ 148.312106][ T8638] RDX: 040000000000037c RSI: 0000400000002440 RDI: 000000000000000a [ 148.312117][ T8638] RBP: 00007f9f7ef6d090 R08: 0000000000000000 R09: 0000000000000000 [ 148.312128][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.312137][ T8638] R13: 0000000000000000 R14: 00007f9f7e3a5fa0 R15: 00007ffe363625d8 [ 148.312162][ T8638] [ 148.704464][ T8653] xt_hashlimit: size too large, truncated to 1048576 [ 148.941264][ T8555] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.955711][ T8555] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.979374][ T8555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.993916][ T8555] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.211463][ T8673] __nla_validate_parse: 12 callbacks suppressed [ 149.211488][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 149.406940][ T8681] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 149.492473][ T8687] FAULT_INJECTION: forcing a failure. [ 149.492473][ T8687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.509496][ T8687] CPU: 1 UID: 0 PID: 8687 Comm: syz.0.983 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 149.509520][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.509530][ T8687] Call Trace: [ 149.509535][ T8687] [ 149.509542][ T8687] dump_stack_lvl+0x241/0x360 [ 149.509568][ T8687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.509583][ T8687] ? __pfx__printk+0x10/0x10 [ 149.509601][ T8687] ? __pfx_lock_release+0x10/0x10 [ 149.509630][ T8687] should_fail_ex+0x40a/0x550 [ 149.509654][ T8687] _copy_from_user+0x2d/0xb0 [ 149.509673][ T8687] copy_msghdr_from_user+0xae/0x680 [ 149.509692][ T8687] ? __pfx___might_resched+0x10/0x10 [ 149.509714][ T8687] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 149.509736][ T8687] ? __sys_sendmmsg+0x392/0x720 [ 149.509757][ T8687] ? __might_fault+0xaa/0x120 [ 149.509775][ T8687] __sys_sendmmsg+0x32b/0x720 [ 149.509805][ T8687] ? __pfx___sys_sendmmsg+0x10/0x10 [ 149.509834][ T8687] ? __pfx_lock_release+0x10/0x10 [ 149.509852][ T8687] ? kstrtouint_from_user+0x128/0x190 [ 149.509887][ T8687] ? ksys_write+0x22a/0x2b0 [ 149.509903][ T8687] ? __pfx_lock_release+0x10/0x10 [ 149.509930][ T8687] ? sb_end_write+0xe9/0x1c0 [ 149.509951][ T8687] ? vfs_write+0x7fa/0xd10 [ 149.509980][ T8687] ? __mutex_unlock_slowpath+0x227/0x800 [ 149.510024][ T8687] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 149.510049][ T8687] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.510072][ T8687] ? do_syscall_64+0x100/0x230 [ 149.510094][ T8687] __x64_sys_sendmmsg+0xa0/0xb0 [ 149.510116][ T8687] do_syscall_64+0xf3/0x230 [ 149.510136][ T8687] ? clear_bhb_loop+0x35/0x90 [ 149.510159][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.510179][ T8687] RIP: 0033:0x7f4c48b8d169 [ 149.510194][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.510208][ T8687] RSP: 002b:00007f4c499a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 149.510226][ T8687] RAX: ffffffffffffffda RBX: 00007f4c48da5fa0 RCX: 00007f4c48b8d169 [ 149.510239][ T8687] RDX: 040000000000037c RSI: 0000400000002440 RDI: 000000000000000a [ 149.510249][ T8687] RBP: 00007f4c499a1090 R08: 0000000000000000 R09: 0000000000000000 [ 149.510259][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.510269][ T8687] R13: 0000000000000000 R14: 00007f4c48da5fa0 R15: 00007ffe0a9a54e8 [ 149.510293][ T8687] [ 149.780093][ T8687] netlink: 60 bytes leftover after parsing attributes in process `syz.0.983'. [ 149.907709][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 150.148602][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 150.670323][ T8732] vxcan1 speed is unknown, defaulting to 1000 [ 150.697476][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 150.717044][ T8732] vxcan1 speed is unknown, defaulting to 1000 [ 150.735024][ T8732] vxcan1 speed is unknown, defaulting to 1000 [ 150.957019][ T25] vxcan1 speed is unknown, defaulting to 1000 [ 150.963794][ T8732] infiniband syz2: set active [ 150.969665][ T8732] infiniband syz2: added vxcan1 [ 151.037708][ T8732] RDS/IB: syz2: added [ 151.046528][ T8732] smc: adding ib device syz2 with port count 1 [ 151.056484][ T8732] smc: ib device syz2 port 1 has pnetid [ 151.071739][ T5912] vxcan1 speed is unknown, defaulting to 1000 [ 151.083489][ T8732] vxcan1 speed is unknown, defaulting to 1000 [ 151.125850][ T8750] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1009'. [ 151.463544][ T8732] vxcan1 speed is unknown, defaulting to 1000 [ 151.587263][ T8763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.769493][ T8763] bond1 (unregistering): Released all slaves [ 151.789424][ T8732] vxcan1 speed is unknown, defaulting to 1000 [ 152.186629][ T8732] vxcan1 speed is unknown, defaulting to 1000 [ 152.208048][ T8786] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1021'. [ 152.673358][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 152.683447][ T8803] ip6_vti0: entered promiscuous mode [ 152.705130][ T8732] vxcan1 speed is unknown, defaulting to 1000 [ 152.751027][ T8801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.782094][ T8810] netlink: 'syz.1.1029': attribute type 10 has an invalid length. [ 152.797096][ T8809] bridge1: entered promiscuous mode [ 152.802963][ T8809] bridge1: entered allmulticast mode [ 152.816383][ T8809] team0: Port device bridge1 added [ 153.145454][ T8775] vxcan1 speed is unknown, defaulting to 1000 [ 153.602820][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 153.721776][ T8846] netlink: 'syz.2.1041': attribute type 10 has an invalid length. [ 153.754360][ T8846] batman_adv: batadv0: Adding interface: team0 [ 153.762307][ T8846] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.789170][ T8850] netlink: 'syz.2.1041': attribute type 10 has an invalid length. [ 153.804503][ T8846] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 153.823090][ T8850] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1041'. [ 153.834945][ T8850] team0: entered promiscuous mode [ 153.840030][ T8850] team_slave_0: entered promiscuous mode [ 153.846633][ T8850] team_slave_1: entered promiscuous mode [ 153.854310][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.861570][ T8850] batman_adv: batadv0: Interface activated: team0 [ 153.868158][ T8850] batman_adv: batadv0: Interface deactivated: team0 [ 153.876949][ T8850] batman_adv: batadv0: Removing interface: team0 [ 153.885475][ T8850] bridge0: port 3(team0) entered blocking state [ 153.916925][ T8850] bridge0: port 3(team0) entered disabled state [ 153.931317][ T8850] team0: entered allmulticast mode [ 153.937733][ T8850] team_slave_0: entered allmulticast mode [ 153.944522][ T8850] team_slave_1: entered allmulticast mode [ 153.954582][ T8850] bridge0: port 3(team0) entered blocking state [ 153.961021][ T8850] bridge0: port 3(team0) entered forwarding state [ 154.380011][ T8870] xt_socket: unknown flags 0x8 [ 154.439602][ T8872] __nla_validate_parse: 1 callbacks suppressed [ 154.439632][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 154.578704][ T8877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1053'. [ 154.786837][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1056'. [ 154.815409][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 154.842666][ T8889] netlink: 'syz.0.1056': attribute type 10 has an invalid length. [ 155.078194][ T54] Bluetooth: hci4: link tx timeout [ 155.083742][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.095919][ T5844] Bluetooth: hci4: link tx timeout [ 155.101776][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.109638][ T5844] Bluetooth: hci4: link tx timeout [ 155.115928][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.123831][ T5844] Bluetooth: hci4: link tx timeout [ 155.130031][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.718299][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1074'. [ 156.076428][ T8951] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 156.259037][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1084'. [ 156.395679][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 156.943543][ T8992] Cannot find add_set index 0 as target [ 157.171222][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 157.185363][ T9007] netlink: 'syz.1.1104': attribute type 2 has an invalid length. [ 157.385425][ T9012] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1107'. [ 158.126689][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1119'. [ 158.854467][ T9074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1132'. [ 158.956612][ T9075] netlink: 'syz.2.1129': attribute type 2 has an invalid length. [ 159.254444][ T9088] vxcan1 speed is unknown, defaulting to 1000 [ 160.269729][ T9091] __nla_validate_parse: 2 callbacks suppressed [ 160.269748][ T9091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1137'. [ 160.563513][ T9105] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1142'. [ 160.581895][ T9108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1143'. [ 160.852647][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 160.894551][ T9124] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (54) [ 161.108777][ T9131] FAULT_INJECTION: forcing a failure. [ 161.108777][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 161.128327][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.3.1155 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 161.128354][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.128364][ T9131] Call Trace: [ 161.128370][ T9131] [ 161.128377][ T9131] dump_stack_lvl+0x241/0x360 [ 161.128403][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.128421][ T9131] ? __pfx__printk+0x10/0x10 [ 161.128441][ T9131] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 161.128464][ T9131] ? __pfx___might_resched+0x10/0x10 [ 161.128489][ T9131] should_fail_ex+0x40a/0x550 [ 161.128515][ T9131] should_failslab+0xac/0x100 [ 161.128536][ T9131] ? __get_vm_area_node+0x132/0x2d0 [ 161.128557][ T9131] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 161.128584][ T9131] __get_vm_area_node+0x132/0x2d0 [ 161.128610][ T9131] __vmalloc_node_range_noprof+0x344/0x1380 [ 161.128634][ T9131] ? do_replace+0x298/0x5e0 [ 161.128683][ T9131] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.128706][ T9131] ? __lock_acquire+0x1397/0x2100 [ 161.128732][ T9131] ? __might_fault+0xaa/0x120 [ 161.128750][ T9131] ? do_replace+0x298/0x5e0 [ 161.128775][ T9131] __vmalloc_noprof+0x79/0x90 [ 161.128798][ T9131] ? do_replace+0x298/0x5e0 [ 161.128820][ T9131] do_replace+0x298/0x5e0 [ 161.128844][ T9131] ? __pfx_aa_get_newest_label+0x10/0x10 [ 161.128867][ T9131] ? __pfx_do_replace+0x10/0x10 [ 161.128900][ T9131] ? bpf_lsm_capable+0x9/0x10 [ 161.128919][ T9131] ? security_capable+0x7e/0x2d0 [ 161.128945][ T9131] do_ebt_set_ctl+0x28e/0x1570 [ 161.128984][ T9131] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 161.129005][ T9131] ? do_ip_setsockopt+0x2824/0x3ae0 [ 161.129027][ T9131] ? __pfx_lock_release+0x10/0x10 [ 161.129048][ T9131] ? rcu_is_watching+0x15/0xb0 [ 161.129067][ T9131] ? trace_contention_end+0x3c/0x120 [ 161.129085][ T9131] ? __mutex_lock+0x397/0x1010 [ 161.129106][ T9131] ? do_ip_setsockopt+0x283f/0x3ae0 [ 161.129130][ T9131] ? __mutex_unlock_slowpath+0x227/0x800 [ 161.129168][ T9131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.129192][ T9131] ? __pfx___mutex_lock+0x10/0x10 [ 161.129222][ T9131] nf_setsockopt+0x295/0x2c0 [ 161.129244][ T9131] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 161.129266][ T9131] smc_setsockopt+0x275/0xd10 [ 161.129291][ T9131] ? __pfx_smc_setsockopt+0x10/0x10 [ 161.129311][ T9131] ? aa_sock_opt_perm+0x79/0x120 [ 161.129337][ T9131] ? __pfx_smc_setsockopt+0x10/0x10 [ 161.129355][ T9131] do_sock_setsockopt+0x3af/0x720 [ 161.129383][ T9131] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 161.129409][ T9131] ? __fget_files+0x395/0x410 [ 161.129429][ T9131] ? __fget_files+0x2a/0x410 [ 161.129454][ T9131] __x64_sys_setsockopt+0x1ee/0x280 [ 161.129481][ T9131] do_syscall_64+0xf3/0x230 [ 161.129501][ T9131] ? clear_bhb_loop+0x35/0x90 [ 161.129523][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.129542][ T9131] RIP: 0033:0x7f9e3418d169 [ 161.129558][ T9131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.129572][ T9131] RSP: 002b:00007f9e35075038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.129590][ T9131] RAX: ffffffffffffffda RBX: 00007f9e343a5fa0 RCX: 00007f9e3418d169 [ 161.129602][ T9131] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 161.129611][ T9131] RBP: 00007f9e35075090 R08: 0000000000000138 R09: 0000000000000000 [ 161.129621][ T9131] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001 [ 161.129631][ T9131] R13: 0000000000000000 R14: 00007f9e343a5fa0 R15: 00007ffd10a1bdc8 [ 161.129657][ T9131] [ 161.130092][ T9131] syz.3.1155: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 161.521552][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.3.1155 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 161.521580][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.521590][ T9131] Call Trace: [ 161.521596][ T9131] [ 161.521603][ T9131] dump_stack_lvl+0x241/0x360 [ 161.521630][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.521648][ T9131] ? __pfx__printk+0x10/0x10 [ 161.521670][ T9131] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 161.521691][ T9131] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 161.521714][ T9131] warn_alloc+0x278/0x410 [ 161.521736][ T9131] ? __pfx_warn_alloc+0x10/0x10 [ 161.521750][ T9131] ? __kasan_kmalloc+0x23/0xb0 [ 161.521770][ T9131] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 161.521797][ T9131] ? __get_vm_area_node+0x280/0x2d0 [ 161.521825][ T9131] __vmalloc_node_range_noprof+0x369/0x1380 [ 161.521875][ T9131] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.521899][ T9131] ? __lock_acquire+0x1397/0x2100 [ 161.521924][ T9131] ? __might_fault+0xaa/0x120 [ 161.521942][ T9131] ? do_replace+0x298/0x5e0 [ 161.521962][ T9131] __vmalloc_noprof+0x79/0x90 [ 161.521984][ T9131] ? do_replace+0x298/0x5e0 [ 161.522006][ T9131] do_replace+0x298/0x5e0 [ 161.522030][ T9131] ? __pfx_aa_get_newest_label+0x10/0x10 [ 161.522053][ T9131] ? __pfx_do_replace+0x10/0x10 [ 161.522099][ T9131] ? bpf_lsm_capable+0x9/0x10 [ 161.522120][ T9131] ? security_capable+0x7e/0x2d0 [ 161.522147][ T9131] do_ebt_set_ctl+0x28e/0x1570 [ 161.522184][ T9131] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 161.522203][ T9131] ? do_ip_setsockopt+0x2824/0x3ae0 [ 161.522224][ T9131] ? __pfx_lock_release+0x10/0x10 [ 161.522246][ T9131] ? rcu_is_watching+0x15/0xb0 [ 161.522264][ T9131] ? trace_contention_end+0x3c/0x120 [ 161.522282][ T9131] ? __mutex_lock+0x397/0x1010 [ 161.522303][ T9131] ? do_ip_setsockopt+0x283f/0x3ae0 [ 161.522326][ T9131] ? __mutex_unlock_slowpath+0x227/0x800 [ 161.522355][ T9131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.522379][ T9131] ? __pfx___mutex_lock+0x10/0x10 [ 161.522408][ T9131] nf_setsockopt+0x295/0x2c0 [ 161.522430][ T9131] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 161.522451][ T9131] smc_setsockopt+0x275/0xd10 [ 161.522476][ T9131] ? __pfx_smc_setsockopt+0x10/0x10 [ 161.522495][ T9131] ? aa_sock_opt_perm+0x79/0x120 [ 161.522521][ T9131] ? __pfx_smc_setsockopt+0x10/0x10 [ 161.522538][ T9131] do_sock_setsockopt+0x3af/0x720 [ 161.522566][ T9131] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 161.522591][ T9131] ? __fget_files+0x395/0x410 [ 161.522611][ T9131] ? __fget_files+0x2a/0x410 [ 161.522639][ T9131] __x64_sys_setsockopt+0x1ee/0x280 [ 161.522667][ T9131] do_syscall_64+0xf3/0x230 [ 161.522687][ T9131] ? clear_bhb_loop+0x35/0x90 [ 161.522711][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.522731][ T9131] RIP: 0033:0x7f9e3418d169 [ 161.522747][ T9131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.522761][ T9131] RSP: 002b:00007f9e35075038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.522780][ T9131] RAX: ffffffffffffffda RBX: 00007f9e343a5fa0 RCX: 00007f9e3418d169 [ 161.522792][ T9131] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 161.522802][ T9131] RBP: 00007f9e35075090 R08: 0000000000000138 R09: 0000000000000000 [ 161.522813][ T9131] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001 [ 161.522823][ T9131] R13: 0000000000000000 R14: 00007f9e343a5fa0 R15: 00007ffd10a1bdc8 [ 161.522850][ T9131] [ 161.522857][ T9131] Mem-Info: [ 161.896425][ T9131] active_anon:5133 inactive_anon:0 isolated_anon:0 [ 161.896425][ T9131] active_file:1722 inactive_file:38337 isolated_file:0 [ 161.896425][ T9131] unevictable:768 dirty:359 writeback:0 [ 161.896425][ T9131] slab_reclaimable:10300 slab_unreclaimable:101751 [ 161.896425][ T9131] mapped:29067 shmem:1430 pagetables:956 [ 161.896425][ T9131] sec_pagetables:0 bounce:0 [ 161.896425][ T9131] kernel_misc_reclaimable:0 [ 161.896425][ T9131] free:1338581 free_pcp:369 free_cma:0 [ 161.942888][ T9131] Node 0 active_anon:20632kB inactive_anon:0kB active_file:6888kB inactive_file:153272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116268kB dirty:1436kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10888kB pagetables:3624kB sec_pagetables:0kB all_unreclaimable? no [ 161.975890][ T9131] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 162.006781][ T9131] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.034872][ T9131] lowmem_reserve[]: 0 2490 2490 0 0 [ 162.057891][ T9131] Node 0 DMA32 free:1429952kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:20692kB inactive_anon:0kB active_file:6888kB inactive_file:152952kB unevictable:1536kB writepending:1436kB present:3129332kB managed:2549844kB mlocked:0kB bounce:0kB free_pcp:1232kB local_pcp:32kB free_cma:0kB [ 162.058866][ T9146] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1160'. [ 162.088294][ T9131] lowmem_reserve[]: 0 0 0 0 0 [ 162.088375][ T9131] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 162.088420][ T9131] lowmem_reserve[]: 0 0 0 0 0 [ 162.088464][ T9131] Node 1 Normal free:3910108kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.088513][ T9131] lowmem_reserve[]: 0 0 0 0 0 [ 162.088557][ T9131] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 162.231228][ T9150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1162'. [ 162.240360][ T9131] Node 0 DMA32: 97*4kB (UM) 51*8kB (UME) 40*16kB (UME) 211*32kB (UME) 113*64kB (UME) 87*128kB (UME) 35*256kB (UM) 23*512kB (UM) 18*1024kB (UM) 8*2048kB (UME) 329*4096kB (UM) = 1429692kB [ 162.281992][ T9131] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 162.342325][ T9131] Node 1 Normal: 177*4kB (UME) 55*8kB (UME) 42*16kB (UME) 200*32kB (UME) 93*64kB (UME) 37*128kB (UME) 16*256kB (UME) 8*512kB (UM) 2*1024kB (ME) 5*2048kB (UE) 945*4096kB (M) = 3910108kB [ 162.373771][ T9131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.388772][ T9131] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.406393][ T9131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.416955][ T9131] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.469521][ T9131] 41500 total pagecache pages [ 162.500575][ T9131] 0 pages in swap cache [ 162.504792][ T9131] Free swap = 124996kB [ 162.508962][ T9131] Total swap = 124996kB [ 162.529065][ T9131] 2097051 pages RAM [ 162.534671][ T9131] 0 pages HighMem/MovableOnly [ 162.546740][ T9131] 427868 pages reserved [ 162.558298][ T9131] 0 pages cma reserved [ 162.771827][ T9170] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 162.779990][ T9170] netlink: 'syz.1.1171': attribute type 2 has an invalid length. [ 162.889252][ T9177] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1173'. [ 162.962837][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 163.169518][ T9189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1179'. [ 163.286498][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 163.663147][ T9212] tipc: Started in network mode [ 163.669397][ T9212] tipc: Node identity , cluster identity 4711 [ 163.689874][ T9212] tipc: Failed to obtain node identity [ 163.696732][ T9212] tipc: Enabling of bearer rejected, failed to enable media [ 163.752634][ T9214] tipc: Started in network mode [ 163.758113][ T9214] tipc: Node identity , cluster identity 4711 [ 163.778885][ T9214] tipc: Failed to obtain node identity [ 163.790554][ T9214] tipc: Enabling of bearer rejected, failed to enable media [ 164.309913][ T9251] vxcan1 speed is unknown, defaulting to 1000 [ 164.319607][ T9258] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 164.332747][ T9258] Bluetooth: MGMT ver 1.23 [ 164.494769][ T9264] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 164.972737][ T9266] vxcan1 speed is unknown, defaulting to 1000 [ 165.094927][ T9279] Cannot find add_set index 0 as target [ 165.133196][ T9279] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.348623][ T9279] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.519900][ T9279] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.683758][ T9279] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.762573][ T9296] vxcan1 speed is unknown, defaulting to 1000 [ 165.785680][ T9303] netlink: 'syz.1.1216': attribute type 12 has an invalid length. [ 165.796319][ T9304] IPVS: set_ctl: invalid protocol: 115 172.20.20.29:20000 [ 165.890493][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 166.196914][ T9279] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.255493][ T9324] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 166.387956][ T9279] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.414530][ T9279] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.436741][ T9279] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.592119][ T9333] __nla_validate_parse: 6 callbacks suppressed [ 166.592139][ T9333] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1227'. [ 166.753398][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 167.138115][ T9359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1238'. [ 167.161717][ T9360] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0 [ 167.180966][ T9348] netlink: 'syz.0.1231': attribute type 32 has an invalid length. [ 167.222099][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 167.238552][ T9359] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 167.269686][ T9348] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 167.325087][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'. [ 167.558830][ T9362] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1240'. [ 167.814561][ T9392] xt_CT: No such helper "snmp" [ 167.884427][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1252'. [ 167.906275][ T9402] x_tables: duplicate underflow at hook 1 [ 167.920008][ T9401] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 168.046138][ T29] audit: type=1107 audit(1740449910.650:2): pid=9411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 168.088605][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 168.109663][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 168.129189][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 168.167094][ T9414] vxcan1 speed is unknown, defaulting to 1000 [ 168.181100][ T9412] Bluetooth: MGMT ver 1.23 [ 168.714626][ T9444] Cannot find add_set index 0 as target [ 168.755783][ T9444] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.825972][ T9444] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.882099][ T9444] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.958017][ T9444] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.085720][ T9464] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 169.086811][ T9444] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.139168][ T9444] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.155120][ T9458] x_tables: duplicate underflow at hook 1 [ 169.189123][ T9444] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.236030][ T9444] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.265305][ T9414] pimreg: entered allmulticast mode [ 169.573914][ T9478] vxcan1 speed is unknown, defaulting to 1000 [ 169.761838][ T9488] netlink: 'syz.2.1278': attribute type 72 has an invalid length. [ 169.972791][ T9505] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 169.980694][ T9505] netlink: 'syz.1.1282': attribute type 2 has an invalid length. [ 170.025893][ T9505] macvlan0: entered promiscuous mode [ 170.046212][ T9505] macvlan0: left promiscuous mode [ 170.153188][ T1081] pimreg (unregistering): left allmulticast mode [ 170.329114][ T9520] vxcan1 speed is unknown, defaulting to 1000 [ 170.343563][ T9523] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.407275][ T9557] bridge0: port 3(team0) entered disabled state [ 171.413806][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.421804][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.445998][ T9569] syz.1.1301: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 171.468414][ T9569] CPU: 1 UID: 0 PID: 9569 Comm: syz.1.1301 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 171.468438][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.468460][ T9569] Call Trace: [ 171.468466][ T9569] [ 171.468474][ T9569] dump_stack_lvl+0x241/0x360 [ 171.468501][ T9569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.468519][ T9569] ? __pfx__printk+0x10/0x10 [ 171.468541][ T9569] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 171.468564][ T9569] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 171.468588][ T9569] warn_alloc+0x278/0x410 [ 171.468608][ T9569] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 171.468634][ T9569] ? __pfx_warn_alloc+0x10/0x10 [ 171.468652][ T9569] ? kasan_save_track+0x3f/0x80 [ 171.468669][ T9569] ? __kasan_kmalloc+0x98/0xb0 [ 171.468688][ T9569] ? xsk_setsockopt+0x4aa/0x810 [ 171.468704][ T9569] ? do_sock_setsockopt+0x3af/0x720 [ 171.468725][ T9569] ? __x64_sys_setsockopt+0x1ee/0x280 [ 171.468747][ T9569] ? do_syscall_64+0xf3/0x230 [ 171.468766][ T9569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.468796][ T9569] __vmalloc_node_range_noprof+0x126/0x1380 [ 171.468847][ T9569] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 171.468874][ T9569] ? __kasan_kmalloc+0x98/0xb0 [ 171.468897][ T9569] vmalloc_user_noprof+0x74/0x80 [ 171.468913][ T9569] ? xskq_create+0xb6/0x170 [ 171.468929][ T9569] xskq_create+0xb6/0x170 [ 171.468949][ T9569] xsk_init_queue+0xa1/0x100 [ 171.468969][ T9569] xsk_setsockopt+0x4aa/0x810 [ 171.468989][ T9569] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.469006][ T9569] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.469030][ T9569] ? aa_sock_opt_perm+0x79/0x120 [ 171.469057][ T9569] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.469071][ T9569] do_sock_setsockopt+0x3af/0x720 [ 171.469092][ T9569] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 171.469113][ T9569] ? __fget_files+0x395/0x410 [ 171.469133][ T9569] ? __fget_files+0x2a/0x410 [ 171.469157][ T9569] __x64_sys_setsockopt+0x1ee/0x280 [ 171.469183][ T9569] do_syscall_64+0xf3/0x230 [ 171.469202][ T9569] ? clear_bhb_loop+0x35/0x90 [ 171.469227][ T9569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.469247][ T9569] RIP: 0033:0x7fb78638d169 [ 171.469263][ T9569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.469277][ T9569] RSP: 002b:00007fb7841b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.469294][ T9569] RAX: ffffffffffffffda RBX: 00007fb7865a6160 RCX: 00007fb78638d169 [ 171.469307][ T9569] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 171.469317][ T9569] RBP: 00007fb78640e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 171.469326][ T9569] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.469336][ T9569] R13: 0000000000000000 R14: 00007fb7865a6160 R15: 00007ffc3e4821f8 [ 171.469358][ T9569] [ 171.469366][ T9569] Mem-Info: [ 171.762282][ T9569] active_anon:6921 inactive_anon:0 isolated_anon:0 [ 171.762282][ T9569] active_file:1750 inactive_file:38342 isolated_file:0 [ 171.762282][ T9569] unevictable:768 dirty:522 writeback:0 [ 171.762282][ T9569] slab_reclaimable:10779 slab_unreclaimable:101718 [ 171.762282][ T9569] mapped:34825 shmem:4287 pagetables:769 [ 171.762282][ T9569] sec_pagetables:0 bounce:0 [ 171.762282][ T9569] kernel_misc_reclaimable:0 [ 171.762282][ T9569] free:1336899 free_pcp:513 free_cma:0 [ 171.807830][ T9569] Node 0 active_anon:27684kB inactive_anon:0kB active_file:7000kB inactive_file:153292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139300kB dirty:2088kB writeback:0kB shmem:15612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:3076kB sec_pagetables:0kB all_unreclaimable? no [ 171.840757][ T9569] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 171.872079][ T9569] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.899760][ T9569] lowmem_reserve[]: 0 2490 2490 0 0 [ 171.905412][ T9569] Node 0 DMA32 free:1423620kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:27644kB inactive_anon:0kB active_file:7000kB inactive_file:152972kB unevictable:1536kB writepending:2088kB present:3129332kB managed:2549844kB mlocked:0kB bounce:0kB free_pcp:952kB local_pcp:728kB free_cma:0kB [ 171.935891][ T9569] lowmem_reserve[]: 0 0 0 0 0 [ 171.941455][ T9569] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 171.969066][ T9569] lowmem_reserve[]: 0 0 0 0 0 [ 171.973899][ T9569] Node 1 Normal free:3910108kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.003048][ T9569] lowmem_reserve[]: 0 0 0 0 0 [ 172.007839][ T9569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.020737][ T9569] Node 0 DMA32: 0*4kB 2*8kB (E) 1*16kB (E) 175*32kB (UME) 120*64kB (UME) 80*128kB (UME) 39*256kB (UM) 21*512kB (UM) 16*1024kB (UME) 7*2048kB (UM) 329*4096kB (UM) = 1422592kB [ 172.038779][ T9569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 172.051839][ T9569] Node 1 Normal: 177*4kB (UME) 55*8kB (UME) 42*16kB (UME) 200*32kB (UME) 93*64kB (UME) 37*128kB (UME) 16*256kB (UME) 8*512kB (UM) 2*1024kB (ME) 5*2048kB (UE) 945*4096kB (M) = 3910108kB [ 172.063729][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.071164][ T9569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.087963][ T9569] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.093454][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.097360][ T9569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.114622][ T9569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.124052][ T9569] 44379 total pagecache pages [ 172.128757][ T9569] 0 pages in swap cache [ 172.133422][ T9569] Free swap = 124996kB [ 172.138134][ T9569] Total swap = 124996kB [ 172.142419][ T9569] 2097051 pages RAM [ 172.146290][ T9569] 0 pages HighMem/MovableOnly [ 172.151230][ T9569] 427868 pages reserved [ 172.155415][ T9569] 0 pages cma reserved [ 172.195918][ T9557] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.204648][ T9557] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.213816][ T9557] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.223173][ T9557] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.257972][ T9560] __nla_validate_parse: 13 callbacks suppressed [ 172.257989][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 172.584358][ T9590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 172.624415][ T9590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 173.370767][ T9627] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.379934][ T9627] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.388801][ T9627] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.398101][ T9627] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.428880][ T9627] vxlan0: entered promiscuous mode [ 173.434128][ T9627] vxlan0: entered allmulticast mode [ 173.470529][ T9627] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.479539][ T9627] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.488800][ T9627] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.498883][ T9627] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.715025][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 174.102923][ T9668] vxcan1 speed is unknown, defaulting to 1000 [ 174.732697][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 175.049620][ T9696] netlink: 'syz.1.1341': attribute type 2 has an invalid length. [ 175.062101][ T9696] Tq!7: entered promiscuous mode [ 175.551834][ T9704] netlink: 'syz.2.1344': attribute type 21 has an invalid length. [ 175.585972][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'. [ 175.787043][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 176.430004][ T9723] bond1: entered promiscuous mode [ 176.479053][ T9723] bond1: entered allmulticast mode [ 176.501485][ T9723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.595130][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1355'. [ 177.213990][ T9744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 177.507979][ T9752] netlink: 'syz.2.1363': attribute type 12 has an invalid length. [ 178.135473][ T9763] vxcan1 speed is unknown, defaulting to 1000 [ 178.169355][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1369'. [ 178.339631][ T9759] vxcan1 speed is unknown, defaulting to 1000 [ 178.495877][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1372'. [ 178.541604][ T9774] netlink: 'syz.2.1372': attribute type 10 has an invalid length. [ 178.648705][ T9779] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1374'. [ 178.660243][ T9782] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 178.718125][ T9766] vxcan1 speed is unknown, defaulting to 1000 [ 178.839449][ T9782] vxcan1 speed is unknown, defaulting to 1000 [ 178.890148][ T9788] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 178.903467][ T9788] raw_sendmsg: syz.4.1375 forgot to set AF_INET. Fix it! [ 179.217628][ T9790] vxcan1 speed is unknown, defaulting to 1000 [ 179.546214][ T9802] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.555810][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 179.658389][ T9804] syzkaller1: entered promiscuous mode [ 179.664351][ T9804] syzkaller1: entered allmulticast mode [ 179.678561][ T9804] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1382'. [ 179.688543][ T9806] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.931427][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1384'. [ 179.975900][ T9815] netlink: 'syz.1.1384': attribute type 10 has an invalid length. [ 180.275201][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 180.524841][ T9834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1390'. [ 180.575463][ T9840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1390'. [ 180.812471][ T9845] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.928504][ T9845] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.943371][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1395'. [ 180.985550][ T9857] @: renamed from bond_slave_0 (while UP) [ 181.033659][ T9845] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.206682][ T9845] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.228885][ T9858] netlink: 'syz.3.1395': attribute type 10 has an invalid length. [ 181.286891][ T9872] sctp: [Deprecated]: syz.0.1400 (pid 9872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.286891][ T9872] Use struct sctp_sack_info instead [ 181.396717][ T9845] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.416793][ T9845] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.433639][ T9845] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.449047][ T9845] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.604908][ T9881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.692306][ T9881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.757560][ T9881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.834070][ T9881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.940183][ T9881] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.963276][ T9881] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.986060][ T9881] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.003387][ T9881] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.335532][ T9907] netlink: 'syz.3.1411': attribute type 10 has an invalid length. [ 182.624247][ T9923] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.723094][ T9923] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.775569][ T9923] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.879382][ T9923] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.016276][ T9941] sctp: [Deprecated]: syz.2.1422 (pid 9941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.016276][ T9941] Use struct sctp_sack_info instead [ 183.183774][ T9953] netlink: 'syz.0.1425': attribute type 2 has an invalid length. [ 183.219183][ T9955] __nla_validate_parse: 10 callbacks suppressed [ 183.219203][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1426'. [ 183.366583][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1429'. [ 183.379292][ T9955] netlink: 'syz.2.1426': attribute type 10 has an invalid length. [ 183.585761][ T9973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1436'. [ 183.595879][ T9973] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1436'. [ 183.668785][ T9975] ipt_REJECT: TCP_RESET invalid for non-tcp [ 183.761208][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1435'. [ 183.791724][ T9983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.812708][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 183.824050][ T9987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1439'. [ 183.985622][ T9995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1443'. [ 184.025439][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1444'. [ 184.072860][ T9997] netlink: 'syz.4.1444': attribute type 10 has an invalid length. [ 184.262059][T10007] Cannot find add_set index 0 as target [ 184.630938][T10027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1456'. [ 184.793495][T10033] netlink: 'syz.0.1458': attribute type 10 has an invalid length. [ 185.933192][ T9923] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.010154][ T9923] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.067547][ T9923] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.140158][ T9923] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.188583][T10079] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 186.213823][T10080] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 186.239512][T10082] netlink: 'syz.1.1476': attribute type 4 has an invalid length. [ 187.168808][T10139] xt_l2tp: v2 doesn't support IP mode [ 187.241569][T10142] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 187.267667][T10142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.549602][T10155] IPv6: NLM_F_REPLACE set, but no existing node found! [ 187.587990][T10155] IPv6: NLM_F_REPLACE set, but no existing node found! [ 187.981826][T10171] xt_l2tp: v2 sid > 0xffff: 262144 [ 188.234288][T10186] sctp: [Deprecated]: syz.3.1514 (pid 10186) Use of int in max_burst socket option deprecated. [ 188.234288][T10186] Use struct sctp_assoc_value instead [ 188.479031][T10199] __nla_validate_parse: 13 callbacks suppressed [ 188.479054][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1521'. [ 188.646899][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 188.708658][T10197] vxcan1 speed is unknown, defaulting to 1000 [ 188.788469][T10217] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1530'. [ 188.910752][T10220] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.016856][T10220] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.048324][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1533'. [ 189.088754][T10220] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.212106][T10220] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.237114][T10227] vxcan1 speed is unknown, defaulting to 1000 [ 189.239914][T10228] netlink: 'syz.3.1533': attribute type 10 has an invalid length. [ 189.254161][T10228] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1533'. [ 189.395370][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 189.427407][T10220] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.488236][T10220] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.505988][T10220] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.521483][T10220] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.847167][T10246] net veth1_virt_wifi : renamed from virt_wifi0 [ 189.935852][T10252] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 189.969325][T10252] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 190.096481][T10257] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 190.423412][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 191.089841][T10292] netlink: 'syz.4.1554': attribute type 6 has an invalid length. [ 191.099631][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 191.128599][T10289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1555'. [ 191.141552][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 191.158566][T10293] netlink: 'syz.4.1554': attribute type 14 has an invalid length. [ 191.166935][T10293] netlink: 'syz.4.1554': attribute type 13 has an invalid length. [ 191.472242][T10310] netlink: 'syz.3.1559': attribute type 10 has an invalid length. [ 191.654082][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 191.660206][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 191.666923][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 191.673625][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 191.807990][T10326] vxcan1 speed is unknown, defaulting to 1000 [ 192.042567][T10339] netlink: 'syz.3.1564': attribute type 39 has an invalid length. [ 193.312537][T10395] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 193.334049][T10396] Cannot find add_set index 0 as target [ 193.403467][T10390] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.448824][T10398] bond0: (slave gretap1): making interface the new active one [ 193.461140][T10398] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 193.488394][T10390] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.567625][T10390] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.696242][T10390] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.768533][T10415] netlink: 'syz.1.1594': attribute type 7 has an invalid length. [ 193.776918][T10415] __nla_validate_parse: 5 callbacks suppressed [ 193.776935][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 193.830003][T10417] netlink: 'syz.0.1595': attribute type 4 has an invalid length. [ 193.866361][T10390] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.898429][T10390] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.928280][T10390] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.968408][T10390] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.216714][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 194.234419][T10432] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1601'. [ 194.398937][T10404] syz.2.1591 (10404) used greatest stack depth: 16936 bytes left [ 194.619719][T10441] xt_hashlimit: size too large, truncated to 1048576 [ 194.695315][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.842608][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 195.207821][T10478] netlink: 'syz.3.1613': attribute type 2 has an invalid length. [ 195.279401][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'. [ 195.434874][T10488] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1621'. [ 195.578459][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 195.764030][T10496] vxcan1 speed is unknown, defaulting to 1000 [ 195.909025][T10508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.420913][T10535] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 196.449412][T10536] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 196.459256][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 196.675029][T10547] vxcan1 speed is unknown, defaulting to 1000 [ 196.976354][T10552] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1645'. [ 196.996727][T10547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1644'. [ 197.038502][ T58] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 197.069880][ T58] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 197.525643][T10577] netlink: 'syz.1.1655': attribute type 21 has an invalid length. [ 197.534764][T10577] netlink: 'syz.1.1655': attribute type 1 has an invalid length. [ 197.792709][T10600] netlink: 'syz.0.1654': attribute type 4 has an invalid length. [ 197.942819][T10614] netlink: 'syz.3.1659': attribute type 10 has an invalid length. [ 197.966955][T10614] veth0_vlan: left promiscuous mode [ 197.987190][T10614] veth0_vlan: entered promiscuous mode [ 198.006456][T10614] team0: Device veth0_vlan failed to register rx_handler [ 198.047136][T10619] netlink: 'syz.1.1664': attribute type 1 has an invalid length. [ 198.056233][T10620] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1664'. [ 198.166843][T10619] bond0: entered promiscuous mode [ 198.177870][T10619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.193809][T10620] batadv1: entered promiscuous mode [ 198.200706][T10620] batadv1: entered allmulticast mode [ 198.207434][T10620] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 198.216159][T10620] bond0: (slave batadv1): making interface the new active one [ 198.225023][T10620] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 198.247911][T10614] vxcan1 speed is unknown, defaulting to 1000 [ 198.292355][T10629] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 198.346904][T10631] dummy0: entered promiscuous mode [ 198.355734][T10631] dummy0: left promiscuous mode [ 198.438877][T10634] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 198.476575][T10636] netlink: 'syz.1.1670': attribute type 10 has an invalid length. [ 198.500566][T10634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.517793][T10636] team0: Port device added [ 198.656972][T10646] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 198.661705][T10643] ip6_vti0: left promiscuous mode [ 198.692133][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.699626][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.754438][T10643] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 199.133320][T10657] syzkaller1: entered promiscuous mode [ 199.140534][T10657] syzkaller1: entered allmulticast mode [ 199.272463][T10667] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.326561][T10667] __nla_validate_parse: 8 callbacks suppressed [ 199.326582][T10667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1681'. [ 199.431181][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 199.454760][T10671] vxcan1 speed is unknown, defaulting to 1000 [ 199.561000][T10667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1681'. [ 199.648894][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 199.680788][T10673] vxcan1 speed is unknown, defaulting to 1000 [ 199.687444][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 199.741689][T10669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1682'. [ 199.822320][T10669] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.829506][T10669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.842310][T10669] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.075380][T10669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.468296][T10691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1691'. [ 200.991040][T10677] IPVS: set_ctl: invalid protocol: 1 172.20.20.47:19997 [ 201.009780][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 201.030956][T10711] veth0_to_bridge: entered promiscuous mode [ 201.109837][T10700] veth0_to_bridge: left promiscuous mode [ 201.162373][ T9] IPVS: starting estimator thread 0... [ 201.168197][T10713] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 201.226088][T10713] sctp: [Deprecated]: syz.4.1697 (pid 10713) Use of int in max_burst socket option. [ 201.226088][T10713] Use struct sctp_assoc_value instead [ 201.332673][T10718] IPVS: using max 28 ests per chain, 67200 per kthread [ 201.359954][T10726] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1702'. [ 201.594511][T10730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1703'. [ 201.618822][T10734] team0: left allmulticast mode [ 201.623881][T10734] team_slave_0: left allmulticast mode [ 201.629545][T10734] team_slave_1: left allmulticast mode [ 201.635656][T10734] bridge0: port 3(team0) entered disabled state [ 201.667420][T10730] xt_CT: No such helper "pptp" [ 201.684083][T10734] bridge_slave_0: left allmulticast mode [ 201.711779][T10734] bridge_slave_0: left promiscuous mode [ 201.727874][T10734] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.760308][T10734] bridge_slave_1: left allmulticast mode [ 201.779099][T10734] bridge_slave_1: left promiscuous mode [ 201.788483][T10734] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.828293][T10734] bond0: (slave 5@): Releasing backup interface [ 201.863212][T10734] bond0: (slave bond_slave_1): Releasing backup interface [ 201.897605][T10734] team_slave_0: left promiscuous mode [ 201.916944][T10734] team0: Port device team_slave_0 removed [ 201.924947][T10734] team_slave_1: left promiscuous mode [ 201.938129][T10734] team0: Port device team_slave_1 removed [ 201.946004][T10751] netlink: 'syz.3.1710': attribute type 1 has an invalid length. [ 201.946218][T10734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.964978][T10734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.973975][T10734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.982125][T10734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.997158][T10730] gretap0: entered promiscuous mode [ 202.071785][T10740] 0XD: renamed from gretap0 [ 202.079211][T10740] 0XD: left promiscuous mode [ 202.084908][T10740] 0XD: entered allmulticast mode [ 202.170042][T10756] netlink: 'syz.1.1712': attribute type 21 has an invalid length. [ 202.178080][T10756] netlink: 'syz.1.1712': attribute type 1 has an invalid length. [ 202.304828][T10758] FAULT_INJECTION: forcing a failure. [ 202.304828][T10758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.326461][T10758] CPU: 1 UID: 0 PID: 10758 Comm: syz.2.1713 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 202.326488][T10758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.326498][T10758] Call Trace: [ 202.326504][T10758] [ 202.326512][T10758] dump_stack_lvl+0x241/0x360 [ 202.326550][T10758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.326568][T10758] ? __pfx__printk+0x10/0x10 [ 202.326586][T10758] ? __pfx_lock_release+0x10/0x10 [ 202.326616][T10758] should_fail_ex+0x40a/0x550 [ 202.326641][T10758] _copy_from_user+0x2d/0xb0 [ 202.326662][T10758] __sys_bpf+0x1be/0x820 [ 202.326684][T10758] ? __pfx___sys_bpf+0x10/0x10 [ 202.326716][T10758] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.326741][T10758] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.326764][T10758] ? do_syscall_64+0x100/0x230 [ 202.326787][T10758] __x64_sys_bpf+0x7c/0x90 [ 202.326807][T10758] do_syscall_64+0xf3/0x230 [ 202.326826][T10758] ? clear_bhb_loop+0x35/0x90 [ 202.326850][T10758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.326870][T10758] RIP: 0033:0x7f9f7e18d169 [ 202.326889][T10758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.326903][T10758] RSP: 002b:00007f9f7ef6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.326925][T10758] RAX: ffffffffffffffda RBX: 00007f9f7e3a5fa0 RCX: 00007f9f7e18d169 [ 202.326937][T10758] RDX: 0000000000000040 RSI: 0000400000000040 RDI: 0000000000000010 [ 202.326947][T10758] RBP: 00007f9f7ef6d090 R08: 0000000000000000 R09: 0000000000000000 [ 202.326958][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.326967][T10758] R13: 0000000000000000 R14: 00007f9f7e3a5fa0 R15: 00007ffe363625d8 [ 202.326994][T10758] [ 202.530587][T10762] netlink: 'syz.4.1715': attribute type 6 has an invalid length. [ 202.552528][T10762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.623843][T10764] netlink: 'syz.0.1714': attribute type 7 has an invalid length. [ 202.633627][T10764] netlink: 'syz.0.1714': attribute type 8 has an invalid length. [ 202.871994][T10778] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 203.318180][T10811] netlink: 'syz.3.1733': attribute type 3 has an invalid length. [ 203.326192][T10811] netlink: 'syz.3.1733': attribute type 3 has an invalid length. [ 203.689996][T10829] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 203.697406][T10829] syzkaller1: linktype set to 780 [ 203.709355][T10829] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.749217][T10831] netlink: 'syz.3.1740': attribute type 10 has an invalid length. [ 203.759285][T10831] team0: entered promiscuous mode [ 203.769039][T10831] team_slave_0: entered promiscuous mode [ 203.779299][T10831] team_slave_1: entered promiscuous mode [ 203.787010][T10831] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.794655][T10831] bridge0: port 3(team0) entered blocking state [ 203.801776][T10831] bridge0: port 3(team0) entered disabled state [ 203.809085][T10831] team0: entered allmulticast mode [ 203.816359][T10831] team_slave_0: entered allmulticast mode [ 203.824054][T10831] team_slave_1: entered allmulticast mode [ 203.832311][T10831] bridge0: port 3(team0) entered blocking state [ 203.838699][T10831] bridge0: port 3(team0) entered forwarding state [ 203.847895][T10829] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.913225][T10829] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.977509][T10829] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.156545][T10829] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.191050][T10829] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.230531][T10829] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.250011][T10829] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.299024][T10867] SET target dimension over the limit! [ 204.542739][T10880] __nla_validate_parse: 17 callbacks suppressed [ 204.542758][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 205.078741][T10887] netlink: 'syz.2.1757': attribute type 2 has an invalid length. [ 206.626434][T10895] netlink: 'syz.2.1761': attribute type 21 has an invalid length. [ 206.634749][T10895] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 206.679049][T10901] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.768323][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1767'. [ 206.834662][T10914] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1769'. [ 206.845599][T10901] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.855804][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 206.937950][T10901] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.996392][T10901] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.086784][T10901] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.120978][T10901] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.139168][T10901] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.154381][T10901] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.438884][T10948] netlink: 'syz.3.1778': attribute type 21 has an invalid length. [ 207.871412][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 208.087177][T10987] vxcan1 speed is unknown, defaulting to 1000 [ 208.586876][T11013] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1803'. [ 208.854535][T11024] validate_nla: 1 callbacks suppressed [ 208.854555][T11024] netlink: 'syz.0.1806': attribute type 11 has an invalid length. [ 209.126433][T11036] vti0: entered promiscuous mode [ 209.187842][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'. [ 209.224138][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 209.235963][T11042] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 209.263904][T11042] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1812'. [ 209.352350][ T54] block nbd0: Receive control failed (result -107) [ 209.497441][T11048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.672204][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'. [ 209.711623][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1819'. [ 209.730069][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1819'. [ 209.752548][T11055] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1819'. [ 209.850851][T11070] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1822'. [ 210.011268][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 210.118354][T11086] xt_cgroup: path and classid specified [ 210.154916][T11084] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.1827'. [ 210.185345][T11089] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20001 [ 210.193775][T11089] x_tables: duplicate underflow at hook 2 [ 210.269429][T11093] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1834'. [ 210.352039][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'. [ 210.578238][T11113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1840'. [ 210.763154][T11119] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.856945][T11119] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.974907][T11119] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.062397][T11119] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.214148][T11119] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.262753][T11119] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.352324][T11119] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.391433][T11119] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.703335][ T29] audit: type=1804 audit(1740449954.310:3): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1863" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1664 res=1 errno=0 [ 211.739994][ T29] audit: type=1800 audit(1740449954.310:4): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1863" name="cgroup.controllers" dev="tmpfs" ino=1664 res=0 errno=0 [ 211.974450][T11200] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.983271][T11200] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.991562][T11200] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.000123][T11200] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.047006][T11200] vxlan0: entered promiscuous mode [ 212.050234][T11206] FAULT_INJECTION: forcing a failure. [ 212.050234][T11206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.063300][T11200] vxlan0: entered allmulticast mode [ 212.067366][T11206] CPU: 1 UID: 0 PID: 11206 Comm: syz.0.1871 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 212.067391][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.067401][T11206] Call Trace: [ 212.067407][T11206] [ 212.067414][T11206] dump_stack_lvl+0x241/0x360 [ 212.067457][T11206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.067474][T11206] ? __pfx__printk+0x10/0x10 [ 212.067493][T11206] ? __pfx_lock_release+0x10/0x10 [ 212.067523][T11206] should_fail_ex+0x40a/0x550 [ 212.067548][T11206] _copy_from_user+0x2d/0xb0 [ 212.067567][T11206] do_ipv6_setsockopt+0x2fc/0x35b0 [ 212.067593][T11206] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 212.067615][T11206] ? __mutex_trylock_common+0x183/0x2e0 [ 212.067633][T11206] ? __pfx___might_resched+0x10/0x10 [ 212.067656][T11206] ? __pfx___mutex_trylock_common+0x10/0x10 [ 212.067678][T11206] ? rcu_is_watching+0x15/0xb0 [ 212.067696][T11206] ? trace_contention_end+0x3c/0x120 [ 212.067714][T11206] ? __mutex_lock+0x397/0x1010 [ 212.067743][T11206] ? smc_setsockopt+0x1c3/0xd10 [ 212.067760][T11206] ? __pfx___might_resched+0x10/0x10 [ 212.067779][T11206] ? __pfx___mutex_lock+0x10/0x10 [ 212.067810][T11206] ipv6_setsockopt+0x5d/0x170 [ 212.067826][T11206] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 212.067847][T11206] smc_setsockopt+0x275/0xd10 [ 212.067877][T11206] ? __pfx_smc_setsockopt+0x10/0x10 [ 212.067896][T11206] ? aa_sock_opt_perm+0x79/0x120 [ 212.067922][T11206] ? __pfx_smc_setsockopt+0x10/0x10 [ 212.067938][T11206] do_sock_setsockopt+0x3af/0x720 [ 212.067965][T11206] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 212.067991][T11206] ? __fget_files+0x395/0x410 [ 212.068010][T11206] ? __fget_files+0x2a/0x410 [ 212.068037][T11206] __x64_sys_setsockopt+0x1ee/0x280 [ 212.068064][T11206] do_syscall_64+0xf3/0x230 [ 212.068084][T11206] ? clear_bhb_loop+0x35/0x90 [ 212.068106][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.068125][T11206] RIP: 0033:0x7f4c48b8d169 [ 212.068139][T11206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.068153][T11206] RSP: 002b:00007f4c499a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.068171][T11206] RAX: ffffffffffffffda RBX: 00007f4c48da5fa0 RCX: 00007f4c48b8d169 [ 212.068183][T11206] RDX: 0000000000000017 RSI: 0000000000000029 RDI: 0000000000000003 [ 212.068192][T11206] RBP: 00007f4c499a1090 R08: 0000000000000004 R09: 0000000000000000 [ 212.068202][T11206] R10: 0000400000001e80 R11: 0000000000000246 R12: 0000000000000001 [ 212.068211][T11206] R13: 0000000000000000 R14: 00007f4c48da5fa0 R15: 00007ffe0a9a54e8 [ 212.068235][T11206] [ 212.175594][T11209] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 212.178779][T11200] team0: Port device vxlan0 added [ 212.192304][T11209] netlink: 'syz.0.1872': attribute type 2 has an invalid length. [ 212.561971][T11217] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 212.759118][T11229] netlink: 'syz.3.1878': attribute type 6 has an invalid length. [ 212.793088][T11230] netlink: 'syz.3.1878': attribute type 6 has an invalid length. [ 212.966789][T11245] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 213.148669][T11260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.298559][T11273] sctp: [Deprecated]: syz.2.1888 (pid 11273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.298559][T11273] Use struct sctp_sack_info instead [ 213.638369][T11294] netlink: 'syz.1.1898': attribute type 21 has an invalid length. [ 214.132599][T11320] netlink: 'syz.1.1908': attribute type 3 has an invalid length. [ 214.523483][T11344] Unsupported ieee802154 address type: 0 [ 214.608720][T11344] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.625673][T11345] sctp: [Deprecated]: syz.4.1913 (pid 11345) Use of int in max_burst socket option deprecated. [ 214.625673][T11345] Use struct sctp_assoc_value instead [ 214.682229][T11344] syz.1.1916 uses old SIOCAX25GETINFO [ 214.747779][T11355] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.855826][T11355] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.994320][T11355] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.075755][T11376] vxcan1 speed is unknown, defaulting to 1000 [ 215.238839][T11355] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.398808][T11355] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.485365][T11355] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.548801][T11355] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.714463][T11355] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.826713][T11399] __nla_validate_parse: 17 callbacks suppressed [ 215.826733][T11399] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1931'. [ 215.997162][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'. [ 216.217896][T11417] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.332224][T11417] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.426062][T11417] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.488621][T11417] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.517865][T11437] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1945'. [ 217.199799][T11475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1959'. [ 217.219512][T11475] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1959'. [ 217.229980][T11475] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1959'. [ 217.293344][T11477] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.530730][T11497] netlink: 416 bytes leftover after parsing attributes in process `syz.3.1966'. [ 217.540134][T11497] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 217.790389][T11507] vxcan1 speed is unknown, defaulting to 1000 [ 218.463053][T11548] : renamed from veth0_vlan [ 218.475009][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1984'. [ 218.513046][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 218.726692][T11558] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 218.929258][T11562] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 218.976474][T11564] netlink: 'syz.1.1991': attribute type 1 has an invalid length. [ 219.026944][T11564] bond1: entered promiscuous mode [ 219.028001][T11569] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1991'. [ 219.033019][T11564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.067931][T11417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.131692][T11569] batadv2: entered promiscuous mode [ 219.136953][T11569] batadv2: entered allmulticast mode [ 219.146076][T11569] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 219.155567][T11569] bond1: (slave batadv2): making interface the new active one [ 219.165824][T11569] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 219.215908][T11417] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.268009][T11417] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.271146][T11572] can: request_module (can-proto-0) failed. [ 219.316104][T11417] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.346023][T11575] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 219.523780][T11582] vxcan1 speed is unknown, defaulting to 1000 [ 219.729177][T11592] netlink: 'syz.3.2001': attribute type 15 has an invalid length. [ 220.143390][T11604] netlink: 'syz.1.2007': attribute type 10 has an invalid length. [ 220.810650][T11655] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 220.851475][T11655] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 220.861812][T11661] __nla_validate_parse: 5 callbacks suppressed [ 220.861831][T11661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2020'. [ 220.896120][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 220.936741][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 220.942247][T11661] netlink: 'syz.3.2020': attribute type 10 has an invalid length. [ 221.076354][T11655] vxcan1 speed is unknown, defaulting to 1000 [ 221.348710][T11683] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.378673][T11683] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.403763][T11685] netlink: 'syz.2.2029': attribute type 21 has an invalid length. [ 221.412832][T11685] netlink: 'syz.2.2029': attribute type 1 has an invalid length. [ 221.466433][T11683] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.494541][T11683] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.593055][T11683] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.621631][T11690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2031'. [ 221.640592][T11683] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.642432][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'. [ 221.659820][T11690] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 221.690101][T11683] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.701100][T11683] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.903398][T11698] netlink: 'syz.4.2033': attribute type 2 has an invalid length. [ 221.965774][T11683] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.018786][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2036'. [ 222.041687][T11683] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.198645][T11683] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.237232][T11683] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.342848][T11707] netlink: 'syz.4.2036': attribute type 10 has an invalid length. [ 222.351993][T11721] netlink: 'syz.2.2040': attribute type 21 has an invalid length. [ 222.360291][T11721] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 222.383774][T11683] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.393224][T11683] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.466354][T11683] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.505152][T11683] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.611319][T11730] sctp: [Deprecated]: syz.1.2046 (pid 11730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.611319][T11730] Use struct sctp_sack_info instead [ 222.631713][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2046'. [ 222.814386][T11742] netlink: 'syz.4.2050': attribute type 1 has an invalid length. [ 222.842115][T11742] bond5: entered promiscuous mode [ 222.847399][T11742] bond5: entered allmulticast mode [ 222.909436][T11743] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 223.036412][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'. [ 223.204677][T11760] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2053'. [ 223.448825][T11776] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2064'. [ 223.881900][T11805] sctp: [Deprecated]: syz.1.2074 (pid 11805) Use of int in maxseg socket option. [ 223.881900][T11805] Use struct sctp_assoc_value instead [ 224.329541][T11830] team0: Device veth1_macvtap failed to register rx_handler [ 224.685996][T11862] xt_TCPMSS: Only works on TCP SYN packets [ 224.777698][T11865] IPv6: sit1: Disabled Multicast RS [ 224.964869][T11880] tipc: Can't bind to reserved service type 1 [ 225.216496][T11891] validate_nla: 9 callbacks suppressed [ 225.216517][T11891] netlink: 'syz.3.2101': attribute type 21 has an invalid length. [ 225.277783][T11891] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 225.939429][T11937] nbd: must specify a size in bytes for the device [ 226.064391][T11941] __nla_validate_parse: 10 callbacks suppressed [ 226.064408][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2122'. [ 226.141246][T11941] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.245510][T11959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'. [ 226.325134][T11959] netlink: 'syz.1.2125': attribute type 10 has an invalid length. [ 226.339051][T11959] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2125'. [ 226.806314][T11987] IPv4: Oversized IP packet from 127.202.26.0 [ 227.170011][T12006] syzkaller1: entered promiscuous mode [ 227.178949][T12006] syzkaller1: entered allmulticast mode [ 227.206243][T12009] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 227.229402][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'. [ 227.265397][T12009] batman_adv: batadv0: Adding interface: macsec1 [ 227.292410][T12009] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.324838][T12009] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 227.514366][T12016] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2142'. [ 227.531548][T12016] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 227.563354][T12013] vxcan1 speed is unknown, defaulting to 1000 [ 227.589917][T12016] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 227.710241][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 228.294901][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2148'. [ 228.501288][T12062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2150'. [ 228.519124][T12047] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.554069][T12047] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.588249][T12047] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.601504][T12047] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 228.611368][T12047] geneve3: entered allmulticast mode [ 228.719812][T12060] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 229.390337][T12101] netlink: 'syz.2.2162': attribute type 10 has an invalid length. [ 229.437541][T12101] veth1_macvtap: left promiscuous mode [ 229.525167][T12101] team0: Device veth1_macvtap failed to register rx_handler [ 229.615499][T12101] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 229.623676][T12101] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2162'. [ 229.987447][T12132] netlink: 'syz.2.2171': attribute type 15 has an invalid length. [ 229.996872][T12132] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2171'. [ 230.308399][T11210] ------------[ cut here ]------------ [ 230.314539][T11210] refcount_t: underflow; use-after-free. [ 230.320906][T11210] WARNING: CPU: 0 PID: 11210 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 230.330659][T11210] Modules linked in: [ 230.334546][T11210] CPU: 0 UID: 0 PID: 11210 Comm: kbnepd bnep0 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 230.345945][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.356398][T11210] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 230.362985][T11210] Code: e0 a2 80 8c e8 c7 4f 8c fc 90 0f 0b 90 90 eb 99 e8 ab 8e cc fc c6 05 38 e1 31 0b 01 90 48 c7 c7 40 a3 80 8c e8 a7 4f 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 88 8e cc fc c6 05 12 e1 31 0b 01 90 [ 230.383250][T11210] RSP: 0018:ffffc9000218f720 EFLAGS: 00010246 [ 230.389317][T11210] RAX: eab0d72c40443100 RBX: ffff888012f34478 RCX: ffff88807974da00 [ 230.397568][T11210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.405794][T11210] RBP: 0000000000000003 R08: ffffffff81817e32 R09: fffffbfff1d3a614 [ 230.414134][T11210] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff888012f34460 [ 230.422300][T11210] R13: 1ffff110025e688c R14: ffff888012f34460 R15: ffffffff86386610 [ 230.430537][T11210] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 230.439459][T11210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.446439][T11210] CR2: 000000110c2a00eb CR3: 000000005d338000 CR4: 00000000003526f0 [ 230.454768][T11210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.463012][T11210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.471387][T11210] Call Trace: [ 230.474654][T11210] [ 230.477578][T11210] ? __warn+0x165/0x4d0 [ 230.482094][T11210] ? refcount_warn_saturate+0x15a/0x1d0 [ 230.487633][T11210] ? report_bug+0x2b3/0x500 [ 230.492384][T11210] ? refcount_warn_saturate+0x15a/0x1d0 [ 230.497924][T11210] ? handle_bug+0x60/0x90 [ 230.502616][T11210] ? exc_invalid_op+0x1a/0x50 [ 230.507285][T11210] ? asm_exc_invalid_op+0x1a/0x20 [ 230.512567][T11210] ? __pfx_klist_children_put+0x10/0x10 [ 230.518196][T11210] ? __warn_printk+0x292/0x360 [ 230.523222][T11210] ? refcount_warn_saturate+0x15a/0x1d0 [ 230.528760][T11210] klist_dec_and_del+0x3ec/0x3f0 [ 230.534488][T11210] ? __pfx_klist_children_put+0x10/0x10 [ 230.540124][T11210] klist_del+0xa7/0x110 [ 230.544662][T11210] device_del+0x2c9/0x9b0 [ 230.548992][T11210] ? __pfx_device_del+0x10/0x10 [ 230.554088][T11210] ? netdev_unregister_kobject+0x178/0x250 [ 230.559887][T11210] unregister_netdevice_many_notify+0x1ae7/0x2070 [ 230.566670][T11210] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 230.573683][T11210] ? trace_contention_end+0x3c/0x120 [ 230.578980][T11210] ? __mutex_lock+0x397/0x1010 [ 230.584010][T11210] ? rtnl_net_dev_lock+0x271/0x320 [ 230.589110][T11210] ? __pfx___mutex_lock+0x10/0x10 [ 230.594521][T11210] ? __pfx_lock_release+0x10/0x10 [ 230.599555][T11210] unregister_netdevice_queue+0x303/0x370 [ 230.605526][T11210] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 230.612079][T11210] ? rtnl_net_dev_lock+0x37/0x320 [ 230.617130][T11210] ? rtnl_net_dev_lock+0x302/0x320 [ 230.622625][T11210] ? rtnl_net_dev_lock+0x37/0x320 [ 230.627644][T11210] unregister_netdev+0x1f/0x60 [ 230.632661][T11210] bnep_session+0x2e4e/0x3040 [ 230.637573][T11210] ? __pfx_bnep_session+0x10/0x10 [ 230.642955][T11210] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 230.648839][T11210] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.655537][T11210] ? __pfx_woken_wake_function+0x10/0x10 [ 230.661459][T11210] ? __kthread_parkme+0x169/0x1d0 [ 230.666497][T11210] ? __pfx_bnep_session+0x10/0x10 [ 230.671688][T11210] kthread+0x7a9/0x920 [ 230.675748][T11210] ? __pfx_kthread+0x10/0x10 [ 230.680327][T11210] ? __pfx_bnep_session+0x10/0x10 [ 230.685555][T11210] ? __pfx_kthread+0x10/0x10 [ 230.690137][T11210] ? __pfx_kthread+0x10/0x10 [ 230.694777][T11210] ? __pfx_kthread+0x10/0x10 [ 230.699357][T11210] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.704789][T11210] ? lockdep_hardirqs_on+0x99/0x150 [ 230.709979][T11210] ? __pfx_kthread+0x10/0x10 [ 230.714969][T11210] ret_from_fork+0x4b/0x80 [ 230.719381][T11210] ? __pfx_kthread+0x10/0x10 [ 230.724235][T11210] ret_from_fork_asm+0x1a/0x30 [ 230.729014][T11210] [ 230.732286][T11210] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.739551][T11210] CPU: 0 UID: 0 PID: 11210 Comm: kbnepd bnep0 Not tainted 6.14.0-rc3-syzkaller-00704-g98f992884333 #0 [ 230.750461][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.760501][T11210] Call Trace: [ 230.763761][T11210] [ 230.766688][T11210] dump_stack_lvl+0x241/0x360 [ 230.771367][T11210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.776575][T11210] ? __pfx__printk+0x10/0x10 [ 230.781169][T11210] ? _printk+0xd5/0x120 [ 230.785318][T11210] ? __init_begin+0x41000/0x41000 [ 230.790367][T11210] ? vscnprintf+0x5d/0x90 [ 230.794680][T11210] panic+0x349/0x880 [ 230.798557][T11210] ? __warn+0x174/0x4d0 [ 230.802697][T11210] ? __pfx_panic+0x10/0x10 [ 230.807116][T11210] ? ret_from_fork_asm+0x1a/0x30 [ 230.812039][T11210] __warn+0x344/0x4d0 [ 230.816021][T11210] ? refcount_warn_saturate+0x15a/0x1d0 [ 230.821553][T11210] report_bug+0x2b3/0x500 [ 230.825867][T11210] ? refcount_warn_saturate+0x15a/0x1d0 [ 230.831406][T11210] handle_bug+0x60/0x90 [ 230.835551][T11210] exc_invalid_op+0x1a/0x50 [ 230.840042][T11210] asm_exc_invalid_op+0x1a/0x20 [ 230.844896][T11210] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 230.851036][T11210] Code: e0 a2 80 8c e8 c7 4f 8c fc 90 0f 0b 90 90 eb 99 e8 ab 8e cc fc c6 05 38 e1 31 0b 01 90 48 c7 c7 40 a3 80 8c e8 a7 4f 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 88 8e cc fc c6 05 12 e1 31 0b 01 90 [ 230.870631][T11210] RSP: 0018:ffffc9000218f720 EFLAGS: 00010246 [ 230.876681][T11210] RAX: eab0d72c40443100 RBX: ffff888012f34478 RCX: ffff88807974da00 [ 230.884636][T11210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.892624][T11210] RBP: 0000000000000003 R08: ffffffff81817e32 R09: fffffbfff1d3a614 [ 230.900585][T11210] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff888012f34460 [ 230.908540][T11210] R13: 1ffff110025e688c R14: ffff888012f34460 R15: ffffffff86386610 [ 230.916501][T11210] ? __pfx_klist_children_put+0x10/0x10 [ 230.922037][T11210] ? __warn_printk+0x292/0x360 [ 230.926818][T11210] klist_dec_and_del+0x3ec/0x3f0 [ 230.931742][T11210] ? __pfx_klist_children_put+0x10/0x10 [ 230.937273][T11210] klist_del+0xa7/0x110 [ 230.941418][T11210] device_del+0x2c9/0x9b0 [ 230.945737][T11210] ? __pfx_device_del+0x10/0x10 [ 230.950598][T11210] ? netdev_unregister_kobject+0x178/0x250 [ 230.956412][T11210] unregister_netdevice_many_notify+0x1ae7/0x2070 [ 230.962821][T11210] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 230.969568][T11210] ? trace_contention_end+0x3c/0x120 [ 230.974857][T11210] ? __mutex_lock+0x397/0x1010 [ 230.979617][T11210] ? rtnl_net_dev_lock+0x271/0x320 [ 230.984715][T11210] ? __pfx___mutex_lock+0x10/0x10 [ 230.989728][T11210] ? __pfx_lock_release+0x10/0x10 [ 230.994742][T11210] unregister_netdevice_queue+0x303/0x370 [ 231.000451][T11210] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 231.006678][T11210] ? rtnl_net_dev_lock+0x37/0x320 [ 231.011702][T11210] ? rtnl_net_dev_lock+0x302/0x320 [ 231.016797][T11210] ? rtnl_net_dev_lock+0x37/0x320 [ 231.021823][T11210] unregister_netdev+0x1f/0x60 [ 231.026568][T11210] bnep_session+0x2e4e/0x3040 [ 231.031268][T11210] ? __pfx_bnep_session+0x10/0x10 [ 231.036315][T11210] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 231.042191][T11210] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.048503][T11210] ? __pfx_woken_wake_function+0x10/0x10 [ 231.054124][T11210] ? __kthread_parkme+0x169/0x1d0 [ 231.059136][T11210] ? __pfx_bnep_session+0x10/0x10 [ 231.064147][T11210] kthread+0x7a9/0x920 [ 231.068205][T11210] ? __pfx_kthread+0x10/0x10 [ 231.072782][T11210] ? __pfx_bnep_session+0x10/0x10 [ 231.077791][T11210] ? __pfx_kthread+0x10/0x10 [ 231.082365][T11210] ? __pfx_kthread+0x10/0x10 [ 231.086965][T11210] ? __pfx_kthread+0x10/0x10 [ 231.091540][T11210] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.096740][T11210] ? lockdep_hardirqs_on+0x99/0x150 [ 231.101924][T11210] ? __pfx_kthread+0x10/0x10 [ 231.106501][T11210] ret_from_fork+0x4b/0x80 [ 231.110902][T11210] ? __pfx_kthread+0x10/0x10 [ 231.115478][T11210] ret_from_fork_asm+0x1a/0x30 [ 231.120234][T11210] [ 232.189798][T11210] Shutting down cpus with NMI [ 232.194690][T11210] Kernel Offset: disabled [ 232.199144][T11210] Rebooting in 86400 seconds..