last executing test programs: 6.888908562s ago: executing program 1 (id=2304): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0xc0c0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 6.644605681s ago: executing program 1 (id=2306): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r3, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4, 0x0, 0x2}, 0x18) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/78, 0x4e}], 0x1) r5 = socket(0x10, 0x3, 0x0) connect$pptp(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 5.686259421s ago: executing program 1 (id=2316): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) listen(r1, 0x5) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faa9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)}], 0x1, 0xc0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000740)=""/105, 0x69}], 0x2}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000600)=0x600000, 0x4) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @loopback}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xdfd182dcd395e7a6}}, 0x0, {0x2, 0x4e20, @rand_addr=0x60010100}, 'xfrm0\x00'}) 5.589281483s ago: executing program 1 (id=2318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x700, 0x10980c991f1008f, 0x7, 0x5d, {{0x22, 0x4, 0x2, 0x6, 0x88, 0x67, 0x0, 0x5, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@rr={0x7, 0xb, 0xc6, [@multicast2, @broadcast]}, @cipso={0x86, 0x23, 0x1, [{0x6, 0xb, "1de6a45f7559a2bb49"}, {0x6, 0xe, "41d0f4d349f496bdc8032b70"}, {0x6, 0x4, "980d"}]}, @timestamp_addr={0x44, 0x44, 0xf4, 0x1, 0x4, [{@rand_addr=0x64010102, 0x9}, {@multicast1, 0x1}, {@multicast1, 0x1}, {@remote, 0x7}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x20000000}, {@rand_addr=0x64010100, 0x9}, {@multicast2, 0x7}]}]}}}}}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000500)={@private, @multicast1}, &(0x7f0000000540)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x5, 0x9, {{0x24, 0x4, 0x0, 0x9, 0x90, 0x67, 0x0, 0xb, 0x29, 0x0, @remote, @empty, {[@lsrr={0x83, 0x7, 0x80, [@broadcast]}, @end, @generic={0x88, 0xd, "6a5b3d00eeeb04cb8eb067"}, @timestamp_prespec={0x44, 0xc, 0x95, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x54, 0x0, [{0x1, 0x4, "82d1"}, {0x6, 0x2}, {0x5, 0x10, "ac8f335b427ecbee4b9236029c8d"}, {0x2, 0xe, "4cdb75b290e9193fc89f8ae0"}, {0x0, 0xe, "4f1151b5c2f0fb770bdd802e"}, {0x5, 0x11, "e4f9586cf7ae8f49b7820836b946fb"}, {0x5, 0xb, "e949cea20692dd1e8a"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x10, 0x0, 0x9, 0xffff, {{0x1b, 0x4, 0x1, 0x9, 0x6c, 0x67, 0x0, 0x7, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0xb, 0x7c, [@dev={0xac, 0x14, 0x14, 0x27}, @local]}, @cipso={0x86, 0x4a, 0x3, [{0x0, 0x10, "6647c89cd5953812b287c6a6906a"}, {0x5, 0xe, "43c574c194a525285c6b8188"}, {0x7, 0xb, "b5564a48d4373891b9"}, {0x2, 0x3, "ec"}, {0x0, 0x8, "ee0281392680"}, {0x2, 0x7, "a6977140c2"}, {0x7, 0x9, "0744fbe4a2b52b"}]}]}}}}}) r4 = socket(0x2a, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newqdisc={0x60, 0x24, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0x4}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x7fffffff, 0x7, 0xe, 0xfffffff9}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0x1800000, 0x9, 0x9}}]}}]}, 0x60}}, 0x4008000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x2f, 0xe, 0x9, 0x5, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x10, 0xcd4f, 0x8}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r4, 0x0) recvmmsg(r7, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/65, 0x41}, 0x8}], 0x1, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) unshare(0x24020400) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) 5.270968991s ago: executing program 4 (id=2320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0xc815}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x68, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xfffffffa, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xf2170ccf84d7a71c}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) pwritev(r5, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0xa6a, 0x6361, 0x805, 0x19, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb942, 0x9, 0x1, 0x2, 0x9, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048850}, 0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001a00a800000000000000f61e5ac7494fc032b7512dcf589b9b65f4f59308d198b5eba852aca15965b4ba596c2d67a49cc9817c3f123a397fe5b292ea168a8a559e532797b3fc94d96f198e2067fb2d4abe02e03e6000"/102], 0x1c}}, 0x0) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, 0x5, 0x2, 0x0, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0x10, 0xb}, {0x3, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x140400a4}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 5.209071005s ago: executing program 2 (id=2322): r0 = socket$kcm(0xa, 0x1, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000f00e8fffff92fc086a1c9ff05", @ANYRES16=r0], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) (async) clock_gettime(0x2, &(0x7f00000001c0)) r3 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0xc0) ppoll(&(0x7f0000000200)=[{r3, 0x244}, {r2}, {0xffffffffffffffff, 0x8001}, {r3, 0x100}, {r3, 0x4000}, {r3, 0x1200}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x611]}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0000000000100000240012800b0001006d6163736563"], 0x44}}, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCRSSCAUSE(r6, 0x89e1, &(0x7f0000000100)=0x77) 5.110947739s ago: executing program 1 (id=2323): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x200, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008850}, 0x4052) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000200)=@newtaction={0x5c, 0x32, 0x1, 0x0, 0x25dfdbff, {}, [{0x48, 0x1, [@m_police={0x44, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a9972b1cad205dfdcf3b732a9359d8df71"}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000006892bec7d9b057aa7041b78e2242"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0xffffd000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x31, 0x0, &(0x7f0000001840)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, &(0x7f0000000100)) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x15, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xce}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x65, 0xa, 0x2, 0x81, 0x140000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) 5.085020914s ago: executing program 2 (id=2324): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x4000}, 0x18) ppoll(&(0x7f00000010c0)=[{r6, 0x2000}, {r3, 0xf54a}, {r0, 0x400}, {0xffffffffffffffff, 0xc4c4}], 0x4, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x1}, {}, {}, {0x9}, {0x4, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x400c404) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 5.076486889s ago: executing program 4 (id=2325): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}}], 0x1, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xdc}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 4.851047887s ago: executing program 4 (id=2330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r6, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r9, 0x0) accept4(r9, 0x0, 0x0, 0x0) connect$netrom(r9, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) read(r2, &(0x7f0000000200)=""/26, 0x1a) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000021000000000000", @ANYRES64=r8, @ANYRES64=r8, @ANYRES64=r8, @ANYRES64=0x0, @ANYBLOB="000000000100000500000001fcc057acc84083ea39fe010000c6e839"], 0x48}, 0x2, 0x0, 0x0, 0x4004}, 0x20000080) 4.774510789s ago: executing program 1 (id=2331): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bc2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xffffab4f, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x6, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x1, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x85e, 0xfffffff9, 0x10, 0x6, 0x1000, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0x5, 0xa9, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x2, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x1020, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x100, 0x2, 0x3, 0x10001, 0xffff, 0x51, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800027350000007500000095"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000010, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4b, 0x40}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.396210388s ago: executing program 32 (id=2331): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bc2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xffffab4f, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x6, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x1, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x85e, 0xfffffff9, 0x10, 0x6, 0x1000, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0x5, 0xa9, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x2, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x1020, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x100, 0x2, 0x3, 0x10001, 0xffff, 0x51, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800027350000007500000095"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000010, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4b, 0x40}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.379228452s ago: executing program 3 (id=2334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7}}, 0xd, 0x7fff}, &(0x7f0000001040)=0x90) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x299a, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x3b, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x5}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x5, 0x4, 0x2}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r14, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r13}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r16, r12, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000d00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "d5e09e", 0x44, 0x2f, 0xff, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0xe, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0xb}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x1, {{0xf, 0x2, 0x0, 0x3, 0x1, 0x1, 0x0, 0xa}, 0x2, {0x5, 0x200, 0x2, 0x9, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r17 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r17, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 4.065709947s ago: executing program 3 (id=2335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x9, 0xffff, 0x100, 0xf, 0x7, 0x2, 0x9, 0x3}, &(0x7f0000000040)={0x7, 0x1, 0x100, 0x6, 0x1, 0x40, 0x101, 0x7fffffff}, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x3f2c, 0x5e36, 0x10001, 0x6, 0x8}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x100000001]}, 0x8}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f, 0x5f, 0xa0]}}, 0x0, 0x31, 0x0, 0x1}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0x50) 3.891290856s ago: executing program 4 (id=2336): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x44, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x30}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') unshare(0x22020600) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="d800000018008106bc65f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400100004c230000fab94dcf5c04e04bcb726f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdfd809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97010000000000000000", 0xd8}], 0x1}, 0x4004010) r7 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000540)=@req={0x3, 0x7, 0x7, 0x6}, 0x10) socket$rds(0x15, 0x5, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r8, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000801) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r9, 0x0, 0x48040) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r3, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x24}}, 0x0) 3.791150759s ago: executing program 2 (id=2337): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$rose(r0, 0x104, 0x2, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x100, 0xffff, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="5acb66cf94c78f5dcb10169afbd4cd56bc5dcaaf42e5cdec57d051469d39722156ca97c4dc9598d2614a86d9aef36c8c342c0cfa4d7f5159f7c1275baa74d6cabeb2b2e7890fc2f5a0827364c43a08b180a60c8066dbe7cd3a18d80b020023bdde5c654476352dec336af7bec210cbb153a3266794f0a6c70ca1f94036b3406e807774291c26ab7c2057286f74ce7d382a1d0934c2f317e92e739fdf11dde4006e2a35185c9ecd206ab439fdfd364ddb06a0b422583275f496fbba459b400fde6ded88ef5e6ebe12d4c5d30a71fb96b9bdab0cbd47090e30e4e41705431fbdcecdbc97a2b2e0b56dd454ad402b5c70ff9d17140d5201fa8d6c9e7824341dd444d0d12d4b04ad11cc77cbc87b19bfc369754b4ff536f49b8767a66973a674c1cfb63b46a6f83a920678d1600f11cb4402a5347491bb896470ac6549bb34b27def9071b9fa0fa22281b76e42a08240171649c1f15b7f509c951003320651fb71fc96ed2a0d6d87c8b956cf25965c8f2b91c66e26e3134cba0a1f62c1c081c0e516935a446c458445c00eb621b91b5540ada1cf8f6387b1ef8f85e00769662979ed044aa03953cd9277263bd19d3d6a4f20bdf5f125136403163c15cb14f1772dcfc7492d2ca5e7d1859e388f347f3e25e6d97eca546c9eeb5dc1e7aa5210d792d361f71c74f8fef134d635e8f7adaf095971164e92661f51394ecd93613c6409d6ec4d3132a3b92078e574629a135cf85bd2369aba34e761b8c3e90d3474f31123e7d98a400bffc7b3c10c0feb4ae8f9d4d89db14dc99cf7d1a9276580ba026e2ec6d14f1f72906a1d514ce34f4f264bcf2584df9d2966155477faf725204e2072e2b09185220fad67a5279d2eda1e512d5a609d6df23b741f8aa816c2cfcfb0825b5d320278ab1e1c54a63b70b4ee4d19439f5492ec97dd3c813612cb2df220ff6054b6187249a78f12f944cca36fdbf99410ca07143b9bcd8fff47d49e61272d7d233a675a4151378134d38e25bd298072edb0c21d4cafde279878c6e7c0aca65e4ea7e77b171b0bb5e9571e218e0fbdf06b2cdf670fe81fa77615fad491af7883a72eab31343fbced88cb909889401076a0708a6518aeb674a0bafdda223a66495a25f928f3f9367d96f37f300badcecef396d14a1a30ab98d912530b07b6c691703f632e7f09cc26576890dd2a010c46dbdea1206d1dd7bcc970176d246a1ba052cfe34b3a338d20407510e4e4b895bd31a6c77abe96150d0f9a43a29cee0869a00795a88542edf1eab8288d14d155b6cfefed8cdc1ccb819d62702232dddd8bfd9a64350e1895aac3d6950c45086ac151af36690edeb892450095c7146b71e6bf1d388eddf4f29db595a363c9f2ee9ba4064db4154b709a42f5554f0ad3bcdab75af647620cbe954852941b276e4e75edb12e986aa7a0ecbc52be489a7b140891a47facfa860f5b7913536424b26d6d75cc4210344a7cd1b99dbd07c5590759a4cd1571369e4def04d43a3bff0914e413af92971450bb1e28e90457c3df0ec6eb678fd03c4e07e181d0bf02156128dde002a5837fb8589ab9b9a4f5e700ed59780d815b40e6034c1e63837466803d513b0d04cbacf3f6762e74ea04f5079f6f4872b2c7417258221cfbe52b9c71c7a51aeed0319f57eb14566b722afc43982606ee627df7fa6d1764edb2966d0103626a9ac3ca4b638f8fa2e9f7e42cb7ea1a53d7d245177584df3073dab41941c6d1832c107302fc7f9ab4776572144b4d4ccda77ff9d331a017d6b2a9439c24165c2f4a468d259e8ef4a7147f863c27cea32c0624783ffab99a3189f62d23930f24d298b9ba48c8160ea24eb2b48c513090a8dd2683616cccb1a447c37a3145ccf50a67ea612114c5e668cabbfbe8a667628cfa2baab32005a475460a926780cf79f3cacf9eb85cf67df77ba551b28de5cf0b8b34dac23ba5e1664a512d35f7778ec902739a09f75aa3071b3da6afccc997773436f7c5e3718d6aaea5f6b1c4d6930619bcccf7ed0a31347006ece2620237e57d1d4f3a6c7e427ce7489c2c08897305a70fcf9acfb636877c5bd60189a155314ee5fefed884d005b3cddb9cc2751bc11b5290dc2c829379731577a221aa67d918d496b5efed6a52dc057a446a021d3cba335c159eb23d7946d5dc217aaf14f6937f55a6bb4952cb3d20c48ea6e81f53636f3357f78dfe9ac6500a99947ace420b2796af3a66cba446b27ca67aedd497f5913ccfd2070fa6fa96cd4eee20835001af4c6edfa90e38fce6e369371b5514bb929651540cc2f7348ea50e7b88611d7277ca24c7b770914ae0c9041ffb5a9c4e9c69243f0c5e7e235216873d501c5bdf74a93856e65e7841573dafc3b0dd470acc4a48800299776f0668d5c08bc2fa95eaf91bfecf8c01f4721c4e0a40e33a8b009c08930637fb21dc2f9d1a61018086024fb69e1bd49a0bf1c1563edadd62361992f1f54fb345efb7c3e33b31bd8d73e39303344f9f8f5e9fb1e869c7c555a94a74eda10444d5c50701bddc91080c9e382b5683b5172b2bdc42dd24dc1aaeba5ecbb8364beb3bc2214d7c79c13cf625a987a9dbd6be71757a694c5f66fefb527f29922ed41a430ab8c6c7f4c7bb7b16ef646d6fe9ddc2503e33f2654a4fcd978ed4ebfcd35123b783220b37da485b3833d2900bee3d4bee61b2391e9f5bf9d62dbf923bd65abe43ff6c1a34b0a338c3d1fdd5f1f0b1a6419d835b53335b83454095befe3c4f29343c40e316253dd772b47f6a4d2577e082016de8a53a7e8cca34a255117bc607a64624a934da4c6f6e65c3d8ad746c814d4f122615a82b04f3210c46114223f0d8b1a08e20d65211982dde766382ba62eae56988b9ce38d74a3fda810d658410954b8114eba0ad4372f985e16be4802c1d61340a474f96b01b6ed3fa0dba3d948602decc7f7a0e6894b85da33c06509e099ebd0ff194825748b685b42c6f503287ec1d8bf7c63f17d0e93519809827f74884fd31ca120376af72050320ad6323972d5fada27940e34dec3590344e9f8e447c12c8f4572daccb6c8aca1e0989049cf8fa46b3ede266206ddcfaf9067aa070bfa6e708084798c9ffa0cfdd0097ac3d0feb717bd6835c3392af74680d744b0f18a677ff6c3af86a0806d376101dab6f270fe8700658f10494586a0c810d11e76f4a44a48e769a0bd78a03e50cf390d463d6507731030a789d59632d70ba64481661633efd1d5cdde3755e78fcfa296852bb2a147bc9cec1435ad9509a677982b29a8c55ceda38440f0118e7a3e0a2094dff4e6b48cf1cb36b247116e155498548591ca65cdd448227aa52f3ef4c4056cc82f941ae22f53adcb9ba03cbfeafd139d48653bc1ce96144d7d61dc56eecff4a42d9c2d31fa1aedac988b937d88f00da0a838abc28fb4218a46bdb208a62af91f88b89304e5255521566a0dc7bff7f06455aacb1e835e64a000bce1349855937879aaec3845e872e6d10b9bac2e8ea700150bbcba41aeb077dac48ba302ccf3123dd5148c8722c3d9911c2b45c0b0d21602d88cb002f1fc427934066405010548a7ff447c7396b09ad7bf397b2342d57bf2983d3b5494b0d5b58a07c99eea188f977897cd58f105c4dc384f0dc7d2ad53b60649208940263986c5517a10ebfa75bce66a13e499d07e8af8d54252df11b7414f6974cc33ebfb235b339d22dfb26d679f2f86e7671609e0dd5ad513726c0553bc879856c34155ec71f88db94fa534ec02600ff8ee3e62542bb9ef18b4e3354892858833a1082d5d643f6cc5f91dea68afe9925bdb49fbce1722cbf93006da1e9200b879609db0641d5f10e02eb9c923d20ecc9b81e1b6480a4f60b9209566851adb23933d18c318dbd1dde5a15491ea3cafcaff2072097b2fbe74875a8e1fa17347ef494dfb707b81b4bb8f8040867141a6a32209cfbbe209aba07b00fb63b92873ce090390cd98a7c8b43ef4419c83b00072fe8dbfa82c46514c8a80647fff9e4c37440981630c3d3a19c4ba43abdab66bd840d285bcda5ee6228897d0aebff5ddd3b4a20270bcdbb80e4f991c76cec46faa2c5619823dfa56d9e1a435c8a15770f554b59e7bf160acfd7b989e1ea69b7924746b08fefaf6187015e4694e0a38f0138439ee4ff0de69b40fbd94e81c0d2f87536a634f3ecb8984052a7ebfb4de6dbdda7e45ff1afd0be6c155f8266e2974201c273c2950a0dd3a0e03cc022e5f93dd52afdf5f2814612e30adc4c2f2a25cc54e80e9a15ebc596acde3420cda960f2f8f10bab8b73d28549f806a06d844782d14ae6f41da894964a37fe496214c6039f186b9c078d34e44060e79751ea560c9a67bfa61c93443e732e60466a8407a5221af058a7cb7e964197da2a245042ac36a07d3228f27830aca96c0568457766eca3d150ee0e0c2eb339dd0889e0462416a653cda3fe656eb5125150f0f0bffb43edd3bdf0c35c3e5c3fa23dd414914d9f65a8a6aa4306e64c028ec5424ffcc02649aa49fc44c60395c105a1634644cd4bd64b86948c620cc931174d6278571ebcb3f65869a7268ac53b787d64ed4554514f08826dc65d22f592d5b5be2f5b1daf36d7d28ab592e9679b348a8049e6f9cbb8112338ad20389e313e30d55782a807646ae47058e191f53ebddaaacb4285afac90c78cfe9f92184a66a88a8d8fcf19da26ed35f299a39936d4918683018fbcbe33cf1dac833f764ab64fe9fe9c8f3f6bf4f133d9b0239989777fe93481b698293b880ba2b2c70bea79d44159cf3740155785ea433d3028b0b2d41a83b0aa87889f907089c913dec3ef199b111c27b54fb32c581f8aa95ef92c1a8bf1f7eee41ee8558156d825e76387a137b8d7068d387cd86a7ee4a332f13c4c71a90c80cd4ea478eeeaa7ef8c13cbf1a1c0237f176bfe5654500d47055af98339a872f9e31d4b19380f15c4a509970293dcfd9aa0aa37c799779634dc7f74c01e76c1a2645fc5c681ec3c9447ad2f142e104b1f3d6a9d11301f496133777fc0f0a750f7dfad985ed028f022e39d29b82791a6202d930b81775dbc0ba778cdcd8a22cf91918d9dbcf842c53983d5f7f77680c0d6bab9b4265164bf664a5296e5790ecaf0784d050adcf8705d01cda945284a2679a7a3d5c7fbde27fcc0128be65889dca081270a752d7fd9886827fa15e9e08650c2f325a71da46d0973c65a4103f11db78f74f6cfbf9d5efed7be3f969e92961a09d4778f20ffec19bdc28dacf279650ea70b6aa4cae2ae914c9ff7a591e810f9239f9f9386fa185a286a1b55d1e7e43a266b39a155b9bfc25956aae973f8a4b6e7b6da3bdc954e720447476c16242a9d004951e10aa05ee3366b44b60f1a36e7ec0ea9c10b48efd2554d4e935a72dd96f689f0329d932b12924ac5e23948c60cabd6050206f6b3b65e5c1b8ea66de5f87035167848d57fb19e7d2d8bfce53f7fc7685f28718a2b2cd4b86078405d7a8c8fcbdcedd3729c5d9888836b3dfcb6d154e2317662be8a659bbfa854116ad0d626376b61c59a703f4626ba1573e858f57ba8153f67c62272bf3cb98199ea70420ef6c24253a1e4e4532915433fa0815d22836629a970c0f7874f3e29cb20482e43455c8231d3c7f8033696ce05c1b0a624fe9054e70813d741ff74122842929782c32f0f1d4f0ef71d1883b666ee0f998ad99792c1e0621dbc867136db6be788d4d00c5b92b5ba35d58be97e24ee2ab7d57c21bc60ef4390d473b7b55f1c9b0436918697acb2377ce5203fef537ef2f502f4e04482abda316c8bcefe8bac42aa", @ANYBLOB="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"], 0x0, 0x2a, 0x0, 0x5}, 0x28) 2.986348603s ago: executing program 3 (id=2339): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000000)=0x100000b3, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000840) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf250c0000002800ff801c0002800800030000080000080004003c00000006000200be0d00000800010075647000"], 0x3c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071107d00000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r7) recvmsg$unix(r6, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x0) close(0x3) sendto$inet6(r8, &(0x7f00000002c0)="ed1afe65", 0x4, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) shutdown(r8, 0x1) 2.954877719s ago: executing program 2 (id=2340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x48) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207baff8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.524600887s ago: executing program 4 (id=2341): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000032f0dbd39500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1900006e294d0004000000040000d3412c0500a3496daf1e2aba002f6a0000000000007f89704f3f89845d675a6b842b356e71d9222419fc1c066f12ec2f3c4631b73e02a8ab5053aac51908dd44b6a98edf06c6dbde5bedd1565f3c7a7fbd6ef3edc25ed06409a15d6af5107d0d9122c8e41545e16abcab11946e37dde5c8f21e8d3b4eb78fb8a6b4427d544e3c9ddda0b3683964ea2849ebc6b314ae80238e5631b6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd2d, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000f40)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x2}, @device_a, @broadcast, @from_mac=@device_b, {0x2, 0x8ed}, @device_b}, @random="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"}, 0x320) r8 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x48800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8000, 0x1a1, 0xd, 0xd, {{0xd, 0x4, 0x0, 0x14, 0x34, 0x68, 0x0, 0x8, 0x2f, 0x0, @local, @local, {[@lsrr={0x83, 0x1f, 0x11, [@local, @private=0xa010102, @broadcast, @empty, @private=0xa010102, @rand_addr=0x64010100, @remote]}]}}}}}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, &(0x7f0000000580)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r9, 0x29, 0x9, 0x2, 0x9, 0x2e, @mcast1, @private2, 0x80, 0x40, 0x2, 0x9}}) write$nbd(r8, &(0x7f0000000d00)={0x67446698, 0x1, 0x3, 0x2, 0x2, "b779edf13b78b671e2849b506d33fd79cda99bb6c8c076ce48ea70180b04a15593e0cbd08ca3098466b02f30bb4f048559a40be954cae9d733b8e83e23693da2f5b94ae7cb2cebd4fff40f833e0eefe53dad64"}, 0x63) 1.398661724s ago: executing program 3 (id=2342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000c090000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r2}, 0x10) (async) socket$kcm(0x29, 0x0, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x10, 0x80000) setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000280)=0x61b, 0x4) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 1.298130598s ago: executing program 0 (id=2343): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000040005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000100), 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x20050800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) 1.297627948s ago: executing program 2 (id=2344): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000014000200776731000000000000000000000000006400088030000080ff0005000200000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b30000080080003000100000024000100d1732899f611cd8994034d7f413dc957630e1493c285aca40065cb6311be696b"], 0x8c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18060000000000000000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="3d000e"], 0x8c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000001340)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001940)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x598}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)=ANY=[@ANYBLOB="263ebff7a6e65ec74be61fae00a682b544d9e0f672b9efb22e7f0008c5aad8", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25530000000c009900870600004b000000"], 0x20}}, 0x41) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001900010025bd7000fbcbdf250a801400ff0100040036000008001e000600040070b937cd08001700"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000a00)={@mcast2, r9}, 0x14) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r11, 0x5452, &(0x7f0000000040)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 1.182815679s ago: executing program 3 (id=2345): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r0, 0xba, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'\x00', &(0x7f0000000280)=@ethtool_ts_info}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c006600003eb426409208d40a28001190780a010101e000000100004e2000089078"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="080027bd7000fbdbdf25620000000600b400bf080020"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x22000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r6}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x1b, r8, 0x1, 0x0, 0x6, @local}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$packet(r7, &(0x7f0000000000)={0x11, 0xf6, r8, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.028861358s ago: executing program 0 (id=2346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) socketpair(0x1f, 0x6, 0xff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x24000044) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 844.969ms ago: executing program 0 (id=2347): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0xfff9, 0x83, 0x0, 0xf8000000}, {0x6, 0x5, 0x0, 0xfffffc}, {0x8, 0x8, 0xf, 0x84d}]}, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 626.209297ms ago: executing program 0 (id=2348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x92}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0xc3000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x16604, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000380)=[{0x2, 0x1, 0xd, 0x7}, {0x3, 0x1, 0xa, 0x8}, {0x3, 0x3, 0xa, 0xa}, {0x2, 0x5, 0xc, 0x2}, {0x0, 0x5, 0x3, 0x3}], 0x10, 0x400}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba88", 0x4}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 502.858721ms ago: executing program 0 (id=2349): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20040840}, 0x80) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008014) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000480), 0x2, r4}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x120, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0xd8, 0x120, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff, {0xfffffffffffffff7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4e, 0x6, 0x5eef6840, 'syz0\x00', {0xb}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0xffffffff, 0x101, 'pptp\x00', 'syz1\x00', {0x333}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x10, 0x20, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @multicast1}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000cbb50200200012800b00010062726964676500001000028c0c002300ffff000000000000"], 0x40}}, 0x28000000) 497.617177ms ago: executing program 4 (id=2350): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0500000004000000080000000300000000000000", @ANYRES32, @ANYRES16=0x0, @ANYRES32=r2, @ANYRES64=r0, @ANYBLOB="0000f8ffffffffffffff000000d0ebac87c5a07a6a000000000000fb587200"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={r3, 0x58, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000005c1a00009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r4, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x7, 0x5, @dev={0xfe, 0x80, '\x00', 0xe}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x7f52, 0x8}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b000000000000000000000002000000000000", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000a00)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x20, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0xc0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x24008040) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000a40)={0x3, @default, r7}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r13) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0xfffffffffffffffc, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40498c0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES16=r0, @ANYRES8=r6, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x24000040) socket$inet6_udp(0xa, 0x2, 0x0) 187.181259ms ago: executing program 3 (id=2351): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x22}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf, 0x1, 0x1}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0x7ff}, &(0x7f00000000c0)=0xfffffffffffffefe) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd29, 0x25dfdbfe, {{'gcm(aes-fixed-time)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x80) 175.579035ms ago: executing program 2 (id=2352): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r0) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80c00) getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x402d9f6a0c91e1ae) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x4000010, 0xffffffffffffffff, 0xfffff000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b800000010fc38134f9733200000000000000000", @ANYRES32=0x0, @ANYBLOB="01980400000000001800128008000100736974000c00028008000300ac1414bb"], 0x38}}, 0x0) 0s ago: executing program 0 (id=2353): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000140)="be", 0x1}, {&(0x7f00000007c0)="fd7342df67a7038b50c266b4c1c87f15e4f56b9678edf2e32633752b84f51f93bbfc1730c0007c5c456aeb3d77b23da7179264021ae76f96b63ab163cbb569148c271aba3f83b6de5f7c728fcfa3035f558f248c27208ca107b3f1737d04707e3f101b6501ab6f55ae0bf28f77dcc9aded52f28b6f96609dfc85333a21cd69ca66700af5e849de2290f6e496424aef7906c8e18e382953bae48c630236188ad81445af951ad42b46596c06ac49ea890ebe669cac084f601f37381f830c21ef61cba71599", 0xc4}, {&(0x7f0000000540)="be2dbc770689940447e2dbab724e69e88d932946c0870d72590ba6727cb1a38bc1f156a51d549fe45dfa7d1a26", 0x2d}, {&(0x7f0000000a00)="041de16758f43fcf75f83bbd54944416b9213f95d974a528020571695657b272ebd405be5d9298d3852bfd6a27b7ab627f89903cef993e47c02bec367e6c7ae1a5b1e0bac2d43e8ce1c41e931e150154a3dcede575c72dcadbe10947c2aea03eb7379fa2aac0aa8f346066aa710389ee9e2e21b250ebfd659d5a34bf7fb255e1e347d1b00e44f3e8dc9325a971504eadcaa9076e5652c3fbc389d1d0d581ce83c52f95946f89004a086537c037baaaae2f8809a91e68930caaf7ec5e670366bb2c71d845bd88a7d2f010b108c7a9d6a5cb6fba1ee17d50b4d4477c5bc684ef8b15ac0733943a76cf4c74ef", 0xeb}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="10000008000000000000007405000000"], 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x8, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', r5, 0x8, 0x7800, 0x1, 0x7, {{0x12, 0x4, 0x0, 0x2, 0x48, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x0, [{@local, 0x2}]}, @timestamp={0x44, 0x7, 0xe2, 0x0, 0x0, [0x5, 0xffffffd4, 0x100]}, @generic={0x44, 0x12, "3e51a23416da2159470f02c1de3001a5"}, @ra={0x94, 0x4, 0x1}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000026fd00002b11", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4000800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0x0, 0x0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000200100001080000000000230000000000003499f2d4100ef7bccb2dbb8ccb80b481408f1f7ea00da7c5ec8be21656075df2e6be5124ff25", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) kernel console output (not intermixed with test programs): ] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 159.293662][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 159.388439][ T8315] netlink: 'syz.1.605': attribute type 10 has an invalid length. [ 159.406349][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 159.440507][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 159.464006][ T8311] lo speed is unknown, defaulting to 1000 [ 159.959373][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.230867][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.230881][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 160.308896][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.375180][ T8326] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.438066][ T8326] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 160.608074][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.626268][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.635625][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.644384][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.664148][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.676059][ T8326] wg1 speed is unknown, defaulting to 1000 [ 160.798302][ T8341] netlink: 'syz.1.611': attribute type 29 has an invalid length. [ 160.833153][ T8341] netlink: 'syz.1.611': attribute type 29 has an invalid length. [ 160.926583][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 160.970005][ T8343] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 161.049312][ T8343] erspan1: entered allmulticast mode [ 161.224678][ T8351] netlink: 'syz.1.614': attribute type 12 has an invalid length. [ 161.399168][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 161.508430][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 161.864544][ T8371] bond1: entered promiscuous mode [ 161.872241][ T8371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.903993][ T8375] netlink: 'syz.3.625': attribute type 7 has an invalid length. [ 161.950695][ T8377] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 161.960507][ T8375] netlink: 'syz.3.625': attribute type 8 has an invalid length. [ 162.026327][ T8371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.092519][ T8371] bond2: entered promiscuous mode [ 162.109454][ T8371] bond1: (slave bond2): Enslaving as an active interface with an up link [ 162.380203][ T8392] ip6erspan0: entered allmulticast mode [ 162.399049][ T8393] netlink: 'syz.4.629': attribute type 33 has an invalid length. [ 162.487164][ T8393] lo speed is unknown, defaulting to 1000 [ 162.711227][ T8410] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 163.125313][ T8418] netlink: 'syz.0.632': attribute type 11 has an invalid length. [ 163.149493][ T8418] netlink: 'syz.0.632': attribute type 11 has an invalid length. [ 163.290307][ T8393] wg1 speed is unknown, defaulting to 1000 [ 163.362908][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.315784][ T8446] siw: device registration error -23 [ 164.525722][ T8448] syzkaller0: entered promiscuous mode [ 164.531625][ T8448] syzkaller0: entered allmulticast mode [ 164.587001][ T8448] __nla_validate_parse: 7 callbacks suppressed [ 164.587021][ T8448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 164.660739][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 164.765462][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 164.928405][ T8471] hsr_slave_1 (unregistering): left promiscuous mode [ 165.656536][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 165.695511][ T8516] netlink: 252 bytes leftover after parsing attributes in process `syz.3.664'. [ 165.713125][ T8516] net_ratelimit: 57 callbacks suppressed [ 165.713145][ T8516] openvswitch: netlink: Flow key attr not present in new flow. [ 166.070227][ T8527] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 167.263222][ T8513] bridge1: entered promiscuous mode [ 167.263246][ T8544] FAULT_INJECTION: forcing a failure. [ 167.263246][ T8544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.268694][ T8513] bridge1: entered allmulticast mode [ 167.281900][ T8544] CPU: 1 UID: 0 PID: 8544 Comm: syz.0.671 Not tainted syzkaller #0 PREEMPT(full) [ 167.281927][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.281986][ T8544] Call Trace: [ 167.282022][ T8544] [ 167.282051][ T8544] dump_stack_lvl+0xe8/0x150 [ 167.282153][ T8544] should_fail_ex+0x414/0x560 [ 167.282248][ T8544] _copy_from_user+0x2d/0xb0 [ 167.282325][ T8544] ___sys_sendmsg+0x158/0x2a0 [ 167.282409][ T8544] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.282585][ T8544] ? __fget_files+0x2a/0x420 [ 167.282651][ T8544] ? __fget_files+0x3a0/0x420 [ 167.282740][ T8544] __x64_sys_sendmsg+0x19b/0x260 [ 167.282824][ T8544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.282921][ T8544] ? __pfx_ksys_write+0x10/0x10 [ 167.283007][ T8544] do_syscall_64+0xec/0xf80 [ 167.283080][ T8544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.283134][ T8544] ? trace_irq_disable+0x37/0x100 [ 167.283214][ T8544] ? clear_bhb_loop+0x60/0xb0 [ 167.283278][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.283332][ T8544] RIP: 0033:0x7fad3c38f749 [ 167.283377][ T8544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.283451][ T8544] RSP: 002b:00007fad3d228038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.283531][ T8544] RAX: ffffffffffffffda RBX: 00007fad3c5e5fa0 RCX: 00007fad3c38f749 [ 167.283581][ T8544] RDX: 0000000020004000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 167.283615][ T8544] RBP: 00007fad3d228090 R08: 0000000000000000 R09: 0000000000000000 [ 167.283649][ T8544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.283681][ T8544] R13: 00007fad3c5e6038 R14: 00007fad3c5e5fa0 R15: 00007ffe5b439ca8 [ 167.283770][ T8544] [ 167.472626][ T8513] team0: Port device bridge1 added [ 167.478198][ T8518] bridge0: port 3(team0) entered blocking state [ 167.495992][ T8518] bridge0: port 3(team0) entered disabled state [ 167.507481][ T8518] team0: entered allmulticast mode [ 167.512669][ T8518] team_slave_0: entered allmulticast mode [ 167.522805][ T8518] team_slave_1: entered allmulticast mode [ 167.532980][ T8518] team0: entered promiscuous mode [ 167.538279][ T8518] team_slave_0: entered promiscuous mode [ 167.575577][ T8518] team_slave_1: entered promiscuous mode [ 167.583948][ T8518] bridge0: port 3(team0) entered blocking state [ 167.590680][ T8518] bridge0: port 3(team0) entered forwarding state [ 167.607753][ T8508] pim6reg1: entered promiscuous mode [ 167.617825][ T8508] pim6reg1: entered allmulticast mode [ 167.700906][ T8533] lo speed is unknown, defaulting to 1000 [ 167.879022][ T8559] mac80211_hwsim hwsim4 ;: renamed from wlan0 [ 168.189218][ T8574] validate_nla: 2 callbacks suppressed [ 168.189238][ T8574] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 168.227049][ T8574] netlink: 96 bytes leftover after parsing attributes in process `syz.3.682'. [ 168.236003][ T8574] netlink: 1 bytes leftover after parsing attributes in process `syz.3.682'. [ 168.286169][ T8574] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 168.332473][ T8574] netlink: 634 bytes leftover after parsing attributes in process `syz.3.682'. [ 168.341766][ T8533] wg1 speed is unknown, defaulting to 1000 [ 168.356116][ T8578] pim6reg1: entered promiscuous mode [ 168.362328][ T8578] pim6reg1: entered allmulticast mode [ 168.904283][ T8594] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 168.940919][ T8585] lo speed is unknown, defaulting to 1000 [ 168.950864][ T8594] netlink: 224 bytes leftover after parsing attributes in process `syz.3.688'. [ 169.421951][ T5980] IPVS: starting estimator thread 0... [ 169.507745][ T8585] wg1 speed is unknown, defaulting to 1000 [ 169.549108][ T8619] IPVS: using max 28 ests per chain, 67200 per kthread [ 169.659637][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 169.725891][ T6453] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.809666][ T6453] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.827016][ T6453] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.844077][ T6453] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.318974][ T8649] trusted_key: syz.3.706 sent an empty control message without MSG_MORE. [ 170.390177][ T8650] x_tables: ip_tables: osf match: only valid for protocol 6 [ 170.570089][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 170.608189][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 171.038267][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.716'. [ 171.982412][ T8689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.349401][ T8727] GUP no longer grows the stack in syz.4.726 (8727): 200000002000-20000000a000 (200000001000) [ 172.361275][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.4.726 Not tainted syzkaller #0 PREEMPT(full) [ 172.361304][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.361318][ T8727] Call Trace: [ 172.361326][ T8727] [ 172.361335][ T8727] dump_stack_lvl+0xe8/0x150 [ 172.361369][ T8727] __get_user_pages+0x2465/0x29f0 [ 172.361424][ T8727] ? __gup_longterm_locked+0xc63/0x1660 [ 172.361453][ T8727] ? down_read_killable+0x1bc/0x350 [ 172.361490][ T8727] __gup_longterm_locked+0xde4/0x1660 [ 172.361534][ T8727] ? sanity_check_pinned_pages+0x123a/0x1300 [ 172.361571][ T8727] gup_fast_fallback+0x1d26/0x2290 [ 172.361599][ T8727] ? __lock_acquire+0x6b6/0x2cf0 [ 172.361661][ T8727] ? __pfx_gup_fast_fallback+0x10/0x10 [ 172.361689][ T8727] ? __lock_acquire+0x6b6/0x2cf0 [ 172.361708][ T8727] ? look_up_lock_class+0x57/0x110 [ 172.361738][ T8727] ? pin_user_pages_fast+0x4d/0xb0 [ 172.361768][ T8727] iov_iter_extract_pages+0x35f/0x5e0 [ 172.361806][ T8727] extract_iter_to_sg+0xe46/0x24e0 [ 172.361844][ T8727] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 172.361863][ T8727] ? do_raw_spin_lock+0x121/0x290 [ 172.361890][ T8727] ? lock_sock_nested+0x6a/0x100 [ 172.361914][ T8727] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.361955][ T8727] ? __asan_memset+0x22/0x50 [ 172.361987][ T8727] hash_sendmsg+0x4f4/0x11d0 [ 172.362026][ T8727] ? __pfx_hash_sendmsg+0x10/0x10 [ 172.362046][ T8727] __sock_sendmsg+0x21c/0x270 [ 172.362077][ T8727] ____sys_sendmsg+0x52d/0x820 [ 172.362105][ T8727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.362135][ T8727] ? import_iovec+0x74/0xa0 [ 172.362160][ T8727] ___sys_sendmsg+0x21f/0x2a0 [ 172.362185][ T8727] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.362212][ T8727] ? preempt_schedule_common+0x83/0xd0 [ 172.362232][ T8727] ? preempt_schedule_thunk+0x16/0x30 [ 172.362272][ T8727] ? __fget_files+0x2a/0x420 [ 172.362293][ T8727] ? __fget_files+0x3a0/0x420 [ 172.362324][ T8727] __sys_sendmmsg+0x227/0x430 [ 172.362352][ T8727] ? __pfx___sys_sendmmsg+0x10/0x10 [ 172.362373][ T8727] ? do_futex+0x395/0x420 [ 172.362399][ T8727] ? fd_install+0x95/0x3d0 [ 172.362436][ T8727] ? rcu_is_watching+0x15/0xb0 [ 172.362464][ T8727] __x64_sys_sendmmsg+0xa0/0xc0 [ 172.362489][ T8727] do_syscall_64+0xec/0xf80 [ 172.362510][ T8727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.362527][ T8727] ? trace_irq_disable+0x37/0x100 [ 172.362550][ T8727] ? clear_bhb_loop+0x60/0xb0 [ 172.362571][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.362587][ T8727] RIP: 0033:0x7fdb80d8f749 [ 172.362603][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.362617][ T8727] RSP: 002b:00007fdb81cc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 172.362636][ T8727] RAX: ffffffffffffffda RBX: 00007fdb80fe5fa0 RCX: 00007fdb80d8f749 [ 172.362648][ T8727] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000d [ 172.362665][ T8727] RBP: 00007fdb80e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 172.362676][ T8727] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000000 [ 172.362686][ T8727] R13: 00007fdb80fe6038 R14: 00007fdb80fe5fa0 R15: 00007ffc58d07e08 [ 172.362714][ T8727] [ 172.772717][ T8731] netlink: 256 bytes leftover after parsing attributes in process `syz.2.728'. [ 172.782614][ T8731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.728'. [ 172.903712][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.729'. [ 173.101178][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 173.127897][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.727'. [ 173.220655][ T8754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.733'. [ 174.357754][ T8806] lo speed is unknown, defaulting to 1000 [ 174.913551][ T8806] wg1 speed is unknown, defaulting to 1000 [ 174.920086][ T8809] lo speed is unknown, defaulting to 1000 [ 175.224612][ T8840] tipc: Failed to obtain node identity [ 175.232754][ T8840] tipc: Enabling of bearer rejected, failed to enable media [ 175.418530][ T8849] FAULT_INJECTION: forcing a failure. [ 175.418530][ T8849] name failslab, interval 1, probability 0, space 0, times 1 [ 175.449628][ T8849] CPU: 0 UID: 0 PID: 8849 Comm: syz.4.763 Not tainted syzkaller #0 PREEMPT(full) [ 175.449657][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.449670][ T8849] Call Trace: [ 175.449678][ T8849] [ 175.449687][ T8849] dump_stack_lvl+0xe8/0x150 [ 175.449721][ T8849] should_fail_ex+0x414/0x560 [ 175.449762][ T8849] should_failslab+0xa8/0x100 [ 175.449790][ T8849] __kvmalloc_node_noprof+0x175/0x920 [ 175.449816][ T8849] ? hash_ipport_create+0x78d/0x1460 [ 175.449835][ T8849] ? hash_ipport_create+0x6d5/0x1460 [ 175.449861][ T8849] hash_ipport_create+0x78d/0x1460 [ 175.449891][ T8849] ? ip_set_create+0x49f/0x19c0 [ 175.449925][ T8849] ? __pfx_hash_ipport_create+0x10/0x10 [ 175.449954][ T8849] ? __nla_parse+0x40/0x60 [ 175.449978][ T8849] ? __pfx_hash_ipport_create+0x10/0x10 [ 175.450001][ T8849] ip_set_create+0xa9a/0x19c0 [ 175.450030][ T8849] ? ip_set_create+0x49f/0x19c0 [ 175.450071][ T8849] ? __pfx_ip_set_create+0x10/0x10 [ 175.450136][ T8849] nfnetlink_rcv_msg+0xb4d/0x1130 [ 175.450165][ T8849] ? unwind_get_return_address+0x4d/0x90 [ 175.450190][ T8849] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 175.450222][ T8849] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 175.450271][ T8849] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.450353][ T8849] netlink_rcv_skb+0x208/0x470 [ 175.450393][ T8849] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.450423][ T8849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.450467][ T8849] ? bpf_lsm_capable+0x9/0x20 [ 175.450492][ T8849] ? security_capable+0x7e/0x2e0 [ 175.450526][ T8849] nfnetlink_rcv+0x282/0x2590 [ 175.450566][ T8849] ? lockdep_hardirqs_on+0x7b/0x110 [ 175.450591][ T8849] ? __dev_queue_xmit+0x280/0x3100 [ 175.450620][ T8849] ? __local_bh_enable_ip+0xd0/0x130 [ 175.450642][ T8849] ? __dev_queue_xmit+0x280/0x3100 [ 175.450670][ T8849] ? __dev_queue_xmit+0x1969/0x3100 [ 175.450699][ T8849] ? ___sys_sendmsg+0x21f/0x2a0 [ 175.450739][ T8849] ? __dev_queue_xmit+0x280/0x3100 [ 175.450770][ T8849] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 175.450804][ T8849] ? __pfx___dev_queue_xmit+0x10/0x10 [ 175.450845][ T8849] ? ref_tracker_free+0x63a/0x7d0 [ 175.450867][ T8849] ? __asan_memcpy+0x40/0x70 [ 175.450885][ T8849] ? __pfx_ref_tracker_free+0x10/0x10 [ 175.450926][ T8849] ? skb_clone+0x246/0x3a0 [ 175.450959][ T8849] ? __netlink_deliver_tap+0x807/0x850 [ 175.450990][ T8849] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.451028][ T8849] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.451067][ T8849] netlink_unicast+0x82f/0x9e0 [ 175.451106][ T8849] ? __pfx_netlink_unicast+0x10/0x10 [ 175.451136][ T8849] ? netlink_sendmsg+0x642/0xb30 [ 175.451165][ T8849] ? skb_put+0x11b/0x210 [ 175.451199][ T8849] netlink_sendmsg+0x805/0xb30 [ 175.451241][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.451277][ T8849] ? aa_sock_msg_perm+0xf1/0x1b0 [ 175.451307][ T8849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.451327][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.451359][ T8849] __sock_sendmsg+0x21c/0x270 [ 175.451402][ T8849] ____sys_sendmsg+0x505/0x820 [ 175.451437][ T8849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.451474][ T8849] ? import_iovec+0x74/0xa0 [ 175.451506][ T8849] ___sys_sendmsg+0x21f/0x2a0 [ 175.451536][ T8849] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.451605][ T8849] ? __fget_files+0x2a/0x420 [ 175.451632][ T8849] ? __fget_files+0x3a0/0x420 [ 175.451671][ T8849] __x64_sys_sendmsg+0x19b/0x260 [ 175.451702][ T8849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.451741][ T8849] ? __pfx_ksys_write+0x10/0x10 [ 175.451775][ T8849] do_syscall_64+0xec/0xf80 [ 175.451801][ T8849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.451821][ T8849] ? trace_irq_disable+0x37/0x100 [ 175.451848][ T8849] ? clear_bhb_loop+0x60/0xb0 [ 175.451873][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.451893][ T8849] RIP: 0033:0x7fdb80d8f749 [ 175.451913][ T8849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.451930][ T8849] RSP: 002b:00007fdb81cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.451952][ T8849] RAX: ffffffffffffffda RBX: 00007fdb80fe5fa0 RCX: 00007fdb80d8f749 [ 175.451967][ T8849] RDX: 0000000020004000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 175.451980][ T8849] RBP: 00007fdb81cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 175.451993][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.452005][ T8849] R13: 00007fdb80fe6038 R14: 00007fdb80fe5fa0 R15: 00007ffc58d07e08 [ 175.452040][ T8849] [ 175.998384][ T8851] syzkaller0: entered promiscuous mode [ 176.004023][ T8851] syzkaller0: entered allmulticast mode [ 176.013908][ T8809] wg1 speed is unknown, defaulting to 1000 [ 176.184010][ T8857] __nla_validate_parse: 2 callbacks suppressed [ 176.184030][ T8857] netlink: 56 bytes leftover after parsing attributes in process `syz.4.766'. [ 176.333061][ T8855] ipip1: entered promiscuous mode [ 176.352172][ T8855] ipip1: entered allmulticast mode [ 176.436960][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 176.473670][ T8865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 176.486246][ T8866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 177.756363][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 178.076557][ T8884] FAULT_INJECTION: forcing a failure. [ 178.076557][ T8884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.099097][ T8884] CPU: 1 UID: 0 PID: 8884 Comm: syz.1.774 Not tainted syzkaller #0 PREEMPT(full) [ 178.099143][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.099163][ T8884] Call Trace: [ 178.099178][ T8884] [ 178.099193][ T8884] dump_stack_lvl+0xe8/0x150 [ 178.099244][ T8884] should_fail_ex+0x414/0x560 [ 178.099310][ T8884] _copy_to_user+0x31/0xb0 [ 178.099349][ T8884] simple_read_from_buffer+0xe1/0x170 [ 178.099381][ T8884] proc_fail_nth_read+0x1b3/0x220 [ 178.099408][ T8884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.099435][ T8884] ? rw_verify_area+0x2a6/0x4d0 [ 178.099468][ T8884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.099493][ T8884] vfs_read+0x200/0xa30 [ 178.099512][ T8884] ? fdget_pos+0x247/0x320 [ 178.099544][ T8884] ? __pfx___mutex_lock+0x10/0x10 [ 178.099572][ T8884] ? __pfx_vfs_read+0x10/0x10 [ 178.099594][ T8884] ? __fget_files+0x2a/0x420 [ 178.099625][ T8884] ? __fget_files+0x3a0/0x420 [ 178.099651][ T8884] ? __fget_files+0x2a/0x420 [ 178.099686][ T8884] ksys_read+0x145/0x250 [ 178.099709][ T8884] ? __pfx_ksys_read+0x10/0x10 [ 178.099742][ T8884] do_syscall_64+0xec/0xf80 [ 178.099768][ T8884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.099788][ T8884] ? trace_irq_disable+0x37/0x100 [ 178.099816][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 178.099842][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.099862][ T8884] RIP: 0033:0x7f622218e15c [ 178.099881][ T8884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.099898][ T8884] RSP: 002b:00007f6222f81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.099920][ T8884] RAX: ffffffffffffffda RBX: 00007f62223e5fa0 RCX: 00007f622218e15c [ 178.099935][ T8884] RDX: 000000000000000f RSI: 00007f6222f810a0 RDI: 0000000000000004 [ 178.099948][ T8884] RBP: 00007f6222f81090 R08: 0000000000000000 R09: 0000000000000000 [ 178.099961][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.099973][ T8884] R13: 00007f62223e6038 R14: 00007f62223e5fa0 R15: 00007ffcaee8f3e8 [ 178.100008][ T8884] [ 178.414120][ T8890] netlink: 'syz.4.777': attribute type 13 has an invalid length. [ 178.440931][ T8890] bridge0: port 3(team0) entered disabled state [ 178.966001][ T8917] sctp: [Deprecated]: syz.4.784 (pid 8917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.966001][ T8917] Use struct sctp_sack_info instead [ 179.158554][ T8933] netlink: 'syz.1.790': attribute type 13 has an invalid length. [ 179.238158][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.791'. [ 179.268937][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 179.279913][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 179.339764][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.347680][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.479470][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.792'. [ 179.749217][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.771899][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.796206][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.816438][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.856375][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.871673][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.881595][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.907438][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.010603][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 180.149528][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.158070][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.445903][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 181.317217][ T9043] syzkaller0: entered allmulticast mode [ 181.334212][ T9043] syzkaller0 (unregistering): left allmulticast mode [ 181.439143][ T9043] syzkaller0: entered promiscuous mode [ 181.444725][ T9043] syzkaller0: entered allmulticast mode [ 182.018667][ T9073] __nla_validate_parse: 1 callbacks suppressed [ 182.018687][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'. [ 182.087717][ T9073] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 182.126243][ T9073] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 182.183288][ T9080] xt_CONNSECMARK: invalid mode: 66 [ 182.231752][ T9082] tipc: Started in network mode [ 182.287034][ T9082] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 182.315517][ T9082] tipc: Enabling of bearer rejected, failed to enable media [ 182.416207][ T9089] tipc: Started in network mode [ 182.431711][ T9089] tipc: Node identity , cluster identity 4711 [ 182.439876][ T9089] tipc: Failed to obtain node identity [ 182.454098][ T9089] tipc: Enabling of bearer rejected, failed to enable media [ 182.573669][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 183.074330][ T9124] netlink: 'syz.0.839': attribute type 3 has an invalid length. [ 183.082562][ T9124] netlink: 666 bytes leftover after parsing attributes in process `syz.0.839'. [ 183.092001][ T9123] netlink: 'syz.0.839': attribute type 3 has an invalid length. [ 183.100655][ T9123] netlink: 666 bytes leftover after parsing attributes in process `syz.0.839'. [ 183.243268][ T9129] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.253755][ T9129] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.322455][ T9132] pimreg: entered allmulticast mode [ 183.330109][ T9133] pimreg: left allmulticast mode [ 183.356021][ T9129] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.366441][ T9129] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.406549][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 183.418369][ T9130] netlink: 68 bytes leftover after parsing attributes in process `syz.0.841'. [ 183.427896][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 183.437558][ T9130] netlink: 68 bytes leftover after parsing attributes in process `syz.0.841'. [ 183.461744][ T9129] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.472232][ T9129] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.553713][ T9129] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.567344][ T9137] delete_channel: no stack [ 183.598535][ T9129] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.753978][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.773006][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.811819][ T37] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.847122][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.860499][ T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.868960][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.886237][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.929785][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.959261][ T9147] netlink: 'syz.1.846': attribute type 13 has an invalid length. [ 184.056554][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b17b800: rx timeout, send abort [ 184.066975][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b17b800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.083064][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803077ec00: rx timeout, send abort [ 184.092158][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803077ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.328734][ T9172] netlink: 'syz.3.849': attribute type 2 has an invalid length. [ 184.622709][ T9183] netlink: 56 bytes leftover after parsing attributes in process `syz.0.851'. [ 184.740565][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.854'. [ 185.025197][ T9198] netlink: 'syz.0.857': attribute type 83 has an invalid length. [ 185.110836][ T9203] netlink: 'syz.0.857': attribute type 6 has an invalid length. [ 185.149879][ T9192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.162161][ T9207] netlink: 'syz.0.857': attribute type 6 has an invalid length. [ 185.179631][ T9192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.192361][ T9192] bond0 (unregistering): Released all slaves [ 185.231944][ T9208] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 185.255311][ T9208] netlink: 'syz.2.859': attribute type 2 has an invalid length. [ 185.285713][ T9198] lo speed is unknown, defaulting to 1000 [ 185.359720][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573e0c00: rx timeout, send abort [ 185.368348][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880573e0c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.383059][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032b64000: rx timeout, send abort [ 185.392800][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032b64000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.695076][ T9227] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 185.794519][ T9227] hsr0: entered promiscuous mode [ 185.809545][ T9227] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 185.822498][ T9227] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 185.836199][ T9227] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 185.959591][ T9198] wg1 speed is unknown, defaulting to 1000 [ 186.231918][ T9261] netlink: 'syz.4.871': attribute type 10 has an invalid length. [ 186.280639][ T9261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.297426][ T9263] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 186.334755][ T9261] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 186.451175][ T9263] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 186.582883][ T9274] lo speed is unknown, defaulting to 1000 [ 186.680653][ T9289] tipc: Enabled bearer , priority 0 [ 186.789678][ T9289] tipc: Resetting bearer [ 187.139105][ T9274] wg1 speed is unknown, defaulting to 1000 [ 187.155683][ T9290] lo speed is unknown, defaulting to 1000 [ 187.494626][ T30] audit: type=1804 audit(1768734836.882:3): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.885" name="/newroot/188/cgroup.controllers" dev="tmpfs" ino=983 res=1 errno=0 [ 187.526801][ T9314] __nla_validate_parse: 5 callbacks suppressed [ 187.526820][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 187.572978][ T30] audit: type=1800 audit(1768734836.912:4): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.885" name="cgroup.controllers" dev="tmpfs" ino=983 res=0 errno=0 [ 187.749315][ T9316] syzkaller0: left promiscuous mode [ 187.755201][ T9316] syzkaller0: left allmulticast mode [ 187.763049][ T24] lo speed is unknown, defaulting to 1000 [ 187.771412][ T9298] lo speed is unknown, defaulting to 1000 [ 187.911228][ T9330] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.888'. [ 187.922971][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 187.983686][ T9325] sctp: [Deprecated]: syz.1.887 (pid 9325) Use of int in max_burst socket option. [ 187.983686][ T9325] Use struct sctp_assoc_value instead [ 188.117416][ T9301] lo speed is unknown, defaulting to 1000 [ 188.472106][ T9301] wg1 speed is unknown, defaulting to 1000 [ 188.479420][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.893'. [ 188.496536][ T9347] netlink: 132 bytes leftover after parsing attributes in process `syz.1.891'. [ 188.515916][ T9290] wg1 speed is unknown, defaulting to 1000 [ 188.532934][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 188.544504][ T9352] vlan2: entered promiscuous mode [ 188.550635][ T9352] bond0: entered promiscuous mode [ 188.617723][ T9298] wg1 speed is unknown, defaulting to 1000 [ 188.629783][ T9346] lo speed is unknown, defaulting to 1000 [ 188.871605][ T9356] syzkaller0: entered promiscuous mode [ 188.887137][ T9356] syzkaller0: entered allmulticast mode [ 188.959487][ T9356] tipc: Enabling of bearer rejected, already enabled [ 189.058865][ T9346] wg1 speed is unknown, defaulting to 1000 [ 189.560926][ T9364] vlan3: entered promiscuous mode [ 190.175160][ T9386] validate_nla: 3 callbacks suppressed [ 190.175180][ T9386] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 190.290862][ T9386] xt_bpf: check failed: parse error [ 190.917529][ T9410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.937316][ T9409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.501818][ T9432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.707526][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 192.349254][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 192.530095][ T9478] dvmrp6: entered allmulticast mode [ 192.611180][ T9484] IPv6: addrconf: prefix option has invalid lifetime [ 192.777946][ T9498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.929'. [ 192.803253][ T9501] delete_channel: no stack [ 192.861051][ T9495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.927'. [ 192.901766][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 193.224589][ T9516] lo speed is unknown, defaulting to 1000 [ 193.375909][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 193.428620][ T9531] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 193.518377][ T9531] batman_adv: batadv0: Adding interface: gretap1 [ 193.539189][ T9531] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.593334][ T9531] batman_adv: batadv0: Interface activated: gretap1 [ 193.603437][ T9524] lo speed is unknown, defaulting to 1000 [ 193.609521][ T9516] wg1 speed is unknown, defaulting to 1000 [ 194.642333][ T9551] syzkaller0: entered promiscuous mode [ 194.648230][ T9551] syzkaller0: entered allmulticast mode [ 194.828385][ T9559] netlink: 'syz.4.947': attribute type 1 has an invalid length. [ 195.133973][ T9564] netlink: 'syz.4.949': attribute type 3 has an invalid length. [ 195.657500][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 195.657500][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 197.390232][ T9524] wg1 speed is unknown, defaulting to 1000 [ 197.689656][ T9580] syzkaller0: entered promiscuous mode [ 197.695357][ T9580] syzkaller0: entered allmulticast mode [ 197.773162][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 197.821965][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.956'. [ 197.865941][ T9593] netlink: 68 bytes leftover after parsing attributes in process `syz.4.956'. [ 197.920334][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.956'. [ 198.092892][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 198.460248][ T6126] udevd[6126]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 198.644096][ T9621] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 198.694584][ T9621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.734227][ T9626] netlink: 'syz.1.965': attribute type 15 has an invalid length. [ 198.809126][ T9615] bond2: (slave geneve3): making interface the new active one [ 198.828394][ T9630] netlink: 80 bytes leftover after parsing attributes in process `syz.1.965'. [ 198.843358][ T9615] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 199.207632][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 199.218943][ T9660] netlink: 11 bytes leftover after parsing attributes in process `syz.0.975'. [ 199.551812][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.568167][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.648896][ T9689] lo speed is unknown, defaulting to 1000 [ 199.672246][ T9692] openvswitch: netlink: Key type 123 is out of range max 32 [ 199.819511][ T9699] netlink: 84 bytes leftover after parsing attributes in process `syz.0.984'. [ 199.946470][ T9707] batadv1: entered promiscuous mode [ 200.058284][ T9709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.986'. [ 200.332168][ T9689] wg1 speed is unknown, defaulting to 1000 [ 200.650639][ T9710] lo speed is unknown, defaulting to 1000 [ 200.947489][ T9718] lo speed is unknown, defaulting to 1000 [ 200.979804][ T9730] tipc: Enabled bearer , priority 0 [ 200.988004][ T9730] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 200.995614][ T9730] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 201.033040][ T9730] tipc: Resetting bearer [ 201.101161][ T9732] netlink: 48 bytes leftover after parsing attributes in process `syz.4.994'. [ 201.126491][ T9733] gretap0: entered promiscuous mode [ 201.147102][ T9733] gretap0: left promiscuous mode [ 201.277446][ T9718] wg1 speed is unknown, defaulting to 1000 [ 201.285313][ T9710] wg1 speed is unknown, defaulting to 1000 [ 201.365800][ T9742] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 201.389085][ T9742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.721074][ T9749] lo speed is unknown, defaulting to 1000 [ 202.038962][ T5866] tipc: Node number set to 4278255617 [ 202.586174][ T9769] bond3: entered promiscuous mode [ 202.594624][ T9769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.790005][ T9769] bond3 (unregistering): Released all slaves [ 202.840320][ T9749] wg1 speed is unknown, defaulting to 1000 [ 203.012404][ T9780] xt_CT: No such helper "snmp_trap" [ 203.047296][ T9787] __nla_validate_parse: 2 callbacks suppressed [ 203.047317][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 203.115556][ T9789] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 203.142759][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 203.178236][ T9791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1010'. [ 203.214517][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 203.514885][ T9798] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1011'. [ 203.743479][ T9791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1010'. [ 204.247445][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'. [ 204.294466][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 204.311696][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1018'. [ 204.528486][ T9819] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1019'. [ 204.565479][ T9827] IPv6: NLM_F_REPLACE set, but no existing node found! [ 205.402929][ T9846] lo speed is unknown, defaulting to 1000 [ 205.838387][ T9861] netlink: 'syz.4.1033': attribute type 3 has an invalid length. [ 205.907073][ T9861] netlink: 'syz.4.1033': attribute type 16 has an invalid length. [ 206.716768][ T9846] wg1 speed is unknown, defaulting to 1000 [ 206.946670][ T9849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.796164][ T9938] sctp: [Deprecated]: syz.2.1054 (pid 9938) Use of int in maxseg socket option. [ 207.796164][ T9938] Use struct sctp_assoc_value instead [ 207.859774][ T9940] netlink: 'syz.0.1056': attribute type 13 has an invalid length. [ 207.947044][ T9940] netlink: 'syz.0.1056': attribute type 11 has an invalid length. [ 208.125354][ T9947] tipc: Started in network mode [ 208.137938][ T9947] tipc: Node identity aeed57c959ac, cluster identity 4711 [ 208.158127][ T9947] tipc: Enabled bearer , priority 0 [ 208.190784][ T9947] tipc: Resetting bearer [ 208.449529][ T9972] syzkaller1: entered promiscuous mode [ 208.466129][ T9972] syzkaller1: entered allmulticast mode [ 208.478280][ T9970] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 208.530922][ T9977] __nla_validate_parse: 6 callbacks suppressed [ 208.530941][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 208.579093][ T9977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1066'. [ 208.774756][ T9974] lo speed is unknown, defaulting to 1000 [ 208.923530][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'. [ 209.055351][T10002] netlink: 'syz.4.1078': attribute type 30 has an invalid length. [ 209.541648][ T5981] tipc: Node number set to 4148254665 [ 209.567014][T10010] wg1: entered promiscuous mode [ 209.571944][T10010] wg1: entered allmulticast mode [ 209.618610][ T9974] wg1 speed is unknown, defaulting to 1000 [ 209.970476][T10029] netlink: 'syz.3.1084': attribute type 3 has an invalid length. [ 210.022747][T10029] 8021q: VLANs not supported on ip_vti0 [ 210.768630][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 210.999118][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1091'. [ 211.334356][T10068] lo speed is unknown, defaulting to 1000 [ 211.354994][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 211.359507][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 211.496959][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 211.506481][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 211.508982][T10077] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1095'. [ 211.517339][T10082] netlink: 'syz.2.1099': attribute type 14 has an invalid length. [ 211.558920][T10073] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 211.743168][T10085] xt_TCPMSS: Only works on TCP SYN packets [ 211.831493][T10068] wg1 speed is unknown, defaulting to 1000 [ 211.872804][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 211.876686][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 211.882764][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 212.528960][T10124] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 212.569041][T10124] netlink: 'syz.2.1114': attribute type 30 has an invalid length. [ 212.790419][T10128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.908494][T10128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.024489][T10128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.089376][ T5980] IPVS: starting estimator thread 0... [ 213.101547][T10141] netlink: 'syz.2.1118': attribute type 11 has an invalid length. [ 213.178527][T10142] IPVS: using max 31 ests per chain, 74400 per kthread [ 213.282988][T10128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.543566][T10155] netlink: 'syz.1.1122': attribute type 2 has an invalid length. [ 213.572404][T10155] netlink: 'syz.1.1122': attribute type 2 has an invalid length. [ 213.592430][T10155] __nla_validate_parse: 6 callbacks suppressed [ 213.592449][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 213.639022][T10160] x_tables: duplicate underflow at hook 2 [ 213.678332][ T6522] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.740742][ T6522] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.785964][ T4524] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.839534][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.337319][T10184] lo speed is unknown, defaulting to 1000 [ 214.736896][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 214.763548][T10206] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 214.864528][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 214.986515][T10206] bond3 (unregistering): Released all slaves [ 215.488832][T10216] pim6reg: entered allmulticast mode [ 215.494737][T10184] wg1 speed is unknown, defaulting to 1000 [ 215.624006][T10216] pim6reg: left allmulticast mode [ 216.187391][T10233] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 216.236080][T10233] geneve4: entered promiscuous mode [ 216.429638][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 216.590437][T10250] bridge_slave_0: left allmulticast mode [ 216.596343][T10250] bridge_slave_0: left promiscuous mode [ 216.617736][T10250] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.683899][T10260] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1148'. [ 216.718990][T10250] bridge_slave_1: left allmulticast mode [ 216.724761][T10250] bridge_slave_1: left promiscuous mode [ 216.747720][T10250] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.777606][T10250] team0: Port device team_slave_0 removed [ 216.792096][T10250] team0: Port device team_slave_1 removed [ 216.799030][T10250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.039535][T10281] netlink: 'syz.0.1156': attribute type 5 has an invalid length. [ 217.093869][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 217.126449][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 217.202525][T10293] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1154'. [ 217.263054][T10297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1160'. [ 217.278727][T10293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1154'. [ 217.612842][T10319] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 217.739977][T10333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.747490][T10333] IPv6: NLM_F_CREATE should be set when creating new route [ 217.754869][T10333] IPv6: NLM_F_CREATE should be set when creating new route [ 217.789115][T10333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.985866][T10319] bond4: entered promiscuous mode [ 218.007669][T10319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.362613][T10365] tipc: Enabling of bearer rejected, already enabled [ 218.614234][T10393] __nla_validate_parse: 4 callbacks suppressed [ 218.614254][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 218.698549][T10394] netlink: 'syz.1.1184': attribute type 10 has an invalid length. [ 218.732016][T10394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1184'. [ 218.944590][T10394] dummy0: entered promiscuous mode [ 218.970619][T10394] bridge0: port 1(dummy0) entered blocking state [ 219.013385][T10394] bridge0: port 1(dummy0) entered disabled state [ 219.029632][T10394] dummy0: entered allmulticast mode [ 219.188049][T10404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1186'. [ 219.454295][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.462311][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.771289][T10410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.815813][T10410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.930409][T10442] netlink: 'syz.4.1192': attribute type 1 has an invalid length. [ 220.043896][T10410] batman_adv: batadv0: Interface deactivated: gretap1 [ 220.136246][T10431] wg1 speed is unknown, defaulting to 1000 [ 220.145053][T10431] syz: Port: 1 Link DOWN [ 220.233395][T10437] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 220.341805][T10447] bond4: entered promiscuous mode [ 220.351515][T10447] bond4: entered allmulticast mode [ 220.361839][T10447] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.371288][ T6453] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.408099][ T6453] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.436980][ T6453] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.463695][ T6453] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.514945][T10448] bridge3: entered promiscuous mode [ 220.521073][T10448] bridge3: entered allmulticast mode [ 220.530998][T10448] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 220.557498][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.557504][ T6453] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.587315][ T6453] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.660561][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.673730][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.767423][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.873052][T10478] syzkaller0: entered promiscuous mode [ 220.907342][T10478] syzkaller0: entered allmulticast mode [ 220.938842][T10478] tipc: Started in network mode [ 220.964497][T10478] tipc: Node identity 9ec46a03a5e3, cluster identity 4711 [ 220.994242][T10478] tipc: Enabled bearer , priority 0 [ 221.018786][T10486] netlink: 'syz.2.1201': attribute type 12 has an invalid length. [ 221.114229][T10487] tipc: Resetting bearer [ 221.162456][T10478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1198'. [ 221.197917][T10477] tipc: Resetting bearer [ 221.211095][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1205'. [ 221.239841][T10477] tipc: Disabling bearer [ 221.318771][T10495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1206'. [ 221.425427][T10508] netlink: 'syz.3.1209': attribute type 39 has an invalid length. [ 221.707457][T10514] nbd0: detected capacity change from 0 to 127 [ 221.720203][T10518] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1210'. [ 221.722427][T10522] netlink: 'syz.2.1210': attribute type 10 has an invalid length. [ 221.759180][T10514] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 221.769502][T10521] lo speed is unknown, defaulting to 1000 [ 221.920577][ T5842] block nbd0: Receive control failed (result -104) [ 222.137464][T10521] wg1 speed is unknown, defaulting to 1000 [ 222.292162][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1215'. [ 222.303814][T10530] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1215'. [ 222.444839][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'. [ 222.591111][T10534] lo speed is unknown, defaulting to 1000 [ 222.686026][T10546] tipc: Enabled bearer , priority 0 [ 222.709869][T10549] tipc: Enabling of bearer rejected, already enabled [ 222.888519][T10547] tipc: Disabling bearer [ 223.115401][T10569] sit1: entered promiscuous mode [ 223.144388][T10572] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 223.180812][T10569] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 223.193502][T10554] lo speed is unknown, defaulting to 1000 [ 223.207920][T10534] wg1 speed is unknown, defaulting to 1000 [ 223.573581][T10582] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 223.747110][T10587] __nla_validate_parse: 1 callbacks suppressed [ 223.747129][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1230'. [ 223.761050][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 223.799689][T10588] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 223.827200][T10587] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 223.895646][T10542] lo speed is unknown, defaulting to 1000 [ 224.066295][T10597] ip6tnl1: entered allmulticast mode [ 224.173215][T10542] wg1 speed is unknown, defaulting to 1000 [ 224.194871][T10554] wg1 speed is unknown, defaulting to 1000 [ 224.497795][T10603] syzkaller1: entered promiscuous mode [ 224.504522][T10603] syzkaller1: entered allmulticast mode [ 224.917378][T10622] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 225.070227][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 225.078900][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 225.086246][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 225.094081][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 225.102431][ T25] block nbd0: Dead connection, failed to find a fallback [ 225.111431][ T25] block nbd0: shutting down sockets [ 225.126552][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.138030][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 225.145918][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.158569][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 225.166478][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.176994][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 225.184801][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.194827][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.204406][ T6126] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.226204][ T6126] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.235178][ T6126] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.255178][ T6126] Buffer I/O error on dev nbd0, logical block 1, async page read [ 225.263333][ T6126] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.277007][ T6126] Buffer I/O error on dev nbd0, logical block 2, async page read [ 225.295195][ T6126] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.307296][ T6126] Buffer I/O error on dev nbd0, logical block 3, async page read [ 225.315170][ T6126] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.336984][ T6126] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.355205][ T6126] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.366924][ T6126] Buffer I/O error on dev nbd0, logical block 1, async page read [ 225.385817][ T6126] ldm_validate_partition_table(): Disk read failed. [ 225.396148][ T6126] Dev nbd0: unable to read RDB block 0 [ 225.406431][ T6126] nbd0: unable to read partition table [ 225.448968][ T6126] ldm_validate_partition_table(): Disk read failed. [ 225.456161][ T6126] Dev nbd0: unable to read RDB block 0 [ 225.471650][T10617] lo speed is unknown, defaulting to 1000 [ 225.547818][ T6126] nbd0: unable to read partition table [ 225.977318][T10642] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1243'. [ 226.061428][T10644] netlink: 'syz.2.1246': attribute type 4 has an invalid length. [ 226.120759][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 226.230068][T10617] wg1 speed is unknown, defaulting to 1000 [ 226.252418][T10618] lo speed is unknown, defaulting to 1000 [ 226.450021][T10655] : renamed from bond0 (while UP) [ 226.695295][T10664] bond0: option min_links: invalid value (18446744073709551614) [ 226.742221][T10669] netlink: 'syz.2.1252': attribute type 33 has an invalid length. [ 226.758001][T10669] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1252'. [ 226.776977][T10664] bond0: option min_links: allowed values 0 - 2147483647 [ 226.814597][T10664] bond0 (unregistering): Released all slaves [ 226.910416][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'. [ 226.931857][T10618] wg1 speed is unknown, defaulting to 1000 [ 227.368431][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 227.928188][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 228.317646][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 228.415375][T10734] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 228.424160][T10734] veth0_vlan: left promiscuous mode [ 228.437340][T10734] veth0_vlan: entered promiscuous mode [ 228.446207][T10734] team0: Device veth0_vlan failed to register rx_handler [ 228.608048][T10743] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1275'. [ 228.781681][T10745] : entered promiscuous mode [ 228.947810][T10709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.656571][T10777] netlink: 'syz.1.1287': attribute type 4 has an invalid length. [ 229.685716][T10777] __nla_validate_parse: 1 callbacks suppressed [ 229.685737][T10777] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1287'. [ 229.891145][T10792] netlink: 'syz.1.1290': attribute type 4 has an invalid length. [ 229.919557][T10792] netlink: 'syz.1.1290': attribute type 4 has an invalid length. [ 229.971194][T10801] netlink: 'syz.1.1290': attribute type 4 has an invalid length. [ 229.980328][T10802] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1288'. [ 230.147618][T10810] netlink: 'syz.1.1294': attribute type 13 has an invalid length. [ 230.359983][T10821] mac80211_hwsim hwsim14 syzkaller0: Caught tx_queue_len zero misconfig [ 230.532362][T10831] ip6t_srh: unknown srh match flags 4000 [ 230.582404][T10833] tc_dump_action: action bad kind [ 230.612970][T10828] macsec1: entered promiscuous mode [ 230.820520][T10841] lo speed is unknown, defaulting to 1000 [ 231.339455][T10841] wg1 speed is unknown, defaulting to 1000 [ 231.713392][T10864] lo speed is unknown, defaulting to 1000 [ 232.075456][T10885] netlink: 'syz.3.1317': attribute type 83 has an invalid length. [ 232.427445][T10864] wg1 speed is unknown, defaulting to 1000 [ 232.576490][T10901] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1321'. [ 232.614942][T10901] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1321'. [ 232.891412][T10895] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1315'. [ 232.918524][T10895] netlink: 'syz.0.1315': attribute type 9 has an invalid length. [ 232.941726][T10895] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1315'. [ 233.007274][T10912] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 233.049244][T10912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1324'. [ 233.104662][T10916] netlink: 'syz.3.1324': attribute type 32 has an invalid length. [ 233.157056][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 233.280763][T10924] xt_TCPMSS: Only works on TCP SYN packets [ 233.332139][T10912] team0: Device geneve0 is up. Set it down before adding it as a team port [ 233.402163][T10912] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 233.572090][T10916] bond3: option coupled_control: invalid value (252) [ 233.602916][T10916] bond3 (unregistering): Released all slaves [ 233.707829][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 234.038485][T10958] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 234.043383][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 234.208826][T10959] veth0: entered promiscuous mode [ 234.498073][T10979] xt_CT: No such helper "snmp" [ 234.597949][T10982] lo speed is unknown, defaulting to 1000 [ 234.682771][T10991] netlink: 'syz.4.1347': attribute type 2 has an invalid length. [ 234.725838][T10987] geneve3: entered promiscuous mode [ 234.756501][T10991] 9: entered promiscuous mode [ 235.456578][T11018] bond0: (slave team0): Releasing backup interface [ 235.553462][T11018] bridge_slave_0: left allmulticast mode [ 235.563373][T11018] bridge_slave_0: left promiscuous mode [ 235.572608][T11024] __nla_validate_parse: 2 callbacks suppressed [ 235.572629][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 235.592648][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.600198][T11026] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 235.613833][T11018] bridge_slave_1: left allmulticast mode [ 235.620693][T11018] bridge_slave_1: left promiscuous mode [ 235.626996][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.660071][T11018] bond0: (slave bond_slave_0): Releasing backup interface [ 235.708597][T11018] bond0: (slave bond_slave_1): Releasing backup interface [ 235.749805][T11018] team0: Port device team_slave_0 removed [ 235.766210][T11032] netlink: 'syz.0.1359': attribute type 2 has an invalid length. [ 235.795342][T11018] team0: Port device team_slave_1 removed [ 235.814311][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.826087][T11018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.835091][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.843586][T11018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.854636][T11018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.873835][T10987] lo speed is unknown, defaulting to 1000 [ 235.881270][T10982] wg1 speed is unknown, defaulting to 1000 [ 236.157219][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 236.321024][T11039] hsr_slave_1 (unregistering): left promiscuous mode [ 236.362095][T10987] wg1 speed is unknown, defaulting to 1000 [ 236.362109][T11016] lo speed is unknown, defaulting to 1000 [ 236.733423][T11016] wg1 speed is unknown, defaulting to 1000 [ 237.884500][T11074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1372'. [ 237.997292][T11084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 238.068557][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1375'. [ 238.156272][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'. [ 238.187953][T11086] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 238.228491][T11093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1378'. [ 238.402197][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'. [ 238.810604][T11122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1386'. [ 238.930429][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'. [ 239.001115][T11125] bond5: entered promiscuous mode [ 239.038191][T11125] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.214614][T11130] lo speed is unknown, defaulting to 1000 [ 239.513172][T11130] wg1 speed is unknown, defaulting to 1000 [ 240.055827][T11162] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 240.089491][ T5980] lo speed is unknown, defaulting to 1000 [ 240.096691][ T5980] syz0: Port: 1 Link DOWN [ 240.179608][T10425] lo speed is unknown, defaulting to 1000 [ 240.395521][T11176] bridge5: entered allmulticast mode [ 240.988189][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 241.225782][T11213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.506736][T11222] lo speed is unknown, defaulting to 1000 [ 242.168209][T11222] wg1 speed is unknown, defaulting to 1000 [ 243.076475][T11276] No such timeout policy "syz1" [ 243.328746][T11291] __nla_validate_parse: 5 callbacks suppressed [ 243.328766][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 243.391047][T11291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1433'. [ 243.623201][T11307] netlink: 'syz.4.1439': attribute type 2 has an invalid length. [ 243.648452][T11306] openvswitch: netlink: Flow key attribute not present in set flow. [ 243.692491][T11307] : entered promiscuous mode [ 243.865983][T11320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.890414][T11320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 244.072567][T11329] netlink: 'syz.3.1443': attribute type 11 has an invalid length. [ 244.097608][T11329] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1443'. [ 244.571481][T11343] lo speed is unknown, defaulting to 1000 [ 244.586064][T11346] tc_dump_action: action bad kind [ 244.825951][T11343] wg1 speed is unknown, defaulting to 1000 [ 244.928714][T11348] lo speed is unknown, defaulting to 1000 [ 245.201166][T11359] tipc: Enabling of bearer rejected, already enabled [ 245.967948][T11393] netlink: 'syz.2.1459': attribute type 4 has an invalid length. [ 246.058643][T11400] netlink: 'syz.3.1461': attribute type 16 has an invalid length. [ 246.101458][T11391] bridge0: port 1(dummy0) entered disabled state [ 246.137158][T11400] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1461'. [ 246.222036][T11391] tipc: Resetting bearer [ 246.239655][T11391] tipc: Resetting bearer [ 246.330719][T11399] lo speed is unknown, defaulting to 1000 [ 246.350454][T11348] wg1 speed is unknown, defaulting to 1000 [ 247.555447][T11455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1474'. [ 247.685248][T11399] wg1 speed is unknown, defaulting to 1000 [ 247.759482][T11447] syzkaller0: entered promiscuous mode [ 247.765389][T11447] syzkaller0: entered allmulticast mode [ 248.066324][T11461] tipc: Failed to remove unknown binding: 66,0,0/0:744178269/744178270 [ 248.139676][T11462] tipc: Failed to remove unknown binding: 66,0,0/0:744178269/744178270 [ 249.629451][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 250.071890][T11448] lo speed is unknown, defaulting to 1000 [ 250.072132][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1476'. [ 250.288654][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 250.318398][T11465] bridge0: entered promiscuous mode [ 250.327410][T11465] bridge0: entered allmulticast mode [ 250.343171][T11467] netlink: 'syz.0.1478': attribute type 1 has an invalid length. [ 250.351914][T11467] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1478'. [ 250.430701][T11448] wg1 speed is unknown, defaulting to 1000 [ 250.923360][T11485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.955242][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 251.172892][T11504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1488'. [ 251.246694][T11504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1488'. [ 251.313820][T11506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1488'. [ 251.730139][T11515] netlink: 'syz.4.1490': attribute type 3 has an invalid length. [ 252.242938][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 252.296416][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 252.320704][T11544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1499'. [ 252.349529][T11544] netlink: 'syz.3.1499': attribute type 4 has an invalid length. [ 253.541518][T11581] netlink: 'syz.4.1509': attribute type 13 has an invalid length. [ 253.552414][T11581] netlink: 'syz.4.1509': attribute type 17 has an invalid length. [ 253.609301][T11581] bridge0: port 3(team0) entered blocking state [ 253.615793][T11581] bridge0: port 3(team0) entered listening state [ 253.638509][T11581] 0X: left allmulticast mode [ 253.643504][T11581] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 254.206488][T11598] lo speed is unknown, defaulting to 1000 [ 254.586448][T11606] netlink: 'syz.0.1516': attribute type 4 has an invalid length. [ 254.636545][T11606] netlink: 'syz.0.1516': attribute type 4 has an invalid length. [ 254.740241][T11612] openvswitch: netlink: Missing key (keys=40, expected=80) [ 255.052772][T11622] syzkaller0: left promiscuous mode [ 255.070784][T11622] syzkaller0: left allmulticast mode [ 255.078074][T11622] tipc: Resetting bearer [ 255.196586][T11627] netlink: 'syz.0.1523': attribute type 1 has an invalid length. [ 255.277448][T11598] wg1 speed is unknown, defaulting to 1000 [ 255.312042][T11629] veth0: entered promiscuous mode [ 255.318773][T11629] __nla_validate_parse: 4 callbacks suppressed [ 255.318791][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 258.897429][T11629] macsec1: entered promiscuous mode [ 260.351833][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 260.368864][T11640] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1527'. [ 260.380934][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1526'. [ 260.404148][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1527'. [ 260.504030][T11641] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.578475][T11638] syz_tun: entered allmulticast mode [ 260.585754][T11638] dvmrp6: left allmulticast mode [ 260.633220][T11652] netlink: 'syz.1.1532': attribute type 10 has an invalid length. [ 260.689577][T11655] netlink: 'syz.1.1532': attribute type 10 has an invalid length. [ 260.725743][T11641] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.793761][T11652] dummy0: left allmulticast mode [ 260.801895][T11652] dummy0: left promiscuous mode [ 260.826037][T11652] bridge0: port 1(dummy0) entered disabled state [ 260.853744][T11652] team0: Port device dummy0 added [ 260.893623][T11655] team0: Port device dummy0 removed [ 260.902244][T11634] syz_tun: left allmulticast mode [ 260.943806][T11641] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.971360][T11663] lo speed is unknown, defaulting to 1000 [ 260.993333][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.093195][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1534'. [ 261.148732][T11641] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.233168][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 261.499747][T11681] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 261.551472][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1537'. [ 261.659486][T11681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.679088][T11663] wg1 speed is unknown, defaulting to 1000 [ 261.751039][ T3676] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.805860][ T6453] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.902502][T11689] atomic_op ffff88805635d998 conn xmit_atomic 0000000000000000 [ 261.910659][ T6453] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.943045][ T6453] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.283371][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 262.320987][T11700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1542'. [ 262.794070][T11720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.940561][T11725] FAULT_INJECTION: forcing a failure. [ 262.940561][T11725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.985096][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1550'. [ 263.068893][T11725] CPU: 0 UID: 0 PID: 11725 Comm: syz.4.1549 Not tainted syzkaller #0 PREEMPT(full) [ 263.068925][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.068939][T11725] Call Trace: [ 263.068948][T11725] [ 263.068959][T11725] dump_stack_lvl+0xe8/0x150 [ 263.068994][T11725] should_fail_ex+0x414/0x560 [ 263.069036][T11725] _copy_to_user+0x31/0xb0 [ 263.069066][T11725] simple_read_from_buffer+0xe1/0x170 [ 263.069098][T11725] proc_fail_nth_read+0x1b3/0x220 [ 263.069127][T11725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.069154][T11725] ? rw_verify_area+0x2a6/0x4d0 [ 263.069188][T11725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.069213][T11725] vfs_read+0x200/0xa30 [ 263.069233][T11725] ? fdget_pos+0x247/0x320 [ 263.069265][T11725] ? __pfx___mutex_lock+0x10/0x10 [ 263.069295][T11725] ? __pfx_vfs_read+0x10/0x10 [ 263.069317][T11725] ? __fget_files+0x2a/0x420 [ 263.069349][T11725] ? __fget_files+0x3a0/0x420 [ 263.069374][T11725] ? __fget_files+0x2a/0x420 [ 263.069411][T11725] ksys_read+0x145/0x250 [ 263.069434][T11725] ? __pfx_ksys_read+0x10/0x10 [ 263.069462][T11725] ? rcu_is_watching+0x15/0xb0 [ 263.069490][T11725] ? trace_sys_enter+0x25/0xf0 [ 263.069525][T11725] do_syscall_64+0xec/0xf80 [ 263.069551][T11725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.069572][T11725] ? trace_irq_disable+0x37/0x100 [ 263.069599][T11725] ? clear_bhb_loop+0x60/0xb0 [ 263.069626][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.069646][T11725] RIP: 0033:0x7fdb80d8e15c [ 263.069667][T11725] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 263.069686][T11725] RSP: 002b:00007fdb81cc9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.069710][T11725] RAX: ffffffffffffffda RBX: 00007fdb80fe5fa0 RCX: 00007fdb80d8e15c [ 263.069726][T11725] RDX: 000000000000000f RSI: 00007fdb81cc90a0 RDI: 0000000000000005 [ 263.069740][T11725] RBP: 00007fdb81cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 263.069753][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.069765][T11725] R13: 00007fdb80fe6038 R14: 00007fdb80fe5fa0 R15: 00007ffc58d07e08 [ 263.069801][T11725] [ 263.555741][T11733] bond0: entered promiscuous mode [ 263.582086][T11733] bond0: left promiscuous mode [ 263.681111][T11741] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.714237][T11741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.041737][T11753] lo speed is unknown, defaulting to 1000 [ 264.424821][T11753] wg1 speed is unknown, defaulting to 1000 [ 265.020229][T11792] IPVS: length: 240 != 8 [ 266.417757][T11841] __nla_validate_parse: 20 callbacks suppressed [ 266.417778][T11841] netlink: 12600 bytes leftover after parsing attributes in process `syz.4.1583'. [ 266.437094][T11841] openvswitch: netlink: Flow key attr not present in new flow. [ 266.452560][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 266.510855][T11843] netlink: 'syz.0.1584': attribute type 23 has an invalid length. [ 266.551878][T11852] lo speed is unknown, defaulting to 1000 [ 266.796018][T11852] wg1 speed is unknown, defaulting to 1000 [ 267.559338][T11875] netlink: 'syz.2.1590': attribute type 11 has an invalid length. [ 267.831129][T11882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1594'. [ 267.878693][T11882] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1594'. [ 268.019309][T11884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1595'. [ 268.491318][T11895] lo speed is unknown, defaulting to 1000 [ 268.532905][T11901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 268.587280][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 268.635545][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 268.668126][ C0] bridge0: port 3(team0) entered learning state [ 268.678261][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 268.992406][T11921] netlink: 'syz.0.1603': attribute type 13 has an invalid length. [ 269.171622][T11895] wg1 speed is unknown, defaulting to 1000 [ 269.223154][T11929] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 269.436515][T11946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1610'. [ 269.454529][ T5200] udevd[5200]: worker [11911] terminated by signal 33 (Unknown signal 33) [ 269.475048][ T5200] udevd[5200]: worker [11911] failed while handling '/devices/virtual/block/loop2' [ 269.599549][T11952] netlink: 'syz.0.1612': attribute type 10 has an invalid length. [ 269.687905][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1613'. [ 269.698246][T11954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1613'. [ 269.849690][T11956] openvswitch: netlink: IP tunnel dst address not specified [ 270.224868][T11970] netlink: 'syz.4.1617': attribute type 10 has an invalid length. [ 270.234730][T11970] : (slave wlan1): Opening slave failed [ 270.372085][T11977] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 270.421539][T11977] bond6: entered promiscuous mode [ 270.428214][T11977] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.582707][T11995] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 270.620219][T11993] lo speed is unknown, defaulting to 1000 [ 270.938261][T12002] bond6: option ad_actor_sys_prio: invalid value (0) [ 270.956087][T12002] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 271.129713][T12002] bond6 (unregistering): Released all slaves [ 271.210765][T11993] wg1 speed is unknown, defaulting to 1000 [ 271.603273][T12018] __nla_validate_parse: 4 callbacks suppressed [ 271.603293][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 272.191400][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 272.216259][T12034] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 272.323334][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1633'. [ 272.495335][T12044] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 273.468538][T12075] netlink: 'syz.4.1642': attribute type 2 has an invalid length. [ 273.889332][T12080] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1644'. [ 274.236551][T12093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1650'. [ 274.422248][T12100] vcan0: entered allmulticast mode [ 274.428170][T12097] lo speed is unknown, defaulting to 1000 [ 274.606989][T12104] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 274.630237][T12104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.222673][T12098] lo speed is unknown, defaulting to 1000 [ 275.230106][T12097] wg1 speed is unknown, defaulting to 1000 [ 275.351060][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'. [ 275.402953][T12119] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1658'. [ 275.430137][T12119] netlink: 'syz.1.1658': attribute type 10 has an invalid length. [ 275.433700][T12125] 8021q: VLANs not supported on sit0 [ 275.565853][T12134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1663'. [ 275.715480][T12143] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1664'. [ 275.778117][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 276.011895][T12146] bond6: entered promiscuous mode [ 276.030288][T12146] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.108412][T12149] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.115656][T12149] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 276.156712][T12149] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 276.206132][T12153] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 276.223078][T12153] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 276.299223][T12155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.358505][T12098] wg1 speed is unknown, defaulting to 1000 [ 276.415761][ T5885] lo speed is unknown, defaulting to 1000 [ 276.430355][ T5885] syz0: Port: 1 Link ACTIVE [ 276.474403][T12148] lo speed is unknown, defaulting to 1000 [ 276.582307][T10441] lo speed is unknown, defaulting to 1000 [ 276.964448][T12180] __nla_validate_parse: 1 callbacks suppressed [ 276.964471][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1673'. [ 277.090547][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 277.329147][T12148] wg1 speed is unknown, defaulting to 1000 [ 277.386056][T12190] lo speed is unknown, defaulting to 1000 [ 278.075405][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 278.091837][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1682'. [ 278.325588][T12225] tipc: Started in network mode [ 278.346058][T12225] tipc: Node identity b2a3f7f7cbcc, cluster identity 4711 [ 278.380826][T12225] tipc: Enabled bearer , priority 0 [ 278.415341][T12225] tipc: Disabling bearer [ 278.473802][T12190] wg1 speed is unknown, defaulting to 1000 [ 278.561830][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 278.638844][T12230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1685'. [ 278.669437][T12230] netlink: 'syz.1.1685': attribute type 1 has an invalid length. [ 279.442563][T12246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.477431][T12249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.769537][T12259] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1690'. [ 279.812062][T12259] 0{X: renamed from gretap0 (while UP) [ 279.863940][T12263] netlink: 'syz.1.1691': attribute type 1 has an invalid length. [ 279.883500][T12259] 0{X: entered allmulticast mode [ 279.895288][T12259] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 280.013625][T12264] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 280.067883][T12264] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 280.106721][T12264] bond7: (slave xfrm1): making interface the new active one [ 280.120106][T12264] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 280.592903][T12274] veth0_to_bridge: entered promiscuous mode [ 280.863280][T12299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.870663][T12299] IPv6: NLM_F_CREATE should be set when creating new route [ 280.891969][T12298] syzkaller0: entered promiscuous mode [ 280.900550][T12298] syzkaller0: entered allmulticast mode [ 280.915656][T12298] tipc: Resetting bearer [ 281.062922][T12273] veth0_to_bridge: left promiscuous mode [ 281.224345][T12316] macsec2: entered promiscuous mode [ 281.230257][T12316] macsec2: entered allmulticast mode [ 281.235747][T12316] veth1_macvtap: entered allmulticast mode [ 281.251795][T12316] veth1_macvtap: left allmulticast mode [ 281.754189][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 282.003931][T12348] pim6reg: entered allmulticast mode [ 282.031045][T12350] Cannot find add_set index 2 as target [ 282.186213][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'. [ 282.227827][T12354] sctp: [Deprecated]: syz.3.1715 (pid 12354) Use of int in max_burst socket option. [ 282.227827][T12354] Use struct sctp_assoc_value instead [ 282.480575][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'. [ 282.498487][T12364] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 282.551276][T12366] syz.3.1718 uses old SIOCAX25GETINFO [ 282.781581][T12382] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 282.846004][T12382] bridge0: entered promiscuous mode [ 282.856053][T12382] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 282.879314][T12379] pim6reg99999999: entered allmulticast mode [ 282.930230][T12390] xt_hashlimit: overflow, try lower: 3/0 [ 282.950868][T12390] IPv6: NLM_F_REPLACE set, but no existing node found! [ 282.992862][T12394] netlink: 'syz.3.1729': attribute type 13 has an invalid length. [ 283.153015][T12404] netlink: 'syz.4.1732': attribute type 6 has an invalid length. [ 283.167591][T12404] netlink: 14577 bytes leftover after parsing attributes in process `syz.4.1732'. [ 283.222240][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 283.879739][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 283.932287][T12429] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1739'. [ 284.026903][ C0] bridge0: port 3(team0) entered forwarding state [ 284.033400][ C0] bridge0: topology change detected, propagating [ 284.843421][T12446] lo speed is unknown, defaulting to 1000 [ 285.348621][T12446] wg1 speed is unknown, defaulting to 1000 [ 285.421018][T12460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'. [ 285.806526][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 285.994688][T12501] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode [ 286.032578][T12501] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode [ 286.403648][T12520] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 286.459786][T12523] syz_tun: entered allmulticast mode [ 286.522383][T12520] dvmrp8: entered allmulticast mode [ 286.535647][T12526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'. [ 286.552814][T12520] netlink: 'syz.1.1763': attribute type 10 has an invalid length. [ 286.579891][T12518] syz_tun: left allmulticast mode [ 286.840933][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 287.095529][T12561] lo speed is unknown, defaulting to 1000 [ 287.256123][T12564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.484825][T12587] __nla_validate_parse: 1 callbacks suppressed [ 287.484846][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1781'. [ 287.881910][T12604] netlink: 'syz.4.1783': attribute type 2 has an invalid length. [ 287.923198][T12604] : entered promiscuous mode [ 287.941113][T12561] wg1 speed is unknown, defaulting to 1000 [ 287.989031][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1786'. [ 288.339381][T12615] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1787'. [ 288.350923][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1788'. [ 288.616257][T12628] openvswitch: netlink: Tunnel attr 110 out of range max 16 [ 288.666351][T12630] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1793'. [ 288.730565][T12633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.785827][T12634] netlink: 'syz.1.1794': attribute type 1 has an invalid length. [ 288.841093][T12634] bond8: entered promiscuous mode [ 288.846746][T12634] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.951396][T12644] bond8: (slave veth7): making interface the new active one [ 288.982720][T12644] veth7: entered promiscuous mode [ 289.013802][T12644] bond8: (slave veth7): Enslaving as an active interface with an up link [ 289.025874][T12648] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.257781][T12656] vlan2: entered allmulticast mode [ 289.263294][T12656] bridge0: port 3(vlan2) entered blocking state [ 289.298656][T12656] bridge0: port 3(vlan2) entered disabled state [ 289.329759][T12656] vlan2: entered promiscuous mode [ 289.336367][T12661] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1802'. [ 289.544208][T12672] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1804'. [ 289.581207][T12671] lo speed is unknown, defaulting to 1000 [ 289.609359][T12684] IPVS: Error connecting to the multicast addr [ 289.799411][T12693] netlink: 'syz.1.1808': attribute type 21 has an invalid length. [ 289.808302][T12693] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1808'. [ 289.819001][T12693] netlink: 'syz.1.1808': attribute type 5 has an invalid length. [ 289.827962][T12693] netlink: 'syz.1.1808': attribute type 6 has an invalid length. [ 289.835966][T12693] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1808'. [ 289.916345][T12685] lo speed is unknown, defaulting to 1000 [ 289.925593][T12671] wg1 speed is unknown, defaulting to 1000 [ 290.020705][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1810'. [ 290.105779][T12698] delete_channel: no stack [ 290.332251][T12685] wg1 speed is unknown, defaulting to 1000 [ 290.509062][T12710] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 290.621483][T12712] netlink: 'syz.4.1813': attribute type 3 has an invalid length. [ 290.770309][T12725] netlink: 'syz.4.1817': attribute type 2 has an invalid length. [ 290.828628][T12701] lo speed is unknown, defaulting to 1000 [ 291.294381][T12701] wg1 speed is unknown, defaulting to 1000 [ 291.350034][T12740] netlink: get zone limit has 8 unknown bytes [ 291.532723][T12718] infiniband !yz!: set down [ 291.538837][T12718] infiniband !yz!: added team_slave_0 [ 291.683063][T12718] RDS/IB: !yz!: added [ 291.714807][T12718] smc: adding ib device !yz! with port count 1 [ 291.737913][T12718] smc: ib device !yz! port 1 has no pnetid [ 291.879923][T12746] team0: left allmulticast mode [ 291.885337][T12746] team_slave_0: left allmulticast mode [ 291.896364][T12746] team_slave_1: left allmulticast mode [ 291.903764][T12746] team0: left promiscuous mode [ 291.927347][T12746] team_slave_0: left promiscuous mode [ 291.933352][T12746] team_slave_1: left promiscuous mode [ 291.955820][T12746] bridge0: port 3(team0) entered disabled state [ 291.983543][T12746] : (slave batadv0): Releasing backup interface [ 292.001976][T12746] bridge_slave_0: left allmulticast mode [ 292.009909][T12746] bridge_slave_0: left promiscuous mode [ 292.016164][T12746] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.033953][T12746] bridge_slave_1: left allmulticast mode [ 292.043084][T12746] bridge_slave_1: left promiscuous mode [ 292.049233][T12746] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.072321][T12746] : (slave bond_slave_0): Releasing backup interface [ 292.094275][T12746] : (slave bond_slave_1): Releasing backup interface [ 292.130357][T12746] team0: Port device team_slave_0 removed [ 292.153343][T12746] team0: Port device team_slave_1 removed [ 292.171071][T12746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.194102][T12746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.208878][T12746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.219441][T12746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.229059][T12751] ieee802154 phy1 wpan1: encryption failed: -90 [ 292.248578][T12746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.519499][T12763] __nla_validate_parse: 3 callbacks suppressed [ 292.519522][T12763] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1824'. [ 293.805948][T12796] sit0: entered promiscuous mode [ 293.829518][T12796] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1834'. [ 294.123606][T12783] lo speed is unknown, defaulting to 1000 [ 294.368760][T12816] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 294.388680][T12820] netlink: 'syz.0.1840': attribute type 10 has an invalid length. [ 294.397492][T12820] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1840'. [ 294.448231][T12816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.456079][T12820] bond0: entered promiscuous mode [ 294.462082][T12820] bond_slave_0: entered promiscuous mode [ 294.468810][T12820] bond_slave_1: entered promiscuous mode [ 294.475214][T12820] bridge0: port 4(bond0) entered blocking state [ 294.485527][T12820] bridge0: port 4(bond0) entered disabled state [ 294.492879][T12820] bond0: entered allmulticast mode [ 294.498740][T12820] bond_slave_0: entered allmulticast mode [ 294.504759][T12820] bond_slave_1: entered allmulticast mode [ 294.520025][T12820] bridge0: port 4(bond0) entered blocking state [ 294.526599][T12820] bridge0: port 4(bond0) entered forwarding state [ 294.616563][T12822] bond3: (slave geneve4): making interface the new active one [ 294.664473][T12822] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 294.699897][T12783] wg1 speed is unknown, defaulting to 1000 [ 294.867615][T12824] lo speed is unknown, defaulting to 1000 [ 295.511559][T12855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1848'. [ 295.568931][T12854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1848'. [ 295.588050][T12824] wg1 speed is unknown, defaulting to 1000 [ 295.665121][T12863] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1849'. [ 295.828678][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 295.868279][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 295.994827][T12871] lo speed is unknown, defaulting to 1000 [ 296.131727][T12880] tipc: Enabling of bearer rejected, already enabled [ 296.413331][T12887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1859'. [ 296.454265][T12889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1860'. [ 296.624205][T12897] syzkaller0: entered promiscuous mode [ 296.639273][T12897] syzkaller0: entered allmulticast mode [ 296.655065][T12871] wg1 speed is unknown, defaulting to 1000 [ 296.791153][T12905] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 296.799505][T12905] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 296.890469][T12887] ip6tnl0: Caught tx_queue_len zero misconfig [ 297.009498][T12910] tipc: Enabling of bearer rejected, already enabled [ 297.234616][T12916] IPVS: Error connecting to the multicast addr [ 297.846008][T12930] syzkaller0: entered promiscuous mode [ 297.934447][T12930] syzkaller0: entered allmulticast mode [ 299.872564][T12951] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 299.897125][T12951] __nla_validate_parse: 1 callbacks suppressed [ 299.897147][T12951] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1875'. [ 300.005105][T12952] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 300.029396][T12952] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1875'. [ 300.041286][T12954] lo speed is unknown, defaulting to 1000 [ 300.049128][T12962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1876'. [ 300.071993][T12960] netlink: 'syz.1.1878': attribute type 29 has an invalid length. [ 300.291174][T12972] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 300.316492][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'. [ 300.430753][T12972] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 300.450484][T12970] bridge0: port 5(vlan3) entered blocking state [ 300.503323][T12970] bridge0: port 5(vlan3) entered disabled state [ 300.525729][T12970] vlan3: entered allmulticast mode [ 300.534510][T12970] dummy0: entered allmulticast mode [ 300.543366][T12970] vlan3: entered promiscuous mode [ 300.552922][T12970] dummy0: entered promiscuous mode [ 300.592205][T12970] bridge0: port 5(vlan3) entered blocking state [ 300.598933][T12970] bridge0: port 5(vlan3) entered forwarding state [ 300.650772][T12954] wg1 speed is unknown, defaulting to 1000 [ 300.690900][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 300.875318][T12981] netlink: 'syz.3.1884': attribute type 19 has an invalid length. [ 300.947506][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 301.021298][T12981] netlink: 'syz.3.1884': attribute type 19 has an invalid length. [ 301.057082][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 301.110267][T12989] lo speed is unknown, defaulting to 1000 [ 301.156389][T12994] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 301.370643][T12999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1887'. [ 301.519726][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 301.792734][T13005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.809090][T12989] wg1 speed is unknown, defaulting to 1000 [ 301.809120][T12985] lo speed is unknown, defaulting to 1000 [ 302.385555][T12985] wg1 speed is unknown, defaulting to 1000 [ 302.545997][T13038] xt_hashlimit: max too large, truncated to 1048576 [ 302.610172][T13038] netlink: 'syz.2.1898': attribute type 2 has an invalid length. [ 302.629371][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 302.730029][T13040] netlink: 'syz.1.1899': attribute type 3 has an invalid length. [ 303.907865][T13072] x9: renamed from bridge_slave_0 (while UP) [ 303.942447][T13072] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 304.126962][T13074] syzkaller0: entered promiscuous mode [ 304.147015][T13074] syzkaller0: entered allmulticast mode [ 304.526266][T13082] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 304.536701][T13081] lo speed is unknown, defaulting to 1000 [ 305.319593][T13103] __nla_validate_parse: 9 callbacks suppressed [ 305.319614][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'. [ 305.350311][T13081] wg1 speed is unknown, defaulting to 1000 [ 305.395098][T13099] lo speed is unknown, defaulting to 1000 [ 305.621587][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1922'. [ 306.087212][T13099] wg1 speed is unknown, defaulting to 1000 [ 306.498145][ T30] audit: type=1800 audit(1768734955.892:5): pid=13151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1930" name="cgroup.controllers" dev="tmpfs" ino=2117 res=0 errno=0 [ 306.674922][T13166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1933'. [ 306.939962][T13178] netlink: 'syz.2.1937': attribute type 14 has an invalid length. [ 307.408425][T13189] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.767069][T13204] IPVS: length: 153 != 24 [ 307.895678][T13205] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1945'. [ 308.530463][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1947'. [ 308.543091][T13227] lo speed is unknown, defaulting to 1000 [ 308.742286][T13236] openvswitch: netlink: Message has 592 unknown bytes. [ 308.749620][T13236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.916955][T13227] wg1 speed is unknown, defaulting to 1000 [ 308.916962][T13224] lo speed is unknown, defaulting to 1000 [ 309.157643][T13252] SET target dimension over the limit! [ 309.416403][T13255] bridge0: left promiscuous mode [ 309.432424][T13255] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.548053][T13255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.595981][T13224] wg1 speed is unknown, defaulting to 1000 [ 309.649009][T13257] lo speed is unknown, defaulting to 1000 [ 310.119983][T13257] wg1 speed is unknown, defaulting to 1000 [ 310.771106][T13288] netlink: 'syz.1.1968': attribute type 12 has an invalid length. [ 311.001966][T13299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1972'. [ 312.095972][T13311] lo speed is unknown, defaulting to 1000 [ 312.916636][T13311] wg1 speed is unknown, defaulting to 1000 [ 313.008886][T13338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1979'. [ 313.173526][T13341] syzkaller0: entered promiscuous mode [ 313.206999][T13341] syzkaller0: entered allmulticast mode [ 313.314629][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1982'. [ 314.031679][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 315.759117][T13375] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 315.795780][T13375] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 315.816901][T13375] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 316.238028][T13408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.281993][T13408] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1994'. [ 316.687140][ T13] bond4: (slave bridge3): link status up again after 0 ms [ 316.695069][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 316.827152][ T12] bond4: (slave bridge3): failed to get link speed/duplex [ 316.895576][T13422] sit0: entered promiscuous mode [ 316.906705][T13422] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 316.915704][T13422] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2000'. [ 316.938355][ T4503] bond4: (slave bridge3): failed to get link speed/duplex [ 316.955671][T13422] ip6gretap1: entered promiscuous mode [ 317.049316][ T36] bond4: (slave bridge3): failed to get link speed/duplex [ 317.168113][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 317.262831][T13438] lo speed is unknown, defaulting to 1000 [ 317.296993][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 317.456907][ T12] bond4: (slave bridge3): failed to get link speed/duplex [ 317.491073][T13452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.567072][ T13] bond4: (slave bridge3): failed to get link speed/duplex [ 317.671701][T13456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'. [ 317.788518][T13438] wg1 speed is unknown, defaulting to 1000 [ 318.034781][T13469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2014'. [ 318.443377][T13485] lo: Caught tx_queue_len zero misconfig [ 318.456902][T13485] netlink: 'syz.0.2021': attribute type 2 has an invalid length. [ 318.480600][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2021'. [ 318.560880][T13489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2023'. [ 318.957415][T13501] lo speed is unknown, defaulting to 1000 [ 319.212757][T13501] wg1 speed is unknown, defaulting to 1000 [ 319.662196][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 319.767269][T13526] chnl_net:caif_netlink_parms(): no params data found [ 319.924281][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 320.368083][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 320.398678][T13556] netlink: 1364 bytes leftover after parsing attributes in process `syz.1.2041'. [ 320.477246][ T4524] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.669707][ T4524] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.096096][ T4524] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.131835][ T4524] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.176672][T13574] netlink: 'syz.4.2044': attribute type 12 has an invalid length. [ 321.227895][T13569] syzkaller1: entered promiscuous mode [ 321.233699][T13569] syzkaller1: entered allmulticast mode [ 321.562411][T13588] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 321.697996][ T4503] net_ratelimit: 21 callbacks suppressed [ 321.698017][ T4503] bond4: (slave bridge3): failed to get link speed/duplex [ 321.812705][T13392] udevd[13392]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 321.917910][ T4524] bond4: (slave bridge3): failed to get link speed/duplex [ 321.979359][T13618] pimreg: entered allmulticast mode [ 322.012010][T13620] x_tables: unsorted entry at hook 1 [ 322.037156][ T6305] bond4: (slave bridge3): failed to get link speed/duplex [ 322.106034][T13625] netlink: 'syz.2.2059': attribute type 2 has an invalid length. [ 322.144839][T13625] !: entered promiscuous mode [ 322.172535][T13628] __nla_validate_parse: 4 callbacks suppressed [ 322.172557][T13628] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2061'. [ 322.203937][T13628] syzkaller0: entered promiscuous mode [ 322.216956][T13628] syzkaller0: entered allmulticast mode [ 322.267653][T13628] tipc: Enabled bearer , priority 0 [ 322.285387][T13627] tipc: Resetting bearer [ 322.314678][T13627] tipc: Disabling bearer [ 322.343057][T13637] erspan0: entered promiscuous mode [ 322.367778][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 322.416939][ T6305] bond4: (slave bridge3): failed to get link speed/duplex [ 322.434811][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.493561][T13640] IPVS: Scheduler module ip_vs_sip not found [ 322.511456][T13646] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 322.547052][ T6305] bond4: (slave bridge3): failed to get link speed/duplex [ 322.678176][ T4524] bond4: (slave bridge3): failed to get link speed/duplex [ 322.761307][T13655] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2070'. [ 322.778483][T13657] netlink: 'syz.0.2071': attribute type 39 has an invalid length. [ 322.843006][ T4524] bond4: (slave bridge3): failed to get link speed/duplex [ 322.855086][T13659] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2071'. [ 322.980499][ T4503] bond4: (slave bridge3): failed to get link speed/duplex [ 323.108297][ T4524] bond4: (slave bridge3): failed to get link speed/duplex [ 323.232317][T13682] bond8: Removing last ns target with arp_interval on [ 323.247025][ T12] bond4: (slave bridge3): failed to get link speed/duplex [ 323.248362][T13682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2077'. [ 323.372583][T13689] tipc: Enabling of bearer rejected, media not registered [ 323.409586][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2079'. [ 323.513995][T13699] netlink: 'syz.3.2082': attribute type 1 has an invalid length. [ 323.525576][T13699] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2082'. [ 324.204389][T13732] xt_TCPMSS: Only works on TCP SYN packets [ 324.368265][T13737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2093'. [ 324.456665][T13744] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 324.552151][T13744] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 324.569981][T13744] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 324.637957][T13748] bond10: (slave gretap1): making interface the new active one [ 324.645838][T13752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2095'. [ 324.655811][T13748] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 324.838505][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2098'. [ 324.981253][T13767] netlink: 'syz.4.2101': attribute type 16 has an invalid length. [ 325.089366][T13772] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 325.112099][T13771] bond0: Caught tx_queue_len zero misconfig [ 325.478088][T13784] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 325.527301][T13784] bond3: entered promiscuous mode [ 325.532521][T13784] bond3: entered allmulticast mode [ 325.539041][T13784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.612506][T13787] netlink: 'syz.1.2107': attribute type 2 has an invalid length. [ 325.678049][T13787] netlink: 'syz.1.2107': attribute type 11 has an invalid length. [ 325.713987][T13790] netlink: 'syz.3.2108': attribute type 5 has an invalid length. [ 325.877226][T13794] lo speed is unknown, defaulting to 1000 [ 326.551841][T13794] wg1 speed is unknown, defaulting to 1000 [ 326.788431][ T4376] net_ratelimit: 27 callbacks suppressed [ 326.788454][ T4376] bond4: (slave bridge3): failed to get link speed/duplex [ 326.858576][T13840] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 326.966911][ T4376] bond4: (slave bridge3): failed to get link speed/duplex [ 327.128644][ T37] bond4: (slave bridge3): failed to get link speed/duplex [ 327.235565][T13852] __nla_validate_parse: 11 callbacks suppressed [ 327.235586][T13852] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2125'. [ 327.320941][T13852] batadv2: entered promiscuous mode [ 327.333696][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'. [ 327.377628][ T37] bond4: (slave bridge3): failed to get link speed/duplex [ 327.396001][T13860] netlink: 'syz.1.2127': attribute type 12 has an invalid length. [ 327.488363][ T4503] bond4: (slave bridge3): failed to get link speed/duplex [ 327.586262][T13863] lo speed is unknown, defaulting to 1000 [ 327.597059][ T4503] bond4: (slave bridge3): failed to get link speed/duplex [ 327.717367][ T37] bond4: (slave bridge3): failed to get link speed/duplex [ 327.839567][ T37] bond4: (slave bridge3): failed to get link speed/duplex [ 327.960073][ T6523] bond4: (slave bridge3): failed to get link speed/duplex [ 328.078798][ T6523] bond4: (slave bridge3): failed to get link speed/duplex [ 328.432085][T13895] rdma_op ffff8880322161f0 conn xmit_rdma 0000000000000000 [ 328.492199][T13863] wg1 speed is unknown, defaulting to 1000 [ 328.993603][T13913] SET target dimension over the limit! [ 329.135148][T13915] lo speed is unknown, defaulting to 1000 [ 329.174271][T13919] Bluetooth: MGMT ver 1.23 [ 329.460238][T13928] erspan0: left promiscuous mode [ 329.469490][T13928] sit0: left promiscuous mode [ 329.485258][T13928] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.565892][T13915] wg1 speed is unknown, defaulting to 1000 [ 330.675384][T13956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2152'. [ 330.831851][T13960] netlink: 'syz.0.2153': attribute type 11 has an invalid length. [ 330.843437][T13960] sctp: [Deprecated]: syz.0.2153 (pid 13960) Use of int in max_burst socket option. [ 330.843437][T13960] Use struct sctp_assoc_value instead [ 331.055142][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'. [ 331.239632][ T5150] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 331.247028][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 331.290460][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2158'. [ 331.338545][T13967] erspan0: entered promiscuous mode [ 331.382488][T13967] macvtap1: entered promiscuous mode [ 331.397225][T13967] macvtap1: entered allmulticast mode [ 331.415880][T13967] erspan0: entered allmulticast mode [ 331.482619][T13984] erspan0: left allmulticast mode [ 331.497236][T13984] erspan0: left promiscuous mode [ 331.627162][T13968] lo speed is unknown, defaulting to 1000 [ 331.857575][ T12] net_ratelimit: 26 callbacks suppressed [ 331.857599][ T12] bond4: (slave bridge3): failed to get link speed/duplex [ 331.872551][T14001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2162'. [ 331.912808][T14003] netlink: 'syz.1.2163': attribute type 1 has an invalid length. [ 331.932416][T14003] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2163'. [ 331.987439][ T60] bond4: (slave bridge3): failed to get link speed/duplex [ 332.092187][T13968] wg1 speed is unknown, defaulting to 1000 [ 332.092227][T13998] lo speed is unknown, defaulting to 1000 [ 332.105349][ T60] bond4: (slave bridge3): failed to get link speed/duplex [ 332.227113][ T12] bond4: (slave bridge3): failed to get link speed/duplex [ 332.379258][ T36] bond4: (slave bridge3): failed to get link speed/duplex [ 332.558038][ T60] bond4: (slave bridge3): failed to get link speed/duplex [ 332.677121][ T1007] bond4: (slave bridge3): failed to get link speed/duplex [ 332.797260][ T12] bond4: (slave bridge3): failed to get link speed/duplex [ 332.864231][T14040] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 332.965841][T13998] wg1 speed is unknown, defaulting to 1000 [ 333.107083][ T36] bond4: (slave bridge3): failed to get link speed/duplex [ 333.227038][ T1007] bond4: (slave bridge3): failed to get link speed/duplex [ 333.854850][ T60] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.870510][ T60] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.963641][ T60] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.990466][ T60] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.260161][T14069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2181'. [ 334.334611][T14074] netlink: 'syz.1.2183': attribute type 21 has an invalid length. [ 334.390898][T14074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2183'. [ 334.531509][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 334.798782][T14092] sctp: [Deprecated]: syz.1.2188 (pid 14092) Use of int in max_burst socket option deprecated. [ 334.798782][T14092] Use struct sctp_assoc_value instead [ 335.512206][T14127] lo speed is unknown, defaulting to 1000 [ 335.520347][T14132] syzkaller1: entered promiscuous mode [ 335.526057][T14132] syzkaller1: entered allmulticast mode [ 335.720467][T14141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2202'. [ 335.955896][T14153] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2207'. [ 335.972296][T14127] wg1 speed is unknown, defaulting to 1000 [ 336.640526][T14174] netlink: 'syz.1.2212': attribute type 29 has an invalid length. [ 336.648564][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'. [ 336.737781][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2213'. [ 337.619629][T14186] netlink: 'syz.3.2217': attribute type 1 has an invalid length. [ 337.637044][T14186] netlink: 'syz.3.2217': attribute type 2 has an invalid length. [ 337.645009][T14186] netlink: 'syz.3.2217': attribute type 1 has an invalid length. [ 337.653336][T14186] netlink: 'syz.3.2217': attribute type 3 has an invalid length. [ 337.663217][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 337.804652][T14208] tunl0: Caught tx_queue_len zero misconfig [ 337.966535][ T6523] syzkaller0: tun_net_xmit 76 [ 337.974227][ T6523] syzkaller0: tun_net_xmit 48 [ 337.987105][T10426] syzkaller0: tun_net_xmit 76 [ 338.108997][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2224'. [ 338.197615][T14215] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2224'. [ 341.901915][T14210] veth11: entered promiscuous mode [ 341.909241][T14223] tipc: Enabling of bearer rejected, already enabled [ 342.118407][T14251] tipc: Enabling of bearer rejected, already enabled [ 342.310838][T14259] sctp: [Deprecated]: syz.4.2235 (pid 14259) Use of int in max_burst socket option. [ 342.310838][T14259] Use struct sctp_assoc_value instead [ 342.344887][T14264] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 342.401867][T14265] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 342.440813][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 342.488309][T14276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2239'. [ 342.544683][T14279] SET target dimension over the limit! [ 342.756525][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2242'. [ 343.114675][T14308] netlink: 'syz.0.2249': attribute type 1 has an invalid length. [ 343.131266][T14309] netlink: 'syz.0.2249': attribute type 1 has an invalid length. [ 343.183161][T14308] 8021q: adding VLAN 0 to HW filter on device bond9 [ 343.219254][T14313] bond9: (slave ip6gretap3): making interface the new active one [ 343.290580][T14313] bond9: (slave ip6gretap3): Enslaving as an active interface with an up link [ 343.391955][T14308] veth7: entered promiscuous mode [ 343.402843][T14308] bond9: (slave veth7): Enslaving as an active interface with a down link [ 343.421911][T14309] erspan0: entered allmulticast mode [ 343.452952][T14309] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 343.481268][T14324] batadv2: entered promiscuous mode [ 343.514517][T14327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2252'. [ 343.598225][T14332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2252'. [ 343.873445][T14338] lo speed is unknown, defaulting to 1000 [ 343.945873][T14343] bridge0: entered promiscuous mode [ 344.243689][T14357] ipvlan2: entered promiscuous mode [ 344.252790][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 344.569254][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2263'. [ 344.622550][T14338] wg1 speed is unknown, defaulting to 1000 [ 345.096321][T14394] lo speed is unknown, defaulting to 1000 [ 345.408920][T14394] wg1 speed is unknown, defaulting to 1000 [ 346.015447][T14418] lo speed is unknown, defaulting to 1000 [ 346.644930][T14442] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2279'. [ 346.739434][T14418] wg1 speed is unknown, defaulting to 1000 [ 346.785614][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2279'. [ 346.795596][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2279'. [ 347.168318][T14457] syzkaller1: entered promiscuous mode [ 347.173882][T14457] syzkaller1: entered allmulticast mode [ 347.183253][T14457] sctp: [Deprecated]: syz.3.2281 (pid 14457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.183253][T14457] Use struct sctp_sack_info instead [ 348.170234][T14484] __nla_validate_parse: 3 callbacks suppressed [ 348.170256][T14484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2289'. [ 348.317389][T14493] net_ratelimit: 1 callbacks suppressed [ 348.317409][T14493] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 348.442863][T14498] lo speed is unknown, defaulting to 1000 [ 348.467452][T14498] lo speed is unknown, defaulting to 1000 [ 348.500333][T14498] lo speed is unknown, defaulting to 1000 [ 348.598121][T14498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 348.674740][T14498] lo speed is unknown, defaulting to 1000 [ 348.720649][T14498] lo speed is unknown, defaulting to 1000 [ 348.768212][T14498] lo speed is unknown, defaulting to 1000 [ 348.783414][T14498] lo speed is unknown, defaulting to 1000 [ 348.795259][T14498] lo speed is unknown, defaulting to 1000 [ 348.830792][T14509] netlink: 'syz.1.2298': attribute type 1 has an invalid length. [ 348.839770][T14509] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2298'. [ 348.849501][T14509] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2298'. [ 348.867451][T14509] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2298'. [ 349.066278][T14516] netlink: 'syz.1.2301': attribute type 2 has an invalid length. [ 349.111246][T14514] tipc: Enabled bearer , priority 0 [ 349.127737][T14514] syzkaller0: entered promiscuous mode [ 349.143706][T14514] syzkaller0: entered allmulticast mode [ 349.184218][T14514] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2299'. [ 349.260613][T14514] tipc: Resetting bearer [ 349.313145][T14513] tipc: Resetting bearer [ 349.352041][T14513] tipc: Disabling bearer [ 349.721247][T14547] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 349.739700][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 350.517172][T14572] sctp: [Deprecated]: syz.4.2317 (pid 14572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.517172][T14572] Use struct sctp_sack_info instead [ 350.637887][T14575] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20002 [ 350.710400][T14579] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20002 [ 350.771121][T14582] tipc: Enabling of bearer rejected, already enabled [ 350.853049][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 350.863018][T14586] netlink: 'syz.2.2322': attribute type 2 has an invalid length. [ 351.034058][T14595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2324'. [ 351.195160][T14595] nbd: socks must be embedded in a SOCK_ITEM attr [ 351.203334][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2328'. [ 351.218408][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2328'. [ 351.901192][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.913865][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.924436][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.938917][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.949277][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.024787][ T37] tipc: Resetting bearer [ 352.314212][ T37] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 352.324360][ T37] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 0a:50:e5:9b:95:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 352.340329][T14629] netlink: 'syz.4.2336': attribute type 21 has an invalid length. [ 352.718617][ T37] bond7 (unregistering): (slave xfrm1): Releasing backup interface [ 352.866132][T14640] netlink: 'syz.0.2338': attribute type 4 has an invalid length. [ 352.920011][ T37] bond10 (unregistering): (slave gretap1): Releasing active interface [ 353.074009][ T37] dvmrp8 (unregistering): left allmulticast mode [ 353.369414][ T37] tipc: Disabling bearer [ 353.658157][ T37] bond1 (unregistering): (slave veth3): Releasing active interface [ 353.668079][ T37] bond1 (unregistering): Released all slaves [ 353.776323][ T37] bond2 (unregistering): Released all slaves [ 353.883828][ T37] bond3 (unregistering): Released all slaves [ 353.989083][ T37] bond4 (unregistering): Released all slaves [ 354.003472][ T37] bond0 (unregistering): Released all slaves [ 354.036389][ T5842] Bluetooth: hci2: command tx timeout [ 354.122697][ T37] bond5 (unregistering): Released all slaves [ 354.228041][ T37] bond6 (unregistering): Released all slaves [ 354.242321][ T37] bond7 (unregistering): Released all slaves [ 354.358906][ T37] bond8 (unregistering): (slave veth7): Releasing backup interface [ 354.366991][ T37] veth7: left promiscuous mode [ 354.373561][ T37] bond8 (unregistering): Released all slaves [ 354.387799][ T37] bond9 (unregistering): Released all slaves [ 354.402163][ T37] bond10 (unregistering): Released all slaves [ 354.422019][T14629] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2336'. [ 354.531511][T14653] xt_bpf: check failed: parse error [ 354.550370][T14649] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.565048][T14653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.587705][T14649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.638409][ T37] !9: left promiscuous mode [ 354.775220][ T37] : left promiscuous mode [ 354.800212][T14622] lo speed is unknown, defaulting to 1000 [ 354.875276][T14668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2344'. [ 354.876128][ T37] tipc: Left network mode [ 354.921556][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 355.361743][T14622] wg1 speed is unknown, defaulting to 1000 [ 355.740380][T14695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.929480][T14707] bridge7: entered promiscuous mode [ 356.037156][T10425] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 356.049231][T10425] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 356.057777][T10425] CPU: 0 UID: 0 PID: 10425 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 356.067496][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.077783][T10425] Workqueue: events l2cap_info_timeout [ 356.083418][T10425] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 356.089339][T10425] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 356.108972][T10425] RSP: 0018:ffffc90003e877a0 EFLAGS: 00010202 [ 356.115263][T10425] RAX: dffffc0000000000 RBX: ffffffff892f99b8 RCX: 0000000080000001 [ 356.123275][T10425] RDX: 0000000000000000 RSI: ffffffff892f99b8 RDI: 000000000000004c [ 356.131280][T10425] RBP: ffffffff8a627b96 R08: 0000000000000001 R09: 0000000000000000 [ 356.139280][T10425] R10: dffffc0000000000 R11: ffffffff8a627b50 R12: 0000000000000000 [ 356.147281][T10425] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 356.155374][T10425] FS: 0000000000000000(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 356.164447][T10425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.171105][T10425] CR2: 00007f971c9e7dac CR3: 0000000079faa000 CR4: 00000000003526f0 [ 356.179117][T10425] Call Trace: [ 356.182423][T10425] [ 356.185380][T10425] __kasan_check_byte+0x12/0x40 [ 356.190292][T10425] lock_acquire+0x84/0x340 [ 356.194738][T10425] ? work_grab_pending+0x3d6/0x8e0 [ 356.199875][T10425] lock_sock_nested+0x48/0x100 [ 356.204676][T10425] ? l2cap_sock_ready_cb+0x46/0x170 [ 356.209910][T10425] l2cap_sock_ready_cb+0x46/0x170 [ 356.214969][T10425] l2cap_conn_start+0x700/0xcd0 [ 356.219947][T10425] ? __pfx_l2cap_conn_start+0x10/0x10 [ 356.225437][T10425] ? do_raw_spin_lock+0x121/0x290 [ 356.230496][T10425] ? lock_acquire+0x107/0x340 [ 356.235286][T10425] ? __pfx___mutex_lock+0x10/0x10 [ 356.240341][T10425] ? process_scheduled_works+0x9ef/0x1770 [ 356.246090][T10425] l2cap_info_timeout+0x68/0xa0 [ 356.250979][T10425] ? process_scheduled_works+0x9ef/0x1770 [ 356.256722][T10425] process_scheduled_works+0xad1/0x1770 [ 356.262304][T10425] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.268307][T10425] ? do_raw_spin_lock+0x121/0x290 [ 356.273370][T10425] worker_thread+0x8a0/0xda0 [ 356.277996][T10425] ? __kthread_parkme+0x7b/0x200 [ 356.282961][T10425] kthread+0x711/0x8a0 [ 356.287061][T10425] ? __pfx_worker_thread+0x10/0x10 [ 356.292191][T10425] ? __pfx_kthread+0x10/0x10 [ 356.296814][T10425] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.302300][T10425] ? __pfx_kthread+0x10/0x10 [ 356.306919][T10425] ret_from_fork+0x510/0xa50 [ 356.311529][T10425] ? __pfx_ret_from_fork+0x10/0x10 [ 356.316660][T10425] ? __switch_to+0xc9e/0x1480 [ 356.321368][T10425] ? __pfx_kthread+0x10/0x10 [ 356.326078][T10425] ret_from_fork_asm+0x1a/0x30 [ 356.330904][T10425] [ 356.333999][T10425] Modules linked in: [ 356.338782][T10425] ---[ end trace 0000000000000000 ]--- [ 356.382969][ T5842] Bluetooth: hci2: command tx timeout [ 356.389118][T10425] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 356.395285][T10425] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 356.426690][T14622] lo speed is unknown, defaulting to 1000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 356.433508][T10425] RSP: 0018:ffffc90003e877a0 EFLAGS: 00010202 [ 356.448544][T10425] RAX: dffffc0000000000 RBX: ffffffff892f99b8 RCX: 0000000080000001 [ 356.464061][T10425] RDX: 0000000000000000 RSI: ffffffff892f99b8 RDI: 000000000000004c [ 356.472589][T10425] RBP: ffffffff8a627b96 R08: 0000000000000001 R09: 0000000000000000 [ 356.481049][T10425] R10: dffffc0000000000 R11: ffffffff8a627b50 R12: 0000000000000000 [ 356.516844][T10425] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 356.532702][T10425] FS: 0000000000000000(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 356.542318][T10425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.574729][T10425] CR2: 00007f8be7ef6e9c CR3: 00000000300e6000 CR4: 00000000003526f0 [ 356.598124][T10425] Kernel panic - not syncing: Fatal exception [ 356.604448][T10425] Kernel Offset: disabled [ 356.608903][T10425] Rebooting in 86400 seconds..