last executing test programs: 1.755032311s ago: executing program 0 (id=4719): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x24044080) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x1, 0xf, 0x2}, 0x2}, 0x18) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) r5 = socket(0x21, 0x1, 0xfffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000140)={r6}) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'\x00', 0x9}) ioctl$sock_bt_hci(r6, 0x400448e7, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 1.652961269s ago: executing program 0 (id=4720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x4c, r2, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x2c4, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x298, 0x4, 0x0, 0x1, [{0x294, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x284, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_XOR={0x268, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "240b3e1f832df60bec53947bcd6d1c447d971a939ae4c8e19c31dccf4d97fefaba2cae7fc5a157a2b9434eb10a5bf9d549fa176bf8f376440fef1f70cc072fb6b55f71f4333b5e85c7b9f3694f743ed38e031c"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x18, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x49, 0x1, "48397791e83c502a0e266f0bfb034a3e02c692fb51c39ec4914f3a4e78d0c6159dae25a2d5c05790bba4d62b91ca20096eb506cef68b5526945b14e0ce5a3bbd6a7094c77b"}, @NFTA_DATA_VALUE={0xb6, 0x1, "d6a7ee8a99c24ada73e4836b7b8dd697bd6f07e345b89ed2c043b2cd8fa444040accc5a64ed4d4f12c5b35303e4ed13e7c1bf161012ace4660a57a7a1eae99130aa45d550727b9ce7269fcbaf8363f7c78cfded06857244c9e707c2ceb04a16c9a8efa17689162f88e80bd95046604a1f2e233eb81c033735c6be4637bc9a4a950676198b9d3c295f9c913f5f5bd3f97174de30073f2f52b9243da3e71ea7b4cfc4833020ea9bf4e6da262ce8bcfba068998"}, @NFTA_DATA_VALUE={0xc1, 0x1, "e5a53526f96c2e56d82bf1502eaa64622fbeb5b50f5037013da018d384fc19fe80992b8f32add941fccadc2e391b66b10fb161f6a5965188ec12b8f12c90bc9ee7f79672a1cf1b09b1c986d68e8a168fc2b32686df0164ce8d70d1f01a3bb2b2760f77b867f932648e7aa83fb5211798658c4723079e8dc020cd1c51975ededf6371bccae19618d0d0d941455d91d2bc88c5704f1603ead5b4c0701f15dee279546f5cfaf463b6dcb3bc142320d0fd3212dc1e59c3df417d4979982952"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2ec}}, 0x0) 1.476442889s ago: executing program 0 (id=4726): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6ef5, 0x400003a, 0x0, 0x2240, r1, 0xe4, '\x00', 0x0, 0xffffffffffffffff, 0x205, 0x0, 0x4, 0xe}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r3, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r4, 0x29, 0x2, 0xed, 0xd0, 0x4e, @mcast1, @remote, 0x80, 0x7, 0x2, 0xffffffff}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0xfffff673, 0x0, 0x50102, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x3, 0x2, 0x4, 0xc, @void, @value, @value=r1}, 0x50) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f00000004c0)=0xd7) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4000015}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r11, 0x800, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r12) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1.475955326s ago: executing program 2 (id=4727): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01cb18000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcff0aff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="030000000102010200000000000000000a000007d676f0076ae6776af662802900c711a24465990ed7a845e4fe20a90bd1e4f6059b858d83894817e4d5aad340ef02c539292859aaad042e74bc6c214c40185206950af512aa10c7835c7b1827a9a7343c0e6df0d5fce6ba159fe7342f2a711e3e782e9b86905e978732b47639ffaa68804b7e223d18735846ac8daecf8b6dcb050692f044cc762cf93b6049c11dedc5d762c5e31742f48d7932d7b00d8a4b9a84672b48d91d3ea1"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r7, &(0x7f0000002d40)=[{{0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000001880)=[{0x1010, 0x101, 0x3, "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"}], 0x1010}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000012c0)="0de1cb084a967d16621a723c0514e4aff7f2e42ce945b5ec60b1f8ef5d4ec001e10e9c2db3d8626fe0458d3ac051a535", 0x30}, {&(0x7f0000001480)="2c572dba7cc798e7c647c50d706f5846e2ea238793b9b7fdb33b1c5fa98432685fca71dacd9aa3254033d80b890fb2df85243c2b96cc218413dc89b74ed2f8ecb5a519e26fc9b5a573b2198c9afaf20256eccb0aeede230734eaea70fbab459650dbd6845fc35c1d51fc044682d3ddc19c2fafc19039b7c0bdb6dd36499c2d19ff3e08edc4f682b2d203ae0c7d6938d3ee9b2fc25b1cec2c4c474f025f6a8aa65faed954728fbc73eada", 0xaa}, {&(0x7f0000001540)="8b10f0110cf548a7eed64e13428dcd6eb0d38af37c6918ab1519151b20e5b0ccadff27f48a397215f263c8a15dce009e9ac32b07ff9b2674435ad5e977cf159b2f3f80e7de34bf009045bc3915e56a058f38738287b54bdf67a725cee6ac5e174a2550a0007fa3f2f73ce8b988839422e39ccb96deaa2b84049b6c9943edba8af87cca1d1e7392808abe2c3dd2ec8a91eea44f0f659f32b3f5760820c2fa3423fda643cc776887825cd77e0f6be55f1d4c6aefbad488d0813d", 0xb9}, {&(0x7f0000001600)="02dddebd35061be6096b1ff37efb51c2ad8ff488eb3b66e7c0e128ed04be630c5b066eaec8b105b134a0042909d95330a1de90aba8d0fbfbbae286f7b87b43c82b17e28e39873f3f4dc2567be4dc3cf95a0ee5e637dd1cea82ab59f059adea8afda892688f876312bdf1f8f4baa02b84e5453e59a979169525fe68ae1feb1fc36f0f247dcf375eeaf2930e19c0cff24bb85dab6ceea84b54b2effb324e046c9dbdd5bafb6649e48d77f48a294717654a804ffd8d841e41b1fdb822f6c074e958f44ab3a103afa4162c5b", 0xca}, {&(0x7f00000028c0)="76d771ad289db27cdca9b463d360f33183ad8a8c93ee6b9f8bd103e8c80e12f982b1c97268307a6aa7d39afa31e54f1b449dc6d47855cf76924ddade5b1c89393bd644e7628662f09e66e558e438ba97a43b859ab818043bcac08a23eb77f50e88d23f96125441a7b466abcb170fcedfaf4c054a2e798b9eaa26e8c7c5d1651ac0af2eb29c138dd4d0d81a15d2211ad8022d39fea090b8c3f87a4b99433b", 0x9e}, {&(0x7f0000001300)="6ba16834f22f95a887a11baab5ee776c732e33f1c3a8917c68", 0x19}, {&(0x7f0000002980)="5a859a4b386712716e8f0776970cc447059dd534baccb94a16377cdfb9574afa96ea089c17af2b8a436acef03c61f6909f9f425d338530311cab8cab12cceb70ce145988164626f4e84e642fb6a4b153cf04e874604f41c3c4cdf2fcc387e822d4f038eebcc26ff6987da4130d59b833a875ba1e509775d07f7a9fba48d41a9e24dd8c03fd2649689b386b42282b850adf2125a6d41a32a1ec7edfbbbb8559eb64c378c3e10e72254907a88bd92629559f6d6b17a8943aca3652e7ea81dd1452996ca55dbeb7eaa94cc5f58d65fb7097470f87238ab20b91594994efb6e18535c5a0152ac4dbc8f2", 0xe8}], 0x7, &(0x7f0000002a80)=[{0xe8, 0x10e, 0xfffeffff, "e2bae09a59bb4120d4bfc8ca9d150dc49d6b788d7822954cdf1201de13637ef400a81647b5e5ce1ac2e97a122d14da9e304d1598c93c03a3ebf098f3271557bdf3d2f23203fa52ef855a406de218cb6e8ac525a34138ca541eed00794b85554b72b886c319a937c06d90d4dbc019aced2fb3753d517677e45423f4a58b7a9829f2fec788a0854d435cf08d1f69d1e7735d0399e06c468c3c94e551755cf270fc0a9fe71058558646987e97fd188242cf54685b886f1f59b9de9646264e6ea16090e8937a8ec1ef386899ef1de01bfd6b44a0f9bb857b"}, {0x58, 0x108, 0xb273, "6843568c21804a5e68711492f449e7fad50fc5beef5d4451af5e93e1f76446b4b40326a5b73fc9234cbcdafc17896f464624d251eeb36e14d0e744874f3b159f753fe8"}, {0x88, 0x6, 0x401, "ef62cbb7f0359beba84b2bb56b57f4468fe462803f36930903948f494aed887b79d41ea408defcc6b39c160a8e171c428d56062124d9b93938e05ef7c4db7a2e1dcfddf13c5e43c48ea77963c324ac922e949b700dce5dc00c54b605db94c1ef04e99716ede39f4dc0a49902031eeaafacac57b65b51ee6d"}, {0xc8, 0x88, 0x2, "0aa9564b81f3f84c5945069c46651f1057422da9168403e8bd6439dd35fca1d347f597ae22b740b456ec7ce5e45b4290a01934d72eb8ae686dfccc78e405816eed4d36ad46261f789a130011d304a37f2ffb29826821265f2183dce99fef20dbde59c612235672b88687114eff74f0245a776cbe93102dccba91904c45c97b9ae5d62f76381e5d63175759db16c42fd0e8007d914bc6b083131edee74b1d26ca1125b27f889f2fcb3c662c04cd23d435153f78c7a6"}], 0x290}}], 0x2, 0x10050) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4b920300000000000600000000000010080001000100000000000000"], 0x1c}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000002dc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70600000000000085000000050000009500000000000000b702000000000000db9af0fff1000000b5090000000000007b9af0ff00000000be8a00000000000007080000f8f7ffffbf9400000000000007040000f0ffffffb702000008000000182600000000000000000000000000000000000076abd4495167b9ed11ce5912d132e748ecca16e61f5cb411f94775b91183b695873b97519ebc107e80e75738a5bd9c22218a51873b4121129bc949807ec4c7881dddad1928a314a0d869066b60f55dd7f533e6b545433fa2bb6968696c5c74c2d8e8d9c0c88e6f95018214c57c1a7de2ca16c15f0240378db5f1ccb148bbfa6b335419216ed634c0fcfa0953a58931bff172f8b0c19786cf77a94ba3c2119a3e96a7efdbd69c750f16f515432dffd229f1b6dcf148abebeca5387eb6731469f908672d2c36bb974b0d312ae310301ff9985204fa0a8ca3139bf2d5cce5e124afbb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 1.455733703s ago: executing program 4 (id=4728): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x41}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}]}}}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000000)="2e000400010002", 0x7) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) 1.415430239s ago: executing program 0 (id=4729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x1e8, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1b8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x104, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xa4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x1e8}}, 0x2000c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.368371289s ago: executing program 1 (id=4730): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)={0x54, r1, 0x4, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000019d6cbf50002000000000000000000000900010073797a3000000000af5a"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="14000000100001b9d578368f3d0000000000000000000000000a020000000900010073797a30000000000900020073797a320000000034000000080a010100000000000000000200000608000940000000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000000010000000000000000"], 0x88}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x14}, 0x94) 1.351789863s ago: executing program 4 (id=4731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000bb241b860479faae5d232e6224b62434398641e3c2f17cb5c2bf1505d551a5d1f7d059832e470ab57f5d7a16e8d929", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000fdffffffffffffff06000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500fc00000000000000000000000000000c000000003200000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x2a, &(0x7f00000001c0)="d2e577bfdb91c279de1569e0c0dd978baa45da1bf0563365d42f52fdb099961e60d3ee4f5053e275d8bd9b42f256ad731adf0ff9a14e426dd915de1654fe9ea58e1b7a38fc95d26e23041181e330e874f306b0e4c8a7318d13eab1065a2e21dfe8b20489cbe020dca7ee1d2d2ac61fd3f3e3a47dc743ddb064ea0ad60756a5385030b4b3ed397d0611685e4f0532e2bc489f005978bba480f602f34660eb190645eac791b969365d97cdde0522381af32c127df23d021b", 0xb7) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000180012800e00010069703667726574617000000000000000060001"], 0x44}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @empty}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 1.314593951s ago: executing program 4 (id=4732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000200a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900012373797a300000000009000300737901000000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5f}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "456bd7"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4008041}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 1.248529191s ago: executing program 1 (id=4733): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a0000000003ff02", @ANYRES32, @ANYBLOB="08001f"], 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0x4) 1.195975888s ago: executing program 4 (id=4734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r10, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r10, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000001840), 0x3b, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.184078906s ago: executing program 2 (id=4735): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='module_request\x00', r4}, 0x18) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000034605"], 0x30}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x15, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000090000000000000006004000aa11800b", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186100000800000000000000ff07000018110000", @ANYRES32=r2, @ANYBLOB="000008000086000000bf91000000000000b7020000010000006300000000000000b70000000000000095000000000000009f69056d96e37df0afc7147720648917c12f196b9509f672cf94eba3efba678912d7ebf7fe6300"/102], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaae0180c20000000800450000e10000000000119078000000000000000000004e200064907802000039c5000000010000006ad3f89a2cdd8c3b7f02626cb16f57b534f6a5609b2178e4c29944c63cda55dcfaa9b5060b3fdcc95d1539ab47e06b7a4fe1973b29ccf3ce91214c8c9b05b2b9eb8768346fe45a1bd0abcbd218a902da"], 0x0) (async) recvmmsg(r7, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r10 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40000844) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.092561739s ago: executing program 1 (id=4736): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff59}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) 952.21096ms ago: executing program 0 (id=4737): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000028000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r4}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}}, 0x14}}, 0x4040080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x4b, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 903.358569ms ago: executing program 2 (id=4738): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f0000000100)) (async) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r2, &(0x7f0000000340)="18000000", 0x4) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@ldst={0x0, 0x2, 0x0, 0x0, 0xa, 0x20, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x3, 0x0, 0x4, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="5c00000012006bab9e3fe3d86e001d0000147ea60864160af3f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d8919c58bd2c6e09ee3094fada322a73b48dfd8cdbf9367b4fa51f60a64c9f40800000000001ffb4ca64b887e0e7c2e5779e570e0b2ed559f7e", 0x70}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240c4844) 716.2719ms ago: executing program 3 (id=4739): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x84, 0x32, 0x400, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x3, 0x2, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x64, 0x0, 0xe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast, {[@ssrr={0x89, 0x1f, 0x2c, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x83, 0xc, "4391fab279baee82ef87"}, @ssrr={0x89, 0x1b, 0xf0, [@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1b, 0x7d, [@multicast2, @broadcast, @multicast2, @private=0xa010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x2}, @noop, @noop]}}}}}) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x69, 0x69, 0x4, [@enum={0xd, 0x4, 0x0, 0x6, 0x4, [{0xb}, {0x1, 0x6}, {0xd, 0x7}, {0x10, 0x7}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @datasec={0x1, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x480000, 0x1}, {0x3, 0x148, 0x40}], "c5"}, @ptr={0x9}]}, {0x0, [0x6f, 0x0]}}, &(0x7f0000000340)=""/215, 0x88, 0xd7, 0x0, 0x2, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd32, 0x3ff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, r1, 0x0, 0x1, 0x4, 0x8}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl2\x00', r0, 0x0, 0x8000, 0xa70, 0x7fff, {{0x19, 0x4, 0x0, 0x2, 0x64, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @loopback, {[@end, @lsrr={0x83, 0x1b, 0x6c, [@private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100, @broadcast, @remote]}, @rr={0x7, 0xb, 0xf7, [@remote, @local]}, @noop, @lsrr={0x83, 0x1b, 0x78, [@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102, @loopback, @multicast2, @multicast1, @local]}, @ssrr={0x89, 0xb, 0x79, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e20, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xca5af83}}, 0x5, 0x5, 0x4, 0x9, 0x80000001}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000740)=@assoc_id=r6, &(0x7f0000000780)=0x4) (async) ioctl$FIBMAP(r5, 0x1, &(0x7f00000007c0)=0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000800), 0x4) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000840)={r6, 0x9d}, &(0x7f0000000880)=0x8) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x11c, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x803) pipe(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000b40)={r8, @in6={{0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdf52}}, 0x40, 0x1, 0x3, 0x5, 0x11, 0xbe, 0xb}, &(0x7f0000000c00)=0x9c) (async) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000c40)={r11}) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r12, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r13, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000000e00)={0x1f, 0x4, 0x4}, 0x6) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000e40)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e80)={'wlan1\x00'}) (async) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f00), r11) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r15, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r11, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x88, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000014c0)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x3, '\x00', r0, r4, 0x0, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x20, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x51}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @alu={0x4, 0x1, 0x8, 0x2, 0x1, 0x10, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x68, '\x00', r0, @fallback=0x3, r10, 0x8, &(0x7f0000001140)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x10, 0x8, 0x7}, 0x10, r16, 0xffffffffffffffff, 0x0, &(0x7f0000001540)=[r17], 0x0, 0x10, 0x3}, 0x94) 715.946827ms ago: executing program 2 (id=4740): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x4, 0x58, 0x0, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x8}}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f00000004c0)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0100140040c864f13ab85f09cc1988b79ced09eae6d8b65d18e5af80554e38bf1223fa054a77b24bad6975ccd3e45726cc41b9191afb2bb634a049ae6e021f4ac60703a5edfafb24db5b3cff1d4ad5e3ae53e0b649819d995c883151c11d1939fcc50e25c29df7bec6eac081cb67cc3f02a839f2ac6380a6a2b4778b98dfc4e5fd545be276c1a05c19337972dbda23c08a8544c196f83b6a968b839ee60081a08442b7f33bfb68c43c3926ce7f1979119eddf16c8e4642c6e5cd69b3910add18827b593adebece5b87aeafb4248e35033a26b0de83ad11882d8cb591674b90a3aeaf4cddaea3e00bdbd026d70875ca"], 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r2) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x40820) 712.674559ms ago: executing program 0 (id=4741): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000a3032cff00000000000000"], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f0000001800)=""/4081, 0xff1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x24000050) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x6, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x6, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r2, 0x180000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x800}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x2}}, 0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280022cc", @ANYRES16=r8, @ANYBLOB="000228bd7000fbdbdf251000000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000600000023000000"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="0206020002000000023a0b6ef4000000b8bcfe4a"], 0x10}}, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) connect(r2, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x5, @private2, 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r11, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 700.809848ms ago: executing program 4 (id=4742): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200010600000000a1dd3f6e0c000024"], 0x1c}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffea7, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x17c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff9b8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1e3db7a2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4004001}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24040000", @ANYRES16=r1, @ANYBLOB="00002bbd700000000000020000000800620009000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x42080}, 0x50) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000021b000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x6c00}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) socket$unix(0x1, 0x2, 0x0) 612.380762ms ago: executing program 3 (id=4743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080011400000000005001500100000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@dev, @multicast2}, &(0x7f0000000400)=0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) poll(&(0x7f0000000080)=[{r3, 0x4429}], 0x1, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', 0x0, r3, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x8, 0x23, 0xffff, 0xe8c0, 0x0, 0xffffffffffffffff, 0xfe51, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000840), &(0x7f0000000800)=0x8) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="09ac0f000aac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x3, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x3f, r6}, 0x38) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x3, 0x9, 0x6, 0x7, 0xb, 0x7f, 0x0, 0x2, 0xc8, 0x5, 0x9, 0x2, 0x89, 0xd5}, 0xe) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r6, &(0x7f0000000200), &(0x7f0000000280)=""/14}, 0x20) 609.714031ms ago: executing program 2 (id=4744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xee0, 0x30, 0x25, 0x0, 0x0, {}, [{0xecc, 0x1, [@m_pedit={0xec8, 0x1, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xc4b9}, {0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xee0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000102030000000000000000000200000924001380060002400001dfff050002400008000006000240000900000600014088a8000008000340000000030c000200ffffffff00000004"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x48020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x34, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x2c, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xd56}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 523.101948ms ago: executing program 4 (id=4745): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={r4, 0xf}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r4, 0x2}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x48084) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x4, 0x0, &(0x7f0000001a00)="000086dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) poll(&(0x7f0000000000)=[{r8, 0xa404}, {r9, 0x21}], 0x2, 0xfffffffe) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES16=r3], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r11}, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r12}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000540)=ANY=[@ANYBLOB="c475fff12a938e13bdf045dbb8bd6dc48822ad44632e2e38ea0097ef40b8e1df0959adafa1367b134084c01f98626ddd0b8da591d705b958e963c1d65c795b4f321959f81b59b9330fad08c1d111ce49ed2e8b72a5c097cb2ab40e9fe654b2cbdc64e03e4b6b6f0ab667ff51ce82ce3757b665f4d44962312e6322150266420a83dac125f514f608dd27cffe2286cd499ca207536cac230cdfa4441094ae1a90fe50fc63cca600b6af7fa4aa20ccd9e3c7d6a6998561653733cd678ebc3eed8b2cf389cfddfa782794260c1d22b837a20cbf85341896cb1f9f798783eb3d9d7fa35f403a512822898afe37b6066c1579ea1d922e4d8e951d34fdee48b82616110a51f68ac8ea0e2773189a16df28af530ace79ed87635002db51c13b63d150c6805546051b68fc94a454195e0be1d619cdc6a20e92e8d9fbab8cea60e3c6f625398e091942be4d7ffe678efa81a64d702083feefbc38347c9daa7f9d64f6378efb986d9120de4008983eca0a4f3a1c590615c81f90088a76a0973d0ab53576cee7f44d2621349ffa3eeeeffb35715cf866f93ea55787e9351afece17e0e596b2777936d2a8995b29f457fcdfe8171f065f9aa5e87af2d691529ad1bb59bc778ad38705706fc17854b6a45561b7fb0e430021e82ec8eb961c8bf0d6db3ec465e50267c3d58eef1d40e2b7fabadf048680c022d334f8fd8a9435f39e8c155b3d4834fdb47df21dbbf337bfb38a007e8e8fcef70df3f9d283d8de476decd5741f11754139b7b830fa79d61f31f64483cb4c9f9cfe85ddf1347e4bfc22e0e164ae1c12025cecde905d42de88d632e4412ef39bcd0eda3f8670861e9a2e8e7bff0011e61f7429834b4bf26de286385bd2bbbfb1a9ddd0c04f172a08302e0ac2301926b3b4c469550b1bcafb60b6d66c2212815b8c86252cda8d885e00c54c7591c08f11c0f25aff11baf9e222bf9f29ae2f83e003ecdb923f6586de02f7e2339ae2fb6a40d9f154eafd8df852eb9f3e27f4cf41397bdabad1f3a6b7d9ba57c7f906911ec147dd42bef374435beff9610b0e02870abb2f81b2fbfce427c78e68f99585d0bd86a0dbf8b43914da9ebe59ee3e041eda963ade5754eec19e4d70c9ed09ba8258c6eaed72f918feea648fa40d162cd0fa75514d844f9af35da21d33e1026eacdfd750ae007bbf7c82b3284df7de983aa531aa7b74ad923fccd08e59fa5339459258d7c44daee39fb9b10eb72a530bdf5f0cfc8cd34e27442e1eea09ab983c15f8aff838bce3bb7f228e39eb994ae6ec56c257512f06c757e6c19a9c62484b0f65a6c8e37a5a8bf0ecfa47f2c202e01210afaf93348d57a462c02496603d2b1c4d950cbad348fd"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r13, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 464.938625ms ago: executing program 2 (id=4746): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"94e9aa2e2d4bfdbb784e474a691b5107", 0x0, 0x0, {0x3, 0x800}, {0x4, 0x1}, 0x5, [0x9, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x200, 0x6, 0x5, 0x6, 0x800, 0x8e, 0xfff, 0x0, 0x1ff, 0xe2, 0x4]}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r5, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000000)=0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010040030000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000000100), &(0x7f00000001c0)=0x80) 367.738856ms ago: executing program 3 (id=4747): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @dev}}}], 0x20}, 0x2004c80c) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@initdev}, &(0x7f00000000c0)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000400)={0xa, 0x0, 0x401, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r1, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = accept4$rose(r1, &(0x7f0000000540)=@short={0xb, @dev, @netrom, 0x1, @netrom}, &(0x7f0000000580)=0x1c, 0x80800) pwritev(r4, &(0x7f0000000600)=[{&(0x7f00000005c0)="7228546b699bdf177503764db2cbed182837d5e10bbb40f7fc63280147cce75913877611a7e670971cdb", 0x2a}], 0x1, 0x4, 0x6) r5 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000003c0)) 298.049649ms ago: executing program 3 (id=4748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x90, r2, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1400000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f7}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc46}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0x7, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2805}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x20000884) ioctl(r5, 0x8b32, &(0x7f0000000040)) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x7fff, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r8) sendmsg$alg(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)="fb", 0x1}], 0x1, 0x0, 0x0, 0x4004084}, 0x34000041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000), 0x4) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x10, 0xff, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0x8, 0x6, 0x0, 0x8, [0x10]}]}}}}}) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x10, 0x600000, @vifc_lcl_ifindex=r10, @loopback}, 0x10) 200.943548ms ago: executing program 1 (id=4749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="899889"], 0x37a0}, 0x1, 0x0, 0x0, 0x404c8cd}, 0x20000000) 123.429494ms ago: executing program 1 (id=4750): syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001340)={0x36c, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000008500000086080000183400000100000000000000000000008520000004000000"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xfffffffffffffebd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000003c0)={0x0, 0xffffffff80000001, 0x0, [0x0, 0x36, 0xa, 0x5, 0x5], [0xe0, 0x1, 0x80000000, 0x3, 0x0, 0x4, 0x4, 0x1, 0x7fffffffffffffff, 0xbf58, 0x5, 0xc, 0x6, 0x8, 0x401, 0x4, 0x4, 0x7, 0x4, 0x3, 0x2, 0x5, 0xff, 0x80, 0xc, 0x2, 0x400, 0x8, 0xda7c9a3, 0x0, 0x0, 0x80000000, 0x10, 0x3, 0x3ff, 0x4, 0x7, 0x1, 0x57e, 0xfffffffffffffffa, 0x0, 0x6, 0x5, 0x1, 0x400, 0x4, 0x0, 0x1, 0x9c, 0x3, 0x3, 0x0, 0x21d, 0x0, 0x7, 0x738, 0x7, 0x3, 0xffffffff, 0x5, 0x6, 0xb, 0x6, 0x8000000000000001, 0x80, 0x3, 0x0, 0x5, 0x1, 0xffffffff, 0x7fff, 0x1, 0x64cb, 0x310300000, 0x4, 0x1, 0x4, 0xfff, 0x80000000, 0x5, 0x90, 0x194, 0x1, 0x7, 0x2, 0xc, 0x7, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffb, 0x1, 0x81, 0x80000001, 0x100000001, 0x9, 0x100, 0x62ef, 0x5c, 0x5ce5f5fe, 0xe949, 0x4, 0x100, 0x8, 0x3, 0x400000, 0xffff, 0x2, 0x100000001, 0x7390, 0x40, 0x0, 0x3, 0x7, 0x9, 0x5, 0x5, 0xff, 0x5, 0x1, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000800)={0x0, 0x6, 0x200, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000c00)={0xa, 0x6, {0x8, @struct={0x8001, 0x8}, 0x0, 0x5, 0x0, 0xf, 0xfffffffffffffff7, 0x10000, 0x408, @usage=0x20, 0x8000, 0x7f, [0x10001, 0x1, 0x9, 0x5, 0x9]}, {0x1ab, @usage=0xd, r7, 0x80, 0x5, 0x1, 0x10, 0x7, 0x10, @struct={0x6, 0x9}, 0x3, 0x10001, [0xe, 0xd3b, 0x183ccb74, 0x0, 0x81, 0x28]}, {0x5, @struct={0x7, 0xffffff80}, r8, 0xef, 0x7f, 0xa61, 0x7, 0xfffffffffffffffb, 0x20, @usage=0x1, 0x4, 0x0, [0x5, 0x7, 0x4, 0x7, 0x7, 0x1]}, {0x8000000000000001, 0x777, 0x4}}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r6, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 81.573433ms ago: executing program 3 (id=4751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x5, &(0x7f0000000000)=""/220, &(0x7f0000000100)=0xdc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x4, 0x7, 0x9}) write$cgroup_int(r2, &(0x7f0000000180)=0x40000, 0x12) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) read$alg(r2, &(0x7f0000000200)=""/10, 0xa) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) r4 = openat$cgroup_int(r2, &(0x7f0000000380)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000003c0)={0xe, 0xf00000, 0x2}) write$cgroup_subtree(r2, &(0x7f0000000400)={[{0x2d, 'rdma'}, {0x2b, 'freezer'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x0, 'hugetlb'}]}, 0x20) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x124, 0x15, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x102, 0x8, "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"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x4840) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'gretap0\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000006c0)=[@in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf05}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x101}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x89}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa93}, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in={0x2, 0x4e22, @empty}], 0xf4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r6, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x8840) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r7) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000940)=0x2) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa7f0}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x45e9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt(r0, 0x69a6, 0x9, &(0x7f0000000ac0)=""/184, &(0x7f0000000b80)=0xb8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', r5, r2, 0x0, 0x4, 0x4}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x6, 0x0, r4, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0x0, 0x3ff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x7, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x0, 0x1, 0x0, r8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f0000000c80)='syzkaller\x00', 0xfffffffc, 0xfd, &(0x7f0000000cc0)=""/253, 0x41000, 0x10, '\x00', r5, @fallback=0x4, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x2, 0x9, 0x6, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000ec0)=[r9, r2, r2, r10, r2], &(0x7f0000000f00)=[{0x2, 0x5, 0xd}, {0x3, 0x2, 0x5, 0x9}, {0x4, 0x3, 0x7, 0x9}, {0x3, 0x4, 0x7, 0x7}, {0x2, 0x2, 0x0, 0x6}], 0x10, 0x4}, 0x94) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r8) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f00000013c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f00000010c0)={0x2a4, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "7e1ec8a638007a8fb8bd51ab0eb761dfa7dfe20e3d95d4ed440d01e7062b05bbcbd65eab30f4a7d4ab3d0a896e682eff707597d8b2a084795966d5a15e5d3bfba503f888f11215616deea1306ef7a079dc7b846f2b4e7c9a9f6d5fcf604a61cc61f9bf0aaf8762433cb859b3252c4b661e2668736614814a626c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4da257436a25666f9f9a9b360988a5dd575af8b6c93da2b3e67e03b4a7"}}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xec}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40080}, 0x20) 64.040067ms ago: executing program 1 (id=4752): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x509, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x1, 0x20004808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="004602690d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x1d, 0x800, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000b10000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff0000000071107f00000000009504"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_GETNSID={0x1c, 0x5a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000200)={r10, 0x5, 0x401}, 0x8) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=4753): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001540), 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={r0, 0x58, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) bind$ax25(r3, &(0x7f00000014c0)={{0x3, @default, 0x8}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001380)={'gre0\x00', &(0x7f0000001300)={'sit0\x00', 0x0, 0x1, 0x7800, 0x8, 0x5, {{0x11, 0x4, 0x1, 0x18, 0x44, 0x66, 0x0, 0x81, 0x4, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x22, 0x1, [{0x2, 0xf, "3d4d5d5d2d90cae6e4215e9472"}, {0x6, 0x7, "af50910c8e"}, {0x5, 0x6, "ccb99325"}]}, @end, @ssrr={0x89, 0xb, 0xfb, [@rand_addr=0x64010100, @remote]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)="0f81a8ac4d79889348c16f1011d2fec8b4a26ae311fe41475a0b79a8dfcfcbc2f949f96857afde5c315b00c390910c7a6888a972fe7cb93db2789cc9e3569486a3ca640d2526f2f80eaf", 0x4a}, {&(0x7f0000000100)="8234ec65410368a1fc816243528ca1d49195859139bd846f0b0bdd087b08dfa43b275a3bac405e427bf6da855de15257063259caf709b85d446c7bb73fec1b7bab2d26d669e571fa2e89e3da3c2bfc6e50b2d94e6e9d38a420476f", 0x5b}, {&(0x7f00000001c0)="d6b526eaab4abbb1f1f57d32e6739d0c4877e0ec9a8e53cbc90dac8f63f9b4902bd0dd69d7aa80c084b608855a73d02d87a009b63badcf8c80d6386595a7a6d1fbf224548d8fc0488a0bba42c3f12e6d9e9b982dfc07a2053774cf82cb7e13780ce7316d9f6cea27b3d4e03ab5071e0d11fa302b2fa8fbffb069f2f20f43c0fce63dcf60695cabae0eea32fa732b8772db4732726314613fcc11b0f25e0419cd31bb9533b6e21677c2985899073e53ebb3a5f4f018747717cfb193c293e6ec05410b06d87a38a63a7cbbffbfb2146446f6b516a8023804cebcd1c669a5f53dc0dd9d3374e982302a87973a2df440d8367fd0a5c623c69dc697e743c0181d7277c365190a1d4e543649ebf5eabd42c9312f462c30c4eca6bcf8393c1e5536f51fb97b9de5ebf76513326523608c34f3b5ec62ec771c17e42396cfca171180220ad1bef059e9d24c1c02b4993ff082b3bd364324e7cc51114481003e676dfd63f8b1d272fb376de6d4c2b4578d301d3525206a2883f9b60665e622a8c54f4a40b111d162f04763179abf998f804c7aaaffa9681b81c02a3d2eb10222ed251e6112838d1a05845190b59817f7d1d041c81822b473e042378ac3c53b20ece2c9ad63fc86a4bda4bade5a28cdf3db1d9e6095e410d7c9d2c3320f922b9a5cf10e1427d788c291118ae177cd388b041b1d9207a33331ba17b3e63d4fae89333ca4d55e910105912c65c905679468a6046ba9144c54fb9e9b560cd8a655f6d3f3384aa9d56b6e876c702c05ff732f16a3b2184776bfaef7afe2011d7077d19e18cc200e309790134e86fc551ec459aef14dac1f782271caa7577085c022fb09f79bb98a725c2dcf3287030239ff3325da0a09ac6f91be0d8a8a39b0e26f43ba86e4ae60f6fdd4ff2d7a768a1befa703391f77c7511b889d9e17f09871f8fe2427f34ca6f1cebda9118172c7396b45e6de548c00ae1bba170d2757c729679ac250e3b9d5005321134d2d5f3e98a676d6f300d6be5e2db1d465a0ba8ec41bc0021edd9a46d2b37041257e7240f9c4260d887881f06e09fb25a573caad897d2bea0834ebc3c23867e79c2e2aa9d6a84791718f8f890486f21e06a37c99b7fb57fb8cf170ea20532d75d642918894a615a9e7587e405eec1470bf713fe9d6c5ddd50be172f5e4aa33987ae00c88b4aba4c6def1029fdfd65eb3d9eb4c943c618571cb64c56f85912c8e18fb8eba70b60db84bc0cce9d09f8df1bcd944fb3b751d895bcf29c3270d76aa05ef9e6c1505d0d0ef79999ac3e375f016119e0c5ae506b9845b29488642757170ea33f24c0a38eea7dab082ea16b689fa22c6f4c878d3b2e3424c3dd22017f284f4fb1a7c81f5cae08509da4028d71bca53924561406cc52034b1e890c01ef8387d3a7927549b0d7cc9dc44afed34316b63ac23431bb14c2ce98a047e890f7f77362862c5804ffb2bd14d0e773619a91f27f1f0e4f694295a1ff28c0fa94396d9e4fea567aad6749aed8655fbf71c0038095124b42e0306b8fc7f56c9207e25fba1e90c2261c9f8f29de8152916644b4b611e5c363edee06ab45094a1e5678a18a3f1b428a5078add747911c48030c8e524d3350f678900f0956aa2543e26fa62e8de436f6b8bc13b7317a082d604268c060c0ee3e7a4e89c0f88ca3253f6c3761367bcd1b394f806307ba26af70c1cc9e070f41447132f89616422df18e5e911fd25fff3fc9daebdedeebbcf912ea17dbea4de89c03b7baf8fe6ffd81427049540dead350944a5e498fb0304185ebc102816ac712678c200c86fce136d9645b3dd2be58f880190a0b8ea382039a01ca6cefd52ca5f439fdee5a64d62984a66d67e6689965acd882931de51b9c07ea9369373c2c027adf551353458096b38427eaa494ae8da3c8b7e39ecee5fc4462499c54e728a4d4bd12dde61ab4e90fd017a760af4047dcf5070fa3d551a93036d2d953ca8af80a1947c4e5f9965f1f5070a77ad68db241171586fd6c98f69afe56ba1d2b5094c4097a2ae68fc4ab66e7f06988fc1b988ad83d99faf68a09007d0afc3a7a41d57255f5dcc9f003497862518589ae1aa21005ef0564b35c26d0aa2c255f961751185f87ee7b016c8463b34901b2abae459902bf5482aa9e34d053e16334d38933cc2c8000ee18245798acea7441a62b6a914209db14b59e4c9f6916879d2f45e623be5d2ecf6bd59372b2510a2e87ad3bf2a2425e7bfe77639b414b969c4c7ca021fedbddb1a6e12d8b9b626710c9b165b3529be2d79e3463d9da4a62ace8d669a266875083e6b776f43bd5ac12814f2d94977a37becd8e268391d286c66efeb99a72a7063864dfe5d2adc522c3aa35286f53b8102a35b9082f22e105b9b6196de2aca6ed8c59fea0d8eaa8655aef416d24533358bc49212af02bae025f5c500986918372933504d081b1f74a078d04925e202d4d6de6481645f6c49ec8da9483322f0f45af9a073e8676c8ba09968cc01d2c06b958733edcd6cc83a9d290da288412c3a7e135dfcda117c517def1feb2735c9f87cb04b79529654af17382eaacad99d8202d32a72cab2088f8d79c6f0fb10f9d2c0a8c64f88d9a8e3b580713a0f3bdab30be797fc9d3e49559716f9d10ea70485b9de1e877194c9de3d1d7ec18f1e35f22efb8d51dc835082d1105d16682ac7215f415ea4188bea8c5814f2743579275c4ac94e712dce109b8ff6fd4ab822d05c4eb4400d7c06616fc6eefacbff7b4670b55bacc7c9c470d95aa6843bd36aa9045bc6256430312770d5c7384162a472119637132210b07c31eb19fa43cfe9d913757f4de4517648b5b1482751ebba5e50336f4355776b6ae3f65469ce5aa57a60ca23880922ced30e5d55a2b50d98756fd492d1ea5c4d7361c95fe396500b1bcbeae6b4ee03aac13ff9220d7611879295977de5e30077aeac49f8e250aa29c9f4cd3796987c6c755e88eeeed875f38ee083d7710c8abc69c30d7064caca3a3023deb4cae501dc547da2d0aa3693d6a812663b249712403b0df89fd427d5b0bbe63e87e057486eecc954c56ebf524dfdb3181c9a96cf3d9c8c74d2e7b19e5a9e0f1b313f87254188796056c0ff6aa6dfab76bdc618c6332dd37c61055601293974ea99a1ea646d6a9ba7e70d1e623cdfb242c63e94a8ee8be998eaba128bd947edfe6f1a7b5c2dd9e998da0494eafa593c9ac27dab0e2ec975ef559bad46263b61f48f00c547a57cc57f57eb48f9251353266a0d9597cd5528bc516c75fa41cd013366a481ec162d98568f5f7bff684345ff3b34bc09231f61b7c96c3259135b6973fbfe49426cc19a3af34116729b1d24ed6dab7fffe8f715f7f1bbf0ab365f2467b7c43e7953f707ed1b12ed0cf775ae363cb0a5f67d2dd26cc2bcd26b5dce24c3b2b5762d66ef5246274a9f007332beba68faaa0a50fd7a431bb569d04b20be5cdf6c236f7720520de60cf7ec790eaaf7b22dddc56f9720905a27cfa66e2b998a944538ad90116af1fa239475361c677078ea7e6eb5ef3cab04fd7549295e3ff3a16a5720927ae4fe8b5ef08bb23592b74ce047496dc968df9524bcb6ba56a7f1dad0fab16f9d8f63ea209b288c97f1bca156ca8ab87ed66c0393beb2a3296e194ccf3ec7bf3d2beff493ce196d5364394789b532694818b150d22f65d97bb9c44c1f863352d8d0aadf1a57ecb7648fd8b75175b5ac50b7efa3c29cbbedfbe8477576cd4dd3f7546b9aa7c98821a533b639a1208bedb4c167d0b162f827c25f95ea2ab450b7bd26f47a38cd59fdf266a1a896b5eddc13394b2877f4c9ca68fff6510176177faf866931f32b5d5f2ba495cdebf6dfd93a2ec271b1d7311d9cec5ec2972fb91aec39f03b90bba64f8192d4ae2c5778e99e090ac522f944301d5aef50cf32ed5b7f44021ac44fc346dc765c8e373994bd1feeb6e53cfd4a2ac250c3f6d40688d1e629bfa0948e629666cc65b8f3962ddf421af0684021c56201828b5e8cba38f55325bd7922f5fb91556c3458e0772c53a9d615aa071ea8615a51d353c2e5e20b53e0f2b6e4bc2abe15157c42f82db4fcc7c725458d607d2819591ed97c991b3172cf0fdaebbcc1cf402253550b0e9ba3fcb3a6d80fa10a5622d99a5bba8e37b9850b50c64cb1cb3c6dc29acaa734d76f1975f061ac91e1b4676662a0f2d821ae774e2c8c3ee98fe7ee556da1d0015f0e95a77825219e61bc83935b590c654ad6e0274ad55ebdcea7ccd2280f678eace6ed59fcac0dfb1875734445892559be673ce4305565236d77efd8c3e9fbd983ead5c260b884949ae4043956c8b1a6b0b50f2cd4c3dd297658d4b903f0d39a761ff17783e66f3bfc8e2ff161aaf0a1263f4a331414fdb558e1c971fa76ddfa702831ff2abaef6b1e59d0490d9eaf010aa637a761739a92d1ddf3119eb49a0c52ab73327517729b77816607f04c3ca99d528b2bb146e1b6ed151ad6fb74a306529907dfd2a2999d5fea3d5a6e2294d2cdd9ceeca83aa6290e5eba5c212310edf87fd2375b22f6b18a47f6310eba51db86b03fc3540ab899494643401db416a785716666f2ef28fad68bcf36cbe36f1ed4566301411feeaabf07f039cdfc7a9852fe9747f8fc3757e5910662bd53c3b7466a0de2d3347a67f90bdc15eddb3e1336d2a0870ca8492eedd576e52ac45f125932703ef353e3e1f3c6889a0641bf917febe4d19e869a0f471244327c9b1f8db56359e2b213a2168b7d21049f8d02688ac44855f9360d42e6763cb8c2c9a8ca56ef6c3419ef09b2b2fbd02cd744d844be2a95ee8d9e70e4bd942eb60873ba23de39d533d20aa5d532de4ecbbfe4e36a89df6c7c94f268a618ee97a534872fdbfba5bfc458f598942fb45772b24e9ac02577afe396af594f8a69af8dafe308f2f84b5fc5ee40df2070a05d727306e705d74e786509e26b36c2629f62199a4e31d9f8417641deabeac917ad238bd6f10ac1d0090ad950c1f900e2e08b95888bb151d809e80e44ad03945253a12c65879b2660dffd4380c65b1c60713eb6dfb460c2ad21cd134b91d915dc2ae486fac5bf21eed9e96315f2459e775ae4f413a7096760132ea6fd4469b613e56d42e32acc73a2bc558fc00fba8bffc2678dc5e7c0d0c6a979aa5e597ab9d64fffa2bea32cb52bb1ccec9e83a496b73426f489eb88facd566ab16ac8e73c924d32a7dc0e3143d0b158194246a26462cfaf76b0850aa9d413819191a8c188e260911c12829f042da5ea7f4760b6eefffd64116250a5665c1f115730422a2d7e7b4e414af05b9e6c7dd5dc61dc57a2d6a74dbfb0b08458637a2aaceb98584bdc399ad6bda1a0cbe0d71419db7b0ad507711b461fa8bfe38fbcb1448079d057bb3e02aea57583302410650a04f6374a8a84625b7d400e4b66243408fb1a10a15fa08ff3cc873ad2281413bc3c456865e512f5c7f6189a1585ef1a0852c0b14c8fb127e16eabf907ffa80b2ade5529fabd75a2c1059a71378184908a092808c56714af43ccd81d93704db521f48d474f30bb79c402d0fc5e266aa520cf80776b1f513b68b31a6b74de9ff5f04c790ff981c5c9cec769c3949db2646cbc58d12085666f3d78180fcff2290cb79ed48f38c49b225bc4ddd88f7061bfd988fa12b1be2cd5a9e9a60ecffc4bacafc814ffbe5c3584c2fc6ece95739f50df82360e35f0a26732a21b3a64c4e00e1d1492b147e3826e2206999c468aa52f09b170abbe2c79236ae0e0ce37937352609dcf043a0749eee5b7986dce90e9fea6ea2566d8a7fcf7684383", 0x1000}], 0x3, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @rand_addr=0x64010101}}}], 0xa8}}], 0x1, 0x20048000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002680)=ANY=[@ANYBLOB="3c0400003c0007010000000000000000017c00000400fc800c00018006000600800a0000080002800400158008000500090000002800088004004880"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) recvmsg(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001240)=""/85, 0x55}, {&(0x7f00000012c0)=""/10, 0xa}, {&(0x7f0000001640)=""/178, 0xb2}], 0x3}, 0x40000020) kernel console output (not intermixed with test programs): interface with an up link [ 470.617044][ T5180] Bluetooth: hci0: command tx timeout [ 470.805559][T17947] 8021q: VLANs not supported on syzkaller1 [ 470.816388][T17947] syzkaller1: entered promiscuous mode [ 470.822830][T17947] syzkaller1: entered allmulticast mode [ 470.949380][T17956] netlink: 'syz.0.3262': attribute type 10 has an invalid length. [ 470.971165][T17956] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.978809][T17956] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.996048][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.003404][T17956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.011021][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.018203][T17956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.065449][T17956] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 471.201565][T17975] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 471.264240][T17985] __nla_validate_parse: 5 callbacks suppressed [ 471.264262][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 471.288131][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 471.512852][T17995] netlink: 'syz.1.3274': attribute type 10 has an invalid length. [ 471.532786][T17995] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.541885][T17995] bond0: (slave team0): Enslaving as an active interface with an up link [ 471.613874][T18001] tipc: Started in network mode [ 471.619467][T18001] tipc: Node identity b248d69ef3da, cluster identity 4711 [ 471.628219][T18001] tipc: Enabled bearer , priority 0 [ 471.838073][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.845623][T18002] bridge0: port 1(1¾x9ÿ) entered disabled state [ 472.091371][T18029] netlink: 'syz.3.3280': attribute type 2 has an invalid length. [ 472.133665][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.197800][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.523017][T18001] syzkaller0: entered promiscuous mode [ 472.530205][T18001] syzkaller0: entered allmulticast mode [ 472.545325][T18016] tipc: Resetting bearer [ 472.554729][T18022] bridge: RTM_NEWNEIGH with invalid ether address [ 472.566306][T18029] k›*·]‘: entered promiscuous mode [ 472.625185][T18037] veth0_to_team: entered promiscuous mode [ 472.632660][T18037] veth0_to_team: entered allmulticast mode [ 472.643593][T18000] tipc: Resetting bearer [ 472.652394][T18000] tipc: Disabling bearer [ 472.663494][T16950] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.674732][T18041] netlink: 'syz.4.3281': attribute type 2 has an invalid length. [ 472.683202][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 472.697157][ T5180] Bluetooth: hci0: command tx timeout [ 472.717744][T16950] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.796006][T16950] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.824114][T16950] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.939212][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 472.959286][T18058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3284'. [ 472.981650][T18052] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.989319][T18052] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.013011][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3284'. [ 473.253455][T18052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.275560][T18052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.463009][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 473.651841][ T7922] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.661398][ T7922] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.697058][ T7922] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.742459][ T7922] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.806398][T18079] veth1_macvtap: left promiscuous mode [ 473.812406][T18079] macsec0: entered promiscuous mode [ 473.818399][T18079] macsec0: entered allmulticast mode [ 473.863249][T18079] macsec0: left promiscuous mode [ 473.889080][T18079] macsec0: left allmulticast mode [ 473.923532][T18091] lo speed is unknown, defaulting to 1000 [ 473.939755][T18091] lo speed is unknown, defaulting to 1000 [ 473.966303][T18095] bond0: (slave bridge0): Releasing backup interface [ 473.990860][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.998184][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.020517][T18095] bridge_slave_0: left allmulticast mode [ 474.031587][T18095] bridge_slave_0: left promiscuous mode [ 474.044497][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.062119][T18095] bridge_slave_1: left allmulticast mode [ 474.069596][T18095] bridge_slave_1: left promiscuous mode [ 474.089665][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.122367][T18095] bond0: (slave bond_slave_0): Releasing backup interface [ 474.165280][T18095] bond0: (slave bond_slave_1): Releasing backup interface [ 474.230232][T18095] team0: Port device team_slave_0 removed [ 474.251930][T18095] team0: Port device team_slave_1 removed [ 474.276109][T18095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.286238][T18095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.296408][T18095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.309118][T18095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.332980][T18095] batman_adv: batadv0: Removing interface: ipvlan2 [ 474.341872][T18091] wg1 speed is unknown, defaulting to 1000 [ 474.395940][T18119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3302'. [ 474.501730][T18116] pim6reg1: entered promiscuous mode [ 474.507576][T18116] pim6reg1: entered allmulticast mode [ 474.665578][T18121] lo speed is unknown, defaulting to 1000 [ 474.698496][T18121] lo speed is unknown, defaulting to 1000 [ 474.707916][T18121] wg1 speed is unknown, defaulting to 1000 [ 474.780019][T18135] netlink: 'syz.2.3305': attribute type 1 has an invalid length. [ 474.794869][T18137] lo speed is unknown, defaulting to 1000 [ 474.805095][T18137] lo speed is unknown, defaulting to 1000 [ 474.846606][T18137] wg1 speed is unknown, defaulting to 1000 [ 475.024128][T18151] lo speed is unknown, defaulting to 1000 [ 475.031011][T18151] lo speed is unknown, defaulting to 1000 [ 475.078953][T18151] wg1 speed is unknown, defaulting to 1000 [ 475.145672][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 475.423177][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 476.431552][ T30] audit: type=1800 audit(1756421117.412:11): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3334" name="memory.events" dev="tmpfs" ino=270 res=0 errno=0 [ 476.453351][T18255] __nla_validate_parse: 5 callbacks suppressed [ 476.453373][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'. [ 476.483728][T18035] hid-generic 0005:15C2:8002.0002: collection stack underflow [ 476.511855][T18035] hid-generic 0005:15C2:8002.0002: item 0 0 0 12 parsing failed [ 476.520996][T18035] hid-generic 0005:15C2:8002.0002: probe with driver hid-generic failed with error -22 [ 476.708061][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 476.868885][T18289] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3346'. [ 476.902014][T18289] nbd: couldn't find a device at index 0 [ 477.035633][T18297] netlink: 'syz.1.3347': attribute type 13 has an invalid length. [ 477.077765][T18297] netlink: 'syz.1.3347': attribute type 17 has an invalid length. [ 477.184438][T18297] net_ratelimit: 1 callbacks suppressed [ 477.184451][T18297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.344778][T18299] lo speed is unknown, defaulting to 1000 [ 477.373691][T18297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3347'. [ 477.391769][T18299] lo speed is unknown, defaulting to 1000 [ 477.424542][T18299] wg1 speed is unknown, defaulting to 1000 [ 477.477689][T18303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.583699][T18303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.625038][T18330] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3354'. [ 477.643580][T18330] netlink: 'syz.2.3354': attribute type 1 has an invalid length. [ 477.707575][T18325] lo speed is unknown, defaulting to 1000 [ 477.729037][T18331] gretap1: entered allmulticast mode [ 477.748354][T18331] bond1: (slave gretap1): making interface the new active one [ 477.757556][T18331] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 477.766974][T18326] lo speed is unknown, defaulting to 1000 [ 477.781608][T18325] lo speed is unknown, defaulting to 1000 [ 477.788474][T18325] wg1 speed is unknown, defaulting to 1000 [ 477.798524][T18326] lo speed is unknown, defaulting to 1000 [ 477.805197][T18326] wg1 speed is unknown, defaulting to 1000 [ 478.125452][T18351] macsec0: entered promiscuous mode [ 478.137787][T18351] macsec0: entered allmulticast mode [ 478.147616][T18351] macsec0: left promiscuous mode [ 478.219339][T18351] macsec0: left allmulticast mode [ 478.282292][T18357] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3360'. [ 478.377747][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 478.419586][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'. [ 478.474414][T18365] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 478.622311][T18375] netlink: 'syz.0.3366': attribute type 1 has an invalid length. [ 478.654246][T18375] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3366'. [ 478.692944][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 478.774416][T18382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3366'. [ 479.169071][T18406] veth1_macvtap: left promiscuous mode [ 479.247662][T18406] macsec0: entered promiscuous mode [ 479.284605][T18406] macsec0: entered allmulticast mode [ 479.388304][T18406] syzkaller0: entered promiscuous mode [ 479.393922][T18406] syzkaller0: entered allmulticast mode [ 479.435527][T18406] macsec0: left promiscuous mode [ 479.461057][T18406] macsec0: left allmulticast mode [ 480.363133][T18457] macsec0: entered promiscuous mode [ 480.368586][T18457] macsec0: entered allmulticast mode [ 480.374802][T18457] macsec0: left promiscuous mode [ 480.379985][T18457] macsec0: left allmulticast mode [ 480.711599][T18487] veth5: entered promiscuous mode [ 480.792108][T18499] bridge1: entered promiscuous mode [ 480.810544][T18499] bridge1: entered allmulticast mode [ 480.837914][T18499] team0: Port device bridge1 added [ 480.852367][T18502] macsec0: entered promiscuous mode [ 480.862199][T18502] macsec0: entered allmulticast mode [ 480.875175][T18506] netlink: 'syz.0.3408': attribute type 1 has an invalid length. [ 480.887785][T18511] macsec0: left promiscuous mode [ 480.893451][T18511] macsec0: left allmulticast mode [ 480.939730][T18506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.969844][T18518] bond1: (slave geneve2): making interface the new active one [ 480.980368][T18518] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 480.995926][T18523] openvswitch: netlink: Missing key (keys=40, expected=80) [ 481.143846][ T7921] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.165400][T18531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.209419][T18531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.249605][ T7921] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.267453][ T7921] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.343445][ T7921] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.426430][T18553] netlink: 'syz.0.3420': attribute type 1 has an invalid length. [ 481.440612][T18534] pim6reg1: entered promiscuous mode [ 481.446005][T18534] pim6reg1: entered allmulticast mode [ 481.464163][T18553] netlink: 'syz.0.3420': attribute type 1 has an invalid length. [ 481.497754][T18553] netlink: 'syz.0.3420': attribute type 1 has an invalid length. [ 481.534651][T18561] __nla_validate_parse: 10 callbacks suppressed [ 481.534675][T18561] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3422'. [ 481.623850][T18563] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3423'. [ 481.655606][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'. [ 481.741959][T18568] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3425'. [ 481.888058][T18583] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3429'. [ 481.889196][T18582] lo speed is unknown, defaulting to 1000 [ 481.904340][T18582] lo speed is unknown, defaulting to 1000 [ 481.912290][T18582] wg1 speed is unknown, defaulting to 1000 [ 481.961431][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 481.962749][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3430'. [ 482.116531][T18598] netlink: 'syz.0.3436': attribute type 21 has an invalid length. [ 482.137205][T18599] netlink: 'syz.0.3436': attribute type 21 has an invalid length. [ 482.163500][T18606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 482.322351][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 482.325550][T18622] pimreg: entered allmulticast mode [ 482.340803][T18622] pimreg: left allmulticast mode [ 482.390342][T18626] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3445'. [ 482.400772][T18626] netlink: 'syz.1.3445': attribute type 3 has an invalid length. [ 482.703168][T18654] tipc: Enabled bearer , priority 0 [ 482.725042][T18654] syzkaller0: entered promiscuous mode [ 482.733639][T18654] syzkaller0: entered allmulticast mode [ 482.841049][T18660] netlink: 'syz.3.3458': attribute type 5 has an invalid length. [ 482.895809][T18660] netlink: 'syz.3.3458': attribute type 5 has an invalid length. [ 482.913497][T18668] lo speed is unknown, defaulting to 1000 [ 482.924124][T18668] lo speed is unknown, defaulting to 1000 [ 482.932516][T18668] wg1 speed is unknown, defaulting to 1000 [ 482.999593][T18673] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 483.024863][T18682] netlink: 'syz.3.3463': attribute type 1 has an invalid length. [ 483.459902][T18711] netlink: 'syz.3.3473': attribute type 2 has an invalid length. [ 483.475457][T18711] þ: entered promiscuous mode [ 483.491435][T18715] netlink: 'syz.4.3475': attribute type 3 has an invalid length. [ 483.816984][T17448] tipc: Node number set to 1558476607 [ 483.975328][T18729] tipc: Enabling of bearer rejected, already enabled [ 484.094211][T18742] mac80211_hwsim hwsim44 ªªªªª;: renamed from wlan0 [ 484.096306][T18741] netlink: del zone limit has 4 unknown bytes [ 484.364759][T18763] lo speed is unknown, defaulting to 1000 [ 484.375947][T18763] lo speed is unknown, defaulting to 1000 [ 484.388460][T18763] wg1 speed is unknown, defaulting to 1000 [ 484.654795][T18787] siw: device registration error -23 [ 484.673467][T18789] !: renamed from dummy0 (while UP) [ 484.787200][T18792] lo speed is unknown, defaulting to 1000 [ 484.844384][T18794] lo speed is unknown, defaulting to 1000 [ 484.849200][T18800] netlink: 'syz.1.3501': attribute type 83 has an invalid length. [ 484.884593][T18792] lo speed is unknown, defaulting to 1000 [ 484.894539][T18797] lo speed is unknown, defaulting to 1000 [ 484.899824][T18794] lo speed is unknown, defaulting to 1000 [ 484.906948][T18792] wg1 speed is unknown, defaulting to 1000 [ 484.928372][T18794] wg1 speed is unknown, defaulting to 1000 [ 484.962348][T18797] lo speed is unknown, defaulting to 1000 [ 485.034116][T18797] wg1 speed is unknown, defaulting to 1000 [ 485.067328][T18806] siw: device registration error -23 [ 485.572654][T18832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.675248][T18834] macvlan1: entered promiscuous mode [ 485.682213][T18834] macvlan1: left promiscuous mode [ 485.708491][T18851] netlink: 'syz.2.3514': attribute type 13 has an invalid length. [ 485.777505][T18848] nbd5: detected capacity change from 0 to 127 [ 485.787663][ T51] block nbd5: Receive control failed (result -32) [ 485.834432][T18851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.847186][T18851] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.866656][T18851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.963250][T18868] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 485.979452][T18868] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 485.999771][T18867] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 486.012271][T18867] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 486.030040][T18865] lo speed is unknown, defaulting to 1000 [ 486.192183][T18862] lo speed is unknown, defaulting to 1000 [ 486.198537][T18865] lo speed is unknown, defaulting to 1000 [ 486.236677][T18865] wg1 speed is unknown, defaulting to 1000 [ 486.245614][T18862] lo speed is unknown, defaulting to 1000 [ 486.265733][T18862] wg1 speed is unknown, defaulting to 1000 [ 486.398049][T18884] macsec0: entered promiscuous mode [ 486.403451][T18884] macsec0: entered allmulticast mode [ 486.435016][T18884] macsec0: left promiscuous mode [ 486.441993][T18884] macsec0: left allmulticast mode [ 486.824021][T18912] lo speed is unknown, defaulting to 1000 [ 486.832083][T18912] lo speed is unknown, defaulting to 1000 [ 486.862287][T18912] wg1 speed is unknown, defaulting to 1000 [ 487.046267][T18936] __nla_validate_parse: 48 callbacks suppressed [ 487.046290][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3533'. [ 487.218796][T18942] validate_nla: 3 callbacks suppressed [ 487.218816][T18942] netlink: 'syz.3.3538': attribute type 12 has an invalid length. [ 487.285393][T18945] netlink: 'syz.2.3541': attribute type 39 has an invalid length. [ 487.296037][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3538'. [ 487.336413][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 487.411987][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 487.469920][T18964] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3543'. [ 487.489532][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 487.702179][T18975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.790802][T18983] lo speed is unknown, defaulting to 1000 [ 487.803555][T18983] lo speed is unknown, defaulting to 1000 [ 487.822205][T18983] wg1 speed is unknown, defaulting to 1000 [ 487.901088][T18998] macsec0: entered promiscuous mode [ 487.910847][T18998] macsec0: entered allmulticast mode [ 487.956457][T18998] macsec0: left promiscuous mode [ 487.982902][T18998] macsec0: left allmulticast mode [ 488.128060][T19009] netlink: 'syz.2.3557': attribute type 1 has an invalid length. [ 488.146576][T19009] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3557'. [ 488.416643][T19018] lo speed is unknown, defaulting to 1000 [ 488.430518][T19018] lo speed is unknown, defaulting to 1000 [ 488.438463][T19018] wg1 speed is unknown, defaulting to 1000 [ 488.634645][T19035] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3565'. [ 488.636489][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 488.683909][T19036] bridge_slave_1: left allmulticast mode [ 488.690342][T19036] bridge_slave_1: left promiscuous mode [ 488.697698][T19036] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.709583][T19036] ¾x9ÿ: left allmulticast mode [ 488.714698][T19036] ¾x9ÿ: left promiscuous mode [ 488.720144][T19036] bridge0: port 1(1¾x9ÿ) entered disabled state [ 488.892749][T19045] lo speed is unknown, defaulting to 1000 [ 488.900522][T19045] lo speed is unknown, defaulting to 1000 [ 488.909717][T19045] wg1 speed is unknown, defaulting to 1000 [ 488.955099][T19048] lo speed is unknown, defaulting to 1000 [ 488.986920][T19048] lo speed is unknown, defaulting to 1000 [ 489.006222][T19048] wg1 speed is unknown, defaulting to 1000 [ 489.026074][T19052] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 489.082393][T19054] lo speed is unknown, defaulting to 1000 [ 489.101541][T19052] bond1: (slave geneve2): making interface the new active one [ 489.110327][T19052] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 489.123948][T19054] lo speed is unknown, defaulting to 1000 [ 489.123972][ T7918] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.139702][ T7918] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.164662][ T7918] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.173879][T19054] wg1 speed is unknown, defaulting to 1000 [ 489.179939][ T7918] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.504245][T19054] lo speed is unknown, defaulting to 1000 [ 489.544306][T19054] lo speed is unknown, defaulting to 1000 [ 489.558588][T19054] wg1 speed is unknown, defaulting to 1000 [ 489.644073][T19082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3575'. [ 489.726289][T19070] lo speed is unknown, defaulting to 1000 [ 489.827231][T19070] lo speed is unknown, defaulting to 1000 [ 489.880048][T19087] veth1_macvtap: left promiscuous mode [ 489.885895][T19087] macsec0: entered promiscuous mode [ 489.921981][T19087] macsec0: entered allmulticast mode [ 489.947844][T19087] macsec0: left promiscuous mode [ 489.953300][T19087] macsec0: left allmulticast mode [ 489.977234][T19070] wg1 speed is unknown, defaulting to 1000 [ 490.018101][T19091] vlan2: entered allmulticast mode [ 490.023283][T19091] bond0: entered allmulticast mode [ 490.031136][T19091] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 490.040369][T19091] team0: entered allmulticast mode [ 490.129521][T19100] netlink: 'syz.2.3581': attribute type 1 has an invalid length. [ 490.180208][T19109] netlink: 'syz.2.3581': attribute type 1 has an invalid length. [ 490.240540][T19111] netlink: 'syz.1.3583': attribute type 13 has an invalid length. [ 490.257106][T19111] netlink: 'syz.1.3583': attribute type 17 has an invalid length. [ 490.281252][T19111] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.292729][T19111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.530251][T19104] lo speed is unknown, defaulting to 1000 [ 490.557224][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'. [ 490.578542][T19131] lo speed is unknown, defaulting to 1000 [ 490.597937][T19104] lo speed is unknown, defaulting to 1000 [ 490.617756][T19104] wg1 speed is unknown, defaulting to 1000 [ 490.656247][T19136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.680195][T19131] lo speed is unknown, defaulting to 1000 [ 490.781411][T19131] wg1 speed is unknown, defaulting to 1000 [ 490.788063][T19138] macsec0: entered promiscuous mode [ 490.793490][T19138] macsec0: entered allmulticast mode [ 490.827376][T19138] macsec0: left promiscuous mode [ 490.832468][T19138] macsec0: left allmulticast mode [ 491.116978][T19155] macvtap1: entered promiscuous mode [ 491.122658][T19155] team0: entered promiscuous mode [ 491.129215][T19155] macvtap1: entered allmulticast mode [ 491.135363][T19155] team0: entered allmulticast mode [ 491.143856][T19155] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 491.314635][T19157] lo speed is unknown, defaulting to 1000 [ 491.323826][T19157] lo speed is unknown, defaulting to 1000 [ 491.338858][T19162] IPVS: length: 49 != 24 [ 491.343228][T19157] wg1 speed is unknown, defaulting to 1000 [ 491.546084][T19180] tipc: Started in network mode [ 491.553068][T19180] tipc: Node identity 5234f1c458f9, cluster identity 4711 [ 491.561031][T19180] tipc: Enabled bearer , priority 0 [ 491.583666][T19180] syzkaller0: entered promiscuous mode [ 491.607130][T19180] syzkaller0: entered allmulticast mode [ 491.630058][T19187] netlink: 'syz.2.3603': attribute type 8 has an invalid length. [ 491.633054][T19189] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 491.670522][T19179] tipc: Resetting bearer [ 491.701852][T19179] tipc: Disabling bearer [ 491.781710][T19201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.843712][ T30] audit: type=1800 audit(1756421132.822:12): pid=19200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3606" name="blkio.bfq.time_recursive" dev="tmpfs" ino=847 res=0 errno=0 [ 492.057814][T19208] lo speed is unknown, defaulting to 1000 [ 492.065490][T19208] wg1 speed is unknown, defaulting to 1000 [ 492.139089][T19225] __nla_validate_parse: 7 callbacks suppressed [ 492.139161][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3613'. [ 492.182272][T19229] netlink: 'syz.2.3614': attribute type 29 has an invalid length. [ 492.193071][T19229] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3614'. [ 492.211704][T19229] dvmrp0: entered allmulticast mode [ 492.297152][T19229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.335440][T19229] team0: Port device bond2 added [ 492.515350][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3616'. [ 492.638101][T19248] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3616'. [ 492.663087][T19249] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3618'. [ 492.797856][T19253] sctp: [Deprecated]: syz.1.3619 (pid 19253) Use of int in max_burst socket option deprecated. [ 492.797856][T19253] Use struct sctp_assoc_value instead [ 492.894835][T19254] validate_nla: 1 callbacks suppressed [ 492.894858][T19254] netlink: 'syz.2.3618': attribute type 2 has an invalid length. [ 492.927150][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3618'. [ 493.240068][T19264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.270108][T19264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.283956][T19266] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3624'. [ 493.310314][T19268] macsec0: entered promiscuous mode [ 493.315679][T19268] macsec0: entered allmulticast mode [ 493.322520][T19271] macsec0: left promiscuous mode [ 493.329997][T19271] macsec0: left allmulticast mode [ 493.390948][T19277] netlink: 'syz.0.3624': attribute type 14 has an invalid length. [ 493.436000][T19264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.450411][T19264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.543535][T19264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.560203][T19264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.642598][T19264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.664635][T19264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.752376][ T7921] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.763106][ T7921] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.774452][T19296] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 493.793146][ T7921] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.806662][ T7921] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.835427][ T7921] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.854189][ T7921] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.885676][ T7921] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.915497][ T7921] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.009292][T19307] lo speed is unknown, defaulting to 1000 [ 494.021814][T19307] wg1 speed is unknown, defaulting to 1000 [ 494.145087][T19316] tipc: Enabled bearer , priority 0 [ 494.200835][T19316] syzkaller0: entered promiscuous mode [ 494.216288][T19316] syzkaller0: entered allmulticast mode [ 494.245343][T19316] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 494.314581][T19316] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 494.338361][T19316] tipc: Resetting bearer [ 494.361846][T19315] tipc: Resetting bearer [ 494.382602][T19315] tipc: Disabling bearer [ 494.720914][T19333] lo speed is unknown, defaulting to 1000 [ 494.855803][T19333] wg1 speed is unknown, defaulting to 1000 [ 494.960221][T19329] lo speed is unknown, defaulting to 1000 [ 494.972227][T19329] wg1 speed is unknown, defaulting to 1000 [ 495.260982][T19357] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3647'. [ 495.281038][T19360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3646'. [ 495.416984][T19365] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 495.469398][T19365] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3643'. [ 495.488767][T19370] lo speed is unknown, defaulting to 1000 [ 495.547367][T19370] wg1 speed is unknown, defaulting to 1000 [ 496.423689][T19388] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 496.532710][T19402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.616174][T19390] lo speed is unknown, defaulting to 1000 [ 496.629223][T19390] wg1 speed is unknown, defaulting to 1000 [ 496.634146][T19406] netlink: 'syz.3.3659': attribute type 1 has an invalid length. [ 496.969703][T19420] tap0: tun_chr_ioctl cmd 1074025680 [ 496.980143][T19420] tipc: Enabled bearer , priority 0 [ 497.000320][T19420] D: renamed from syzkaller0 [ 497.006485][T19420] tipc: Disabling bearer [ 497.283505][T19392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.310831][T19436] sctp: [Deprecated]: syz.2.3668 (pid 19436) Use of int in maxseg socket option. [ 497.310831][T19436] Use struct sctp_assoc_value instead [ 497.368583][T19438] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 497.374606][T19440] __nla_validate_parse: 1 callbacks suppressed [ 497.374625][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3671'. [ 497.399164][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3671'. [ 497.546044][T19450] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3674'. [ 497.547913][T19449] macsec0: entered promiscuous mode [ 497.561384][T19449] macsec0: entered allmulticast mode [ 497.612143][T19449] macsec0: left promiscuous mode [ 497.626001][T19449] macsec0: left allmulticast mode [ 498.113729][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3679'. [ 498.173606][T19478] tipc: Enabled bearer , priority 0 [ 498.191618][T19478] tipc: Resetting bearer [ 498.205544][T19476] tipc: Disabling bearer [ 498.419177][T19491] openvswitch: netlink: Multiple metadata blocks provided [ 498.419177][T19490] openvswitch: netlink: Multiple metadata blocks provided [ 498.783209][T19508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3690'. [ 499.573184][T19506] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.580946][T19506] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.213028][T19506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.970411][ T7921] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.998014][ T7921] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.006529][ T7921] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.058013][ T7921] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.066746][ T7921] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.096200][ T7921] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.140159][ T7921] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.160430][ T7921] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.233975][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3700'. [ 501.241338][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3702'. [ 501.267778][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3700'. [ 501.289850][T19559] netlink: 'syz.3.3699': attribute type 1 has an invalid length. [ 501.301061][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3699'. [ 501.362214][T19564] sctp: [Deprecated]: syz.2.3702 (pid 19564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.362214][T19564] Use struct sctp_sack_info instead [ 501.571521][T19582] syzkaller1: entered promiscuous mode [ 501.579030][T19582] syzkaller1: entered allmulticast mode [ 501.802186][T19593] FAULT_INJECTION: forcing a failure. [ 501.802186][T19593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.825212][T19593] CPU: 1 UID: 0 PID: 19593 Comm: syz.2.3711 Not tainted syzkaller #0 PREEMPT(full) [ 501.825242][T19593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.825253][T19593] Call Trace: [ 501.825261][T19593] [ 501.825268][T19593] dump_stack_lvl+0x189/0x250 [ 501.825299][T19593] ? __pfx____ratelimit+0x10/0x10 [ 501.825333][T19593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.825356][T19593] ? __pfx__printk+0x10/0x10 [ 501.825380][T19593] ? __might_fault+0xb0/0x130 [ 501.825411][T19593] ? rcu_is_watching+0x15/0xb0 [ 501.825432][T19593] should_fail_ex+0x414/0x560 [ 501.825470][T19593] _copy_from_user+0x2d/0xb0 [ 501.825493][T19593] ___sys_sendmsg+0x158/0x2a0 [ 501.825516][T19593] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.825551][T19593] ? __fget_files+0x2a/0x420 [ 501.825568][T19593] ? __fget_files+0x3a0/0x420 [ 501.825589][T19593] __x64_sys_sendmsg+0x19b/0x260 [ 501.825611][T19593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.825636][T19593] ? __pfx_ksys_write+0x10/0x10 [ 501.825660][T19593] ? rcu_is_watching+0x15/0xb0 [ 501.825680][T19593] ? rcu_is_watching+0x15/0xb0 [ 501.825700][T19593] do_syscall_64+0xfa/0x3b0 [ 501.825718][T19593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.825738][T19593] ? clear_bhb_loop+0x60/0xb0 [ 501.825759][T19593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.825778][T19593] RIP: 0033:0x7f69b0d8ebe9 [ 501.825796][T19593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.825814][T19593] RSP: 002b:00007f69b1c04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.825836][T19593] RAX: ffffffffffffffda RBX: 00007f69b0fb5fa0 RCX: 00007f69b0d8ebe9 [ 501.825851][T19593] RDX: 0000000000004010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 501.825864][T19593] RBP: 00007f69b1c04090 R08: 0000000000000000 R09: 0000000000000000 [ 501.825878][T19593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.825891][T19593] R13: 00007f69b0fb6038 R14: 00007f69b0fb5fa0 R15: 00007ffe0ba657a8 [ 501.825915][T19593] [ 502.160259][T19604] veth0_to_batadv: mtu less than device minimum [ 502.169582][T19604] veth0_to_batadv: mtu less than device minimum [ 502.184560][T19608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3716'. [ 502.245408][T19613] gretap0: entered promiscuous mode [ 502.253256][T19613] vlan2: entered promiscuous mode [ 502.316145][T19616] tipc: Enabled bearer , priority 0 [ 502.326558][T19616] syzkaller0: entered promiscuous mode [ 502.333194][T19616] syzkaller0: entered allmulticast mode [ 502.378748][T19616] tipc: Resetting bearer [ 502.386528][T19615] tipc: Resetting bearer [ 502.404305][T19615] tipc: Disabling bearer [ 502.431751][T19623] tipc: Enabled bearer , priority 0 [ 502.439432][T19623] syzkaller0: entered promiscuous mode [ 502.445163][T19623] syzkaller0: entered allmulticast mode [ 502.493251][T19623] bridge_slave_0: left allmulticast mode [ 502.507549][T19623] bridge_slave_0: left promiscuous mode [ 502.513784][T19623] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.519742][T19632] FAULT_INJECTION: forcing a failure. [ 502.519742][T19632] name failslab, interval 1, probability 0, space 0, times 1 [ 502.536642][T19623] bridge_slave_1: left allmulticast mode [ 502.544759][T19623] bridge_slave_1: left promiscuous mode [ 502.551009][T19632] CPU: 0 UID: 0 PID: 19632 Comm: syz.3.3724 Not tainted syzkaller #0 PREEMPT(full) [ 502.551042][T19632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.551054][T19632] Call Trace: [ 502.551061][T19632] [ 502.551068][T19632] dump_stack_lvl+0x189/0x250 [ 502.551096][T19632] ? __pfx____ratelimit+0x10/0x10 [ 502.551123][T19632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.551145][T19632] ? __pfx__printk+0x10/0x10 [ 502.551171][T19632] ? fs_reclaim_acquire+0x7d/0x100 [ 502.551199][T19632] ? rcu_is_watching+0x15/0xb0 [ 502.551219][T19632] ? __pfx___might_resched+0x10/0x10 [ 502.551237][T19632] ? lock_acquire+0x5f/0x360 [ 502.551264][T19632] should_fail_ex+0x414/0x560 [ 502.551289][T19632] should_failslab+0xa8/0x100 [ 502.551317][T19632] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 502.551343][T19632] ? __alloc_skb+0x112/0x2d0 [ 502.551363][T19632] __alloc_skb+0x112/0x2d0 [ 502.551381][T19632] netlink_sendmsg+0x5c6/0xb30 [ 502.551404][T19632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.551423][T19632] ? aa_sock_msg_perm+0xf1/0x1d0 [ 502.551442][T19632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.551462][T19632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.551480][T19632] __sock_sendmsg+0x21c/0x270 [ 502.551507][T19632] ____sys_sendmsg+0x505/0x830 [ 502.551543][T19632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.551568][T19632] ? import_iovec+0x74/0xa0 [ 502.551592][T19632] ___sys_sendmsg+0x21f/0x2a0 [ 502.551613][T19632] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.551650][T19632] ? __fget_files+0x2a/0x420 [ 502.551666][T19632] ? __fget_files+0x3a0/0x420 [ 502.551687][T19632] __x64_sys_sendmsg+0x19b/0x260 [ 502.551709][T19632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.551734][T19632] ? __pfx_ksys_write+0x10/0x10 [ 502.551757][T19632] ? rcu_is_watching+0x15/0xb0 [ 502.551777][T19632] ? rcu_is_watching+0x15/0xb0 [ 502.551797][T19632] do_syscall_64+0xfa/0x3b0 [ 502.551814][T19632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.551839][T19632] ? clear_bhb_loop+0x60/0xb0 [ 502.551860][T19632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.551878][T19632] RIP: 0033:0x7f89ba18ebe9 [ 502.551896][T19632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.551912][T19632] RSP: 002b:00007f89baf5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.551933][T19632] RAX: ffffffffffffffda RBX: 00007f89ba3b5fa0 RCX: 00007f89ba18ebe9 [ 502.551947][T19632] RDX: 0000000000004010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 502.551960][T19632] RBP: 00007f89baf5b090 R08: 0000000000000000 R09: 0000000000000000 [ 502.551972][T19632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.551983][T19632] R13: 00007f89ba3b6038 R14: 00007f89ba3b5fa0 R15: 00007ffe46ffa1e8 [ 502.552003][T19632] [ 502.567555][T19623] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.860264][T19623] bond0: (slave bond_slave_0): Releasing backup interface [ 502.886062][T19623] bond0: (slave bond_slave_1): Releasing backup interface [ 502.901863][T19623] team0: Port device team_slave_0 removed [ 502.912014][T19623] team0: Port device team_slave_1 removed [ 502.919636][T19623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.931604][T19623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.947173][T19623] team0: Port device bridge1 removed [ 502.979626][T19633] tipc: Resetting bearer [ 503.054230][T19622] tipc: Resetting bearer [ 503.105154][T19622] tipc: Disabling bearer [ 503.124305][T19664] wireguard0: entered promiscuous mode [ 503.134385][T19664] wireguard0: entered allmulticast mode [ 503.160860][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3733'. [ 503.208572][T19665] netlink: zone id is out of range [ 503.213927][T19665] netlink: zone id is out of range [ 503.250208][T19665] netlink: zone id is out of range [ 503.285799][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'. [ 503.295642][T19665] netlink: zone id is out of range [ 503.327812][T19688] netlink: del zone limit has 4 unknown bytes [ 503.353934][T19665] netlink: zone id is out of range [ 503.390557][T19665] netlink: zone id is out of range [ 503.415173][T19665] netlink: zone id is out of range [ 503.451891][ T1933] IPVS: starting estimator thread 0... [ 503.561117][T19697] IPVS: using max 46 ests per chain, 110400 per kthread [ 503.681878][T19714] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3745'. [ 503.722139][T19716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.839715][T19735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3747'. [ 504.101305][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 504.111189][T19763] veth0_to_bond: entered allmulticast mode [ 504.222197][T19775] FAULT_INJECTION: forcing a failure. [ 504.222197][T19775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.269556][T19775] CPU: 0 UID: 0 PID: 19775 Comm: syz.2.3761 Not tainted syzkaller #0 PREEMPT(full) [ 504.269589][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.269601][T19775] Call Trace: [ 504.269608][T19775] [ 504.269617][T19775] dump_stack_lvl+0x189/0x250 [ 504.269645][T19775] ? __pfx____ratelimit+0x10/0x10 [ 504.269672][T19775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.269693][T19775] ? __pfx__printk+0x10/0x10 [ 504.269716][T19775] ? __might_fault+0xb0/0x130 [ 504.269745][T19775] ? rcu_is_watching+0x15/0xb0 [ 504.269765][T19775] should_fail_ex+0x414/0x560 [ 504.269791][T19775] _copy_from_user+0x2d/0xb0 [ 504.269815][T19775] ___sys_sendmsg+0x158/0x2a0 [ 504.269836][T19775] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.269874][T19775] ? __fget_files+0x2a/0x420 [ 504.269890][T19775] ? __fget_files+0x3a0/0x420 [ 504.269910][T19775] __x64_sys_sendmsg+0x19b/0x260 [ 504.269931][T19775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.269955][T19775] ? __pfx_ksys_write+0x10/0x10 [ 504.269978][T19775] ? rcu_is_watching+0x15/0xb0 [ 504.269998][T19775] ? rcu_is_watching+0x15/0xb0 [ 504.270016][T19775] do_syscall_64+0xfa/0x3b0 [ 504.270034][T19775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.270051][T19775] ? clear_bhb_loop+0x60/0xb0 [ 504.270072][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.270091][T19775] RIP: 0033:0x7f69b0d8ebe9 [ 504.270108][T19775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.270126][T19775] RSP: 002b:00007f69b1c04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.270149][T19775] RAX: ffffffffffffffda RBX: 00007f69b0fb5fa0 RCX: 00007f69b0d8ebe9 [ 504.270164][T19775] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 504.270185][T19775] RBP: 00007f69b1c04090 R08: 0000000000000000 R09: 0000000000000000 [ 504.270196][T19775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.270208][T19775] R13: 00007f69b0fb6038 R14: 00007f69b0fb5fa0 R15: 00007ffe0ba657a8 [ 504.270230][T19775] [ 504.487526][T19780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3762'. [ 504.724983][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3768'. [ 504.782787][T19803] netlink: 'syz.2.3769': attribute type 13 has an invalid length. [ 504.804704][T19803] netlink: 'syz.2.3769': attribute type 17 has an invalid length. [ 504.839573][T19808] FAULT_INJECTION: forcing a failure. [ 504.839573][T19808] name failslab, interval 1, probability 0, space 0, times 0 [ 504.887444][T19808] CPU: 0 UID: 0 PID: 19808 Comm: syz.0.3771 Not tainted syzkaller #0 PREEMPT(full) [ 504.887485][T19808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.887497][T19808] Call Trace: [ 504.887506][T19808] [ 504.887515][T19808] dump_stack_lvl+0x189/0x250 [ 504.887542][T19808] ? __pfx____ratelimit+0x10/0x10 [ 504.887570][T19808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.887591][T19808] ? __pfx__printk+0x10/0x10 [ 504.887623][T19808] should_fail_ex+0x414/0x560 [ 504.887650][T19808] should_failslab+0xa8/0x100 [ 504.887677][T19808] kmem_cache_alloc_noprof+0x73/0x3c0 [ 504.887702][T19808] ? skb_clone+0x212/0x3a0 [ 504.887725][T19808] skb_clone+0x212/0x3a0 [ 504.887748][T19808] __netlink_deliver_tap+0x404/0x850 [ 504.887782][T19808] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.887809][T19808] netlink_deliver_tap+0x19c/0x1b0 [ 504.887838][T19808] netlink_unicast+0x7fa/0x9e0 [ 504.887866][T19808] ? __pfx_netlink_unicast+0x10/0x10 [ 504.887891][T19808] ? netlink_sendmsg+0x642/0xb30 [ 504.887906][T19808] ? skb_put+0x11b/0x210 [ 504.887924][T19808] netlink_sendmsg+0x805/0xb30 [ 504.887945][T19808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.887964][T19808] ? aa_sock_msg_perm+0xf1/0x1d0 [ 504.887981][T19808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.888002][T19808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.888019][T19808] __sock_sendmsg+0x21c/0x270 [ 504.888046][T19808] ____sys_sendmsg+0x505/0x830 [ 504.888068][T19808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.888092][T19808] ? import_iovec+0x74/0xa0 [ 504.888114][T19808] ___sys_sendmsg+0x21f/0x2a0 [ 504.888135][T19808] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.888171][T19808] ? __fget_files+0x2a/0x420 [ 504.888187][T19808] ? __fget_files+0x3a0/0x420 [ 504.888207][T19808] __x64_sys_sendmsg+0x19b/0x260 [ 504.888228][T19808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.888252][T19808] ? __pfx_ksys_write+0x10/0x10 [ 504.888274][T19808] ? rcu_is_watching+0x15/0xb0 [ 504.888294][T19808] ? rcu_is_watching+0x15/0xb0 [ 504.888312][T19808] do_syscall_64+0xfa/0x3b0 [ 504.888330][T19808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.888348][T19808] ? clear_bhb_loop+0x60/0xb0 [ 504.888369][T19808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.888388][T19808] RIP: 0033:0x7fdce758ebe9 [ 504.888406][T19808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.888423][T19808] RSP: 002b:00007fdce83c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.888446][T19808] RAX: ffffffffffffffda RBX: 00007fdce77b5fa0 RCX: 00007fdce758ebe9 [ 504.888468][T19808] RDX: 0000000000004010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 504.888481][T19808] RBP: 00007fdce83c1090 R08: 0000000000000000 R09: 0000000000000000 [ 504.888493][T19808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.888505][T19808] R13: 00007fdce77b6038 R14: 00007fdce77b5fa0 R15: 00007ffc61405c48 [ 504.888526][T19808] [ 504.905807][T19817] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3774'. [ 505.062982][T19813] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3773'. [ 505.076633][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3775'. [ 505.100279][T19803] lo speed is unknown, defaulting to 1000 [ 505.233926][T19803] wg1 speed is unknown, defaulting to 1000 [ 505.575483][T19848] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20004 [ 505.584136][T19848] netlink: 'syz.4.3781': attribute type 17 has an invalid length. [ 506.286001][T19909] lo speed is unknown, defaulting to 1000 [ 506.293789][T19914] netlink: 'syz.1.3795': attribute type 10 has an invalid length. [ 506.294408][T19909] wg1 speed is unknown, defaulting to 1000 [ 506.365537][T19914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.404937][ T7921] nci: nci_rx_work: unknown MT 0x1 [ 506.415651][T19914] batadv0: entered allmulticast mode [ 506.431878][T19914] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 507.209597][T19966] nftables ruleset with unbound chain [ 507.228705][T19966] netlink: 'syz.3.3811': attribute type 10 has an invalid length. [ 507.325669][T19972] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 507.369924][T19975] lo speed is unknown, defaulting to 1000 [ 507.401371][T19975] wg1 speed is unknown, defaulting to 1000 [ 507.451576][T19982] net_ratelimit: 5 callbacks suppressed [ 507.451595][T19982] openvswitch: netlink: Key type 108 is out of range max 32 [ 507.545529][T19986] lo speed is unknown, defaulting to 1000 [ 507.554194][T19986] wg1 speed is unknown, defaulting to 1000 [ 507.710911][T19992] hsr_slave_1 (unregistering): left promiscuous mode [ 507.783332][T20009] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 507.860801][T20009] bond1: (slave geneve2): Releasing active interface [ 507.900809][T20015] netlink: 'syz.1.3826': attribute type 21 has an invalid length. [ 507.950033][T20009] netlink: 'syz.0.3822': attribute type 10 has an invalid length. [ 507.962131][T20009] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 507.973221][T20009] bond0: (slave wlan1): Opening slave failed [ 508.014129][T20017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.032510][T20027] lo speed is unknown, defaulting to 1000 [ 508.062494][T20027] lo speed is unknown, defaulting to 1000 [ 508.094774][T20027] lo speed is unknown, defaulting to 1000 [ 508.131697][T20027] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 508.163266][T20027] lo speed is unknown, defaulting to 1000 [ 508.173614][T20027] lo speed is unknown, defaulting to 1000 [ 508.181500][T20027] lo speed is unknown, defaulting to 1000 [ 508.194488][T20034] geneve3: entered promiscuous mode [ 508.202198][T20027] lo speed is unknown, defaulting to 1000 [ 508.202233][ T7920] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.218849][T20027] lo speed is unknown, defaulting to 1000 [ 508.225092][ T7920] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.236576][T20027] lo speed is unknown, defaulting to 1000 [ 508.243959][ T7920] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.255101][T20027] lo speed is unknown, defaulting to 1000 [ 508.262535][ T7920] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.273110][T20027] lo speed is unknown, defaulting to 1000 [ 508.282094][T20027] lo speed is unknown, defaulting to 1000 [ 508.446614][T20054] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 508.470444][T20054] bridge4: entered allmulticast mode [ 508.511595][T20063] __nla_validate_parse: 10 callbacks suppressed [ 508.511614][T20063] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3838'. [ 508.544848][T20059] wg1: entered promiscuous mode [ 508.550146][T20059] wg1: entered allmulticast mode [ 508.733332][T20081] netlink: 'syz.4.3845': attribute type 21 has an invalid length. [ 508.741207][T20079] FAULT_INJECTION: forcing a failure. [ 508.741207][T20079] name failslab, interval 1, probability 0, space 0, times 0 [ 508.741242][T20079] CPU: 1 UID: 0 PID: 20079 Comm: syz.3.3846 Not tainted syzkaller #0 PREEMPT(full) [ 508.741265][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 508.741277][T20079] Call Trace: [ 508.741285][T20079] [ 508.741293][T20079] dump_stack_lvl+0x189/0x250 [ 508.741320][T20079] ? __pfx____ratelimit+0x10/0x10 [ 508.741348][T20079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.741380][T20079] ? __pfx__printk+0x10/0x10 [ 508.741406][T20079] ? __pfx___might_resched+0x10/0x10 [ 508.741424][T20079] ? lock_acquire+0x5f/0x360 [ 508.741448][T20079] should_fail_ex+0x414/0x560 [ 508.741473][T20079] should_failslab+0xa8/0x100 [ 508.741498][T20079] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 508.741522][T20079] ? __alloc_skb+0x112/0x2d0 [ 508.741539][T20079] __alloc_skb+0x112/0x2d0 [ 508.741556][T20079] netlink_ack+0x146/0xa50 [ 508.741580][T20079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.741605][T20079] ? __netlink_lookup+0xbd/0x810 [ 508.741621][T20079] ? rcu_is_watching+0x15/0xb0 [ 508.741639][T20079] ? rcu_is_watching+0x15/0xb0 [ 508.741658][T20079] netlink_rcv_skb+0x28c/0x470 [ 508.741683][T20079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.741709][T20079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.741742][T20079] netlink_unicast+0x82c/0x9e0 [ 508.741768][T20079] ? __pfx_netlink_unicast+0x10/0x10 [ 508.741791][T20079] ? netlink_sendmsg+0x642/0xb30 [ 508.741806][T20079] ? skb_put+0x11b/0x210 [ 508.741823][T20079] netlink_sendmsg+0x805/0xb30 [ 508.741842][T20079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.741859][T20079] ? aa_sock_msg_perm+0xf1/0x1d0 [ 508.741875][T20079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.741894][T20079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.741910][T20079] __sock_sendmsg+0x21c/0x270 [ 508.741934][T20079] ____sys_sendmsg+0x505/0x830 [ 508.741954][T20079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.741975][T20079] ? import_iovec+0x74/0xa0 [ 508.741997][T20079] ___sys_sendmsg+0x21f/0x2a0 [ 508.742015][T20079] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.742048][T20079] ? __fget_files+0x2a/0x420 [ 508.742063][T20079] ? __fget_files+0x3a0/0x420 [ 508.742081][T20079] __x64_sys_sendmsg+0x19b/0x260 [ 508.742100][T20079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.742123][T20079] ? __pfx_ksys_write+0x10/0x10 [ 508.742144][T20079] ? rcu_is_watching+0x15/0xb0 [ 508.742162][T20079] ? rcu_is_watching+0x15/0xb0 [ 508.742180][T20079] do_syscall_64+0xfa/0x3b0 [ 508.742197][T20079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.742214][T20079] ? clear_bhb_loop+0x60/0xb0 [ 508.742233][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.742249][T20079] RIP: 0033:0x7f89ba18ebe9 [ 508.742265][T20079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.742280][T20079] RSP: 002b:00007f89baf5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.742301][T20079] RAX: ffffffffffffffda RBX: 00007f89ba3b5fa0 RCX: 00007f89ba18ebe9 [ 508.742314][T20079] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 508.742326][T20079] RBP: 00007f89baf5b090 R08: 0000000000000000 R09: 0000000000000000 [ 508.742337][T20079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.742347][T20079] R13: 00007f89ba3b6038 R14: 00007f89ba3b5fa0 R15: 00007ffe46ffa1e8 [ 508.742375][T20079] [ 508.988140][T20095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3849'. [ 509.000328][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3845'. [ 509.048116][T20096] netlink: 'syz.3.3849': attribute type 1 has an invalid length. [ 509.072028][T20095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3849'. [ 509.144315][T20096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.154856][T20097] IPVS: Error connecting to the multicast addr [ 509.177352][T20105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3852'. [ 509.180228][T20095] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 509.197819][T20095] gretap1: entered promiscuous mode [ 509.203067][T20095] gretap1: entered allmulticast mode [ 509.252656][T20106] tipc: Enabled bearer , priority 0 [ 509.310888][T20106] tipc: Disabling bearer [ 509.462036][T20128] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3858'. [ 509.478736][T20128] batadv1: entered promiscuous mode [ 509.488777][T20128] batadv1: entered allmulticast mode [ 509.599000][T20146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3858'. [ 509.742865][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'. [ 509.752975][T20159] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3863'. [ 509.777231][T20159] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3863'. [ 510.022624][T20181] netlink: 'syz.1.3867': attribute type 7 has an invalid length. [ 510.260283][T20204] tipc: Enabled bearer , priority 0 [ 510.272518][T20179] pimreg: entered allmulticast mode [ 510.281481][T20179] pimreg: left allmulticast mode [ 510.314780][T20204] syzkaller0: entered promiscuous mode [ 510.324546][T20204] syzkaller0: entered allmulticast mode [ 510.336111][T20204] tipc: Resetting bearer [ 510.362710][T20208] netlink: 'syz.0.3876': attribute type 25 has an invalid length. [ 510.386296][T20210] netlink: 'syz.2.3877': attribute type 1 has an invalid length. [ 510.398861][T20202] tipc: Resetting bearer [ 510.415413][T20202] tipc: Disabling bearer [ 510.439127][T20206] lo speed is unknown, defaulting to 1000 [ 510.446403][T20206] wg1 speed is unknown, defaulting to 1000 [ 510.463499][T20206] lo speed is unknown, defaulting to 1000 [ 510.762664][T20247] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 510.915725][T20259] netlink: 'syz.3.3891': attribute type 10 has an invalid length. [ 510.995280][T20263] lo speed is unknown, defaulting to 1000 [ 511.043822][T20259] team0: Port device 0! added [ 511.061602][T20267] netlink: 'syz.0.3896': attribute type 21 has an invalid length. [ 511.075411][T20263] wg1 speed is unknown, defaulting to 1000 [ 511.082416][T20248] lo speed is unknown, defaulting to 1000 [ 511.091617][T20263] lo speed is unknown, defaulting to 1000 [ 511.131717][T20248] wg1 speed is unknown, defaulting to 1000 [ 511.175897][T20268] team0: Port device 0! removed [ 511.248563][T20268] bond0: (slave 0!): Enslaving as an active interface with an up link [ 511.304431][T20248] lo speed is unknown, defaulting to 1000 [ 512.035695][T20311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.083088][T20321] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 512.178764][T20324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.214872][T20324] bond3: entered promiscuous mode [ 512.324079][T20334] lo speed is unknown, defaulting to 1000 [ 512.331566][T20334] wg1 speed is unknown, defaulting to 1000 [ 512.339487][T20334] lo speed is unknown, defaulting to 1000 [ 512.408134][T20341] validate_nla: 3 callbacks suppressed [ 512.408159][T20341] netlink: 'syz.1.3916': attribute type 1 has an invalid length. [ 512.475117][T20341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.561499][ T30] audit: type=1800 audit(1756421153.542:13): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3914" name="cgroup.controllers" dev="tmpfs" ino=740 res=0 errno=0 [ 512.584679][T20348] bond2: (slave gretap1): making interface the new active one [ 512.598871][T20348] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 512.613024][T20343] lo speed is unknown, defaulting to 1000 [ 512.629585][T20343] wg1 speed is unknown, defaulting to 1000 [ 512.640756][T20343] lo speed is unknown, defaulting to 1000 [ 512.794810][T20366] netlink: 'syz.1.3923': attribute type 12 has an invalid length. [ 512.811458][T20366] netlink: 'syz.1.3923': attribute type 18 has an invalid length. [ 512.822762][T20366] netlink: 'syz.1.3923': attribute type 21 has an invalid length. [ 512.831426][T20366] netlink: 'syz.1.3923': attribute type 26 has an invalid length. [ 512.841959][ T30] audit: type=1800 audit(1756421153.822:14): pid=20364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3925" name="memory.events" dev="tmpfs" ino=746 res=0 errno=0 [ 513.012594][T20381] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.030473][T20384] netlink: 'syz.1.3930': attribute type 1 has an invalid length. [ 513.044252][T20384] netlink: 'syz.1.3930': attribute type 1 has an invalid length. [ 513.054765][T20384] block nbd6: shutting down sockets [ 513.151028][T20388] wg1: left allmulticast mode [ 513.270287][T20388] vlan2: left allmulticast mode [ 513.281916][T20388] bond0: left allmulticast mode [ 513.295370][T20388] mac80211_hwsim hwsim43 wlan1: left allmulticast mode [ 513.302435][T20388] team0: left allmulticast mode [ 513.307836][T20388] batadv0: left allmulticast mode [ 513.316288][ T10] lo speed is unknown, defaulting to 1000 [ 513.397360][T20415] tipc: Enabling of bearer rejected, failed to enable media [ 513.454522][T20423] tipc: Enabling of bearer rejected, already enabled [ 513.570127][T20423] tipc: Resetting bearer [ 513.595457][T20423] __nla_validate_parse: 14 callbacks suppressed [ 513.595477][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3940'. [ 513.654916][T20423] vlan2: entered promiscuous mode [ 513.662747][T20423] macvtap0: entered promiscuous mode [ 513.714987][T20452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.823531][T20458] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3946'. [ 513.931591][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3944'. [ 514.459492][T20442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.489315][T20461] netlink: 'syz.2.3944': attribute type 1 has an invalid length. [ 514.516586][T20461] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3944'. [ 514.685206][T20483] tipc: Enabled bearer , priority 0 [ 514.703506][T20483] syzkaller0: entered promiscuous mode [ 514.724661][T20483] syzkaller0: entered allmulticast mode [ 514.755379][T20493] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3955'. [ 514.760483][T20483] tipc: Resetting bearer [ 514.818310][T20481] tipc: Resetting bearer [ 514.830420][T20481] tipc: Disabling bearer [ 514.942421][T20493] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3955'. [ 515.007177][T20493] lo speed is unknown, defaulting to 1000 [ 515.014046][T20493] wg1 speed is unknown, defaulting to 1000 [ 515.023796][T20493] lo speed is unknown, defaulting to 1000 [ 515.493114][T20515] !: renamed from dummy0 (while UP) [ 515.632472][T20527] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3962'. [ 515.811646][T20546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3966'. [ 515.983803][T20558] netlink: 'syz.4.3970': attribute type 10 has an invalid length. [ 516.043113][T20562] netlink: 'syz.4.3970': attribute type 10 has an invalid length. [ 516.055415][T20558] team0: Port device dummy0 added [ 516.125778][T20562] team0: Port device dummy0 removed [ 516.697282][T20588] Bluetooth: MGMT ver 1.23 [ 517.047203][T20604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3985'. [ 517.271426][T20621] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.3990'. [ 517.412483][T20629] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.432528][T20629] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 517.443483][T20629] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 517.616212][T20643] lo speed is unknown, defaulting to 1000 [ 517.678013][T20643] wg1 speed is unknown, defaulting to 1000 [ 517.719649][T20643] lo speed is unknown, defaulting to 1000 [ 517.816654][T20660] validate_nla: 1 callbacks suppressed [ 517.822603][T20660] netlink: 'syz.3.4002': attribute type 1 has an invalid length. [ 517.899893][T20666] pim6reg99999999: entered allmulticast mode [ 518.147623][T20676] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 518.297105][T20687] macvlan3: entered allmulticast mode [ 518.302669][T20687] veth1_vlan: entered allmulticast mode [ 518.313014][T20687] veth1_vlan: left allmulticast mode [ 518.392458][T20689] netlink: 'syz.2.4011': attribute type 7 has an invalid length. [ 518.410925][T20689] netlink: 'syz.2.4011': attribute type 8 has an invalid length. [ 518.622873][T20721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.684427][T20726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 518.727591][T20726] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 518.729786][T20723] netlink: 'syz.4.4021': attribute type 2 has an invalid length. [ 518.745649][T20723] netlink: 'syz.4.4021': attribute type 2 has an invalid length. [ 518.754320][T20723] netlink: 'syz.4.4021': attribute type 2 has an invalid length. [ 518.756389][T18034] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 518.762522][T20723] netlink: 'syz.4.4021': attribute type 2 has an invalid length. [ 518.787551][T18034] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 518.803238][T18034] hid-generic 0005:16BF:5505.0003: reserved main item tag 0xe [ 518.811778][ T7920] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 518.842798][T18034] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 518.920432][T16949] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 518.971770][T20748] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20002 [ 519.015225][T20739] macvtap2: entered allmulticast mode [ 519.024646][T20739] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 519.034101][T20739] mac80211_hwsim hwsim32 wlan0: left allmulticast mode [ 519.632638][T20782] lo speed is unknown, defaulting to 1000 [ 519.639768][T20782] wg1 speed is unknown, defaulting to 1000 [ 519.647429][T20782] lo speed is unknown, defaulting to 1000 [ 519.676526][T20786] macvtap1: entered allmulticast mode [ 519.682894][T20786] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 519.695096][T20786] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 519.751690][T20803] __nla_validate_parse: 12 callbacks suppressed [ 519.751713][T20803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4044'. [ 519.779919][T20803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4044'. [ 519.835637][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 519.846634][T20803] bridge_slave_1: left allmulticast mode [ 519.857293][T20803] bridge_slave_1: left promiscuous mode [ 519.863479][T20803] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.876532][T20803] bridge_slave_0: left allmulticast mode [ 519.882807][T20803] bridge_slave_0: left promiscuous mode [ 519.884419][T20816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4047'. [ 519.891379][T20803] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.964852][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4048'. [ 519.997615][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 520.020172][T20816] lo speed is unknown, defaulting to 1000 [ 520.027078][T20816] wg1 speed is unknown, defaulting to 1000 [ 520.050061][T20816] lo speed is unknown, defaulting to 1000 [ 520.092072][T20828] vlan0: entered promiscuous mode [ 520.104423][T20825] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4049'. [ 520.145898][T20830] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4049'. [ 520.212049][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 520.218134][T20836] netlink: 'syz.0.4052': attribute type 3 has an invalid length. [ 520.232867][T20834] netlink: 'syz.3.4051': attribute type 1 has an invalid length. [ 520.356306][T20850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4055'. [ 520.440684][T20856] syzkaller1: entered promiscuous mode [ 520.446491][T20856] syzkaller1: entered allmulticast mode [ 520.518441][T20864] openvswitch: netlink: Flow key attr not present in new flow. [ 520.652827][T16949] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 520.658715][T20869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.686377][T20876] lo speed is unknown, defaulting to 1000 [ 520.708111][T20876] wg1 speed is unknown, defaulting to 1000 [ 520.717752][T20876] lo speed is unknown, defaulting to 1000 [ 521.001227][T20882] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 521.036448][T20901] tipc: Enabled bearer , priority 0 [ 521.112083][T20901] syzkaller0: entered promiscuous mode [ 521.124025][T20901] syzkaller0: entered allmulticast mode [ 521.151514][T20901] tipc: Resetting bearer [ 521.160113][T20900] tipc: Resetting bearer [ 521.169493][T20900] tipc: Disabling bearer [ 521.582806][T20947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.593473][T20947] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.612792][T20947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.662733][T20953] lo speed is unknown, defaulting to 1000 [ 521.702612][T20953] wg1 speed is unknown, defaulting to 1000 [ 521.718121][T20953] lo speed is unknown, defaulting to 1000 [ 522.475411][T20996] gretap2: entered promiscuous mode [ 522.480929][T20996] gretap2: entered allmulticast mode [ 522.491276][T18010] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0 [ 522.500756][T18010] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 522.561690][T21002] lo speed is unknown, defaulting to 1000 [ 522.596476][T21002] wg1 speed is unknown, defaulting to 1000 [ 522.625001][T21002] lo speed is unknown, defaulting to 1000 [ 522.694470][T21006] bond2: entered promiscuous mode [ 522.700371][T21006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.733970][T21006] batadv1: entered promiscuous mode [ 522.752402][T21006] batadv1: entered allmulticast mode [ 522.788016][T21006] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 522.814335][T21006] bond2: (slave batadv1): making interface the new active one [ 522.844364][T21006] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 523.117462][T21017] gtp0: entered promiscuous mode [ 523.128070][T21017] gtp0: entered allmulticast mode [ 523.143985][T21017] validate_nla: 7 callbacks suppressed [ 523.144005][T21017] netlink: 'syz.3.4097': attribute type 10 has an invalid length. [ 523.177823][T21017] team0: Device ipvlan1 failed to register rx_handler [ 523.191574][T21022] netlink: 'syz.1.4099': attribute type 3 has an invalid length. [ 523.265523][T21024] vlan3: entered allmulticast mode [ 523.270886][T21024] bridge_slave_0: entered allmulticast mode [ 523.444573][T21031] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 523.474071][T21031] bridge0: entered allmulticast mode [ 523.492272][T21039] tipc: Enabled bearer , priority 0 [ 523.545610][T21039] syzkaller0: entered promiscuous mode [ 523.556938][T21039] syzkaller0: entered allmulticast mode [ 523.572548][T21039] tipc: Resetting bearer [ 523.611252][T21029] tipc: Resetting bearer [ 523.774048][T21029] tipc: Disabling bearer [ 523.869271][T21070] sctp: [Deprecated]: syz.4.4112 (pid 21070) Use of int in max_burst socket option deprecated. [ 523.869271][T21070] Use struct sctp_assoc_value instead [ 524.083752][T21099] tipc: Enabling of bearer rejected, already enabled [ 524.223204][T21107] lo speed is unknown, defaulting to 1000 [ 524.238376][T21107] wg1 speed is unknown, defaulting to 1000 [ 524.247837][T21107] lo speed is unknown, defaulting to 1000 [ 524.282518][T21108] lo speed is unknown, defaulting to 1000 [ 524.292246][ T30] audit: type=1804 audit(1756421165.272:15): pid=21114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4121" name="/newroot/169/memory.events" dev="tmpfs" ino=881 res=1 errno=0 [ 524.316484][ T30] audit: type=1800 audit(1756421165.272:16): pid=21114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4121" name="memory.events" dev="tmpfs" ino=881 res=0 errno=0 [ 524.351112][T21108] wg1 speed is unknown, defaulting to 1000 [ 524.368877][T21108] lo speed is unknown, defaulting to 1000 [ 524.520961][T21126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.533284][T21126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.551276][T21126] bond0 (unregistering): (slave 0!): Releasing backup interface [ 524.591010][T21126] bond0 (unregistering): Released all slaves [ 524.994603][T21164] !: renamed from dummy0 (while UP) [ 525.048769][T21164] __nla_validate_parse: 56 callbacks suppressed [ 525.048792][T21164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4139'. [ 525.185839][T21151] lo speed is unknown, defaulting to 1000 [ 525.212307][T21151] wg1 speed is unknown, defaulting to 1000 [ 525.221997][T21151] lo speed is unknown, defaulting to 1000 [ 525.469837][T21187] lo speed is unknown, defaulting to 1000 [ 525.492892][T21187] wg1 speed is unknown, defaulting to 1000 [ 525.594101][T21195] wireguard0: entered promiscuous mode [ 525.604329][T21195] wireguard0: entered allmulticast mode [ 525.662996][T21187] lo speed is unknown, defaulting to 1000 [ 525.759353][T21202] syzkaller0: entered promiscuous mode [ 525.766928][T21199] lo speed is unknown, defaulting to 1000 [ 525.784763][T21204] tipc: Enabled bearer , priority 0 [ 525.794413][T21204] syzkaller0: entered promiscuous mode [ 525.801229][T21204] syzkaller0: entered allmulticast mode [ 525.826124][T21199] wg1 speed is unknown, defaulting to 1000 [ 525.849641][T21199] lo speed is unknown, defaulting to 1000 [ 525.886492][T21204] tipc: Resetting bearer [ 525.995364][T21198] tipc: Resetting bearer [ 526.030094][T21198] tipc: Disabling bearer [ 526.188099][T21222] netlink: 'syz.3.4151': attribute type 13 has an invalid length. [ 526.196309][T21222] netlink: 'syz.3.4151': attribute type 17 has an invalid length. [ 526.352072][T21222] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.374727][T21222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.598345][T21235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.779401][T21237] lo speed is unknown, defaulting to 1000 [ 526.822386][T21244] macvtap1: entered allmulticast mode [ 526.829528][T21267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4162'. [ 526.849148][T21244] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 526.856001][T21267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4162'. [ 526.879554][T21244] mac80211_hwsim hwsim42 wlan0: left allmulticast mode [ 526.927663][T21237] wg1 speed is unknown, defaulting to 1000 [ 526.965525][T21279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4165'. [ 526.976105][T21237] lo speed is unknown, defaulting to 1000 [ 527.084902][T21287] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4170'. [ 527.304924][T21307] FAULT_INJECTION: forcing a failure. [ 527.304924][T21307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.357338][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'. [ 527.366811][T21307] CPU: 0 UID: 0 PID: 21307 Comm: syz.2.4174 Not tainted syzkaller #0 PREEMPT(full) [ 527.366851][T21307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.366864][T21307] Call Trace: [ 527.366872][T21307] [ 527.366879][T21307] dump_stack_lvl+0x189/0x250 [ 527.366910][T21307] ? __pfx____ratelimit+0x10/0x10 [ 527.366937][T21307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.366959][T21307] ? __pfx__printk+0x10/0x10 [ 527.366982][T21307] ? __might_fault+0xb0/0x130 [ 527.367009][T21307] ? lock_release+0x4b/0x3e0 [ 527.367033][T21307] ? vfs_write+0x956/0xb30 [ 527.367058][T21307] ? rcu_is_watching+0x15/0xb0 [ 527.367078][T21307] should_fail_ex+0x414/0x560 [ 527.367105][T21307] _copy_from_user+0x2d/0xb0 [ 527.367127][T21307] __sys_bind+0x199/0x3e0 [ 527.367155][T21307] ? __pfx___sys_bind+0x10/0x10 [ 527.367185][T21307] ? __pfx_ksys_write+0x10/0x10 [ 527.367208][T21307] ? rcu_is_watching+0x15/0xb0 [ 527.367230][T21307] __x64_sys_bind+0x7a/0x90 [ 527.367256][T21307] do_syscall_64+0xfa/0x3b0 [ 527.367274][T21307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.367293][T21307] ? clear_bhb_loop+0x60/0xb0 [ 527.367313][T21307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.367331][T21307] RIP: 0033:0x7f69b0d8ebe9 [ 527.367349][T21307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.367367][T21307] RSP: 002b:00007f69b1c04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 527.367391][T21307] RAX: ffffffffffffffda RBX: 00007f69b0fb5fa0 RCX: 00007f69b0d8ebe9 [ 527.367405][T21307] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 527.367418][T21307] RBP: 00007f69b1c04090 R08: 0000000000000000 R09: 0000000000000000 [ 527.367431][T21307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.367443][T21307] R13: 00007f69b0fb6038 R14: 00007f69b0fb5fa0 R15: 00007ffe0ba657a8 [ 527.367466][T21307] [ 527.592867][T21323] netlink: 'syz.0.4180': attribute type 1 has an invalid length. [ 527.606814][T21323] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4180'. [ 527.727758][T21317] syzkaller0: entered promiscuous mode [ 527.734483][T21317] syzkaller0: entered allmulticast mode [ 527.762500][T21326] netlink: 'syz.2.4181': attribute type 1 has an invalid length. [ 527.772356][T21326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4181'. [ 527.943831][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 527.955116][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4185'. [ 528.159695][T21357] FAULT_INJECTION: forcing a failure. [ 528.159695][T21357] name failslab, interval 1, probability 0, space 0, times 0 [ 528.189258][T21357] CPU: 0 UID: 0 PID: 21357 Comm: syz.4.4191 Not tainted syzkaller #0 PREEMPT(full) [ 528.189286][T21357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.189297][T21357] Call Trace: [ 528.189305][T21357] [ 528.189313][T21357] dump_stack_lvl+0x189/0x250 [ 528.189342][T21357] ? __pfx____ratelimit+0x10/0x10 [ 528.189369][T21357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.189391][T21357] ? __pfx__printk+0x10/0x10 [ 528.189417][T21357] ? fs_reclaim_acquire+0x7d/0x100 [ 528.189445][T21357] ? __pfx___might_resched+0x10/0x10 [ 528.189463][T21357] ? lock_acquire+0x5f/0x360 [ 528.189491][T21357] should_fail_ex+0x414/0x560 [ 528.189517][T21357] ? __pfx_sock_alloc_inode+0x10/0x10 [ 528.189541][T21357] should_failslab+0xa8/0x100 [ 528.189568][T21357] ? __pfx_sock_alloc_inode+0x10/0x10 [ 528.189591][T21357] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 528.189616][T21357] ? sock_alloc_inode+0x28/0xc0 [ 528.189641][T21357] ? __pfx_sock_alloc_inode+0x10/0x10 [ 528.189665][T21357] sock_alloc_inode+0x28/0xc0 [ 528.189687][T21357] alloc_inode+0x6a/0x1b0 [ 528.189714][T21357] __sock_create+0x12d/0x9f0 [ 528.189740][T21357] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 528.189762][T21357] mptcp_subflow_create_socket+0xf0/0x7d0 [ 528.189785][T21357] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 528.189811][T21357] __mptcp_nmpc_sk+0x150/0x720 [ 528.189831][T21357] ? __local_bh_enable_ip+0x12d/0x1c0 [ 528.189850][T21357] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 528.189886][T21357] mptcp_bind+0xab/0x1d0 [ 528.189904][T21357] __sys_bind+0x2c6/0x3e0 [ 528.189931][T21357] ? __pfx___sys_bind+0x10/0x10 [ 528.189961][T21357] ? __pfx_ksys_write+0x10/0x10 [ 528.189983][T21357] ? rcu_is_watching+0x15/0xb0 [ 528.190004][T21357] __x64_sys_bind+0x7a/0x90 [ 528.190030][T21357] do_syscall_64+0xfa/0x3b0 [ 528.190047][T21357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.190065][T21357] ? clear_bhb_loop+0x60/0xb0 [ 528.190085][T21357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.190102][T21357] RIP: 0033:0x7f4c7c78ebe9 [ 528.190119][T21357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.190135][T21357] RSP: 002b:00007f4c7d56a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 528.190158][T21357] RAX: ffffffffffffffda RBX: 00007f4c7c9b5fa0 RCX: 00007f4c7c78ebe9 [ 528.190172][T21357] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 528.190184][T21357] RBP: 00007f4c7d56a090 R08: 0000000000000000 R09: 0000000000000000 [ 528.190195][T21357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.190207][T21357] R13: 00007f4c7c9b6038 R14: 00007f4c7c9b5fa0 R15: 00007ffecfd9d338 [ 528.190228][T21357] [ 528.192000][T21357] socket: no more sockets [ 528.500446][T21346] macvtap1: entered allmulticast mode [ 528.519433][T21346] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 528.544976][T21346] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 528.587647][T21363] lo speed is unknown, defaulting to 1000 [ 528.597053][T21363] wg1 speed is unknown, defaulting to 1000 [ 528.604068][T21363] lo speed is unknown, defaulting to 1000 [ 528.783469][T21390] sctp: [Deprecated]: syz.2.4197 (pid 21390) Use of int in max_burst socket option deprecated. [ 528.783469][T21390] Use struct sctp_assoc_value instead [ 529.046344][T21400] lo speed is unknown, defaulting to 1000 [ 529.059024][T21400] wg1 speed is unknown, defaulting to 1000 [ 529.068764][T21400] lo speed is unknown, defaulting to 1000 [ 529.183712][T21409] FAULT_INJECTION: forcing a failure. [ 529.183712][T21409] name failslab, interval 1, probability 0, space 0, times 0 [ 529.199175][T21409] CPU: 1 UID: 0 PID: 21409 Comm: syz.1.4204 Not tainted syzkaller #0 PREEMPT(full) [ 529.199206][T21409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.199219][T21409] Call Trace: [ 529.199227][T21409] [ 529.199234][T21409] dump_stack_lvl+0x189/0x250 [ 529.199265][T21409] ? __pfx____ratelimit+0x10/0x10 [ 529.199292][T21409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.199315][T21409] ? __pfx__printk+0x10/0x10 [ 529.199342][T21409] ? fs_reclaim_acquire+0x7d/0x100 [ 529.199372][T21409] ? __pfx___might_resched+0x10/0x10 [ 529.199390][T21409] ? lock_acquire+0x5f/0x360 [ 529.199418][T21409] should_fail_ex+0x414/0x560 [ 529.199444][T21409] should_failslab+0xa8/0x100 [ 529.199472][T21409] kmem_cache_alloc_noprof+0x73/0x3c0 [ 529.199497][T21409] ? security_inode_alloc+0x39/0x330 [ 529.199518][T21409] security_inode_alloc+0x39/0x330 [ 529.199536][T21409] inode_init_always_gfp+0x9ed/0xdc0 [ 529.199567][T21409] ? __pfx_sock_alloc_inode+0x10/0x10 [ 529.199593][T21409] alloc_inode+0x82/0x1b0 [ 529.199619][T21409] __sock_create+0x12d/0x9f0 [ 529.199645][T21409] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 529.199668][T21409] mptcp_subflow_create_socket+0xf0/0x7d0 [ 529.199693][T21409] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 529.199718][T21409] __mptcp_nmpc_sk+0x150/0x720 [ 529.199740][T21409] ? __local_bh_enable_ip+0x12d/0x1c0 [ 529.199759][T21409] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 529.199785][T21409] mptcp_bind+0xab/0x1d0 [ 529.199826][T21409] __sys_bind+0x2c6/0x3e0 [ 529.199854][T21409] ? __pfx___sys_bind+0x10/0x10 [ 529.199893][T21409] ? __pfx_ksys_write+0x10/0x10 [ 529.199917][T21409] ? rcu_is_watching+0x15/0xb0 [ 529.199940][T21409] __x64_sys_bind+0x7a/0x90 [ 529.199966][T21409] do_syscall_64+0xfa/0x3b0 [ 529.199984][T21409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.200004][T21409] ? clear_bhb_loop+0x60/0xb0 [ 529.200025][T21409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.200044][T21409] RIP: 0033:0x7f468678ebe9 [ 529.200061][T21409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.200079][T21409] RSP: 002b:00007f468763e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 529.200102][T21409] RAX: ffffffffffffffda RBX: 00007f46869b5fa0 RCX: 00007f468678ebe9 [ 529.200116][T21409] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 529.200135][T21409] RBP: 00007f468763e090 R08: 0000000000000000 R09: 0000000000000000 [ 529.200147][T21409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.200159][T21409] R13: 00007f46869b6038 R14: 00007f46869b5fa0 R15: 00007ffd6961e248 [ 529.200182][T21409] [ 529.200378][T21409] socket: no more sockets [ 529.286415][ T30] audit: type=1800 audit(1756421170.262:17): pid=21402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4200" name="memory.events" dev="tmpfs" ino=1080 res=0 errno=0 [ 529.648662][T21412] syzkaller0: entered promiscuous mode [ 529.654287][T21412] syzkaller0: entered allmulticast mode [ 529.900229][T21434] lo speed is unknown, defaulting to 1000 [ 529.921951][T21434] wg1 speed is unknown, defaulting to 1000 [ 529.939375][T21434] lo speed is unknown, defaulting to 1000 [ 530.014105][T21441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.117795][T21445] block nbd6: server does not support multiple connections per device. [ 530.128215][T21445] block nbd6: shutting down sockets [ 530.208177][T21454] netlink: 'syz.2.4216': attribute type 1 has an invalid length. [ 530.235022][T21454] netlink: 'syz.2.4216': attribute type 1 has an invalid length. [ 530.390487][T21466] __nla_validate_parse: 5 callbacks suppressed [ 530.390509][T21466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'. [ 530.392668][T21469] netlink: 'syz.2.4216': attribute type 1 has an invalid length. [ 530.411889][T21468] siw: device registration error -23 [ 530.428275][T21466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'. [ 530.442843][T16950] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.462204][T16950] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.476540][T21468] tipc: Enabled bearer , priority 0 [ 530.487808][T21468] syzkaller0: entered promiscuous mode [ 530.493421][T21468] syzkaller0: entered allmulticast mode [ 530.548593][T21469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.566603][T21473] bond3: (slave wlan0): Opening slave failed [ 530.581227][T21454] vlan2: entered allmulticast mode [ 530.586591][T21454] veth1: entered allmulticast mode [ 530.592996][T21454] bond3: (slave vlan2): Opening slave failed [ 530.625558][T16950] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.651584][T16950] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.740294][T21467] tipc: Resetting bearer [ 530.746119][T21486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4225'. [ 530.760484][T21486] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4225'. [ 530.784344][T21467] tipc: Disabling bearer [ 531.067164][T21512] lo speed is unknown, defaulting to 1000 [ 531.086005][T21520] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4234'. [ 531.141510][T21512] wg1 speed is unknown, defaulting to 1000 [ 531.155805][T21512] lo speed is unknown, defaulting to 1000 [ 531.205514][T21488] macvtap1: entered allmulticast mode [ 531.213814][T21488] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 531.309008][T21533] can: request_module (can-proto-0) failed. [ 531.355971][T21488] mac80211_hwsim hwsim42 wlan0: left allmulticast mode [ 531.400291][T21541] syz_tun: entered allmulticast mode [ 531.480003][T21545] dvmrp8: entered allmulticast mode [ 531.535336][T21541] syz_tun: left allmulticast mode [ 531.544222][T21541] dvmrp8: left allmulticast mode [ 531.660372][T21560] netlink: 'syz.1.4246': attribute type 2 has an invalid length. [ 531.668680][T21560] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4246'. [ 531.780058][T21568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4249'. [ 532.136654][T21601] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4256'. [ 532.421674][ T5940] IPVS: starting estimator thread 0... [ 532.444522][T21623] _ÐZ`Ô€@S: entered promiscuous mode [ 532.492888][T21627] lo speed is unknown, defaulting to 1000 [ 532.515185][T21627] wg1 speed is unknown, defaulting to 1000 [ 532.527581][T21625] IPVS: using max 50 ests per chain, 120000 per kthread [ 532.546140][T21631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4263'. [ 532.570374][T21627] lo speed is unknown, defaulting to 1000 [ 532.792850][T21654] netlink: 'syz.2.4270': attribute type 6 has an invalid length. [ 532.943336][T21661] tipc: Enabled bearer , priority 0 [ 532.972140][T21661] syzkaller0: entered promiscuous mode [ 532.983686][T21661] syzkaller0: entered allmulticast mode [ 532.996143][T21665] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 533.011912][T21661] tipc: Resetting bearer [ 533.026551][T21663] tipc: Enabled bearer , priority 0 [ 533.035403][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4274'. [ 533.048128][T21660] tipc: Resetting bearer [ 533.059818][T21660] tipc: Disabling bearer [ 533.073805][T21663] syzkaller0: entered promiscuous mode [ 533.080224][T21663] syzkaller0: entered allmulticast mode [ 533.171333][T21662] tipc: Resetting bearer [ 533.209481][T21662] tipc: Disabling bearer [ 533.250787][T21677] netlink: 'syz.0.4279': attribute type 5 has an invalid length. [ 533.354044][T21684] bond2: (slave ip6gretap1): Removing an active aggregator [ 533.372727][T21684] bond2: (slave ip6gretap1): Releasing backup interface [ 533.419121][T21686] lo speed is unknown, defaulting to 1000 [ 533.429898][T21686] wg1 speed is unknown, defaulting to 1000 [ 533.437775][T21686] lo speed is unknown, defaulting to 1000 [ 533.847833][T21714] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 534.193133][T21725] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 534.624303][T21745] tipc: Enabled bearer , priority 0 [ 534.732335][T21751] tipc: Resetting bearer [ 534.750613][T21755] netlink: 'syz.0.4297': attribute type 1 has an invalid length. [ 534.778131][T21739] tipc: Disabling bearer [ 535.450617][T21797] __nla_validate_parse: 8 callbacks suppressed [ 535.450638][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4303'. [ 535.473951][T21797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4303'. [ 535.484874][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4303'. [ 535.498676][T21797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4303'. [ 535.601949][T21799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4305'. [ 535.613835][T21799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4305'. [ 535.731570][T21806] bond4: entered promiscuous mode [ 535.737389][T21806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.764608][T21808] lo speed is unknown, defaulting to 1000 [ 535.773885][T21808] wg1 speed is unknown, defaulting to 1000 [ 535.780807][T21808] lo speed is unknown, defaulting to 1000 [ 535.813179][T21811] macvtap1: entered allmulticast mode [ 535.819135][T21811] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 535.830280][T21811] mac80211_hwsim hwsim46 wlan0: left allmulticast mode [ 535.983280][T21784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.060633][T21826] netlink: 'syz.0.4312': attribute type 2 has an invalid length. [ 536.069005][T21826] netlink: 'syz.0.4312': attribute type 2 has an invalid length. [ 536.088422][T21831] siw: device registration error -23 [ 536.151444][T21835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4314'. [ 536.167361][T21838] netlink: 'syz.4.4316': attribute type 1 has an invalid length. [ 536.207412][T21842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.221749][T21845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4316'. [ 536.382485][T21858] pim6reg1: entered promiscuous mode [ 536.388181][T21858] pim6reg1: entered allmulticast mode [ 536.821024][T21886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.828937][T21886] bridge0: port 1(bond0) entered blocking state [ 536.835409][T21886] bridge0: port 1(bond0) entered disabled state [ 536.846331][T21886] bond0: entered allmulticast mode [ 536.854317][T21886] bond0: entered promiscuous mode [ 537.031943][T21901] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4335'. [ 537.042397][T21902] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4335'. [ 537.160250][T21908] syzkaller1: entered promiscuous mode [ 537.172653][T21908] syzkaller1: entered allmulticast mode [ 537.183718][T21908] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 537.245302][T21932] ÿÿÿÿÿÿ: renamed from macvtap0 (while UP) [ 537.361631][T21936] lo speed is unknown, defaulting to 1000 [ 537.370376][T21939] tipc: Enabling of bearer rejected, already enabled [ 537.390294][T21936] wg1 speed is unknown, defaulting to 1000 [ 537.409467][T21936] lo speed is unknown, defaulting to 1000 [ 537.639793][T21946] netlink: 'syz.2.4343': attribute type 1 has an invalid length. [ 537.699826][T21946] 8021q: adding VLAN 0 to HW filter on device bond5 [ 537.765405][T21946] bond5: (slave gretap2): making interface the new active one [ 537.821347][T21946] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 537.871443][T21951] macsec1: entered promiscuous mode [ 537.891686][T21951] bond0: entered promiscuous mode [ 537.912983][T21951] bond_slave_0: entered promiscuous mode [ 537.943854][T21951] bond_slave_1: entered promiscuous mode [ 537.969789][T21951] bond0: left promiscuous mode [ 537.981994][T21951] bond_slave_0: left promiscuous mode [ 537.997126][T21951] bond_slave_1: left promiscuous mode [ 538.380440][T21999] lo speed is unknown, defaulting to 1000 [ 538.387528][T21999] wg1 speed is unknown, defaulting to 1000 [ 538.394386][T21999] lo speed is unknown, defaulting to 1000 [ 538.880925][T22024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.958394][T22024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.022110][T22024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.155682][T22032] lo speed is unknown, defaulting to 1000 [ 539.170762][T22032] wg1 speed is unknown, defaulting to 1000 [ 539.180611][T22032] lo speed is unknown, defaulting to 1000 [ 539.235941][T22041] macvtap1: entered allmulticast mode [ 539.241896][T22041] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 539.253349][T22041] mac80211_hwsim hwsim46 wlan0: left allmulticast mode [ 539.275761][T22043] vlan2: entered promiscuous mode [ 539.281875][T22043] bond0: entered promiscuous mode [ 539.287134][T22043] bond_slave_0: entered promiscuous mode [ 539.293319][T22043] bond_slave_1: entered promiscuous mode [ 539.482196][T22051] bond0: Error: Cannot enslave bond to itself. [ 539.506433][T22053] bond0: Error: Cannot enslave bond to itself. [ 539.587633][T22051] gtp0: entered allmulticast mode [ 539.826388][T22074] lo speed is unknown, defaulting to 1000 [ 539.899057][T22074] wg1 speed is unknown, defaulting to 1000 [ 539.906344][T22074] lo speed is unknown, defaulting to 1000 [ 540.087107][T22099] netlink: zone id is out of range [ 540.106965][T22099] netlink: zone id is out of range [ 540.112333][T22099] netlink: zone id is out of range [ 540.124235][T22099] netlink: zone id is out of range [ 540.131006][T22099] netlink: zone id is out of range [ 540.138494][T22099] netlink: zone id is out of range [ 540.177281][T22099] netlink: zone id is out of range [ 540.180690][T22106] sctp: [Deprecated]: syz.3.4381 (pid 22106) Use of int in maxseg socket option. [ 540.180690][T22106] Use struct sctp_assoc_value instead [ 540.183156][T22099] netlink: zone id is out of range [ 540.207618][T22099] netlink: zone id is out of range [ 540.212999][T22099] netlink: zone id is out of range [ 540.295839][T22111] lo speed is unknown, defaulting to 1000 [ 540.303730][T22111] wg1 speed is unknown, defaulting to 1000 [ 540.331085][T22111] lo speed is unknown, defaulting to 1000 [ 540.522551][T22128] __nla_validate_parse: 77 callbacks suppressed [ 540.522571][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4385'. [ 540.573359][T22128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4385'. [ 540.609072][T22123] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 540.659196][T22128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4385'. [ 541.124823][T22153] lo speed is unknown, defaulting to 1000 [ 541.172599][T22153] wg1 speed is unknown, defaulting to 1000 [ 541.193392][T22169] macvtap2: entered allmulticast mode [ 541.209881][T22169] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 541.236297][T22169] mac80211_hwsim hwsim32 wlan0: left allmulticast mode [ 541.293751][T22153] lo speed is unknown, defaulting to 1000 [ 541.301804][T22173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4396'. [ 541.325034][T22173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4396'. [ 541.546945][T22188] lo speed is unknown, defaulting to 1000 [ 541.553657][T22188] wg1 speed is unknown, defaulting to 1000 [ 541.570011][T22183] macvtap0: entered allmulticast mode [ 541.575907][T22183] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 541.593825][T22183] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 541.634317][T22188] lo speed is unknown, defaulting to 1000 [ 541.741466][T22190] tipc: Enabling of bearer rejected, failed to enable media [ 541.814295][T22203] lo speed is unknown, defaulting to 1000 [ 541.834921][T22203] wg1 speed is unknown, defaulting to 1000 [ 541.871467][T22203] lo speed is unknown, defaulting to 1000 [ 542.145415][T22223] tipc: Enabling of bearer rejected, failed to enable media [ 542.165574][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4408'. [ 542.204177][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4408'. [ 542.284552][T22227] mac80211_hwsim hwsim44 ªªªªª;: left promiscuous mode [ 542.295732][T22227] bridge1: left promiscuous mode [ 542.306405][T22227] bridge1: left allmulticast mode [ 542.312942][T22227] bond2: left promiscuous mode [ 542.320137][T22227] batadv1: left promiscuous mode [ 542.327474][T22227] batadv1: left allmulticast mode [ 542.439524][ T5940] IPVS: starting estimator thread 0... [ 542.526812][T22240] IPVS: using max 37 ests per chain, 88800 per kthread [ 542.536010][T22246] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4413'. [ 542.615133][T22249] netlink: 'syz.4.4414': attribute type 10 has an invalid length. [ 542.653380][T22249] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 542.690971][T22253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4416'. [ 542.730155][T22253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4416'. [ 542.983732][T22274] lo speed is unknown, defaulting to 1000 [ 543.022935][T22274] wg1 speed is unknown, defaulting to 1000 [ 543.039972][T22274] lo speed is unknown, defaulting to 1000 [ 543.129022][T22288] netlink: 'syz.3.4426': attribute type 19 has an invalid length. [ 543.268045][T22297] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 544.197955][T22325] netlink: 'syz.2.4440': attribute type 4 has an invalid length. [ 544.238172][T22325] netlink: 'syz.2.4440': attribute type 4 has an invalid length. [ 544.299867][T22325] lo speed is unknown, defaulting to 1000 [ 544.321740][T22325] wg1 speed is unknown, defaulting to 1000 [ 544.358846][T22325] lo speed is unknown, defaulting to 1000 [ 544.706372][T22350] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 544.737744][T22350] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 544.779121][T22350] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 545.002450][T22370] lo speed is unknown, defaulting to 1000 [ 545.020374][T22370] wg1 speed is unknown, defaulting to 1000 [ 545.064966][T22370] lo speed is unknown, defaulting to 1000 [ 545.076506][T22364] lo speed is unknown, defaulting to 1000 [ 545.124714][T22375] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 545.162708][T22364] wg1 speed is unknown, defaulting to 1000 [ 545.187900][T22364] lo speed is unknown, defaulting to 1000 [ 545.741005][ C0] net_ratelimit: 34 callbacks suppressed [ 545.741030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.508432][T22445] netlink: 'syz.2.4468': attribute type 10 has an invalid length. [ 546.517765][T22447] __nla_validate_parse: 7 callbacks suppressed [ 546.517785][T22447] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4471'. [ 546.534118][T22445] bond0: (slave wlan1): Opening slave failed [ 546.596164][T22454] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 546.698277][T22460] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4472'. [ 546.764247][T22464] atomic_op ffff88807a372998 conn xmit_atomic 0000000000000000 [ 546.781012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.789460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.804900][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4474'. [ 546.914310][T22463] bridge1: port 1(veth5) entered blocking state [ 546.921825][T22463] bridge1: port 1(veth5) entered disabled state [ 546.930923][T22463] veth5: entered allmulticast mode [ 546.950955][T22463] veth5: entered promiscuous mode [ 546.981920][T22471] veth0_to_bond: left allmulticast mode [ 546.991018][T22471] bridge1: port 2(veth0_to_bond) entered blocking state [ 547.001916][T22471] bridge1: port 2(veth0_to_bond) entered disabled state [ 547.011211][T22471] veth0_to_bond: entered allmulticast mode [ 547.020380][T22471] veth0_to_bond: entered promiscuous mode [ 547.051939][T22463] vlan2: entered allmulticast mode [ 547.300651][T22495] lo speed is unknown, defaulting to 1000 [ 547.308434][T22495] wg1 speed is unknown, defaulting to 1000 [ 547.328102][T22495] lo speed is unknown, defaulting to 1000 [ 547.710184][T22519] IPVS: Scheduler module ip_vs_sip not found [ 547.821004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.824124][T22536] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 548.002539][T22541] lo speed is unknown, defaulting to 1000 [ 548.010276][T22541] wg1 speed is unknown, defaulting to 1000 [ 548.033059][T22541] lo speed is unknown, defaulting to 1000 [ 548.063294][T22552] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4498'. [ 548.108345][T22547] lo speed is unknown, defaulting to 1000 [ 548.115296][T22547] wg1 speed is unknown, defaulting to 1000 [ 548.149499][T22547] lo speed is unknown, defaulting to 1000 [ 548.194526][T22556] pim6reg: entered allmulticast mode [ 548.329194][T22562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4501'. [ 548.336400][T22563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4503'. [ 548.494438][T22577] netlink: 'syz.2.4506': attribute type 1 has an invalid length. [ 548.518450][T22577] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.532062][T16946] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 548.555105][T22577] bond6: (slave geneve2): making interface the new active one [ 548.566407][T22577] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 548.575953][ T7921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.584712][ T7921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.603202][ T7921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.630892][T22577] bond6: entered promiscuous mode [ 548.642978][T22577] geneve2: entered promiscuous mode [ 548.691489][ T7921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.860979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.869216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.981915][T22593] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4510'. [ 549.001688][T22596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.026963][T22593] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4510'. [ 549.044623][T22593] netlink: 'syz.1.4510': attribute type 5 has an invalid length. [ 549.083958][T22593] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4510'. [ 549.181481][T22602] lo speed is unknown, defaulting to 1000 [ 549.211758][T22602] wg1 speed is unknown, defaulting to 1000 [ 549.211774][T22593] lo speed is unknown, defaulting to 1000 [ 549.222048][T22602] lo speed is unknown, defaulting to 1000 [ 549.224809][T22593] wg1 speed is unknown, defaulting to 1000 [ 549.267759][T22593] lo speed is unknown, defaulting to 1000 [ 549.625763][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'. [ 549.826244][T22649] tipc: Enabling of bearer rejected, failed to enable media [ 549.828210][T22644] IPVS: length: 163 != 216 [ 549.900987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.909266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.965964][T22654] erspan0: entered promiscuous mode [ 549.999698][T22661] vlan0: entered promiscuous mode [ 550.077140][T22661] rdma_rxe: rxe_newlink: failed to add lo [ 550.235834][T22677] netlink: 'syz.0.4529': attribute type 16 has an invalid length. [ 550.244199][T22677] netlink: 'syz.0.4529': attribute type 17 has an invalid length. [ 550.594984][T22677] tipc: Resetting bearer [ 550.610760][T22677] team0: left allmulticast mode [ 550.615794][T22677] team0: left promiscuous mode [ 550.645520][ T7915] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.655712][ T7915] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.684684][ T7915] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.703033][ T7915] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.773071][ T7915] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.790553][ T7915] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.818954][ T7915] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.844232][ T7915] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.874043][T22694] lo speed is unknown, defaulting to 1000 [ 550.904753][T22694] wg1 speed is unknown, defaulting to 1000 [ 550.946537][T22694] lo speed is unknown, defaulting to 1000 [ 550.968042][T22710] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 551.270497][T22732] tipc: Enabled bearer , priority 0 [ 551.282714][T22732] syzkaller0: entered promiscuous mode [ 551.290262][T22732] syzkaller0: entered allmulticast mode [ 551.310601][T22731] tipc: Resetting bearer [ 551.334784][T22731] tipc: Disabling bearer [ 551.793705][T22773] dvmrp8: entered allmulticast mode [ 552.384324][T22781] __nla_validate_parse: 9 callbacks suppressed [ 552.384340][T22781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4555'. [ 552.574652][T22771] netlink: 'syz.1.4551': attribute type 1 has an invalid length. [ 552.583587][T22771] netlink: 'syz.1.4551': attribute type 3 has an invalid length. [ 552.591744][T22771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4551'. [ 552.599986][T22786] syzkaller0: left promiscuous mode [ 552.607479][T22786] syzkaller0: left allmulticast mode [ 552.621122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.633353][T22773] dvmrp8: left allmulticast mode [ 552.642859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.651270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.683558][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4558'. [ 552.816158][T22806] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4557'. [ 552.829446][T22808] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 552.831994][T22809] siw: device registration error -23 [ 553.174842][T22832] lo speed is unknown, defaulting to 1000 [ 553.182332][T22832] wg1 speed is unknown, defaulting to 1000 [ 553.189600][T22832] lo speed is unknown, defaulting to 1000 [ 553.421078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.445101][T22839] pim6reg9: entered allmulticast mode [ 553.661076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.669424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.800088][T22857] tipc: Enabling of bearer rejected, failed to enable media [ 553.836385][T22865] netlink: 'syz.1.4577': attribute type 3 has an invalid length. [ 553.898666][T22869] netlink: 'syz.2.4579': attribute type 21 has an invalid length. [ 553.914437][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'. [ 554.028245][T22879] lo speed is unknown, defaulting to 1000 [ 554.036272][T22879] wg1 speed is unknown, defaulting to 1000 [ 554.046513][T22879] lo speed is unknown, defaulting to 1000 [ 554.188024][T22879] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 554.191498][T22887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4586'. [ 554.272478][T22888] vti0: entered promiscuous mode [ 554.277826][T22888] vti0: entered allmulticast mode [ 554.483480][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4588'. [ 554.513612][T22904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4588'. [ 554.553675][T22907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4591'. [ 554.566452][T22909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4592'. [ 554.662039][T22913] netlink: 'syz.4.4594': attribute type 1 has an invalid length. [ 554.701109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.709462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.734514][T22913] 8021q: adding VLAN 0 to HW filter on device bond6 [ 554.864987][T22923] tipc: Enabled bearer , priority 0 [ 554.872950][T22923] syzkaller0: entered promiscuous mode [ 554.887601][T22923] syzkaller0: entered allmulticast mode [ 554.903869][T22926] netlink: 'syz.2.4599': attribute type 1 has an invalid length. [ 554.914464][T22923] tipc: Resetting bearer [ 554.942563][T22927] veth0: entered promiscuous mode [ 554.967576][T22922] tipc: Resetting bearer [ 555.006129][T22922] tipc: Disabling bearer [ 555.022729][T22927] veth0 (unregistering): left promiscuous mode [ 555.145947][T22941] vlan0: entered promiscuous mode [ 555.251336][T22950] IPv6: NLM_F_REPLACE set, but no existing node found! [ 555.273682][T22956] netlink: 'syz.3.4609': attribute type 12 has an invalid length. [ 555.292688][T22953] netlink: 'syz.4.4607': attribute type 4 has an invalid length. [ 555.357332][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 555.401031][T22966] syzkaller0: entered promiscuous mode [ 555.406803][T22966] syzkaller0: entered allmulticast mode [ 555.610516][T22978] tipc: New replicast peer: 208.253.78.183 [ 555.632193][T22978] tipc: Enabled bearer , priority 10 [ 555.740984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.818077][T23001] netlink: 'syz.1.4619': attribute type 1 has an invalid length. [ 555.854759][T22995] tipc: Enabled bearer , priority 0 [ 555.882031][T22991] tipc: Disabling bearer [ 556.000622][T23008] syzkaller0: entered promiscuous mode [ 556.013151][T23008] syzkaller0: entered allmulticast mode [ 556.295522][T23031] dvmrp8: entered allmulticast mode [ 556.324101][T23033] netlink: 'syz.3.4634': attribute type 5 has an invalid length. [ 556.397717][T23034] lo speed is unknown, defaulting to 1000 [ 556.404490][T23034] wg1 speed is unknown, defaulting to 1000 [ 556.427803][T23034] lo speed is unknown, defaulting to 1000 [ 556.561761][T23044] netlink: 'syz.3.4637': attribute type 17 has an invalid length. [ 556.641873][T23045] netlink: zone id is out of range [ 556.724648][ T7915] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 556.738420][T23051] netlink: 'syz.1.4638': attribute type 13 has an invalid length. [ 556.748050][ T7915] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 556.757720][T15586] tipc: Node number set to 1100142238 [ 556.769438][ T7915] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 556.783321][ T7915] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 556.832862][T23051] lo speed is unknown, defaulting to 1000 [ 556.841321][T23051] wg1 speed is unknown, defaulting to 1000 [ 556.851167][T23051] lo speed is unknown, defaulting to 1000 [ 557.097969][T23029] dvmrp8: left allmulticast mode [ 557.170550][T23066] delete_channel: no stack [ 557.453325][T23077] lo speed is unknown, defaulting to 1000 [ 557.463297][T23077] wg1 speed is unknown, defaulting to 1000 [ 557.481247][T23077] lo speed is unknown, defaulting to 1000 [ 557.764515][T23086] IPVS: stopping backup sync thread 23095 ... [ 557.765777][T23095] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0 [ 557.801845][T23089] lo speed is unknown, defaulting to 1000 [ 557.813281][T23096] vlan0: entered promiscuous mode [ 557.820823][T23089] wg1 speed is unknown, defaulting to 1000 [ 557.820983][ C0] net_ratelimit: 5 callbacks suppressed [ 557.820997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.843859][T23089] lo speed is unknown, defaulting to 1000 [ 557.855164][T23096] rdma_rxe: rxe_newlink: failed to add lo [ 558.086037][T23111] __nla_validate_parse: 16 callbacks suppressed [ 558.086062][T23111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4656'. [ 558.147518][T23112] pim6reg: entered allmulticast mode [ 558.375690][T23118] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.391262][T23118] bond6: (slave bond7): making interface the new active one [ 558.412164][T23118] bond6: (slave bond7): Enslaving as an active interface with an up link [ 558.424232][T23135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4663'. [ 558.444153][T23135] team0: Port device geneve0 added [ 558.454243][T23138] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 558.470822][ T7915] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.486297][ T7915] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.507546][ T7915] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.560390][ T7915] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.618623][T23142] lo speed is unknown, defaulting to 1000 [ 558.625847][T23142] wg1 speed is unknown, defaulting to 1000 [ 558.633784][T23142] lo speed is unknown, defaulting to 1000 [ 558.690881][T23150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4668'. [ 558.763186][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4669'. [ 558.763375][T23150] lo speed is unknown, defaulting to 1000 [ 558.783427][T23150] wg1 speed is unknown, defaulting to 1000 [ 558.790920][T23150] lo speed is unknown, defaulting to 1000 [ 558.860989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.869278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.968699][T23155] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4668'. [ 559.076584][T23167] validate_nla: 4 callbacks suppressed [ 559.076607][T23167] netlink: 'syz.4.4671': attribute type 1 has an invalid length. [ 559.113300][T23167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 559.258988][T23167] bond7: (slave veth3): Enslaving as an active interface with a down link [ 559.304746][T23169] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 559.312359][T23169] bond7: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 559.402469][T23174] netlink: set zone limit has 4 unknown bytes [ 559.688131][T23207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.811534][T23217] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 559.880288][T23221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.898032][T23221] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.904829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.904905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.946293][T23221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.991214][T23227] lo speed is unknown, defaulting to 1000 [ 560.021967][T23227] wg1 speed is unknown, defaulting to 1000 [ 560.022782][T23226] lo speed is unknown, defaulting to 1000 [ 560.045277][T23227] lo speed is unknown, defaulting to 1000 [ 560.059019][T23230] netlink: 'syz.4.4689': attribute type 10 has an invalid length. [ 560.112162][T23230] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 560.125865][T23226] wg1 speed is unknown, defaulting to 1000 [ 560.154991][T23226] lo speed is unknown, defaulting to 1000 [ 560.263323][T23235] bond0: (slave team0): Releasing backup interface [ 560.286414][T23235] bond0: (slave batadv0): Releasing backup interface [ 560.336578][T23235] bond0: (slave wlan1): Releasing backup interface [ 560.346648][T23235] bond1: (slave geneve2): Releasing active interface [ 560.362172][T23235] bond2: (slave gretap1): Releasing active interface [ 560.370617][T23245] netlink: 'syz.1.4690': attribute type 10 has an invalid length. [ 560.413350][ T7917] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.429781][ T7917] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.440954][T23245] bond0: (slave wlan1): refused to change device type [ 560.449924][T23239] lo speed is unknown, defaulting to 1000 [ 560.455834][ T7917] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.487232][T23239] wg1 speed is unknown, defaulting to 1000 [ 560.493262][ T7917] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.506426][T23239] lo speed is unknown, defaulting to 1000 [ 560.537946][T23250] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4694'. [ 560.573941][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'. [ 560.608532][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'. [ 560.628023][T23258] netlink: 'syz.2.4694': attribute type 1 has an invalid length. [ 560.666043][T23258] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4694'. [ 560.770048][T23266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4700'. [ 560.828200][T23266] openvswitch: netlink: Flow actions attr not present in new flow. [ 560.828400][T23269] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 560.882572][T23266] netlink: 'syz.3.4700': attribute type 10 has an invalid length. [ 561.564352][T23312] sctp: [Deprecated]: syz.0.4712 (pid 23312) Use of int in maxseg socket option. [ 561.564352][T23312] Use struct sctp_assoc_value instead [ 561.929629][T23338] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 562.158339][T23356] erspan0: entered promiscuous mode [ 562.182847][T23356] erspan0: left promiscuous mode [ 562.263051][T23359] bond3: entered promiscuous mode [ 562.268425][T23359] bond3: entered allmulticast mode [ 562.274012][T23359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.312765][T23359] lo speed is unknown, defaulting to 1000 [ 562.319823][T23359] wg1 speed is unknown, defaulting to 1000 [ 562.326609][T23359] lo speed is unknown, defaulting to 1000 [ 562.390467][T23376] netlink: 'syz.4.4734': attribute type 1 has an invalid length. [ 562.498114][T23376] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.589482][T23388] vlan3: entered promiscuous mode [ 562.620491][T23388] bond8: entered promiscuous mode [ 562.628436][T23388] vlan3: entered allmulticast mode [ 562.634590][T23388] bond8: entered allmulticast mode [ 562.695460][T23391] bond8: (slave gretap1): making interface the new active one [ 562.703948][T23391] gretap1: entered promiscuous mode [ 562.713400][T23391] gretap1: entered allmulticast mode [ 562.721642][T23391] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 562.870490][T23411] netlink: 'syz.4.4742': attribute type 1 has an invalid length. [ 562.924203][T23417] tap0: tun_chr_ioctl cmd 1074025677 [ 562.932000][T23417] tap0: linktype set to 774 [ 563.021090][ C0] net_ratelimit: 5 callbacks suppressed [ 563.021108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.141580][T23427] netlink: 'syz.2.4746': attribute type 10 has an invalid length. [ 563.150379][T23427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.162198][T23427] batadv_slave_0: entered promiscuous mode [ 563.172181][ T30] audit: type=1800 audit(1756421204.162:18): pid=23426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4747" name="memory.events" dev="tmpfs" ino=1547 res=0 errno=0 [ 563.174066][T23427] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 563.240004][T23431] netlink: 'syz.3.4748': attribute type 4 has an invalid length. [ 563.261015][T23431] team0: Port device team_slave_0 removed [ 563.270940][T23431] team0: Port device team_slave_1 removed [ 563.282970][T23431] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 563.365521][T23435] __nla_validate_parse: 10 callbacks suppressed [ 563.365537][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4750'. [ 563.383288][T23435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4750'. [ 563.396147][T23435] netlink: 'syz.1.4750': attribute type 1 has an invalid length. [ 563.404342][T23435] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4750'. [ 563.484580][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4752'. [ 563.502676][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.506702][ C1] ================================================================== [ 563.519671][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 563.527594][ C1] Read of size 2 at addr ffff888057e19c2a by task syz.3.4753/23441 [ 563.535577][ C1] [ 563.537995][ C1] CPU: 1 UID: 0 PID: 23441 Comm: syz.3.4753 Not tainted syzkaller #0 PREEMPT(full) [ 563.538014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.538022][ C1] Call Trace: [ 563.538027][ C1] [ 563.538032][ C1] dump_stack_lvl+0x189/0x250 [ 563.538052][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.538065][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.538077][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.538087][ C1] ? lock_release+0x4b/0x3e0 [ 563.538105][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 563.538120][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 563.538134][ C1] print_report+0xca/0x240 [ 563.538145][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 563.538159][ C1] kasan_report+0x118/0x150 [ 563.538176][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 563.538192][ C1] rose_timer_expiry+0x471/0x4b0 [ 563.538207][ C1] call_timer_fn+0x17e/0x5f0 [ 563.538231][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 563.538255][ C1] ? call_timer_fn+0xbe/0x5f0 [ 563.538279][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 563.538309][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.538320][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 563.538334][ C1] __run_timer_base+0x61a/0x860 [ 563.538348][ C1] ? ktime_get+0x3e/0x1f0 [ 563.538363][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 563.538376][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 563.538393][ C1] run_timer_softirq+0xb7/0x180 [ 563.538407][ C1] handle_softirqs+0x283/0x870 [ 563.538419][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 563.538431][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 563.538443][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 563.538458][ C1] __irq_exit_rcu+0xca/0x1f0 [ 563.538467][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 563.538480][ C1] irq_exit_rcu+0x9/0x30 [ 563.538490][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 563.538507][ C1] [ 563.538511][ C1] [ 563.538515][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.538529][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 563.538546][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ea 0c 21 f6 48 89 df e8 42 a4 21 f6 e8 0d f6 4a f6 fb bf 01 00 00 00 a2 9e 13 f6 65 8b 05 6b 01 24 07 85 c0 74 07 5b e9 51 4c 00 00 [ 563.538564][ C1] RSP: 0018:ffffc9000edafc80 EFLAGS: 00000282 [ 563.538577][ C1] RAX: f45e75ee49aa2f00 RBX: ffff88802cc79280 RCX: f45e75ee49aa2f00 [ 563.538586][ C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: 0000000000000001 [ 563.538594][ C1] RBP: 0000000000000021 R08: ffffffff8fa38337 R09: 1ffffffff1f47066 [ 563.538602][ C1] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: 1ffff1100598f2e3 [ 563.538610][ C1] R13: 0000000000000000 R14: 000000001c000004 R15: ffff88802cc79718 [ 563.538624][ C1] get_signal+0x11a8/0x1340 [ 563.538641][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 563.538661][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 563.538681][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.538692][ C1] exit_to_user_mode_loop+0x75/0x110 [ 563.538708][ C1] do_syscall_64+0x2bd/0x3b0 [ 563.538718][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.538729][ C1] ? clear_bhb_loop+0x60/0xb0 [ 563.538741][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.538751][ C1] RIP: 0033:0x7f89ba18ec23 [ 563.538762][ C1] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 563.538771][ C1] RSP: 002b:00007ffe46ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 563.538783][ C1] RAX: 00007f89baef9000 RBX: 00007f89b8bf76c0 RCX: 00007f89ba18ec23 [ 563.538791][ C1] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 563.538798][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 563.538807][ C1] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe46ffa2e0 [ 563.538814][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 563.538826][ C1] [ 563.538831][ C1] [ 563.929310][ C1] Allocated by task 22655: [ 563.933737][ C1] kasan_save_track+0x3e/0x80 [ 563.938423][ C1] __kasan_kmalloc+0x93/0xb0 [ 563.943024][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 563.948437][ C1] __genradix_ptr_alloc+0x352/0x4a0 [ 563.953668][ C1] __genradix_prealloc+0x44/0x90 [ 563.959003][ C1] sctp_stream_init+0x14b/0x440 [ 563.963980][ C1] sctp_association_new+0x10dd/0x25f0 [ 563.969465][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 563.974768][ C1] __sctp_connect+0x5ba/0xd50 [ 563.979448][ C1] sctp_getsockopt_connectx3+0x2c4/0x440 [ 563.985182][ C1] sctp_getsockopt+0x98a/0xb60 [ 563.989947][ C1] do_sock_getsockopt+0x36f/0x450 [ 563.995061][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 564.000256][ C1] do_syscall_64+0xfa/0x3b0 [ 564.005005][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.010897][ C1] [ 564.013228][ C1] Freed by task 22655: [ 564.017373][ C1] kasan_save_track+0x3e/0x80 [ 564.022153][ C1] kasan_save_free_info+0x46/0x50 [ 564.027201][ C1] __kasan_slab_free+0x5b/0x80 [ 564.031976][ C1] kfree+0x18e/0x440 [ 564.035880][ C1] genradix_free_recurse+0x5d/0xa0 [ 564.041009][ C1] genradix_free_recurse+0x5d/0xa0 [ 564.046142][ C1] sctp_stream_free+0xd5/0x110 [ 564.051002][ C1] sctp_association_free+0x26d/0x7f0 [ 564.056282][ C1] __sctp_connect+0xa73/0xd50 [ 564.061049][ C1] sctp_getsockopt_connectx3+0x2c4/0x440 [ 564.061062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.061085][ C1] sctp_getsockopt+0x98a/0xb60 [ 564.066906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.075036][ C1] do_sock_getsockopt+0x36f/0x450 [ 564.093036][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 564.098249][ C1] do_syscall_64+0xfa/0x3b0 [ 564.102833][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.108830][ C1] [ 564.111161][ C1] The buggy address belongs to the object at ffff888057e19c00 [ 564.111161][ C1] which belongs to the cache kmalloc-512 of size 512 [ 564.125357][ C1] The buggy address is located 42 bytes inside of [ 564.125357][ C1] freed 512-byte region [ffff888057e19c00, ffff888057e19e00) [ 564.139356][ C1] [ 564.141718][ C1] The buggy address belongs to the physical page: [ 564.148302][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057e1a000 pfn:0x57e18 [ 564.158458][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 564.166955][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 564.175559][ C1] page_type: f5(slab) [ 564.179546][ C1] raw: 00fff00000000240 ffff88801a441c80 ffffea0001148410 ffffea00015eec10 [ 564.188224][ C1] raw: ffff888057e1a000 000000000010000b 00000000f5000000 0000000000000000 [ 564.196820][ C1] head: 00fff00000000240 ffff88801a441c80 ffffea0001148410 ffffea00015eec10 [ 564.205505][ C1] head: ffff888057e1a000 000000000010000b 00000000f5000000 0000000000000000 [ 564.214190][ C1] head: 00fff00000000002 ffffea00015f8601 00000000ffffffff 00000000ffffffff [ 564.222858][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 564.231554][ C1] page dumped because: kasan: bad access detected [ 564.237971][ C1] page_owner tracks the page as allocated [ 564.243678][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13445, tgid 13444 (syz.1.2037), ts 382135210196, free_ts 376218605836 [ 564.265653][ C1] post_alloc_hook+0x240/0x2a0 [ 564.270531][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 564.276071][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 564.281870][ C1] alloc_pages_mpol+0x232/0x4a0 [ 564.286733][ C1] allocate_slab+0x8a/0x370 [ 564.291261][ C1] ___slab_alloc+0xbeb/0x1410 [ 564.295939][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 564.301331][ C1] __ipv6_dev_mc_inc+0x44f/0xa50 [ 564.306275][ C1] ipv6_add_dev+0xe63/0x1370 [ 564.310952][ C1] addrconf_notify+0x794/0x1010 [ 564.315880][ C1] notifier_call_chain+0x1b3/0x3e0 [ 564.321008][ C1] register_netdevice+0x1608/0x1ae0 [ 564.326227][ C1] register_netdev+0x40/0x60 [ 564.330834][ C1] loopback_net_init+0x75/0x150 [ 564.335866][ C1] ops_init+0x35c/0x5c0 [ 564.340139][ C1] setup_net+0x10c/0x320 [ 564.344421][ C1] page last free pid 1933 tgid 1933 stack trace: [ 564.350755][ C1] __free_frozen_pages+0xbc4/0xd30 [ 564.355919][ C1] __put_partials+0x156/0x1a0 [ 564.360594][ C1] put_cpu_partial+0x17c/0x250 [ 564.365443][ C1] __slab_free+0x2d5/0x3c0 [ 564.369875][ C1] qlist_free_all+0x97/0x140 [ 564.374507][ C1] kasan_quarantine_reduce+0x148/0x160 [ 564.380056][ C1] __kasan_slab_alloc+0x22/0x80 [ 564.384921][ C1] __kmalloc_node_track_caller_noprof+0x216/0x4e0 [ 564.391401][ C1] kmalloc_reserve+0x136/0x290 [ 564.396302][ C1] __alloc_skb+0x142/0x2d0 [ 564.400715][ C1] reset_per_cpu_data+0x31/0x1e0 [ 564.405658][ C1] send_dm_alert+0x1f/0xf0 [ 564.410276][ C1] process_scheduled_works+0xae1/0x17b0 [ 564.415934][ C1] worker_thread+0x8a0/0xda0 [ 564.420535][ C1] kthread+0x70e/0x8a0 [ 564.424617][ C1] ret_from_fork+0x3f9/0x770 [ 564.429236][ C1] [ 564.431565][ C1] Memory state around the buggy address: [ 564.437254][ C1] ffff888057e19b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.445350][ C1] ffff888057e19b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.453432][ C1] >ffff888057e19c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.461529][ C1] ^ [ 564.467334][ C1] ffff888057e19c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.475423][ C1] ffff888057e19d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.483663][ C1] ================================================================== [ 564.491938][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 564.499172][ C1] CPU: 1 UID: 0 PID: 23441 Comm: syz.3.4753 Not tainted syzkaller #0 PREEMPT(full) [ 564.508566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.518724][ C1] Call Trace: [ 564.522102][ C1] [ 564.524946][ C1] dump_stack_lvl+0x99/0x250 [ 564.529724][ C1] ? __asan_memcpy+0x40/0x70 [ 564.534321][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.539521][ C1] ? __pfx__printk+0x10/0x10 [ 564.544211][ C1] vpanic+0x281/0x750 [ 564.548199][ C1] ? __pfx_vpanic+0x10/0x10 [ 564.552707][ C1] ? rcu_is_watching+0x15/0xb0 [ 564.557478][ C1] panic+0xb9/0xc0 [ 564.561201][ C1] ? __pfx_panic+0x10/0x10 [ 564.565706][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 564.571638][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 564.577564][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 564.582866][ C1] check_panic_on_warn+0x89/0xb0 [ 564.587814][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 564.592934][ C1] end_report+0x78/0x160 [ 564.597183][ C1] kasan_report+0x129/0x150 [ 564.601695][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 564.606849][ C1] rose_timer_expiry+0x471/0x4b0 [ 564.611795][ C1] call_timer_fn+0x17e/0x5f0 [ 564.616410][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 564.621968][ C1] ? call_timer_fn+0xbe/0x5f0 [ 564.626660][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 564.631788][ C1] ? rcu_is_watching+0x15/0xb0 [ 564.636550][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 564.642120][ C1] __run_timer_base+0x61a/0x860 [ 564.646984][ C1] ? ktime_get+0x3e/0x1f0 [ 564.651331][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 564.656807][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 564.663337][ C1] run_timer_softirq+0xb7/0x180 [ 564.668458][ C1] handle_softirqs+0x283/0x870 [ 564.673234][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 564.678173][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 564.683550][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 564.688763][ C1] __irq_exit_rcu+0xca/0x1f0 [ 564.693354][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 564.698741][ C1] irq_exit_rcu+0x9/0x30 [ 564.702982][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 564.708710][ C1] [ 564.711731][ C1] [ 564.714745][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.720913][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 564.726822][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ea 0c 21 f6 48 89 df e8 42 a4 21 f6 e8 0d f6 4a f6 fb bf 01 00 00 00 a2 9e 13 f6 65 8b 05 6b 01 24 07 85 c0 74 07 5b e9 51 4c 00 00 [ 564.746520][ C1] RSP: 0018:ffffc9000edafc80 EFLAGS: 00000282 [ 564.752774][ C1] RAX: f45e75ee49aa2f00 RBX: ffff88802cc79280 RCX: f45e75ee49aa2f00 [ 564.760879][ C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: 0000000000000001 [ 564.768858][ C1] RBP: 0000000000000021 R08: ffffffff8fa38337 R09: 1ffffffff1f47066 [ 564.776931][ C1] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: 1ffff1100598f2e3 [ 564.784930][ C1] R13: 0000000000000000 R14: 000000001c000004 R15: ffff88802cc79718 [ 564.793313][ C1] get_signal+0x11a8/0x1340 [ 564.797940][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 564.803529][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 564.809707][ C1] ? rcu_is_watching+0x15/0xb0 [ 564.814569][ C1] exit_to_user_mode_loop+0x75/0x110 [ 564.819957][ C1] do_syscall_64+0x2bd/0x3b0 [ 564.824551][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.830626][ C1] ? clear_bhb_loop+0x60/0xb0 [ 564.835305][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.841287][ C1] RIP: 0033:0x7f89ba18ec23 [ 564.845726][ C1] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 564.865450][ C1] RSP: 002b:00007ffe46ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 564.873990][ C1] RAX: 00007f89baef9000 RBX: 00007f89b8bf76c0 RCX: 00007f89ba18ec23 [ 564.882144][ C1] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 564.890640][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 564.898646][ C1] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe46ffa2e0 [ 564.906959][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 564.915142][ C1] [ 564.918590][ C1] Kernel Offset: disabled [ 564.922932][ C1] Rebooting in 86400 seconds..