last executing test programs: 28.149518041s ago: executing program 4 (id=1632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2=0x80ee3600, @empty}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c00000004000000010010"], 0x0, 0x64}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="06000300020000000000008988a8e46686dd", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 28.025866234s ago: executing program 3 (id=1633): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000340)=ANY=[], 0x0, 0x4}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x180, 0x15, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xe7, 0x8, "b0635170c311ce28c291eb70ca2259d65c212798dcccc0c46fe0ea6d2991ff3ece613a081bc78a6401c5e59f9ee6fe161b96e4c1ddd85558e5ebfd9a94e50e83726cf9246c59656e3f04fe19ec6d2365a9836c13868f156bcc9cfa4eaac00815c98d6abbb7cc5b881dcc6b0176c4141f91514d1f4b399a52c771bc41efd7275a421b91330ef4071569472303f182f04fa873ddefbb6dec814c4111735e4d0953c70bd5e24c3249bf0fb4bea36a89b0d3533341568ef8dcd349cde471735bdcfc7e4dd1c6d38018be878d8849bbf5cc7aa465174873000e13149b70f4dd026084d97724"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x51, 0x8, "94d512ac0a8afec63ebb3832c8d8eb41419f2846e699822d719a03aa550f3f404cf5b796d7af46a42dee563c9b981aa3ef329b7deb53982611d1fc1feccdc2bb8a1c911755796e92ba9c65512f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x180}, 0x1, 0x0, 0x0, 0x28810}, 0x8800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r2, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmmsg$alg(r0, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x40000}], 0x1, 0x4040) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x61d8, 0x0) 27.742479905s ago: executing program 4 (id=1635): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x67ef, 0x4) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x8000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0}}], 0x1, 0x400a000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="fc", 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$netlink(0x10, 0x3, 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r4, 0x0, 0x0) (async) sendmsg$nl_generic(r4, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7], 0x4c}}, 0x0) recvmsg(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) (async) recvmsg(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r9, 0x0, 0x1, 0x0) (async) splice(r2, 0x0, r9, 0x0, 0x1, 0x0) vmsplice(r9, &(0x7f0000000380), 0x0, 0xe) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) 27.478618368s ago: executing program 2 (id=1638): r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) getuid() shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x804) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 27.212815838s ago: executing program 2 (id=1640): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="18005a801400018005000600"], 0x34}}, 0x4000) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x81}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x800) 27.08241993s ago: executing program 2 (id=1641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000a187b639904240561e0b40fc7cf272a8c0d2c243cb41c4c5756d5a706f03839db5356ed1f7c498ef773120872b92cda58384e329ca65b12cf45072d05fb4b984251c3c7"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff030000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1e0000000000000000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf3620000000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="cc", 0x1}, {&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785b97a0cc5", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048894) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) clock_gettime(0xfffffffffffffff1, &(0x7f0000000040)) close(0x3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x9, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff5}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) 26.97481736s ago: executing program 0 (id=1643): socketpair(0x1, 0x3, 0x100000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x64, 0x7, 0x1, 0x0, "647fba0e220ed17e70f5a68e830bfca48b0f23416718bf6f39f06b7444ae24ad15c7861115e150634a9459713a805f556e45d98af5d3043a14f49ebfa47794196b75910749cd1bb3df885f32a12b9db4a9f15cc131419f255a7c33457f1fb911"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x88004}, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) unshare(0x22020400) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r6, r7, 0x4, r2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x33, &(0x7f0000000040), 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20001005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xae}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0xa}, 0x61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40}, 0x10}, 0x94) 26.277004449s ago: executing program 0 (id=1647): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) 26.213472439s ago: executing program 0 (id=1648): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc8c4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000780)=@newtaction={0x12c, 0x32, 0x12f, 0x0, 0x25dfdbff, {}, [{0x118, 0x1, [@m_tunnel_key={0x114, 0x14, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5f30}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x1ff, 0x8, 0x4, 0xa8a}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xae, 0x6, "2a209e0864c0f40ae4137898f81c9dc7253687459f6a382cc4fe3f28ff69c6efbf133c61f0aa6189fa7c7db624775997ed9123f2e4aff459eda415f7ea7693991d16289affaa8c5155b57b91b8f9a1655d21481012514ca68a5fa8c7e22fc3bbd31974cbd5727dbaf4c813e1064c0eb93a1648a7acb171fd97f33e0a078c77024820599b58650f2784638d9368a7354ae3e30caab6038fd8104d5c1380abca2a7c5a78d708681ab4540d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="0000020000000000000000000000000001000003"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="48000000000b0104000000000000000007000006080002400000000408000340000000000800024000000003120001002e2f63e7726f75702f73797a310000000000034000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x15, 0x4, 0x89) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f0000000180)=""/211, 0x8000000000000000}) connect$inet6(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) sendto(r7, &(0x7f0000000440), 0x0, 0x40080, &(0x7f0000000540)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYRES8], 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 26.0242294s ago: executing program 0 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="200025ad700006000000000005001300010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 25.915737226s ago: executing program 0 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001300)={{r1}, 0x0, 0x4, @unused=[0x7, 0x8f5, 0x7, 0x5], @subvolid=0x2}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x8}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) (rerun: 32) 25.74479853s ago: executing program 1 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xba}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x38}, 0x2, 0x34005}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x7f}, 0x18) socket$inet6(0xa, 0x5, 0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x86c3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) socket$can_j1939(0x1d, 0x2, 0x7) 25.350108393s ago: executing program 1 (id=1654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'ovf\x00', 0x1, 0x10, 0x4}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xc6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) 25.321128671s ago: executing program 0 (id=1655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffaf, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x4, 0xd, 0x30, @empty, @private0, 0x80, 0x10, 0xffffffe7}}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c000100f600000000000000140003"], 0x114}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x24, 0x13, 0x1, 0x1, 0x0, "", [@nested={0x14, 0xc9, 0x0, 0x0, [@typed={0x5, 0x135, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0xbe, 0x0, 0x1, [@nested={0x4, 0x45}]}]}]}, 0x24}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x3, 0xfff, 0x49, @mcast2, @empty, 0x20, 0x10, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x9, 0x7, 0x32, @loopback, @mcast2, 0x8000, 0x700, 0x9, 0xb}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query], &(0x7f0000000380)='GPL\x00', 0xe2b, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, 0x0, r6, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r5, r2, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r7, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x10) unshare(0x6a040000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) close(r9) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) 25.080739435s ago: executing program 1 (id=1656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x800) socket(0x2c, 0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getpid() sendto(0xffffffffffffffff, &(0x7f0000000740)="120000", 0x3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060102000000000000000000001400078008001240000600000800084000000037130003ef676173883a6e65742c69666148650000050005000a00000005000400000000000900020073797a31000000000500010007000000"], 0x60}}, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 24.898626035s ago: executing program 3 (id=1657): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x1843}, 0x18) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, &(0x7f0000000000)="8823a5", 0x0}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078252000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000af8a0085000000cb000000950000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7d}, 0x94) 24.633149969s ago: executing program 1 (id=1658): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@netrom, @rose, @netrom, @bcast, @remote, @netrom, @netrom, @default]}, &(0x7f0000000180)=0x48) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000001c0)=0x3, 0x4) 24.626112927s ago: executing program 4 (id=1659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x110, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xffffffffffffffb9, &(0x7f0000000080)}}, 0x10) r1 = socket(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="030000001801238c09d0ff0f1d0dbd30", 0x10) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000980)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x40000003}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x4, 0x7, 0x56d}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16fc, 0x20000000}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x174}}, 0x0) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) (async) pipe(&(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x26, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f2fcffff10df2500"/20, @ANYRES32=0x0, @ANYBLOB="390902000360000008001b000000000008001e0000800000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x43, &(0x7f00000015c0)={'HL\x00'}, &(0x7f0000001600)=0x1e) 24.3928658s ago: executing program 1 (id=1660): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) unshare(0x22020400) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r4 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000180)=r4) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1}, 0x11) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700ff1f000f000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 24.348952309s ago: executing program 4 (id=1661): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="200025ad700006000000000005001300010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 24.190814507s ago: executing program 4 (id=1662): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1515, 0x2081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffe}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xf7}]}}}]}, 0x40}}, 0x28000000) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x73, &(0x7f0000000280)='/proc/net\x00\x00t4/c+\x0fG\xf9\xe1K\fX\a0\x04\x00\x00\x82D\x80\xa2EZ\xad}\\-\xd1\x96R\x91\xd7x\xb5\xfb\xc4N\xc7\xb3+\xb3qW\xa9\x83\x9b\x84\xbc\xe9\xc6$\x9b/\xda\x9d=P\xd1Xzk\xb5\x95\x18\xd7\xa8\xcc\x99v\x84hQ\xf1fZ\n\xb6\x02\xd5\xf1\xb4b\xa6\aM+\xc1\xe8\"\x0f\x89\xba\xb3\x06:a\xd335^x\xaf\x14\x82'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x24, 0x301, 0x70bd2a, 0xfffffffc, {0x1}, [@typed={0x7, 0x14e, 0x0, 0x0, @binary="4c9d95"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44857}, 0x4040004) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) 23.962912917s ago: executing program 3 (id=1663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000005c0)={0x20, "d3edbc2aa29f3ce96890d8db3434139f4d1155e31c667e0aa35f7041bca96c95615e17eef5a150fc1dec38feb8870078b39c600dfaf71ab8fea0af225bd723c15b430427ded165ff0b25a93a7f8749d6069b5379121acb02c81c3c3eb2b6b4894bdf2434dadf1d4d20ade0d2482ba4cc5ceeaa61fa3d6d84b3a7ef79df912f9b"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xffffffffffffffd6, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) (async, rerun: 64) sendto(r0, &(0x7f00000003c0)="9d013bc3fe289e43aef668170b7ad025d4a3015d506014bd519a01befee2bf562d285199734204383ee2f6428f394e8a2de30aacc735699a898bbf61b8eb03b671beeecdccc5f6e66642a78d7df582ff7f8fee2694deb43d966208dc84ed755522fa3cf1970bbca88f49f8350eb85a1545f393657090717c2520923c3eef5fea72a0f41ef81f1661768bb8c00bda3f55562e3999e9078793a1d3c846d5a3d18a4b83c8e36cff36126dd604b5b6165eabfa5ec08a6d946b1ef35e450d20eeee226cf617c9dbbe0f71e07b8e8b30c154f61e68f9dedae91c0e3c0e183674064f02abdabaa7ace7d41b92eb17fbf9519b8dfc7aa1c104", 0xf5, 0x4008000, &(0x7f00000000c0)=@in={0x2, 0x4e21, @remote}, 0x80) (async, rerun: 64) socket$inet6(0x10, 0x3, 0x0) 23.731502794s ago: executing program 3 (id=1664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2c}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf1, 0xa8, @random="fd215a17af4a9e105117a8c11101a64b9eabff451b7a9531b260e52c7341809c197006a3efb9366260a6b0c69269d761044967db194b5a183b11ea278a2c81b41b5834d033639462998ec10a59c936ff6ed7641a86055feb3f194e471cd1ad2eb7dde1e531ddb446f3d1f3bf6ee3ac9ce304a85fe16d8ba1c576863cd7a12fae2a3fff656a4847c045ea571abc2719293849a1fecfa09b5527ca028fae1f884f85c22b3d719119c9937bc9d79c8723cfd10b178a0ae1f365a22a94a2cdeb1e98bf06e30bfc880f7686833df69134d67ad403cda6b6929531bf6c8625a0912de2f6844323c37a67b23e64eaa56b"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8000}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}]}, 0x154}, 0x1, 0x0, 0x0, 0x8810}, 0x800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40004}, 0x20040005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xbc907efa44953c40}, 0x800) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r3) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x48}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240000c0}, 0x40000) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000880)={0x1030, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1030}, 0x1, 0x0, 0x0, 0x24048084}, 0x20000040) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r7, &(0x7f0000001940)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001980)=0x20) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000019c0)={0x8, 'syzkaller1\x00', {'hsr0\x00'}, 0xe6}) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f0000001a00), 0x4) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001a80), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001ac0)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000001bc0)={0x7, 'veth0_to_team\x00', {0x2}, 0x8}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001c00)={'vxcan0\x00', 0x0}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0}, &(0x7f0000001c80)=0xc) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001cc0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 0x4e21, 0xfffb, 0xa, 0x20, 0x80, 0x3a, r13, r14}, {0x80000001, 0xa, 0x5caa, 0x8, 0xf, 0x4, 0x0, 0x8}, {0x100, 0x1, 0x9b72, 0x9}, 0xfe33041, 0x6e6bbc, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x5}, 0x4d3, 0x32}, 0xa, @in6=@empty, 0x3503, 0x4, 0x3, 0x9, 0x0, 0xffffffff, 0x8}}, 0xe8) r15 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001e00), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000001ec0)={&(0x7f0000001dc0), 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x14, r15, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240008d6}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001fc0)={'syztnl2\x00', &(0x7f0000001f40)={'ip6tnl0\x00', 0x0, 0x29, 0x10, 0xd8, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8, 0x20, 0x34600f4b, 0x1}}) 23.730905379s ago: executing program 2 (id=1665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000100000053b66fbf91b4c6000000000000000000e8ff0100000002000000000000000000000a00000087000000718eeb856edf8478af65ae66b6b3dd8b5e46935e47508419fae424585e5429f0dc2351808ed8c3919d3c5ab767882682e5d2a3d144c619ee56bc6fe3e353ac7ebfb34bf38b97502cd96be8bb348ea5e7d0b37b368ed68b7c0e72", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0xb8}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x2}]}}]}, 0x44}}, 0x4000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff}}}, 0xb8}}, 0x80) (rerun: 64) 23.516646314s ago: executing program 3 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfff7fff6, 0xc03, 0x1ff, 0x5, 0x7, 0x6, 0x0, 0x0, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x325, '\x00', 0x0, 0x0}, 0x50) (async) unshare(0x22020600) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket(0x2, 0x80805, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000240)={r8, 0x2, 0x5, 0x6, 0x10, 0x9}, &(0x7f0000000280)=0x14) (async) unshare(0x22020600) r9 = socket(0x2, 0x3, 0x100000001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd86, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt(r9, 0xff, 0x9, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r11, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008051) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) 23.515438185s ago: executing program 4 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x2, {0x2}, {0x2}, 0xfe, 0xff}], 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) readv(r4, &(0x7f0000000300), 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0xe}, 0x48) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r6}, @nested={0x18, 0x16, 0x0, 0x1, [@typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@private0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 23.4662569s ago: executing program 2 (id=1668): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000060000002a1a037f00000000c24e2b8e2d4d9711278ef03fda261f51b9d73e392194c588be4530995439c7c96dcca189662adcac81e7fb805e61d8befc7953e7e7dabe79469a278f6e04267ba8f54a76baf5783e5ca8fce0711e9d2fe733", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x520, 0x318, 0xf0, 0xffffffff, 0x0, 0x318, 0x538, 0x538, 0xffffffff, 0x538, 0x538, 0x5, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 'geneve1\x00', 'gretap0\x00', {}, {0xff}, 0x32, 0x1}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x1}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @local, @multicast2, @icmp_id=0x66, @icmp_id=0x200}}}}, {{@ip={@private=0xa010100, @multicast1, 0xff000000, 0xffffffff, 'wg0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x32, 0x2}, 0x0, 0x1f0, 0x228, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x9}}, @common=@inet=@policy={{0x20}, {[{@ipv4=@rand_addr=0x64010102, [0xff000000, 0xffffff, 0xffffffff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 0x4d4, 0x3504, 0x32, 0x0, 0x4, 0x18}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1f}, [0xffffff00, 0x1fe0000ff, 0x0, 0xff], 0x4d3, 0x0, 0xa, 0x0, 0x0, 0x11}, {@ipv6=@empty, [0xff, 0xff000000, 0xffffff00, 0xff000000], @ipv4=@empty, [0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x4d2, 0x3505, 0x16, 0x1, 0x5, 0x2}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x39}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4d5, 0x0, 0x28, 0x1, 0x7}], 0x8}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @broadcast, @rand_addr=0x64010100, @gre_key=0x9, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @multicast1, @private=0xa010101, @port=0x4e24, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x2, 0x0, 0x0, 0x6, 0x1], 0x2, 0x3}, {0x4, [0x6, 0x6, 0x0, 0x1, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}, {0x40, 0x83, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x92, 0x9, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @empty, 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000040)={r6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x4, 0x3}, 0x8) 23.248753768s ago: executing program 2 (id=1669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 23.20163454s ago: executing program 1 (id=1670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791018000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xfce) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xf8e6, 0xa599, 0xff, 0x7f, 0x5, 0x8e4}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f0000000040)=0x2, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 18.980599516s ago: executing program 3 (id=1671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ae27ffb703000008000200b7c84ea516a6f72d01fb040000400000000000000000000062e1a1dd880b75d83eaa1ea7f813803cd74c69326b0da6ef4b3f7c7548dde7cefdf5afc78b815102751e64f3d1fb77a0e9a5f928f16e94f3865b78a3422a5bee195a79a47963aca1c3cc9c35c863149b2e5028169b04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000f9ffffffffffffff00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES8=r1], 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) close(r6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x2}]}, @fwd={0x8}]}, {0x0, [0x30, 0x2e, 0x30, 0x2e, 0x5f, 0x61, 0x61, 0x61]}}, 0x0, 0x42, 0x0, 0x1, 0x31}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000002c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x4000010) accept$packet(r8, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r11 = socket$isdn(0x22, 0x3, 0x26) getsockopt$bt_hci(r11, 0x0, 0x3, &(0x7f0000000580)=""/156, &(0x7f0000000200)=0x9c) 8.671786751s ago: executing program 32 (id=1655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffaf, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x4, 0xd, 0x30, @empty, @private0, 0x80, 0x10, 0xffffffe7}}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c000100f600000000000000140003"], 0x114}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x24, 0x13, 0x1, 0x1, 0x0, "", [@nested={0x14, 0xc9, 0x0, 0x0, [@typed={0x5, 0x135, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0xbe, 0x0, 0x1, [@nested={0x4, 0x45}]}]}]}, 0x24}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x3, 0xfff, 0x49, @mcast2, @empty, 0x20, 0x10, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x9, 0x7, 0x32, @loopback, @mcast2, 0x8000, 0x700, 0x9, 0xb}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query], &(0x7f0000000380)='GPL\x00', 0xe2b, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, 0x0, r6, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r5, r2, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r7, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x10) unshare(0x6a040000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) close(r9) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) 5.376722801s ago: executing program 33 (id=1670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791018000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xfce) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xf8e6, 0xa599, 0xff, 0x7f, 0x5, 0x8e4}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f0000000040)=0x2, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 3.859300125s ago: executing program 34 (id=1669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 1.990994074s ago: executing program 35 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x2, {0x2}, {0x2}, 0xfe, 0xff}], 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) readv(r4, &(0x7f0000000300), 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0xe}, 0x48) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r6}, @nested={0x18, 0x16, 0x0, 0x1, [@typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@private0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 36 (id=1671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ae27ffb703000008000200b7c84ea516a6f72d01fb040000400000000000000000000062e1a1dd880b75d83eaa1ea7f813803cd74c69326b0da6ef4b3f7c7548dde7cefdf5afc78b815102751e64f3d1fb77a0e9a5f928f16e94f3865b78a3422a5bee195a79a47963aca1c3cc9c35c863149b2e5028169b04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000f9ffffffffffffff00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES8=r1], 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) close(r6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x2}]}, @fwd={0x8}]}, {0x0, [0x30, 0x2e, 0x30, 0x2e, 0x5f, 0x61, 0x61, 0x61]}}, 0x0, 0x42, 0x0, 0x1, 0x31}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000002c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x4000010) accept$packet(r8, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r11 = socket$isdn(0x22, 0x3, 0x26) getsockopt$bt_hci(r11, 0x0, 0x3, &(0x7f0000000580)=""/156, &(0x7f0000000200)=0x9c) kernel console output (not intermixed with test programs): n, please check. [ 110.354733][ T6511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.138'. [ 110.390666][ T6511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.138'. [ 110.482020][ T6511] bridge0: port 3(dummy0) entered disabled state [ 110.488745][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.496562][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.639528][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.660700][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.796883][ T6511] veth1_to_hsr: left allmulticast mode [ 110.810580][ T1092] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.830374][ T1092] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.921390][ T1092] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.952520][ T1092] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.971975][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 111.001699][ T6529] syzkaller0: entered promiscuous mode [ 111.016593][ T6529] syzkaller0: entered allmulticast mode [ 111.076981][ T1092] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.143473][ T1092] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.202777][ T1092] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.403987][ T1092] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.479664][ T6553] netlink: 'syz.2.147': attribute type 10 has an invalid length. [ 111.490606][ T6564] tipc: Started in network mode [ 111.495723][ T6564] tipc: Node identity da47697d60a1, cluster identity 4711 [ 111.511035][ T6564] tipc: Enabled bearer , priority 0 [ 111.523909][ T6553] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.562748][ T6564] syzkaller0: entered promiscuous mode [ 111.568294][ T6564] syzkaller0: entered allmulticast mode [ 111.594588][ T6564] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 111.638391][ T6564] tipc: Resetting bearer [ 111.666781][ T6562] tipc: Resetting bearer [ 111.705082][ T6562] tipc: Disabling bearer [ 112.288974][ T6608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 112.290566][ T6571] IPVS: set_ctl: invalid protocol: 175 255.255.255.255:20002 [ 112.309962][ T5826] IPVS: starting estimator thread 0... [ 112.401405][ T6612] IPVS: using max 26 ests per chain, 62400 per kthread [ 112.592383][ T6628] syz_tun: entered allmulticast mode [ 112.603850][ T6627] syz_tun: left allmulticast mode [ 112.767087][ T6633] Illegal XDP return value 4294967274 on prog (id 57) dev syz_tun, expect packet loss! [ 113.132569][ T6658] netlink: 'syz.2.172': attribute type 5 has an invalid length. [ 113.181862][ T6661] dummy0: entered promiscuous mode [ 113.201561][ T6661] macsec1: entered promiscuous mode [ 113.263331][ T6661] dummy0: left promiscuous mode [ 113.317865][ T6668] FAULT_INJECTION: forcing a failure. [ 113.317865][ T6668] name failslab, interval 1, probability 0, space 0, times 1 [ 113.324220][ T6670] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 113.359160][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT(full) [ 113.359188][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.359209][ T6668] Call Trace: [ 113.359218][ T6668] [ 113.359228][ T6668] dump_stack_lvl+0x189/0x250 [ 113.359263][ T6668] ? __pfx____ratelimit+0x10/0x10 [ 113.359289][ T6668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.359311][ T6668] ? __pfx__printk+0x10/0x10 [ 113.359339][ T6668] ? __pfx___might_resched+0x10/0x10 [ 113.359360][ T6668] ? fs_reclaim_acquire+0x7d/0x100 [ 113.359398][ T6668] should_fail_ex+0x414/0x560 [ 113.359430][ T6668] should_failslab+0xa8/0x100 [ 113.359452][ T6668] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 113.359484][ T6668] ? page_pool_create_percpu+0x76/0xbc0 [ 113.359520][ T6668] page_pool_create_percpu+0x76/0xbc0 [ 113.359550][ T6668] ? bpf_test_run_xdp_live+0x1bf/0x1b20 [ 113.359581][ T6668] bpf_test_run_xdp_live+0x1d4/0x1b20 [ 113.359605][ T6668] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 113.359642][ T6668] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 113.359678][ T6668] ? synchronize_rcu+0x11a/0x310 [ 113.359703][ T6668] ? __pfx_synchronize_rcu+0x10/0x10 [ 113.359733][ T6668] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 113.359768][ T6668] ? 0xffffffffa02057c0 [ 113.359813][ T6668] ? 0xffffffffa020378c [ 113.359862][ T6668] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 113.359907][ T6668] ? _copy_from_user+0x94/0xb0 [ 113.359928][ T6668] ? bpf_test_init+0x113/0x150 [ 113.359947][ T6668] ? xdp_convert_md_to_buff+0x5b/0x330 [ 113.359973][ T6668] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 113.360012][ T6668] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 113.360041][ T6668] ? __fget_files+0x2a/0x420 [ 113.360067][ T6668] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 113.360091][ T6668] bpf_prog_test_run+0x2c7/0x340 [ 113.360118][ T6668] __sys_bpf+0x562/0x860 [ 113.360141][ T6668] ? __pfx___sys_bpf+0x10/0x10 [ 113.360180][ T6668] ? ksys_write+0x22a/0x250 [ 113.360213][ T6668] ? __pfx_ksys_write+0x10/0x10 [ 113.360251][ T6668] __x64_sys_bpf+0x7c/0x90 [ 113.360283][ T6668] do_syscall_64+0xfa/0xfa0 [ 113.360308][ T6668] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.360334][ T6668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.360357][ T6668] ? clear_bhb_loop+0x60/0xb0 [ 113.360383][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.360404][ T6668] RIP: 0033:0x7f9f3498eec9 [ 113.360423][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.360441][ T6668] RSP: 002b:00007f9f357d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.360473][ T6668] RAX: ffffffffffffffda RBX: 00007f9f34be5fa0 RCX: 00007f9f3498eec9 [ 113.360488][ T6668] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 113.360502][ T6668] RBP: 00007f9f357d5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.360515][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.360527][ T6668] R13: 00007f9f34be6038 R14: 00007f9f34be5fa0 R15: 00007ffd74fbea48 [ 113.360563][ T6668] [ 113.882782][ T6687] __nla_validate_parse: 157 callbacks suppressed [ 113.882805][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.179'. [ 113.935581][ T6688] netlink: 'syz.3.180': attribute type 1 has an invalid length. [ 113.954221][ T6690] netlink: 'syz.3.180': attribute type 1 has an invalid length. [ 114.149362][ T6688] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.159403][ T6690] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.185939][ T6694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.179'. [ 114.629295][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'. [ 114.681253][ T6733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.189'. [ 115.050346][ T6755] vxcan1: entered allmulticast mode [ 115.072773][ T6755] vxcan1: left allmulticast mode [ 115.180926][ T6755] raw_sendmsg: syz.2.193 forgot to set AF_INET. Fix it! [ 115.331588][ T6768] netlink: 'syz.2.198': attribute type 15 has an invalid length. [ 115.354632][ T6769] RDS: rds_bind could not find a transport for fe80::10, load rds_tcp or rds_rdma? [ 115.371590][ T6767] netlink: 'syz.2.198': attribute type 15 has an invalid length. [ 116.113507][ T6757] syz.3.191 (6757) used greatest stack depth: 17832 bytes left [ 117.569640][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 117.797086][ T6834] Bluetooth: MGMT ver 1.23 [ 118.660393][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 118.718224][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 118.919917][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.229'. [ 119.159952][ T6903] netlink: 'syz.1.233': attribute type 10 has an invalid length. [ 119.172717][ T6903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.233'. [ 119.192185][ T6903] dummy0: entered promiscuous mode [ 119.207163][ T6903] bridge0: port 3(dummy0) entered blocking state [ 119.218797][ T6903] bridge0: port 3(dummy0) entered disabled state [ 119.226683][ T6903] dummy0: entered allmulticast mode [ 119.236736][ T6903] bridge0: port 3(dummy0) entered blocking state [ 119.243300][ T6903] bridge0: port 3(dummy0) entered forwarding state [ 119.414030][ T6914] delete_channel: no stack [ 119.443761][ T6914] delete_channel: no stack [ 119.508731][ T6915] xt_TCPMSS: Only works on TCP SYN packets [ 120.036601][ T6905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.067568][ T6905] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 120.192823][ T6905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.225411][ T6905] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 120.804663][ T6905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.823024][ T6905] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 120.912069][ T6905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.918567][ T6905] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 121.198587][ T6991] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 121.770110][ T7003] netlink: 84 bytes leftover after parsing attributes in process `syz.2.252'. [ 121.980193][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 123.125292][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 123.134826][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 124.002717][ T7111] netlink: 'syz.2.266': attribute type 20 has an invalid length. [ 124.397096][ T7130] batadv_slave_0: entered promiscuous mode [ 124.419202][ T7129] batadv_slave_0: left promiscuous mode [ 124.457695][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 124.483502][ T7134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.269'. [ 124.508157][ T7134] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 124.646590][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.273'. [ 124.745717][ T7146] netlink: 'syz.0.275': attribute type 39 has an invalid length. [ 124.865637][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 125.239870][ T7156] tipc: Started in network mode [ 125.245545][ T7156] tipc: Node identity c2aa, cluster identity 2 [ 125.253135][ T7156] tipc: Node number set to 49834 [ 125.276926][ T7156] tipc: Cannot configure node identity twice [ 125.285169][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 125.724695][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 125.804106][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.282'. [ 126.137142][ T7198] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 126.153143][ T7198] nbd: error processing sock list [ 126.990697][ T7243] sctp: [Deprecated]: syz.2.300 (pid 7243) Use of int in max_burst socket option deprecated. [ 126.990697][ T7243] Use struct sctp_assoc_value instead [ 127.539069][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'. [ 127.826847][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 127.980756][ T7288] netlink: 'syz.3.309': attribute type 10 has an invalid length. [ 127.988809][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.309'. [ 127.998204][ T7288] dummy0: entered promiscuous mode [ 128.004633][ T7288] bridge0: port 3(dummy0) entered blocking state [ 128.011250][ T7288] bridge0: port 3(dummy0) entered disabled state [ 128.020478][ T7288] dummy0: entered allmulticast mode [ 128.028771][ T7288] bridge0: port 3(dummy0) entered blocking state [ 128.035349][ T7288] bridge0: port 3(dummy0) entered forwarding state [ 128.214454][ T7300] netlink: 'syz.3.311': attribute type 6 has an invalid length. [ 128.237365][ T7300] netlink: 'syz.3.311': attribute type 6 has an invalid length. [ 128.396027][ T7310] dummy0: left allmulticast mode [ 128.411587][ T7310] bridge0: port 3(dummy0) entered disabled state [ 128.447315][ T7310] bridge_slave_0: left allmulticast mode [ 128.465100][ T7310] bridge_slave_0: left promiscuous mode [ 128.480530][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.530013][ T7310] bridge_slave_1: left allmulticast mode [ 128.539925][ T7310] bridge_slave_1: left promiscuous mode [ 128.546339][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.574217][ T7310] bond0: (slave bond_slave_0): Releasing backup interface [ 128.607399][ T7310] bond0: (slave bond_slave_1): Releasing backup interface [ 128.637405][ T7310] team0: Port device team_slave_0 removed [ 128.670680][ T7310] team0: Port device team_slave_1 removed [ 128.678176][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.686256][ T7310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.697710][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.707198][ T7310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.716976][ T7310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.742858][ T7314] lo speed is unknown, defaulting to 1000 [ 128.798969][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.808113][ T7318] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.826143][ T7318] bridge0: port 3(dummy0) entered blocking state [ 128.832883][ T7318] bridge0: port 3(dummy0) entered forwarding state [ 128.846413][ T7318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.941657][ T7314] lo speed is unknown, defaulting to 1000 [ 129.011551][ T7314] lo speed is unknown, defaulting to 1000 [ 129.182208][ T7348] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.280626][ T7349] pim6reg: entered allmulticast mode [ 129.503647][ T7314] infiniband syz0: set active [ 129.509865][ T5899] lo speed is unknown, defaulting to 1000 [ 129.516949][ T7314] infiniband syz0: added lo [ 129.529264][ T7314] syz0: rxe_create_cq: returned err = -12 [ 129.540496][ T7314] infiniband syz0: Couldn't create ib_mad CQ [ 129.547368][ T7314] infiniband syz0: Couldn't open port 1 [ 129.595835][ T7314] RDS/IB: syz0: added [ 129.600637][ T7314] smc: adding ib device syz0 with port count 1 [ 129.608686][ T7314] smc: ib device syz0 port 1 has no pnetid [ 129.617326][ T5899] lo speed is unknown, defaulting to 1000 [ 129.628941][ T7314] lo speed is unknown, defaulting to 1000 [ 129.852413][ T7373] __nla_validate_parse: 4 callbacks suppressed [ 129.852434][ T7373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.329'. [ 129.927849][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 129.933558][ T7379] tipc: Enabled bearer , priority 0 [ 130.017602][ T7379] syzkaller0: MTU too low for tipc bearer [ 130.042384][ T7379] tipc: Disabling bearer [ 130.074586][ T7314] lo speed is unknown, defaulting to 1000 [ 130.084075][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 130.226176][ T7389] sctp: [Deprecated]: syz.4.335 (pid 7389) Use of int in max_burst socket option. [ 130.226176][ T7389] Use struct sctp_assoc_value instead [ 130.273093][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 130.429514][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 130.649488][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 130.794690][ T7314] lo speed is unknown, defaulting to 1000 [ 131.244908][ T7413] lo speed is unknown, defaulting to 1000 [ 131.322183][ T7438] tipc: Enabled bearer , priority 0 [ 131.329906][ T7438] syzkaller0: entered promiscuous mode [ 131.335773][ T7438] syzkaller0: entered allmulticast mode [ 131.353905][ T7407] lec:lec_atm_close: lec0: Shut down! [ 131.364352][ T7438] tipc: Resetting bearer [ 131.401608][ T7437] tipc: Resetting bearer [ 131.416632][ T7437] tipc: Disabling bearer [ 131.543766][ T7418] lo speed is unknown, defaulting to 1000 [ 131.628712][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.349'. [ 131.640424][ T7446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.349'. [ 131.746768][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 132.001387][ T7314] lo speed is unknown, defaulting to 1000 [ 132.343790][ T7460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.353'. [ 132.367600][ T7441] lo speed is unknown, defaulting to 1000 [ 132.559021][ T7314] lo speed is unknown, defaulting to 1000 [ 133.583076][ T7484] lo speed is unknown, defaulting to 1000 [ 134.114768][ T7510] netlink: 'syz.4.366': attribute type 14 has an invalid length. [ 134.144222][ T7510] netlink: 'syz.4.366': attribute type 13 has an invalid length. [ 134.383549][ T7519] netlink: 'syz.2.371': attribute type 5 has an invalid length. [ 134.404529][ T7515] lo speed is unknown, defaulting to 1000 [ 135.117357][ T7542] __nla_validate_parse: 5 callbacks suppressed [ 135.117376][ T7542] netlink: 140 bytes leftover after parsing attributes in process `syz.0.376'. [ 135.368096][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 135.963208][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 136.002741][ T7584] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 136.012422][ T7588] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.113613][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 136.135043][ T7598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'. [ 136.251026][ T7603] vlan0: entered promiscuous mode [ 136.628027][ T7614] syzkaller0: entered promiscuous mode [ 136.633689][ T7614] syzkaller0: entered allmulticast mode [ 136.779273][ T7621] lo speed is unknown, defaulting to 1000 [ 137.028001][ T7636] netlink: 'syz.0.395': attribute type 4 has an invalid length. [ 137.036045][ T7636] netlink: 'syz.0.395': attribute type 4 has an invalid length. [ 137.176441][ T7639] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.397'. [ 137.487610][ T7618] lec:lec_atm_close: lec0: Shut down! [ 137.520662][ T7653] lo speed is unknown, defaulting to 1000 [ 137.896631][ T7675] netlink: 36 bytes leftover after parsing attributes in process `syz.4.405'. [ 138.046061][ T7682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.407'. [ 138.106088][ T7680] lo speed is unknown, defaulting to 1000 [ 138.197063][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.208899][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.588340][ T7686] lo speed is unknown, defaulting to 1000 [ 139.058256][ T7699] net veth1_virt_wifi : renamed from virt_wifi0 [ 139.399630][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 140.057492][ T7732] bridge0: entered promiscuous mode [ 140.090799][ T7732] vlan2: entered promiscuous mode [ 140.604448][ T7750] sctp: [Deprecated]: syz.0.424 (pid 7750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.604448][ T7750] Use struct sctp_sack_info instead [ 140.605107][ T7748] netlink: 48 bytes leftover after parsing attributes in process `syz.3.423'. [ 140.703563][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 140.769277][ T7748] netlink: 'syz.3.423': attribute type 2 has an invalid length. [ 140.782121][ T7750] sctp: [Deprecated]: syz.0.424 (pid 7750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.782121][ T7750] Use struct sctp_sack_info instead [ 140.913920][ T7760] IPVS: Unknown mcast interface: netpci0 [ 141.642960][ T7801] netlink: 'syz.4.436': attribute type 10 has an invalid length. [ 141.668658][ T7801] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 141.704129][ T7801] netlink: 'syz.4.436': attribute type 10 has an invalid length. [ 141.741584][ T7802] lo speed is unknown, defaulting to 1000 [ 141.789955][ T7808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.439'. [ 141.818459][ T7809] bond1: entered promiscuous mode [ 141.843278][ T7809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.856714][ T7814] Cannot find add_set index 2 as target [ 142.227587][ T7822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.252533][ T7822] bridge0: port 3(bond1) entered blocking state [ 142.258960][ T7822] bridge0: port 3(bond1) entered disabled state [ 142.281628][ T7822] bond1: entered allmulticast mode [ 142.289554][ T7822] bond1: entered promiscuous mode [ 142.312312][ T7822] bridge0: port 3(bond1) entered blocking state [ 142.318941][ T7822] bridge0: port 3(bond1) entered forwarding state [ 142.728027][ T7577] bridge0: port 3(bond1) entered disabled state [ 143.051053][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 143.097696][ T7862] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 143.128703][ T7853] tipc: Started in network mode [ 143.135882][ T7853] tipc: Node identity ce6f5ebed885, cluster identity 4711 [ 143.153374][ T7853] tipc: Enabled bearer , priority 0 [ 143.155103][ T7862] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 143.165029][ T7853] syzkaller0: entered promiscuous mode [ 143.188962][ T7853] syzkaller0: entered allmulticast mode [ 143.312142][ T7853] tipc: Resetting bearer [ 143.344517][ T7853] netlink: 4928 bytes leftover after parsing attributes in process `syz.1.450'. [ 143.398447][ T7864] IPVS: persistence engine module ip_vs_pe_ not found [ 143.403454][ T7871] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 143.627829][ T7887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.711061][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.732484][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.746726][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.757402][ T7844] tipc: Resetting bearer [ 143.789781][ T7844] tipc: Disabling bearer [ 143.807450][ T7891] netlink: 'syz.0.461': attribute type 5 has an invalid length. [ 143.892599][ T7897] lo speed is unknown, defaulting to 1000 [ 144.624784][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 144.655236][ T7928] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 144.799992][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 145.503804][ T7973] netlink: 'syz.0.480': attribute type 4 has an invalid length. [ 145.632472][ T7982] __nla_validate_parse: 6 callbacks suppressed [ 145.632491][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 145.634110][ T7981] vlan3: entered allmulticast mode [ 145.757136][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 145.827104][ T5891] IPVS: starting estimator thread 0... [ 145.921473][ T7993] IPVS: using max 28 ests per chain, 67200 per kthread [ 145.961684][ T7994] netlink: 52 bytes leftover after parsing attributes in process `syz.1.485'. [ 146.118330][ T8004] netlink: 277 bytes leftover after parsing attributes in process `syz.4.489'. [ 146.276028][ T8013] dvmrp8: entered allmulticast mode [ 146.319454][ T8013] lo speed is unknown, defaulting to 1000 [ 146.613070][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 146.872427][ T8039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.498'. [ 147.090665][ T8011] dvmrp8: left allmulticast mode [ 147.282232][ T8051] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 147.292546][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 147.305821][ T30] audit: type=1800 audit(1760127901.008:2): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.501" name="@" dev="tmpfs" ino=482 res=0 errno=0 [ 147.478390][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 147.718005][ T8060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.729049][ T8069] netlink: 80 bytes leftover after parsing attributes in process `syz.2.506'. [ 147.914421][ T8061] netlink: 'syz.3.503': attribute type 16 has an invalid length. [ 147.931667][ T8061] netlink: 'syz.3.503': attribute type 17 has an invalid length. [ 147.948228][ T8060] bond2 (unregistering): Released all slaves [ 147.970091][ T8066] bridge_slave_0: left allmulticast mode [ 147.975959][ T8066] bridge_slave_0: left promiscuous mode [ 147.981942][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.991199][ T8066] bridge_slave_1: left allmulticast mode [ 147.998770][ T8066] bridge_slave_1: left promiscuous mode [ 148.011621][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.029717][ T8066] bond0: (slave bond_slave_0): Releasing backup interface [ 148.040387][ T8066] bond0: (slave bond_slave_1): Releasing backup interface [ 148.052141][ T8066] team0: Port device team_slave_0 removed [ 148.060159][ T8066] team0: Port device team_slave_1 removed [ 148.066547][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.076206][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.085397][ T8066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.145302][ T8061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.180999][ T8078] veth1_to_batadv: entered promiscuous mode [ 148.188088][ T8078] veth1_to_batadv: entered allmulticast mode [ 148.201093][ T8085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.511'. [ 148.355518][ T8085] lo speed is unknown, defaulting to 1000 [ 148.383619][ T8090] syzkaller1: entered promiscuous mode [ 148.401488][ T8090] syzkaller1: entered allmulticast mode [ 148.934953][ T8107] lo speed is unknown, defaulting to 1000 [ 149.478832][ T8132] bridge2: entered allmulticast mode [ 149.919312][ T8140] netem: change failed [ 150.163251][ T8147] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 150.179476][ T8144] ipt_REJECT: TCP_RESET invalid for non-tcp [ 150.487424][ T8157] syz.0.528: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 150.571837][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.0.528 Not tainted syzkaller #0 PREEMPT(full) [ 150.571867][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.571880][ T8157] Call Trace: [ 150.571889][ T8157] [ 150.571898][ T8157] dump_stack_lvl+0x189/0x250 [ 150.571930][ T8157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.571954][ T8157] ? __pfx__printk+0x10/0x10 [ 150.571977][ T8157] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 150.572008][ T8157] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 150.572040][ T8157] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 150.572074][ T8157] warn_alloc+0x214/0x310 [ 150.572113][ T8157] ? __pfx_warn_alloc+0x10/0x10 [ 150.572156][ T8157] ? __get_vm_area_node+0x28f/0x300 [ 150.572186][ T8157] ? xskq_create+0xbf/0x170 [ 150.572216][ T8157] __vmalloc_node_range_noprof+0x690/0x12d0 [ 150.572282][ T8157] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 150.572318][ T8157] ? __kasan_kmalloc+0x93/0xb0 [ 150.572357][ T8157] vmalloc_user_noprof+0xad/0xf0 [ 150.572389][ T8157] ? xskq_create+0xbf/0x170 [ 150.572414][ T8157] xskq_create+0xbf/0x170 [ 150.572442][ T8157] xsk_init_queue+0xb0/0x110 [ 150.572470][ T8157] xsk_setsockopt+0x57b/0x8d0 [ 150.572495][ T8157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 150.572521][ T8157] ? __pfx_aa_sk_perm+0x10/0x10 [ 150.572560][ T8157] ? aa_sock_opt_perm+0xff/0x1b0 [ 150.572595][ T8157] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 150.572615][ T8157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 150.572639][ T8157] do_sock_setsockopt+0x179/0x1b0 [ 150.572670][ T8157] __x64_sys_setsockopt+0x13f/0x1b0 [ 150.572701][ T8157] do_syscall_64+0xfa/0xfa0 [ 150.572726][ T8157] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.572752][ T8157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.572773][ T8157] ? clear_bhb_loop+0x60/0xb0 [ 150.572800][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.572821][ T8157] RIP: 0033:0x7f9f3498eec9 [ 150.572840][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.572858][ T8157] RSP: 002b:00007f9f357b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.572880][ T8157] RAX: ffffffffffffffda RBX: 00007f9f34be6090 RCX: 00007f9f3498eec9 [ 150.572895][ T8157] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 150.572907][ T8157] RBP: 00007f9f34a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 150.572919][ T8157] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 150.572932][ T8157] R13: 00007f9f34be6128 R14: 00007f9f34be6090 R15: 00007ffd74fbea48 [ 150.572966][ T8157] [ 150.572989][ T8157] Mem-Info: [ 150.842551][ T8157] active_anon:5728 inactive_anon:0 isolated_anon:0 [ 150.842551][ T8157] active_file:3208 inactive_file:39897 isolated_file:0 [ 150.842551][ T8157] unevictable:2293 dirty:46 writeback:0 [ 150.842551][ T8157] slab_reclaimable:11484 slab_unreclaimable:96052 [ 150.842551][ T8157] mapped:30565 shmem:4152 pagetables:944 [ 150.842551][ T8157] sec_pagetables:0 bounce:0 [ 150.842551][ T8157] kernel_misc_reclaimable:0 [ 150.842551][ T8157] free:1323046 free_pcp:17249 free_cma:0 [ 150.893082][ T8157] Node 0 active_anon:23412kB inactive_anon:0kB active_file:12832kB inactive_file:159384kB unevictable:7636kB isolated(anon):0kB isolated(file):0kB mapped:122260kB dirty:180kB writeback:0kB shmem:15072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12088kB pagetables:3636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.929337][ T8157] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.993040][ T8157] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.123679][ T8157] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 151.145327][ T8157] Node 0 DMA32 free:1384140kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24212kB inactive_anon:0kB active_file:12832kB inactive_file:159400kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:53400kB local_pcp:26152kB free_cma:0kB [ 151.232459][ T8157] lowmem_reserve[]: 0 0 1 1 1 [ 151.237341][ T8182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'. [ 151.246643][ T8177] lo speed is unknown, defaulting to 1000 [ 151.266734][ T8157] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.316995][ T8184] netlink: 'syz.2.533': attribute type 3 has an invalid length. [ 151.319882][ T8185] bridge0: port 4(erspan0) entered blocking state [ 151.341511][ T8157] lowmem_reserve[]: 0 0 0 0 0 [ 151.346397][ T8157] Node 1 Normal free:3893760kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19008kB local_pcp:5344kB free_cma:0kB [ 151.356139][ T8185] bridge0: port 4(erspan0) entered disabled state [ 151.422203][ T8185] erspan0: entered allmulticast mode [ 151.429235][ T8157] lowmem_reserve[]: 0 0 0 0 0 [ 151.435269][ T8157] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.443429][ T8185] erspan0: entered promiscuous mode [ 151.449215][ T8157] Node 0 DMA32: 266*4kB (UME) 341*8kB (ME) 137*16kB (UME) 30*32kB (UME) 131*64kB (UM) 29*128kB (UM) 9*256kB (UM) 6*512kB (UME) 12*1024kB (UME) 5*2048kB (UM) 325*4096kB (UM) = 1378144kB [ 151.473622][ T8157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 151.503458][ T8185] bridge0: port 4(erspan0) entered blocking state [ 151.510365][ T8185] bridge0: port 4(erspan0) entered forwarding state [ 151.550490][ T8187] erspan0: left allmulticast mode [ 151.555768][ T8157] Node 1 Normal: 176*4kB (UE) 36*8kB (UME) 34*16kB (UME) 60*32kB (UME) 24*64kB (UME) 9*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3893760kB [ 151.584725][ T8187] erspan0: left promiscuous mode [ 151.591156][ T8187] bridge0: port 4(erspan0) entered disabled state [ 151.600154][ T8157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.632544][ T8157] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.660353][ T8191] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 151.663168][ T8157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.667295][ T8191] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 151.682435][ T8157] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.752959][ T8157] 44453 total pagecache pages [ 151.777715][ T8157] 0 pages in swap cache [ 151.787058][ T8157] Free swap = 124996kB [ 151.792623][ T8157] Total swap = 124996kB [ 151.797047][ T8157] 2097051 pages RAM [ 151.800948][ T8157] 0 pages HighMem/MovableOnly [ 151.840014][ T8157] 424543 pages reserved [ 151.845142][ T8157] 0 pages cma reserved [ 151.953359][ T8206] netlink: 'syz.4.537': attribute type 96 has an invalid length. [ 151.975710][ T10] IPVS: starting estimator thread 0... [ 152.094409][ T8207] IPVS: using max 25 ests per chain, 60000 per kthread [ 152.335167][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 152.562265][ T8224] netlink: 'syz.0.543': attribute type 13 has an invalid length. [ 152.787536][ T8224] bridge0: port 3(dummy0) entered disabled state [ 153.533220][ T5826] lo speed is unknown, defaulting to 1000 [ 153.539114][ T5826] syz0: Port: 1 Link DOWN [ 154.247679][ T5891] lo speed is unknown, defaulting to 1000 [ 154.664819][ T8248] lo speed is unknown, defaulting to 1000 [ 154.971206][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 155.089162][ T8249] lo speed is unknown, defaulting to 1000 [ 157.567919][ T8338] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 157.692338][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'. [ 157.693651][ T8343] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.712715][ T8343] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 157.785561][ T8338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.398342][ T8361] lo speed is unknown, defaulting to 1000 [ 158.418746][ T8374] netlink: 124 bytes leftover after parsing attributes in process `syz.3.574'. [ 159.526400][ T8392] netlink: 68 bytes leftover after parsing attributes in process `syz.4.580'. [ 159.604238][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 159.702810][ T8396] syzkaller0: entered promiscuous mode [ 159.709583][ T8396] syzkaller0: entered allmulticast mode [ 159.905173][ T8410] lo speed is unknown, defaulting to 1000 [ 160.003914][ T8416] netlink: 'syz.3.585': attribute type 2 has an invalid length. [ 160.114173][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.585'. [ 160.461091][ T8223] Set syz1 is full, maxelem 65536 reached [ 160.581860][ T8425] delete_channel: no stack [ 160.584732][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'. [ 160.741852][ T8428] x_tables: duplicate underflow at hook 2 [ 160.807147][ T8426] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 160.886674][ T8426] bond2 (unregistering): Released all slaves [ 161.136447][ T8452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.594'. [ 161.469630][ T8465] lo speed is unknown, defaulting to 1000 [ 162.493875][ T8519] lo speed is unknown, defaulting to 1000 [ 162.553827][ T8525] tap0: tun_chr_ioctl cmd 1074025678 [ 162.569508][ T8525] tap0: group set to 0 [ 162.594817][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 162.681891][ T8531] syzkaller0: entered promiscuous mode [ 162.687772][ T8531] syzkaller0: entered allmulticast mode [ 162.696334][ T8529] tipc: Enabled bearer , priority 0 [ 162.703831][ T8532] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 162.735005][ T8527] tipc: Resetting bearer [ 162.758729][ T8527] tipc: Disabling bearer [ 162.775332][ T8535] netlink: 'syz.3.615': attribute type 4 has an invalid length. [ 162.933540][ T8540] netlink: 'syz.0.618': attribute type 2 has an invalid length. [ 162.941712][ T8540] netlink: 'syz.0.618': attribute type 2 has an invalid length. [ 162.945301][ T8539] syz_tun: entered allmulticast mode [ 162.992494][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 163.025572][ T8539] syz_tun (unregistering): left allmulticast mode [ 163.075979][ T8540] lo speed is unknown, defaulting to 1000 [ 163.374842][ T8549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.619'. [ 163.386173][ T8557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.620'. [ 163.552779][ T8563] --map-set only usable from mangle table [ 164.085207][ T8567] lo speed is unknown, defaulting to 1000 [ 164.085421][ T8578] tipc: Enabled bearer , priority 0 [ 164.098689][ T8574] syzkaller0: entered promiscuous mode [ 164.111580][ T8574] syzkaller0: entered allmulticast mode [ 164.152654][ T8574] tipc: Resetting bearer [ 164.158586][ T8574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.166967][ T8574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.189948][ T8573] tipc: Resetting bearer [ 164.231223][ T8573] tipc: Disabling bearer [ 164.602351][ T8592] netlink: 'syz.4.627': attribute type 4 has an invalid length. [ 164.622880][ T8593] netlink: 176 bytes leftover after parsing attributes in process `syz.1.626'. [ 165.000683][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 165.038710][ T8565] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 165.277978][ T8568] gretap1: entered allmulticast mode [ 165.458113][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 166.827505][ T8653] lo speed is unknown, defaulting to 1000 [ 167.189849][ T8676] FAULT_INJECTION: forcing a failure. [ 167.189849][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.230459][ T8676] CPU: 1 UID: 0 PID: 8676 Comm: syz.1.648 Not tainted syzkaller #0 PREEMPT(full) [ 167.230491][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.230505][ T8676] Call Trace: [ 167.230513][ T8676] [ 167.230523][ T8676] dump_stack_lvl+0x189/0x250 [ 167.230552][ T8676] ? __pfx____ratelimit+0x10/0x10 [ 167.230578][ T8676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.230601][ T8676] ? __pfx__printk+0x10/0x10 [ 167.230624][ T8676] ? __might_fault+0xb0/0x130 [ 167.230667][ T8676] should_fail_ex+0x414/0x560 [ 167.230699][ T8676] _copy_from_user+0x2d/0xb0 [ 167.230722][ T8676] do_ip_setsockopt+0x3c0/0x2d00 [ 167.230751][ T8676] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 167.230770][ T8676] ? __lock_acquire+0xab9/0xd20 [ 167.230800][ T8676] ? aa_sk_perm+0x81e/0x950 [ 167.230833][ T8676] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.230863][ T8676] ? aa_sock_opt_perm+0xff/0x1b0 [ 167.230897][ T8676] ip_setsockopt+0x66/0x110 [ 167.230917][ T8676] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 167.230961][ T8676] do_sock_setsockopt+0x179/0x1b0 [ 167.230992][ T8676] __x64_sys_setsockopt+0x13f/0x1b0 [ 167.231023][ T8676] do_syscall_64+0xfa/0xfa0 [ 167.231049][ T8676] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.231075][ T8676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.231097][ T8676] ? clear_bhb_loop+0x60/0xb0 [ 167.231124][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.231144][ T8676] RIP: 0033:0x7f1c78b8eec9 [ 167.231164][ T8676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.231182][ T8676] RSP: 002b:00007f1c79a2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.231205][ T8676] RAX: ffffffffffffffda RBX: 00007f1c78de6090 RCX: 00007f1c78b8eec9 [ 167.231221][ T8676] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 167.231233][ T8676] RBP: 00007f1c79a2e090 R08: 0000000000000004 R09: 0000000000000000 [ 167.231250][ T8676] R10: 0000200000001200 R11: 0000000000000246 R12: 0000000000000001 [ 167.231262][ T8676] R13: 00007f1c78de6128 R14: 00007f1c78de6090 R15: 00007ffeb618d238 [ 167.231297][ T8676] [ 168.466214][ T8706] veth3: entered promiscuous mode [ 168.626748][ T8713] bridge2: entered promiscuous mode [ 168.660001][ T8713] bridge2: entered allmulticast mode [ 169.211842][ T8729] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 169.407324][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'. [ 170.031720][ T8756] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 170.040614][ T8756] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 170.102986][ T8756] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 170.110785][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.671'. [ 170.220110][ T8766] netlink: 104 bytes leftover after parsing attributes in process `syz.4.674'. [ 170.436443][ T8779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.585162][ T8785] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 4, id = 0 [ 170.636098][ T8790] ip6gre0: entered promiscuous mode [ 170.651422][ T8790] ip6gre0: entered allmulticast mode [ 170.784555][ T8794] netlink: 52 bytes leftover after parsing attributes in process `syz.0.685'. [ 171.098724][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 171.359395][ T8809] lo speed is unknown, defaulting to 1000 [ 171.363951][ T8811] syzkaller1: entered promiscuous mode [ 171.370732][ T8811] syzkaller1: entered allmulticast mode [ 171.666311][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 172.213669][ T8839] tipc: Enabled bearer , priority 0 [ 172.222221][ T8845] syzkaller0: entered promiscuous mode [ 172.230081][ T8845] syzkaller0: entered allmulticast mode [ 172.358166][ T8845] tipc: Resetting bearer [ 172.388430][ T8845] tipc: Disabling bearer [ 172.486090][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.701'. [ 172.620254][ T8861] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.704'. [ 172.778115][ T8872] netlink: 'syz.2.703': attribute type 83 has an invalid length. [ 173.287663][ T8895] IPVS: set_ctl: invalid protocol: 107 224.0.0.2:20004 [ 173.466773][ T8896] lo speed is unknown, defaulting to 1000 [ 174.194641][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 174.231425][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.716'. [ 174.249988][ T8928] dummy0: left allmulticast mode [ 174.290072][ T8928] bridge0: port 3(dummy0) entered disabled state [ 174.346865][ T8928] bridge_slave_0: left allmulticast mode [ 174.361429][ T8928] bridge_slave_0: left promiscuous mode [ 174.367497][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.413193][ T8928] bridge_slave_1: left allmulticast mode [ 174.429830][ T8928] bridge_slave_1: left promiscuous mode [ 174.456393][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.475726][ T8928] bond0: (slave bond_slave_0): Releasing backup interface [ 174.501031][ T8928] bond0: (slave bond_slave_1): Releasing backup interface [ 174.530360][ T8928] team0: Port device team_slave_0 removed [ 174.554537][ T8928] team0: Port device team_slave_1 removed [ 174.561211][ T8928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.566416][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 174.569107][ T8928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.587456][ T8928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.595308][ T8928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.606110][ T8928] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.665873][ T8917] veth5: entered promiscuous mode [ 174.672389][ T8934] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 174.880986][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 174.957113][ T8957] netlink: 'syz.2.721': attribute type 9 has an invalid length. [ 174.965104][ T8957] netlink: 184 bytes leftover after parsing attributes in process `syz.2.721'. [ 174.998568][ T8955] lo speed is unknown, defaulting to 1000 [ 175.122467][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 175.132024][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 175.222457][ T8969] netlink: 201916 bytes leftover after parsing attributes in process `syz.4.724'. [ 175.235785][ T8969] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 175.782777][ T8985] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 176.039984][ T8986] macvtap1: entered allmulticast mode [ 176.048348][ T8986] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 176.061872][ T8986] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 176.138251][ T8982] lo speed is unknown, defaulting to 1000 [ 176.625143][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 176.638120][ T9010] lo speed is unknown, defaulting to 1000 [ 176.643849][ T9015] netlink: 'syz.4.735': attribute type 5 has an invalid length. [ 176.643889][ T9015] netlink: 'syz.4.735': attribute type 8 has an invalid length. [ 176.643905][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 176.666812][ T9015] geneve2: entered promiscuous mode [ 176.703971][ T9015] geneve2: entered allmulticast mode [ 176.732689][ T7098] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 176.741669][ T7098] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 176.778187][ T7098] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 176.802791][ T7098] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 177.001438][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.743'. [ 177.412941][ T9046] lo speed is unknown, defaulting to 1000 [ 177.872650][ T9061] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 177.916056][ T9063] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 178.038459][ T9068] : renamed from bond_slave_0 (while UP) [ 178.048275][ T9070] xt_l2tp: missing protocol rule (udp|l2tpip) [ 178.102586][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 178.155241][ T9075] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 178.166463][ T9073] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 178.279827][ T9066] lo speed is unknown, defaulting to 1000 [ 178.604640][ T9090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.743153][ T9095] macvlan2: entered promiscuous mode [ 178.752941][ T9095] macvlan2: entered allmulticast mode [ 178.761515][ T9095] bond3: entered promiscuous mode [ 178.776131][ T9095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.796734][ T9095] bond3: left promiscuous mode [ 178.875969][ T9072] lo speed is unknown, defaulting to 1000 [ 179.010692][ T9107] netlink: 'syz.1.760': attribute type 9 has an invalid length. [ 179.442284][ T9088] lo speed is unknown, defaulting to 1000 [ 179.583196][ T9130] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.614819][ T9130] bond2: (slave macvlan2): Enslaving as an active interface with a down link [ 179.626372][ T9126] bridge0: port 1(syz_tun) entered blocking state [ 179.653563][ T9126] bridge0: port 1(syz_tun) entered disabled state [ 179.662351][ T9126] syz_tun: entered allmulticast mode [ 179.669768][ T9126] syz_tun: entered promiscuous mode [ 179.676667][ T9126] bridge0: port 1(syz_tun) entered blocking state [ 179.683300][ T9126] bridge0: port 1(syz_tun) entered forwarding state [ 180.388424][ T9149] __nla_validate_parse: 2 callbacks suppressed [ 180.388444][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 180.498017][ T9149] macvtap1: entered promiscuous mode [ 180.507795][ T9149] veth1_to_hsr: entered promiscuous mode [ 180.525225][ T9149] macvtap1: entered allmulticast mode [ 180.535149][ T9149] veth1_to_hsr: entered allmulticast mode [ 180.660937][ T9130] infiniband syz1: set active [ 180.677461][ T9130] infiniband syz1: added syz_tun [ 180.698851][ T9130] syz1: rxe_create_cq: returned err = -12 [ 180.708294][ T9130] infiniband syz1: Couldn't create ib_mad CQ [ 180.738868][ T9130] infiniband syz1: Couldn't open port 1 [ 180.881702][ T9130] RDS/IB: syz1: added [ 180.887016][ T9130] smc: adding ib device syz1 with port count 1 [ 180.912105][ T9130] smc: ib device syz1 port 1 has no pnetid [ 181.136912][ T9186] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 181.172690][ T9186] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 181.196201][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'. [ 181.814972][ T9217] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 181.842081][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.789'. [ 181.863421][ T9205] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 181.884049][ T9205] netlink: 224 bytes leftover after parsing attributes in process `syz.2.787'. [ 182.049723][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 182.080923][ T9226] netlink: 40 bytes leftover after parsing attributes in process `syz.4.792'. [ 182.113490][ T9225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.792'. [ 182.416952][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 182.426141][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 182.583254][ T9248] veth0: left promiscuous mode [ 182.588103][ T9248] veth0: left allmulticast mode [ 182.635426][ T9248] macvtap1: left promiscuous mode [ 182.649437][ T9248] macvtap1: left allmulticast mode [ 182.657167][ T9248] vlan2: left allmulticast mode [ 182.672953][ T9248] batadv0: left allmulticast mode [ 182.692458][ T9248] veth3: left promiscuous mode [ 182.705137][ T9248] bridge2: left promiscuous mode [ 182.718142][ T9248] bridge2: left allmulticast mode [ 183.364467][ T9286] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.887964][ T9309] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 183.971646][ T9309] bond1: entered promiscuous mode [ 183.977932][ T9309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.024294][ T9313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.031769][ T9313] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 184.042372][ T9313] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 184.057461][ T9313] bond1: (slave wireguard0): making interface the new active one [ 184.065292][ T9313] wireguard0: entered promiscuous mode [ 184.072602][ T9315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.073113][ T9313] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 184.080329][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 184.096374][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 184.105896][ T9315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.138293][ T9315] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 184.156118][ T9315] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 184.443703][ T9328] team_slave_0: entered promiscuous mode [ 184.449705][ T9328] team_slave_1: entered promiscuous mode [ 184.481594][ T9328] vlan2: entered promiscuous mode [ 184.486694][ T9328] team0: entered promiscuous mode [ 184.519046][ T9332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.810'. [ 184.922688][ T9232] lo speed is unknown, defaulting to 1000 [ 185.704095][ T9373] __nla_validate_parse: 2 callbacks suppressed [ 185.704118][ T9373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.819'. [ 186.243128][ T9398] netlink: 'syz.4.826': attribute type 1 has an invalid length. [ 186.372293][ T9401] lo speed is unknown, defaulting to 1000 [ 186.642094][ T9411] netlink: 96 bytes leftover after parsing attributes in process `syz.4.828'. [ 186.696050][ T9411] vlan2: entered allmulticast mode [ 186.714790][ T9411] erspan0: entered allmulticast mode [ 187.818616][ T9431] netlink: 'syz.4.834': attribute type 5 has an invalid length. [ 187.863415][ T9431] netlink: 'syz.4.834': attribute type 4 has an invalid length. [ 187.928401][ T9431] bridge3: entered allmulticast mode [ 189.095122][ T9464] netlink: 184 bytes leftover after parsing attributes in process `syz.1.843'. [ 189.284518][ T9476] tipc: Enabled bearer , priority 0 [ 189.361807][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 189.482452][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 189.482701][ T9476] syzkaller0: entered promiscuous mode [ 189.535071][ T9476] syzkaller0: entered allmulticast mode [ 189.600264][ T9484] tipc: Resetting bearer [ 189.641164][ T9475] tipc: Resetting bearer [ 189.703544][ T9475] tipc: Disabling bearer [ 189.740035][ T9487] netlink: 'syz.0.849': attribute type 12 has an invalid length. [ 189.876608][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 189.901438][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'. [ 189.992879][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 190.708965][ T9509] netlink: 56 bytes leftover after parsing attributes in process `syz.0.856'. [ 190.828428][ T9515] netlink: 64 bytes leftover after parsing attributes in process `syz.1.859'. [ 190.887438][ T9515] netlink: 112 bytes leftover after parsing attributes in process `syz.1.859'. [ 190.947159][ T9515] tap0: tun_chr_ioctl cmd 1074025677 [ 190.971853][ T9515] tap0: linktype set to 825 [ 191.036468][ T9518] rdma_rxe: rxe_newlink: failed to add syz_tun [ 191.266299][ T9529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.864'. [ 191.286156][ T9529] netlink: 220 bytes leftover after parsing attributes in process `syz.1.864'. [ 191.591867][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 191.613193][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 192.324851][ T9569] macsec1: entered promiscuous mode [ 192.330141][ T9569] macsec1: entered allmulticast mode [ 192.387386][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 192.410513][ T9571] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 192.426322][ T9571] bridge3: entered allmulticast mode [ 192.584852][ T9573] syzkaller0: entered promiscuous mode [ 192.590567][ T9573] syzkaller0: entered allmulticast mode [ 192.783511][ T9601] netlink: 'syz.4.883': attribute type 2 has an invalid length. [ 192.791441][ T9601] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.883'. [ 194.085391][ T9597] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 194.161330][ T9621] lo speed is unknown, defaulting to 1000 [ 194.764016][ T9658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 194.777775][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 195.090252][ T9664] block nbd0: not configured, cannot reconfigure [ 195.093417][ T9670] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 195.301464][ T9683] macsec1: entered promiscuous mode [ 195.306821][ T9683] team0: entered promiscuous mode [ 195.313831][ T9683] macsec1: entered allmulticast mode [ 195.319261][ T9683] team0: entered allmulticast mode [ 195.342080][ T9683] team0: Device macsec1 is already an upper device of the team interface [ 195.806306][ T9683] team0: left allmulticast mode [ 195.815936][ T9683] team0: left promiscuous mode [ 195.842252][ T9682] veth0_to_bridge: entered promiscuous mode [ 195.896730][ T9688] bridge4: entered allmulticast mode [ 196.028659][ T9683] veth0_to_bridge: left promiscuous mode [ 196.209761][ T9702] netlink: 'syz.4.907': attribute type 11 has an invalid length. [ 196.351799][ T9711] netlink: 'syz.3.909': attribute type 21 has an invalid length. [ 196.364004][ T9711] __nla_validate_parse: 5 callbacks suppressed [ 196.364026][ T9711] netlink: 128 bytes leftover after parsing attributes in process `syz.3.909'. [ 196.412977][ T9711] netlink: 'syz.3.909': attribute type 4 has an invalid length. [ 196.433548][ T9711] netlink: 'syz.3.909': attribute type 3 has an invalid length. [ 196.445910][ T9711] netlink: 3 bytes leftover after parsing attributes in process `syz.3.909'. [ 196.611659][ T9724] dvmrp8: entered allmulticast mode [ 196.832744][ T9726] lo speed is unknown, defaulting to 1000 [ 196.851849][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 197.408627][ T9752] dvmrp8: entered allmulticast mode [ 197.442002][ T9750] dvmrp8: left allmulticast mode [ 197.570455][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.666304][ T9757] veth1: mtu less than device minimum [ 197.924055][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.927'. [ 197.968071][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.927'. [ 197.969596][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 198.031671][ T9776] netlink: 'syz.2.928': attribute type 13 has an invalid length. [ 198.143037][ T9776] veth1_to_hsr: left allmulticast mode [ 198.149624][ T9776] veth1_to_hsr: left promiscuous mode [ 198.199524][ T9777] lo speed is unknown, defaulting to 1000 [ 198.395301][ T9793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.931'. [ 198.580044][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 198.631784][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 198.644728][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 198.761089][ T9802] dummy0: left promiscuous mode [ 199.057495][ T9815] netlink: 'syz.3.940': attribute type 2 has an invalid length. [ 199.066625][ T9815] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 199.620006][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.660711][ T9830] syz_tun: left allmulticast mode [ 199.669783][ T9830] syz_tun: left promiscuous mode [ 199.675270][ T9830] bridge0: port 1(syz_tun) entered disabled state [ 199.727314][ T9830] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.925963][ T9831] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.358859][ T9847] lo speed is unknown, defaulting to 1000 [ 200.613649][ T9864] tipc: Enabled bearer , priority 0 [ 200.649732][ T9864] syzkaller0: entered promiscuous mode [ 200.668993][ T9864] syzkaller0: entered allmulticast mode [ 200.692671][ T9864] tipc: Resetting bearer [ 200.863060][ T9860] tipc: Resetting bearer [ 200.880189][ T9860] tipc: Disabling bearer [ 200.913179][ T9848] lo speed is unknown, defaulting to 1000 [ 200.926940][ T9859] netlink: 'syz.4.952': attribute type 4 has an invalid length. [ 201.001685][ T9859] netlink: 'syz.4.952': attribute type 4 has an invalid length. [ 201.382447][ T9856] lo speed is unknown, defaulting to 1000 [ 201.382469][ T9885] netlink: 'syz.4.958': attribute type 15 has an invalid length. [ 201.816293][ T9897] __nla_validate_parse: 4 callbacks suppressed [ 201.816312][ T9897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.960'. [ 201.967725][ T9900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.961'. [ 202.614437][ T9911] netlink: 348 bytes leftover after parsing attributes in process `syz.0.964'. [ 202.858614][ T9919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.966'. [ 202.909181][ T9919] bond0: option arp_all_targets: invalid value (2) [ 202.928306][ T9921] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.974604][ T9919] netlink: 'syz.0.966': attribute type 6 has an invalid length. [ 203.056011][ T9928] Cannot find del_set index 4 as target [ 203.068440][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 203.716364][ T9940] can: request_module (can-proto-5) failed. [ 203.792997][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 203.831722][ T9940] 8021q: VLANs not supported on nlmon0 [ 204.232068][ T9955] team0 (unregistering): Port device team_slave_0 removed [ 204.244353][ T9955] team0 (unregistering): Port device team_slave_1 removed [ 204.285594][ T9963] netlink: 'syz.4.971': attribute type 1 has an invalid length. [ 204.319247][ T9963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.386662][ T9965] bond3: (slave geneve3): making interface the new active one [ 204.422269][ T9965] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 204.699015][ T9977] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 204.737465][ T9982] netlink: 64 bytes leftover after parsing attributes in process `syz.3.982'. [ 204.834252][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 205.069551][T10000] lo speed is unknown, defaulting to 1000 [ 205.210367][T10005] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 205.576388][T10026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 206.030983][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'. [ 206.078002][T10052] netlink: 244 bytes leftover after parsing attributes in process `syz.2.996'. [ 206.105100][T10055] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 206.378314][T10070] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 206.401862][T10070] dummy0: left promiscuous mode [ 206.440771][T10070] team0: Port device dummy0 added [ 206.553245][T10082] lo speed is unknown, defaulting to 1000 [ 206.922197][T10091] lo speed is unknown, defaulting to 1000 [ 207.317615][T10110] netlink: 'syz.4.1009': attribute type 13 has an invalid length. [ 207.340046][T10110] netlink: 'syz.4.1009': attribute type 17 has an invalid length. [ 207.671941][T10121] __nla_validate_parse: 4 callbacks suppressed [ 207.671963][T10121] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1010'. [ 207.712492][T10110] ip6gre0: left promiscuous mode [ 207.719811][T10110] ip6gre0: left allmulticast mode [ 207.819111][T10110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.136767][T10132] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1012'. [ 208.337648][T10112] lo speed is unknown, defaulting to 1000 [ 208.346573][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 208.674620][T10137] lo speed is unknown, defaulting to 1000 [ 209.292012][T10126] lo speed is unknown, defaulting to 1000 [ 209.601105][T10148] ip6gre1: entered allmulticast mode [ 210.084031][T10145] lo speed is unknown, defaulting to 1000 [ 212.277621][T10175] can: request_module (can-proto-0) failed. [ 212.638684][T10174] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 213.016619][T10191] sctp: [Deprecated]: syz.0.1027 (pid 10191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.016619][T10191] Use struct sctp_sack_info instead [ 213.471454][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 213.716640][T10217] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1036'. [ 213.826844][T10223] netlink: 'syz.3.1035': attribute type 16 has an invalid length. [ 213.835152][T10223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1035'. [ 213.889340][T10225] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 213.983034][T10227] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 214.081694][T10234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 214.120274][T10241] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1044'. [ 214.124564][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1042'. [ 214.153187][T10241] nftables ruleset with unbound chain [ 214.191579][T10241] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1044'. [ 214.283570][T10234] bond4: entered promiscuous mode [ 214.288883][T10234] bond4: entered allmulticast mode [ 214.294800][T10234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.380341][T10257] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 214.395775][T10259] netlink: 'syz.0.1046': attribute type 4 has an invalid length. [ 214.397043][T10249] lo speed is unknown, defaulting to 1000 [ 214.980482][T10263] lo speed is unknown, defaulting to 1000 [ 215.311141][T10302] syzkaller0: entered promiscuous mode [ 215.321728][T10302] syzkaller0: entered allmulticast mode [ 215.614525][T10293] lo speed is unknown, defaulting to 1000 [ 215.669029][T10308] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.182774][T10294] lo speed is unknown, defaulting to 1000 [ 216.539518][T10343] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 216.880405][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 216.982650][T10359] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 216.991627][T10359] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 217.015859][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 217.038209][T10359] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 217.075188][T10359] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 217.075287][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 217.100537][ T6027] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.120408][T10359] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 217.137349][ T6027] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.156848][ T6027] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.182644][T10359] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 217.198637][T10359] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 217.245373][T10356] lo speed is unknown, defaulting to 1000 [ 217.274751][ T6027] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.483229][T10366] tipc: Can't bind to reserved service type 1 [ 218.376837][T10393] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 218.401823][T10393] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 218.868384][T10400] lo speed is unknown, defaulting to 1000 [ 218.984754][T10410] __nla_validate_parse: 1 callbacks suppressed [ 218.984773][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 219.199621][T10414] validate_nla: 58 callbacks suppressed [ 219.199641][T10414] netlink: 'syz.4.1091': attribute type 4 has an invalid length. [ 219.252626][ T30] audit: type=1107 audit(1760127972.948:3): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 219.402600][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 219.455362][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 219.551726][T10427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1094'. [ 219.621197][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.629822][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.738780][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 220.066296][T10432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.209943][T10432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.324039][T10432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.426011][T10432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.581837][T10446] lo speed is unknown, defaulting to 1000 [ 221.011445][ T7098] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.146644][T10472] netlink: 'syz.4.1105': attribute type 4 has an invalid length. [ 221.216549][ T7098] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.226820][ T7098] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.404829][ T7098] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.017812][T10514] : renamed from wg2 (while UP) [ 222.085358][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1119'. [ 222.181450][T10522] syz_tun: entered allmulticast mode [ 222.200397][T10522] dvmrp1: entered allmulticast mode [ 222.299199][T10519] lo speed is unknown, defaulting to 1000 [ 222.715375][T10525] lo speed is unknown, defaulting to 1000 [ 223.011382][T10517] syz_tun: left allmulticast mode [ 223.390096][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 223.399765][T10556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1127'. [ 223.409310][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 223.419661][T10556] netlink: 'syz.1.1127': attribute type 5 has an invalid length. [ 223.428584][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 223.438645][T10557] netlink: 'syz.1.1127': attribute type 5 has an invalid length. [ 223.734844][T10535] lo speed is unknown, defaulting to 1000 [ 223.932543][T10568] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 224.040845][T10537] lo speed is unknown, defaulting to 1000 [ 224.195099][T10574] __nla_validate_parse: 3 callbacks suppressed [ 224.195124][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1132'. [ 224.434152][T10577] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.718367][T10577] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.844751][T10577] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.920324][T10577] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.054118][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.108109][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.139113][ T7098] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.160771][ T7098] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.401150][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 225.998076][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 226.056963][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 226.896656][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 227.363623][T10629] lo speed is unknown, defaulting to 1000 [ 227.487336][T10632] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 227.982147][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 228.007349][T10648] syzkaller0: entered promiscuous mode [ 228.018661][T10648] syzkaller0: entered allmulticast mode [ 228.036079][T10652] vlan4: entered promiscuous mode [ 228.041591][T10652] bond0: entered promiscuous mode [ 228.046750][T10652] : entered promiscuous mode [ 228.052203][T10652] bond_slave_1: entered promiscuous mode [ 228.058140][T10652] syz_tun: entered promiscuous mode [ 228.166287][T10657] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 229.376043][T10662] lo speed is unknown, defaulting to 1000 [ 229.613160][T10670] tipc: Started in network mode [ 229.618099][T10670] tipc: Node identity 82970e38f624, cluster identity 4711 [ 229.625908][T10670] tipc: Enabled bearer , priority 0 [ 229.690440][T10670] syzkaller0: entered promiscuous mode [ 229.696352][T10670] syzkaller0: entered allmulticast mode [ 229.703104][T10670] tipc: Resetting bearer [ 229.715548][T10667] tipc: Resetting bearer [ 230.705184][ T855] tipc: Node number set to 1957891640 [ 231.374467][T10667] tipc: Disabling bearer [ 231.614598][T10692] tipc: Enabled bearer , priority 0 [ 231.650987][T10691] tipc: Disabling bearer [ 231.740329][T10706] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1164'. [ 231.754886][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 232.126772][T10732] netlink: 'syz.3.1170': attribute type 21 has an invalid length. [ 232.320494][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 232.766357][T10765] IPv6: Can't replace route, no match found [ 232.999331][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 233.019908][T10772] bond5: option arp_validate: invalid value (18446744073491447809) [ 233.040642][T10782] netlink: 'syz.3.1181': attribute type 13 has an invalid length. [ 233.071638][T10772] bond5 (unregistering): Released all slaves [ 233.075305][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 233.106926][T10786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1181'. [ 233.562422][ T7581] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.570891][ T7581] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.609072][ T7581] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.637775][ T7581] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.742622][T10816] netlink: 'syz.4.1189': attribute type 3 has an invalid length. [ 233.750714][T10816] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1189'. [ 233.930351][T10820] tipc: Enabling of bearer rejected, failed to enable media [ 234.067866][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1193'. [ 234.092955][T10828] x_tables: duplicate underflow at hook 2 [ 234.144513][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 234.180883][T10831] netlink: 'syz.2.1196': attribute type 13 has an invalid length. [ 234.193049][T10831] netlink: 'syz.2.1196': attribute type 27 has an invalid length. [ 234.216632][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 234.552584][T10855] syz.2.1200 uses old SIOCAX25GETINFO [ 235.063287][T10891] netlink: 'syz.3.1210': attribute type 27 has an invalid length. [ 235.073877][T10889] lo speed is unknown, defaulting to 1000 [ 235.093097][T10870] warn_alloc: 1 callbacks suppressed [ 235.093116][T10870] syz.0.1205: vmalloc error: size 65011712, failed to allocated page array size 126976, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.112889][T10893] veth0: entered promiscuous mode [ 235.155620][T10870] CPU: 0 UID: 0 PID: 10870 Comm: syz.0.1205 Not tainted syzkaller #0 PREEMPT(full) [ 235.155650][T10870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 235.155663][T10870] Call Trace: [ 235.155672][T10870] [ 235.155682][T10870] dump_stack_lvl+0x189/0x250 [ 235.155716][T10870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.155739][T10870] ? __pfx__printk+0x10/0x10 [ 235.155763][T10870] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 235.155794][T10870] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 235.155827][T10870] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 235.155861][T10870] warn_alloc+0x214/0x310 [ 235.155901][T10870] ? __pfx_warn_alloc+0x10/0x10 [ 235.155944][T10870] ? __get_vm_area_node+0x28f/0x300 [ 235.155976][T10870] ? translate_table+0x19b/0x2040 [ 235.156012][T10870] __vmalloc_node_range_noprof+0x690/0x12d0 [ 235.156084][T10870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.156116][T10870] ? translate_table+0x19b/0x2040 [ 235.156151][T10870] ? rcu_is_watching+0x15/0xb0 [ 235.156177][T10870] ? translate_table+0x19b/0x2040 [ 235.156208][T10870] __kvmalloc_node_noprof+0x674/0x910 [ 235.156243][T10870] ? translate_table+0x19b/0x2040 [ 235.156279][T10870] ? do_ip6t_set_ctl+0x88a/0xce0 [ 235.156307][T10870] ? nf_setsockopt+0x26f/0x290 [ 235.156335][T10870] ? do_sock_setsockopt+0x179/0x1b0 [ 235.156357][T10870] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 235.156388][T10870] translate_table+0x19b/0x2040 [ 235.156435][T10870] ? __lock_acquire+0xab9/0xd20 [ 235.156463][T10870] ? __pfx_translate_table+0x10/0x10 [ 235.156496][T10870] ? __might_fault+0xb0/0x130 [ 235.156548][T10870] ? _copy_from_user+0x94/0xb0 [ 235.156576][T10870] do_ip6t_set_ctl+0x970/0xce0 [ 235.156611][T10870] ? rcu_is_watching+0x15/0xb0 [ 235.156636][T10870] ? trace_contention_end+0x39/0x120 [ 235.156663][T10870] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 235.156719][T10870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.156755][T10870] ? sock_do_ioctl+0x286/0x300 [ 235.156790][T10870] ? __lock_acquire+0xab9/0xd20 [ 235.156816][T10870] nf_setsockopt+0x26f/0x290 [ 235.156853][T10870] rawv6_setsockopt+0x23b/0x5b0 [ 235.156891][T10870] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 235.156925][T10870] ? aa_sock_opt_perm+0xff/0x1b0 [ 235.156957][T10870] ? sock_common_setsockopt+0x36/0xc0 [ 235.156990][T10870] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 235.157024][T10870] do_sock_setsockopt+0x179/0x1b0 [ 235.157052][T10870] __x64_sys_setsockopt+0x13f/0x1b0 [ 235.157081][T10870] do_syscall_64+0xfa/0xfa0 [ 235.157106][T10870] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.157131][T10870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.157152][T10870] ? clear_bhb_loop+0x60/0xb0 [ 235.157178][T10870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.157199][T10870] RIP: 0033:0x7f9f3498eec9 [ 235.157219][T10870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.157237][T10870] RSP: 002b:00007f9f357d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.157269][T10870] RAX: ffffffffffffffda RBX: 00007f9f34be5fa0 RCX: 00007f9f3498eec9 [ 235.157284][T10870] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000048 [ 235.157297][T10870] RBP: 00007f9f34a11f91 R08: 0000000000000338 R09: 0000000000000000 [ 235.157310][T10870] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.157324][T10870] R13: 00007f9f34be6038 R14: 00007f9f34be5fa0 R15: 00007ffd74fbea48 [ 235.157358][T10870] [ 235.157447][T10870] Mem-Info: [ 235.531371][T10870] active_anon:3970 inactive_anon:0 isolated_anon:0 [ 235.531371][T10870] active_file:3208 inactive_file:39936 isolated_file:0 [ 235.531371][T10870] unevictable:768 dirty:149 writeback:0 [ 235.531371][T10870] slab_reclaimable:11839 slab_unreclaimable:172553 [ 235.531371][T10870] mapped:30082 shmem:1358 pagetables:972 [ 235.531371][T10870] sec_pagetables:0 bounce:0 [ 235.531371][T10870] kernel_misc_reclaimable:0 [ 235.531371][T10870] free:1251566 free_pcp:14323 free_cma:0 [ 235.621592][T10870] Node 0 active_anon:15880kB inactive_anon:0kB active_file:12832kB inactive_file:159540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121528kB dirty:596kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12588kB pagetables:3548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.691832][T10870] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.744625][T10870] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.798996][T10912] tipc: Enabled bearer , priority 0 [ 235.807221][T10912] syzkaller0: entered promiscuous mode [ 235.813403][T10912] syzkaller0: entered allmulticast mode [ 235.826464][T10870] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 235.832864][T10870] Node 0 DMA32 free:1096888kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15980kB inactive_anon:0kB active_file:12832kB inactive_file:159540kB unevictable:1536kB writepending:596kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:39084kB local_pcp:19052kB free_cma:0kB [ 235.886486][T10870] lowmem_reserve[]: 0 0 1 1 1 [ 235.893229][T10870] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.923282][T10870] lowmem_reserve[]: 0 0 0 0 0 [ 235.928060][T10870] Node 1 Normal free:3894016kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18836kB local_pcp:13460kB free_cma:0kB [ 235.964851][T10870] lowmem_reserve[]: 0 0 0 0 0 [ 235.970195][T10912] bond5 (unregistering): Released all slaves [ 235.976393][T10870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.989840][T10870] Node 0 DMA32: 674*4kB (UME) 570*8kB (UM) 227*16kB (UME) 247*32kB (UME) 125*64kB (UM) 76*128kB (UME) 52*256kB (UM) 31*512kB (UME) 11*1024kB (UME) 6*2048kB (UME) 246*4096kB (M) = 1096872kB [ 236.036520][T10870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 236.063827][T10915] wg1: mtu less than device minimum [ 236.083678][T10911] tipc: Resetting bearer [ 236.092888][T10870] Node 1 Normal: 176*4kB (UE) 36*8kB (UME) 34*16kB (UME) 64*32kB (UME) 26*64kB (UME) 9*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894016kB [ 236.111954][T10870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.122442][T10870] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.136296][T10870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.146539][T10870] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.167438][T10870] 44498 total pagecache pages [ 236.174206][T10911] tipc: Disabling bearer [ 236.175800][T10870] 0 pages in swap cache [ 236.188994][T10870] Free swap = 124996kB [ 236.196610][T10870] Total swap = 124996kB [ 236.204468][T10870] 2097051 pages RAM [ 236.204829][T10917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.210116][T10870] 0 pages HighMem/MovableOnly [ 236.229400][T10870] 424543 pages reserved [ 236.234653][T10870] 0 pages cma reserved [ 236.252083][T10893] veth0: left promiscuous mode [ 236.745930][T10944] sctp: [Deprecated]: syz.0.1222 (pid 10944) Use of int in max_burst socket option. [ 236.745930][T10944] Use struct sctp_assoc_value instead [ 236.836252][T10944] siw: device registration error -23 [ 237.044881][T10954] __nla_validate_parse: 1 callbacks suppressed [ 237.044902][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 237.116500][T10954] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1228'. [ 237.158787][T10961] syz_tun: entered allmulticast mode [ 237.186180][T10960] syz_tun: left allmulticast mode [ 237.323549][T10966] netlink: 'syz.4.1231': attribute type 10 has an invalid length. [ 237.373505][T10966] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.408105][T10966] bond0: (slave team0): Enslaving as an active interface with an up link [ 237.498871][T10975] netlink: 'syz.3.1234': attribute type 23 has an invalid length. [ 237.603304][T10974] lo speed is unknown, defaulting to 1000 [ 237.964329][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 238.168728][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 238.210757][T10996] netlink: 'syz.0.1241': attribute type 15 has an invalid length. [ 238.360496][T11009] netlink: 'syz.0.1244': attribute type 22 has an invalid length. [ 238.390868][T11002] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 238.430861][T11002] bond5 (unregistering): Released all slaves [ 238.652341][T11017] tipc: Enabled bearer , priority 0 [ 238.725484][T11022] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1247'. [ 238.759072][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'. [ 238.774052][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'. [ 238.792041][T11017] syzkaller0: entered promiscuous mode [ 238.797772][T11017] syzkaller0: entered allmulticast mode [ 238.799947][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 238.804360][T11017] tipc: Resetting bearer [ 238.826639][T11028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1249'. [ 238.883982][T11026] bridge0: entered promiscuous mode [ 238.890631][T11026] ip6gretap0: entered promiscuous mode [ 238.897929][T11026] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 238.908258][T11026] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 239.102477][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1252'. [ 239.234381][T11038] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.654645][ T855] tipc: Node number set to 384458430 [ 240.277852][ T6027] tipc: Resetting bearer [ 240.329294][T11016] tipc: Resetting bearer [ 240.360403][T11016] tipc: Disabling bearer [ 240.632568][T11059] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 240.762177][T11059] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 240.766816][T11065] tipc: Enabling of bearer rejected, failed to enable media [ 240.987668][T11061] lo speed is unknown, defaulting to 1000 [ 241.320726][T11078] netlink: 'syz.2.1262': attribute type 13 has an invalid length. [ 241.333627][T11078] netlink: 'syz.2.1262': attribute type 17 has an invalid length. [ 241.444070][T11078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.454154][T11078] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.468191][T11078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.082799][T11100] xt_TCPMSS: Only works on TCP SYN packets [ 242.146238][T11104] __nla_validate_parse: 2 callbacks suppressed [ 242.146258][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 242.162647][T11100] netlink: 'syz.3.1270': attribute type 2 has an invalid length. [ 242.181063][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1270'. [ 242.373296][T11109] lo speed is unknown, defaulting to 1000 [ 242.652227][T11113] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 242.680512][T11113] netlink: 'syz.1.1272': attribute type 3 has an invalid length. [ 242.699064][T11113] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1272'. [ 242.721591][T11113] NCSI netlink: No device for ifindex 246 [ 243.074656][T11120] lo speed is unknown, defaulting to 1000 [ 243.111180][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 243.125561][T11131] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1277'. [ 243.149510][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1277'. [ 243.418724][T11137] tc_dump_action: action bad kind [ 243.426038][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 243.992792][T11160] sctp: [Deprecated]: syz.3.1288 (pid 11160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.992792][T11160] Use struct sctp_sack_info instead [ 244.281851][T11172] netlink: 'syz.0.1290': attribute type 3 has an invalid length. [ 244.290235][T11172] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1290'. [ 245.191139][T11188] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 245.602470][T11194] lo speed is unknown, defaulting to 1000 [ 245.838926][T11207] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 245.922376][T11207] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 246.372332][T11224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1305'. [ 246.535811][T11232] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A [ 246.662541][T11236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1309'. [ 246.907328][T11245] tipc: Enabled bearer , priority 0 [ 246.917122][T11245] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 246.927593][T11245] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 246.995668][T11245] tipc: Resetting bearer [ 247.110128][T11253] geneve3: entered promiscuous mode [ 247.124434][T11253] geneve3: entered allmulticast mode [ 247.142690][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 57190 - 0 [ 247.151379][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 35783 - 0 [ 247.159856][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 57190 - 0 [ 247.177236][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 35783 - 0 [ 247.197029][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 57190 - 0 [ 247.226366][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 35783 - 0 [ 247.251836][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 57190 - 0 [ 247.301463][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 35783 - 0 [ 247.523505][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1318'. [ 247.524078][T11271] macsec0: entered allmulticast mode [ 247.578001][T11277] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1320'. [ 248.397811][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 248.594280][T11317] batadv_slave_1: entered promiscuous mode [ 248.673598][T11317] lo speed is unknown, defaulting to 1000 [ 248.674913][T11323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 248.768490][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1336'. [ 248.850091][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 248.908950][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'. [ 249.119005][T11325] lo speed is unknown, defaulting to 1000 [ 249.402755][T11346] netlink: 'syz.4.1343': attribute type 5 has an invalid length. [ 249.423236][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 249.444679][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 249.475639][T11316] batadv_slave_1: left promiscuous mode [ 250.155542][T11353] lo speed is unknown, defaulting to 1000 [ 251.169321][T11380] lo speed is unknown, defaulting to 1000 [ 251.690835][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 252.649019][T11407] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1357'. [ 252.896943][T11417] tipc: Enabled bearer , priority 0 [ 252.913303][T11417] syzkaller0: entered promiscuous mode [ 252.919445][T11417] syzkaller0: entered allmulticast mode [ 252.945903][T11417] tipc: Resetting bearer [ 252.953581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.961987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.000923][T11416] tipc: Resetting bearer [ 253.030016][T11416] tipc: Disabling bearer [ 253.181766][T11421] lo speed is unknown, defaulting to 1000 [ 253.203637][T11429] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 253.223171][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 253.239136][T11429] netlink: 'syz.4.1365': attribute type 3 has an invalid length. [ 253.268689][T11429] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1365'. [ 253.337098][T11442] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1366'. [ 253.393475][T11441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1366'. [ 253.722508][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 254.058971][T11433] lo speed is unknown, defaulting to 1000 [ 254.813482][T11499] atomic_op ffff88802f50f198 conn xmit_atomic 0000000000000000 [ 255.176856][T11467] lo speed is unknown, defaulting to 1000 [ 255.515436][T11511] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 255.541413][T11511] bond2 (unregistering): Released all slaves [ 256.129122][T11521] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 256.368352][T11526] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 256.378555][T11526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1382'. [ 256.394303][T11527] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 256.405607][T11527] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1382'. [ 256.431763][T11526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1382'. [ 256.610705][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1384'. [ 258.160499][T11568] lo speed is unknown, defaulting to 1000 [ 259.232194][T11587] __nla_validate_parse: 1 callbacks suppressed [ 259.232216][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1401'. [ 259.271947][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'. [ 259.423448][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 259.496154][T11601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.545885][T11603] syzkaller1: entered promiscuous mode [ 259.553905][T11603] syzkaller1: entered allmulticast mode [ 259.672348][T11609] lo speed is unknown, defaulting to 1000 [ 260.095430][T11623] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1413'. [ 260.592425][ T7098] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc9 [ 260.655211][T11640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.845509][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 260.892748][T11651] syzkaller0: entered promiscuous mode [ 260.898318][T11651] syzkaller0: entered allmulticast mode [ 261.062250][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.940586][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 261.959655][T11675] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1424'. [ 261.974222][T11673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1423'. [ 262.122168][T11676] dummy0: left allmulticast mode [ 262.161275][T11676] dummy0: left promiscuous mode [ 262.191903][T11676] bridge0: port 3(dummy0) entered disabled state [ 262.303733][T11686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1428'. [ 262.328098][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 262.415288][T11676] batman_adv: batadv0: Adding interface: dummy0 [ 262.441299][T11676] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.550220][T11676] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 262.771161][T11705] netlink: 'syz.0.1432': attribute type 4 has an invalid length. [ 263.102902][T11716] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 263.174680][T11718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.304023][T11716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.320663][T11726] macsec0: left allmulticast mode [ 263.327918][T11726] bond1: left promiscuous mode [ 263.332952][T11726] wireguard0: left promiscuous mode [ 263.410106][T11726] ip6gre1: left allmulticast mode [ 263.455570][T11726] tipc: Resetting bearer [ 263.504721][T11726] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 263.521777][T11726] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 263.638365][T11740] lo speed is unknown, defaulting to 1000 [ 264.450002][T11771] __nla_validate_parse: 2 callbacks suppressed [ 264.450028][T11771] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1448'. [ 264.593912][T11771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.861762][T11786] tipc: Enabling of bearer rejected, failed to enable media [ 264.904678][T11786] syzkaller0: entered promiscuous mode [ 264.910216][T11786] syzkaller0: entered allmulticast mode [ 264.941829][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 264.993999][T11791] netlink: 'syz.4.1456': attribute type 6 has an invalid length. [ 265.045662][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1456'. [ 265.223086][T11801] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 265.231140][T11801] netlink: 'syz.4.1459': attribute type 2 has an invalid length. [ 265.248672][T11800] syzkaller0: entered promiscuous mode [ 265.256062][T11800] syzkaller0: entered allmulticast mode [ 265.264738][T11801] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 265.275462][T11801] netlink: 'syz.4.1459': attribute type 2 has an invalid length. [ 265.417487][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 265.440444][T11802] syzkaller0: left allmulticast mode [ 265.491681][T11813] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1460'. [ 265.593315][T11809] nbd2: detected capacity change from 0 to 63 [ 265.644392][ T5827] block nbd2: Receive control failed (result -32) [ 265.645052][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 265.661507][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 265.733957][T11819] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1464'. [ 265.764018][T11821] netlink: 'syz.4.1462': attribute type 12 has an invalid length. [ 265.802417][T11821] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1462'. [ 265.861806][T11828] netlink: 'syz.3.1466': attribute type 1 has an invalid length. [ 265.895616][T11828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.923997][T11828] bond5: (slave ip6gretap1): making interface the new active one [ 265.933941][T11828] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 265.957154][T11828] erspan0: entered allmulticast mode [ 265.969481][T11828] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 266.297794][T11849] tipc: Enabled bearer , priority 0 [ 266.306784][T11849] syzkaller0: entered promiscuous mode [ 266.316983][T11849] syzkaller0: entered allmulticast mode [ 266.329175][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 266.366049][T11849] tipc: Resetting bearer [ 266.394645][T11848] tipc: Resetting bearer [ 266.443756][T11848] tipc: Disabling bearer [ 266.682449][T11867] 8021q: VLANs not supported on ip6gre0 [ 267.077715][ T7098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.106741][ T7098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.191717][T11899] 8021q: VLANs not supported on ip_vti0 [ 267.279008][T11901] lo speed is unknown, defaulting to 1000 [ 267.635889][T11911] netlink: 'syz.3.1487': attribute type 1 has an invalid length. [ 267.722138][T11911] bond6: entered promiscuous mode [ 267.727921][T11911] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.946211][T11915] lo speed is unknown, defaulting to 1000 [ 269.312127][T11953] netlink: 'syz.0.1498': attribute type 15 has an invalid length. [ 269.389265][T11955] xt_CONNSECMARK: invalid mode: 66 [ 269.599492][T11964] __nla_validate_parse: 4 callbacks suppressed [ 269.599515][T11964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1501'. [ 269.786988][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 269.844737][T11977] lo speed is unknown, defaulting to 1000 [ 270.102206][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'. [ 270.180827][T11998] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1510'. [ 270.364010][T12005] netlink: 'syz.4.1512': attribute type 1 has an invalid length. [ 270.402889][T12006] netlink: 'syz.4.1512': attribute type 1 has an invalid length. [ 270.478984][T12005] bond5: entered promiscuous mode [ 270.511837][T12005] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.015116][T12032] lo speed is unknown, defaulting to 1000 [ 271.068116][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 271.097074][T12044] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 271.682407][T12060] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 271.742520][T12025] lo speed is unknown, defaulting to 1000 [ 272.100464][T12064] lo speed is unknown, defaulting to 1000 [ 272.678095][T12061] lo speed is unknown, defaulting to 1000 [ 273.100246][T12073] Bluetooth: MGMT ver 1.23 [ 273.910783][T12089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1533'. [ 273.954933][T12089] netlink: 'syz.1.1533': attribute type 10 has an invalid length. [ 274.097866][T12089] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.184099][T12089] dummy0: entered promiscuous mode [ 274.210549][T12089] bond0: (slave team0): Enslaving as an active interface with an up link [ 274.384992][ T30] audit: type=1804 audit(1760128028.088:4): pid=12097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1535" name="/newroot/285/cgroup.controllers" dev="tmpfs" ino=1489 res=1 errno=0 [ 274.440143][ T30] audit: type=1800 audit(1760128028.118:5): pid=12097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1535" name="cgroup.controllers" dev="tmpfs" ino=1489 res=0 errno=0 [ 275.005507][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 275.062257][T12102] dvmrp8: entered allmulticast mode [ 275.746431][T12103] lo speed is unknown, defaulting to 1000 [ 275.752230][T12100] dvmrp8: left allmulticast mode [ 275.940157][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1540'. [ 276.886201][T12145] tipc: Enabling of bearer rejected, failed to enable media [ 279.184579][T12185] lo speed is unknown, defaulting to 1000 [ 279.240729][T12190] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1561'. [ 279.275275][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 279.290923][T12190] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1561'. [ 279.323928][T12190] netlink: 'syz.0.1561': attribute type 6 has an invalid length. [ 279.357441][T12190] netlink: 'syz.0.1561': attribute type 5 has an invalid length. [ 279.380659][T12190] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1561'. [ 279.415058][T12190] netlink: 'syz.0.1561': attribute type 4 has an invalid length. [ 279.452434][T12199] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1565'. [ 279.465135][T12190] netlink: 'syz.0.1561': attribute type 4 has an invalid length. [ 279.528050][ T5826] lo speed is unknown, defaulting to 1000 [ 279.536103][ T5826] syz0: Port: 1 Link ACTIVE [ 279.563056][ T918] lo speed is unknown, defaulting to 1000 [ 279.841916][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 280.112463][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 280.134722][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 280.170214][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'. [ 280.521119][T12252] tipc: Enabled bearer , priority 0 [ 280.557554][T12250] batadv0: mtu less than device minimum [ 280.966132][T12272] sctp: [Deprecated]: syz.1.1583 (pid 12272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.966132][T12272] Use struct sctp_sack_info instead [ 281.039125][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 281.063706][T12272] netlink: 'syz.1.1583': attribute type 3 has an invalid length. [ 281.323703][T12252] tipc: Disabling bearer [ 281.624318][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'. [ 281.646152][T12290] bond1: left allmulticast mode [ 281.655987][T12290] bond1: left promiscuous mode [ 281.661136][T12290] bridge0: port 3(bond1) entered disabled state [ 281.716146][T12290] bridge_slave_1: left allmulticast mode [ 281.731346][T12290] bridge_slave_1: left promiscuous mode [ 281.737356][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.769364][T12290] bridge_slave_0: left allmulticast mode [ 281.783216][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.043749][T12294] lo speed is unknown, defaulting to 1000 [ 282.303187][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 282.323792][T12321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.567843][T12331] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1600'. [ 282.620019][T12331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.670384][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1601'. [ 282.722983][T12336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1603'. [ 282.978002][T12346] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1607'. [ 283.112920][T12347] lo speed is unknown, defaulting to 1000 [ 283.147800][T12351] Cannot find del_set index 2 as target [ 283.402576][ T30] audit: type=1107 audit(1760128037.098:6): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='@*H?ت1U]/azjKE [ 283.402576][ T30] R62<OB YɚqJ68KOuW[ӄͩgUy+5~ }v{, 'V`/O-Kc^_^c<Ñ-B9&cڧdX]2\~Η^\)>1J9Aew/4>*;f?l(DF$)25G?I3]FGpc*RI%>} [ 283.402576][ T30] q9"Т$~"d̙НGcRBww 1 [ 333.439951][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.577090][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.019229][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.668435][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.609988][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.719679][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.939777][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.798890][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.079691][ T5825] bond0: (slave syz_tun): Releasing backup interface [ 337.158557][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.100650][ T5827] Bluetooth: hci0: command tx timeout [ 338.329566][ T5825] syz_tun (unregistering): left promiscuous mode [ 340.189294][ T52] Bluetooth: hci0: command tx timeout [ 340.259662][ T52] Bluetooth: hci1: command tx timeout [ 341.190045][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.289673][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.389197][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.457512][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.559994][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.739965][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.839961][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.220411][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.259635][ T5845] Bluetooth: hci0: command tx timeout [ 342.349344][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.378573][ T5845] Bluetooth: hci1: command tx timeout [ 342.528959][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.559020][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.089080][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.460503][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.338203][ T5827] Bluetooth: hci0: command tx timeout [ 344.370965][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.429770][ T5827] Bluetooth: hci1: command tx timeout [ 344.748644][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.387636][ T5840] Bluetooth: hci3: command tx timeout [ 345.560052][ T5827] Bluetooth: hci5: command tx timeout [ 346.509140][ T5827] Bluetooth: hci1: command tx timeout [ 347.469786][ T5827] Bluetooth: hci6: command tx timeout [ 347.480675][ T5840] Bluetooth: hci3: command tx timeout [ 347.618870][ T5840] Bluetooth: hci5: command tx timeout [ 347.778548][ T5913] syz1: Port: 1 Link DOWN [ 349.548491][ T5840] Bluetooth: hci3: command tx timeout [ 349.550107][ T5827] Bluetooth: hci6: command tx timeout [ 349.700480][ T5840] Bluetooth: hci5: command tx timeout [ 351.629155][ T5840] Bluetooth: hci3: command tx timeout [ 351.649973][ T5827] Bluetooth: hci6: command tx timeout [ 351.790890][ T5827] Bluetooth: hci5: command tx timeout [ 353.799699][ T5827] Bluetooth: hci6: command tx timeout [ 361.710609][T12561] smc: removing ib device syz1 [ 362.705744][T12653] lo speed is unknown, defaulting to 1000 [ 383.990205][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.369256][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.648986][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.190570][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.828864][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.219707][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.290865][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 403.429478][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 403.551093][ T5827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 404.189224][ T5827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 404.450030][ T5827] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 405.330604][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 405.479170][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 405.569256][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 405.638808][ T52] Bluetooth: hci2: command tx timeout [ 405.720513][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 406.140141][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 406.290699][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 406.540218][ T5845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 406.776522][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 407.029492][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 407.709621][ T5827] Bluetooth: hci2: command tx timeout [ 408.251000][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 409.088053][ T5827] Bluetooth: hci7: command tx timeout [ 409.790312][ T5827] Bluetooth: hci2: command tx timeout [ 410.400267][ T5827] Bluetooth: hci9: command tx timeout [ 410.928793][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 411.030865][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 411.149881][ T5840] Bluetooth: hci7: command tx timeout [ 411.290661][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 411.538557][ T5840] Bluetooth: hci8: command tx timeout [ 411.610859][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 411.859822][ T52] Bluetooth: hci2: command tx timeout [ 412.029669][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 412.519929][ T52] Bluetooth: hci9: command tx timeout [ 413.259239][ T52] Bluetooth: hci7: command tx timeout [ 413.619641][ T52] Bluetooth: hci8: command tx timeout [ 414.610886][ T52] Bluetooth: hci9: command tx timeout [ 414.750372][ T52] Bluetooth: hci10: command tx timeout [ 415.328496][ T52] Bluetooth: hci7: command tx timeout [ 415.715559][ T52] Bluetooth: hci8: command tx timeout [ 416.665709][ T52] Bluetooth: hci9: command tx timeout [ 416.829374][ T52] Bluetooth: hci10: command tx timeout [ 417.010247][T12645] lo speed is unknown, defaulting to 1000 [ 417.779819][ T52] Bluetooth: hci8: command tx timeout [ 418.900542][ T52] Bluetooth: hci10: command tx timeout [ 420.990868][ T52] Bluetooth: hci10: command tx timeout [ 443.429850][T12554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.907991][T12554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 445.457301][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.899162][T12554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.139403][T12554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 458.278707][T12554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.527954][T12554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 462.289019][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 462.490456][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 462.770453][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 462.818546][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 462.859090][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 463.259882][ T5845] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 463.478911][ T5845] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 464.359148][ T5827] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 464.519863][ T5827] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 464.588865][T12554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.605409][T12554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 464.649605][ T5827] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 464.948816][ T5840] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 465.089733][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 465.180125][ T5840] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 465.409725][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 465.959030][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 466.089755][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 466.260750][ T5837] Bluetooth: hci11: command tx timeout [ 466.849616][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 467.948635][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 467.969670][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 468.338726][ T5845] Bluetooth: hci11: command tx timeout [ 469.619957][ T5840] Bluetooth: hci12: command tx timeout [ 470.039859][ T5840] Bluetooth: hci13: command tx timeout [ 470.430010][ T52] Bluetooth: hci11: command tx timeout [ 471.098810][T12647] lo speed is unknown, defaulting to 1000 [ 471.478292][ T5845] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 471.710855][ T5845] Bluetooth: hci12: command tx timeout [ 471.749332][ T5845] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 472.009392][ T5845] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 472.100419][ T5837] Bluetooth: hci13: command tx timeout [ 472.400370][ T5837] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 472.519075][ T5837] Bluetooth: hci11: command tx timeout [ 472.537092][ T5827] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 472.737659][ T5827] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 473.020936][ T5827] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 473.060582][ T5827] Bluetooth: hci6: command 0x0406 tx timeout [ 473.300114][ T5837] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 473.671005][ T5837] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 473.800361][ T52] Bluetooth: hci12: command tx timeout [ 473.950703][ T5837] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 474.188714][ T52] Bluetooth: hci13: command tx timeout [ 475.869435][ T52] Bluetooth: hci12: command tx timeout [ 476.259768][ T5837] Bluetooth: hci13: command tx timeout [ 477.238478][ T5845] Bluetooth: hci15: command tx timeout [ 478.370971][ T5845] Bluetooth: hci14: command tx timeout [ 479.309610][ T5845] Bluetooth: hci15: command tx timeout [ 480.428527][ T5845] Bluetooth: hci14: command tx timeout [ 481.379742][ T5845] Bluetooth: hci15: command tx timeout [ 482.498922][ T5845] Bluetooth: hci14: command tx timeout [ 483.466758][ T5845] Bluetooth: hci15: command tx timeout [ 484.589141][ T5845] Bluetooth: hci14: command tx timeout [ 506.840492][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.349497][ T31] INFO: task syz-executor:12650 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 511.749986][ T31] Not tainted syzkaller #0 [ 511.979615][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.389053][ T31] task:syz-executor state:D stack:23848 pid:12650 tgid:12650 ppid:1 task_flags:0x400140 flags:0x00080003 [ 512.649089][ T31] Call Trace: [ 512.830532][ T31] [ 512.949353][ T31] __schedule+0x1798/0x4cc0 [ 513.269141][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.380045][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.599678][ T31] ? __pfx___schedule+0x10/0x10 [ 513.919184][ T31] ? schedule+0x91/0x360 [ 514.038703][ T31] schedule+0x165/0x360 [ 514.188164][ T31] schedule_preempt_disabled+0x13/0x30 [ 514.278208][ T31] __mutex_lock+0x7e6/0x1350 [ 514.410976][ T31] ? __mutex_lock+0x5bb/0x1350 [ 514.558400][ T31] ? add_one_compat_dev+0xee/0x5c0 [ 514.650093][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 514.738678][ T31] ? rdma_dev_init_net+0x1d2/0x270 [ 514.869751][ T31] add_one_compat_dev+0xee/0x5c0 [ 515.020824][ T31] rdma_dev_init_net+0x1dd/0x270 [ 515.309540][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 515.460618][ T31] ops_init+0x359/0x5c0 [ 515.598691][ T31] setup_net+0xfe/0x320 [ 515.688505][ T31] ? __pfx_setup_net+0x10/0x10 [ 515.839414][ T31] ? copy_net_ns+0x337/0x4e0 [ 515.947787][ T31] ? down_read_killable+0x1d1/0x350 [ 516.099908][ T31] ? preinit_net+0x47d/0x740 [ 516.250316][ T31] copy_net_ns+0x34e/0x4e0 [ 516.378711][ T31] create_new_namespaces+0x3f3/0x720 [ 516.557960][ T31] ? security_capable+0x7e/0x2e0 [ 516.699379][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 516.820683][ T31] ksys_unshare+0x4c8/0x8c0 [ 517.017994][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 517.150121][ T31] ? dnotify_flush+0x1db/0x5e0 [ 517.269156][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 517.408332][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 517.528045][ T31] __x64_sys_unshare+0x38/0x50 [ 517.657642][ T31] do_syscall_64+0xfa/0xfa0 [ 517.761051][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.959569][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.180558][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.319580][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.479050][ T31] RIP: 0033:0x7f3943f906c7 [ 518.599345][ T31] RSP: 002b:00007fff03ce2f28 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 518.770456][ T31] RAX: ffffffffffffffda RBX: 00007f39441e5f40 RCX: 00007f3943f906c7 [ 518.989847][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 519.240088][ T31] RBP: 00007f39441e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 519.430294][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 519.549265][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 519.920274][ T31] [ 519.998301][ T31] [ 519.998301][ T31] Showing all locks held in the system: [ 520.199328][ T31] 1 lock held by khungtaskd/31: [ 520.336725][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 520.679953][ T31] 2 locks held by kworker/1:2/918: [ 520.809420][ T31] #0: ffff8880b873a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140