last executing test programs: 38.751104509s ago: executing program 0 (id=4014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendfile(r1, r2, 0x0, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x40) (async) 38.329321128s ago: executing program 0 (id=4020): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="4e1fcf6b0000000000000000", @ANYRES32=r1, @ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_GSO_MAX_SIZE={0x67, 0x29, 0x68098}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc6fc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)={@val={0x1c, 0xf5}, @val={0x2}, @mpls}, 0xe) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) listen(r3, 0x80000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000ecdb5cbb80cce0eb2445939cf496e8b3b921844e6a089b8f9de38800"/44, @ANYRES16=r9, @ANYBLOB="01002dbd7000000000003600000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 38.183459342s ago: executing program 0 (id=4024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 38.182147514s ago: executing program 0 (id=4025): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000004000000850000002a000000850000001100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='ufshcd_uic_command\x00', r0, 0x0, 0x4}, 0x18) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40004) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a0001f5abaaaaaaaaaa000008000f000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000540)}, {&(0x7f0000000300)}, {&(0x7f0000000480)="d91197e00f747fc820d9e533b12152b68ad35d567ae53cdee5f5a8747909c8e0f1d6c55d041443d850d904b0108b5d0915", 0x31}, {&(0x7f0000000700)="c3d10be65851562ae15faa03a71b1e3074f3e7d344f57b0700000000000000de691fd6ea136baf2d54eb98705f94742d03a08ac9677061d57f7ee5368237df32b9e46e49c424bc811c039cb9428fd0b9c41d3d3cd12dc4fd9381229699214c4c5bf736df2781db3bc714628dca3fc621b6e9f2cca6b2aaf079a83b2a3b348ab03f761b810777df5daa23e11a0dd20080b08340bd9f966d7dcde298d31f82026758ae4d0118851e", 0xa7}], 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000300)=0x60) accept4(r2, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000180)="db", 0x1}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0xe7, 0x4, 0x3, 0x16848, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) close(r5) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x54, r7, 0x85ee6214518f3c89, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 38.075921334s ago: executing program 0 (id=4028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000002c0)={0x2b, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e22, 0x3, 'fo\x00', 0x98bc838d408af787, 0x8, 0x2f}, 0x2c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000018c0)=ANY=[@ANYBLOB="91104f000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x40, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async, rerun: 32) read(r2, &(0x7f0000000100)=""/190, 0xbe) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x8, 0xdd9, 0x3, @mcast2, @empty, 0x80, 0x1, 0xfffffff7, 0xcf33}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (async, rerun: 32) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) (async, rerun: 32) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, r0, 0x3, 0x3, 0x5}, 0x50) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @exit], &(0x7f0000000380)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xa, 0x2, 0xfffff02f}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r4, r5, r6, r7, r8], &(0x7f00000008c0)=[{0x5, 0x3, 0x1, 0x3}, {0x1, 0x3, 0x10, 0x8}, {0x5, 0x5, 0x4, 0x2}], 0x10, 0x6500}, 0x94) 37.952877143s ago: executing program 0 (id=4029): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x23, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x12) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000004a80)={&(0x7f0000001740), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448c9, 0x0) sendmmsg$inet(r8, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 22.840474301s ago: executing program 32 (id=4029): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x23, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x12) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000004a80)={&(0x7f0000001740), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448c9, 0x0) sendmmsg$inet(r8, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 5.32157475s ago: executing program 4 (id=4485): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000240)=0x42, 0xffffffffffffffc5) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4999fa8a21843244) 5.221146266s ago: executing program 4 (id=4487): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000040100000f1f7000095"], &(0x7f0000000480)='GPL\x00', 0x8, 0x1009, &(0x7f0000000bc0)=""/4105, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x21, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd70000000000001"], 0xd4}}, 0x4080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r6, 0x0) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r7, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x235, 0x7fffffff, 0x7, 0x4, 0x8d, 0x1c, 0xa, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x8, 0x3f9a, 0x0, 0x800000000ffff}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="06000000200001030000000000000000020000040000000000000000050016000400000094630894e9dfab08b19c"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000e7876ba85a4286750c08715c82a3882c21310bcc5bbf9038c0f1c0b6a7d1315a8bda650bf0199951e410effcb8b9481c06b1a8982492b1437330c9a432d7406f30ea2127711a4bfb59db069927d9887c418676d56b665c278b70e9f516cb9f607b98dfa26ebdc9133e76c82f518b4199fe3f15eae3e44173628b8203a8b8c476ceb3a3267359fd572699d5932e011202a759938e68145431e6268204e475f9377745f75169f7558d8ba392e290f5c4af62920722936a4d3db68f21bb05349879fc7ce8c5ac7541f79901b029193c50e00bfa11fd01f75bf827419f7819eac195b63c33", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25280000000c0099000700000035000000060036000600"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004001) close(r1) 4.178330671s ago: executing program 4 (id=4505): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080036573b4d1e96", 0x8}], 0x1, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x12a}}], 0x18}, 0x24000044) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRESOCT=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000700), &(0x7f0000000140)=r3}, 0x20) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="030300000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r12, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000280)="d1605393ccb3d1d1237376ab48567663988a38b865fd1d1be41e10037646b2d08eddc335e670c3d7c32a844f42f91e6c9294f7f44b681ef5d5a628d67799", 0x3e}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) mmap(&(0x7f00007e3000/0x1000)=nil, 0x1000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x2d0a3000) read$nci(r8, &(0x7f0000000200)=""/100, 0x64) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}]}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r18 = openat$cgroup_devices(r17, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r18, &(0x7f0000000300)=ANY=[@ANYBLOB='c'], 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xe0000000, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}], 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2100000000000000000007000000080004000a010e382714db1038650101"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) 3.241719351s ago: executing program 4 (id=4515): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) accept$alg(r2, 0x0, 0x0) (async) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc7", 0x6}, {&(0x7f0000000a80)="7ba863ad0844e1bd4dbef819ad938d2eee02cc1497ea33634963307c75b71ef12b9fbbea39f886b64512ad1872b4a443bc9cc208de87c837a95fd97febf6075d78c0403a08a84d9a3ba8cbb6ea4a407c45d4dc24888128c42aa1d6717e0edd917db8439b8b5f51eee2dceaab1ef9d195286d1b5764996c37012da4", 0x7b}], 0x2, 0x0, 0x0, 0x4c004}], 0x1, 0x51) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000180)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000180)={0x77359400}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791020000000000071043a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000080)=0x4, 0x4) 3.146210292s ago: executing program 4 (id=4518): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000002c0)={{0x21, @remote, 0x4e22, 0x1, 'ovf\x00', 0xc, 0x8, 0x4b}, {@broadcast, 0x4e24, 0x2003, 0x0, 0xff, 0x800}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.986094791s ago: executing program 3 (id=4521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) sendmsg$nl_generic(r6, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x274, 0x3b, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1b}, [@nested={0x1a5, 0x51, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @typed={0x8, 0xe1, 0x0, 0x0, @uid=r7}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x80000}, @generic="f600c66ef305935340f0dcb491d24ff873ea4e5b030afb7d1db9dd537f0ce436bf029b2ce961a491836f37b11db29ca88393f915c2888edbd74ad980e15783220f6c8c66c9276c338c3d21c677f36aa826728d92eabe8d6df869185263c7b8d2881f48b6e4559f946a3ba46ee526fd944a8a00a94fa797970a6e2098643c36d4be822cdda1403515c870c32ed960ea35418d9ef667ca9153363be94f5c5d10cd912f8a8987f94c2fd29152937d4758ea79d2b1dd2545b8f8e2b9c1add81a07372a", @generic="ef55e143643999614e271821910d5806bccf265aa1f826a50951015be7a81343ecee58cc2204c8c45c0d36d0ac088211c26aa7f654d2bfb1d7e44556087c38789f27880a0d6c7b6ac950de038d052d7d7e628e71204fb9d16557c3a68ece709e7a3dc74f5b0cc46a6c6036ec0286c462ded9574f172455b799494605717056c01284053d0afc2c97a9864963f078e176535e79e182c8f919bdb3ed2185bdd470683b68e48da99348dd0c389b6302a25cab616133215fa43c69ff10b9640d339b", @nested={0x4, 0x1}]}, @generic, @generic="46dbdec4a03a252ec95ea8ed2bf0188e68d3911ed6a7266e11429fac07bf5ccf9337bdbaefb4433cb2027e8828a6984662aaba211a875d7beeae392691e2245137b519736fa2ae4b7eca58d8f15e0c042fbf2ea7e97dd6cba1f7b61109a4549fe272404c0c20f9aacf98fc491767b0886ebedd38c0e226d5fa9ebdcdf13c97bbcf315a36a46ddcbc337127526585c4e2232243adf6abd9f71296e1fe4489fd2ce2dfcdda0a2f7c37d64c4a4c8708ffe13fd86d1502e256fc"]}, 0x274}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000018}, 0x4000080) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = socket(0x21, 0x800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) 2.033132561s ago: executing program 5 (id=4527): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) socket(0x10, 0x3, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000180)={@multicast2, @local, 0xffffffffffffffff, "e0d169e366dc2032a1beca0f621eaaf96389d7612f6346eb9fa929ac17cb2038", 0xc28, 0x6, 0x7fff, 0x200}, 0x3c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async, rerun: 64) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) 1.94577043s ago: executing program 1 (id=4529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/248, 0xf8}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b80)=""/13, 0xd}], 0x1}, 0x253}, {{0x0, 0x0, 0x0}, 0x588}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=""/162, 0xa2}, 0x9}, {{0x0, 0x0, 0x0}, 0xa}], 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1a000, 0x0) accept$netrom(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xb0, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x83, 0xac, "1653b59c2eb05f806bf1a46d57bdcab759410a04e32ff0a01b82f8bec7eadb16b2f41befa8ad736f995f920c54fdd31f70f13743d55e98eaa0d724e8fb8f28a8022cad8d31af19bb88be801776e10156984b0bd05e52b851c6626ae22b6680f24a7de67d45b383f9b682c5486924fbc693ebf501c7a857578cfd4b30524b54"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4024010) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r1, 0x9c3fa077fa966179, 0xfffffffd, 0xfffe, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.817804111s ago: executing program 5 (id=4530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000001010400000000000000000200fffe1400018008000100e000000108000200e00000010c0002800500c9ec8d45f2e3d66980251c101eedf0fd1702a468018e3e7c4806536ed8b3e0c0b98c96a0672e433b7f5f36fadba764096412b7b8e5706d95b3d78eae756c4c5ba2323f810b030000005f71c9be54174255b5b73c9a0f5adc475088b3d6507ea3ab5c1eb6976fbc8e05416737549ee812cad4c83d29ee71d5ae9d5460cd577eb06e03ea398d141d102b58f26a1973a10c5b9479f653266d71"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.816680543s ago: executing program 5 (id=4531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009f000000000000000088a8600081"], 0x3a) 1.617725845s ago: executing program 5 (id=4533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[], 0x3e) 1.233467162s ago: executing program 2 (id=4534): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000900000000000000000000001801000020786c0500000000002020207b1af8ff00000000c3a100000000000092ff07010000f8ff1400b702000008000000b70300002f00000085000000060000009570cb7e00709f7e0f8d676935cf68de1ad693ae"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 1.186591301s ago: executing program 2 (id=4535): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001000)=@deltfilter={0x68c, 0x2d, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x6}, {0x2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x454, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x448, 0x2, [@m_nat={0x21c, 0x18, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x949d, 0x1f, 0x7, 0x40, 0x5}, @dev={0xac, 0x14, 0x14, 0x3d}, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x4, 0x8, 0xd9}, @broadcast, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0xffffffffffffffff, 0x8b5, 0x1}, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x8, 0x3, 0xe, 0xfffff801}, @multicast2, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x9, 0x6, 0x4, 0x187e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x588c, 0xf53e, 0x4, 0x5, 0xe0}, @broadcast, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9, 0xffffffffffffffff, 0x6, 0xfffffffd}, @local, @loopback, 0xff, 0x1}}]}, {0xd9, 0x6, "96a477077b53ce1101c43cc4981f0499512389d2ef19a4037d65a36fe5a939ff8b66108b987b1e318aa814943d6902f895cba04876ca84d2ac4c240b84f21a967589ec3198690f65c7a9e5aaf7579b6702082320fa3901543249f736c01b046efd5a1c71a53977a11b42f39fc733943f01b05e7444219e29e9cbbe7c4422a6e9edebb17b602d10f9b05f95508f10efbc51f979e63f13723fafe032fde7dacd593595f0ae74ff1f81f91058910510465f237f346634795031a1f4eaf63777ca8091fc9fdbdafd84455fdb157a25322d5dde666ff4ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x15c, 0x14, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x95, 0x6, 0x6, 0xcfa4, 0xf0f}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x8, 0x7, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x30, 0x1, 0x7, 0x10, 0x1}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x6, 0xffffff48, 0xbe81}, 0x3}}]}, {0x8d, 0x6, "f3781d8835f045999c1d210f3cc1d891421f78031619c5690e49c9ac4e99e166c247c2d3108e2104f723ffc0576199fcc72e5a8e51000b653fd3d6d58d3b89a9147dffc76c1aa5ff9ceb39c1086808312c4a240c3cfd0d766d66a20b298b39057525c540c40dbf39b6252127879950a5484ae411cfc42c6606d277173ebfcbd62b1e78af039dc63a90"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xcc, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c06, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1eb3, 0x4}}]}, {0x85, 0x6, "5f5038c5c5d9a629e2c51ccb36d583d818e81ccb04d5a7964aab605c15e55ed1d5e1eb5d117c2b1be76cc170993fa5742171cd4576bdcbe0f30d9b3ca3094d1a69965366d827954d2b9d8799fb4e4283d79e3a1142640c2dfcdff4a8442032771322f95bb86db86f0052c9c98badadd017a2f5fadf14f215c9498bc8623962ccb1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x87, 0xf1}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1d0, 0x2, [@TCA_CGROUP_EMATCHES={0x84, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x8001}}}, @TCF_EM_CONTAINER={0x60, 0x3, 0x0, 0x0, {{0x2000, 0x0, 0x5}, "acce1075118c32115b96661fb1be5aa2332185b89aeb62f11c7f9fb43e05b8f36df3b3c8b384e4bf41c27ef4f8341d77d2b1cef028e3504175b38f245c0f9732f3cc1b5e53589545b17e5aeb3c429569d9"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_CGROUP_POLICE={0xa0, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xffffffff, 0x9, 0x1, {0x2, 0x2, 0x3, 0xe, 0x7, 0x7fffffff}, {0x0, 0x1, 0x154, 0x57b, 0x8, 0x9}, 0x3ff, 0x29, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x8, 0x0, 0xf0000000, {0x2, 0x0, 0x62c, 0x0, 0xf, 0x8}, {0xf8, 0x2, 0x2, 0x9b6, 0xa, 0x8001}, 0x40008, 0xfffffffc, 0x1}}]}, @TCA_CGROUP_ACT={0xa8, 0x1, [@m_sample={0xa4, 0x6, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0x67, 0x6, "b25ee581e22fa5e0c38fc6633acbaee4e9c5819a48a5a80e19267bc964043ff18a18afce66d8d515e1e644c1d96c79741de1d8dd12502bc47a31b8686d09d9fddf1fb9b6f83728fe01bbabe0b6104180b3740b5a1f489048b72b7a16902ed12f43607d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x68c}}, 0x20040054) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff07000000000000000000008500000036000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, &(0x7f0000000180)="dcdad0f87c77ddaee7", 0x0, 0x2, 0x0, 0x6}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = socket(0x2b, 0x80801, 0x1) bind$unix(r6, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.155450564s ago: executing program 2 (id=4536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a9, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x2}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) recvfrom$inet(r2, &(0x7f0000000540)=""/234, 0xea, 0x40000182, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 1.052416481s ago: executing program 1 (id=4537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00}, 0x94) 980.74911ms ago: executing program 1 (id=4538): r0 = socket$isdn(0x22, 0x3, 0x21) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FICLONE(r0, 0x40049409, r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnexthop={0x24, 0x6a, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008010) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000180)={{0x0, @rand_addr=0x64010101, 0x4e22, 0x3, 'fo\x00', 0x5, 0x8000, 0x71}, {@empty, 0x4e24, 0x2000, 0x40, 0x53cc, 0x7713}}, 0x44) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ae3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000011}, 0x24040000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}}, 0x4050) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000540)={&(0x7f0000000440)=""/243, 0xf3, 0x4, 0xc00000}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000580)={0x10, 0x0, "5f52c8169047a295a1b9005e3c2d5cf1"}) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f00000005c0)=0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x2, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x1a, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0xa, 0x0, 0xff}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000800)=[r2, r2, r5, r6, r2, r2, r2, r2], &(0x7f0000000840)=[{0x4, 0x3, 0x8, 0x1}, {0x0, 0x5, 0x0, 0x6}, {0x4, 0x4, 0x2, 0x9}, {0x4, 0x4, 0x10, 0xa}, {0x242, 0x1, 0x8, 0x8}], 0x10, 0x1}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x30, 0x5f]}}, &(0x7f00000009c0)=""/166, 0x28, 0xa6, 0x0, 0x382, 0x10000, @value=r2}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r2) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1a4, r8, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xcd, 0x3, "dca06ddcdad7e7d90d3673f99a3a21fdd9a4d78af6885a58acac64e8c7fa73fa1149a0938eeba5698997d5f8e1ae190f4ac34bfc9e4deecdb1c501f41119157ca72be183f2d835c3039c00e48eead8ec3f5c8647d8b6c16be85cae9dcfdb2d3c459c1c0ccb66dca197116f30d593c8dfc2fb59c6cc36e3991a391d7e394f0f38a5fcbf4161e454fbb2700fbaf9eb93a3d7b73673572c4482e693c0b9abc8822858eb97313ecd7bed17f5b626e89feadb9e67cc6acacf8cca0350418d0c60a4d22183e0ec1131eea2d8"}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd1ca}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x48c0}, 0x40045) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000d80)) openat$cgroup_type(r2, &(0x7f0000000dc0), 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002280)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x13a4, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0x1360, 0x12, 0x0, 0x1, [{0x12e4, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x12d4, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x1004, 0x3, "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"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xfd, 0x3, "d712e51841a809901629f3ca3eef39ca1da56a6bd792bfdcac02fbd0a94361f0fb220a02c2136beea93e549a2544586c9cf8c61d4c9719fb4668e5fd7c9bdd3d13ae0ee8eddf729e1cd42ff7a55c005d4cf58155ab834a221457a7db6b6a12919e699534ce778255cd98681dfb7733c335d0f6dbf0bfb68aa2e4b7e9c72839d0c19244f1de3397a2814e116a2527c42c5006f5a8b77511c3364503b2d97c14667eb555312df6fccd22b7d52ca1bb731f70c90718866d0c499a7063b4ba39d98b58398d88a9b4ad5103591c4505730b786dd7a05cf805f71dd790bd166064afdcdf555230c11bef656984148dff316045ec6529c9cf6b5c1930"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4d, 0x3, "36500130490d7e3b01de84a044bdc448567529eee24ac7961129f276f63b35b5281ccaea6981d32cd5ee1b373170a55aafe3f53ad8e9421008995dafd3dc12af4ff8ce96e63e66bd7c"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xcf, 0x3, "6103ec0cfdee95cc7563397a14603e4ddeaa9ad8cd00908748bf017983ef5a1fbff8ac5a8ab91be2838e056962980e9d89281183fb2df43383ae4213389c02e14221ce2325cd4adf0515d084a6de52f35b0dac9b0a072170f02051e78ff3b55ecacddf3adad77e9879edea30f4295ef8651fe8e6adab00378467f343abbfce11260e3185c10cac263e886323b7b689bba2b22f813b01397a4ac030f679377a9a13b506d0e6681c4fe98150c5291b0595e7fce733f822e7a1d4599826e6a6515b3b37c7af268827c625780a"}, @NFTA_MATCH_INFO={0x83, 0x3, "160befb923fdf741a4f1894c96139324a0e05cfc2312bb711a188905ad8a66d97afc04b90b6e27fe306f45e01578a295b313bd7179586ef547a1a23cdbe154373895ace9aaf0919d1fa69a6b0f824950a1bd06c7773ee4216d0459e61fe8203c0b8fc655d12201e0ff29e2a775471c85760784221701242b290b4270849284"}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x13cc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002300), r7) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000024c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002480)={&(0x7f0000002340)={0x128, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xae}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x50}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20044810}, 0x4004000) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002cc0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002880)={0x3c4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x194, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\\-[^{},\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sed\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4260}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\xd6+\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x90, 0x5, "6643691092d5481e4ca8d66b4e1607deea5d1b267f8b90eace11900ef0e0b0b6e51d7c6026e29510cdf864299f49cf12701b603e3632bf0cafd647967484743e057ff3f595b82f2b488d04dcf741178c08432662037cfb5f14d93c3a305f52885e0d47d8b0f79dd4f2933aca8a433fbf98573d3b6c585884a9b0928bbac38189fe1eec6d1127d70fb2f56571"}]}, @ETHTOOL_A_FEATURES_WANTED={0x170, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x16c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'fwd\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe09}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fo\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'match\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'match\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'cpuset.effective_cpus\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^)A{}-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 905.154107ms ago: executing program 5 (id=4539): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000580)=@ethtool_rxnfc={0x2f, 0x10, 0x6, {0xe, @usr_ip6_spec={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffbf8, 0x3d, 0xe}, {0x0, @remote, 0x0, 0x4, [0x7, 0x5]}, @ah_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, 0x4, 0x56}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xee29, 0x6}}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='f2fs_direct_IO_enter\x00', r5}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt(r9, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r9, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0x7, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @private=0xa010100]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0x7, 0x78, [@rand_addr=0x64010101]}, @generic={0x9f, 0x9, "4f91d6e7a9f4e7"}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="f5af24bd7009000000000e00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES16=r5, @ANYRESDEC=r3], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 902.533373ms ago: executing program 4 (id=4540): unshare(0x6a040000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) unshare(0x600) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) 887.660803ms ago: executing program 1 (id=4541): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x1ff, 0x6, 0x5, 0x9, 0xffffffff, 0x1, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008050) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) poll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x1002}, {0xffffffffffffffff, 0x202}, {r5}, {0xffffffffffffffff, 0xc}, {r10, 0x600}, {r6, 0x11}, {r4, 0x40}], 0x7, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYRES64=r8, @ANYBLOB="63b625c11eb9056d60de1f880754dc07f2326195434c248a78b30a36412c10f748234668454fae736db1f2cd87e1d67327b41fac90bc0fa498a1612778f899d61738fcbd530c35ad3bf17b3b4fe8f2f0ecf4c05b96a8b7de58e40daf98dbc480344e09a28cc96b035c13581499acf210de364c7ed499079ded54c6b9ede10591517a0faf6aad8ccc0fde49a76ac7236684d731b217ceb08658", @ANYRESOCT=r10], 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0xe2, 0x81, 0x8001, 0x46, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8000, 0x8, 0x0, 0x7}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 699.352735ms ago: executing program 3 (id=4542): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r11, 0x1, 0xffffff84, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xa8, r12, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r15}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) 631.419814ms ago: executing program 1 (id=4543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x20, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000100)=0xc) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)={0xe34, 0x1f, 0x200, 0x70bd27, 0x25dfdbfb, "", [@nested={0xe23, 0x122, 0x0, 0x1, [@typed={0x5, 0xeb, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x28, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @generic="20bba05539c610f507f4d3b119da2065013c6bd80cab1fb716d16f02ddb1886a509f8d3e3808300eadb1f845ae7eccf3dd598695f30a90ff42feb54355e2c531e0b9c3193178537f688e5d12840ad43d024385b5a3e9f5f8d7abb996a58818037cc300f1951c4f44d001c39ffbf6a1409a39f2d0b031b9abd1dbc45212dc3b3164510d6b8280ad7988fb47959bff1667b3027ce557b861c96f15e75a6eada527480f7a7fbfe3", @generic="4abda9114cca21c2a06f03a5c34ef6607f5eca1a6532d21216dd57c926837a45ec9850c6143802be51d6c680d57e759723ffb6a9e9d7b11601298943508a85917f35be40c401bd963cd7ea7290b0894077e80bac7cd633ab0d82a5dccae6ccfa2e68e800b2b9948bf2dd88d3e15f75c62fd1fcf522f5f700febfaccd21e566574c78d12f87256aaeb081b4f75bdb0a5ad1aaf8ddbc3d59c0a7e5505eb90154056117586826302ba1ad4b06ae4e9afda8a5455c0a2dc406125da9ee2e3b63ff9ce6d8931b297084039cf59b3c67805406836acc318d39f2cf7575b815acd5041f4e79d1c88cffc7f7afe3ac6de07a2c798ec409da6b290f3cb1ea168ac707113135a11fb43ebdafa8912718e29148a8c8155a5896d4e6b00603fdbae89e12159ad6ae0bcb6f95c42d49a63b86d378f516af41782249ad1164c19f7678f4fe05e5a006216abc2296781f9cc346b82deffaf731a00f602d5d9a2ab0cf83efb43b952aa17c656c4ffa8f07a721358e479d1689ff6487acf2c1261c6f3b2ad53fa1047f02883ce9df561b68a08b68cb8503a718da829c88eafbff84bc9414131a6402997dda1a0f1374eea0615d54e0729553debdf9109acd51e6410385cdbf44a1f17c565f362b92c6427e35b6994df27ad10be9b644a494c02491db2da36d762d05fec9194afe80164c550a69c3a6ab1702d591cfb48dbde081bac81425c15fe2bad6a14813aea82c53c2668eff80c0dfbceacc47a7cc423972a883bc3532d618aa8cb4554e381480eaf9d3adeba249e4f15e29c0e806a0f9153bb429bb344c01f05e44dd7738b06014e1a7f62ed9bd6e1bccfb74cf0fe36ba5f29f5ba7d93c6539b8a043edd982f0fd0a2d5593d2e514bbf4f5bbe2983f61106c5e7148b9098d89afd9c578c0aeb013fde3ef11a94ad6c40435ab71149bf65744f1e3dbf3501783dcd71b469d468038d66f2f24c49c5bdceba52956f042be8270453d283bac6dc3bcc7beabca2f5843c4cad6662c350ad0c2794c812c2393c4022b03d77fb44ac64adc183e6a0f4270a545d3897f77d1ffb0f7a7d5875741bd31a56922c4fbb1791a2efaf5e4b95e8dcdc17763bfbe08870032ab76d8b4bb89fcb195c963805cc6957ee870175146d66743c024b586dc9c1558e5e3882ae4f65fb1e95ac0a669326a2ff14de7ce97a9f9e7220a3560c590b5671f49a147ed11fef731be36eaeea4bdecafb38cbf8bfccd0b82ecef82057a93103717d38a88f3fbc416f4a6e780eb6affc12a775c6dabb7a7e544c1ae203dcb27fc0e25d21372b2735be30faf3077ca26a06893aa1316f408389c09e24b0eb57ce67c74fbe0aae8a6f21fd80032857d670a95a5ead1c629927bcc70d8c2f6c3214f6b9d8b5575b200f4aca6cd3989d34ab53661823efb658d93ce5d835b62a1cd79a128660ec62d3a59e6a3e37a6a7c8a11b6e8fc45e11f8ff949955a4e8f36133f94c236a0a090528e36a861af85de6069d7089ef739bfb24ae2bbdd5168af4bc38c05d875d7b295e72d9ae38cda662ea3e3639f763900c8748f06d8a93fc439e37f0bc84f52710e0de36a171b9c31fe7acdf1ce9ab0788df6b17f15a7d97004937cf6c631337f8a40b4c2082c912ee95f6f2c547581c7a8b0b83e8ad8df142be7c8cb7172a85fe0621a90c29f7e81a99f34bf86e6f419a9a134a17ecbfd733ff5af4bff4f05b54faf11d86f1c03aef86abffe64f9ead83d3ac505edbc277b394aa3d507fb3e259ada34d6fd6272d088990f1a4e9f5258a1119ef67d923ebf7fbcc9d158da83ed4969861f75063839bd1317e7a89ee5365c5e1e83febf660fa5e001f9a77eb6275db735f6021d0b57f5bf09c41b79646b67b8bb6cb23271ff2ae295fa9b62f964c28aca9705a49b44c8892d9b47491a1c851f66a56be23cd10d042a3ba45da8df69eb398bb851c46dbe2fc8386a551c13e871cca2729e1ccfdd745382ad5897610d565931dbdc3d575874abcd3c9c997740aef63b9ea541e914cce799104bd433b103715fa7bd430f0678cf96631a6b8f82eb987b565254e6a1f2417cac97e5eb4b68d71f8f2288e923f3816ed7fb1d10373c9f93deeab013e6103e4a8657f5afef31e0ac85d926263c63c2ff42b2b2e60bde9be2f73a2e99cc96bfe22dc051c6b485214d27f45d645fe75074e46ece8c25e573696a83bbb420398712c853878c297b371fb6843ccd193b86eccb6ea848a329270db9f8e02ca6605d951a902c645f135e89a63c05bcb46043183997c887f891e84ef2684669be69b294aa0e7654766cc24a1fd65fc7e2c4ed2780867c37d9b38193da4888d8ac53f1ffd80ae66fa21f192d51f87c7c38b47df179e61749acf0123783448c881ae57a8442144e2f5f6d49d9c7790b6f8cf82f87104a4b9da8400a4909e6817cf3858397e6b58c799c6655af97f28452616ee40f175d1072e2fce7edc769928c7c9fe947a00a7ba751ebffa7c06f199973553d92bf071e9e5fa86f6b8565ee510e042f3372ea129248256f5e8175bcd839015545c921dafb67e9269f1824679d5a0f334fc3ea231d3c37bde2866d32b41fdf37eb0cb32cc4c6ee8025dcdd007618bd118ee709934223d70025702bc969c6b67aab346ce9ce75fe0adb1be4fc85787e319cf2bd8411f17fb05d542ba2047cd5515b329044d3b395efc10985e505a8e4bd94a636aed9ef0ea983b1e59f7e97b5170d783c754d285d8ccc5fc3f7a75eceae1954724bdad4778718dc1f8854124881c1cd5d31d44ec612b5bc034a1973b733d4e4b929b589e1ccc29bcd5440acbcbeeded03c975eb6908c84eb3c161c7b4f09167aebe1dc93c2ec3ca04c0eb01286c26e43a82bb5647269d4d01592d655bef4dde943acfa1d0071728c874f4cade9a924ede7a957ee0a1c5b1d65b5dcb7a7d02ddae0d25633f08b6c1a00d8a90db7d0a4ae0fb5b5adbcb9bcd368118c45d2abd4301621bf6a79a06fe02043cd9dabd534099ef9f21beb9f7609fc595ff8598a86c85339e53974b31d079495b6cc9f2160ac149aaf664e81ae010dfc23d04e71aafba1d6d4eeab4a6464653ff412ed088034e7f5103161c627c921245def44a319ea5a1d56086e63209657fac07a2e6e8b01cfa446bbcc57a80228847bec5dc2bd044b2a7401110328b1ccb2dde60dfb45b61f103690a75a60a23a500949ebb96f8d4726b94059759c0ca2ffa1544a569787ff86b0ddb74b107568ddbd07bacaf3a3369e2299f21ee175871e62695e200982931e310ab1a11feaa45677a4e768147da5717fbd39038b83529bcccaf8a955fed21ef224a2dcf1f542d8a2a79231e15c6884d4759838b0be6cff46d02f0e9c5629fc2c36612206bec541340090e2f3d532c38c5911d3b6d1c78fe9655ca61c947809b877a3664553816a36b9f18b6012edf85e1b4476f8813c4ffa275f0f4cddc7ee35ccf0f918346bc6cbc52bcb8929691a228043c8d8d45fbd8fb59a07f9e887317d36a62021606eaf82b393ed9a5352debc31b191aa52227041c10200fbb1517653c30d21ab8702173119bf585eb093be011128d268ba9a13db5acab34d26e219ac820d2f71cb8718dc8c45efadcc459cce294f450d090ab9f23513d7a0c6b07b8a83c54def26172e59e596ac7b9c2dfbac4dc6db5de52ebf124383b6484104f4380039bdeeb7a97f071bd41f1431e0bea2c500df7d3df3f2eb297a008589882de946ef7d08d641335505d50ce7e00324092cb7e3be8e0e11ff1db9b5c0db8e8aa196657ce11c97a43791458a810d76ce4db8f30f70563c3a67fe8a96397fd8a3961ad4f14a5092b895ccc3333f530f7758bf6d60e948782964679a5fd518136b260e2fb9c2c53dbfb5d94010c04d226c7ae1f9c337b5f6156c11e4f499aefdf244fac36fa2a85e46409042acfc9d8836650f1d619600c7063a1e124f8d36a5a3ff72e750ab89eef803100de49d974448221af53dc5c9c64792fafac0e17d608c489a70f747358d76965007d0ebebe1348c9b96fe0fbbd8f50457d0ec529abc548c4398377d884527f8fdfce3438f77ce448175c5ca91a75ad351726b9703c8918c5a002154e60bb10aa5f46da3bc27aab7db65c0e29fe4b39ca325de8f8afe342ecaddc7de62e485c6d685ce33665cfe37da99e0f043b8647f303a9b79531c78f2e085f504b32eded20a306be291f4ad192e4395bfa75fe998b4db6f99594f2bbdc9e1642fae89ac39f55a8e3507ebafb447e1e69b9a551715028f6cb54856dad41e483f26b9102ccf6d9d451787974c1d8971bbf0def8486daf9f8f8ab48bcdf365f825a5f1d782cb55e9ab68f650c834333bb034fb476ebdad2807dd14c8b18ed84b169e2469490b26d88514445c2cce0a2c2b4979a5df379850f3923d62450789cd327511d30a0ec3b03f9cf648bd75b52600f217ac2082b3b13a1a2599245051b0f79141ba83e719311037dca096cadb9f1d2a5f900de62e7d95346437a23e7d2954e709ce3e99334fa17aad86aa81f5a62bbcfd1206c95a9cce1f385a850e619888a8a9c2bf70435f4edd6a01cf3e03c0032308b60a084c0ab5f56acfddf3f89b4c6c00eaa4ef7dc1b34f9c7d585875bd9ff22dc088c9e3ab1b69b3829d3619b4d303233e8ca86a8d007a3c16a483c72dc89552e3882b5a03d6b4e02b2d56f28acc1c93979e1530d2ced28a3be48d60c6d16e2e1b4bfa65b5bec38c5176d653fcfe8562aafd37fdcdf844ff814393789b72dc9449d56ae02b7234023691278179ced397cff66f7a455d912a73c74414fb53334c180d2821134d66329a48205d05c19ad10fbf3090985ec15e7dcb4f458f76b167994d8ed1ea229da868f92"]}]}, 0xe34}], 0x1, 0x0, 0x0, 0x4000}, 0x4008004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 626.762566ms ago: executing program 3 (id=4544): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xbf2f52db10519a67}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 513.43719ms ago: executing program 1 (id=4545): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x10000000) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfffffffffffffe87) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) syz_init_net_socket$ax25(0x3, 0x2, 0x1) (rerun: 64) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) unshare(0x62040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 512.94918ms ago: executing program 3 (id=4546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) syz_genetlink_get_family_id$devlink(0x0, r2) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$DEVLINK_CMD_RATE_SET(r2, 0x0, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) shutdown(r3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 480.564082ms ago: executing program 3 (id=4547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x28000600) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140), 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000100180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 365.066287ms ago: executing program 3 (id=4548): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r2, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) accept$netrom(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0xfffffffe) setsockopt$inet6_int(r3, 0x29, 0x100000000001f, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0) r8 = epoll_create1(0x0) sendfile(r8, r7, &(0x7f00000000c0)=0xd, 0x4) close(0x3) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x10000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) 253.388123ms ago: executing program 2 (id=4549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x28, 0x107, 0x0, 0x0, {0x1b, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @ipv4=@local}]}]}, 0x20}}, 0x4000010) 239.411399ms ago: executing program 2 (id=4550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000012500)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r0, @ANYRES32], 0x24}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000000000000000008f5d125ac2400000000fd73907800000300ac1414aa00000000001090780200000000000000a9caaf7c2c8808153a307e02b3a52afdce6225f583ad6ca8e927583ee6c8af448abdb458f87422c1ac1fa10a4c1e3117c124b9e3f0e4c37ed812181ad207e5970093167d35931c06b80e4ca012fbf72b21af4e40f7ac96fff096dd25259b6a4562fd4abb2c3ed892bf849866a36c3f195b84bfd86b92b05307afa5c38e014fe9a4b108630e87e1e38fceda95b187cbc7c37ae149f089f22708b9d45de464cf0d7e0a9d5cd2c914896a42c83b14cdcc3e51d8"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@alu={0x7, 0x0, 0x0, 0x6, 0x8, 0x80, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x75, '\x00', r4, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c0001000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) 141.578115ms ago: executing program 2 (id=4551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004f0001"], 0x14}}, 0x800) recvfrom$inet6(r0, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1406, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2400c000) 0s ago: executing program 5 (id=4552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) sendmsg$nl_generic(r6, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x274, 0x3b, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1b}, [@nested={0x1a5, 0x51, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @typed={0x8, 0xe1, 0x0, 0x0, @uid=r7}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x80000}, @generic="f600c66ef305935340f0dcb491d24ff873ea4e5b030afb7d1db9dd537f0ce436bf029b2ce961a491836f37b11db29ca88393f915c2888edbd74ad980e15783220f6c8c66c9276c338c3d21c677f36aa826728d92eabe8d6df869185263c7b8d2881f48b6e4559f946a3ba46ee526fd944a8a00a94fa797970a6e2098643c36d4be822cdda1403515c870c32ed960ea35418d9ef667ca9153363be94f5c5d10cd912f8a8987f94c2fd29152937d4758ea79d2b1dd2545b8f8e2b9c1add81a07372a", @generic="ef55e143643999614e271821910d5806bccf265aa1f826a50951015be7a81343ecee58cc2204c8c45c0d36d0ac088211c26aa7f654d2bfb1d7e44556087c38789f27880a0d6c7b6ac950de038d052d7d7e628e71204fb9d16557c3a68ece709e7a3dc74f5b0cc46a6c6036ec0286c462ded9574f172455b799494605717056c01284053d0afc2c97a9864963f078e176535e79e182c8f919bdb3ed2185bdd470683b68e48da99348dd0c389b6302a25cab616133215fa43c69ff10b9640d339b", @nested={0x4, 0x1}]}, @generic, @generic="46dbdec4a03a252ec95ea8ed2bf0188e68d3911ed6a7266e11429fac07bf5ccf9337bdbaefb4433cb2027e8828a6984662aaba211a875d7beeae392691e2245137b519736fa2ae4b7eca58d8f15e0c042fbf2ea7e97dd6cba1f7b61109a4549fe272404c0c20f9aacf98fc491767b0886ebedd38c0e226d5fa9ebdcdf13c97bbcf315a36a46ddcbc337127526585c4e2232243adf6abd9f71296e1fe4489fd2ce2dfcdda0a2f7c37d64c4a4c8708ffe13fd86d1502e256fc"]}, 0x274}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000018}, 0x4000080) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = socket(0x21, 0x800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d8 64 89 01 48 [ 268.743776][T17066] RSP: 002b:00007fbdcf433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.743791][T17066] RAX: ffffffffffffffda RBX: 00007fbdce7b5fa0 RCX: 00007fbdce58ebe9 [ 268.743802][T17066] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 268.743810][T17066] RBP: 00007fbdcf433090 R08: 0000000000000000 R09: 0000000000000000 [ 268.743819][T17066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.743827][T17066] R13: 00007fbdce7b6038 R14: 00007fbdce7b5fa0 R15: 00007ffe41a366d8 [ 268.743843][T17066] [ 269.152402][T17072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.169555][T17083] netem: unknown loss type 12 [ 269.185887][T17083] netem: change failed [ 269.196078][T16971] hsr_slave_0: entered promiscuous mode [ 269.203066][T16971] hsr_slave_1: entered promiscuous mode [ 269.310588][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.394308][ T7247] IPVS: stop unused estimator thread 0... [ 269.417801][T17097] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 269.426514][T17097] netlink: 'syz.1.3237': attribute type 2 has an invalid length. [ 269.689282][T17114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.726327][T16971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.758429][T16971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.772626][T16971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.783750][T16971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.834952][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.857499][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.869153][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.876321][ T7247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.896760][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.903898][ T7248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.950592][ T51] Bluetooth: hci3: command tx timeout [ 269.983562][T16971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.023173][T17131] FAULT_INJECTION: forcing a failure. [ 270.023173][T17131] name failslab, interval 1, probability 0, space 0, times 0 [ 270.064519][T17131] CPU: 0 UID: 0 PID: 17131 Comm: syz.1.3248 Not tainted syzkaller #0 PREEMPT(full) [ 270.064545][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.064556][T17131] Call Trace: [ 270.064563][T17131] [ 270.064570][T17131] dump_stack_lvl+0x189/0x250 [ 270.064595][T17131] ? __pfx____ratelimit+0x10/0x10 [ 270.064618][T17131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.064637][T17131] ? __pfx__printk+0x10/0x10 [ 270.064661][T17131] ? __pfx___might_resched+0x10/0x10 [ 270.064677][T17131] ? lock_acquire+0x5f/0x360 [ 270.064701][T17131] should_fail_ex+0x414/0x560 [ 270.064725][T17131] should_failslab+0xa8/0x100 [ 270.064749][T17131] __kmalloc_noprof+0xcb/0x4f0 [ 270.064769][T17131] ? kfree+0x4d/0x440 [ 270.064787][T17131] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 270.064807][T17131] tomoyo_realpath_from_path+0xe3/0x5d0 [ 270.064825][T17131] ? tomoyo_domain+0xd9/0x130 [ 270.064844][T17131] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 270.064866][T17131] tomoyo_path_number_perm+0x1e8/0x5a0 [ 270.064887][T17131] ? lock_release+0x4b/0x3e0 [ 270.064910][T17131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.064933][T17131] ? rcu_is_watching+0x15/0xb0 [ 270.064950][T17131] ? lock_release+0x4b/0x3e0 [ 270.064971][T17131] ? vfs_write+0x956/0xb30 [ 270.064994][T17131] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 270.065026][T17131] ? lock_release+0x4b/0x3e0 [ 270.065050][T17131] ? __fget_files+0x2a/0x420 [ 270.065062][T17131] ? __fget_files+0x3a0/0x420 [ 270.065075][T17131] ? __fget_files+0x2a/0x420 [ 270.065088][T17131] security_file_ioctl+0xcb/0x2d0 [ 270.065111][T17131] __se_sys_ioctl+0x47/0x170 [ 270.065132][T17131] do_syscall_64+0xfa/0x3b0 [ 270.065148][T17131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.065165][T17131] ? clear_bhb_loop+0x60/0xb0 [ 270.065294][T17131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.065309][T17131] RIP: 0033:0x7febe1d8ebe9 [ 270.065325][T17131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.065340][T17131] RSP: 002b:00007febe2bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.065360][T17131] RAX: ffffffffffffffda RBX: 00007febe1fb5fa0 RCX: 00007febe1d8ebe9 [ 270.065373][T17131] RDX: 0000200000000040 RSI: 0000000000008912 RDI: 0000000000000003 [ 270.065384][T17131] RBP: 00007febe2bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.065395][T17131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.065406][T17131] R13: 00007febe1fb6038 R14: 00007febe1fb5fa0 R15: 00007ffe68dacbb8 [ 270.065426][T17131] [ 270.065433][T17131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.350543][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.509879][T17155] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 270.530157][T17162] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 270.591532][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.753254][T16971] veth0_vlan: entered promiscuous mode [ 270.865934][T16971] veth1_vlan: entered promiscuous mode [ 270.878709][T17178] __nla_validate_parse: 17 callbacks suppressed [ 270.878727][T17178] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3260'. [ 270.908290][T16971] veth0_macvtap: entered promiscuous mode [ 270.914935][T17178] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3260'. [ 270.939946][T16971] veth1_macvtap: entered promiscuous mode [ 270.985690][T17178] lo speed is unknown, defaulting to 1000 [ 270.993563][T17178] lo speed is unknown, defaulting to 1000 [ 271.004218][T17178] lo speed is unknown, defaulting to 1000 [ 271.092984][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.117239][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.150279][ T7246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.193338][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.212150][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.246951][ T7243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.262525][T17193] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3264'. [ 271.279259][T17178] infiniband syz0: set down [ 271.291948][T17178] infiniband syz0: added lo [ 271.299945][T13196] lo speed is unknown, defaulting to 1000 [ 271.383135][T17195] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.3264'. [ 271.400694][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.416012][T17178] RDS/IB: syz0: added [ 271.420164][T17178] smc: adding ib device syz0 with port count 1 [ 271.430969][T17195] openvswitch: netlink: Flow key attr not present in new flow. [ 271.470370][T17195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3264'. [ 271.503493][T17178] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 271.534175][ T7247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.573633][ T7247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.656868][ T8551] lo speed is unknown, defaulting to 1000 [ 271.698243][T17178] lo speed is unknown, defaulting to 1000 [ 271.738339][T17201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3266'. [ 271.754521][ T7246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.763775][ T7246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.858021][T17204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3267'. [ 271.881948][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3267'. [ 271.976798][T17178] lo speed is unknown, defaulting to 1000 [ 272.030823][ T51] Bluetooth: hci3: command tx timeout [ 272.133922][T17217] dummy0: entered promiscuous mode [ 272.139338][T17217] macsec1: entered promiscuous mode [ 272.145088][T17217] macsec1: entered allmulticast mode [ 272.150734][T17217] dummy0: entered allmulticast mode [ 272.158600][T17217] dummy0: left allmulticast mode [ 272.163910][T17217] dummy0: left promiscuous mode [ 272.174031][T17178] lo speed is unknown, defaulting to 1000 [ 272.423685][T17228] nbd: must specify at least one socket [ 272.430781][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.439390][T17178] lo speed is unknown, defaulting to 1000 [ 272.481211][T17234] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3276'. [ 272.516728][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 272.712489][T17241] dummy0: entered promiscuous mode [ 272.718270][T17241] macsec1: entered promiscuous mode [ 272.723920][T17241] macsec1: entered allmulticast mode [ 272.729341][T17241] dummy0: entered allmulticast mode [ 272.736647][T17241] dummy0: left allmulticast mode [ 272.743218][T17241] dummy0: left promiscuous mode [ 272.820164][T17222] lo speed is unknown, defaulting to 1000 [ 273.026770][T17178] lo speed is unknown, defaulting to 1000 [ 273.314914][T17178] lo speed is unknown, defaulting to 1000 [ 273.384601][T17283] FAULT_INJECTION: forcing a failure. [ 273.384601][T17283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.403985][T17283] CPU: 0 UID: 0 PID: 17283 Comm: syz.4.3286 Not tainted syzkaller #0 PREEMPT(full) [ 273.404012][T17283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.404023][T17283] Call Trace: [ 273.404029][T17283] [ 273.404037][T17283] dump_stack_lvl+0x189/0x250 [ 273.404061][T17283] ? __pfx____ratelimit+0x10/0x10 [ 273.404085][T17283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.404112][T17283] ? __pfx__printk+0x10/0x10 [ 273.404137][T17283] ? rcu_is_watching+0x15/0xb0 [ 273.404156][T17283] should_fail_ex+0x414/0x560 [ 273.404180][T17283] _copy_to_user+0x31/0xb0 [ 273.404199][T17283] simple_read_from_buffer+0xe1/0x170 [ 273.404225][T17283] proc_fail_nth_read+0x1b3/0x220 [ 273.404246][T17283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.404266][T17283] ? rw_verify_area+0x2a6/0x4d0 [ 273.404286][T17283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.404305][T17283] vfs_read+0x1fd/0xa30 [ 273.404325][T17283] ? fdget_pos+0x247/0x320 [ 273.404342][T17283] ? __pfx___mutex_lock+0x10/0x10 [ 273.404366][T17283] ? __pfx_vfs_read+0x10/0x10 [ 273.404389][T17283] ? __fget_files+0x3a0/0x420 [ 273.404410][T17283] ? __fget_files+0x2a/0x420 [ 273.404428][T17283] ksys_read+0x145/0x250 [ 273.404448][T17283] ? __fget_files+0x3a0/0x420 [ 273.404463][T17283] ? __pfx_ksys_read+0x10/0x10 [ 273.404482][T17283] ? __pfx_sock_ioctl+0x10/0x10 [ 273.404504][T17283] ? rcu_is_watching+0x15/0xb0 [ 273.404522][T17283] do_syscall_64+0xfa/0x3b0 [ 273.404538][T17283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.404555][T17283] ? clear_bhb_loop+0x60/0xb0 [ 273.404573][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.404590][T17283] RIP: 0033:0x7ff043b8d5fc [ 273.404606][T17283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.404621][T17283] RSP: 002b:00007ff044a59030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.404640][T17283] RAX: ffffffffffffffda RBX: 00007ff043db5fa0 RCX: 00007ff043b8d5fc [ 273.404654][T17283] RDX: 000000000000000f RSI: 00007ff044a590a0 RDI: 0000000000000004 [ 273.404665][T17283] RBP: 00007ff044a59090 R08: 0000000000000000 R09: 0000000000000000 [ 273.404683][T17283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.404693][T17283] R13: 00007ff043db6038 R14: 00007ff043db5fa0 R15: 00007ffeb316bfb8 [ 273.404714][T17283] [ 273.642387][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.673705][T17178] lo speed is unknown, defaulting to 1000 [ 273.843514][T17178] lo speed is unknown, defaulting to 1000 [ 274.001995][T17318] netlink: 'syz.4.3297': attribute type 16 has an invalid length. [ 274.009971][T17318] netlink: 'syz.4.3297': attribute type 17 has an invalid length. [ 274.067818][T17318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.126877][ T51] Bluetooth: hci3: command tx timeout [ 274.680588][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.385685][T17400] bond0: (slave team0): Releasing backup interface [ 275.397479][T17400] team0: left allmulticast mode [ 275.404579][T17400] team_slave_0: left allmulticast mode [ 275.410230][T17400] team_slave_1: left allmulticast mode [ 275.453189][T17400] bridge_slave_0: left allmulticast mode [ 275.479358][T17400] bridge_slave_0: left promiscuous mode [ 275.486173][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.494459][T17404] netlink: 'syz.3.3323': attribute type 10 has an invalid length. [ 275.506694][T17400] bridge_slave_1: left allmulticast mode [ 275.512543][T17400] bridge_slave_1: left promiscuous mode [ 275.518820][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.547088][T17400] bond0: (slave bond_slave_0): Releasing backup interface [ 275.557696][T17400] bond_slave_0: left allmulticast mode [ 275.573590][T17400] bond0: (slave bond_slave_1): Releasing backup interface [ 275.582386][T17400] bond_slave_1: left allmulticast mode [ 275.591215][T17400] team0: Port device team_slave_0 removed [ 275.598779][T17400] team0: Port device team_slave_1 removed [ 275.605063][T17400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.613826][T17400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.632736][T17404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.647355][T17404] mac80211_hwsim hwsim113 wlan1: entered allmulticast mode [ 275.657138][T17404] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 275.710623][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.802309][T17410] netlink: zone id is out of range [ 275.811297][T17410] netlink: get zone limit has 8 unknown bytes [ 276.043208][T17425] __nla_validate_parse: 5 callbacks suppressed [ 276.043225][T17425] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3330'. [ 276.156827][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'. [ 276.166047][T17432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3331'. [ 276.175108][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'. [ 276.184646][T17432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3331'. [ 276.193926][T17432] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3331'. [ 276.329671][T17440] lo speed is unknown, defaulting to 1000 [ 276.484328][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 276.657152][T17449] lo speed is unknown, defaulting to 1000 [ 276.745636][T17461] !: renamed from dummy0 (while UP) [ 276.751255][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.774587][T17456] lo speed is unknown, defaulting to 1000 [ 276.819709][T17463] sctp: [Deprecated]: syz.3.3339 (pid 17463) Use of int in maxseg socket option. [ 276.819709][T17463] Use struct sctp_assoc_value instead [ 277.034288][T17466] lo speed is unknown, defaulting to 1000 [ 277.068644][T17474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3341'. [ 277.216216][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 277.248443][T17482] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 277.440816][T17493] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3347'. [ 277.500783][T17499] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 277.790545][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.190655][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.830649][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.870617][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.910627][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.950677][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.990629][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.030686][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.070666][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.110670][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.150755][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.190650][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.230669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.270614][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.310653][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.350671][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.390617][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.430602][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.470802][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.510619][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.550644][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.590693][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.630614][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.670635][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.710651][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.750602][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 303.791270][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.830660][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 305.870641][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.910562][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.950653][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.990673][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.030686][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.830679][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.070626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.110732][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.150694][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.190611][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.230655][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.270661][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.310645][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.350671][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.390666][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.430654][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.470624][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.510614][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.550731][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.590709][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.630676][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.670669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.710673][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.750750][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.790548][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.842033][T17526] bridge_slave_0: left allmulticast mode [ 329.863720][T17526] bridge_slave_0: left promiscuous mode [ 329.869773][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.880575][T17534] netlink: 'syz.3.3355': attribute type 13 has an invalid length. [ 329.889212][T17534] netlink: 'syz.3.3355': attribute type 17 has an invalid length. [ 329.898745][T17526] bridge_slave_1: left allmulticast mode [ 329.908007][T17526] bridge_slave_1: left promiscuous mode [ 329.914554][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.926108][T17542] __nla_validate_parse: 1 callbacks suppressed [ 329.926126][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 329.946795][T17542] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 329.956019][T17542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.978107][T17526] bond0: (slave bond_slave_0): Releasing backup interface [ 329.993240][T17526] bond0: (slave bond_slave_1): Releasing backup interface [ 330.008369][T17526] team0: Port device team_slave_0 removed [ 330.018564][T17526] team0: Port device team_slave_1 removed [ 330.026235][T17526] bond0: (slave batadv_slave_0): Releasing backup interface [ 330.036534][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.046735][T17526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.066799][T17526] bond1: (slave ip6gretap1): Releasing active interface [ 330.084766][T17534] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.099451][T17534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.172796][T17536] netlink: 'syz.1.3357': attribute type 322 has an invalid length. [ 330.194752][T17545] lo speed is unknown, defaulting to 1000 [ 330.349002][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'. [ 330.424423][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3360'. [ 330.457763][T17549] lo speed is unknown, defaulting to 1000 [ 330.474176][T17560] bridge_slave_1: left allmulticast mode [ 330.496217][T17560] bridge_slave_1: left promiscuous mode [ 330.520506][T17560] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.548041][T17560] bridge_slave_0: left allmulticast mode [ 330.571629][T17560] bridge_slave_0: left promiscuous mode [ 330.589664][T17560] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.830568][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.958292][T17571] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3363'. [ 331.196734][T17586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3365'. [ 331.441210][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3369'. [ 331.463304][T17598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3371'. [ 331.533363][T17600] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 331.576559][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 331.630317][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3373'. [ 331.656427][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3373'. [ 331.870600][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.989531][T17616] netlink: 'syz.3.3377': attribute type 1 has an invalid length. [ 332.025727][ T7246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.062708][ T7246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.146773][T17622] netlink: 'syz.4.3379': attribute type 13 has an invalid length. [ 332.170711][T17622] netlink: 'syz.4.3379': attribute type 17 has an invalid length. [ 332.209242][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.217411][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.232004][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.240036][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.248275][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.369247][T17622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.572299][T17625] lo speed is unknown, defaulting to 1000 [ 332.910651][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.938164][ T7246] bond3 (unregistering): (slave gretap1): Releasing active interface [ 333.076241][ T7246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.093837][ T7246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.114958][ T7246] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 333.135730][ T7246] bond0 (unregistering): (slave macvlan5): Releasing backup interface [ 333.155147][ T7246] veth1_vlan: left allmulticast mode [ 333.173566][ T7246] bond0 (unregistering): Released all slaves [ 333.187277][ T7246] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 333.199054][ T7246] bond1 (unregistering): Released all slaves [ 333.217173][ T7246] bond2 (unregistering): Released all slaves [ 333.228467][ T7246] bond3 (unregistering): Released all slaves [ 333.252364][T17626] lo speed is unknown, defaulting to 1000 [ 333.327774][ T7246] k›*·]‘: left promiscuous mode [ 333.396451][ T7246] tipc: Disabling bearer [ 333.408139][ T7246] tipc: Left network mode [ 333.925661][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.950676][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.169222][ T7246] team0 (unregistering): Port device team_slave_1 removed [ 334.186647][ T7246] team0 (unregistering): Port device team_slave_0 removed [ 334.270927][ T5863] Bluetooth: hci0: command tx timeout [ 334.302247][ T7246] team0 (unregistering): Port device dummy0 removed [ 334.383768][ T59] smc: removing ib device syz0 [ 334.414686][T17626] chnl_net:caif_netlink_parms(): no params data found [ 334.990562][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.152532][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.170935][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.196754][T17626] bridge_slave_0: entered allmulticast mode [ 335.261941][T17626] bridge_slave_0: entered promiscuous mode [ 335.279717][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.299572][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.320143][T17626] bridge_slave_1: entered allmulticast mode [ 335.372176][T17626] bridge_slave_1: entered promiscuous mode [ 335.512275][T17728] __nla_validate_parse: 30 callbacks suppressed [ 335.512292][T17728] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3402'. [ 335.537486][T17730] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 335.575305][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.615065][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.627017][T17733] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3402'. [ 335.668837][T17730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.857111][T17736] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3405'. [ 335.891821][T17626] team0: Port device team_slave_0 added [ 335.936645][T17626] team0: Port device team_slave_1 added [ 336.009082][ T7246] IPVS: stop unused estimator thread 0... [ 336.030545][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.055081][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.077922][T17734] netlink: zone id is out of range [ 336.083244][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.086705][T17734] netlink: zone id is out of range [ 336.176930][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.182741][T17734] netlink: zone id is out of range [ 336.209505][T17734] netlink: zone id is out of range [ 336.243746][T17745] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 336.284913][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.292857][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.339780][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.354414][ T5863] Bluetooth: hci0: command tx timeout [ 336.525805][T17626] hsr_slave_0: entered promiscuous mode [ 336.534299][T17626] hsr_slave_1: entered promiscuous mode [ 336.547017][T17626] debugfs: 'hsr0' already exists in 'hsr' [ 336.556976][T17626] Cannot create hsr debugfs directory [ 336.745424][T17748] tipc: Started in network mode [ 336.750324][T17748] tipc: Node identity 4, cluster identity 4711 [ 336.776170][T17748] tipc: Node number set to 4 [ 336.836835][T17755] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3409'. [ 336.859343][T17755] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3409'. [ 336.902493][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'. [ 336.915964][T17762] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3410'. [ 337.118993][T17781] geneve2: entered promiscuous mode [ 337.129966][ T7248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.139661][ T7248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.155044][ T7248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.164866][ T7248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.190001][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3417'. [ 337.212034][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3417'. [ 337.223233][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3417'. [ 337.252322][T17784] vlan0: left promiscuous mode [ 337.261104][T17784] xfrm1: left promiscuous mode [ 337.266771][T17784] geneve2: left promiscuous mode [ 337.416880][T17626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.462867][T17626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.532648][T17626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.588027][T17626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.590360][ T30] audit: type=1800 audit(1756296236.892:4): pid=17791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3419" name="memory.events" dev="tmpfs" ino=243 res=0 errno=0 [ 337.797793][T17626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.816838][T17626] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.833985][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.841156][ T7240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.858673][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.866022][ T7240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.110608][ C0] net_ratelimit: 21 callbacks suppressed [ 338.110627][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.324463][T17844] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 338.376581][T17626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.430819][ T5863] Bluetooth: hci0: command tx timeout [ 338.438967][T17848] IPVS: length: 100 != 8 [ 338.477281][T17626] veth0_vlan: entered promiscuous mode [ 338.526353][T17626] veth1_vlan: entered promiscuous mode [ 338.622568][T17626] veth0_macvtap: entered promiscuous mode [ 338.637640][T17626] veth1_macvtap: entered promiscuous mode [ 338.724657][T17865] netlink: 'syz.4.3433': attribute type 5 has an invalid length. [ 338.744692][T17626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.756359][T17626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.777430][ T7247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.803560][ T7247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.843762][ T7247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.871071][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.014296][ T7247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.033520][ T7247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.116131][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.136915][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.150580][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.436436][T17902] pim6reg: left allmulticast mode [ 339.458917][T17901] syz.2.3442: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 339.482536][T17901] CPU: 0 UID: 0 PID: 17901 Comm: syz.2.3442 Not tainted syzkaller #0 PREEMPT(full) [ 339.482580][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.482601][T17901] Call Trace: [ 339.482608][T17901] [ 339.482616][T17901] dump_stack_lvl+0x189/0x250 [ 339.482643][T17901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.482663][T17901] ? __pfx__printk+0x10/0x10 [ 339.482683][T17901] ? lock_release+0x4b/0x3e0 [ 339.482706][T17901] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 339.482728][T17901] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 339.482748][T17901] warn_alloc+0x214/0x310 [ 339.482775][T17901] ? __pfx_warn_alloc+0x10/0x10 [ 339.482802][T17901] ? __get_vm_area_node+0x28f/0x300 [ 339.482823][T17901] ? xskq_create+0xbf/0x170 [ 339.482847][T17901] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 339.482884][T17901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 339.482908][T17901] ? xsk_setsockopt+0x502/0x8d0 [ 339.482929][T17901] ? __kasan_kmalloc+0x93/0xb0 [ 339.482951][T17901] vmalloc_user_noprof+0xad/0xf0 [ 339.482974][T17901] ? xskq_create+0xbf/0x170 [ 339.482996][T17901] xskq_create+0xbf/0x170 [ 339.483027][T17901] xsk_init_queue+0xb0/0x110 [ 339.483049][T17901] xsk_setsockopt+0x57b/0x8d0 [ 339.483070][T17901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 339.483090][T17901] ? __pfx_aa_sk_perm+0x10/0x10 [ 339.483113][T17901] ? lock_release+0x4b/0x3e0 [ 339.483135][T17901] ? __se_sys_futex+0x36f/0x400 [ 339.483154][T17901] ? aa_sock_opt_perm+0xff/0x1b0 [ 339.483171][T17901] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 339.483190][T17901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 339.483210][T17901] do_sock_setsockopt+0x179/0x1b0 [ 339.483230][T17901] __x64_sys_setsockopt+0x13f/0x1b0 [ 339.483250][T17901] do_syscall_64+0xfa/0x3b0 [ 339.483265][T17901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.483281][T17901] ? clear_bhb_loop+0x60/0xb0 [ 339.483299][T17901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.483316][T17901] RIP: 0033:0x7f857658ebe9 [ 339.483332][T17901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.483347][T17901] RSP: 002b:00007f857738a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.483366][T17901] RAX: ffffffffffffffda RBX: 00007f85767b6090 RCX: 00007f857658ebe9 [ 339.483380][T17901] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 339.483391][T17901] RBP: 00007f8576611e19 R08: 0000000000000004 R09: 0000000000000000 [ 339.483401][T17901] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 339.483412][T17901] R13: 00007f85767b6128 R14: 00007f85767b6090 R15: 00007ffcbfb8e748 [ 339.483433][T17901] [ 339.483441][T17901] Mem-Info: [ 339.753375][T17901] active_anon:5710 inactive_anon:0 isolated_anon:0 [ 339.753375][T17901] active_file:4006 inactive_file:39947 isolated_file:0 [ 339.753375][T17901] unevictable:768 dirty:344 writeback:0 [ 339.753375][T17901] slab_reclaimable:16213 slab_unreclaimable:183604 [ 339.753375][T17901] mapped:31020 shmem:1479 pagetables:1322 [ 339.753375][T17901] sec_pagetables:0 bounce:0 [ 339.753375][T17901] kernel_misc_reclaimable:0 [ 339.753375][T17901] free:1223572 free_pcp:25561 free_cma:0 [ 339.799186][T17901] Node 0 active_anon:22840kB inactive_anon:0kB active_file:16024kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124080kB dirty:1376kB writeback:0kB shmem:4380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15096kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.831132][T17901] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 339.861414][T17901] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 339.894210][T17901] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 339.899998][T17901] Node 0 DMA32 free:985212kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22788kB inactive_anon:0kB active_file:16024kB inactive_file:158012kB unevictable:1536kB writepending:1376kB present:3129332kB managed:2557444kB mlocked:0kB bounce:0kB free_pcp:81876kB local_pcp:51020kB free_cma:0kB [ 339.934328][T17901] lowmem_reserve[]: 0 0 1 1 1 [ 339.939261][T17901] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 339.971401][T17901] lowmem_reserve[]: 0 0 0 0 0 [ 339.976160][T17901] Node 1 Normal free:3893704kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20760kB local_pcp:6488kB free_cma:0kB [ 340.008883][T17901] lowmem_reserve[]: 0 0 0 0 0 [ 340.014228][T17901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 340.027125][T17901] Node 0 DMA32: 856*4kB (UME) 304*8kB (M) 154*16kB (ME) 209*32kB (UM) 746*64kB (UME) 644*128kB (UME) 454*256kB (UME) 290*512kB (UM) 130*1024kB (UM) 7*2048kB (UE) 105*4096kB (UM) = 987424kB [ 340.048644][T17901] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 340.063962][T17913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.066996][T17901] Node 1 Normal: 178*4kB (UE) 64*8kB (UME) 32*16kB (UME) 104*32kB (UME) 36*64kB (UME) 8*128kB (UME) 3*256kB (ME) 3*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3893704kB [ 340.098624][T17901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.110218][T17901] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 340.122118][T17901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.133392][T17901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 340.143118][T17901] 45421 total pagecache pages [ 340.147820][T17901] 0 pages in swap cache [ 340.152115][T17901] Free swap = 124996kB [ 340.156295][T17901] Total swap = 124996kB [ 340.161513][T17901] 2097051 pages RAM [ 340.165430][T17901] 0 pages HighMem/MovableOnly [ 340.170183][T17901] 425664 pages reserved [ 340.174395][T17901] 0 pages cma reserved [ 340.190540][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.211260][T17911] netlink: 'syz.1.3445': attribute type 4 has an invalid length. [ 340.470875][T17943] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 340.510679][ T5863] Bluetooth: hci0: command tx timeout [ 340.689704][T17963] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 340.714452][T17963] __nla_validate_parse: 186 callbacks suppressed [ 340.714470][T17963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3461'. [ 341.230673][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.387774][T18016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.429234][T18023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.449103][T18016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.468961][T18027] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 341.497978][T18023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.525085][T18032] tipc: Enabled bearer , priority 0 [ 341.547384][T18016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.563969][T18032] syzkaller0: entered promiscuous mode [ 341.569534][T18032] syzkaller0: entered allmulticast mode [ 341.589331][T18023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.632367][T18016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.658075][T18032] tipc: Resetting bearer [ 341.678365][T18023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.735862][T18044] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3486'. [ 341.761622][ T7265] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.769979][ T7265] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.827357][ T7265] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.852117][ T7265] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.933383][ T7265] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.952471][ T7265] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.017191][ T7265] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.056098][ T7265] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.198776][T18017] tipc: Resetting bearer [ 342.270593][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.307560][T18017] tipc: Disabling bearer [ 342.374119][T18072] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 342.507847][T18076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3489'. [ 342.603351][T18085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3495'. [ 342.624427][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3493'. [ 342.791686][ T7247] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.800186][ T7247] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.818183][ T7247] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.910018][ T7247] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.982324][T18096] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3499'. [ 343.125313][T18100] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3500'. [ 343.288354][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'. [ 343.310577][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.313346][T18125] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3506'. [ 343.332661][T18125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3506'. [ 343.359091][T18127] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 343.559202][T18135] syzkaller0: entered promiscuous mode [ 343.572461][T18135] syzkaller0: entered allmulticast mode [ 343.683534][T18147] IPv6: sit1: Disabled Multicast RS [ 343.689512][T18147] sit1: entered allmulticast mode [ 344.223553][T18155] tc_dump_action: action bad kind [ 344.350571][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.165235][T18176] bond1: left promiscuous mode [ 345.173846][T18176] bond2: left promiscuous mode [ 345.178722][T18176] bond2: left allmulticast mode [ 345.185668][T18176] gretap1: left promiscuous mode [ 345.220622][ T7265] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.243720][ T7265] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.272773][ T7265] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.284294][ T7265] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.391270][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.511708][T18224] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.611905][T18229] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 345.656139][T18234] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 345.852662][T18252] netlink: 'syz.2.3543': attribute type 4 has an invalid length. [ 345.880401][T18233] netlink: 'syz.4.3538': attribute type 41 has an invalid length. [ 345.965159][T18264] tipc: Enabled bearer , priority 0 [ 345.973693][T18264] syzkaller0: entered promiscuous mode [ 345.979744][T18264] syzkaller0: entered allmulticast mode [ 345.999425][T18263] tipc: Resetting bearer [ 346.017674][T18263] tipc: Disabling bearer [ 346.048217][T18269] __nla_validate_parse: 5 callbacks suppressed [ 346.048235][T18269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3550'. [ 346.065505][T18269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3550'. [ 346.076557][T18271] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3551'. [ 346.076689][T18269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3550'. [ 346.115847][T18273] netlink: 'syz.3.3552': attribute type 9 has an invalid length. [ 346.311294][T18295] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3560'. [ 346.334104][T18297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3561'. [ 346.385069][T18301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3563'. [ 346.430624][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.480087][T18305] syzkaller0: entered allmulticast mode [ 346.694901][T18322] netlink: 'syz.3.3568': attribute type 10 has an invalid length. [ 346.706844][T18322] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3568'. [ 346.719342][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 346.756129][ T8556] hid-generic 0005:0B57:0000.0001: collection stack underflow [ 346.769710][ T8556] hid-generic 0005:0B57:0000.0001: item 0 0 0 12 parsing failed [ 346.777836][ T8556] hid-generic 0005:0B57:0000.0001: probe with driver hid-generic failed with error -22 [ 346.800943][T18327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3569'. [ 347.076891][T18361] netlink: 'syz.0.3577': attribute type 13 has an invalid length. [ 347.085759][T18361] netlink: 'syz.0.3577': attribute type 17 has an invalid length. [ 347.139972][T18361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.263646][T18361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.357766][T18364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.424725][T18364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.470629][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.354447][T18403] Unsupported ieee802154 address type: 0 [ 348.510608][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.185689][T18477] macvtap1: entered promiscuous mode [ 349.191348][T18477] mac80211_hwsim hwsim115 wlan1: entered promiscuous mode [ 349.204760][T18477] mac80211_hwsim hwsim115 wlan1: left promiscuous mode [ 349.538732][T18468] netlink: zone id is out of range [ 349.550595][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.554037][T18468] netlink: zone id is out of range [ 349.613055][T18468] netlink: zone id is out of range [ 349.618579][T18468] netlink: zone id is out of range [ 349.628800][T18468] netlink: zone id is out of range [ 349.646665][T18468] netlink: zone id is out of range [ 349.659066][T18468] netlink: zone id is out of range [ 349.671900][T18509] FAULT_INJECTION: forcing a failure. [ 349.671900][T18509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.676005][T18468] netlink: zone id is out of range [ 349.687481][T18509] CPU: 0 UID: 0 PID: 18509 Comm: syz.1.3618 Not tainted syzkaller #0 PREEMPT(full) [ 349.687507][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.687519][T18509] Call Trace: [ 349.687525][T18509] [ 349.687533][T18509] dump_stack_lvl+0x189/0x250 [ 349.687557][T18509] ? __pfx____ratelimit+0x10/0x10 [ 349.687580][T18509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.687599][T18509] ? __pfx__printk+0x10/0x10 [ 349.687619][T18509] ? __might_fault+0xb0/0x130 [ 349.687644][T18509] ? rcu_is_watching+0x15/0xb0 [ 349.687662][T18509] should_fail_ex+0x414/0x560 [ 349.687686][T18509] _copy_from_user+0x2d/0xb0 [ 349.687705][T18509] __sys_bpf+0x1ed/0x870 [ 349.687726][T18509] ? __pfx___sys_bpf+0x10/0x10 [ 349.687752][T18509] ? ksys_write+0x22a/0x250 [ 349.687774][T18509] ? __pfx_ksys_write+0x10/0x10 [ 349.687794][T18509] ? rcu_is_watching+0x15/0xb0 [ 349.687813][T18509] __x64_sys_bpf+0x7c/0x90 [ 349.687832][T18509] do_syscall_64+0xfa/0x3b0 [ 349.687847][T18509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.687864][T18509] ? clear_bhb_loop+0x60/0xb0 [ 349.687882][T18509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.687899][T18509] RIP: 0033:0x7febe1d8ebe9 [ 349.687915][T18509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.687930][T18509] RSP: 002b:00007febe2bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.687948][T18509] RAX: ffffffffffffffda RBX: 00007febe1fb5fa0 RCX: 00007febe1d8ebe9 [ 349.687960][T18509] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 349.687972][T18509] RBP: 00007febe2bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.687983][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.687994][T18509] R13: 00007febe1fb6038 R14: 00007febe1fb5fa0 R15: 00007ffe68dacbb8 [ 349.688014][T18509] [ 350.136918][T18532] netlink: 'syz.4.3622': attribute type 12 has an invalid length. [ 350.560790][T18571] IPv6: Can't replace route, no match found [ 351.101744][T18619] tap0: tun_chr_ioctl cmd 1074025677 [ 351.108790][T18618] __nla_validate_parse: 15 callbacks suppressed [ 351.108808][T18618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3650'. [ 351.118730][T18619] tap0: linktype set to 780 [ 351.188580][T18625] lo speed is unknown, defaulting to 1000 [ 351.196196][T18625] lo speed is unknown, defaulting to 1000 [ 351.204352][T18625] lo speed is unknown, defaulting to 1000 [ 351.218239][T18625] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 351.232262][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 351.254583][T18625] lo speed is unknown, defaulting to 1000 [ 351.263069][T18625] lo speed is unknown, defaulting to 1000 [ 351.272679][T18625] lo speed is unknown, defaulting to 1000 [ 351.279597][T18625] lo speed is unknown, defaulting to 1000 [ 351.286904][T18625] lo speed is unknown, defaulting to 1000 [ 351.297986][T18625] lo speed is unknown, defaulting to 1000 [ 351.299852][ T7247] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 351.316300][T18625] lo speed is unknown, defaulting to 1000 [ 351.326995][T18625] lo speed is unknown, defaulting to 1000 [ 351.418479][T18638] lo speed is unknown, defaulting to 1000 [ 351.557336][T18660] lo speed is unknown, defaulting to 1000 [ 351.770876][T18666] netlink: 'syz.3.3658': attribute type 10 has an invalid length. [ 351.779996][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 351.937689][T18682] netlink: 'syz.0.3661': attribute type 10 has an invalid length. [ 351.946212][T18682] syz_tun: entered promiscuous mode [ 351.963125][T18682] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 352.136642][T18698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3663'. [ 352.190019][T18694] lo speed is unknown, defaulting to 1000 [ 352.261839][T18712] lo speed is unknown, defaulting to 1000 [ 352.361678][T18706] batadv1: entered promiscuous mode [ 352.839420][T18751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3676'. [ 353.001247][T18762] netlink: 'syz.1.3681': attribute type 4 has an invalid length. [ 353.037842][ T5864] lo speed is unknown, defaulting to 1000 [ 353.048284][ T5864] syz2: Port: 1 Link ACTIVE [ 353.124879][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3682'. [ 353.233661][T18773] lo speed is unknown, defaulting to 1000 [ 353.276634][T18782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3686'. [ 353.513665][ T5864] IPVS: starting estimator thread 0... [ 353.620538][T18804] IPVS: using max 50 ests per chain, 120000 per kthread [ 353.685730][T18817] sit1: entered promiscuous mode [ 353.696748][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'. [ 353.710952][ C0] net_ratelimit: 64 callbacks suppressed [ 353.710971][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.806699][T18825] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3698'. [ 354.039253][T18848] lo speed is unknown, defaulting to 1000 [ 354.313939][T18848] netlink: zone id is out of range [ 354.319127][T18848] netlink: zone id is out of range [ 354.326043][T18848] netlink: zone id is out of range [ 354.333355][T18848] netlink: zone id is out of range [ 354.338679][T18848] netlink: zone id is out of range [ 354.344232][T18848] netlink: zone id is out of range [ 354.349592][T18848] netlink: zone id is out of range [ 354.354861][T18848] netlink: zone id is out of range [ 354.360003][T18848] netlink: zone id is out of range [ 354.720086][T18867] gtp0: entered promiscuous mode [ 354.725162][T18867] gtp0: entered allmulticast mode [ 354.740713][T18872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3712'. [ 355.015213][T18894] netlink: 'syz.2.3723': attribute type 1 has an invalid length. [ 355.150678][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 355.158161][T18910] tipc: Started in network mode [ 355.197931][T18910] tipc: Node identity 3698a5c73e59, cluster identity 4711 [ 355.205600][T18910] tipc: Enabled bearer , priority 0 [ 355.219799][T18918] syzkaller0: entered promiscuous mode [ 355.231008][T18918] syzkaller0: entered allmulticast mode [ 355.413861][T18933] rdma_op ffff88803091b9f0 conn xmit_rdma 0000000000000000 [ 355.478970][T18915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.499776][T18915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.595782][T18910] tipc: Resetting bearer [ 355.608567][ T7240] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.619399][ T7240] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.646435][ T7240] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.659860][T18909] tipc: Resetting bearer [ 355.671706][T18909] tipc: Disabling bearer [ 355.691323][ T7240] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.779195][T18956] lo speed is unknown, defaulting to 1000 [ 356.256325][T18993] bond0: option mode: unable to set because the bond device has slaves [ 356.265776][T18995] __nla_validate_parse: 5 callbacks suppressed [ 356.265793][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3752'. [ 356.326761][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3752'. [ 356.345015][T18995] geneve2: entered promiscuous mode [ 356.360696][T18995] geneve2: entered allmulticast mode [ 356.375022][ T7240] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.405646][ T7240] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.435080][ T7240] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.443963][ T7240] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.627801][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 356.770724][T19031] ip_vti0: Master is either lo or non-ether device [ 356.806781][T19036] vti0: entered promiscuous mode [ 356.865720][T19042] netlink: 'syz.0.3765': attribute type 1 has an invalid length. [ 357.081929][T19058] syzkaller0: entered promiscuous mode [ 357.088059][T19058] syzkaller0: entered allmulticast mode [ 357.108273][T19065] Bluetooth: MGMT ver 1.23 [ 357.370356][T19071] ip6_vti0: entered promiscuous mode [ 357.377988][T19071] ip6_vti0: entered allmulticast mode [ 357.633927][T19085] netlink: 'syz.3.3778': attribute type 39 has an invalid length. [ 357.787928][T19088] lo speed is unknown, defaulting to 1000 [ 357.933061][T19096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3781'. [ 358.282835][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3788'. [ 358.348087][T19121] lo speed is unknown, defaulting to 1000 [ 358.486363][T19132] syzkaller1: entered promiscuous mode [ 358.494137][T19132] syzkaller1: entered allmulticast mode [ 358.561532][T19136] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3793'. [ 358.650999][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3794'. [ 358.723179][T19146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3794'. [ 358.866814][T19154] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3797'. [ 358.882640][T19153] lo speed is unknown, defaulting to 1000 [ 358.899384][T19148] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 358.910613][ C0] net_ratelimit: 46 callbacks suppressed [ 358.910631][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.050279][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3803'. [ 359.248049][T19165] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 359.273127][T19181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.299619][T19182] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 359.425340][T19196] netlink: 'syz.0.3809': attribute type 178 has an invalid length. [ 359.474291][T19198] lo speed is unknown, defaulting to 1000 [ 359.677706][T19198] netlink: zone id is out of range [ 359.686513][T19198] netlink: zone id is out of range [ 359.692233][T19198] netlink: zone id is out of range [ 359.697421][T19198] netlink: zone id is out of range [ 359.702684][T19198] netlink: zone id is out of range [ 359.707887][T19198] netlink: zone id is out of range [ 359.715796][T19198] netlink: zone id is out of range [ 359.721057][T19198] netlink: zone id is out of range [ 359.921275][T19223] tap0: tun_chr_ioctl cmd 1074025677 [ 359.933787][T19223] tap0: linktype set to 0 [ 360.136189][T19245] netlink: 'syz.1.3822': attribute type 13 has an invalid length. [ 360.146314][T19245] netlink: 'syz.1.3822': attribute type 17 has an invalid length. [ 360.228409][T19245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.237219][T19245] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.270993][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 360.271562][T19253] netlink: 'syz.3.3824': attribute type 21 has an invalid length. [ 360.285075][T19245] lo speed is unknown, defaulting to 1000 [ 360.462100][T19260] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 360.521099][T19260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.688059][T19260] bond1: (slave veth11): Enslaving as an active interface with a down link [ 360.716575][T19269] lo speed is unknown, defaulting to 1000 [ 360.739972][T19275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.760310][T19282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.763671][T19275] bond1: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 360.777978][T19282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.817077][T19282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.876936][T19282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.991339][ T5182] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 361.092723][T19301] netlink: 'syz.0.3840': attribute type 2 has an invalid length. [ 361.102290][T19301] netlink: 'syz.0.3840': attribute type 1 has an invalid length. [ 361.527574][T19330] __nla_validate_parse: 15 callbacks suppressed [ 361.527593][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 361.543258][T19322] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 361.551505][T19322] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 362.131358][T19382] lo speed is unknown, defaulting to 1000 [ 362.200176][T19385] netlink: 'syz.1.3869': attribute type 1 has an invalid length. [ 362.233548][T19385] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3869'. [ 362.277228][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 362.463833][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3873'. [ 362.541904][T19408] syzkaller1: entered allmulticast mode [ 362.652705][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 362.777044][T19419] netlink: 'syz.0.3878': attribute type 1 has an invalid length. [ 362.784927][T19419] netlink: 'syz.0.3878': attribute type 2 has an invalid length. [ 363.300684][T19448] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3885'. [ 363.483829][T19472] ipvlan2: entered promiscuous mode [ 363.674380][T19491] lo speed is unknown, defaulting to 1000 [ 364.110665][ C0] net_ratelimit: 21 callbacks suppressed [ 364.110686][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.934709][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'. [ 364.948993][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'. [ 364.973619][T19534] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3909'. [ 365.076943][T19534] netlink: 'syz.2.3909': attribute type 17 has an invalid length. [ 365.107869][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3908'. [ 365.124726][T19534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.150680][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.196730][T19556] netlink: 'syz.1.3912': attribute type 1 has an invalid length. [ 365.390547][ T5863] Bluetooth: hci2: command 0x0405 tx timeout [ 365.456126][T19572] tipc: Enabling of bearer rejected, failed to enable media [ 365.466233][T19572] syzkaller0: entered promiscuous mode [ 365.471917][T19572] syzkaller0: entered allmulticast mode [ 365.514229][T19577] netlink: 'syz.2.3919': attribute type 4 has an invalid length. [ 365.674865][T19588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.823909][T19588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.936265][T19588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.026956][T19588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.107663][T19623] lo speed is unknown, defaulting to 1000 [ 366.190594][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.244055][ T7243] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.277375][ T7243] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.286261][ T7248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.309015][ T7248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.346236][ T7243] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.379549][ T7243] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.632579][T19663] __nla_validate_parse: 10 callbacks suppressed [ 366.632597][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 366.650037][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 366.781386][T19679] netlink: 'syz.0.3947': attribute type 1 has an invalid length. [ 366.831368][T19679] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 366.850241][T19679] veth7: entered promiscuous mode [ 366.864840][T19679] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 366.883090][T19679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3947'. [ 366.966516][T19687] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3949'. [ 366.979043][T19687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3949'. [ 367.005636][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3952'. [ 367.096131][T19701] syzkaller0: entered promiscuous mode [ 367.102436][T19701] syzkaller0: entered allmulticast mode [ 367.119144][T19696] lo speed is unknown, defaulting to 1000 [ 367.122273][T19701] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 367.136797][T13196] IPVS: starting estimator thread 0... [ 367.164925][T19703] syzkaller1: entered promiscuous mode [ 367.170935][T19703] syzkaller1: entered allmulticast mode [ 367.230651][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.238237][T19705] IPVS: using max 44 ests per chain, 105600 per kthread [ 367.253253][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 367.366038][T19718] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20003 [ 367.649960][T19729] tipc: Enabled bearer , priority 0 [ 367.834579][T19738] netlink: 'syz.2.3963': attribute type 23 has an invalid length. [ 367.879233][T19746] lo speed is unknown, defaulting to 1000 [ 368.066100][T19753] lo speed is unknown, defaulting to 1000 [ 368.093305][T19756] netlink: 884 bytes leftover after parsing attributes in process `syz.3.3964'. [ 368.263762][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3966'. [ 368.272826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.296357][T19755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3964'. [ 368.600756][T19774] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3972'. [ 368.760576][T13194] tipc: Node number set to 566037903 [ 369.310639][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.358701][T19830] netlink: 'syz.0.3997': attribute type 4 has an invalid length. [ 369.394667][T19829] lo speed is unknown, defaulting to 1000 [ 369.411468][T19832] lo speed is unknown, defaulting to 1000 [ 370.024162][T19832] netlink: zone id is out of range [ 370.029339][T19832] netlink: zone id is out of range [ 370.035572][T19832] netlink: zone id is out of range [ 370.040972][T19832] netlink: zone id is out of range [ 370.046413][T19832] netlink: zone id is out of range [ 370.051831][T19832] netlink: zone id is out of range [ 370.055077][T19848] lo speed is unknown, defaulting to 1000 [ 370.057463][T19832] netlink: zone id is out of range [ 370.068309][T19832] netlink: zone id is out of range [ 370.073531][T19832] netlink: zone id is out of range [ 370.267861][T19850] tipc: Enabled bearer , priority 0 [ 370.321203][T19849] tipc: Resetting bearer [ 370.392299][T19849] tipc: Disabling bearer [ 370.529621][T19874] netlink: 'syz.2.4010': attribute type 4 has an invalid length. [ 370.601229][T19881] FAULT_INJECTION: forcing a failure. [ 370.601229][T19881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.624689][T19881] CPU: 0 UID: 0 PID: 19881 Comm: syz.1.4016 Not tainted syzkaller #0 PREEMPT(full) [ 370.624717][T19881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.624733][T19881] Call Trace: [ 370.624739][T19881] [ 370.624747][T19881] dump_stack_lvl+0x189/0x250 [ 370.624772][T19881] ? __pfx____ratelimit+0x10/0x10 [ 370.624796][T19881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.624815][T19881] ? __pfx__printk+0x10/0x10 [ 370.624839][T19881] ? rcu_is_watching+0x15/0xb0 [ 370.624857][T19881] should_fail_ex+0x414/0x560 [ 370.624878][T19881] _copy_to_user+0x31/0xb0 [ 370.624895][T19881] simple_read_from_buffer+0xe1/0x170 [ 370.624916][T19881] proc_fail_nth_read+0x1b3/0x220 [ 370.624934][T19881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.624952][T19881] ? rw_verify_area+0x2a6/0x4d0 [ 370.624971][T19881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.624988][T19881] vfs_read+0x1fd/0xa30 [ 370.625006][T19881] ? fdget_pos+0x247/0x320 [ 370.625022][T19881] ? __pfx___mutex_lock+0x10/0x10 [ 370.625046][T19881] ? __pfx_vfs_read+0x10/0x10 [ 370.625068][T19881] ? __fget_files+0x3a0/0x420 [ 370.625081][T19881] ? __fget_files+0x2a/0x420 [ 370.625095][T19881] ksys_read+0x145/0x250 [ 370.625111][T19881] ? __fget_files+0x3a0/0x420 [ 370.625124][T19881] ? __pfx_ksys_read+0x10/0x10 [ 370.625143][T19881] ? rcu_is_watching+0x15/0xb0 [ 370.625159][T19881] do_syscall_64+0xfa/0x3b0 [ 370.625175][T19881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.625191][T19881] ? clear_bhb_loop+0x60/0xb0 [ 370.625210][T19881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.625233][T19881] RIP: 0033:0x7febe1d8d5fc [ 370.625250][T19881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.625264][T19881] RSP: 002b:00007febe2bb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.625281][T19881] RAX: ffffffffffffffda RBX: 00007febe1fb5fa0 RCX: 00007febe1d8d5fc [ 370.625294][T19881] RDX: 000000000000000f RSI: 00007febe2bb60a0 RDI: 0000000000000004 [ 370.625305][T19881] RBP: 00007febe2bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.625326][T19881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.625336][T19881] R13: 00007febe1fb6038 R14: 00007febe1fb5fa0 R15: 00007ffe68dacbb8 [ 370.625354][T19881] [ 370.908739][T19895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.924021][T19895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.937003][T19895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.969240][T19895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.285589][T19925] IPVS: set_ctl: invalid protocol: 43 172.20.20.57:20002 [ 371.297925][T19926] syz_tun: left promiscuous mode [ 371.349426][T19922] tipc: Enabling of bearer rejected, failed to enable media [ 371.496561][T19950] netlink: 'syz.2.4035': attribute type 12 has an invalid length. [ 371.678803][T19959] lo speed is unknown, defaulting to 1000 [ 371.964788][T19983] __nla_validate_parse: 31 callbacks suppressed [ 371.964807][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 372.059999][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 372.075548][T19997] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 372.175481][T20006] tipc: Enabling of bearer rejected, already enabled [ 372.205461][T20006] syzkaller0: entered promiscuous mode [ 372.212617][T20006] syzkaller0: entered allmulticast mode [ 372.385655][T20021] Unsupported ieee802154 address type: 0 [ 372.464180][T20032] lo: entered allmulticast mode [ 372.486669][T20032] dvmrp8: entered allmulticast mode [ 372.521899][T20032] lo speed is unknown, defaulting to 1000 [ 372.562490][T20033] netlink: 'syz.3.4062': attribute type 23 has an invalid length. [ 372.668607][T20038] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4064'. [ 372.681517][T20030] lo: left allmulticast mode [ 372.686214][T20030] dvmrp8: left allmulticast mode [ 372.692769][T20038] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4064'. [ 372.705284][T20040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.717550][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4064'. [ 372.719597][T20040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.743785][T20040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.745510][T20038] lo speed is unknown, defaulting to 1000 [ 372.764226][T20038] lo speed is unknown, defaulting to 1000 [ 372.767729][T20040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.802882][T20038] lo speed is unknown, defaulting to 1000 [ 372.837968][T20043] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.850616][T20043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.857869][T20043] IPv6: NLM_F_CREATE should be set when creating new route [ 372.865176][T20043] IPv6: NLM_F_CREATE should be set when creating new route [ 372.872448][T20043] IPv6: NLM_F_CREATE should be set when creating new route [ 372.882092][T20043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.951217][T20038] infiniband syz0: set down [ 372.956178][T13191] lo speed is unknown, defaulting to 1000 [ 372.966128][T20038] infiniband syz0: added lo [ 373.010412][T20038] RDS/IB: syz0: added [ 373.015878][T20038] smc: adding ib device syz0 with port count 1 [ 373.022958][T20038] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 373.033426][ T8556] lo speed is unknown, defaulting to 1000 [ 373.040286][T20038] lo speed is unknown, defaulting to 1000 [ 373.084326][T20052] lo speed is unknown, defaulting to 1000 [ 373.188290][T20038] lo speed is unknown, defaulting to 1000 [ 373.340968][T20052] lo speed is unknown, defaulting to 1000 [ 373.501858][T20038] lo speed is unknown, defaulting to 1000 [ 373.576186][T20058] netlink: 'syz.1.4070': attribute type 16 has an invalid length. [ 373.584699][T20058] netlink: 'syz.1.4070': attribute type 3 has an invalid length. [ 373.596323][T20058] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4070'. [ 373.809161][T20038] lo speed is unknown, defaulting to 1000 [ 373.938579][T20038] lo speed is unknown, defaulting to 1000 [ 374.048869][T20038] lo speed is unknown, defaulting to 1000 [ 374.156707][T20038] lo speed is unknown, defaulting to 1000 [ 374.285235][T20038] lo speed is unknown, defaulting to 1000 [ 374.451008][T20038] lo speed is unknown, defaulting to 1000 [ 374.510256][T20092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.520276][ C0] net_ratelimit: 45 callbacks suppressed [ 374.520297][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.571877][T20092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.605490][T20092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.624817][T20082] lo speed is unknown, defaulting to 1000 [ 374.658070][T20094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.684778][T20092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.797610][T20079] lo speed is unknown, defaulting to 1000 [ 374.810072][T20079] lo speed is unknown, defaulting to 1000 [ 374.873543][T20098] tipc: Enabled bearer , priority 0 [ 374.997715][T20098] syzkaller0: entered promiscuous mode [ 375.003496][T20098] syzkaller0: entered allmulticast mode [ 375.022762][T20096] tipc: Resetting bearer [ 375.055784][T20102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4081'. [ 375.082693][T20102] ip6tnl0: entered promiscuous mode [ 375.088036][T20102] ip6tnl0: entered allmulticast mode [ 375.096675][T20095] tipc: Resetting bearer [ 375.137017][T20095] tipc: Disabling bearer [ 375.157270][T20100] lo speed is unknown, defaulting to 1000 [ 375.168673][T20100] lo speed is unknown, defaulting to 1000 [ 375.234668][T20105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4082'. [ 375.328990][T20109] smc: net device bond0 erased user defined pnetid SYZ [ 375.336348][T20109] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 375.550583][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.615787][T20124] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4087'. [ 375.764338][T20128] tipc: Enabled bearer , priority 0 [ 375.780294][T20128] syzkaller0: MTU too low for tipc bearer [ 375.787899][T20128] tipc: Disabling bearer [ 375.804868][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4089'. [ 375.906308][T20133] lo speed is unknown, defaulting to 1000 [ 375.924386][T20138] netlink: 'syz.2.4091': attribute type 9 has an invalid length. [ 375.933453][T20133] lo speed is unknown, defaulting to 1000 [ 375.970710][T20138] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 376.064336][T20147] C: renamed from team_slave_0 [ 376.082598][T20147] netlink: 'syz.3.4093': attribute type 3 has an invalid length. [ 376.095948][T20147] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 376.350253][T20163] netlink: zone id is out of range [ 376.355554][T20163] netlink: zone id is out of range [ 376.360831][T20163] netlink: zone id is out of range [ 376.365950][T20163] netlink: zone id is out of range [ 376.387243][T20163] netlink: zone id is out of range [ 376.393138][T20163] netlink: zone id is out of range [ 376.401530][T20163] netlink: zone id is out of range [ 376.593474][T20184] siw: device registration error -23 [ 376.676237][T20184] tipc: Enabled bearer , priority 0 [ 376.695917][T20184] syzkaller0: entered promiscuous mode [ 376.716279][T20184] syzkaller0: entered allmulticast mode [ 376.738893][T20184] tipc: Resetting bearer [ 376.762910][T20183] tipc: Resetting bearer [ 376.777748][T20183] tipc: Disabling bearer [ 377.224753][T20221] __nla_validate_parse: 7 callbacks suppressed [ 377.224771][T20221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4112'. [ 377.398435][T20228] syzkaller0: entered promiscuous mode [ 377.404266][T20228] syzkaller0: entered allmulticast mode [ 377.414589][T20228] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.503607][T20230] lo speed is unknown, defaulting to 1000 [ 377.509866][T20230] lo speed is unknown, defaulting to 1000 [ 377.552898][T20231] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4116'. [ 377.654868][T20234] netlink: 'syz.3.4117': attribute type 10 has an invalid length. [ 377.662962][T20234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4117'. [ 377.674037][T20234] !: entered promiscuous mode [ 377.679649][T20234] !: entered allmulticast mode [ 378.040076][T20266] netlink: 'syz.2.4126': attribute type 4 has an invalid length. [ 378.051595][T20261] lo speed is unknown, defaulting to 1000 [ 378.058233][T20261] lo speed is unknown, defaulting to 1000 [ 378.162313][ T30] audit: type=1800 audit(1756296277.462:5): pid=20251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4122" name="cgroup.controllers" dev="tmpfs" ino=1597 res=0 errno=0 [ 378.184108][T20272] lo speed is unknown, defaulting to 1000 [ 378.354786][T20272] lo speed is unknown, defaulting to 1000 [ 378.964535][T20318] netlink: 'syz.2.4139': attribute type 12 has an invalid length. [ 379.347124][T20327] netlink: 'syz.3.4141': attribute type 3 has an invalid length. [ 379.424174][T20330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4141'. [ 379.585250][T20333] netlink: 'syz.3.4142': attribute type 12 has an invalid length. [ 379.710627][ C0] net_ratelimit: 45 callbacks suppressed [ 379.710648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.843548][T20343] netlink: 'syz.2.4146': attribute type 4 has an invalid length. [ 379.863347][T20342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4145'. [ 379.891148][T20339] tipc: Enabling of bearer rejected, already enabled [ 379.924120][T20342] vlan2: entered allmulticast mode [ 379.940148][T20342] bond1: entered allmulticast mode [ 379.974636][T20339] tipc: Resetting bearer [ 379.981673][T20353] bridge0: entered allmulticast mode [ 379.988041][T20353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4147'. [ 380.000173][T20353] bridge0 (unregistering): left allmulticast mode [ 380.053891][T20361] tc_dump_action: action bad kind [ 380.130738][T20368] netlink: 'syz.2.4154': attribute type 2 has an invalid length. [ 380.215742][T20371] lo speed is unknown, defaulting to 1000 [ 380.228169][T20371] lo speed is unknown, defaulting to 1000 [ 380.255999][T20378] netlink: 'syz.3.4158': attribute type 4 has an invalid length. [ 380.267990][T20379] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 380.363533][T20384] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 380.375752][T20384] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 380.750551][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.863517][T20414] netlink: 'syz.4.4169': attribute type 4 has an invalid length. [ 380.912664][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4170'. [ 380.983086][ T7247] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.997405][ T7247] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.021055][ T7247] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.029312][ T7247] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.114607][T20437] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 381.377624][T20466] lo speed is unknown, defaulting to 1000 [ 381.384363][T20466] lo speed is unknown, defaulting to 1000 [ 381.411158][T20470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4186'. [ 381.430798][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 381.445636][T20470] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4186'. [ 381.507841][T20471] lo speed is unknown, defaulting to 1000 [ 381.523088][T20471] lo speed is unknown, defaulting to 1000 [ 381.790555][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.839022][T20490] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 381.845119][T20490] dvmrp1: linktype set to 773 [ 382.050279][T20504] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 382.083894][T20506] bridge_slave_0: entered promiscuous mode [ 382.695791][T20536] sctp: [Deprecated]: syz.3.4206 (pid 20536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.695791][T20536] Use struct sctp_sack_info instead [ 382.830561][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.987885][T20560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.991780][T20556] __nla_validate_parse: 4 callbacks suppressed [ 382.991799][T20556] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4212'. [ 383.098390][T20564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.163375][T20564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.205599][T20564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.245009][T20564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.304099][ T7265] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.317341][ T7240] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.329565][ T7240] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.344371][ T7247] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.461813][T20571] GUP no longer grows the stack in syz.3.4216 (20571): 200000006000-20000000a000 (200000005000) [ 383.472859][T20571] CPU: 0 UID: 0 PID: 20571 Comm: syz.3.4216 Not tainted syzkaller #0 PREEMPT(full) [ 383.472887][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.472900][T20571] Call Trace: [ 383.472909][T20571] [ 383.472917][T20571] dump_stack_lvl+0x189/0x250 [ 383.472946][T20571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.472967][T20571] ? __pfx__printk+0x10/0x10 [ 383.472989][T20571] ? find_vma+0xe7/0x160 [ 383.473011][T20571] ? mas_next_slot+0xc27/0xcf0 [ 383.473041][T20571] __get_user_pages+0x24d0/0x2ce0 [ 383.473068][T20571] ? __gup_longterm_locked+0xc68/0x1660 [ 383.473098][T20571] ? __gup_longterm_locked+0xc68/0x1660 [ 383.473123][T20571] __gup_longterm_locked+0xde9/0x1660 [ 383.473147][T20571] ? try_grab_folio_fast+0x1be/0x4f0 [ 383.473172][T20571] ? rcu_is_watching+0x15/0xb0 [ 383.473192][T20571] ? rcu_is_watching+0x15/0xb0 [ 383.473211][T20571] gup_fast_fallback+0x1e6a/0x2010 [ 383.473247][T20571] ? __pfx_gup_fast_fallback+0x10/0x10 [ 383.473267][T20571] ? __mutex_lock+0x335/0x1350 [ 383.473294][T20571] ? is_valid_gup_args+0x11f/0x200 [ 383.473314][T20571] ? get_user_pages_fast+0x4d/0xb0 [ 383.473335][T20571] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 383.473358][T20571] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 383.473383][T20571] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 383.473404][T20571] ? wait_for_space+0x24d/0x2d0 [ 383.473439][T20571] iov_iter_get_pages2+0x5e/0xa0 [ 383.473461][T20571] __se_sys_vmsplice+0x548/0x10d0 [ 383.473489][T20571] ? futex_private_hash_put+0x4b/0x280 [ 383.473513][T20571] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 383.473537][T20571] ? __pfx_futex_wake+0x10/0x10 [ 383.473582][T20571] ? rcu_is_watching+0x15/0xb0 [ 383.473601][T20571] ? rcu_is_watching+0x15/0xb0 [ 383.473617][T20571] do_syscall_64+0xfa/0x3b0 [ 383.473634][T20571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.473651][T20571] ? clear_bhb_loop+0x60/0xb0 [ 383.473670][T20571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.473687][T20571] RIP: 0033:0x7fbdce58ebe9 [ 383.473704][T20571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.473719][T20571] RSP: 002b:00007fbdcf433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 383.473739][T20571] RAX: ffffffffffffffda RBX: 00007fbdce7b5fa0 RCX: 00007fbdce58ebe9 [ 383.473752][T20571] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010 [ 383.473764][T20571] RBP: 00007fbdce611e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.473775][T20571] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 383.473786][T20571] R13: 00007fbdce7b6038 R14: 00007fbdce7b5fa0 R15: 00007ffe41a366d8 [ 383.473806][T20571] [ 383.795751][T20576] netlink: 'syz.4.4218': attribute type 1 has an invalid length. [ 383.808546][T20576] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4218'. [ 383.827990][T20576] netlink: 'syz.4.4218': attribute type 1 has an invalid length. [ 383.870548][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.943429][T20588] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4221'. [ 383.960935][T20584] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4221'. [ 384.033172][T20593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 384.191014][T20601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4225'. [ 384.200087][T20601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4225'. [ 384.259105][T20604] lo speed is unknown, defaulting to 1000 [ 384.265719][T20604] lo speed is unknown, defaulting to 1000 [ 384.378568][T20607] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4228'. [ 384.542011][T20604] netlink: zone id is out of range [ 384.547345][T20604] netlink: zone id is out of range [ 384.552960][T20604] netlink: zone id is out of range [ 384.687363][T20629] tipc: Enabled bearer , priority 0 [ 384.695643][T20629] syzkaller0: entered promiscuous mode [ 384.701297][T20629] syzkaller0: entered allmulticast mode [ 384.711902][T20629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 384.739132][T20629] tipc: Resetting bearer [ 384.739273][T20631] FAULT_INJECTION: forcing a failure. [ 384.739273][T20631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.759015][T20628] tipc: Resetting bearer [ 384.767564][T20631] CPU: 1 UID: 0 PID: 20631 Comm: syz.3.4234 Not tainted syzkaller #0 PREEMPT(full) [ 384.767592][T20631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.767604][T20631] Call Trace: [ 384.767611][T20631] [ 384.767618][T20631] dump_stack_lvl+0x189/0x250 [ 384.767642][T20631] ? __pfx____ratelimit+0x10/0x10 [ 384.767666][T20631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.767685][T20631] ? __pfx__printk+0x10/0x10 [ 384.767705][T20631] ? __might_fault+0xb0/0x130 [ 384.767730][T20631] ? rcu_is_watching+0x15/0xb0 [ 384.767748][T20631] should_fail_ex+0x414/0x560 [ 384.767773][T20631] _copy_from_user+0x2d/0xb0 [ 384.767793][T20631] do_sock_getsockopt+0x17d/0x450 [ 384.767812][T20631] ? 0xffffffffff600000 [ 384.767827][T20631] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 384.767845][T20631] ? rcu_needs_cpu+0xa0/0xb0 [ 384.767862][T20631] ? ksys_write+0x1e1/0x250 [ 384.767887][T20631] __x64_sys_getsockopt+0x1a5/0x250 [ 384.767905][T20631] ? rcu_needs_cpu+0xa0/0xb0 [ 384.767921][T20631] ? 0xffffffffff600000 [ 384.767934][T20631] ? rcu_needs_cpu+0xa0/0xb0 [ 384.767957][T20631] do_syscall_64+0xfa/0x3b0 [ 384.767974][T20631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.767992][T20631] ? clear_bhb_loop+0x60/0xb0 [ 384.768011][T20631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.768029][T20631] RIP: 0033:0x7fbdce58ebe9 [ 384.768043][T20631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.768061][T20631] RSP: 002b:00007fbdcf433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 384.768081][T20631] RAX: ffffffffffffffda RBX: 00007fbdce7b5fa0 RCX: 00007fbdce58ebe9 [ 384.768095][T20631] RDX: 0000000000008001 RSI: 0000000000000028 RDI: 0000000000000003 [ 384.768107][T20631] RBP: 00007fbdcf433090 R08: 0000200000000000 R09: 0000000000000000 [ 384.768120][T20631] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 384.768132][T20631] R13: 00007fbdce7b6038 R14: 00007fbdce7b5fa0 R15: 00007ffe41a366d8 [ 384.768148][T20631] ? 0xffffffffff600000 [ 384.768166][T20631] [ 384.910559][ C0] net_ratelimit: 21 callbacks suppressed [ 384.910578][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.018711][T20628] tipc: Disabling bearer [ 385.096996][T20640] lo speed is unknown, defaulting to 1000 [ 385.121567][T20640] lo speed is unknown, defaulting to 1000 [ 385.130621][T20635] netlink: 'syz.1.4236': attribute type 9 has an invalid length. [ 385.147487][T20635] netlink: 'syz.1.4236': attribute type 6 has an invalid length. [ 385.303085][T20653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.329755][T20653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.349313][T20654] syzkaller1: entered promiscuous mode [ 385.360691][T20654] syzkaller1: entered allmulticast mode [ 385.387417][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4242'. [ 385.403693][T20653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.437137][T20653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.456493][T20659] nbd: must specify at least one socket [ 385.580191][T20664] bond3: (slave gretap1): Releasing active interface [ 385.588559][T20640] netlink: zone id is out of range [ 385.594430][T20640] netlink: zone id is out of range [ 385.600409][T20640] netlink: zone id is out of range [ 385.605821][T20640] netlink: zone id is out of range [ 385.611080][T20640] netlink: zone id is out of range [ 385.616417][T20640] netlink: zone id is out of range [ 385.621977][T20640] netlink: zone id is out of range [ 385.627203][T20640] netlink: zone id is out of range [ 385.632597][T20640] netlink: zone id is out of range [ 385.936650][T20678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4248'. [ 386.034892][T20676] netlink: 'syz.3.4247': attribute type 1 has an invalid length. [ 386.084983][T20682] tun0: tun_chr_ioctl cmd 1074025672 [ 386.090332][T20682] tun0: ignored: set checksum disabled [ 386.819226][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.861666][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.901132][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.952749][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.036433][T20727] netlink: 'syz.1.4262': attribute type 5 has an invalid length. [ 387.044420][T20727] netlink: 'syz.1.4262': attribute type 7 has an invalid length. [ 387.098229][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.100827][T20727] : entered promiscuous mode [ 387.105811][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.117680][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.126022][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.135596][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.179266][T20728] lo speed is unknown, defaulting to 1000 [ 387.186334][T20728] lo speed is unknown, defaulting to 1000 [ 387.460304][T20743] netlink: 'syz.3.4266': attribute type 4 has an invalid length. [ 387.466845][T20728] chnl_net:caif_netlink_parms(): no params data found [ 387.668965][T20728] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.693701][T20728] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.711132][T20728] bridge_slave_0: entered allmulticast mode [ 387.724940][T20728] bridge_slave_0: entered promiscuous mode [ 387.776545][T20728] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.798986][T20728] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.811327][T20728] bridge_slave_1: entered allmulticast mode [ 387.819254][T20728] bridge_slave_1: entered promiscuous mode [ 387.911905][T20728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.954128][T20728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.083983][T20780] __nla_validate_parse: 2 callbacks suppressed [ 388.084003][T20780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4276'. [ 388.104192][T20728] team0: Port device team_slave_0 added [ 388.129937][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4277'. [ 388.132026][T20728] team0: Port device team_slave_1 added [ 388.159025][T20787] netlink: 'syz.1.4278': attribute type 4 has an invalid length. [ 388.223515][T20728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.241158][T20728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.269172][T20793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.277516][T20728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.295090][T20793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.320696][T20728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.328221][T20728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.358009][T20728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.359196][T20793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.404281][T20728] hsr_slave_0: entered promiscuous mode [ 388.428639][T20728] hsr_slave_1: entered promiscuous mode [ 388.433448][T20793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.437910][T20728] debugfs: 'hsr0' already exists in 'hsr' [ 388.450557][T20728] Cannot create hsr debugfs directory [ 388.462754][T20791] netlink: 'syz.1.4279': attribute type 9 has an invalid length. [ 388.470634][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4279'. [ 388.494677][T20791] macvlan2: entered promiscuous mode [ 388.513576][T20791] hsr0: entered promiscuous mode [ 388.518698][T20791] macvlan2: entered allmulticast mode [ 388.527371][ T8551] IPVS: starting estimator thread 0... [ 388.534802][T20791] hsr0: entered allmulticast mode [ 388.543211][T20791] hsr_slave_0: entered allmulticast mode [ 388.548979][T20791] hsr_slave_1: entered allmulticast mode [ 388.633192][T20803] IPVS: using max 43 ests per chain, 103200 per kthread [ 388.837853][T20728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.865313][T20728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.879304][T20728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.916871][T20728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 389.115654][T20728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.137909][T20846] lo speed is unknown, defaulting to 1000 [ 389.148030][T20728] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.157164][ T5863] Bluetooth: hci4: command tx timeout [ 389.185151][ T7265] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.192321][ T7265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.212577][T20853] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4295'. [ 389.223358][T20846] lo speed is unknown, defaulting to 1000 [ 389.232808][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.239995][ T7265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.342063][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'. [ 389.489462][T20864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4297'. [ 389.533068][T20864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4297'. [ 389.548484][T20864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4297'. [ 389.569623][T20728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.096843][T20879] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4298'. [ 390.110556][ C0] net_ratelimit: 23 callbacks suppressed [ 390.110578][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.515821][T20890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.544046][T20890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.656451][T20890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.703791][T20728] veth0_vlan: entered promiscuous mode [ 390.731496][T20728] veth1_vlan: entered promiscuous mode [ 390.784009][T20728] veth0_macvtap: entered promiscuous mode [ 390.799449][T20728] veth1_macvtap: entered promiscuous mode [ 390.838146][T20728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.866336][T20728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.899705][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.919144][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.942799][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.978550][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.130652][ T7240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.136528][T20912] netlink: 'syz.3.4305': attribute type 2 has an invalid length. [ 391.138551][ T7240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.150571][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.198727][ T7240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.207698][ T7240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.230683][ T5863] Bluetooth: hci4: command tx timeout [ 391.312041][T20914] lo speed is unknown, defaulting to 1000 [ 391.319075][T20914] lo speed is unknown, defaulting to 1000 [ 391.403031][T20917] netlink: 'syz.1.4309': attribute type 4 has an invalid length. [ 391.443436][ T8556] lo speed is unknown, defaulting to 1000 [ 391.449258][ T8556] syz2: Port: 1 Link DOWN [ 391.454744][T20919] netlink: 'syz.1.4309': attribute type 4 has an invalid length. [ 391.498127][T13196] lo speed is unknown, defaulting to 1000 [ 391.504690][T13196] syz2: Port: 1 Link ACTIVE [ 391.535600][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4309'. [ 391.929354][T20934] lo speed is unknown, defaulting to 1000 [ 391.993182][T20934] lo speed is unknown, defaulting to 1000 [ 392.057638][T20940] lo speed is unknown, defaulting to 1000 [ 392.190610][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.199398][T20914] netlink: zone id is out of range [ 392.206944][T20914] netlink: zone id is out of range [ 392.212349][T20914] netlink: zone id is out of range [ 392.225562][T20914] netlink: zone id is out of range [ 392.242837][T20914] netlink: zone id is out of range [ 392.248010][T20914] netlink: zone id is out of range [ 392.283262][T20914] netlink: zone id is out of range [ 392.299034][T20940] lo speed is unknown, defaulting to 1000 [ 392.815845][T20958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.853516][T20958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.872806][T20958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.038964][T20973] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20004 [ 393.108737][T20971] __nla_validate_parse: 3 callbacks suppressed [ 393.108760][T20971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4324'. [ 393.296147][T20983] vlan0: entered promiscuous mode [ 393.308780][T20981] lo speed is unknown, defaulting to 1000 [ 393.314719][ T5863] Bluetooth: hci4: command tx timeout [ 393.349264][T20981] lo speed is unknown, defaulting to 1000 [ 393.623783][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4334'. [ 393.941537][T21027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4341'. [ 393.956230][T21027] netlink: 'syz.1.4341': attribute type 1 has an invalid length. [ 393.964762][T21027] NCSI netlink: No device for ifindex 0 [ 394.042711][ T7265] bridge_slave_0: left allmulticast mode [ 394.055670][ T7265] bridge_slave_0: left promiscuous mode [ 394.062425][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.084951][ T7265] tipc: Resetting bearer [ 394.111935][ T7265] bond5 (unregistering): (slave ip6gretap2): Releasing active interface [ 394.166446][ T7265] bond6 (unregistering): (slave geneve3): Releasing active interface [ 394.174857][ T7265] geneve3 (unregistering): left promiscuous mode [ 394.260730][T21049] netlink: 'syz.3.4343': attribute type 10 has an invalid length. [ 394.317808][T21052] netlink: 'syz.3.4343': attribute type 8 has an invalid length. [ 394.433596][ T7265] tipc: Disabling bearer [ 394.481986][ T7265] bond0 (unregistering): Released all slaves [ 394.493461][ T7265] bond1 (unregistering): Released all slaves [ 394.504706][ T7265] bond2 (unregistering): Released all slaves [ 394.518810][ T7265] bond3 (unregistering): (slave veth15): Releasing active interface [ 394.528468][ T7265] bond3 (unregistering): Released all slaves [ 394.547648][ T7265] bond4 (unregistering): Released all slaves [ 394.567032][ T7265] bond5 (unregistering): Released all slaves [ 394.584125][ T7265] bond6 (unregistering): Released all slaves [ 394.619504][ T7265] bond7 (unregistering): Released all slaves [ 394.734763][ T7265] k›*·]‘: left promiscuous mode [ 394.809889][T21067] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4350'. [ 394.837077][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4350'. [ 394.884170][ T7265] tipc: Left network mode [ 394.915085][T21069] tunl0: entered promiscuous mode [ 395.026910][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4350'. [ 395.176806][T21089] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4358'. [ 395.187476][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4358'. [ 395.214853][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4358'. [ 395.310631][ C0] net_ratelimit: 22 callbacks suppressed [ 395.310651][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.368868][T21107] netlink: 'syz.4.4359': attribute type 10 has an invalid length. [ 395.391112][ T5863] Bluetooth: hci4: command tx timeout [ 395.743955][ T7265] hsr_slave_0: left promiscuous mode [ 395.761647][ T7265] hsr_slave_1: left promiscuous mode [ 395.879507][ T7265] pimreg (unregistering): left allmulticast mode [ 396.086231][T21107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.097491][T21107] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 396.203604][T21121] syzkaller0: entered promiscuous mode [ 396.209111][T21121] syzkaller0: entered allmulticast mode [ 396.299121][T21130] netlink: 'syz.5.4364': attribute type 3 has an invalid length. [ 396.326606][T21121] lo speed is unknown, defaulting to 1000 [ 396.330837][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4364'. [ 396.350570][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.359756][T21121] lo speed is unknown, defaulting to 1000 [ 396.377363][T21133] lo speed is unknown, defaulting to 1000 [ 396.543679][ T7265] IPVS: stop unused estimator thread 0... [ 396.561081][T21133] lo speed is unknown, defaulting to 1000 [ 396.612672][T21141] tipc: Started in network mode [ 396.617574][T21141] tipc: Node identity 9e39d7350e98, cluster identity 4711 [ 396.626231][T21141] tipc: Enabled bearer , priority 0 [ 396.643425][T21141] syzkaller0: entered promiscuous mode [ 396.662127][T21141] syzkaller0: entered allmulticast mode [ 396.804704][T21149] netlink: 'syz.5.4369': attribute type 13 has an invalid length. [ 396.820707][T21149] netlink: 'syz.5.4369': attribute type 17 has an invalid length. [ 396.867588][T21149] tunl0: left promiscuous mode [ 396.986577][T21149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.093556][T21151] lo speed is unknown, defaulting to 1000 [ 397.099981][T21140] tipc: Resetting bearer [ 397.113614][T21140] tipc: Disabling bearer [ 397.193240][T21151] lo speed is unknown, defaulting to 1000 [ 397.200317][T21150] lo speed is unknown, defaulting to 1000 [ 397.390555][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.582379][T21150] lo speed is unknown, defaulting to 1000 [ 397.762603][T21170] netlink: 'syz.3.4376': attribute type 10 has an invalid length. [ 398.169522][T21184] lo speed is unknown, defaulting to 1000 [ 398.200406][T21183] lo speed is unknown, defaulting to 1000 [ 398.205027][T21195] __nla_validate_parse: 2 callbacks suppressed [ 398.205044][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 398.226567][T21184] lo speed is unknown, defaulting to 1000 [ 398.430573][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.475898][T21207] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4383'. [ 398.512443][T21207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4383'. [ 398.522147][T21207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4383'. [ 398.595484][T21209] team0 (unregistering): Port device team_slave_0 removed [ 398.607563][T21209] team0 (unregistering): Port device team_slave_1 removed [ 398.626009][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4385'. [ 398.638891][T21183] lo speed is unknown, defaulting to 1000 [ 399.137636][T21236] syzkaller0: entered promiscuous mode [ 399.144220][T21236] syzkaller0: entered allmulticast mode [ 399.470609][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.764109][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4399'. [ 399.773072][T21265] Unsupported xt match [ 399.773086][T21265] unable to load match [ 399.873668][T21269] macsec0: entered allmulticast mode [ 399.879313][T21269] veth1_macvtap: entered allmulticast mode [ 399.886644][T21269] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 399.903679][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4402'. [ 399.915389][T21272] lo speed is unknown, defaulting to 1000 [ 399.922614][T21272] lo speed is unknown, defaulting to 1000 [ 399.993208][T21279] netlink: 'syz.5.4404': attribute type 10 has an invalid length. [ 400.107909][T21287] Bluetooth: MGMT ver 1.23 [ 400.221391][T21298] netlink: 'syz.4.4408': attribute type 1 has an invalid length. [ 400.282578][T21299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4411'. [ 400.291904][T21299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4411'. [ 400.413343][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4415'. [ 400.479248][T21321] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 400.510658][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.583107][T21330] pimreg3: entered allmulticast mode [ 400.817062][T21344] vlan0: entered promiscuous mode [ 401.004473][ T8556] hid-generic 0005:10CF:8002.0002: collection stack underflow [ 401.013453][ T8556] hid-generic 0005:10CF:8002.0002: item 0 0 0 12 parsing failed [ 401.026737][T21362] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 401.038877][ T8556] hid-generic 0005:10CF:8002.0002: probe with driver hid-generic failed with error -22 [ 401.078101][T21369] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 401.188366][T21385] team0: Mode changed to "loadbalance" [ 401.230809][ T5182] Bluetooth: hci3: command 0x0406 tx timeout [ 401.295899][T21388] lo speed is unknown, defaulting to 1000 [ 401.305445][T21388] lo speed is unknown, defaulting to 1000 [ 401.533861][T21406] lo speed is unknown, defaulting to 1000 [ 401.550558][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.559519][T21406] lo speed is unknown, defaulting to 1000 [ 402.272806][T21453] lo speed is unknown, defaulting to 1000 [ 402.303506][T21453] lo speed is unknown, defaulting to 1000 [ 402.546729][T21467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.590561][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.675451][T21475] "syz.2.4462" (21475) uses obsolete ecb(arc4) skcipher [ 402.748677][T21483] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 402.906589][T21489] syzkaller0: entered promiscuous mode [ 402.922361][T21489] syzkaller0: entered allmulticast mode [ 403.056627][T21495] lo speed is unknown, defaulting to 1000 [ 403.073581][T21495] lo speed is unknown, defaulting to 1000 [ 403.176903][T21503] openvswitch: netlink: Missing valid actions attribute. [ 403.218943][T21503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.307278][T21498] netlink: 'syz.4.4467': attribute type 21 has an invalid length. [ 403.367716][T21498] __nla_validate_parse: 9 callbacks suppressed [ 403.367737][T21498] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4467'. [ 403.413938][T21516] lo speed is unknown, defaulting to 1000 [ 403.420679][T21516] lo speed is unknown, defaulting to 1000 [ 403.630888][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.734672][T21532] !: left promiscuous mode [ 403.739470][T21532] !: left allmulticast mode [ 403.757688][T21532] xfrm1: left allmulticast mode [ 403.763529][T21532] tipc: Resetting bearer [ 403.770623][T21532] syzkaller0: left promiscuous mode [ 403.776370][T21532] syzkaller0: left allmulticast mode [ 403.788440][T21541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4480'. [ 403.803813][T21532] sit1: left allmulticast mode [ 403.842058][T21541] hsr_slave_0: left promiscuous mode [ 403.905962][T21541] hsr_slave_1: left promiscuous mode [ 403.942708][ T7240] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.955794][ T7240] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.982884][ T7240] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.000101][ T7240] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.096165][T21555] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 404.383800][T21577] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4488'. [ 404.439324][T21581] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4488'. [ 404.480068][T21585] netlink: 'syz.2.4494': attribute type 11 has an invalid length. [ 404.514359][T21583] mac80211_hwsim hwsim115 wlan1: entered allmulticast mode [ 404.552446][T21583] netlink: 'syz.1.4493': attribute type 10 has an invalid length. [ 404.562957][T21583] mac80211_hwsim hwsim115 wlan1: left allmulticast mode [ 404.571970][T21583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.583741][T21583] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 404.637912][T21594] nbd: must specify a device to reconfigure [ 404.641225][T21592] lo speed is unknown, defaulting to 1000 [ 404.670564][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.711070][T21597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4498'. [ 404.832976][T21603] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.4498'. [ 404.857485][T21592] lo speed is unknown, defaulting to 1000 [ 404.912460][T21602] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 404.965372][T21600] lo speed is unknown, defaulting to 1000 [ 405.058050][T21600] lo speed is unknown, defaulting to 1000 [ 405.221270][T21623] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4506'. [ 405.401867][T21628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4508'. [ 405.564792][T21642] netlink: 'syz.2.4512': attribute type 4 has an invalid length. [ 405.710596][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.025565][T21627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4505'. [ 406.198421][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4516'. [ 406.225608][T21658] lo speed is unknown, defaulting to 1000 [ 406.232620][T21658] lo speed is unknown, defaulting to 1000 [ 406.322954][T21661] tipc: Enabled bearer , priority 0 [ 406.328867][T21662] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20002 [ 406.342074][T21661] syzkaller0: entered promiscuous mode [ 406.356457][T21661] syzkaller0: entered allmulticast mode [ 406.378593][T21661] tipc: Resetting bearer [ 406.384571][T21661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.392698][T21661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.407498][T21661] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 406.418110][T21660] tipc: Resetting bearer [ 406.435394][T21660] tipc: Disabling bearer [ 406.579791][T21676] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 406.595627][T21682] openvswitch: netlink: Key type 251 is out of range max 32 [ 406.611199][T21676] CPU: 0 UID: 0 PID: 21676 Comm: syz.5.4524 Not tainted syzkaller #0 PREEMPT(full) [ 406.611228][T21676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.611239][T21676] Call Trace: [ 406.611246][T21676] [ 406.611254][T21676] dump_stack_lvl+0x189/0x250 [ 406.611282][T21676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.611302][T21676] ? __pfx__printk+0x10/0x10 [ 406.611375][T21676] ? kernfs_root+0x1c/0x230 [ 406.611399][T21676] ? kernfs_path_from_node+0x2f/0x290 [ 406.611419][T21676] ? kernfs_path_from_node+0x250/0x290 [ 406.611439][T21676] ? kernfs_path_from_node+0x2f/0x290 [ 406.611460][T21676] sysfs_warn_dup+0x8e/0xa0 [ 406.611479][T21676] sysfs_do_create_link_sd+0xc0/0x110 [ 406.611500][T21676] device_add_class_symlinks+0x1cf/0x240 [ 406.611522][T21676] device_add+0x475/0xb50 [ 406.611542][T21676] wiphy_register+0x1ba6/0x28d0 [ 406.611575][T21676] ? __pfx_wiphy_register+0x10/0x10 [ 406.611598][T21676] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 406.611621][T21676] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 406.611643][T21676] ieee80211_register_hw+0x3425/0x4080 [ 406.611671][T21676] ? ieee80211_register_hw+0x14c1/0x4080 [ 406.611695][T21676] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 406.611717][T21676] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 406.611744][T21676] ? __hrtimer_setup+0x187/0x210 [ 406.611761][T21676] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 406.611789][T21676] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 406.611826][T21676] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 406.611850][T21676] ? trace_kmalloc+0x1f/0xd0 [ 406.611871][T21676] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 406.611895][T21676] ? kstrndup+0xbf/0x160 [ 406.611918][T21676] hwsim_new_radio_nl+0xea4/0x1b10 [ 406.611943][T21676] ? __pfx___nla_validate_parse+0x10/0x10 [ 406.611983][T21676] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 406.612012][T21676] ? __nla_parse+0x40/0x60 [ 406.612038][T21676] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 406.612065][T21676] genl_family_rcv_msg_doit+0x212/0x300 [ 406.612090][T21676] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 406.612117][T21676] ? bpf_lsm_capable+0x9/0x20 [ 406.612141][T21676] ? security_capable+0x7e/0x2e0 [ 406.612169][T21676] genl_rcv_msg+0x60e/0x790 [ 406.612192][T21676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.612210][T21676] ? __kasan_slab_alloc+0x6c/0x80 [ 406.612233][T21676] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 406.612256][T21676] ? __netlink_lookup+0xbd/0x810 [ 406.612272][T21676] ? rcu_is_watching+0x15/0xb0 [ 406.612294][T21676] netlink_rcv_skb+0x208/0x470 [ 406.612320][T21676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.612341][T21676] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.612371][T21676] ? lock_release+0x4b/0x3e0 [ 406.612398][T21676] ? down_read+0x1ad/0x2e0 [ 406.612416][T21676] genl_rcv+0x28/0x40 [ 406.612434][T21676] netlink_unicast+0x82f/0x9e0 [ 406.612458][T21676] ? __pfx_netlink_unicast+0x10/0x10 [ 406.612480][T21676] ? netlink_sendmsg+0x642/0xb30 [ 406.612493][T21676] ? skb_put+0x11b/0x210 [ 406.612509][T21676] netlink_sendmsg+0x805/0xb30 [ 406.612527][T21676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.612544][T21676] ? futex_unqueue+0x22/0x240 [ 406.612560][T21676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.612578][T21676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.612597][T21676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.612615][T21676] __sock_sendmsg+0x219/0x270 [ 406.612639][T21676] ____sys_sendmsg+0x505/0x830 [ 406.612661][T21676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.612683][T21676] ? import_iovec+0x74/0xa0 [ 406.612704][T21676] ___sys_sendmsg+0x21f/0x2a0 [ 406.612724][T21676] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.612746][T21676] ? futex_wait+0x285/0x360 [ 406.612781][T21676] ? __fget_files+0x2a/0x420 [ 406.612797][T21676] ? __fget_files+0x3a0/0x420 [ 406.612818][T21676] __x64_sys_sendmsg+0x19b/0x260 [ 406.612838][T21676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.612862][T21676] ? rcu_is_watching+0x15/0xb0 [ 406.612882][T21676] ? rcu_is_watching+0x15/0xb0 [ 406.612901][T21676] do_syscall_64+0xfa/0x3b0 [ 406.612919][T21676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.612937][T21676] ? clear_bhb_loop+0x60/0xb0 [ 406.612957][T21676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.612983][T21676] RIP: 0033:0x7f37e138ebe9 [ 406.613002][T21676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.613018][T21676] RSP: 002b:00007f37e2204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.613039][T21676] RAX: ffffffffffffffda RBX: 00007f37e15b5fa0 RCX: 00007f37e138ebe9 [ 406.613054][T21676] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 406.613067][T21676] RBP: 00007f37e1411e19 R08: 0000000000000000 R09: 0000000000000000 [ 406.613080][T21676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.613092][T21676] R13: 00007f37e15b6038 R14: 00007f37e15b5fa0 R15: 00007ffe910f2348 [ 406.613114][T21676] [ 407.097456][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.119502][T21682] 0ªX¹¦À: renamed from caif0 [ 407.162263][T21682] 0ªX¹¦À: entered allmulticast mode [ 407.169035][T21682] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 407.408506][T21693] !: renamed from dummy0 (while UP) [ 407.514801][T21705] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 407.649668][T21711] netlink: 'syz.2.4532': attribute type 10 has an invalid length. [ 407.662115][T21711] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 408.110649][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.373676][T21730] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 408.484233][T21733] lo speed is unknown, defaulting to 1000 [ 408.492779][T21739] tipc: Enabled bearer , priority 0 [ 408.504065][T21739] syzkaller0: entered promiscuous mode [ 408.510988][T21739] syzkaller0: entered allmulticast mode [ 408.517784][T21733] lo speed is unknown, defaulting to 1000 [ 408.529271][T21739] tipc: Resetting bearer [ 408.546192][T21739] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 408.573195][T21738] tipc: Resetting bearer [ 408.580806][T21738] tipc: Disabling bearer [ 408.610588][T21743] lo speed is unknown, defaulting to 1000 [ 408.712306][T21748] netlink: zone id is out of range [ 408.758800][T21743] lo speed is unknown, defaulting to 1000 [ 409.003253][T21754] lo speed is unknown, defaulting to 1000 [ 409.114101][T21754] lo speed is unknown, defaulting to 1000 [ 409.128602][T21773] __nla_validate_parse: 7 callbacks suppressed [ 409.128622][T21773] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.4550'. [ 409.400467][ C1] ================================================================== [ 409.408582][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 409.416541][ C1] Read of size 2 at addr ffff88805644b42a by task syz.3.4548/21766 [ 409.424443][ C1] [ 409.426781][ C1] CPU: 1 UID: 0 PID: 21766 Comm: syz.3.4548 Not tainted syzkaller #0 PREEMPT(full) [ 409.426812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.426825][ C1] Call Trace: [ 409.426834][ C1] [ 409.426843][ C1] dump_stack_lvl+0x189/0x250 [ 409.426873][ C1] ? rcu_is_watching+0x15/0xb0 [ 409.426895][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.426925][ C1] ? rcu_is_watching+0x15/0xb0 [ 409.426945][ C1] ? lock_release+0x4b/0x3e0 [ 409.426976][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 409.427003][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 409.427028][ C1] print_report+0xca/0x240 [ 409.427047][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 409.427075][ C1] kasan_report+0x118/0x150 [ 409.427105][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 409.427136][ C1] rose_timer_expiry+0x471/0x4b0 [ 409.427165][ C1] call_timer_fn+0x17e/0x5f0 [ 409.427193][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 409.427220][ C1] ? call_timer_fn+0xbe/0x5f0 [ 409.427248][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 409.427280][ C1] ? rcu_is_watching+0x15/0xb0 [ 409.427298][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 409.427326][ C1] __run_timer_base+0x61a/0x860 [ 409.427352][ C1] ? ktime_get+0x3e/0x1f0 [ 409.427380][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 409.427414][ C1] run_timer_softirq+0xb7/0x180 [ 409.427442][ C1] handle_softirqs+0x283/0x870 [ 409.427464][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 409.427486][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 409.427511][ C1] __irq_exit_rcu+0xca/0x1f0 [ 409.427531][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 409.427555][ C1] irq_exit_rcu+0x9/0x30 [ 409.427572][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 409.427601][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.427624][ C1] RIP: 0033:0x7fbdce468024 [ 409.427648][ C1] Code: 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 <48> 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48 [ 409.427667][ C1] RSP: 002b:00007ffe41a36670 EFLAGS: 00000283 [ 409.427686][ C1] RAX: 00007fbdcc50a530 RBX: 00007fbdcc4ff8a0 RCX: ffffffff81fb031e [ 409.427703][ C1] RDX: ffffffff81fafc5e RSI: ffffffff81fafed6 RDI: 00007fbdcc51c3a0 [ 409.427719][ C1] RBP: 00007fbdcc4e96e8 R08: 00007fbdcc502d40 R09: 00007fbdce7a2000 [ 409.427735][ C1] R10: 00007fbdcc3f6008 R11: 000000000000000f R12: 00007fbdcc4e96e0 [ 409.427749][ C1] R13: 000000000000001c R14: 00007ffe41a367f8 R15: 00007fbdcc3f6008 [ 409.427769][ C1] ? __page_cache_release+0x18e/0xc10 [ 409.427791][ C1] ? folios_put_refs+0x11e/0x640 [ 409.427812][ C1] ? folios_put_refs+0x396/0x640 [ 409.427834][ C1] [ 409.427842][ C1] [ 409.691106][ C1] Allocated by task 14979: [ 409.695566][ C1] kasan_save_track+0x3e/0x80 [ 409.700244][ C1] __kasan_kmalloc+0x93/0xb0 [ 409.704832][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 409.710198][ C1] rose_add_node+0x23a/0xde0 [ 409.714794][ C1] rose_rt_ioctl+0xa48/0xfb0 [ 409.719371][ C1] rose_ioctl+0x3ce/0x8b0 [ 409.723685][ C1] sock_do_ioctl+0xdc/0x300 [ 409.728183][ C1] sock_ioctl+0x576/0x790 [ 409.732503][ C1] __se_sys_ioctl+0xf9/0x170 [ 409.737083][ C1] do_syscall_64+0xfa/0x3b0 [ 409.741569][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.747447][ C1] [ 409.749754][ C1] Freed by task 21394: [ 409.753800][ C1] kasan_save_track+0x3e/0x80 [ 409.758467][ C1] kasan_save_free_info+0x46/0x50 [ 409.763480][ C1] __kasan_slab_free+0x5b/0x80 [ 409.768231][ C1] kfree+0x18e/0x440 [ 409.772114][ C1] rose_rt_device_down+0x473/0x4c0 [ 409.777224][ C1] rose_device_event+0x603/0x6a0 [ 409.782148][ C1] notifier_call_chain+0x1b3/0x3e0 [ 409.787245][ C1] __dev_notify_flags+0x18d/0x2e0 [ 409.792252][ C1] netif_change_flags+0xe8/0x1a0 [ 409.797179][ C1] dev_change_flags+0x130/0x260 [ 409.802011][ C1] dev_ioctl+0x7b4/0x1150 [ 409.806331][ C1] sock_do_ioctl+0x22c/0x300 [ 409.810908][ C1] sock_ioctl+0x576/0x790 [ 409.815228][ C1] __se_sys_ioctl+0xf9/0x170 [ 409.819807][ C1] do_syscall_64+0xfa/0x3b0 [ 409.824294][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.830170][ C1] [ 409.832516][ C1] The buggy address belongs to the object at ffff88805644b400 [ 409.832516][ C1] which belongs to the cache kmalloc-512 of size 512 [ 409.846554][ C1] The buggy address is located 42 bytes inside of [ 409.846554][ C1] freed 512-byte region [ffff88805644b400, ffff88805644b600) [ 409.860249][ C1] [ 409.862561][ C1] The buggy address belongs to the physical page: [ 409.868966][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56448 [ 409.877717][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 409.886200][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 409.893818][ C1] page_type: f5(slab) [ 409.897784][ C1] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 409.906439][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 409.915009][ C1] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 409.923664][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 409.932317][ C1] head: 00fff00000000002 ffffea0001591201 00000000ffffffff 00000000ffffffff [ 409.940983][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 409.949645][ C1] page dumped because: kasan: bad access detected [ 409.956058][ C1] page_owner tracks the page as allocated [ 409.961760][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 59, tgid 59 (kworker/u8:4), ts 58102424476, free_ts 15257569901 [ 409.980674][ C1] post_alloc_hook+0x240/0x2a0 [ 409.985435][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 409.990971][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 409.996759][ C1] alloc_pages_mpol+0x232/0x4a0 [ 410.001599][ C1] allocate_slab+0x8a/0x370 [ 410.006083][ C1] ___slab_alloc+0xbeb/0x1410 [ 410.010748][ C1] __kmalloc_noprof+0x305/0x4f0 [ 410.015585][ C1] fib6_info_alloc+0x30/0xf0 [ 410.020157][ C1] ip6_route_info_create+0x142/0x860 [ 410.025428][ C1] ip6_route_add+0x49/0x1b0 [ 410.029917][ C1] addrconf_add_linklocal+0x45f/0x6c0 [ 410.035272][ C1] addrconf_addr_gen+0x490/0x580 [ 410.040198][ C1] addrconf_init_auto_addrs+0x62d/0xa30 [ 410.045731][ C1] addrconf_notify+0xacc/0x1010 [ 410.050574][ C1] notifier_call_chain+0x1b3/0x3e0 [ 410.055761][ C1] netif_state_change+0x284/0x3a0 [ 410.060775][ C1] page last free pid 1 tgid 1 stack trace: [ 410.066564][ C1] __free_frozen_pages+0xbc4/0xd30 [ 410.071668][ C1] free_contig_range+0x1bd/0x4a0 [ 410.076605][ C1] destroy_args+0x64/0x4a0 [ 410.081028][ C1] debug_vm_pgtable+0x39f/0x3b0 [ 410.085868][ C1] do_one_initcall+0x233/0x820 [ 410.090631][ C1] do_initcall_level+0x104/0x190 [ 410.095559][ C1] do_initcalls+0x59/0xa0 [ 410.099877][ C1] kernel_init_freeable+0x334/0x4b0 [ 410.105066][ C1] kernel_init+0x1d/0x1d0 [ 410.109381][ C1] ret_from_fork+0x3f9/0x770 [ 410.113958][ C1] ret_from_fork_asm+0x1a/0x30 [ 410.118712][ C1] [ 410.121017][ C1] Memory state around the buggy address: [ 410.126627][ C1] ffff88805644b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 410.134672][ C1] ffff88805644b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 410.142722][ C1] >ffff88805644b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 410.150764][ C1] ^ [ 410.156117][ C1] ffff88805644b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 410.164160][ C1] ffff88805644b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 410.172201][ C1] ================================================================== [ 410.180376][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 410.187585][ C1] CPU: 1 UID: 0 PID: 21766 Comm: syz.3.4548 Not tainted syzkaller #0 PREEMPT(full) [ 410.196968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.207045][ C1] Call Trace: [ 410.210334][ C1] [ 410.213269][ C1] dump_stack_lvl+0x99/0x250 [ 410.217890][ C1] ? __asan_memcpy+0x40/0x70 [ 410.222490][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.227704][ C1] ? __pfx__printk+0x10/0x10 [ 410.232317][ C1] vpanic+0x281/0x750 [ 410.236314][ C1] ? __pfx_vpanic+0x10/0x10 [ 410.240829][ C1] ? rcu_is_watching+0x15/0xb0 [ 410.245622][ C1] panic+0xb9/0xc0 [ 410.249358][ C1] ? __pfx_panic+0x10/0x10 [ 410.253785][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 410.259708][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 410.265623][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 410.270763][ C1] check_panic_on_warn+0x89/0xb0 [ 410.275722][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 410.280852][ C1] end_report+0x78/0x160 [ 410.285106][ C1] kasan_report+0x129/0x150 [ 410.289609][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 410.294715][ C1] rose_timer_expiry+0x471/0x4b0 [ 410.299652][ C1] call_timer_fn+0x17e/0x5f0 [ 410.304237][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 410.309692][ C1] ? call_timer_fn+0xbe/0x5f0 [ 410.314361][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 410.319471][ C1] ? rcu_is_watching+0x15/0xb0 [ 410.324219][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 410.329668][ C1] __run_timer_base+0x61a/0x860 [ 410.334513][ C1] ? ktime_get+0x3e/0x1f0 [ 410.338839][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 410.344210][ C1] run_timer_softirq+0xb7/0x180 [ 410.349055][ C1] handle_softirqs+0x283/0x870 [ 410.353840][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 410.358598][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 410.363874][ C1] __irq_exit_rcu+0xca/0x1f0 [ 410.368450][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 410.373687][ C1] irq_exit_rcu+0x9/0x30 [ 410.377915][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 410.383548][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.389522][ C1] RIP: 0033:0x7fbdce468024 [ 410.393928][ C1] Code: 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 <48> 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48 [ 410.413520][ C1] RSP: 002b:00007ffe41a36670 EFLAGS: 00000283 [ 410.419591][ C1] RAX: 00007fbdcc50a530 RBX: 00007fbdcc4ff8a0 RCX: ffffffff81fb031e [ 410.427552][ C1] RDX: ffffffff81fafc5e RSI: ffffffff81fafed6 RDI: 00007fbdcc51c3a0 [ 410.435526][ C1] RBP: 00007fbdcc4e96e8 R08: 00007fbdcc502d40 R09: 00007fbdce7a2000 [ 410.443491][ C1] R10: 00007fbdcc3f6008 R11: 000000000000000f R12: 00007fbdcc4e96e0 [ 410.451451][ C1] R13: 000000000000001c R14: 00007ffe41a367f8 R15: 00007fbdcc3f6008 [ 410.459504][ C1] ? __page_cache_release+0x18e/0xc10 [ 410.464859][ C1] ? folios_put_refs+0x11e/0x640 [ 410.469775][ C1] ? folios_put_refs+0x396/0x640 [ 410.474707][ C1] [ 410.477997][ C1] Kernel Offset: disabled [ 410.482314][ C1] Rebooting in 86400 seconds..