last executing test programs: 7.52521889s ago: executing program 2 (id=2082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r5, &(0x7f00000005c0)="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", 0xaf6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000100040000000800000001000000800000003fc30add97f20bb18441fa92f0d4693f361758", @ANYRES32, @ANYBLOB="9c0300"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="030000000400"/28], 0x50) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x0, 0x6, "7242afc1c930882ab2c1d192515b7ac77e17806c19c4538af292c7fe68f5c30760e77989c4162dea2e3c356e653391c252e11aa3ec37d4aef09023f3d5b73b2dd5e95c8a20a00f4861fbb0f4a91fa27ca15bb31ca91db55de380a9949629e77ab3d63fd9c3458d555747b877ba7eff8f798d1b22680a96fc59ec66618ab9704ee90f3d4c127bbb6c5ee1dfcab13d6829087f100d69da870a7d8625b48ed7c4fef746268e85f8d50406dcc77287f3014f69b2c65ddaee68a412b97c4503"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0xffffffffffffff98, 0x2, 0x1, 0x0, 0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002d00)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 7.421448266s ago: executing program 2 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 7.36856746s ago: executing program 2 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c0000000207010100000000000000000200000108000540000000000900010073797a30000000000c00064000000000000000061c000780080001"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.288169223s ago: executing program 2 (id=2088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000000000003c"], 0x23c}}, 0x0) 7.171875747s ago: executing program 2 (id=2089): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x4880) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x7f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in6=@local, 0x3501, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x1000}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x2a, 0x4, 0x9d09, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x86}], 0x1}}], 0x1, 0x4000040) 5.263547051s ago: executing program 0 (id=2094): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000041, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) bind$can_raw(r1, &(0x7f0000000080)={0x1d, 0x0, 0x1600}, 0x10) 5.069003034s ago: executing program 0 (id=2097): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)=""/75, 0x4b}, 0x7}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000010000006500000008"], 0x50) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 5.047655223s ago: executing program 4 (id=2099): unshare(0xc000600) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x6, 0x6}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x9075, @local, 0x9}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) shutdown(r1, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x300) r4 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000080)={0x24, @short={0x2, 0x2}}, 0x5) sendmsg$NL80211_CMD_DEL_PMKSA(r5, 0x0, 0x4) close(0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="97b893d7c471e20cc25db09853515994560329e304be52c1f7162d847f22bf4aae1c4d9227a7cf3d60c9582ac855c68e28439fc15c9e33e83716622f03e24198"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x2, 0x0, 0x3}}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000004ac0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd601f6089000c3afffc020000000000000000000000000001fe8000000000000004000000000000bb850090780000000022000300"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffff, 0x9, 0x1, 0x21, r0, 0x8, '\x00', r9, r0, 0x2, 0x1, 0x2, 0xc}, 0x50) 4.960991412s ago: executing program 3 (id=2100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd28, 0x25dfdbff, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 4.88858144s ago: executing program 3 (id=2101): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r0, &(0x7f0000000780)="645f6e55dd8d3ca826a7f4bce802ac5edc10812795dfa0cebbebee4842dc0d5c2787262bcae0487134fc66038647d4e4565cff96247a3438f62c7b921a7d3035b29f7ffd862789456d8a4920417a502583c2193ede3dab0c2f3694b4a8345cbf6f9ff20f128a9eba4aef8c84d4d7749fecb5c1d0bc001842c265953477f98d55f27db8819e0c0b7f586af6b910a1d71058423c63e5655564752c8f1370b9154a0a351b0e32039a0029b3050826ec278c129fb257e8fa670afd79a419dc1d1e9c50a552479d2cfbc74a8a8eb8b8f8967a6bb25fb56b2a0ef3d328004568ff8f70cad16bc844c03387063e23967e23053559bc0b93b35068", 0xf7, 0x90, &(0x7f00000000c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 4.345807947s ago: executing program 3 (id=2103): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000002f20200000000000000000a00000004000380300002802c00018014000300fc00000000000000000000000000002014000400fc000000400000000000000000000001afe21cdb842ad556e01db24df689071e897d6b414b757e5e46c968d80f46798c4f7b22fa62dc01aabe127ae3af55c430d0060fce50585e63a8c0821f2471b7c5f1ecf2b42a6c01b1ec1debb9560b8a69372c1fa259144fe1f43ed5d3ef7039c79d3164fd0297a9f437df196504b8ccb40fdf89312f1bf678aed12f0676601a6a36771181cbe69ed7d480a374a353"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) poll(0x0, 0x0, 0x23f679b6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfff}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdfc5fcea83b6ea1a250a8080000000ff000000000005"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="4823301400000010006e60c689988ef8555289bc0100254c8b7b8bcc5ed409e75a6e7e5a06053fd12544ea79776ddf0918d133c861e4042ae4580dbbab34a41107882e19b113fa1136a26919da6d9dff30c8a97e02b832d9475259d1df4f561c11c300"/114, @ANYRES32=0x0, @ANYBLOB="14180400212104001400128009000100766574680000000004000280140003006272696467655f736c6176655f300000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtaction={0x1c8, 0x30, 0x109, 0x70bd29, 0x0, {}, [{0x1b4, 0x1, [@m_csum={0x1b0, 0x1b, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffeffff, 0x10000000, 0x60b, 0x1}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x1000000e, 0x4, 0x3}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x6, 0xea98, 0x3}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x10000001, 0x32, 0x5}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x4, 0x2, 0xd81}, 0x27}}]}, {0xf5, 0x6, "24776262c5e252623b5876b5c6b23404625e96b6d30f4b9c0768911e74e8434e0e977669b873d8655fda0cc8419ecdbca6bde6b3eada4e06220201ea81ee26a0da4dd4570894b52f52a9aed63cde3a38f62e238f5a288f3b981e5eeeaa9b3fa0f65b7683d44ab1c244434cb199ef4815aa094c4d6e32e80885d20e990aaaa36334d5e720d900625a42d0697daba1bf4b5fb0339393830d89d9a14cb4f4f2478b767bf1dca3d0d225aa4306a223c6fbe36ef6e0fb1c286233dffbaf2f0e8e3880a5582b5d80d0b0a825e3d009d468c4235b47140dd3c5fbde2408b3c1d1f44d3f77acc20a303352e3b2132dba9a044920c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000100), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket(0x10, 0x80000, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$packet(0x11, 0x3, 0x300) 4.1483037s ago: executing program 0 (id=2104): socketpair(0xf, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'macvlan0\x00', {0x2, 0x0, @multicast1}}) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_GETNSID={0x1c, 0x5a, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_PID={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x35c, r6, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x160, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @loopback, 0xb}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xafd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1dc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffff00, @loopback, 0x1c00000}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x400}}}}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x47}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6b}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x79}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x35c}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x6, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8592c3b, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x5, 0x9, 0x2, 0xfffffffffffffffc, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000740)='GPL\x00', 0x5, 0xdc, &(0x7f0000000780)=""/220, 0x41100, 0xf1a5734827eff20e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000006c0)='block_plug\x00', r7, 0x0, 0xe3fd}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000001b80)={'syztnl0\x00', &(0x7f0000001ac0)={'erspan0\x00', 0x0, 0x1, 0x40, 0x3, 0x1, {{0x1a, 0x4, 0x2, 0x15, 0x68, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@noop, @ra={0x94, 0x4}, @cipso={0x86, 0x4c, 0x3, [{0x7, 0x3, "13"}, {0x0, 0x6, "ca68f604"}, {0x5, 0x12, "cc8f3a9f38283bff4137b932eb194673"}, {0x2, 0xc, "d4d805c1e7606b3cfcb2"}, {0x7, 0x11, "761da31413d98a86bba1b7691e2c1e"}, {0x0, 0x3, "a5"}, {0x3, 0xb, "75c5a6004c7f1c8202"}]}, @end]}}}}}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c40)='cpuacct.usage_user\x00', 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@bloom_filter={0x1e, 0x1000, 0x6, 0x9, 0x10000, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xf}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)=r7}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001dc0)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x11, 0x3, &(0x7f0000000a40)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xa, 0x3, 0x1, 0x10, 0x4}], &(0x7f0000000a80)='GPL\x00', 0x5, 0x1000, &(0x7f0000000ac0)=""/4096, 0x40f00, 0x51, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001c00)={0x2, 0xb, 0x5, 0xfffffffa}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001e00)=[0x1, r9, r10, r11, 0x1, r4, r12, r4], &(0x7f0000001e40)=[{0x0, 0x5, 0x6, 0x8}, {0x5, 0x2, 0x5, 0xc}, {0x2, 0x2, 0x0, 0x1}, {0x4, 0x3, 0xb, 0xc}, {0x3, 0x5, 0x3, 0x7}, {0x1, 0x3, 0xc, 0x7}, {0x0, 0x3, 0x3, 0x5}, {0x4, 0x5, 0x5, 0x1}, {0x5, 0x3, 0xb, 0x2}], 0x10, 0x283}, 0x94) (async) bind$alg(r1, &(0x7f0000001fc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002080), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x30, r14, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0xab1, 0x9, 0x8}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x4080) (async) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000002180)={'wg0\x00', 0x20}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f00000021c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r11, 0xd0009411, &(0x7f00000023c0)={{r15, 0x3, 0x4, 0x7, 0x9, 0x1, 0x5, 0x1, 0x8, 0x1, 0xc, 0x8, 0x6266, 0x3}}) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003500)={&(0x7f00000033c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@var={0xf, 0x0, 0x0, 0xe, 0x2}, @restrict={0x5}, @enum={0xf, 0x3, 0x0, 0x6, 0x4, [{0x5, 0xff}, {0x8, 0x8}, {0xe, 0x7}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x20]}}, &(0x7f0000003440)=""/137, 0x68, 0x89, 0x0, 0x2, 0x10000, @value=r9}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003540)={0x1b, 0x0, 0x0, 0x4, 0x0, r12, 0x2, '\x00', r8, r16, 0x0, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000004700)={&(0x7f00000035c0), &(0x7f0000003600)=""/38, &(0x7f0000003640)="41343caa278281d1f6338a5a3aa56d36eae7f588e35713237adfcb62ca39b591fca7b9e0f89a06e08f12da799c1fe49cf04e35197055fb379c0a00c182252abb9a31f82fd56c96a46ce650832b29c5cf1936c66e4c8bf69d2aac014134511d0dc6ac4c9cfa9ad3d4604d29e94f549c29017936ae4faadbacc04fe988a68664ea2d4c6537a7a422ecc0693c9a5ef6faa16f3558021ee4b1d555f37078e3f9c13aec3ca102c2b2b1f2e00c5626e03640931c6f2379b8a93de60ba4332b556e90c51e70e93da0095ca89dd704722d34f62640b83640355c5d06acaa7d249bec3fbeefccb7327c81dd4d9aa4310ecc84753b199a734816151262ac0ac4bf11580f7aa92021ce6093284f6a5d6c584890b14a5ed2928ead1ce904cadc64d373ac6806d4d44f08a9fa65caf3aeeb094d1016ca2f6204f7c2297e29a2b5381b826634f67212a6e400cb7d4e3b671360fdc6cc3436789df816b1dfcb730f391670a9eb52594fb53630ddcb3cc3b5eba4fb4459a0f02e831f97e4b4e9214af7de72d98e12255d2ed95d05fee0abef58017e8028ce7b52cec127a5b209903f8b147b2917b2959252c043fa9143d4d3c8d897218d3f26ccb25e1c9d8f0cd35bae6df25d807a665de219134f14b0f2fb4d4f04b5176fe5580a964ce31fdc39c6522e2199f3b5b4fe1b330ff1ccbd8e955f03d1e153e412cf65bb5e19ab6224a8e3a4887b07a81eec53eb6acc6bc1db929a4d9e50149b2259122b12f0ae923bf3dec1151ba2002d7bf8bbb58f3dc7f728ae421c9ab0f3d24e6cfd136a43ecd92f1027d58b32d12c55cfdf52793a3b0bb7f47dbfba9603823d3575be53518d82573b39905a0a0e687223c47a9883d6fefd6974bbdde0d5394fd7998e4401451c8f17b6ddb0d55648aa0e7bb99ec544fbfbc494fd57767e605a769e2f583d9aeaacb1db27a93bc3ff7382a32dbe491fefe0c3b63d41f830e85b019e4b3a97bcf0d515fd2ab42e54eb7269acf9ef71ef5afd45fec28e8782f49c0c32c3effcd400dc83f4d569a045bc4a8fb13b6ecfdf467561b1241c3b62ea0d013a17c0c721b0ff0d43fd931b4020b3d1286e0f0c8b6e7acec4dac80e241842650b95a7b377660ebef0bc2f16320c0c96b2356f994b6940660cf60c41e3b864bb2d181295e972744d4a2e5c59a0c08981e97ef0b7dd900a3ddcac4bc74b6ca09de6f565dbe645d07605d5ce344023a30b9609e6a3bbeaeeb083ca41a569e0fa01d0e1639d4db262d0dc2023e4b4aa88578193f40ff4f4079965c7f47a04b94da1d0a437c768f9341646fa324ee991063f7769ada77802fe0caea1f4dd713b9c6b99550d89bd2e29f63360299352809e92317c17775b71db79104184551e826e920090add8933a52dbb8d850a1ade022766937c2cfa7c459de0274fe381b988a0bb757ed785f1fd289dcda3cced0f53dcd4434a9049bf579d7a4648bd2410cd311eec5fd1cdfe61de8c1215b437482fa5b795aa958a672b45dc3a6d39ffb8a16a2e395554bd212bb6e87a5e9c1f5e1d497cb1fe4cf247ed1781e2b82416b6f2545e0032a52dc8573aec558b3f3e637bf8c08b36026b679e01e1556ea69569936cf1e86b779deafc9b0c59f6d41d3e4d8b6b75f1e2b947661a4ed77d117b60316866aebd7e0e823042f6ff1f9c5a75a892df44adf73d31feeb1d5019135d026c77cfdcaba3a29cf3e389c08ac0246e45f61e631d8e388ba979db21140ffcca1583720767d5d93ea899257c017da9ec890ea4c9f56f1d48ffee6d8104ecf010856c0a6c2755dba54753405abb0c1388f1b2e3976a00c6840e288c71dd26db72bf6db197ecc65f4710a76025992dfbdb4757f0bdd37ec77dc2c1baa50a9de37118f2c1f68567e5882f6a8332c46195b451ac8de5265349247736c93a4e04cac03e30eaf8ce60680248c1475b246c2621f414db3f00fb5c1575437898e66d80b299dcb21af67d88dc538d1da446c1c756230e8048d1f03e21f15d5a7d1e050f9379f06cfc9f5089d09c3acd34ad071d7408500055ba3b470f261e1dbbab8453247f86f225925c6b9a396f487a435d15974325d85e46e7625177fc203ddae15e340e52f4349ce2696eb8b74bed5f5f5a955f9d9cb148572519b83ee594b3b1c93eb69618f8466beeb08a645e10b5e38610847ce295369ed5fb96023d5f98922fdd4fbb48346ff5e3b913716e9f0b024ed55bd285730f527d7d0eb1bb886aeb0612c467610b8b6ca27cab7e4f3fbf156be5a87f864e138fe42b160f81c326562b1e651d21fcccac55464d14f46cf72b041e9d02743599082fcfafb3078008488ce35312f12b00def9cdf3f1659e4d2db5a06841625ca070d4b4123fb77aee367a78c05147e59d9f1159e8d9d7b9193d632cecf6b25b4991a876e81e1d7558b3ce1fd8566032fae803ae4a127398fae9f7df2d30023837fdc3f9ac2ac4a710d8c6b8f4350e43d5d4d25efc84561701f81fabcf79c8f6175639cf89078eb8fedabf9c0dc64c5a2f46d9656cbf2df5311e2771c185dab6ef839ded9b97b4673402f5e29844598e48d93bd9df1fc2c81fbcf065d36e1e65c2a8818d32fe9272aef7cc6468dde9ed58d8912606242dbcf604c78f216931566aa8a5926b090f442cbf35e151a2dbbd93ef352b7e565a4cdf49df1cc148b48c0d8320537ed986d193c2adc38c5e9a610bf85f30770fe890adf423d44b43c0d499d85ccc8faea6702c30aece932a37f7c495f8f41e95628bec83fadc254e366e48e6c39890a20415cdd3fd915dc7ff70cba1a3e1383f6941e17ee5b224a395713e570d78f1b2ab5a067bac81abdf4b08a5b0da1776b9df1b68e83ef9b7848de0440406c3bc56f1641c119b89ac2c7668569126c5fa463c2bc01c5eb7fc0e1bf69576560f737a7ad989843296f8c3ab6d134b1dd74ce40207c459aa391860a29065ab3ab3c5ff5dada97df10ec8c792bb582c173a347edbf1c2098d2bf2059f22447df24954fbc8d16ecf438e253a5177b249592ff6b929c527a2dfba5e3448124c79eacb2dbbb5f2deff272ed8198d2471e14c43d4dd7881d3e29809a601d1a9b379656de22298438bb416f83bbc4f4c314c54f83acede65958826474e29785b77a8b11f03906898d217a25fe9473b031a9e3d00ad851f0b40d1f28a93d20d8888eb7143a43fbf618a7e6238c525dea6402814f17a5740f887bc2c04c31e2bfb797a64ec473e34cd51d360ff5aff7a2b8f656defad94100aa17f3e78805e87b00a0f081ee417cb94ef8e3c271e5c4116ee99149021e71365b371635fc70afbd36ad744c9f2118b22d08b029e7e26b47875480a27381c065fa5b919b07891cdba0181fb9031c337dacc81958ae23e5fbe791dd35ef882e0f9ef86311503fff140fb5026f4c7bb205dc82d9567fea7c280eb7843b9eaf073c5bfcf54fa8ce67f5fcd036e7f3267401789a05700e78fff2a8244af7b920fdf9e58434338517d02b9f4e6eebff14a12fb24cb6987fa29d71c3aacd43f656ded37d2a13473a8adc338964af1abea2456b2cdfea57ed93e330970e81be8539cd06d65be42bd8c95fa787e9cf494a010d77d39268acf3f0b05f081726e8371b9ba11414caf863d916db31242fe0e81b1a9ddee9f009c407fdf4361adf0404e4d69bd13c53050daa3dd7f6dec120642dd4119e150030f3f1203919434fecb73c12ce40b1f84ba230c06f88c7c0bc67e298012713142b5ecff0a244b2857f5e67dfef7e72b499198fe34f524cf2d56d9636c6a8e122d39d8af6d149c192773d8d9b2e4a76256add8a148383c162c09b938ae1d43a0ce2dc22f91c78be43da2fe0e59121106cc490676a23398749e04675ad14e5d9bd16872b2e4c5035e06d5691b0f4aadf475c7cc423c2386257801eb1b50bc26f9d00c8d25c24519d28ec67952b63aa565f84b80aae7f682e645fe0aebd05c117ca68e69dbe22bb4c3852f637e866cf55f7dd8e8a7568d9942817213da529c28e39c98cd789478414f43ab93a0bcfabfd129a46e4e08683ed2f194800dbee42b860e0576b95a1da772ed8c6d93d5d8d61d64d62d5b0d8d0c092145f9a89e7ec76c0edfb99d27865dfa5bb95a8e342191afb9c31464af042353373c1da212ee76234257fdda15139e496f4f3dfcd91febe171f444d482d7fbd0d3298563fc937faa00d4c48d19bd70364d6425bf8853c65d5146bf8fd9935977847f7625e92593b691ae7766252b517bd386975854b0d48ea0d5687403e0152a42de909978d768336c746f8ed327abc9df53025ee1007b8bf45ce30c858f488841b13dc97a3fdafc66dfcb8fd56a4b2251e80dda8a28af54b507fb6c85d702a38386797679ab285ed76802cfb3913a7d71e6dff102254d5d57353690a12ab342eb3dcffa638ae9555002e2915779405abb5521506b14a27e339a9b7121d8aa9c178dad35010eff50dca3d1335b9eff7a8c930fb3c9dfbb76f24c61174049d95bf8ed6b046c12c0923bfa42e3b800b213938589775f36b3b6742d0bcb49730fa04fb21c8f06ca7feef0a1064876170ceaac56eaa25807a2f46423d0db85a6398bfccb9da5d1f99509133e35b9b424cba16d6aed651dd050dd583aacbc5b59fa8ec2bcf9f3c2d2d2f1c88984c58890094cae2ba8537e2049ced13515a7c70f4dd7d3988bb07c24a149a9b68c74d40173863b3fcf86db9b4697356d467db37deed926c942df28d7c470cd27cae03189251978fca188b117afae26a3ba4ee349b6a27f6d0230bd392f1d59e46af8d5cafd42096490862508e0e1a0e0bdca87ea6f9648b64101bc8c9148fc9d667d9ce6ac3fcb8b0c2392066e7d39c55b37b0e4d170fca07d525fe2c3581fcfb4f59f81892cf78c9e27ff2bf3ea469a484b4bf6d3b3b82383386b8abcb1bbfad655d8f0f5fd3cbd45e257ecd7e4b51e0c13d582203e30a60f89211f63b1d42db10861e3a095355749c1d763a94edc37a2d4cdd78802ed7b1d005393f3a3354604b1cff99359ce00a9d313aec454e60d6e079d7470dc66238f94e6fdda4a93a5c23f6547458b3bf948140432820290694656182d78f7f5a165b8bc7f41e845bcc37b9914e9b26fce21979ffd66655625abced056b377f819861a50195b0c1286228d668f1395f571bbe33138b5137a4ce0e0882e534f03373e0ac60ff547c16c608334d31cc17e5690cb2a6be14650f809ec54af8a2fc644f185deca6545e53c851ec8eb625367cca18f879d402a8d4650661052d4745ac786f1a2e87143ed293bafc49c419f08e973fe5d0df8f05c576c082e839d1d8ad9e256e1574db488965167b2c4fcacc13069c958dc96560e3544f1423b3fa982a05bb5d49805e5492f2b6ae58ffb2b8866f26c37074a77c041115e34df99e30bea9fb09d839db505fc55d42eaa6f1d3350d5d79c99f23e7e747147e5aec34256c9af2a1d994ba540d622fa8ae3dee652e31673890d4caa12e2692ed58393bc7f59b1e47a72ff3efedaeb245ed9935193906d044a99e82c41383df98cb456e72e81222817e2825ed9f6c1b4e1fba48e8ec2ce09961c973ab507ea23f113ac338ac125c9a2eedcae7e1bd83b7579c9031c67cdb2ad7e688be99f7b78588f9dd1b07a0d5eb8b6aaaa0ee84f36211d94dde8eb4dabfa83da12249ae3c38a24229a4549eb207aee56e58db2d508eecac35898870d845d5fd47789e3ce025c8445f94d4e82b9ac1c24a615c33ad482db58273610c84ad1c8824c8f817a7751c933b34f1baf5df6e3c906629696fa4f2accc6a051ccf79d757852d31", &(0x7f0000004640)="64ed89fb332d9f6f7005bc66c2f8ce33b86340899908b869db6e827ece3bae0d202e6cc617fe36a177ca081e01794391878ed61bd193cc5934ec7e53c5ce288a8cfa5f985133553f214e48bd20377a330d24f82e07695366aa9f512b8105ce9e26af3aa2fe48b8a78e7f4ece778838338ead61c01ac58c5b7095422d419eaa88238e1c12c92821ddbf87a8b020c1ce1f76c2583536c6d3e876dca24f6ffd8c754745c981516f613abffdb9b8e951e289696e5a0e0e", 0xfffffff7, r9, 0x4}, 0x38) 4.081595046s ago: executing program 4 (id=2105): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001340)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) (async) write$nci(r0, 0x0, 0xb) (async) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x2, {0xff, 0x1}}, 0x5) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380078ac63902cc13dd95d6c800000500020000100000000009c0a070000001e34a6a636127ad6167d3d539cf600abc202fbfa45b6f66e14ff198e2ca23dbb0e4f15d463a0293da4bdbcbabc4da2001c8c0d19c9261ba65b1ac3a5f37a162650d889279bd77f87c1f5cd359cef46cf944916d042ef0c55a31824cef31454d69eef38b708dc0f24fda8eaccd3c44d59a22b5ba8e1a6d45be815ca5de4d1c9d7b3c3bf88f3ce19ac14994ebb80"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000005000000", @ANYRES32, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x40, 0x119, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 3.959952993s ago: executing program 0 (id=2106): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={r9, 0x6, 0x2, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 3.868900313s ago: executing program 4 (id=2107): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6, r2}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2004c080, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000008c0)={r4, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000580)={r5, 0xb0, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d3"}, &(0x7f0000000000)=0xb8) 3.494505594s ago: executing program 2 (id=2110): socket$inet6(0xa, 0x80003, 0xff) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="030726bd7001000000801f001f00"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'veth0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffe5f) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000fe", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f00)="d27f6971939658f4780bc466efc9d746fc052523a3453f734e978dbe2c48262d8c048d4afbcc0129f60dd46fb261278583338f74023fbb28e4ce4b122b305418f0e50815a3671637b12efccb46eca579a5cdeee4c149844512df2128c4f81e9f8c541345a5215f3caaa1b0f26f6e2e569db7655281399729ca282ed48189b8f6e762795842476cfaf5fc6a79681df42da20c0f827c8975bd78fbe71adc33a656e3be1a597afb2f4b6f057afd7b6916fb38b86ff43202e60416c5f4254498a51a3b891df680a0c033fd0a7309af51a4d59a4dec10f3b6455a874e4bb6a254da3f644a16f1c7139a289a75bb0cc49ce7d8127e28e31143921e7be7ad0937f57179e5ad98590873a2df29f8cf3bc85f1b2abfcdbaad722348a55c33f9995ef62005354c57601f8a73b4ac25a098a78b73983b86a4f2dea44843b61b1c1313b9319e4356cfc46a08ce22aad2eceb11157f48888c1c6186b51aef7029c3bbc8eaacf910b736ab3591cbbf5f27c5a27930ad9f0210e4a14cc10cb32e32be4139b683445144a0201625ee129646c870481fef547644fcf4a776b0313226a3d714e0274e1433384c968f1183266efa6dc739c9ba627134f65669bdbc2210f1193b57c0a723dbc7edc6c27cf61141c07b00012a73f2c4b7c89cb3a198dd470c5c783a2429e4d76ce507375443e12c75facf991655bc941448217a2f162fd2503f8987e343b55c710f233f1560c3134e9289bd248ab42a84e768d4c144c9b954aa05087e822778f8b219b5a9105419ce62945048afbb744d7d2d7431b9053f6c11b231344e0e9eddc78d4cee917826bcbf2a2fdb6d989a54055d02f90c4aaabdc00c979e52c8f1feb0f8deaa92fa3490b384a030a9fe35dad9f075051a57ede6f1eb9f5d3aa48f5ae06d4deb03c103a271a3613c0677e1b9a360d14dd2e0e258f3a09c37df3a7f5a9f5cbdad61602ff2eac4b95acc1b0217fa951ad423624797bf65e5d8550e75b7da18b5a5685dd20360876aae5e5e882d48275dec471f3f164105b8f711d56c1cfa0f08ad969547c174796c68c636f359e86e7df4cc3fc947522e76effa14d7ee8e4350c59e1ca9cfcba8a0831cfb2550a3120a432b25b838922b2ed75f14d12005882908be4e3cc204fcaadd18d01388ec685e0f315f9fd071b76f90acf9d2661491c89dcc2ec04c31ad990947cc3781ef0b1f6a6a78252ff4b59ba9c11b31f35d7800e2230519e5861f27c15e1f839f70d4408406c5f4ceeea9a4a566f55596fa646329b23ff7868d7c5f3898c049823884b691a21ede16b52ad4ff7f5d47a524ab2ef3f7a5cdcd690920e5c06c56e0e05476ac1d8b24ebbad470b26a8352ad4d8b61da344b28ea11ef1385db66f317039c2569d49b1c143c160baeffa3ffa9446d1670828ee7b05e61f50d6d56d161c370c03ae0bc381fd554a1ba7cfa6e3ff0787f001a3b3a360e8bf831526b48ce44f7010de8af0dc20b236948a6f7c21217658f01546de634399356a2ca24cc99bdb829c2e5065a993a3e21d3c1ef3df99024bda2f15dd59aa00acec44c410d1a878fc0decc9e7effd6b890ddbfa33d47a52e20802e7dc6b7b9b1da265deb9f185c313a44abdc59c4eb8e9daae9d61835b8257e51d9209357633ff25360da42d3c36e951c2ef1ab0838bfb1ad47379e100f85724709c8db9e40e506429819b14d0326a53b3da1628dd901a872aeb26a07d8bffe08a7521cd86f5b051ab0a05e2b9ec2917b3222311ad5b04d4e2a6bc0d3845188282ad73d8eb79d531126e05ca30a15bbe85165e6db50fb98d447ecb070bd811d229b10ae22e38eaf6ed67f1168d50b4da36362d3f99cf4644e40c82223e6f99d696bbbb26d4975d1c8a62f250b3a7551d72094832739f28a68773641c6a9c666bf572dc7ce13a7a6e80ab54925670d188ae2baa527c817f9c8d8242f9b5ed8555ffb756d4aa8773bacd9e4f4e059af724ca6e6b659e3e8893a3b2e0ca5a08639f893e79f5dc1956cb57bfd5f049d1735afb079f0040ed2cf9f4c334157648b0c624bef3edcb6d2c8f8797eb98d1c2eefddc02ef8cf53dc8ec85dc90d0fc50308c8415787e8ac01c306913151dbdb194405ce9c210a8114006c0f0636588f01eb43ba29a8bf9635e9e50e73edf9573ae32a4608eef2b98c9dd26f6d86804e3908b28d1e3250e471e158419ecc90c5342e3badbffb69f7544019f2282c5ff436e682ef8b4ce4e9af7a3fb434df26c00c62710487d0ee845424d16ba6d8697950e5d4650844e2892ffff7be489705366900477c8f4d9d23b46223e278f43a9ee60d33c51cf0b3b2c1484c3321f373935fe53d0e0838786d12bfe2a49bf70b46e9b0c7b98c1aefec398a535e07c7c95dc9481fffed81da9ce2692da5b8f6ef295bb9260d8613900fdc971ce05a4ec8e7256ad800c9ef149546b0889cb7c55ebc3daf1e5a87e6b2802e03ecb3fde26a40ff48b4a59b1c73774aacacdda9660a01596a1d2562f3854a7468614652d9fac7251e1a356632e17e48e2301cad84fc7eca82ecf321a72ed8bfce35ec20ba89a7f4754654f0ab0b518de3900aaba6a550c43cd58dca976bc5fd6ef1ba5054cb2186b118a520a5229536fda4ab7408637848348d494215878cd7664ab2c849e37e343936394be395de210347e46eb95586538b9c572bb2312bd22339a2f4e1ca45ec8a719599168ca8170f89145645da6d30c950f8c07682ee3fda6611c9a7328097c0d15b3db454e177a1018a9fcd708fc389a04dc7bc948143ca73e3efde5dfc41e59ce1b2addca708a46f410ff6aca03c84664e6e13988bd1f3896d90981f0e2e89550410e1c99a09683f1abfa282f07af8db9c44f9dd09e30027a93cae042136091b97156601571913b59587aa3e86d387690a7343e8b447415cafd53aa02b6ea7431becf0fa0b66872cfffa2f808db0bdb69edbd8580d159374c15c8681be94c90b72afd4197fc6697ef7f0a9e3cc0dca6c424de03c577e1c0c18986d609e5b737b963735cf142aaad6b83849971c87e7c6556b9cc806bf7a45e6b1ff7f89b48e395b5394a9866bec1561cf53d6002b6f79fce17dff3c2256c3bdf37d05e6d0a2ced8c8affad71211460cea332082666c25d9a0203d83e16e5f4a21a503da900a05309b64df49e366acecd8297d440a75abb8d166609df055d8913483890c867a926e87e781aa4ab49825649cde09bff643e11fffcd02245dc646e289ff4c399af8c91d1e95c07310a5e09f2bd75fdb5d16a1aaa675deee35f30fe3509163f1ac8833f988d92f64d0dd137534f7ddda8c02cb029e71290f523b2ae1647080d5656252ba4f4fa2b9c1701e286687db29b1ee6d65341f8de827b0d1d1eb7108eb28ffd3742f5e8539af38b99c95eb2a2148679c3d660d8ee36097f673c2f18c92ce3bb70177ee55e94f85f08c564f43c68a1c03f3be5aa7f55da666b69a755db144149aa20412353ac70138c557f64e1b5dec10ee503cd23e5dc30e55ceb254bc9da571bd35fe5e872853ce04772b57652c6230e2cc8fb26c1c08a0cea26f69ce7b0a44ce5e0e77ad79692fd60ef0bad6d77353e50ad5c085b0c561cc971c75c99151819573e144a426e766145318c3d5dae8bf85b29fd98ae7f495bffd271944773ec94e874d7e835e76020590f1cee857fbf6479213ab23ee3d6eab94432667309113accc397b914e6dfbcc6455eb79b101a64b975832a2e16baccd2d88bee4444804d4678c38a19dbd387c10714590553273165de4a5c6965f0ef43dc05ad26463538d38727316105f9126f34fa249496c178f598403e95e11e1770e15e40cd1fccbd80c3e201073549710996682271d86627adf5b915147df9aa525f651c196f42345bd65677d1416fc58edea393b83f2110e853cbed9cc0f04cd8301e0e69e88b5c58c52fb9f827ed8f4a5a29bd84878ecc1ce9b31ce70365daddbf5c15ca4b03c03e0e1e8d1cbbdb095ec1983e1ef6af1a1d3f7c2b30370090c172da9cedb0a832365fb833f37d4ccbe3c42318fef30102faf253ed35cefab868f9d77487bc683ddc83c5e5fbb13a20a899e021caa11b01379cf5dd858955084ccb18e86717a1fc4e157cc4348c10bd7a58d631bfbe5f3aa4a467b6e94ada0880d7462f118882cfcf08c4975a4a9d443ec1a9be6d42f66f2ff6182c6523a41f697742407ab9b2666dffb3ec55a7d3a48ffe93e96fb3e6200f79a2648c145268281a252ab27f1fb91d86495418a017c2f915017992833318a524c48c7140b89be49797d08773af388fddb250e5ebd9c5b1dc6c76b02a17b741f34475846e93472690254dfece21af0d404d5f9d0a8fcb4a329101f48b49f8d40b21f4695da137e4741d62187612727a0317feb07d17580386f93d5310ced50b31768a048d8a26e2da611ad9934fe6e3e26d2b73d8cc5ba7649734fbbceab8db389c10f241cdf3927ff67936d2ba724f4be7383c0bea9a39d9087686e31ffd164bae2b337dd8008ffbfd1db5ac4347bf8c9c9d9e597b33079dc5cbaed0ecfbe109baf37b3125569861281cc77e8db322b7af2d0344d06a54b82edd60951e7bebf129d1f30064b67d1bdce82df0013c98d303bc405f9c136f3c632a7de9b0858757e2a2ba099f5b9f0eb237bfd7cc069fcc6635826a6317d0debc3c6748eca4d0d00c484204034aa7002d39967ce7a87b33f44bbaddefaced9ec2972664e5cf94c65561dd86a4e22aaf5eba7136cfa5df2a72f345c91320069817d5913986fad635e0b4bfa0b9ff8821855315ee7d17aa2afb7eb1f20cc4810c87e592586f5cd0a70f543ee9a39a1b038a617fff8d28b6f9c5b8dccd5b2cc53abe157fe5fcd7a1bb67276f4cacbc1d1465e6273f25564cde8fa1a87039cbd4a314ec10b6af3e3a0369d26c9901d42cdf124d78071ec98fb6efa6a4a551dde07892e2cdd28fb550189534a6684d1d356da085e502816c8168c56e6e13bdef0f434d9c968d2ab5d0f089ed071a581cfaa56b84b2f0b97f8e5bff4cfd574dde2d38cd2f7ab636ebfca7e8db593689cc9f132f36e619bf5a9484bc51e025a893394af98cfd8cacf7122da880601d3607b712b97506361e0355de1a6e11e559ae072c18f13da44f64da93b6e433fe6507b7ae689f49307206c88896d69089667bdbf498358d3d95bf1aeea07fed55392364a64a86b3c3f77c9d1e069c5ecea4fddcbc057efcc9e85123e8ee2f067df53f90d29cc68b826866dac9ba17948694b0330641c906e6042087c368843f22a71ca635cdee8f50ad9320a72eedab28f4b948c4141e0a62cfe9f21bd7e1f872a8e44de6f1d9c58854cef14750d14090f286f63de43778f50f97b83f83f8dc36244deb0c610348d9d4ea426d9e2836724d6fbab0710a659ffc9a79394f6a7e12ade63f455584adf8796993abd4fc202990de84cde08fcc04859b4bbe66af6254dc25af1623277d0eb945ca15d9e8dffc20a5442a3d275ec6bba56b4880d477a140e8bcc953d8c909aaef2140d9495ea71635e673dadfd825d542d6d4d0d8daa3d41d7bf93e3eb264d600f31f3a6b5dccf226b2274d60eba9938c32f27fd42303b0cf9d3b6686a5bc6fc77ba6dc33f8299e0", 0xf80}, {&(0x7f0000000680)="823672dbdd98238e08b546d46c64c3543d5924d7116f4011cc4b31033eb78fcb2b9a4a", 0x23}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="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", 0x374}, {&(0x7f00000003c0)="fb0319e40c5ecd4b07a17171d28baee3657c915af8f87a68f1fab8aba155cd2f3fbf3905e9463e6b3dacb292462497dcc0271444fad6291651f12e0bb8c77600", 0x40}, {&(0x7f00000000c0)="d64f0fcb4ea1ea905bdbca3f1f67fcb82bf76b4286c8aebdcc55a74566924680000000da76fa56fe36b99800ea0000000000", 0x32}], 0x3}}], 0x2, 0x4048894) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, 0x0) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 3.282054872s ago: executing program 3 (id=2111): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c0000001000060800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000008001b000000000014001680100001800c0004000100000008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r3, 0x10e, 0x7, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xe}, [@CTA_SEQ_ADJ_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044090}, 0x5289e45c5c419000) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xe}, [@CTA_SEQ_ADJ_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044090}, 0x5289e45c5c419000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf}) (async) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000340)) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000140)="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"/297, 0x3accf8d5) (async) write(r7, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r6) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00', 0x1000}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000100021040000000000dcdf2500000000", @ANYRES32=0x0, @ANYRESOCT=r5], 0x50}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x24, 0x24, 0x0, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4091) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 3.185056043s ago: executing program 1 (id=2112): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xff90}, 0x48) 3.10368066s ago: executing program 1 (id=2113): ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8bf}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000084}, 0x4045) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "edaf5eedbd1fd67b", "2c7c4eee7a5a16ab32005f983494e04f", "fe7da7e8", "aef1544869ccb923"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x514, 0xa, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x3b8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xcc, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x612}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x759}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xde86}]}]}, @NFTA_SET_DESC_CONCAT={0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1cb9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x276eb8f2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc18}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x62c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0xe0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0xfb, 0xd, 0x1, 0x0, "803d80b7464015659209011ba9ceec5e3e1782def7ede387a2f1a20be0d07389c59b93ab35cb48b025e98842e18f5c98d0ac23a9bb380935fd09b7416ef2405bf2eacac018925d7c668a68a9b7582baf82041447ffc423c909b46308666da2e197aea4c1fc702c71c327088bbaca5e5e81c0793323ee726a343fb3288792830a789df3fa643558c610802b58d33a7842c02050d87eb45431ffec8ecb7ad5071c96c63d2ec04e54a323082186aeeae008b458811e11057821db446711737300d7edd77dbd67db20ba987feb53850b5e35e53beb21f3a3ae92c824b8f6f4c53d52083e2fa8d92831d8bb7c906260841ff7e4f8978f703ceb"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x7fff}]}, 0x514}}, 0x0) (async) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000800)={0x28, 0x0, 0x2710}, 0x10, 0x80800) connect$vsock_stream(r3, &(0x7f0000000840)={0x28, 0x0, 0xffffffff, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) readv(r4, &(0x7f0000000b40)=[{&(0x7f00000008c0)=""/253, 0xfd}, {&(0x7f00000009c0)=""/89, 0x59}, {&(0x7f0000000a40)=""/147, 0x93}, {&(0x7f0000000b00)=""/38, 0x26}], 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={0xffffffffffffffff, 0x0, 0x1a, 0xa2, &(0x7f0000000b80)="fd865994427c4a7ecdbef8ff823865359696827258d82408be53", &(0x7f0000000bc0)=""/162, 0x6, 0x0, 0x1000, 0x14, &(0x7f0000000c80)="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", &(0x7f0000001c80)="b306dcd8c440acea29c223495a36b800f4771b0e", 0x1, 0x0, 0xffff8001}, 0x50) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001d40)={0x3, 0xfff, 0x8, 0x0, 0x0, [{{r1}, 0x200}, {{r0}, 0x4}, {{r4}, 0x3}, {{r3}, 0x80000000}, {{r1}, 0x6988ad99}, {{r0}, 0x180000000}, {{r4}, 0x3}, {{r5}, 0x101}]}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001ec0)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000002040)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x98, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x7}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000002080)={0x0, 0xfb05}, 0x8) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r2) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000002400)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000023c0)={&(0x7f0000002180)={0x238, r8, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_IE={0x210, 0x2a, [@mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0xd3, {0x1, 0x8, "81013af52a34091ae1af799cf9fd2fc5", "65a2bfa997a16915e5e8076dd247dcd1d47a4a861f9509905cbb8e50f17e9793", "97c3c30c2e1af615e05733061a085a28ca3ce824fa496493d244d50b915b9840", [{0x2, 0x11, "5b159517a9200babf46bc356226f97edc2"}, {0x2, 0x1c, "421b6d49df6c589df2621c6c28250db290eabea724592d7e0c1d7a82"}, {0x1}, {0x2, 0x16, "fd2934115e17d73e1805acba3cdadaa9e6bfe3324016"}, {0x3, 0x1f, "c817bb047b86e1c524840ffaaab90a4c6f860a1b3f75f67c0e00835868b89e"}, {0x2, 0x8, "0acc257a70c0d549"}, {0x3, 0x5, "0d6a88f05a"}, {0x2, 0x2, "b631"}]}}, @measure_req={0x26, 0x86, {0x7, 0xb1, 0x80, "7e99c17856e328feef85c64a9b760fd052717e4f7f3abe36cba1c93c2a60a214bdd843456bc03605390af83b3ee0766387a9ea1b38dd2bc959e65af473d53af52864d2b5fb055f7b8fed31520f843a9039aad4bf24d9f8cf81fc4893729b9ea71a963e6c27f70c3bd0a0905ea4bb774f0fddefb7782430de9f18fa9c168accab572d3f"}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x97, {0xf, 0x1, 0x3, "1fe11d354afdea838082ff162c12b9cf465e82e65fabbe7c0630a27378ef8b37a67ac482795a361473a9308413615c3ad0b1163b7921b7074aa96d3dc639d2acb8f1115b4d29785c57fdb30a418ed9002b598d34d66723a4588b3faa1c17458ca701ded54210700b59260f8ae9e04d26a885a6abfe6fc960c77177e80f05264fabc90aa839efa55ce667e31340d5d4226b55ab61"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x65, 0xaf, 0x9}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) (async, rerun: 64) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x20, r8, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x2000c014) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000002540), &(0x7f0000002580)=0x20) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000025c0), 0x3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x88ea}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x880}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c015}, 0x8040) 2.973045469s ago: executing program 4 (id=2114): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) 2.780229123s ago: executing program 1 (id=2115): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14080000", @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000d2452d920ee23f64490cb9467ccd3e323f6fb448c12e76ffcf4917a28288feb0c70c4cb76aafbf2ac838d2b43efaef40c32b1ec1c8329268205b3d0636006b298971221ced12ddf00dc38df31c48dfa30fb3f1658e5fd16afa0bed8cc8067704baada141ffa744f53fa820ce742ec83083fd6e92957ad355ca9e33b0943b10994c59f1153201ddb0bb9e50d256644ba58420cf21789787", @ANYRES16=0x0, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x61bb, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0xfffffffe, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.810165031s ago: executing program 1 (id=2116): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x79, &(0x7f0000000000)=""/121, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffef}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x4, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020a000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) pipe(&(0x7f0000000000)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 488.049599ms ago: executing program 4 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0xb, 0x10002, 0x200, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f00000003c0)={0x0}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x4108, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000500)={0x2c, 0x0, r5, 0x38}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000304fdffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="00a30000000000001c0012800b0001006d616373656300000c00028005000a000000000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 432.618624ms ago: executing program 1 (id=2118): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)={0x1c, r2, 0xc896f2e2c472c557, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5910fae9d6dcd327bea54c7b6ef915d564ca4c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x4) 431.16484ms ago: executing program 0 (id=2119): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466", 0x6}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1, &(0x7f0000000100)=""/37, 0x25}, 0x40010000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x1}], 0x1}}], 0x5, 0x4040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000280)='>', 0x1) setsockopt$inet6_buf(r4, 0x29, 0x14, 0x0, 0xfeab) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1414bb00000000000000000000000000000003040000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r5, 0xffffc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 221.16192ms ago: executing program 3 (id=2120): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0xd}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00'], 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002000900000004000100"], 0x44}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x4) bind$packet(r0, &(0x7f00000003c0)={0x11, 0xeaa67e783e916d08, r9, 0x1, 0x8, 0x6, @random="37cdb1505909"}, 0x14) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r8, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ac14140600000000000000000000000000000000000000000000ffff000000000000000000000000000080a0000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000f6ffffffac1414aa"], 0xf8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 171.380414ms ago: executing program 4 (id=2121): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000b40)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r3, 0x6}, 0x8) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40010003, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0xf}}}, 0x24}}, 0x0) 66.171221ms ago: executing program 1 (id=2122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000c00)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}, @ip_retopts={{0x10}}], 0x30}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ffffffdd00", "67b8825e3412c094fcd45c560968bcf3", "4807a1e6", "ee979d05f7ea4b9b"}, 0x28) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x28}, 0x0) 17.044506ms ago: executing program 0 (id=2123): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xffb0}, 0x48) 0s ago: executing program 3 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): yz.4.1213" name="memory.events" dev="tmpfs" ino=1186 res=0 errno=0 [ 191.189991][T10514] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.207916][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 191.276066][ T30] audit: type=1804 audit(1762304744.412:3): pid=10519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1213" name="/newroot/230/memory.events" dev="tmpfs" ino=1186 res=1 errno=0 [ 191.329499][T10518] vlan2: entered promiscuous mode [ 191.338287][T10518] geneve1: entered promiscuous mode [ 191.346859][T10518] vlan2: entered allmulticast mode [ 191.352885][T10518] geneve1: entered allmulticast mode [ 191.395986][ T6530] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.430593][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.475942][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.499992][T10524] validate_nla: 2 callbacks suppressed [ 191.500011][T10524] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 191.517782][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.542146][T10530] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1216'. [ 191.548685][T10527] tipc: Enabled bearer , priority 0 [ 191.579511][T10524] tipc: Enabling of bearer rejected, already enabled [ 191.637059][T10527] syzkaller0: entered promiscuous mode [ 191.645391][T10527] syzkaller0: entered allmulticast mode [ 191.651812][T10527] tipc: Resetting bearer [ 191.693981][T10524] lo speed is unknown, defaulting to 1000 [ 191.703227][T10528] lo speed is unknown, defaulting to 1000 [ 191.717403][T10524] wg1 speed is unknown, defaulting to 1000 [ 191.731303][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.733888][T10528] wg1 speed is unknown, defaulting to 1000 [ 192.100710][ T6530] tipc: Resetting bearer [ 192.116985][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 192.186860][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 192.280311][T10554] IPVS: Unknown mcast interface: xfrm0 [ 192.338049][T10560] FAULT_INJECTION: forcing a failure. [ 192.338049][T10560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.401352][T10560] CPU: 1 UID: 0 PID: 10560 Comm: syz.3.1227 Not tainted syzkaller #0 PREEMPT(full) [ 192.401377][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.401386][T10560] Call Trace: [ 192.401392][T10560] [ 192.401399][T10560] dump_stack_lvl+0x189/0x250 [ 192.401431][T10560] ? __pfx____ratelimit+0x10/0x10 [ 192.401449][T10560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.401466][T10560] ? __pfx__printk+0x10/0x10 [ 192.401480][T10560] ? __might_fault+0xb0/0x130 [ 192.401507][T10560] should_fail_ex+0x414/0x560 [ 192.401532][T10560] _copy_from_user+0x2d/0xb0 [ 192.401549][T10560] ___sys_sendmsg+0x158/0x2a0 [ 192.401567][T10560] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.401607][T10560] ? __fget_files+0x2a/0x420 [ 192.401620][T10560] ? __fget_files+0x3a0/0x420 [ 192.401639][T10560] __x64_sys_sendmsg+0x19b/0x260 [ 192.401656][T10560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.401678][T10560] ? __pfx_ksys_write+0x10/0x10 [ 192.401699][T10560] ? do_syscall_64+0xbe/0xfa0 [ 192.401719][T10560] do_syscall_64+0xfa/0xfa0 [ 192.401735][T10560] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.401753][T10560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.401766][T10560] ? clear_bhb_loop+0x60/0xb0 [ 192.401782][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.401795][T10560] RIP: 0033:0x7f440758f6c9 [ 192.401813][T10560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.401825][T10560] RSP: 002b:00007f440848b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.401846][T10560] RAX: ffffffffffffffda RBX: 00007f44077e5fa0 RCX: 00007f440758f6c9 [ 192.401856][T10560] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 192.401865][T10560] RBP: 00007f440848b090 R08: 0000000000000000 R09: 0000000000000000 [ 192.401873][T10560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.401881][T10560] R13: 00007f44077e6038 R14: 00007f44077e5fa0 R15: 00007ffe4d2c6898 [ 192.401904][T10560] [ 192.602325][ T5953] tipc: Node number set to 1463314966 [ 192.683977][T10550] lo speed is unknown, defaulting to 1000 [ 192.694919][T10550] wg1 speed is unknown, defaulting to 1000 [ 192.699012][T10565] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1229'. [ 192.772093][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.912207][T10528] tipc: Resetting bearer [ 193.811230][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.692592][T10528] tipc: Disabling bearer [ 194.722549][T10585] lo speed is unknown, defaulting to 1000 [ 194.729168][T10585] wg1 speed is unknown, defaulting to 1000 [ 194.762179][T10595] lo speed is unknown, defaulting to 1000 [ 194.769637][T10595] wg1 speed is unknown, defaulting to 1000 [ 194.851200][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.882903][T10602] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 194.919295][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'. [ 194.956242][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 194.989546][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1238'. [ 195.008716][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 195.092991][T10609] bond5: (slave bridge0): making interface the new active one [ 195.120371][T10609] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 195.154192][T10618] FAULT_INJECTION: forcing a failure. [ 195.154192][T10618] name failslab, interval 1, probability 0, space 0, times 0 [ 195.167459][T10618] CPU: 0 UID: 0 PID: 10618 Comm: syz.0.1240 Not tainted syzkaller #0 PREEMPT(full) [ 195.167484][T10618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.167494][T10618] Call Trace: [ 195.167501][T10618] [ 195.167509][T10618] dump_stack_lvl+0x189/0x250 [ 195.167537][T10618] ? __pfx____ratelimit+0x10/0x10 [ 195.167559][T10618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.167582][T10618] ? __pfx__printk+0x10/0x10 [ 195.167606][T10618] ? __pfx___might_resched+0x10/0x10 [ 195.167624][T10618] ? fs_reclaim_acquire+0x7d/0x100 [ 195.167658][T10618] should_fail_ex+0x414/0x560 [ 195.167688][T10618] should_failslab+0xa8/0x100 [ 195.167711][T10618] kmem_cache_alloc_node_noprof+0x77/0x710 [ 195.167735][T10618] ? __alloc_skb+0x112/0x2d0 [ 195.167750][T10618] ? netlink_autobind+0xdb/0x300 [ 195.167773][T10618] __alloc_skb+0x112/0x2d0 [ 195.167794][T10618] netlink_sendmsg+0x5c6/0xb30 [ 195.167821][T10618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.167843][T10618] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.167870][T10618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.167887][T10618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.167906][T10618] __sock_sendmsg+0x21c/0x270 [ 195.167932][T10618] ____sys_sendmsg+0x505/0x830 [ 195.167956][T10618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.167985][T10618] ? import_iovec+0x74/0xa0 [ 195.168010][T10618] ___sys_sendmsg+0x21f/0x2a0 [ 195.168032][T10618] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.168085][T10618] ? __fget_files+0x2a/0x420 [ 195.168101][T10618] ? __fget_files+0x3a0/0x420 [ 195.168127][T10618] __x64_sys_sendmsg+0x19b/0x260 [ 195.168147][T10618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.168175][T10618] ? __pfx_ksys_write+0x10/0x10 [ 195.168202][T10618] ? do_syscall_64+0xbe/0xfa0 [ 195.168229][T10618] do_syscall_64+0xfa/0xfa0 [ 195.168249][T10618] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.168272][T10618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.168289][T10618] ? clear_bhb_loop+0x60/0xb0 [ 195.168311][T10618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.168328][T10618] RIP: 0033:0x7f56cf58f6c9 [ 195.168345][T10618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.168360][T10618] RSP: 002b:00007f56d0509038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.168379][T10618] RAX: ffffffffffffffda RBX: 00007f56cf7e5fa0 RCX: 00007f56cf58f6c9 [ 195.168398][T10618] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 195.168409][T10618] RBP: 00007f56d0509090 R08: 0000000000000000 R09: 0000000000000000 [ 195.168420][T10618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.168431][T10618] R13: 00007f56cf7e6038 R14: 00007f56cf7e5fa0 R15: 00007ffed2481d58 [ 195.168461][T10618] [ 195.611286][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 195.739491][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 195.762398][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 195.797679][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1245'. [ 195.831793][T10633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.843742][T10638] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 195.885993][T10629] lo speed is unknown, defaulting to 1000 [ 195.891637][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.976801][T10635] bond6 (unregistering): Released all slaves [ 196.069093][T10629] wg1 speed is unknown, defaulting to 1000 [ 196.111852][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 196.177060][T10645] syzkaller0: entered promiscuous mode [ 196.183502][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'. [ 196.193044][T10645] syzkaller0: entered allmulticast mode [ 196.250217][T10656] netlink: 'syz.0.1252': attribute type 21 has an invalid length. [ 196.307640][T10656] netlink: 'syz.0.1252': attribute type 1 has an invalid length. [ 196.319862][T10645] tipc: Enabled bearer , priority 0 [ 196.347351][T10644] tipc: Resetting bearer [ 196.412801][T10644] tipc: Disabling bearer [ 196.444587][T10664] FAULT_INJECTION: forcing a failure. [ 196.444587][T10664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.463332][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 196.469400][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 196.477166][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 196.477641][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.487003][T10664] CPU: 0 UID: 0 PID: 10664 Comm: syz.1.1253 Not tainted syzkaller #0 PREEMPT(full) [ 196.487029][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.487040][T10664] Call Trace: [ 196.487047][T10664] [ 196.487056][T10664] dump_stack_lvl+0x189/0x250 [ 196.487085][T10664] ? __pfx____ratelimit+0x10/0x10 [ 196.487107][T10664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.487130][T10664] ? __pfx__printk+0x10/0x10 [ 196.487148][T10664] ? __might_fault+0xb0/0x130 [ 196.487182][T10664] should_fail_ex+0x414/0x560 [ 196.487213][T10664] _copy_from_user+0x2d/0xb0 [ 196.487252][T10664] kstrtouint_from_user+0xc4/0x170 [ 196.487273][T10664] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 196.487308][T10664] proc_fail_nth_write+0x88/0x200 [ 196.487330][T10664] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.487356][T10664] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.487379][T10664] vfs_write+0x27e/0xb30 [ 196.487411][T10664] ? __pfx_vfs_write+0x10/0x10 [ 196.487436][T10664] ? __fget_files+0x2a/0x420 [ 196.487456][T10664] ? __fget_files+0x3a0/0x420 [ 196.487471][T10664] ? __fget_files+0x2a/0x420 [ 196.487496][T10664] ksys_write+0x145/0x250 [ 196.487521][T10664] ? __pfx_ksys_write+0x10/0x10 [ 196.487547][T10664] ? do_syscall_64+0xbe/0xfa0 [ 196.487574][T10664] do_syscall_64+0xfa/0xfa0 [ 196.487594][T10664] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.487615][T10664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.487633][T10664] ? clear_bhb_loop+0x60/0xb0 [ 196.487653][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.487670][T10664] RIP: 0033:0x7f613f58e17f [ 196.487687][T10664] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 196.487702][T10664] RSP: 002b:00007f6140469030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 196.487721][T10664] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f613f58e17f [ 196.487733][T10664] RDX: 0000000000000001 RSI: 00007f61404690a0 RDI: 0000000000000005 [ 196.487744][T10664] RBP: 00007f6140469090 R08: 0000000000000000 R09: 0000000000000000 [ 196.487755][T10664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 196.487765][T10664] R13: 00007f613f7e6128 R14: 00007f613f7e6090 R15: 00007ffc305f93f8 [ 196.487796][T10664] [ 196.872131][T10669] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 196.931194][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.200486][T10696] netlink: 'syz.4.1258': attribute type 13 has an invalid length. [ 197.208673][T10696] netlink: 'syz.4.1258': attribute type 17 has an invalid length. [ 197.221480][T10696] lo: entered promiscuous mode [ 197.242440][T10696] lo: entered allmulticast mode [ 197.310660][T10696] tunl0: entered promiscuous mode [ 197.335494][T10696] tunl0: entered allmulticast mode [ 197.353664][T10696] gre0: entered promiscuous mode [ 197.387891][T10696] gre0: entered allmulticast mode [ 197.418193][T10696] gretap0: entered promiscuous mode [ 197.471441][T10696] gretap0: entered allmulticast mode [ 197.503961][T10713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.542056][T10696] erspan0: entered allmulticast mode [ 197.597443][T10696] ip_vti0: entered promiscuous mode [ 197.620697][T10696] ip_vti0: entered allmulticast mode [ 197.629117][T10696] ip6_vti0: entered promiscuous mode [ 197.636368][T10696] ip6_vti0: entered allmulticast mode [ 197.653012][T10696] sit0: entered promiscuous mode [ 197.658157][T10696] sit0: entered allmulticast mode [ 197.675025][T10696] ip6tnl0: entered promiscuous mode [ 197.680608][T10696] ip6tnl0: entered allmulticast mode [ 197.689636][T10696] ip6gre0: entered promiscuous mode [ 197.696926][T10696] ip6gre0: entered allmulticast mode [ 197.705228][T10696] syz_tun: entered promiscuous mode [ 197.712048][T10696] syz_tun: entered allmulticast mode [ 197.732952][T10696] ip6gretap0: entered promiscuous mode [ 197.742661][T10696] ip6gretap0: entered allmulticast mode [ 197.757090][T10696] vcan0: entered promiscuous mode [ 197.762369][T10696] vcan0: entered allmulticast mode [ 197.769778][T10696] bond0: entered promiscuous mode [ 197.775326][T10696] bond_slave_0: entered promiscuous mode [ 197.782812][T10696] bond_slave_1: entered promiscuous mode [ 197.788607][T10726] netlink: 'syz.1.1262': attribute type 4 has an invalid length. [ 197.788897][T10696] bond0: entered allmulticast mode [ 197.802462][T10696] bond_slave_0: entered allmulticast mode [ 197.809091][T10696] bond_slave_1: entered allmulticast mode [ 197.828512][T10696] team0: entered promiscuous mode [ 197.834302][T10696] team_slave_0: entered promiscuous mode [ 197.855496][T10696] team_slave_1: entered promiscuous mode [ 197.866300][T10696] team0: entered allmulticast mode [ 197.872105][T10696] team_slave_0: entered allmulticast mode [ 197.878401][T10696] team_slave_1: entered allmulticast mode [ 197.901019][T10696] dummy0: entered allmulticast mode [ 197.927217][T10696] nlmon0: entered promiscuous mode [ 197.932982][T10696] nlmon0: entered allmulticast mode [ 197.948993][T10696] caif0: entered promiscuous mode [ 197.955467][T10696] caif0: entered allmulticast mode [ 197.963426][T10696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.971322][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.055245][T10722] netlink: 'syz.1.1262': attribute type 12 has an invalid length. [ 198.105328][T10689] syzkaller0: entered promiscuous mode [ 198.110923][T10689] syzkaller0: entered allmulticast mode [ 198.223379][T10698] lo speed is unknown, defaulting to 1000 [ 198.234890][T10698] wg1 speed is unknown, defaulting to 1000 [ 198.546685][T10746] lo speed is unknown, defaulting to 1000 [ 198.595045][T10746] wg1 speed is unknown, defaulting to 1000 [ 198.784029][T10770] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 198.835402][T10773] : option downdelay: invalid value (18446744073709547007) [ 198.843015][T10773] : option downdelay: allowed values 0 - 2147483647 [ 198.854085][T10773] (unregistering): Released all slaves [ 199.011282][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.037430][T10772] syzkaller0: left promiscuous mode [ 199.053823][T10772] syzkaller0: left allmulticast mode [ 199.125915][T10792] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 199.142485][T10786] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 199.425771][T10808] netlink: 'syz.1.1281': attribute type 9 has an invalid length. [ 199.582315][T10811] lo speed is unknown, defaulting to 1000 [ 199.589758][T10811] wg1 speed is unknown, defaulting to 1000 [ 200.012620][T10837] lo speed is unknown, defaulting to 1000 [ 200.022750][T10837] wg1 speed is unknown, defaulting to 1000 [ 200.051345][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.129314][T10844] __nla_validate_parse: 14 callbacks suppressed [ 200.129332][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 200.146306][T10844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 200.558802][T10862] lo speed is unknown, defaulting to 1000 [ 200.586613][T10874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1304'. [ 200.597422][T10862] wg1 speed is unknown, defaulting to 1000 [ 200.695460][T10879] sctp: [Deprecated]: syz.0.1306 (pid 10879) Use of int in max_burst socket option deprecated. [ 200.695460][T10879] Use struct sctp_assoc_value instead [ 200.780470][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 200.804986][T10881] x_tables: duplicate underflow at hook 4 [ 200.812832][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'. [ 200.826628][T10885] x_tables: duplicate underflow at hook 4 [ 200.976219][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 201.073782][T10899] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1313'. [ 201.091294][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 201.113916][T10899] hsr0 (unregistering): left allmulticast mode [ 201.197745][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 201.220516][T10902] tap0: tun_chr_ioctl cmd 35108 [ 201.556691][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1316'. [ 201.671669][T10915] netlink: 'syz.4.1317': attribute type 6 has an invalid length. [ 201.680084][T10915] netlink: 'syz.4.1317': attribute type 7 has an invalid length. [ 201.688461][T10915] netlink: 'syz.4.1317': attribute type 8 has an invalid length. [ 201.720752][T10924] netlink: 'syz.0.1319': attribute type 1 has an invalid length. [ 201.763543][T10924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.830212][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 201.898320][T10931] lo speed is unknown, defaulting to 1000 [ 201.907330][T10931] wg1 speed is unknown, defaulting to 1000 [ 202.131185][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.170085][T10941] syzkaller1: entered allmulticast mode [ 202.231555][T10947] tipc: Enabled bearer , priority 0 [ 202.296354][T10946] syzkaller0: entered promiscuous mode [ 202.313165][T10946] syzkaller0: entered allmulticast mode [ 202.416952][T10947] tipc: Resetting bearer [ 202.446438][T10961] netlink: 'syz.3.1331': attribute type 142 has an invalid length. [ 202.483158][T10947] tipc: Disabling bearer [ 202.755484][T10974] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20003 [ 202.836733][T10973] lo speed is unknown, defaulting to 1000 [ 202.882366][T10973] wg1 speed is unknown, defaulting to 1000 [ 202.892346][T10978] lo speed is unknown, defaulting to 1000 [ 202.916727][T10972] lo speed is unknown, defaulting to 1000 [ 202.925446][T10981] xt_recent: Unsupported userspace flags (000000b1) [ 202.985212][T10978] wg1 speed is unknown, defaulting to 1000 [ 203.021265][T10972] wg1 speed is unknown, defaulting to 1000 [ 203.171282][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.215564][T10979] lo speed is unknown, defaulting to 1000 [ 203.283344][T10979] wg1 speed is unknown, defaulting to 1000 [ 203.389561][T10995] FAULT_INJECTION: forcing a failure. [ 203.389561][T10995] name failslab, interval 1, probability 0, space 0, times 0 [ 203.435746][T10995] CPU: 1 UID: 0 PID: 10995 Comm: syz.1.1340 Not tainted syzkaller #0 PREEMPT(full) [ 203.435782][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.435792][T10995] Call Trace: [ 203.435800][T10995] [ 203.435809][T10995] dump_stack_lvl+0x189/0x250 [ 203.435839][T10995] ? __pfx____ratelimit+0x10/0x10 [ 203.435863][T10995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.435886][T10995] ? __pfx__printk+0x10/0x10 [ 203.435908][T10995] ? __pfx___might_resched+0x10/0x10 [ 203.435928][T10995] ? fs_reclaim_acquire+0x7d/0x100 [ 203.435959][T10995] should_fail_ex+0x414/0x560 [ 203.435990][T10995] should_failslab+0xa8/0x100 [ 203.436009][T10995] kmem_cache_alloc_noprof+0x74/0x6e0 [ 203.436033][T10995] ? skb_clone+0x212/0x3a0 [ 203.436057][T10995] skb_clone+0x212/0x3a0 [ 203.436074][T10995] ? nfnetlink_rcv+0x4ba/0x2590 [ 203.436101][T10995] nfnetlink_rcv+0x4ec/0x2590 [ 203.436125][T10995] ? __dev_queue_xmit+0x284/0x3740 [ 203.436145][T10995] ? __dev_queue_xmit+0x1bfb/0x3740 [ 203.436180][T10995] ? __dev_queue_xmit+0x284/0x3740 [ 203.436211][T10995] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 203.436252][T10995] ? ref_tracker_free+0x63a/0x7d0 [ 203.436270][T10995] ? __asan_memcpy+0x40/0x70 [ 203.436292][T10995] ? __pfx_ref_tracker_free+0x10/0x10 [ 203.436326][T10995] ? skb_clone+0x246/0x3a0 [ 203.436349][T10995] ? __netlink_deliver_tap+0x807/0x850 [ 203.436366][T10995] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.436402][T10995] netlink_unicast+0x82f/0x9e0 [ 203.436435][T10995] ? __pfx_netlink_unicast+0x10/0x10 [ 203.436461][T10995] ? netlink_sendmsg+0x642/0xb30 [ 203.436476][T10995] ? skb_put+0x11b/0x210 [ 203.436496][T10995] netlink_sendmsg+0x805/0xb30 [ 203.436523][T10995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.436544][T10995] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.436571][T10995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.436588][T10995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.436607][T10995] __sock_sendmsg+0x21c/0x270 [ 203.436633][T10995] ____sys_sendmsg+0x505/0x830 [ 203.436658][T10995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.436687][T10995] ? import_iovec+0x74/0xa0 [ 203.436713][T10995] ___sys_sendmsg+0x21f/0x2a0 [ 203.436735][T10995] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.436795][T10995] ? __fget_files+0x2a/0x420 [ 203.436812][T10995] ? __fget_files+0x3a0/0x420 [ 203.436839][T10995] __x64_sys_sendmsg+0x19b/0x260 [ 203.436861][T10995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.436890][T10995] ? __pfx_ksys_write+0x10/0x10 [ 203.436918][T10995] ? do_syscall_64+0xbe/0xfa0 [ 203.436944][T10995] do_syscall_64+0xfa/0xfa0 [ 203.436966][T10995] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.436988][T10995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.437005][T10995] ? clear_bhb_loop+0x60/0xb0 [ 203.437027][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.437045][T10995] RIP: 0033:0x7f613f58f6c9 [ 203.437062][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.437078][T10995] RSP: 002b:00007f614048a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.437097][T10995] RAX: ffffffffffffffda RBX: 00007f613f7e5fa0 RCX: 00007f613f58f6c9 [ 203.437109][T10995] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 203.437121][T10995] RBP: 00007f614048a090 R08: 0000000000000000 R09: 0000000000000000 [ 203.437131][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.437141][T10995] R13: 00007f613f7e6038 R14: 00007f613f7e5fa0 R15: 00007ffc305f93f8 [ 203.437172][T10995] [ 204.211181][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.764093][T11034] FAULT_INJECTION: forcing a failure. [ 204.764093][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 204.779904][T11031] vlan2: entered promiscuous mode [ 204.785393][T11031] vlan2: entered allmulticast mode [ 204.799201][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.4.1352 Not tainted syzkaller #0 PREEMPT(full) [ 204.799226][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.799236][T11034] Call Trace: [ 204.799243][T11034] [ 204.799251][T11034] dump_stack_lvl+0x189/0x250 [ 204.799277][T11034] ? __pfx____ratelimit+0x10/0x10 [ 204.799298][T11034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.799319][T11034] ? __pfx__printk+0x10/0x10 [ 204.799338][T11034] ? __pfx___might_resched+0x10/0x10 [ 204.799357][T11034] ? fs_reclaim_acquire+0x7d/0x100 [ 204.799388][T11034] should_fail_ex+0x414/0x560 [ 204.799417][T11034] should_failslab+0xa8/0x100 [ 204.799436][T11034] __kmalloc_cache_noprof+0x6f/0x6f0 [ 204.799459][T11034] ? nfnetlink_rcv+0xf97/0x2590 [ 204.799488][T11034] nfnetlink_rcv+0xf97/0x2590 [ 204.799548][T11034] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 204.799591][T11034] ? ref_tracker_free+0x63a/0x7d0 [ 204.799639][T11034] ? __netlink_deliver_tap+0x807/0x850 [ 204.799657][T11034] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.799701][T11034] netlink_unicast+0x82f/0x9e0 [ 204.799735][T11034] ? __pfx_netlink_unicast+0x10/0x10 [ 204.799762][T11034] ? netlink_sendmsg+0x642/0xb30 [ 204.799777][T11034] ? skb_put+0x11b/0x210 [ 204.799798][T11034] netlink_sendmsg+0x805/0xb30 [ 204.799825][T11034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.799847][T11034] ? aa_sock_msg_perm+0xf1/0x1d0 [ 204.799873][T11034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.799891][T11034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.799910][T11034] __sock_sendmsg+0x21c/0x270 [ 204.799937][T11034] ____sys_sendmsg+0x505/0x830 [ 204.799962][T11034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.799992][T11034] ? import_iovec+0x74/0xa0 [ 204.800018][T11034] ___sys_sendmsg+0x21f/0x2a0 [ 204.800040][T11034] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.800102][T11034] ? __fget_files+0x2a/0x420 [ 204.800118][T11034] ? __fget_files+0x3a0/0x420 [ 204.800145][T11034] __x64_sys_sendmsg+0x19b/0x260 [ 204.800167][T11034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.800197][T11034] ? __pfx_ksys_write+0x10/0x10 [ 204.800225][T11034] ? do_syscall_64+0xbe/0xfa0 [ 204.800252][T11034] do_syscall_64+0xfa/0xfa0 [ 204.800273][T11034] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.800304][T11034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.800322][T11034] ? clear_bhb_loop+0x60/0xb0 [ 204.800345][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.800362][T11034] RIP: 0033:0x7f37a858f6c9 [ 204.800379][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.800395][T11034] RSP: 002b:00007f37a939c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.800414][T11034] RAX: ffffffffffffffda RBX: 00007f37a87e5fa0 RCX: 00007f37a858f6c9 [ 204.800427][T11034] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 204.800439][T11034] RBP: 00007f37a939c090 R08: 0000000000000000 R09: 0000000000000000 [ 204.800450][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.800460][T11034] R13: 00007f37a87e6038 R14: 00007f37a87e5fa0 R15: 00007fffeb590378 [ 204.800491][T11034] [ 205.144668][T11031] hsr_slave_1: entered allmulticast mode [ 205.173516][T11031] lo speed is unknown, defaulting to 1000 [ 205.180946][T11031] wg1 speed is unknown, defaulting to 1000 [ 205.210375][T11038] __nla_validate_parse: 10 callbacks suppressed [ 205.210392][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 205.251610][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.349692][T11028] netlink: 'syz.1.1354': attribute type 33 has an invalid length. [ 205.370694][T11043] netlink: 4832 bytes leftover after parsing attributes in process `syz.4.1356'. [ 205.374309][T11028] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1354'. [ 205.379898][T11043] netlink: 18492 bytes leftover after parsing attributes in process `syz.4.1356'. [ 205.475462][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'. [ 205.498165][T11035] lo speed is unknown, defaulting to 1000 [ 205.617634][T11035] wg1 speed is unknown, defaulting to 1000 [ 205.737939][T11055] netlink: 'syz.2.1359': attribute type 25 has an invalid length. [ 205.848393][T11061] netlink: 'syz.2.1359': attribute type 2 has an invalid length. [ 205.874913][T11061] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 205.888168][T11064] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1362'. [ 205.898588][T11061] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 205.907830][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 205.920221][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 206.196425][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 206.253212][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 206.291217][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.422311][T11091] openvswitch: netlink: Message has 572 unknown bytes. [ 206.432844][T11091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.712714][T11097] sch_tbf: peakrate 3 is lower than or equals to rate 4096 ! [ 206.965425][T11110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.229103][T11139] netlink: 'syz.4.1382': attribute type 9 has an invalid length. [ 207.235598][T11122] lo speed is unknown, defaulting to 1000 [ 207.280720][T11122] wg1 speed is unknown, defaulting to 1000 [ 207.293365][T11139] netlink: 'syz.4.1382': attribute type 11 has an invalid length. [ 207.331884][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.371214][T11139] netlink: 'syz.4.1382': attribute type 12 has an invalid length. [ 207.471680][T11138] lo speed is unknown, defaulting to 1000 [ 207.489710][T11138] wg1 speed is unknown, defaulting to 1000 [ 207.553833][T11147] syzkaller1: entered promiscuous mode [ 207.559512][T11147] syzkaller1: entered allmulticast mode [ 207.626872][T11153] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 207.639128][T11153] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 207.746911][T11160] macvlan2: entered promiscuous mode [ 207.752417][T11160] macvlan2: entered allmulticast mode [ 207.758320][T11160] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 207.792204][T11171] FAULT_INJECTION: forcing a failure. [ 207.792204][T11171] name failslab, interval 1, probability 0, space 0, times 0 [ 207.821008][T11171] CPU: 0 UID: 0 PID: 11171 Comm: syz.4.1390 Not tainted syzkaller #0 PREEMPT(full) [ 207.821034][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.821045][T11171] Call Trace: [ 207.821053][T11171] [ 207.821066][T11171] dump_stack_lvl+0x189/0x250 [ 207.821099][T11171] ? __pfx____ratelimit+0x10/0x10 [ 207.821119][T11171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.821140][T11171] ? __pfx__printk+0x10/0x10 [ 207.821158][T11171] ? __pfx___might_resched+0x10/0x10 [ 207.821177][T11171] ? fs_reclaim_acquire+0x7d/0x100 [ 207.821206][T11171] should_fail_ex+0x414/0x560 [ 207.821241][T11171] should_failslab+0xa8/0x100 [ 207.821259][T11171] __kmalloc_cache_noprof+0x6f/0x6f0 [ 207.821283][T11171] ? nfnetlink_rcv+0xf97/0x2590 [ 207.821305][T11171] ? __nla_parse+0x40/0x60 [ 207.821328][T11171] nfnetlink_rcv+0xf97/0x2590 [ 207.821388][T11171] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 207.821429][T11171] ? ref_tracker_free+0x63a/0x7d0 [ 207.821476][T11171] ? __netlink_deliver_tap+0x807/0x850 [ 207.821493][T11171] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.821529][T11171] netlink_unicast+0x82f/0x9e0 [ 207.821561][T11171] ? __pfx_netlink_unicast+0x10/0x10 [ 207.821587][T11171] ? netlink_sendmsg+0x642/0xb30 [ 207.821602][T11171] ? skb_put+0x11b/0x210 [ 207.821623][T11171] netlink_sendmsg+0x805/0xb30 [ 207.821659][T11171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.821680][T11171] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.821706][T11171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.821723][T11171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.821742][T11171] __sock_sendmsg+0x21c/0x270 [ 207.821768][T11171] ____sys_sendmsg+0x505/0x830 [ 207.821793][T11171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.821822][T11171] ? import_iovec+0x74/0xa0 [ 207.821848][T11171] ___sys_sendmsg+0x21f/0x2a0 [ 207.821870][T11171] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.821928][T11171] ? __fget_files+0x2a/0x420 [ 207.821945][T11171] ? __fget_files+0x3a0/0x420 [ 207.821972][T11171] __x64_sys_sendmsg+0x19b/0x260 [ 207.821994][T11171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.822024][T11171] ? __pfx_ksys_write+0x10/0x10 [ 207.822051][T11171] ? do_syscall_64+0xbe/0xfa0 [ 207.822078][T11171] do_syscall_64+0xfa/0xfa0 [ 207.822098][T11171] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.822120][T11171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.822138][T11171] ? clear_bhb_loop+0x60/0xb0 [ 207.822159][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.822175][T11171] RIP: 0033:0x7f37a858f6c9 [ 207.822193][T11171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.822208][T11171] RSP: 002b:00007f37a939c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.822227][T11171] RAX: ffffffffffffffda RBX: 00007f37a87e5fa0 RCX: 00007f37a858f6c9 [ 207.822246][T11171] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 207.822257][T11171] RBP: 00007f37a939c090 R08: 0000000000000000 R09: 0000000000000000 [ 207.822269][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.822279][T11171] R13: 00007f37a87e6038 R14: 00007f37a87e5fa0 R15: 00007fffeb590378 [ 207.822312][T11171] [ 208.323963][T11185] siw: device registration error -23 [ 208.371521][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.437469][T11187] netlink: 'syz.4.1396': attribute type 10 has an invalid length. [ 208.489706][T11187] dummy0: left promiscuous mode [ 208.529399][T11187] dummy0: left allmulticast mode [ 208.554525][T11187] dummy0: entered promiscuous mode [ 208.560249][T11187] dummy0: entered allmulticast mode [ 208.809510][T11203] lo speed is unknown, defaulting to 1000 [ 208.819181][T11203] wg1 speed is unknown, defaulting to 1000 [ 208.990564][T11212] syzkaller0: entered promiscuous mode [ 208.998616][T11212] syzkaller0: entered allmulticast mode [ 209.312912][T11223] lo speed is unknown, defaulting to 1000 [ 209.320579][T11223] wg1 speed is unknown, defaulting to 1000 [ 209.414512][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.481931][T11229] syzkaller1: entered promiscuous mode [ 209.487863][T11229] syzkaller1: entered allmulticast mode [ 209.807773][T11247] tipc: Enabling of bearer rejected, failed to enable media [ 210.061926][T11264] netlink: 'syz.0.1417': attribute type 1 has an invalid length. [ 210.100825][T11264] erspan0: entered allmulticast mode [ 210.125866][T11269] syzkaller0: entered promiscuous mode [ 210.131723][T11269] syzkaller0: entered allmulticast mode [ 210.299639][T11274] __nla_validate_parse: 11 callbacks suppressed [ 210.299658][T11274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1420'. [ 210.404095][T11258] infiniband !yz!: set down [ 210.408926][T11258] infiniband !yz!: added team_slave_0 [ 210.417880][T11277] FAULT_INJECTION: forcing a failure. [ 210.417880][T11277] name failslab, interval 1, probability 0, space 0, times 0 [ 210.451827][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.465284][T11277] CPU: 0 UID: 0 PID: 11277 Comm: syz.3.1421 Not tainted syzkaller #0 PREEMPT(full) [ 210.465312][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.465322][T11277] Call Trace: [ 210.465329][T11277] [ 210.465337][T11277] dump_stack_lvl+0x189/0x250 [ 210.465363][T11277] ? __pfx____ratelimit+0x10/0x10 [ 210.465386][T11277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.465409][T11277] ? __pfx__printk+0x10/0x10 [ 210.465430][T11277] ? __pfx___might_resched+0x10/0x10 [ 210.465449][T11277] ? fs_reclaim_acquire+0x7d/0x100 [ 210.465480][T11277] should_fail_ex+0x414/0x560 [ 210.465511][T11277] should_failslab+0xa8/0x100 [ 210.465531][T11277] __kmalloc_cache_noprof+0x6f/0x6f0 [ 210.465555][T11277] ? nfnetlink_rcv+0xf97/0x2590 [ 210.465577][T11277] ? __nla_parse+0x40/0x60 [ 210.465601][T11277] nfnetlink_rcv+0xf97/0x2590 [ 210.465661][T11277] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 210.465733][T11277] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.465770][T11277] netlink_unicast+0x82f/0x9e0 [ 210.465804][T11277] ? __pfx_netlink_unicast+0x10/0x10 [ 210.465830][T11277] ? netlink_sendmsg+0x642/0xb30 [ 210.465846][T11277] ? skb_put+0x11b/0x210 [ 210.465867][T11277] netlink_sendmsg+0x805/0xb30 [ 210.465895][T11277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.465917][T11277] ? aa_sock_msg_perm+0xf1/0x1d0 [ 210.465943][T11277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.465960][T11277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.465979][T11277] __sock_sendmsg+0x21c/0x270 [ 210.466014][T11277] ____sys_sendmsg+0x505/0x830 [ 210.466040][T11277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.466069][T11277] ? import_iovec+0x74/0xa0 [ 210.466095][T11277] ___sys_sendmsg+0x21f/0x2a0 [ 210.466117][T11277] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.466175][T11277] ? __fget_files+0x2a/0x420 [ 210.466191][T11277] ? __fget_files+0x3a0/0x420 [ 210.466219][T11277] __x64_sys_sendmsg+0x19b/0x260 [ 210.466241][T11277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.466270][T11277] ? __pfx_ksys_write+0x10/0x10 [ 210.466297][T11277] ? do_syscall_64+0xbe/0xfa0 [ 210.466324][T11277] do_syscall_64+0xfa/0xfa0 [ 210.466345][T11277] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.466367][T11277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.466385][T11277] ? clear_bhb_loop+0x60/0xb0 [ 210.466406][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.466423][T11277] RIP: 0033:0x7f440758f6c9 [ 210.466440][T11277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.466456][T11277] RSP: 002b:00007f440848b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.466476][T11277] RAX: ffffffffffffffda RBX: 00007f44077e5fa0 RCX: 00007f440758f6c9 [ 210.466489][T11277] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 210.466501][T11277] RBP: 00007f440848b090 R08: 0000000000000000 R09: 0000000000000000 [ 210.466512][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.466522][T11277] R13: 00007f44077e6038 R14: 00007f44077e5fa0 R15: 00007ffe4d2c6898 [ 210.466555][T11277] [ 210.727276][T11258] RDS/IB: !yz!: added [ 210.886762][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1423'. [ 210.894580][T11258] smc: adding ib device !yz! with port count 1 [ 210.902388][T11258] smc: ib device !yz! port 1 has no pnetid [ 211.228274][T11300] SET target dimension over the limit! [ 211.248094][T11295] Dead loop on virtual device ip6_vti0, fix it urgently! [ 211.250996][T11301] lo speed is unknown, defaulting to 1000 [ 211.302737][T11301] wg1 speed is unknown, defaulting to 1000 [ 211.313223][T11295] syzkaller0: entered promiscuous mode [ 211.339136][T11295] syzkaller0: entered allmulticast mode [ 211.436369][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 211.447728][T11308] syzkaller0: entered promiscuous mode [ 211.453855][T11308] syzkaller0: entered allmulticast mode [ 211.491592][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.719928][T11316] FAULT_INJECTION: forcing a failure. [ 211.719928][T11316] name failslab, interval 1, probability 0, space 0, times 0 [ 211.736538][T11316] CPU: 1 UID: 0 PID: 11316 Comm: syz.3.1435 Not tainted syzkaller #0 PREEMPT(full) [ 211.736564][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.736574][T11316] Call Trace: [ 211.736582][T11316] [ 211.736590][T11316] dump_stack_lvl+0x189/0x250 [ 211.736617][T11316] ? __pfx____ratelimit+0x10/0x10 [ 211.736639][T11316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.736661][T11316] ? __pfx__printk+0x10/0x10 [ 211.736686][T11316] ? __pfx___might_resched+0x10/0x10 [ 211.736709][T11316] should_fail_ex+0x414/0x560 [ 211.736739][T11316] should_failslab+0xa8/0x100 [ 211.736759][T11316] kmem_cache_alloc_node_noprof+0x77/0x710 [ 211.736782][T11316] ? __alloc_skb+0x112/0x2d0 [ 211.736796][T11316] ? __pfx_nf_tables_abort+0x10/0x10 [ 211.736822][T11316] __alloc_skb+0x112/0x2d0 [ 211.736841][T11316] netlink_ack+0x146/0xa50 [ 211.736873][T11316] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 211.736905][T11316] nfnetlink_rcv+0x2309/0x2590 [ 211.736960][T11316] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 211.737037][T11316] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.737072][T11316] netlink_unicast+0x82f/0x9e0 [ 211.737104][T11316] ? __pfx_netlink_unicast+0x10/0x10 [ 211.737129][T11316] ? netlink_sendmsg+0x642/0xb30 [ 211.737144][T11316] ? skb_put+0x11b/0x210 [ 211.737165][T11316] netlink_sendmsg+0x805/0xb30 [ 211.737198][T11316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.737219][T11316] ? aa_sock_msg_perm+0xf1/0x1d0 [ 211.737245][T11316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.737262][T11316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.737281][T11316] __sock_sendmsg+0x21c/0x270 [ 211.737306][T11316] ____sys_sendmsg+0x505/0x830 [ 211.737330][T11316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.737358][T11316] ? import_iovec+0x74/0xa0 [ 211.737382][T11316] ___sys_sendmsg+0x21f/0x2a0 [ 211.737402][T11316] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.737457][T11316] ? __fget_files+0x2a/0x420 [ 211.737472][T11316] ? __fget_files+0x3a0/0x420 [ 211.737502][T11316] __x64_sys_sendmsg+0x19b/0x260 [ 211.737523][T11316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.737551][T11316] ? __pfx_ksys_write+0x10/0x10 [ 211.737578][T11316] ? do_syscall_64+0xbe/0xfa0 [ 211.737604][T11316] do_syscall_64+0xfa/0xfa0 [ 211.737625][T11316] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.737648][T11316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.737665][T11316] ? clear_bhb_loop+0x60/0xb0 [ 211.737686][T11316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.737702][T11316] RIP: 0033:0x7f440758f6c9 [ 211.737718][T11316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.737732][T11316] RSP: 002b:00007f440848b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.737751][T11316] RAX: ffffffffffffffda RBX: 00007f44077e5fa0 RCX: 00007f440758f6c9 [ 211.737762][T11316] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 211.737772][T11316] RBP: 00007f440848b090 R08: 0000000000000000 R09: 0000000000000000 [ 211.737783][T11316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.737793][T11316] R13: 00007f44077e6038 R14: 00007f44077e5fa0 R15: 00007ffe4d2c6898 [ 211.737821][T11316] [ 212.291986][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 212.335384][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 212.345049][T11330] chnl_net:caif_netlink_parms(): no params data found [ 212.485574][T11336] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1440'. [ 212.537895][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.667444][T11351] netlink: 'syz.1.1443': attribute type 11 has an invalid length. [ 212.675604][T11351] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1443'. [ 212.715578][T11352] nbd: nbd0 already in use [ 212.720753][T11352] block nbd0: NBD_DISCONNECT [ 212.725699][T11353] geneve2: entered promiscuous mode [ 212.729051][T11352] block nbd0: Send disconnect failed -32 [ 212.738718][T11352] block nbd0: shutting down sockets [ 212.788739][T11350] geneve2: entered promiscuous mode [ 212.873160][T11346] bond6: entered promiscuous mode [ 212.878340][T11346] bond6: entered allmulticast mode [ 212.884255][T11346] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.917067][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'. [ 212.929371][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 213.410778][T11386] bridge_slave_0: entered promiscuous mode [ 213.571821][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.371514][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 214.479918][T11429] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 214.502043][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1464'. [ 214.522027][T11429] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 214.540339][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 214.554195][T11434] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 214.611482][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.815813][T11444] lo speed is unknown, defaulting to 1000 [ 214.869221][T11444] wg1 speed is unknown, defaulting to 1000 [ 215.176970][T11453] syzkaller0: entered promiscuous mode [ 215.183364][T11453] syzkaller0: entered allmulticast mode [ 215.190170][T11454] lo speed is unknown, defaulting to 1000 [ 215.254569][T11453] tipc: Enabled bearer , priority 0 [ 215.278060][T11454] wg1 speed is unknown, defaulting to 1000 [ 215.336125][T11453] tipc: Resetting bearer [ 215.424412][T11453] tipc: Disabling bearer [ 215.479100][T11459] IPVS: ip_vs_edit_dest(): server weight less than zero [ 215.621296][T11464] __nla_validate_parse: 4 callbacks suppressed [ 215.621316][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 215.652836][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.662060][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 215.722137][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 215.755771][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1473'. [ 215.973443][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 216.407858][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 216.564084][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'. [ 216.691935][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.852755][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 216.861835][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1487'. [ 217.054786][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1492'. [ 217.300279][T11553] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 217.731545][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.839925][T11559] syzkaller1: entered promiscuous mode [ 217.859823][T11559] syzkaller1: entered allmulticast mode [ 218.384550][T11580] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 218.451780][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 218.520144][T11582] lo speed is unknown, defaulting to 1000 [ 218.548083][T11580] bond0: (slave 0!): Enslaving as an active interface with an up link [ 218.568855][T11582] wg1 speed is unknown, defaulting to 1000 [ 218.711862][T11584] lo speed is unknown, defaulting to 1000 [ 218.733087][T11584] wg1 speed is unknown, defaulting to 1000 [ 218.772750][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.939097][T11607] lo speed is unknown, defaulting to 1000 [ 218.983203][T11607] wg1 speed is unknown, defaulting to 1000 [ 219.028914][T11610] pimreg: entered allmulticast mode [ 219.541238][T11615] lo speed is unknown, defaulting to 1000 [ 219.640576][T11615] wg1 speed is unknown, defaulting to 1000 [ 219.811924][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.916818][T11625] netlink: 'syz.4.1510': attribute type 6 has an invalid length. [ 220.737892][T11645] __nla_validate_parse: 5 callbacks suppressed [ 220.737911][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1520'. [ 220.772025][T11642] bridge4: entered promiscuous mode [ 220.777731][T11642] bridge4: entered allmulticast mode [ 220.836748][T11651] netlink: 'syz.2.1520': attribute type 1 has an invalid length. [ 220.845995][T11651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.855406][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.348436][T11656] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 221.381967][T11656] netlink: 13486 bytes leftover after parsing attributes in process `syz.1.1522'. [ 221.408863][T11657] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 221.448231][T11657] netlink: 13486 bytes leftover after parsing attributes in process `syz.1.1522'. [ 221.707588][T11684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1532'. [ 221.816352][T11688] dummy0: entered promiscuous mode [ 221.853728][T11687] dummy0: left promiscuous mode [ 221.895471][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.257800][T11706] netlink: 'syz.3.1541': attribute type 12 has an invalid length. [ 222.351601][T11709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'. [ 222.404695][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 222.416778][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'. [ 222.452362][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'. [ 222.508785][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1542'. [ 222.801525][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1549'. [ 222.877887][T11742] netlink: 'syz.4.1546': attribute type 5 has an invalid length. [ 222.931805][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.518203][T11760] Can't find ip_set type hash:n [ 223.971466][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.989500][T11783] tipc: Can't bind to reserved service type 0 [ 224.022553][T11771] delete_channel: no stack [ 224.508815][T11795] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 224.530003][T11798] lo speed is unknown, defaulting to 1000 [ 224.542916][T11798] wg1 speed is unknown, defaulting to 1000 [ 224.782456][T11803] FAULT_INJECTION: forcing a failure. [ 224.782456][T11803] name failslab, interval 1, probability 0, space 0, times 0 [ 224.815438][T11803] CPU: 0 UID: 0 PID: 11803 Comm: syz.2.1569 Not tainted syzkaller #0 PREEMPT(full) [ 224.815464][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.815476][T11803] Call Trace: [ 224.815483][T11803] [ 224.815491][T11803] dump_stack_lvl+0x189/0x250 [ 224.815520][T11803] ? __pfx____ratelimit+0x10/0x10 [ 224.815543][T11803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.815566][T11803] ? __pfx__printk+0x10/0x10 [ 224.815590][T11803] ? __lock_acquire+0xab9/0xd20 [ 224.815615][T11803] should_fail_ex+0x414/0x560 [ 224.815647][T11803] should_failslab+0xa8/0x100 [ 224.815667][T11803] kmem_cache_alloc_noprof+0x74/0x6e0 [ 224.815692][T11803] ? skb_clone+0x212/0x3a0 [ 224.815717][T11803] skb_clone+0x212/0x3a0 [ 224.815740][T11803] __netlink_deliver_tap+0x404/0x850 [ 224.815772][T11803] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.815791][T11803] netlink_deliver_tap+0x19c/0x1b0 [ 224.815811][T11803] netlink_unicast+0x7fa/0x9e0 [ 224.815845][T11803] ? __pfx_netlink_unicast+0x10/0x10 [ 224.815871][T11803] ? netlink_sendmsg+0x642/0xb30 [ 224.815887][T11803] ? skb_put+0x11b/0x210 [ 224.815908][T11803] netlink_sendmsg+0x805/0xb30 [ 224.815936][T11803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.815965][T11803] ? aa_sock_msg_perm+0xf1/0x1d0 [ 224.815991][T11803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.816009][T11803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.816027][T11803] __sock_sendmsg+0x21c/0x270 [ 224.816054][T11803] ____sys_sendmsg+0x505/0x830 [ 224.816079][T11803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.816108][T11803] ? import_iovec+0x74/0xa0 [ 224.816135][T11803] ___sys_sendmsg+0x21f/0x2a0 [ 224.816157][T11803] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.816210][T11803] ? __fget_files+0x2a/0x420 [ 224.816222][T11803] ? __fget_files+0x3a0/0x420 [ 224.816246][T11803] __x64_sys_sendmsg+0x19b/0x260 [ 224.816268][T11803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.816298][T11803] ? __pfx_ksys_write+0x10/0x10 [ 224.816325][T11803] ? do_syscall_64+0xbe/0xfa0 [ 224.816352][T11803] do_syscall_64+0xfa/0xfa0 [ 224.816373][T11803] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.816395][T11803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.816413][T11803] ? clear_bhb_loop+0x60/0xb0 [ 224.816435][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.816452][T11803] RIP: 0033:0x7fc1c298f6c9 [ 224.816470][T11803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.816486][T11803] RSP: 002b:00007fc1c3783038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.816506][T11803] RAX: ffffffffffffffda RBX: 00007fc1c2be5fa0 RCX: 00007fc1c298f6c9 [ 224.816519][T11803] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 224.816530][T11803] RBP: 00007fc1c3783090 R08: 0000000000000000 R09: 0000000000000000 [ 224.816541][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.816551][T11803] R13: 00007fc1c2be6038 R14: 00007fc1c2be5fa0 R15: 00007ffdc84da658 [ 224.816584][T11803] [ 225.012293][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.492290][T11813] netlink: 'syz.0.1572': attribute type 1 has an invalid length. [ 225.618610][T11813] bond7: entered promiscuous mode [ 225.624368][T11813] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.635239][T11814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.936020][T11819] __nla_validate_parse: 9 callbacks suppressed [ 225.936040][T11819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1573'. [ 226.051193][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.235147][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1577'. [ 226.688166][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1580'. [ 226.718129][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'. [ 226.801005][T11837] FAULT_INJECTION: forcing a failure. [ 226.801005][T11837] name failslab, interval 1, probability 0, space 0, times 0 [ 226.816333][T11837] CPU: 1 UID: 0 PID: 11837 Comm: syz.0.1580 Not tainted syzkaller #0 PREEMPT(full) [ 226.816360][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.816371][T11837] Call Trace: [ 226.816379][T11837] [ 226.816387][T11837] dump_stack_lvl+0x189/0x250 [ 226.816416][T11837] ? __pfx____ratelimit+0x10/0x10 [ 226.816443][T11837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.816465][T11837] ? __pfx__printk+0x10/0x10 [ 226.816490][T11837] ? __pfx___might_resched+0x10/0x10 [ 226.816507][T11837] ? fs_reclaim_acquire+0x7d/0x100 [ 226.816541][T11837] should_fail_ex+0x414/0x560 [ 226.816572][T11837] should_failslab+0xa8/0x100 [ 226.816595][T11837] __kmalloc_node_noprof+0xd2/0x800 [ 226.816618][T11837] ? qdisc_alloc+0x92/0x900 [ 226.816648][T11837] qdisc_alloc+0x92/0x900 [ 226.816669][T11837] ? preempt_schedule_thunk+0x16/0x30 [ 226.816694][T11837] qdisc_create+0x12c/0xea0 [ 226.816726][T11837] tc_modify_qdisc+0x1538/0x20e0 [ 226.816762][T11837] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 226.816814][T11837] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 226.816834][T11837] rtnetlink_rcv_msg+0x77c/0xb70 [ 226.816861][T11837] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 226.816885][T11837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.816906][T11837] ? ref_tracker_free+0x63a/0x7d0 [ 226.816923][T11837] ? __asan_memcpy+0x40/0x70 [ 226.816943][T11837] ? __pfx_ref_tracker_free+0x10/0x10 [ 226.816971][T11837] netlink_rcv_skb+0x208/0x470 [ 226.816989][T11837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.817014][T11837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.817043][T11837] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.817068][T11837] netlink_unicast+0x82f/0x9e0 [ 226.817107][T11837] ? __pfx_netlink_unicast+0x10/0x10 [ 226.817132][T11837] ? netlink_sendmsg+0x642/0xb30 [ 226.817147][T11837] ? skb_put+0x11b/0x210 [ 226.817168][T11837] netlink_sendmsg+0x805/0xb30 [ 226.817195][T11837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.817215][T11837] ? aa_sock_msg_perm+0xf1/0x1d0 [ 226.817242][T11837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.817258][T11837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.817276][T11837] __sock_sendmsg+0x21c/0x270 [ 226.817302][T11837] ____sys_sendmsg+0x505/0x830 [ 226.817326][T11837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.817353][T11837] ? import_iovec+0x74/0xa0 [ 226.817378][T11837] ___sys_sendmsg+0x21f/0x2a0 [ 226.817398][T11837] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.817454][T11837] ? __fget_files+0x2a/0x420 [ 226.817470][T11837] ? __fget_files+0x3a0/0x420 [ 226.817497][T11837] __x64_sys_sendmsg+0x19b/0x260 [ 226.817519][T11837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.817547][T11837] ? __pfx_ksys_write+0x10/0x10 [ 226.817574][T11837] ? do_syscall_64+0xbe/0xfa0 [ 226.817600][T11837] do_syscall_64+0xfa/0xfa0 [ 226.817620][T11837] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.817641][T11837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.817658][T11837] ? clear_bhb_loop+0x60/0xb0 [ 226.817679][T11837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.817696][T11837] RIP: 0033:0x7f56cf58f6c9 [ 226.817712][T11837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.817727][T11837] RSP: 002b:00007f56d0509038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.817746][T11837] RAX: ffffffffffffffda RBX: 00007f56cf7e5fa0 RCX: 00007f56cf58f6c9 [ 226.817760][T11837] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 226.817771][T11837] RBP: 00007f56d0509090 R08: 0000000000000000 R09: 0000000000000000 [ 226.817782][T11837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.817792][T11837] R13: 00007f56cf7e6038 R14: 00007f56cf7e5fa0 R15: 00007ffed2481d58 [ 226.817824][T11837] [ 227.181781][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 227.190334][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.647072][T11856] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1587'. [ 227.741538][T11861] C: renamed from lo [ 227.747682][T11861] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.830130][T11867] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1589'. [ 227.942995][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 227.961903][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'. [ 228.002179][T11875] FAULT_INJECTION: forcing a failure. [ 228.002179][T11875] name failslab, interval 1, probability 0, space 0, times 0 [ 228.038098][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.0.1594 Not tainted syzkaller #0 PREEMPT(full) [ 228.038124][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.038134][T11875] Call Trace: [ 228.038141][T11875] [ 228.038149][T11875] dump_stack_lvl+0x189/0x250 [ 228.038178][T11875] ? __pfx____ratelimit+0x10/0x10 [ 228.038201][T11875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.038224][T11875] ? __pfx__printk+0x10/0x10 [ 228.038249][T11875] ? __pfx___might_resched+0x10/0x10 [ 228.038274][T11875] should_fail_ex+0x414/0x560 [ 228.038304][T11875] should_failslab+0xa8/0x100 [ 228.038325][T11875] kmem_cache_alloc_node_noprof+0x77/0x710 [ 228.038349][T11875] ? __alloc_skb+0x112/0x2d0 [ 228.038372][T11875] __alloc_skb+0x112/0x2d0 [ 228.038392][T11875] netlink_ack+0x146/0xa50 [ 228.038415][T11875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 228.038439][T11875] ? ref_tracker_free+0x63a/0x7d0 [ 228.038456][T11875] ? __asan_memcpy+0x40/0x70 [ 228.038478][T11875] ? __pfx_ref_tracker_free+0x10/0x10 [ 228.038507][T11875] netlink_rcv_skb+0x28c/0x470 [ 228.038525][T11875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 228.038550][T11875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.038577][T11875] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.038600][T11875] netlink_unicast+0x82f/0x9e0 [ 228.038628][T11875] ? __pfx_netlink_unicast+0x10/0x10 [ 228.038649][T11875] ? netlink_sendmsg+0x642/0xb30 [ 228.038663][T11875] ? skb_put+0x11b/0x210 [ 228.038681][T11875] netlink_sendmsg+0x805/0xb30 [ 228.038706][T11875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.038725][T11875] ? aa_sock_msg_perm+0xf1/0x1d0 [ 228.038750][T11875] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.038768][T11875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.038787][T11875] __sock_sendmsg+0x21c/0x270 [ 228.038812][T11875] ____sys_sendmsg+0x505/0x830 [ 228.038836][T11875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.038864][T11875] ? import_iovec+0x74/0xa0 [ 228.038890][T11875] ___sys_sendmsg+0x21f/0x2a0 [ 228.038911][T11875] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.038975][T11875] ? __fget_files+0x2a/0x420 [ 228.038992][T11875] ? __fget_files+0x3a0/0x420 [ 228.039020][T11875] __x64_sys_sendmsg+0x19b/0x260 [ 228.039041][T11875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.039070][T11875] ? __pfx_ksys_write+0x10/0x10 [ 228.039097][T11875] ? do_syscall_64+0xbe/0xfa0 [ 228.039124][T11875] do_syscall_64+0xfa/0xfa0 [ 228.039145][T11875] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.039167][T11875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.039186][T11875] ? clear_bhb_loop+0x60/0xb0 [ 228.039206][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.039223][T11875] RIP: 0033:0x7f56cf58f6c9 [ 228.039240][T11875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.039256][T11875] RSP: 002b:00007f56d0509038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.039276][T11875] RAX: ffffffffffffffda RBX: 00007f56cf7e5fa0 RCX: 00007f56cf58f6c9 [ 228.039289][T11875] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 228.039301][T11875] RBP: 00007f56d0509090 R08: 0000000000000000 R09: 0000000000000000 [ 228.039312][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.039324][T11875] R13: 00007f56cf7e6038 R14: 00007f56cf7e5fa0 R15: 00007ffed2481d58 [ 228.039356][T11875] [ 228.211187][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.401350][T11877] lo speed is unknown, defaulting to 1000 [ 228.409494][T11877] wg1 speed is unknown, defaulting to 1000 [ 228.416658][T11876] lo speed is unknown, defaulting to 1000 [ 228.482994][T11876] wg1 speed is unknown, defaulting to 1000 [ 228.728188][T11894] netlink: 'syz.0.1598': attribute type 4 has an invalid length. [ 229.072881][T11907] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1600'. [ 229.149824][T11907] batadv1: entered promiscuous mode [ 229.168518][T11907] batadv1: entered allmulticast mode [ 229.176120][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 229.213772][T11912] veth0: entered promiscuous mode [ 229.251204][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.357901][T11913] veth0 (unregistering): left promiscuous mode [ 229.467345][T11921] lo speed is unknown, defaulting to 1000 [ 229.518158][T11921] wg1 speed is unknown, defaulting to 1000 [ 230.291296][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.303077][T11939] lo speed is unknown, defaulting to 1000 [ 230.422671][T11939] wg1 speed is unknown, defaulting to 1000 [ 230.428783][T11943] lo speed is unknown, defaulting to 1000 [ 230.671396][T11943] wg1 speed is unknown, defaulting to 1000 [ 230.786119][T11965] No such timeout policy "syz1" [ 230.796042][T11966] No such timeout policy "syz1" [ 230.901568][T11965] pim6reg1: entered promiscuous mode [ 230.908803][T11965] pim6reg1: entered allmulticast mode [ 231.114763][T11979] __nla_validate_parse: 7 callbacks suppressed [ 231.114785][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 231.178447][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'. [ 231.208703][T11982] IPVS: Unknown mcast interface: hsr0 [ 231.331210][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.350224][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 231.406850][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 231.428295][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 231.475419][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'. [ 231.487240][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 231.510113][T11992] 8021q: adding VLAN 0 to HW filter on device bond7 [ 231.585793][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 231.869940][T11994] bond7 (unregistering): Released all slaves [ 232.169364][T12010] 8021q: VLANs not supported on ipvlan0 [ 232.255308][T12011] nbd3: detected capacity change from 0 to 63 [ 232.271959][T12010] block nbd3: NBD_DISCONNECT [ 232.278622][T12010] block nbd3: Disconnected due to user request. [ 232.292806][T12010] block nbd3: shutting down sockets [ 232.371201][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.392443][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 232.509108][T12013] lo speed is unknown, defaulting to 1000 [ 232.546741][T12023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 232.575064][T12013] wg1 speed is unknown, defaulting to 1000 [ 233.234142][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 233.321732][T12055] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 233.411204][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.603370][T12061] lo speed is unknown, defaulting to 1000 [ 233.643092][T12061] wg1 speed is unknown, defaulting to 1000 [ 233.718307][T12078] syzkaller0: entered promiscuous mode [ 233.744715][T12078] syzkaller0: entered allmulticast mode [ 234.237600][T12102] lo speed is unknown, defaulting to 1000 [ 234.245203][T12102] wg1 speed is unknown, defaulting to 1000 [ 234.451334][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.676398][T12112] lo speed is unknown, defaulting to 1000 [ 234.696740][T12112] wg1 speed is unknown, defaulting to 1000 [ 235.160393][T12121] netlink: 'syz.4.1655': attribute type 32 has an invalid length. [ 235.368445][T12121] bond4: option coupled_control: invalid value (12) [ 235.385127][T12121] bond4 (unregistering): Released all slaves [ 235.491476][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.531747][T12135] syzkaller0: entered promiscuous mode [ 235.537616][T12135] syzkaller0: entered allmulticast mode [ 235.969692][T12151] tipc: Enabled bearer , priority 0 [ 235.989442][T12151] syzkaller0: entered promiscuous mode [ 235.995026][T12151] syzkaller0: entered allmulticast mode [ 236.049751][T12156] netlink: 'syz.4.1665': attribute type 13 has an invalid length. [ 236.126923][T12162] __nla_validate_parse: 9 callbacks suppressed [ 236.126939][T12162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1667'. [ 236.159781][T12164] delete_channel: no stack [ 236.259171][T12161] tipc: Resetting bearer [ 236.267768][ T9] wg1 speed is unknown, defaulting to 1000 [ 236.287586][T12150] tipc: Resetting bearer [ 236.307558][T12150] tipc: Disabling bearer [ 236.360664][T12166] lo speed is unknown, defaulting to 1000 [ 236.370523][T12166] wg1 speed is unknown, defaulting to 1000 [ 236.531265][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.578575][T12184] syzkaller0: entered promiscuous mode [ 236.604321][T12184] syzkaller0: entered allmulticast mode [ 236.714850][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 236.748167][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 237.058779][T12200] lo speed is unknown, defaulting to 1000 [ 237.066783][T12200] wg1 speed is unknown, defaulting to 1000 [ 237.569272][T12219] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1685'. [ 237.571189][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.652705][T12219] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1685'. [ 237.728604][T12230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1690'. [ 238.022919][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 238.083154][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'. [ 238.223003][T12243] netlink: 'syz.4.1696': attribute type 1 has an invalid length. [ 238.251923][T12243] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1696'. [ 238.266581][T12251] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 238.427068][T12259] tipc: Enabled bearer , priority 0 [ 238.462982][T12259] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1700'. [ 238.563667][T12262] syzkaller0: entered promiscuous mode [ 238.570609][T12262] syzkaller0: entered allmulticast mode [ 238.611186][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.618176][T12257] lo speed is unknown, defaulting to 1000 [ 238.653664][T12257] wg1 speed is unknown, defaulting to 1000 [ 238.722381][T12258] tipc: Resetting bearer [ 238.802705][T12258] tipc: Disabling bearer [ 238.930112][T12271] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 238.966825][T12271] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 239.093184][T12269] macvlan0: entered promiscuous mode [ 239.110056][T12269] macvlan0: entered allmulticast mode [ 239.128961][T12269] bond8: (slave macvlan0): Error -98 calling set_mac_address [ 239.651295][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.816916][T12320] bond5: option xmit_hash_policy: invalid value (6) [ 239.828969][T12320] bond5 (unregistering): Released all slaves [ 239.880425][T12325] lo speed is unknown, defaulting to 1000 [ 239.903428][T12325] wg1 speed is unknown, defaulting to 1000 [ 240.062034][T12331] lo speed is unknown, defaulting to 1000 [ 240.069498][T12331] wg1 speed is unknown, defaulting to 1000 [ 240.156875][T12332] lo speed is unknown, defaulting to 1000 [ 240.225548][T12332] wg1 speed is unknown, defaulting to 1000 [ 240.261763][T12341] vlan2: entered allmulticast mode [ 240.266943][T12341] erspan0: entered allmulticast mode [ 240.594600][T12361] syzkaller0: entered promiscuous mode [ 240.600432][T12361] syzkaller0: entered allmulticast mode [ 240.691291][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.824564][T12365] bond9: entered promiscuous mode [ 240.829703][T12365] bond9: entered allmulticast mode [ 240.835302][T12365] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.842783][T12369] ?s: renamed from bond_slave_0 (while UP) [ 241.160146][T12382] __nla_validate_parse: 12 callbacks suppressed [ 241.160166][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 241.180074][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 241.418660][T12375] lo speed is unknown, defaulting to 1000 [ 241.481030][T12375] wg1 speed is unknown, defaulting to 1000 [ 241.731527][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.739767][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 241.751452][T12394] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 241.768481][T12394] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1741'. [ 241.849467][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1741'. [ 241.927556][T12398] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 242.324144][T12406] netlink: 'syz.0.1743': attribute type 13 has an invalid length. [ 242.341248][T12406] netlink: 'syz.0.1743': attribute type 17 has an invalid length. [ 242.478634][T12406] erspan0: left allmulticast mode [ 242.517888][T12406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.521293][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1746'. [ 242.630977][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 242.637908][T12407] lo speed is unknown, defaulting to 1000 [ 242.650951][T12407] wg1 speed is unknown, defaulting to 1000 [ 242.771182][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.810264][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 242.827935][T12422] dvmrp0: entered allmulticast mode [ 242.861577][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'. [ 243.169550][T12436] warn_alloc: 1 callbacks suppressed [ 243.169568][T12436] syz.2.1752: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 243.211226][T12436] CPU: 0 UID: 0 PID: 12436 Comm: syz.2.1752 Not tainted syzkaller #0 PREEMPT(full) [ 243.211252][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.211275][T12436] Call Trace: [ 243.211282][T12436] [ 243.211290][T12436] dump_stack_lvl+0x189/0x250 [ 243.211323][T12436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.211344][T12436] ? __pfx__printk+0x10/0x10 [ 243.211363][T12436] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 243.211389][T12436] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 243.211414][T12436] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 243.211440][T12436] warn_alloc+0x214/0x310 [ 243.211472][T12436] ? __pfx_warn_alloc+0x10/0x10 [ 243.211506][T12436] ? __get_vm_area_node+0x28f/0x300 [ 243.211530][T12436] ? xskq_create+0xbf/0x170 [ 243.211556][T12436] __vmalloc_node_range_noprof+0x690/0x12d0 [ 243.211610][T12436] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.211636][T12436] ? __kasan_kmalloc+0x93/0xb0 [ 243.211663][T12436] vmalloc_user_noprof+0xad/0xf0 [ 243.211683][T12436] ? xskq_create+0xbf/0x170 [ 243.211700][T12436] xskq_create+0xbf/0x170 [ 243.211719][T12436] xsk_init_queue+0xb0/0x110 [ 243.211742][T12436] xsk_setsockopt+0x57b/0x8d0 [ 243.211765][T12436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 243.211789][T12436] ? __pfx_aa_sk_perm+0x10/0x10 [ 243.211815][T12436] ? aa_sock_opt_perm+0xff/0x1b0 [ 243.211843][T12436] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 243.211860][T12436] ? __pfx_xsk_setsockopt+0x10/0x10 [ 243.211881][T12436] do_sock_setsockopt+0x17c/0x1b0 [ 243.211914][T12436] __x64_sys_setsockopt+0x13f/0x1b0 [ 243.211938][T12436] do_syscall_64+0xfa/0xfa0 [ 243.211959][T12436] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.211983][T12436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.212000][T12436] ? clear_bhb_loop+0x60/0xb0 [ 243.212021][T12436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.212038][T12436] RIP: 0033:0x7fc1c298f6c9 [ 243.212055][T12436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.212071][T12436] RSP: 002b:00007fc1c3783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 243.212091][T12436] RAX: ffffffffffffffda RBX: 00007fc1c2be5fa0 RCX: 00007fc1c298f6c9 [ 243.212104][T12436] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000a [ 243.212115][T12436] RBP: 00007fc1c2a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 243.212126][T12436] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 243.212137][T12436] R13: 00007fc1c2be6038 R14: 00007fc1c2be5fa0 R15: 00007ffdc84da658 [ 243.212169][T12436] [ 243.212202][T12436] Mem-Info: [ 243.484991][T12436] active_anon:3859 inactive_anon:0 isolated_anon:0 [ 243.484991][T12436] active_file:3540 inactive_file:39975 isolated_file:0 [ 243.484991][T12436] unevictable:768 dirty:267 writeback:0 [ 243.484991][T12436] slab_reclaimable:12036 slab_unreclaimable:114721 [ 243.484991][T12436] mapped:30394 shmem:1381 pagetables:1275 [ 243.484991][T12436] sec_pagetables:0 bounce:0 [ 243.484991][T12436] kernel_misc_reclaimable:0 [ 243.484991][T12436] free:1306745 free_pcp:18653 free_cma:0 [ 243.548952][T12436] Node 0 active_anon:15436kB inactive_anon:0kB active_file:14160kB inactive_file:159696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121576kB dirty:1068kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13116kB pagetables:4884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.583355][T12436] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.592971][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 243.618977][T12436] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.651694][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 243.674368][T12436] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 243.682734][T12436] Node 0 DMA32 free:1318980kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15636kB inactive_anon:0kB active_file:14160kB inactive_file:159696kB unevictable:1536kB writepending:1068kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:54164kB local_pcp:29560kB free_cma:0kB [ 243.777364][T12436] lowmem_reserve[]: 0 0 0 0 0 [ 243.784202][T12436] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.813976][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.829864][T12436] lowmem_reserve[]: 0 0 0 0 0 [ 243.875706][T12473] syzkaller0: entered promiscuous mode [ 243.881344][T12473] syzkaller0: entered allmulticast mode [ 243.892344][T12436] Node 1 Normal free:3892452kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20880kB local_pcp:8688kB free_cma:0kB [ 243.943507][T12436] lowmem_reserve[]: 0 0 0 0 0 [ 243.959633][T12436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 244.024022][T12436] Node 0 DMA32: 1031*4kB (UME) 451*8kB (UME) 42*16kB (UM) 1704*32kB (UM) 287*64kB (UME) 461*128kB (UM) 387*256kB (UME) 288*512kB (UM) 191*1024kB (UME) 5*2048kB (UME) 180*4096kB (UM) = 1329940kB [ 244.056441][T12436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 244.068361][T12436] Node 1 Normal: 179*4kB (UE) 49*8kB (UME) 31*16kB (UME) 83*32kB (UME) 23*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3892452kB [ 244.087079][T12436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.097665][T12436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.151826][T12436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.170952][T12436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.182672][T12436] 44873 total pagecache pages [ 244.189924][T12436] 0 pages in swap cache [ 244.194467][T12436] Free swap = 124996kB [ 244.198737][T12436] Total swap = 124996kB [ 244.203118][T12436] 2097051 pages RAM [ 244.208630][T12436] 0 pages HighMem/MovableOnly [ 244.215332][T12436] 424121 pages reserved [ 244.220078][T12436] 0 pages cma reserved [ 244.251861][T12476] lo speed is unknown, defaulting to 1000 [ 244.416158][T12486] bond8: option broadcast_neighbor: invalid value (5) [ 244.439331][T12486] bond8 (unregistering): Released all slaves [ 244.455598][T12476] wg1 speed is unknown, defaulting to 1000 [ 244.473027][T12490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.602685][T12492] lo speed is unknown, defaulting to 1000 [ 244.707812][T12492] wg1 speed is unknown, defaulting to 1000 [ 244.767132][T12501] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 244.851300][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.936048][T12507] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 244.947718][T12507] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 244.992297][T12501] 8021q: adding VLAN 0 to HW filter on device bond10 [ 245.154831][T12507] bond10: (slave bridge16): Enslaving as an active interface with a down link [ 245.428580][T12520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.620608][T12537] tipc: Enabling of bearer rejected, failed to enable media [ 245.632656][T12537] netlink: 'syz.2.1781': attribute type 83 has an invalid length. [ 245.744093][T12539] x_tables: duplicate underflow at hook 1 [ 245.891277][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.009063][T12556] netlink: 'syz.3.1787': attribute type 21 has an invalid length. [ 246.033596][T12557] netlink: 'syz.2.1785': attribute type 5 has an invalid length. [ 246.287504][T12574] __nla_validate_parse: 8 callbacks suppressed [ 246.287522][T12574] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1789'. [ 246.344871][T12574] batadv1: entered promiscuous mode [ 246.374510][T12574] batadv1: entered allmulticast mode [ 246.529829][T12583] lo speed is unknown, defaulting to 1000 [ 246.556631][T12583] wg1 speed is unknown, defaulting to 1000 [ 246.563226][T12585] lo speed is unknown, defaulting to 1000 [ 246.573418][T12585] wg1 speed is unknown, defaulting to 1000 [ 246.931313][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.998496][T12599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1797'. [ 247.247230][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1800'. [ 247.560858][T12632] pim6reg1: entered promiscuous mode [ 247.584649][T12632] pim6reg1: entered allmulticast mode [ 247.631505][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1808'. [ 247.819352][T12635] lo speed is unknown, defaulting to 1000 [ 247.827197][T12635] wg1 speed is unknown, defaulting to 1000 [ 247.971323][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.219109][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.226446][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.233809][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.241044][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.248344][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.255636][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.262939][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.270409][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.277716][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.284990][T12649] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 248.360112][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 248.412386][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 248.432034][T12651] lo speed is unknown, defaulting to 1000 [ 248.449118][T12651] wg1 speed is unknown, defaulting to 1000 [ 248.597701][T12664] syzkaller0: entered promiscuous mode [ 248.603566][T12664] syzkaller0: entered allmulticast mode [ 249.011181][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.120807][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 249.265324][T12684] netlink: 'syz.0.1823': attribute type 21 has an invalid length. [ 249.281321][T12684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1823'. [ 249.321354][T12684] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 249.533990][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1830'. [ 249.544225][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 249.759628][T12704] netlink: 'syz.3.1833': attribute type 4 has an invalid length. [ 249.767785][T12702] syzkaller0: entered promiscuous mode [ 249.773745][T12702] syzkaller0: entered allmulticast mode [ 249.782613][T12700] lo speed is unknown, defaulting to 1000 [ 249.790281][T12700] wg1 speed is unknown, defaulting to 1000 [ 249.869841][T12712] lo: left promiscuous mode [ 249.896540][T12712] lo: left allmulticast mode [ 249.910494][T12712] tunl0: left promiscuous mode [ 249.921392][T12712] tunl0: left allmulticast mode [ 249.947388][T12712] gre0: left promiscuous mode [ 249.962285][T12712] gre0: left allmulticast mode [ 250.004159][T12712] gretap0: left promiscuous mode [ 250.028223][T12712] gretap0: left allmulticast mode [ 250.051303][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.084766][T12712] erspan0: left promiscuous mode [ 250.097539][T12712] erspan0: left allmulticast mode [ 250.117733][T12712] ip_vti0: left promiscuous mode [ 250.130698][T12712] ip_vti0: left allmulticast mode [ 250.141917][T12712] ip6_vti0: left promiscuous mode [ 250.150882][T12712] ip6_vti0: left allmulticast mode [ 250.164051][T12712] sit0: left promiscuous mode [ 250.168912][T12712] sit0: left allmulticast mode [ 250.184192][T12712] ip6tnl0: left promiscuous mode [ 250.189178][T12712] ip6tnl0: left allmulticast mode [ 250.218527][T12712] ip6gre0: left promiscuous mode [ 250.231240][T12712] ip6gre0: left allmulticast mode [ 250.242562][T12712] syz_tun: left promiscuous mode [ 250.247549][T12712] syz_tun: left allmulticast mode [ 250.260448][T12712] ip6gretap0: left promiscuous mode [ 250.265775][T12712] ip6gretap0: left allmulticast mode [ 250.278605][T12712] vcan0: left promiscuous mode [ 250.283986][T12712] vcan0: left allmulticast mode [ 250.292952][T12712] bond0: left promiscuous mode [ 250.298041][T12712] ?s: left promiscuous mode [ 250.307373][T12712] bond_slave_1: left promiscuous mode [ 250.313130][T12712] bond0: left allmulticast mode [ 250.317987][T12712] ?s: left allmulticast mode [ 250.323207][T12712] bond_slave_1: left allmulticast mode [ 250.343355][T12712] team0: left promiscuous mode [ 250.348259][T12712] team_slave_0: left promiscuous mode [ 250.353893][T12712] team_slave_1: left promiscuous mode [ 250.359482][T12712] team0: left allmulticast mode [ 250.364630][T12712] team_slave_0: left allmulticast mode [ 250.370108][T12712] team_slave_1: left allmulticast mode [ 250.391329][T12712] nlmon0: left promiscuous mode [ 250.396251][T12712] nlmon0: left allmulticast mode [ 250.410727][T12712] caif0: left promiscuous mode [ 250.419777][T12712] caif0: left allmulticast mode [ 250.731954][T12712] veth1_vlan: left allmulticast mode [ 250.915139][T12712] gretap1: left promiscuous mode [ 250.920117][T12712] gretap1: left allmulticast mode [ 250.926303][T12712] team1: left promiscuous mode [ 250.931703][T12712] team1: left allmulticast mode [ 251.051332][T12712] bond2: left promiscuous mode [ 251.056116][T12712] bond2: left allmulticast mode [ 251.061980][T12712] batman_adv: batadv0: Interface deactivated: gretap2 [ 251.091263][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.228665][ T9] wg1 speed is unknown, defaulting to 1000 [ 251.228695][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.241169][ T9] syz0: Port: 1 Link DOWN [ 251.293123][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.309076][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.338712][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.372297][T12734] __nla_validate_parse: 2 callbacks suppressed [ 251.372322][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 251.386156][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.406232][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.417559][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1844'. [ 251.428839][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 251.506818][T12748] netlink: 'syz.1.1842': attribute type 12 has an invalid length. [ 251.520625][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.530689][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.131288][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.675704][T12781] syzkaller0: entered promiscuous mode [ 252.681409][T12781] syzkaller0: entered allmulticast mode [ 253.027707][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 253.052606][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1858'. [ 253.171179][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.310741][T12815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1864'. [ 253.430352][T12825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1868'. [ 253.625054][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 253.638322][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1874'. [ 253.640082][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 253.936657][T12853] syzkaller0: entered promiscuous mode [ 253.942644][T12853] syzkaller0: entered allmulticast mode [ 254.034359][T12864] FAULT_INJECTION: forcing a failure. [ 254.034359][T12864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.061384][T12864] CPU: 1 UID: 0 PID: 12864 Comm: syz.3.1879 Not tainted syzkaller #0 PREEMPT(full) [ 254.061409][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.061419][T12864] Call Trace: [ 254.061425][T12864] [ 254.061433][T12864] dump_stack_lvl+0x189/0x250 [ 254.061459][T12864] ? __pfx____ratelimit+0x10/0x10 [ 254.061480][T12864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.061501][T12864] ? __pfx__printk+0x10/0x10 [ 254.061517][T12864] ? __might_fault+0xb0/0x130 [ 254.061550][T12864] should_fail_ex+0x414/0x560 [ 254.061578][T12864] _copy_from_user+0x2d/0xb0 [ 254.061601][T12864] __sys_sendto+0x25c/0x520 [ 254.061620][T12864] ? __pfx___sys_sendto+0x10/0x10 [ 254.061633][T12864] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 254.061669][T12864] ? __fget_files+0x3a0/0x420 [ 254.061696][T12864] ? ksys_write+0x22a/0x250 [ 254.061720][T12864] ? __pfx_ksys_write+0x10/0x10 [ 254.061744][T12864] __x64_sys_sendto+0xde/0x100 [ 254.061764][T12864] do_syscall_64+0xfa/0xfa0 [ 254.061784][T12864] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.061805][T12864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.061823][T12864] ? clear_bhb_loop+0x60/0xb0 [ 254.061840][T12864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.061855][T12864] RIP: 0033:0x7f440758f6c9 [ 254.061872][T12864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.061886][T12864] RSP: 002b:00007f440846a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 254.061905][T12864] RAX: ffffffffffffffda RBX: 00007f44077e6090 RCX: 00007f440758f6c9 [ 254.061929][T12864] RDX: 000000000000000e RSI: 00002000000005c0 RDI: 0000000000000006 [ 254.061940][T12864] RBP: 00007f440846a090 R08: 00002000000001c0 R09: 0000000000000014 [ 254.061951][T12864] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 254.061962][T12864] R13: 00007f44077e6128 R14: 00007f44077e6090 R15: 00007ffe4d2c6898 [ 254.061992][T12864] [ 254.061992][T12865] sctp: [Deprecated]: syz.4.1883 (pid 12865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.061992][T12865] Use struct sctp_sack_info instead [ 254.211331][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.615422][T12890] ip6gre0: Caught tx_queue_len zero misconfig [ 254.679092][T12895] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 254.884259][T12907] syzkaller0: entered promiscuous mode [ 254.890324][T12907] syzkaller0: entered allmulticast mode [ 254.912809][T12907] FAULT_INJECTION: forcing a failure. [ 254.912809][T12907] name failslab, interval 1, probability 0, space 0, times 0 [ 254.925565][T12907] CPU: 0 UID: 0 PID: 12907 Comm: syz.4.1899 Not tainted syzkaller #0 PREEMPT(full) [ 254.925588][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.925597][T12907] Call Trace: [ 254.925606][T12907] [ 254.925615][T12907] dump_stack_lvl+0x189/0x250 [ 254.925640][T12907] ? __pfx____ratelimit+0x10/0x10 [ 254.925660][T12907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.925681][T12907] ? __pfx__printk+0x10/0x10 [ 254.925702][T12907] ? __pfx___might_resched+0x10/0x10 [ 254.925718][T12907] ? fs_reclaim_acquire+0x7d/0x100 [ 254.925748][T12907] should_fail_ex+0x414/0x560 [ 254.925776][T12907] should_failslab+0xa8/0x100 [ 254.925793][T12907] kmem_cache_alloc_node_noprof+0x77/0x710 [ 254.925815][T12907] ? __alloc_skb+0x112/0x2d0 [ 254.925834][T12907] __alloc_skb+0x112/0x2d0 [ 254.925853][T12907] alloc_skb_with_frags+0xca/0x890 [ 254.925871][T12907] ? is_bpf_text_address+0x292/0x2b0 [ 254.925887][T12907] ? is_bpf_text_address+0x26/0x2b0 [ 254.925922][T12907] sock_alloc_send_pskb+0x84d/0x980 [ 254.925958][T12907] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 254.925981][T12907] ? dev_get_by_index+0x22/0x2e0 [ 254.926000][T12907] ? dev_get_by_index+0x22/0x2e0 [ 254.926024][T12907] packet_sendmsg+0x33a0/0x5080 [ 254.926057][T12907] ? match_mnt_path_str+0x7f1/0xb40 [ 254.926095][T12907] ? __pfx___might_resched+0x10/0x10 [ 254.926113][T12907] ? __lock_acquire+0xab9/0xd20 [ 254.926139][T12907] ? __pfx_packet_sendmsg+0x10/0x10 [ 254.926160][T12907] ? aa_sk_perm+0x81e/0x950 [ 254.926187][T12907] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 254.926216][T12907] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.926239][T12907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.926254][T12907] ? __pfx_packet_sendmsg+0x10/0x10 [ 254.926278][T12907] __sock_sendmsg+0x21c/0x270 [ 254.926303][T12907] __sys_sendto+0x3bd/0x520 [ 254.926322][T12907] ? __pfx___sys_sendto+0x10/0x10 [ 254.926336][T12907] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 254.926371][T12907] ? __fget_files+0x3a0/0x420 [ 254.926394][T12907] ? ksys_write+0x22a/0x250 [ 254.926415][T12907] ? __pfx_ksys_write+0x10/0x10 [ 254.926436][T12907] __x64_sys_sendto+0xde/0x100 [ 254.926452][T12907] do_syscall_64+0xfa/0xfa0 [ 254.926469][T12907] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.926486][T12907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.926499][T12907] ? clear_bhb_loop+0x60/0xb0 [ 254.926515][T12907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.926528][T12907] RIP: 0033:0x7f37a858f6c9 [ 254.926541][T12907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.926554][T12907] RSP: 002b:00007f37a939c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 254.926569][T12907] RAX: ffffffffffffffda RBX: 00007f37a87e5fa0 RCX: 00007f37a858f6c9 [ 254.926580][T12907] RDX: 000000000000000e RSI: 00002000000005c0 RDI: 0000000000000006 [ 254.926589][T12907] RBP: 00007f37a939c090 R08: 00002000000001c0 R09: 0000000000000014 [ 254.926598][T12907] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 254.926606][T12907] R13: 00007f37a87e6038 R14: 00007f37a87e5fa0 R15: 00007fffeb590378 [ 254.926629][T12907] [ 255.246068][T12905] netlink: 'syz.3.1898': attribute type 2 has an invalid length. [ 255.254123][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.356282][T12910] lo speed is unknown, defaulting to 1000 [ 255.366515][T12910] wg1 speed is unknown, defaulting to 1000 [ 255.653516][T12929] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 255.693190][T12929] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.714289][T12929] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 255.723809][T12929] bond8: (slave batadv2): making interface the new active one [ 255.732963][T12929] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 256.203519][T12929] bond8 (unregistering): (slave batadv2): Releasing active interface [ 256.222380][T12929] bond8 (unregistering): Released all slaves [ 256.255812][T12942] tipc: Enabled bearer , priority 0 [ 256.271468][T12944] pim6reg: entered allmulticast mode [ 256.292746][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.368127][T12945] syzkaller0: entered promiscuous mode [ 256.377256][T12945] syzkaller0: entered allmulticast mode [ 256.435473][T12952] tipc: Resetting bearer [ 256.541510][T12952] tipc: Resetting bearer [ 256.571893][T12952] tipc: Disabling bearer [ 256.709813][T12970] __nla_validate_parse: 14 callbacks suppressed [ 256.709833][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 256.799629][T12975] tipc: New replicast peer: 255.255.255.83 [ 256.831461][T12975] tipc: Enabled bearer , priority 10 [ 257.023877][T12980] lo speed is unknown, defaulting to 1000 [ 257.062134][T12980] wg1 speed is unknown, defaulting to 1000 [ 257.331284][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.611314][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.611314][T12996] Use struct sctp_sack_info instead [ 257.662611][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.662611][T12996] Use struct sctp_sack_info instead [ 257.684170][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 257.731747][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.731747][T12996] Use struct sctp_sack_info instead [ 257.810262][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.810262][T12996] Use struct sctp_sack_info instead [ 257.856447][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.856447][T12996] Use struct sctp_sack_info instead [ 257.954377][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.954377][T12996] Use struct sctp_sack_info instead [ 257.971391][ T117] tipc: Node number set to 2362690689 [ 258.046362][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.046362][T12996] Use struct sctp_sack_info instead [ 258.077792][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.077792][T12996] Use struct sctp_sack_info instead [ 258.281256][T12996] sctp: [Deprecated]: syz.3.1923 (pid 12996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.281256][T12996] Use struct sctp_sack_info instead [ 258.371276][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.508653][T13019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1931'. [ 258.519402][T13019] tipc: Enabled bearer , priority 0 [ 258.527240][T13019] bridge_slave_0: entered promiscuous mode [ 258.533615][T13019] bridge_slave_0: entered allmulticast mode [ 258.544635][T13019] tipc: Resetting bearer [ 258.747360][T13026] x_tables: unsorted entry at hook 1 [ 258.753989][T13018] tipc: Disabling bearer [ 258.975463][T13033] lo speed is unknown, defaulting to 1000 [ 258.976736][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 259.021481][T13032] lo speed is unknown, defaulting to 1000 [ 259.031719][T13033] wg1 speed is unknown, defaulting to 1000 [ 259.053264][T13032] wg1 speed is unknown, defaulting to 1000 [ 259.411181][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.684296][T13060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 259.800235][T13060] nbd: socks must be embedded in a SOCK_ITEM attr [ 260.246731][T13056] lo speed is unknown, defaulting to 1000 [ 260.281218][T13056] wg1 speed is unknown, defaulting to 1000 [ 260.451190][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.577686][T13079] syzkaller0: entered promiscuous mode [ 260.595978][T13079] syzkaller0: entered allmulticast mode [ 260.666389][T13086] only policy match revision 0 supported [ 260.666408][T13086] unable to load match [ 260.988863][T13098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1956'. [ 261.127984][T13100] syz.0.1957: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.146996][T13100] CPU: 0 UID: 0 PID: 13100 Comm: syz.0.1957 Not tainted syzkaller #0 PREEMPT(full) [ 261.147037][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.147059][T13100] Call Trace: [ 261.147073][T13100] [ 261.147081][T13100] dump_stack_lvl+0x189/0x250 [ 261.147111][T13100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.147134][T13100] ? __pfx__printk+0x10/0x10 [ 261.147153][T13100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.147176][T13100] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 261.147198][T13100] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 261.147222][T13100] warn_alloc+0x214/0x310 [ 261.147253][T13100] ? __pfx_warn_alloc+0x10/0x10 [ 261.147284][T13100] ? __get_vm_area_node+0x28f/0x300 [ 261.147306][T13100] ? hash_net_create+0x358/0xfe0 [ 261.147328][T13100] __vmalloc_node_range_noprof+0x690/0x12d0 [ 261.147352][T13100] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 261.147403][T13100] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.147427][T13100] ? hash_net_create+0x358/0xfe0 [ 261.147445][T13100] ? rcu_is_watching+0x15/0xb0 [ 261.147464][T13100] ? hash_net_create+0x358/0xfe0 [ 261.147480][T13100] __kvmalloc_node_noprof+0x674/0x910 [ 261.147504][T13100] ? hash_net_create+0x358/0xfe0 [ 261.147520][T13100] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 261.147541][T13100] ? hash_net_create+0x2fe/0xfe0 [ 261.147571][T13100] hash_net_create+0x358/0xfe0 [ 261.147598][T13100] ? __nla_parse+0x40/0x60 [ 261.147617][T13100] ? __pfx_hash_net_create+0x10/0x10 [ 261.147638][T13100] ip_set_create+0xa97/0x1940 [ 261.147658][T13100] ? ip_set_create+0x4a2/0x1940 [ 261.147690][T13100] ? __pfx_ip_set_create+0x10/0x10 [ 261.147752][T13100] nfnetlink_rcv_msg+0xb4d/0x1130 [ 261.147778][T13100] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 261.147822][T13100] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 261.147844][T13100] ? kmem_cache_free+0x19b/0x690 [ 261.147920][T13100] netlink_rcv_skb+0x208/0x470 [ 261.147939][T13100] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 261.147965][T13100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.147995][T13100] ? bpf_lsm_capable+0x9/0x20 [ 261.148015][T13100] ? security_capable+0x7e/0x2e0 [ 261.148046][T13100] nfnetlink_rcv+0x282/0x2590 [ 261.148071][T13100] ? __dev_queue_xmit+0x284/0x3740 [ 261.148092][T13100] ? __dev_queue_xmit+0x1bfb/0x3740 [ 261.148128][T13100] ? __dev_queue_xmit+0x284/0x3740 [ 261.148156][T13100] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 261.148198][T13100] ? ref_tracker_free+0x63a/0x7d0 [ 261.148216][T13100] ? __asan_memcpy+0x40/0x70 [ 261.148238][T13100] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.148273][T13100] ? skb_clone+0x246/0x3a0 [ 261.148296][T13100] ? __netlink_deliver_tap+0x807/0x850 [ 261.148313][T13100] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.148339][T13100] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.148365][T13100] netlink_unicast+0x82f/0x9e0 [ 261.148404][T13100] ? __pfx_netlink_unicast+0x10/0x10 [ 261.148431][T13100] ? netlink_sendmsg+0x642/0xb30 [ 261.148446][T13100] ? skb_put+0x11b/0x210 [ 261.148467][T13100] netlink_sendmsg+0x805/0xb30 [ 261.148495][T13100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.148517][T13100] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.148544][T13100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.148561][T13100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.148580][T13100] __sock_sendmsg+0x21c/0x270 [ 261.148607][T13100] ____sys_sendmsg+0x505/0x830 [ 261.148632][T13100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.148661][T13100] ? import_iovec+0x74/0xa0 [ 261.148687][T13100] ___sys_sendmsg+0x21f/0x2a0 [ 261.148709][T13100] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.148769][T13100] ? __fget_files+0x2a/0x420 [ 261.148784][T13100] ? __fget_files+0x3a0/0x420 [ 261.148813][T13100] __x64_sys_sendmsg+0x19b/0x260 [ 261.148836][T13100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.148874][T13100] ? do_syscall_64+0xbe/0xfa0 [ 261.148901][T13100] do_syscall_64+0xfa/0xfa0 [ 261.148921][T13100] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.148944][T13100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.148962][T13100] ? clear_bhb_loop+0x60/0xb0 [ 261.148984][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.149001][T13100] RIP: 0033:0x7f56cf58f6c9 [ 261.149019][T13100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.149035][T13100] RSP: 002b:00007f56d04e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.149055][T13100] RAX: ffffffffffffffda RBX: 00007f56cf7e6090 RCX: 00007f56cf58f6c9 [ 261.149068][T13100] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 261.149080][T13100] RBP: 00007f56cf611f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.149092][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.149103][T13100] R13: 00007f56cf7e6128 R14: 00007f56cf7e6090 R15: 00007ffed2481d58 [ 261.149136][T13100] [ 261.149143][T13100] Mem-Info: [ 261.491196][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.493895][T13100] active_anon:6777 inactive_anon:0 isolated_anon:0 [ 261.493895][T13100] active_file:3540 inactive_file:39981 isolated_file:0 [ 261.493895][T13100] unevictable:768 dirty:225 writeback:0 [ 261.493895][T13100] slab_reclaimable:12225 slab_unreclaimable:117065 [ 261.493895][T13100] mapped:34259 shmem:4231 pagetables:1268 [ 261.493895][T13100] sec_pagetables:0 bounce:0 [ 261.493895][T13100] kernel_misc_reclaimable:0 [ 261.493895][T13100] free:1298290 free_pcp:22414 free_cma:0 [ 261.678869][T13100] Node 0 active_anon:27108kB inactive_anon:0kB active_file:14160kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137036kB dirty:900kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:4956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.714776][T13100] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.745153][T13100] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.775385][T13100] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 261.781450][T13100] Node 0 DMA32 free:1284816kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27108kB inactive_anon:0kB active_file:14160kB inactive_file:159720kB unevictable:1536kB writepending:900kB zspages:0kB present:3129332kB managed:2565152kB mlocked:100kB bounce:0kB free_pcp:69616kB local_pcp:34976kB free_cma:0kB [ 261.821560][T13100] lowmem_reserve[]: 0 0 0 0 0 [ 261.826790][T13100] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.857165][T13100] lowmem_reserve[]: 0 0 0 0 0 [ 261.884937][T13100] Node 1 Normal free:3892984kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:8160kB free_cma:0kB [ 261.918370][T13100] lowmem_reserve[]: 0 0 0 0 0 [ 261.941370][T13100] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.962648][T13100] Node 0 DMA32: 1076*4kB (UE) 484*8kB (UME) 254*16kB (UE) 1236*32kB (UE) 383*64kB (UME) 445*128kB (UME) 369*256kB (UME) 283*512kB (UME) 189*1024kB (UM) 3*2048kB (UME) 174*4096kB (M) = 1285008kB [ 261.983076][T13100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 262.047342][T13122] tipc: Enabling of bearer rejected, already enabled [ 262.066594][T13100] Node 1 Normal: 180*4kB (UE) 49*8kB (UME) 32*16kB (UME) 95*32kB (UME) 25*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3892984kB [ 262.121666][T13100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.151689][T13100] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.171184][T13100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.180764][T13100] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.240840][T13100] 47751 total pagecache pages [ 262.245619][T13100] 0 pages in swap cache [ 262.249781][T13100] Free swap = 124996kB [ 262.261465][T13100] Total swap = 124996kB [ 262.265649][T13100] 2097051 pages RAM [ 262.269458][T13100] 0 pages HighMem/MovableOnly [ 262.349129][T13100] 424121 pages reserved [ 262.349400][T13138] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1966'. [ 262.353463][T13100] 0 pages cma reserved [ 262.531223][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.745703][T13150] lo speed is unknown, defaulting to 1000 [ 262.796590][T13150] wg1 speed is unknown, defaulting to 1000 [ 262.801724][T13156] lo speed is unknown, defaulting to 1000 [ 262.816123][T13156] wg1 speed is unknown, defaulting to 1000 [ 263.119779][T13168] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1978'. [ 263.315993][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1981'. [ 263.330952][T13178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1983'. [ 263.345002][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 263.506000][T13175] 8021q: adding VLAN 0 to HW filter on device bond12 [ 263.571208][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.608734][T13181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.633900][T13181] bond12: (slave bond0): Enslaving as an active interface with an up link [ 264.022247][T13183] bond12 (unregistering): (slave bond0): Releasing backup interface [ 264.033419][T13183] bond12 (unregistering): Released all slaves [ 264.057568][T13188] IPVS: Error connecting to the multicast addr [ 264.277763][T13198] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1987'. [ 264.397564][T13200] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1988'. [ 264.428688][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 264.479818][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 264.507964][T13207] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1990'. [ 264.617470][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.172708][T13241] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 265.257251][T13241] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.480144][T13255] bond0: entered promiscuous mode [ 265.485437][T13255] bond1: entered promiscuous mode [ 265.490660][T13255] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 265.525691][T13255] bond0: left promiscuous mode [ 265.531015][T13255] bond1: left promiscuous mode [ 265.536339][T13255] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 265.559738][T13263] veth0_to_bridge: entered promiscuous mode [ 265.651335][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.715074][T13264] syzkaller0: entered promiscuous mode [ 265.720655][T13264] syzkaller0: entered allmulticast mode [ 265.732382][T13272] veth0_to_bridge: left promiscuous mode [ 266.099980][T13282] lo speed is unknown, defaulting to 1000 [ 266.116888][T13282] wg1 speed is unknown, defaulting to 1000 [ 266.691367][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.244882][T13347] lo speed is unknown, defaulting to 1000 [ 267.259106][T13347] wg1 speed is unknown, defaulting to 1000 [ 267.283647][T13363] netlink: 'syz.2.2031': attribute type 1 has an invalid length. [ 267.628547][T13381] trusted_key: syz.1.2037 sent an empty control message without MSG_MORE. [ 267.741224][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.781400][T13390] ip_vti0: entered promiscuous mode [ 267.789222][T13390] __nla_validate_parse: 16 callbacks suppressed [ 267.789239][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 268.046420][T13392] lo speed is unknown, defaulting to 1000 [ 268.084099][T13392] wg1 speed is unknown, defaulting to 1000 [ 268.117722][T13400] netlink: 1315 bytes leftover after parsing attributes in process `syz.0.2042'. [ 268.526570][T13418] netlink: 'syz.0.2047': attribute type 1 has an invalid length. [ 268.651173][T13418] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.706043][T13421] veth9: entered promiscuous mode [ 268.714419][T13421] bond9: (slave veth9): Enslaving as an active interface with a down link [ 268.748740][ T7852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.762881][ T7852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.771231][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.249810][T13432] netlink: 'syz.4.2051': attribute type 1 has an invalid length. [ 269.313328][T13432] bond6: (slave gretap3): making interface the new active one [ 269.332344][T13432] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 269.399517][T13440] lo speed is unknown, defaulting to 1000 [ 269.405156][T13444] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2055'. [ 269.424013][T13440] wg1 speed is unknown, defaulting to 1000 [ 269.442139][T13442] netlink: 'syz.0.2054': attribute type 101 has an invalid length. [ 269.450076][T13442] netlink: 'syz.0.2054': attribute type 7 has an invalid length. [ 269.774530][T13444] siw: device registration error -23 [ 269.781081][T13441] lo speed is unknown, defaulting to 1000 [ 269.807829][T13441] wg1 speed is unknown, defaulting to 1000 [ 269.821331][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.080559][T13464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2059'. [ 270.247945][T13470] netlink: 'syz.1.2061': attribute type 12 has an invalid length. [ 270.839375][T13486] lo speed is unknown, defaulting to 1000 [ 270.839871][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 270.847090][T13486] wg1 speed is unknown, defaulting to 1000 [ 270.854259][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.529340][T13529] delete_channel: no stack [ 271.826032][T13540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2082'. [ 271.848197][T13540] xt_cgroup: invalid path, errno=-2 [ 271.855372][T13540] tipc: Enabling of bearer rejected, already enabled [ 271.887651][T13542] : renamed from wg2 (while UP) [ 271.901172][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.979185][T13546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2085'. [ 271.994314][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2085'. [ 272.078504][T13548] net_ratelimit: 3256 callbacks suppressed [ 272.078523][T13548] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 272.100878][T13548] tipc: Enabling of bearer rejected, failed to enable media [ 272.369952][T13565] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2092'. [ 272.402942][T13564] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 272.453753][T13567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2093'. [ 272.941204][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.972338][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.026642][T13554] lo speed is unknown, defaulting to 1000 [ 274.034600][T13554] wg1 speed is unknown, defaulting to 1000 [ 274.359251][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 274.785832][T13600] lo speed is unknown, defaulting to 1000 [ 274.805841][T13600] wg1 speed is unknown, defaulting to 1000 [ 275.011199][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.595367][T13636] syzkaller0: entered promiscuous mode [ 275.601313][T13636] syzkaller0: entered allmulticast mode [ 275.608891][T13629] lo speed is unknown, defaulting to 1000 [ 275.610908][T13632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2108'. [ 275.648280][T13629] wg1 speed is unknown, defaulting to 1000 [ 276.003113][T13641] lo speed is unknown, defaulting to 1000 [ 276.037406][T13641] wg1 speed is unknown, defaulting to 1000 [ 276.051188][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.157564][T13645] syzkaller0: entered promiscuous mode [ 276.175086][T13645] syzkaller0: entered allmulticast mode [ 276.239523][T13645] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2111'. [ 277.091181][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.684513][T13697] SET target dimension over the limit! [ 278.133506][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.931654][T13704] netlink: 'syz.1.2118': attribute type 2 has an invalid length. [ 279.020532][T13702] macsec1: entered promiscuous mode [ 279.026839][T13702] macsec1: entered allmulticast mode [ 279.171176][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.214225][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 279.357006][ T7852] [ 279.359355][ T7852] ============================================ [ 279.365500][ T7852] WARNING: possible recursive locking detected [ 279.371635][ T7852] syzkaller #0 Not tainted [ 279.376027][ T7852] -------------------------------------------- [ 279.382148][ T7852] kworker/u8:20/7852 is trying to acquire lock: [ 279.388364][ T7852] ffffe8ffffd437e0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 279.397559][ T7852] [ 279.397559][ T7852] but task is already holding lock: [ 279.404898][ T7852] ffffe8ffffc43878 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 279.414099][ T7852] [ 279.414099][ T7852] other info that might help us debug this: [ 279.422135][ T7852] Possible unsafe locking scenario: [ 279.422135][ T7852] [ 279.429561][ T7852] CPU0 [ 279.432815][ T7852] ---- [ 279.436070][ T7852] lock(&pd_list->lock); [ 279.440375][ T7852] lock(&pd_list->lock); [ 279.444676][ T7852] [ 279.444676][ T7852] *** DEADLOCK *** [ 279.444676][ T7852] [ 279.452793][ T7852] May be due to missing lock nesting notation [ 279.452793][ T7852] [ 279.461087][ T7852] 3 locks held by kworker/u8:20/7852: [ 279.466438][ T7852] #0: ffff88801dfe3148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 279.478322][ T7852] #1: ffffc90003c2fba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 279.490121][ T7852] #2: ffffe8ffffc43878 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 279.499748][ T7852] [ 279.499748][ T7852] stack backtrace: [ 279.505623][ T7852] CPU: 1 UID: 0 PID: 7852 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 279.505637][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.505645][ T7852] Workqueue: pencrypt_parallel padata_parallel_worker [ 279.505659][ T7852] Call Trace: [ 279.505665][ T7852] [ 279.505671][ T7852] dump_stack_lvl+0x189/0x250 [ 279.505686][ T7852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.505699][ T7852] ? __pfx__printk+0x10/0x10 [ 279.505709][ T7852] ? print_lock_name+0xde/0x100 [ 279.505718][ T7852] print_deadlock_bug+0x28b/0x2a0 [ 279.505731][ T7852] validate_chain+0x1a3f/0x2140 [ 279.505743][ T7852] ? __queue_work+0x102/0xfb0 [ 279.505754][ T7852] ? look_up_lock_class+0x74/0x170 [ 279.505767][ T7852] ? register_lock_class+0x51/0x320 [ 279.505777][ T7852] __lock_acquire+0xab9/0xd20 [ 279.505787][ T7852] ? padata_do_serial+0x707/0xb80 [ 279.505798][ T7852] lock_acquire+0x120/0x360 [ 279.505806][ T7852] ? padata_do_serial+0x707/0xb80 [ 279.505820][ T7852] _raw_spin_lock+0x2e/0x40 [ 279.505832][ T7852] ? padata_do_serial+0x707/0xb80 [ 279.505842][ T7852] padata_do_serial+0x707/0xb80 [ 279.505856][ T7852] ? padata_parallel_worker+0x44/0x1d0 [ 279.505868][ T7852] padata_parallel_worker+0x75/0x1d0 [ 279.505879][ T7852] ? process_scheduled_works+0x9ef/0x17b0 [ 279.505889][ T7852] process_scheduled_works+0xae1/0x17b0 [ 279.505905][ T7852] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.505919][ T7852] worker_thread+0x8a0/0xda0 [ 279.505934][ T7852] kthread+0x711/0x8a0 [ 279.505947][ T7852] ? __pfx_worker_thread+0x10/0x10 [ 279.505957][ T7852] ? __pfx_kthread+0x10/0x10 [ 279.505968][ T7852] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.505979][ T7852] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.505990][ T7852] ? __pfx_kthread+0x10/0x10 [ 279.506002][ T7852] ret_from_fork+0x4bc/0x870 [ 279.506012][ T7852] ? __pfx_ret_from_fork+0x10/0x10 [ 279.506023][ T7852] ? __switch_to_asm+0x39/0x70 [ 279.506031][ T7852] ? __switch_to_asm+0x33/0x70 [ 279.506038][ T7852] ? __pfx_kthread+0x10/0x10 [ 279.506049][ T7852] ret_from_fork_asm+0x1a/0x30 [ 279.506061][ T7852] [ 280.211211][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.261184][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.291182][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.331256][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.371200][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.411212][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.451198][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.491199][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.531193][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration